last executing test programs:

7m51.647134641s ago: executing program 0 (id=1):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000002000000000000000400000d"], &(0x7f0000000f40)=""/4096, 0x46, 0x1000, 0xa}, 0x28)

7m51.262995748s ago: executing program 0 (id=7):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='sched_kthread_work_queue_work\x00', r1}, 0x10)
socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0))

7m50.704544849s ago: executing program 0 (id=9):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES32], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00'}, 0x3d)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000001ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'macsec0\x00'})

7m35.364754167s ago: executing program 32 (id=9):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES32], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00'}, 0x3d)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000001ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'macsec0\x00'})

7m15.607854851s ago: executing program 3 (id=80):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000980000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xac)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1e, 0x1, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008400000b704000000000000850000000100000095"], 0x0, 0x2af, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000080))

7m14.533905912s ago: executing program 3 (id=85):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40398, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x8000000000000000, 0x7ff}, 0x110c40, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
socketpair(0x11, 0x2, 0x800, &(0x7f0000000280))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000000500000085000000a0000000950000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc7, &(0x7f0000000140)=""/199}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x58, &(0x7f00000006c0)}, 0x10)

7m13.272152807s ago: executing program 3 (id=97):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20)
recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1, 0x0, 0x0, 0x3000000}, 0x0)
sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0)

7m12.033114021s ago: executing program 3 (id=92):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400})
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)

7m6.42712807s ago: executing program 3 (id=105):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10)
close(r0)

7m5.308331862s ago: executing program 3 (id=108):
r0 = bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x3, 0x0, 0x0, 0x11, 0x3}, @typedef={0x0, 0x0, 0x0, 0x4}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x51}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18)
socketpair(0x11, 0xa, 0x0, &(0x7f0000001080))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote})
perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_bp={0x0, 0x91b1400079c52c93}, 0x105c34, 0x8000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"})
syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0)

6m50.265529614s ago: executing program 33 (id=108):
r0 = bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x3, 0x0, 0x0, 0x11, 0x3}, @typedef={0x0, 0x0, 0x0, 0x4}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x51}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18)
socketpair(0x11, 0xa, 0x0, &(0x7f0000001080))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote})
perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_bp={0x0, 0x91b1400079c52c93}, 0x105c34, 0x8000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"})
syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0)

5m59.03213801s ago: executing program 5 (id=295):
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x10100, 0x0, 0x0, 0x2}, 0x0, 0xaffffffeffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
write$cgroup_int(r3, &(0x7f00000001c0), 0xfffffdef)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4}, 0x18)

5m57.832113983s ago: executing program 5 (id=298):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eeb1948bf42bc7fc2cb274849c9524154fa24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a8684853abf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000400000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f500000010000000000944e4505da485a3a4154387a0a88370d9ed9467b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a808000000000000000562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844892f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b57"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='mm_page_alloc\x00', r0}, 0x10)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l')
r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
write$cgroup_subtree(r1, 0x0, 0x0)

5m57.584096178s ago: executing program 5 (id=301):
perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x230}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
close(r3)

5m56.400468391s ago: executing program 5 (id=305):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='tasks\x00', 0x2, 0x0)
syz_clone(0x403ac400, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002)
close(r1)

5m54.91610416s ago: executing program 5 (id=310):
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r3, &(0x7f0000000180), 0x40001)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305829, &(0x7f0000000040))

5m54.40880387s ago: executing program 5 (id=311):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x701a00, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38)

5m49.387105477s ago: executing program 2 (id=329):
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48)

5m48.279906929s ago: executing program 2 (id=333):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)

5m44.653982199s ago: executing program 2 (id=339):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, 0x0, &(0x7f0000000180)=r1}, 0x20)
syz_clone(0x43001000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

5m39.718944856s ago: executing program 2 (id=347):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r1, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0xa, 0x4000000000000162, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300), 0x0, 0x144, &(0x7f0000000700), 0x20, 0x0, 0x0, 0x0, 0x0, 0xd, 0x8, 0x8, &(0x7f0000000300)}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1c, 0x9, 0x9, 0x2, 0x2000, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x5, 0x1, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r3}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5m38.531493678s ago: executing program 34 (id=311):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x701a00, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38)

5m38.494648179s ago: executing program 2 (id=349):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x4, 0x9}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10)
socketpair(0x1, 0x1, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0x7fff, 0x4, 0x1, 0x0, r0}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r3, &(0x7f0000000d40), 0x0}, 0x20)

5m38.263014494s ago: executing program 2 (id=351):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES32], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00'}, 0x3d)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000001ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'macsec0\x00'})

5m23.241677776s ago: executing program 35 (id=351):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES32], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00'}, 0x3d)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000001ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'macsec0\x00'})

9.604166864s ago: executing program 6 (id=2863):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="000000000a000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

9.531496005s ago: executing program 6 (id=2864):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async, rerun: 64)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4) (rerun: 64)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[0x0, 0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xd3, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x8a, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) (async)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x15, 0x1ff, 0x4, 0x8, 0x80, r0, 0xffffff00, '\x00', r1, r2, 0x0, 0x0, 0x1}, 0x50) (async, rerun: 32)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async, rerun: 32)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) (async)
socket$kcm(0x28, 0x1, 0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) (rerun: 32)
sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socket$kcm(0x2, 0x5, 0x84) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x100}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
recvmsg$unix(r6, &(0x7f00000003c0)={&(0x7f0000000140), 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/120, 0x78}], 0x1, &(0x7f0000000380)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x2000) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080))

9.292075449s ago: executing program 6 (id=2866):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40}}, 0x80, &(0x7f0000000380)}, 0x20000810)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x40)
write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb79070098"], 0xfdef)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x7a, 0x0, 0x4}, 0x28)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8912, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

8.969526366s ago: executing program 6 (id=2870):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x19, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x9}, 0x28)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161)
sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000000000e01100000000000000000000c2d63c67000000000000000000"], 0x98}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0xfc, 0x0, 0xfc, 0x0, 0x400, 0x880, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0xfffffffffffffffc}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)

8.595745773s ago: executing program 6 (id=2876):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x8, 0x5}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x8, 0x8}, 0x48)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180))
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a7401000535", 0x1e}], 0x1}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'sit0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}})
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000500b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000080), 0x0}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0xd50, 0x0, &(0x7f0000000580)='wvh', 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x33)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"})
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10)
socketpair(0x18, 0x0, 0x2, &(0x7f0000004080))
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000580)=@generic={0x0}, 0x18)

8.172077811s ago: executing program 6 (id=2880):
socket$kcm(0x10, 0x400000002, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200001, 0x1, @perf_bp={0x0, 0x3}, 0x10781, 0x10, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x90)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x864)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x19, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161)
sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000b00500000000001100000000000000000000c2d63c67000000000000000000"], 0x98}, 0x0)

3.906622394s ago: executing program 1 (id=2923):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x5)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5200000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

3.848066865s ago: executing program 4 (id=2924):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000005000000494300000500000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdff030018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00fffbff0000711082000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
sendmsg$kcm(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="390000001400818c0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x884)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x3, r0}, 0x38)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="150a0000000000007910380000000000610410000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r0}, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000005000000494300000500000001"], 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000002b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdff030018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socket$kcm(0x10, 0x2, 0x4) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00fffbff0000711082000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async)
sendmsg$kcm(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="390000001400818c0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x884) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x3, r0}, 0x38) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="150a0000000000007910380000000000610410000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r0}, 0xc) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)

3.846783465s ago: executing program 7 (id=2925):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000cc000000cc000000070000000200000000000007000000000400000006000004ff0100000300000002000000050000000500000005000000fcffffff09000000050000000600000002000d0000000000050000000700000004000000000800000600000000000000000800000d00000000000008000000000b000000060000130a0000000b000000020000001c010000040000003f010000020000000900000003000000ff03000001000000598cab4f000000000b0000007f0000005c9700000600000000040000df0c00000b0000000000000c02007f0000002e5f5f"], 0x0, 0xeb, 0x0, 0x1, 0x7}, 0x28)

3.752130298s ago: executing program 7 (id=2926):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x19, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x9}, 0x28)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161)
sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000000000008800000000000000000000c2d63c67000000000000000000"], 0x98}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0xfc, 0x0, 0xfc, 0x0, 0x400, 0x880, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0xfffffffffffffffc}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)

3.738966848s ago: executing program 4 (id=2927):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000}, 0x94)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x102, 0x0)
ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f00000001c0))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

3.62816374s ago: executing program 1 (id=2928):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="000000ffb0000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.62798002s ago: executing program 7 (id=2929):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r1}, 0x18)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40}}, 0x80, &(0x7f0000000380)}, 0x20000810)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x40)
write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb79070098"], 0xfdef)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x7a, 0x0, 0x4}, 0x28)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8912, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.550432861s ago: executing program 1 (id=2930):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x8, 0x5}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x8, 0x8}, 0x48)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180))
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a7401000535", 0x1e}], 0x1}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'sit0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}})
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000a00b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000080), 0x0}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0xd50, 0x0, &(0x7f0000000580)='wvh', 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x33)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"})
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10)
socketpair(0x18, 0x0, 0x2, &(0x7f0000004080))
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000580)=@generic={0x0}, 0x18)

628.471918ms ago: executing program 4 (id=2931):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
close(0x3)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
ioctl$SIOCSIFHWADDR(r1, 0x8b23, &(0x7f0000000000)={'wlan1\x00', @random="0011002000"})
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e00000004000000040000000600020004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000008003ab393e388094"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x401, 0x110}, 0x0, 0xca, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280))
socket$kcm(0x29, 0x5, 0x0)
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x29, 0x2, 0x0)
socket$kcm(0x2, 0x1, 0x84)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socket$kcm(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200001, 0x0, @perf_bp={0x0, 0x1d}, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
recvmsg$unix(r4, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x2160)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x27}, 0x94)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

622.046198ms ago: executing program 7 (id=2932):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6)
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x5)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006620020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010005f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x29, 0x0, &(0x7f0000000040)="b90703600000f007049e0ff065581fffffe10ec53308633a77fbac141441e0022001be3e7d2a2007ff", 0x0, 0x104, 0xa000000, 0xc9, 0x0, &(0x7f0000000640)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea02f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688", &(0x7f0000000100)}, 0x50)

548.071039ms ago: executing program 1 (id=2933):
socket$kcm(0x10, 0x400000002, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200001, 0x1, @perf_bp={0x0, 0x3}, 0x10781, 0x10, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x90)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x864)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x19, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161)
sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000ff9700000000001100000000000000000000c2d63c67000000000000000000"], 0x98}, 0x0)

499.646281ms ago: executing program 7 (id=2934):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0xed, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext, 0x8, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00', 0x210})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="8d09fcff1000000085100000faffffff18340000040000000000000000000100dbd44000fcffffff18120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000ca1b8000fcffffff"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x62, &(0x7f0000000300)=""/98, 0x1e00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r1, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000640)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x0, 0xbc, &(0x7f0000000700), 0x0, 0x10, &(0x7f0000000840), &(0x7f0000000780), 0x8, 0xe5, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x0, 0x34}, 0x28)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000140), 0x4)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r2)
r3 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000ffffffffffff05000000", @ANYRES32=0x1], 0x48)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)={r3})
socket$kcm(0x1e, 0x4, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8001, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x128}, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x40002002)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000500)=ANY=[@ANYBLOB="1200000002000000080000000200000000000000", @ANYRES32, @ANYRESDEC, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
close(r5)

457.714221ms ago: executing program 4 (id=2935):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000006407010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x98, &(0x7f00000001c0)=""/152, 0x41000, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd21, 0x10, 0x0, 0xfffffffffffffd15}, 0x23)

348.158653ms ago: executing program 1 (id=2936):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000cc000000cc000000070000000200000000000007000000000400000006000004ff0100000300000002000000050000000500000005000000fcffffff09000000050000000600000002000e0000000000050000000700000004000000000800000600000000000000000800000d00000000000008000000000b000000060000130a0000000b000000020000001c010000040000003f010000020000000900000003000000ff03000001000000598cab4f000000000b0000007f0000005c9700000600000000040000df0c00000b0000000000000c02007f0000002e5f5f"], 0x0, 0xeb, 0x0, 0x1, 0x7}, 0x28)

334.682814ms ago: executing program 1 (id=2937):
socket$kcm(0x10, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x3e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000cc0)='memory.stat\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x9)
close(r1)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r1, 0x8b30, &(0x7f0000000080)={'wlan1\x00', @broadcast})
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r7)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4, <r9=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r6}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0x0], ""/16, <r10=>0x0, 0x0, 0x0, 0x0, 0x9, 0x7, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd2, &(0x7f0000000b00)=[{}], 0x8, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xf0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r11 = socket$kcm(0x2, 0x922000000001, 0x106)
sendmsg$kcm(r11, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x24004001)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r11, 0x1, 0x25, &(0x7f00000002c0)=r12, 0x8)
r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x16, 0xa, &(0x7f0000000200)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x838, 0x0, 0x0, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}], &(0x7f00000002c0)='GPL\x00', 0xfffff548, 0x0, 0x0, 0x40f00, 0x45, '\x00', r10, @fallback=0x10, r12, 0x8, &(0x7f0000000840)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x0, 0x3, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, &(0x7f0000000940)=[r8, r8, r8, r13, r5], &(0x7f0000000980)=[{0x3, 0x2, 0x0, 0xa}, {0x0, 0x1, 0x4}, {0x4, 0x4, 0x6, 0x6}, {0x5, 0x4, 0xd, 0x1}, {0x0, 0x5, 0xc, 0xb}, {0x2, 0x4, 0x5, 0xa}, {0x4, 0x4, 0xb, 0x1}, {0x2, 0x4, 0x5, 0xa}, {0x2, 0x5, 0x9, 0xa}], 0x10, 0x80000000}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)}, 0x10)
r14 = socket$kcm(0x28, 0x5, 0x0)
close(r14)
syz_clone(0x40000400, 0x0, 0x0, 0x0, 0x0, 0x0)

313.896914ms ago: executing program 4 (id=2938):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x5)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5230000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

19.76398ms ago: executing program 7 (id=2939):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r1}, 0x18)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40}}, 0x80, &(0x7f0000000380)}, 0x20000810)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x40)
write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb79070098"], 0xfdef)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x7a, 0x0, 0x4}, 0x28)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8912, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

0s ago: executing program 4 (id=2940):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x19, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x9}, 0x28)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161)
sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000000000001111000000000000000000c2d63c67000000000000000000"], 0x98}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0xfc, 0x0, 0xfc, 0x0, 0x400, 0x880, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0xfffffffffffffffc}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)

kernel console output (not intermixed with test programs):

omiscuous mode
[  237.261541][ T3466] veth1_vlan: left promiscuous mode
[  237.267545][ T3466] veth0_vlan: left promiscuous mode
[  237.892935][ T3466] team0 (unregistering): Port device team_slave_1 removed
[  237.933697][ T3466] team0 (unregistering): Port device team_slave_0 removed
[  237.975665][ T3466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  238.021162][ T3466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  238.434134][ T3466] bond0 (unregistering): Released all slaves
[  238.635047][ T7414] bond_slave_1: mtu less than device minimum
[  238.891258][ T7321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  238.902572][ T7321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  238.913792][ T7321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  238.924460][ T7321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  238.934605][ T7321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  238.945876][ T7321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  238.957407][ T7321] batman_adv: batadv0: Interface activated: batadv_slave_0
[  239.040921][ T7321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.051999][ T7321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.062505][ T7321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.080545][ T7321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.090954][ T7321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.102075][ T7321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.132563][ T7321] batman_adv: batadv0: Interface activated: batadv_slave_1
[  239.204739][ T7321] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  239.214153][ T7321] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  239.223325][ T7321] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  239.232581][ T7321] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  239.518888][ T3441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  239.529541][ T3441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  239.530225][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  239.553895][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  239.908296][ T7423] bond_slave_1: mtu less than device minimum
[  240.939926][ T7439] bond_slave_1: mtu less than device minimum
[  241.074504][ T7441] bond_slave_1: mtu less than device minimum
[  244.382310][ T7469] pim6reg1: entered promiscuous mode
[  244.387851][ T7469] pim6reg1: entered allmulticast mode
[  244.394783][ T7473] ip6_vti0: mtu greater than device maximum
[  246.241275][ T7517] veth0_vlan: entered allmulticast mode
[  246.354828][ T7517] veth0_vlan: left promiscuous mode
[  246.361992][ T7517] veth0_vlan: entered promiscuous mode
[  248.886291][ T7550] sit0: left promiscuous mode
[  248.926795][ T7551] sit0: entered promiscuous mode
[  251.241812][ T7581] veth1_macvtap: left promiscuous mode
[  252.956919][ T7609] syzkaller0: entered promiscuous mode
[  252.963625][ T7609] syzkaller0: entered allmulticast mode
[  255.937620][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  255.944615][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  258.428588][ T7631] veth1_macvtap: left promiscuous mode
[  258.439900][ T7640] veth1_macvtap: entered promiscuous mode
[  258.449076][ T7640] macsec0: entered promiscuous mode
[  258.454611][ T7640] macsec0: entered allmulticast mode
[  258.460487][ T7640] veth1_macvtap: entered allmulticast mode
[  258.479660][ T7643] veth0_vlan: entered allmulticast mode
[  258.842647][ T7657] pim6reg1: entered promiscuous mode
[  258.852851][ T7657] pim6reg1: entered allmulticast mode
[  260.164343][ T7679] netlink: 65051 bytes leftover after parsing attributes in process `syz.6.492'.
[  260.541682][ T7685] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  261.552577][ T7715] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.505'.
[  261.757998][ T7720] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  261.786379][ T7719] Zero length message leads to an empty skb
[  261.877910][ T7719] sit0: entered promiscuous mode
[  261.898829][ T7719] sit0: entered allmulticast mode
[  262.400481][ T7733] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.513'.
[  262.422150][ T7733] openvswitch: netlink: Key type 4112 is out of range max 32
[  262.730895][ T7745] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.517'.
[  263.705327][ T7765] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  263.941995][ T7771] FAULT_INJECTION: forcing a failure.
[  263.941995][ T7771] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  263.964545][ T7771] CPU: 1 PID: 7771 Comm: syz.7.526 Not tainted syzkaller #0
[  263.971886][ T7771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  263.981978][ T7771] Call Trace:
[  263.985271][ T7771]  <TASK>
[  263.988221][ T7771]  dump_stack_lvl+0x16c/0x230
[  263.992939][ T7771]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  263.999122][ T7771]  ? show_regs_print_info+0x20/0x20
[  264.004357][ T7771]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  264.010544][ T7771]  should_fail_ex+0x39d/0x4d0
[  264.015254][ T7771]  _copy_from_user+0x2f/0xe0
[  264.019868][ T7771]  ___sys_sendmsg+0x159/0x290
[  264.024574][ T7771]  ? __sys_sendmsg+0x270/0x270
[  264.029386][ T7771]  ? __lock_acquire+0x7c80/0x7c80
[  264.034459][ T7771]  __se_sys_sendmsg+0x1a5/0x270
[  264.039349][ T7771]  ? __x64_sys_sendmsg+0x80/0x80
[  264.044327][ T7771]  ? lockdep_hardirqs_on+0x98/0x150
[  264.049575][ T7771]  do_syscall_64+0x55/0xb0
[  264.054014][ T7771]  ? clear_bhb_loop+0x40/0x90
[  264.058716][ T7771]  ? clear_bhb_loop+0x40/0x90
[  264.063410][ T7771]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  264.069333][ T7771] RIP: 0033:0x7ff7b298eba9
[  264.073786][ T7771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  264.093417][ T7771] RSP: 002b:00007ff7b381a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  264.101930][ T7771] RAX: ffffffffffffffda RBX: 00007ff7b2bd5fa0 RCX: 00007ff7b298eba9
[  264.109966][ T7771] RDX: 00000000200040c4 RSI: 0000200000001640 RDI: 0000000000000006
[  264.117974][ T7771] RBP: 00007ff7b381a090 R08: 0000000000000000 R09: 0000000000000000
[  264.125978][ T7771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  264.133993][ T7771] R13: 00007ff7b2bd6038 R14: 00007ff7b2bd5fa0 R15: 00007ffec3ff0db8
[  264.142009][ T7771]  </TASK>
[  264.595817][ T7787] sit0: left promiscuous mode
[  264.890337][ T7787] sit0: entered promiscuous mode
[  265.413771][ T7821] FAULT_INJECTION: forcing a failure.
[  265.413771][ T7821] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  265.450532][ T7821] CPU: 0 PID: 7821 Comm: syz.1.548 Not tainted syzkaller #0
[  265.457881][ T7821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  265.467976][ T7821] Call Trace:
[  265.471276][ T7821]  <TASK>
[  265.474217][ T7821]  dump_stack_lvl+0x16c/0x230
[  265.478921][ T7821]  ? show_regs_print_info+0x20/0x20
[  265.484149][ T7821]  ? load_image+0x3b0/0x3b0
[  265.488760][ T7821]  ? __lock_acquire+0x7c80/0x7c80
[  265.493911][ T7821]  should_fail_ex+0x39d/0x4d0
[  265.498703][ T7821]  _copy_from_user+0x2f/0xe0
[  265.503319][ T7821]  __copy_msghdr+0x3bb/0x580
[  265.508034][ T7821]  ___sys_sendmsg+0x1a6/0x290
[  265.512739][ T7821]  ? __sys_sendmsg+0x270/0x270
[  265.517571][ T7821]  __se_sys_sendmsg+0x1a5/0x270
[  265.522460][ T7821]  ? __x64_sys_sendmsg+0x80/0x80
[  265.527448][ T7821]  do_syscall_64+0x55/0xb0
[  265.531890][ T7821]  ? clear_bhb_loop+0x40/0x90
[  265.536594][ T7821]  ? clear_bhb_loop+0x40/0x90
[  265.541314][ T7821]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  265.547238][ T7821] RIP: 0033:0x7f3acb98eba9
[  265.551669][ T7821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  265.571288][ T7821] RSP: 002b:00007f3acc797038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  265.579700][ T7821] RAX: ffffffffffffffda RBX: 00007f3acbbd5fa0 RCX: 00007f3acb98eba9
[  265.587668][ T7821] RDX: 00000000200040c4 RSI: 0000200000001640 RDI: 0000000000000006
[  265.595634][ T7821] RBP: 00007f3acc797090 R08: 0000000000000000 R09: 0000000000000000
[  265.603686][ T7821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  265.611657][ T7821] R13: 00007f3acbbd6038 R14: 00007f3acbbd5fa0 R15: 00007ffd3511f9b8
[  265.619668][ T7821]  </TASK>
[  265.809728][   T50] Bluetooth: hci1: ISO packet for unknown connection handle 2622
[  265.809953][ T7833] syzkaller0: tun_chr_ioctl cmd 35092
[  265.989294][ T7840] sock: sock_set_timeout: `syz.6.556' (pid 7840) tries to set negative timeout
[  266.064830][ T7841] netlink: 'syz.6.556': attribute type 3 has an invalid length.
[  266.073388][ T7841] netlink: 130984 bytes leftover after parsing attributes in process `syz.6.556'.
[  266.235410][ T7847] syz.4.559 uses obsolete (PF_INET,SOCK_PACKET)
[  266.293432][ T7847] bridge0: port 3(bond0) entered disabled state
[  266.303018][ T7847] bridge0: port 2(bridge_slave_1) entered disabled state
[  266.315747][ T7847] bridge0: port 1(bridge_slave_0) entered disabled state
[  266.393007][ T7850] bond0: left allmulticast mode
[  266.403526][ T7850] û]þ5¯\P€: left allmulticast mode
[  266.410006][ T7850] bond_slave_1: left allmulticast mode
[  266.431901][ T7850] bond0: left promiscuous mode
[  266.448552][ T7850] û]þ5¯\P€: left promiscuous mode
[  266.454464][ T7850] bond_slave_1: left promiscuous mode
[  266.465744][ T7850] bridge0: port 3(bond0) entered disabled state
[  266.484716][ T7850] bridge_slave_1: left allmulticast mode
[  266.491278][ T7850] bridge_slave_1: left promiscuous mode
[  266.499089][ T7850] bridge0: port 2(bridge_slave_1) entered disabled state
[  266.510317][ T7850] bridge_slave_0: left allmulticast mode
[  266.518684][ T7850] bridge_slave_0: left promiscuous mode
[  266.525348][ T7850] bridge0: port 1(bridge_slave_0) entered disabled state
[  266.600509][ T7854] sit0: left promiscuous mode
[  266.661779][ T7855] netlink: 21363 bytes leftover after parsing attributes in process `syz.1.562'.
[  267.031727][ T7872] netlink: 6 bytes leftover after parsing attributes in process `syz.1.565'.
[  267.069900][ T7872] openvswitch: netlink: Flow key attr not present in new flow.
[  267.116568][ T7872] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.565'.
[  267.252585][ T7880] FAULT_INJECTION: forcing a failure.
[  267.252585][ T7880] name failslab, interval 1, probability 0, space 0, times 1
[  267.277580][ T7880] CPU: 1 PID: 7880 Comm: syz.6.569 Not tainted syzkaller #0
[  267.284922][ T7880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  267.295174][ T7880] Call Trace:
[  267.298568][ T7880]  <TASK>
[  267.301514][ T7880]  dump_stack_lvl+0x16c/0x230
[  267.306247][ T7880]  ? show_regs_print_info+0x20/0x20
[  267.311475][ T7880]  ? load_image+0x3b0/0x3b0
[  267.316013][ T7880]  ? __might_sleep+0xe0/0xe0
[  267.320627][ T7880]  ? __lock_acquire+0x7c80/0x7c80
[  267.325671][ T7880]  ? __lock_acquire+0x1260/0x7c80
[  267.330865][ T7880]  should_fail_ex+0x39d/0x4d0
[  267.335661][ T7880]  should_failslab+0x9/0x20
[  267.340198][ T7880]  slab_pre_alloc_hook+0x59/0x310
[  267.345343][ T7880]  ? sock_kmalloc+0x96/0xf0
[  267.349861][ T7880]  ? sock_kmalloc+0x96/0xf0
[  267.354371][ T7880]  __kmem_cache_alloc_node+0x53/0x260
[  267.359768][ T7880]  ? sock_kmalloc+0x96/0xf0
[  267.364281][ T7880]  __kmalloc+0xa4/0x240
[  267.368453][ T7880]  sock_kmalloc+0x96/0xf0
[  267.372799][ T7880]  ____sys_sendmsg+0x1b8/0x950
[  267.377594][ T7880]  ? __asan_memset+0x22/0x40
[  267.382208][ T7880]  ? __sys_sendmsg_sock+0x30/0x30
[  267.387255][ T7880]  ? __import_iovec+0x3fa/0x860
[  267.392231][ T7880]  ? import_iovec+0x73/0xa0
[  267.396773][ T7880]  ___sys_sendmsg+0x220/0x290
[  267.401975][ T7880]  ? __sys_sendmsg+0x270/0x270
[  267.406832][ T7880]  ? __lock_acquire+0x7c80/0x7c80
[  267.411904][ T7880]  __se_sys_sendmsg+0x1a5/0x270
[  267.416811][ T7880]  ? __x64_sys_sendmsg+0x80/0x80
[  267.421800][ T7880]  ? lockdep_hardirqs_on+0x98/0x150
[  267.427030][ T7880]  do_syscall_64+0x55/0xb0
[  267.431504][ T7880]  ? clear_bhb_loop+0x40/0x90
[  267.436287][ T7880]  ? clear_bhb_loop+0x40/0x90
[  267.441035][ T7880]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  267.446984][ T7880] RIP: 0033:0x7f38a1b8eba9
[  267.451427][ T7880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  267.471141][ T7880] RSP: 002b:00007f38a2aa5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  267.479558][ T7880] RAX: ffffffffffffffda RBX: 00007f38a1dd5fa0 RCX: 00007f38a1b8eba9
[  267.487525][ T7880] RDX: 00000000200040c4 RSI: 0000200000001640 RDI: 0000000000000006
[  267.495490][ T7880] RBP: 00007f38a2aa5090 R08: 0000000000000000 R09: 0000000000000000
[  267.503467][ T7880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  267.511434][ T7880] R13: 00007f38a1dd6038 R14: 00007f38a1dd5fa0 R15: 00007fff20b99748
[  267.519409][ T7880]  </TASK>
[  267.966949][ T7901] netlink: 'syz.7.577': attribute type 1 has an invalid length.
[  268.584420][ T7927] FAULT_INJECTION: forcing a failure.
[  268.584420][ T7927] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  268.604997][ T7927] CPU: 0 PID: 7927 Comm: syz.4.590 Not tainted syzkaller #0
[  268.612377][ T7927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  268.622705][ T7927] Call Trace:
[  268.625982][ T7927]  <TASK>
[  268.628906][ T7927]  dump_stack_lvl+0x16c/0x230
[  268.633621][ T7927]  ? show_regs_print_info+0x20/0x20
[  268.638812][ T7927]  ? load_image+0x3b0/0x3b0
[  268.643309][ T7927]  ? __might_fault+0xaa/0x120
[  268.647980][ T7927]  ? __lock_acquire+0x7c80/0x7c80
[  268.653002][ T7927]  should_fail_ex+0x39d/0x4d0
[  268.657763][ T7927]  _copy_from_user+0x2f/0xe0
[  268.662345][ T7927]  ____sys_sendmsg+0x30d/0x950
[  268.667197][ T7927]  ? __sys_sendmsg_sock+0x30/0x30
[  268.672213][ T7927]  ? __import_iovec+0x3fa/0x860
[  268.677060][ T7927]  ? import_iovec+0x73/0xa0
[  268.681556][ T7927]  ___sys_sendmsg+0x220/0x290
[  268.686235][ T7927]  ? __sys_sendmsg+0x270/0x270
[  268.691046][ T7927]  __se_sys_sendmsg+0x1a5/0x270
[  268.695891][ T7927]  ? __x64_sys_sendmsg+0x80/0x80
[  268.700837][ T7927]  do_syscall_64+0x55/0xb0
[  268.705278][ T7927]  ? clear_bhb_loop+0x40/0x90
[  268.709944][ T7927]  ? clear_bhb_loop+0x40/0x90
[  268.714699][ T7927]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  268.720597][ T7927] RIP: 0033:0x7f70ea78eba9
[  268.725089][ T7927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  268.744684][ T7927] RSP: 002b:00007f70eb649038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  268.753091][ T7927] RAX: ffffffffffffffda RBX: 00007f70ea9d5fa0 RCX: 00007f70ea78eba9
[  268.761143][ T7927] RDX: 00000000200040c4 RSI: 0000200000001640 RDI: 0000000000000006
[  268.769109][ T7927] RBP: 00007f70eb649090 R08: 0000000000000000 R09: 0000000000000000
[  268.777078][ T7927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  268.785042][ T7927] R13: 00007f70ea9d6038 R14: 00007f70ea9d5fa0 R15: 00007ffe9b2c1648
[  268.793016][ T7927]  </TASK>
[  269.183341][ T7946] netlink: 201392 bytes leftover after parsing attributes in process `syz.7.595'.
[  269.644495][ T7951] netlink: 61959 bytes leftover after parsing attributes in process `syz.4.598'.
[  270.292611][ T7981] FAULT_INJECTION: forcing a failure.
[  270.292611][ T7981] name failslab, interval 1, probability 0, space 0, times 0
[  270.333345][ T7981] CPU: 1 PID: 7981 Comm: syz.1.609 Not tainted syzkaller #0
[  270.340680][ T7981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  270.350732][ T7981] Call Trace:
[  270.354011][ T7981]  <TASK>
[  270.356935][ T7981]  dump_stack_lvl+0x16c/0x230
[  270.361613][ T7981]  ? show_regs_print_info+0x20/0x20
[  270.366907][ T7981]  ? load_image+0x3b0/0x3b0
[  270.371408][ T7981]  ? __might_sleep+0xe0/0xe0
[  270.375994][ T7981]  ? __lock_acquire+0x7c80/0x7c80
[  270.381012][ T7981]  should_fail_ex+0x39d/0x4d0
[  270.385697][ T7981]  should_failslab+0x9/0x20
[  270.390199][ T7981]  slab_pre_alloc_hook+0x59/0x310
[  270.395241][ T7981]  ? ip_options_get+0x52/0x4a0
[  270.400033][ T7981]  ? ip_options_get+0x52/0x4a0
[  270.404787][ T7981]  __kmem_cache_alloc_node+0x53/0x260
[  270.410165][ T7981]  ? ip_options_get+0x52/0x4a0
[  270.415024][ T7981]  __kmalloc+0xa4/0x240
[  270.419205][ T7981]  ? lockdep_hardirqs_on+0x98/0x150
[  270.424412][ T7981]  ip_options_get+0x52/0x4a0
[  270.429002][ T7981]  ip_cmsg_send+0x591/0xa70
[  270.433521][ T7981]  raw_sendmsg+0x4cf/0x1950
[  270.438027][ T7981]  ? compat_raw_ioctl+0x70/0x70
[  270.442904][ T7981]  ? aa_sk_perm+0x7fc/0x930
[  270.447409][ T7981]  ? tomoyo_socket_sendmsg_permission+0x216/0x2f0
[  270.453826][ T7981]  ? sock_rps_record_flow+0x19/0x400
[  270.459133][ T7981]  ? inet_send_prepare+0x260/0x260
[  270.464248][ T7981]  ? inet_sendmsg+0x7c/0x2f0
[  270.468826][ T7981]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  270.474105][ T7981]  ? security_socket_sendmsg+0x80/0xa0
[  270.479557][ T7981]  ? inet_send_prepare+0x260/0x260
[  270.484660][ T7981]  ____sys_sendmsg+0x5bf/0x950
[  270.489429][ T7981]  ? __sys_sendmsg_sock+0x30/0x30
[  270.494448][ T7981]  ? __import_iovec+0x3fa/0x860
[  270.499301][ T7981]  ? import_iovec+0x73/0xa0
[  270.503819][ T7981]  ___sys_sendmsg+0x220/0x290
[  270.508846][ T7981]  ? __sys_sendmsg+0x270/0x270
[  270.513672][ T7981]  __se_sys_sendmsg+0x1a5/0x270
[  270.518613][ T7981]  ? __x64_sys_sendmsg+0x80/0x80
[  270.523558][ T7981]  ? lockdep_hardirqs_on+0x98/0x150
[  270.528766][ T7981]  do_syscall_64+0x55/0xb0
[  270.533178][ T7981]  ? clear_bhb_loop+0x40/0x90
[  270.537849][ T7981]  ? clear_bhb_loop+0x40/0x90
[  270.542534][ T7981]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  270.548426][ T7981] RIP: 0033:0x7f3acb98eba9
[  270.552831][ T7981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  270.572451][ T7981] RSP: 002b:00007f3acc797038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  270.580877][ T7981] RAX: ffffffffffffffda RBX: 00007f3acbbd5fa0 RCX: 00007f3acb98eba9
[  270.588846][ T7981] RDX: 00000000200040c4 RSI: 0000200000001640 RDI: 0000000000000006
[  270.596814][ T7981] RBP: 00007f3acc797090 R08: 0000000000000000 R09: 0000000000000000
[  270.604779][ T7981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  270.612745][ T7981] R13: 00007f3acbbd6038 R14: 00007f3acbbd5fa0 R15: 00007ffd3511f9b8
[  270.620729][ T7981]  </TASK>
[  271.140645][ T8002] sit0: entered promiscuous mode
[  272.320332][ T8034] FAULT_INJECTION: forcing a failure.
[  272.320332][ T8034] name failslab, interval 1, probability 0, space 0, times 0
[  272.349240][ T8036] netlink: 763 bytes leftover after parsing attributes in process `syz.6.628'.
[  272.363028][ T8034] CPU: 1 PID: 8034 Comm: syz.7.630 Not tainted syzkaller #0
[  272.370479][ T8034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  272.380565][ T8034] Call Trace:
[  272.383870][ T8034]  <TASK>
[  272.386823][ T8034]  dump_stack_lvl+0x16c/0x230
[  272.391536][ T8034]  ? show_regs_print_info+0x20/0x20
[  272.396755][ T8034]  ? load_image+0x3b0/0x3b0
[  272.401367][ T8034]  ? ip_options_get+0x52/0x4a0
[  272.406173][ T8034]  should_fail_ex+0x39d/0x4d0
[  272.410885][ T8034]  should_failslab+0x9/0x20
[  272.415412][ T8034]  slab_pre_alloc_hook+0x59/0x310
[  272.420474][ T8034]  kmem_cache_alloc+0x5a/0x2e0
[  272.425261][ T8034]  ? dst_alloc+0x105/0x170
[  272.429712][ T8034]  dst_alloc+0x105/0x170
[  272.433984][ T8034]  ip_route_output_key_hash_rcu+0x14f0/0x2360
[  272.440087][ T8034]  ? ip_route_output_key_hash+0x12f/0x340
[  272.445833][ T8034]  ip_route_output_key_hash+0x20b/0x340
[  272.451402][ T8034]  ? kfree+0x31/0x1a0
[  272.455414][ T8034]  ? ip_route_input_rcu+0x3010/0x3010
[  272.460818][ T8034]  ? ip_cmsg_send+0x9c0/0xa70
[  272.465510][ T8034]  ip_route_output_flow+0x2a/0x150
[  272.470709][ T8034]  ? security_sk_classify_flow+0x7b/0x90
[  272.476340][ T8034]  raw_sendmsg+0x1093/0x1950
[  272.480937][ T8034]  ? compat_raw_ioctl+0x70/0x70
[  272.485795][ T8034]  ? aa_sk_perm+0x7fc/0x930
[  272.490332][ T8034]  ? tomoyo_socket_sendmsg_permission+0x216/0x2f0
[  272.496763][ T8034]  ? sock_rps_record_flow+0x19/0x400
[  272.502046][ T8034]  ? inet_send_prepare+0x260/0x260
[  272.507155][ T8034]  ? inet_sendmsg+0x7c/0x2f0
[  272.511734][ T8034]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  272.517015][ T8034]  ? security_socket_sendmsg+0x80/0xa0
[  272.522471][ T8034]  ? inet_send_prepare+0x260/0x260
[  272.527579][ T8034]  ____sys_sendmsg+0x5bf/0x950
[  272.532379][ T8034]  ? __sys_sendmsg_sock+0x30/0x30
[  272.537416][ T8034]  ? __import_iovec+0x3fa/0x860
[  272.542286][ T8034]  ? import_iovec+0x73/0xa0
[  272.546794][ T8034]  ___sys_sendmsg+0x220/0x290
[  272.551472][ T8034]  ? __sys_sendmsg+0x270/0x270
[  272.556272][ T8034]  ? seqcount_lockdep_reader_access+0x160/0x1c0
[  272.562546][ T8034]  __se_sys_sendmsg+0x1a5/0x270
[  272.567417][ T8034]  ? perf_trace_preemptirq_template+0x281/0x340
[  272.573675][ T8034]  ? __x64_sys_sendmsg+0x80/0x80
[  272.578632][ T8034]  ? lockdep_hardirqs_on+0x98/0x150
[  272.583833][ T8034]  do_syscall_64+0x55/0xb0
[  272.588250][ T8034]  ? clear_bhb_loop+0x40/0x90
[  272.592940][ T8034]  ? clear_bhb_loop+0x40/0x90
[  272.597643][ T8034]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  272.603753][ T8034] RIP: 0033:0x7ff7b298eba9
[  272.608194][ T8034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  272.627920][ T8034] RSP: 002b:00007ff7b381a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  272.636338][ T8034] RAX: ffffffffffffffda RBX: 00007ff7b2bd5fa0 RCX: 00007ff7b298eba9
[  272.644302][ T8034] RDX: 00000000200040c4 RSI: 0000200000001640 RDI: 0000000000000006
[  272.652361][ T8034] RBP: 00007ff7b381a090 R08: 0000000000000000 R09: 0000000000000000
[  272.660328][ T8034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  272.668295][ T8034] R13: 00007ff7b2bd6038 R14: 00007ff7b2bd5fa0 R15: 00007ffec3ff0db8
[  272.676275][ T8034]  </TASK>
[  273.806036][ T8069] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.643'.
[  273.890816][ T8071] netlink: 'syz.1.643': attribute type 6 has an invalid length.
[  273.909239][ T8071] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.643'.
[  274.232607][ T8075] sit0: entered promiscuous mode
[  274.269766][ T8075] sit0: entered allmulticast mode
[  274.288936][ T8081] netlink: 'syz.4.646': attribute type 4 has an invalid length.
[  274.315652][ T8081] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.646'.
[  274.771795][ T8094] netlink: 209844 bytes leftover after parsing attributes in process `syz.7.651'.
[  274.853119][ T8098] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  276.414508][ T8147] FAULT_INJECTION: forcing a failure.
[  276.414508][ T8147] name failslab, interval 1, probability 0, space 0, times 0
[  276.452400][ T8147] CPU: 1 PID: 8147 Comm: syz.7.671 Not tainted syzkaller #0
[  276.459923][ T8147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  276.470094][ T8147] Call Trace:
[  276.473383][ T8147]  <TASK>
[  276.476322][ T8147]  dump_stack_lvl+0x16c/0x230
[  276.481056][ T8147]  ? show_regs_print_info+0x20/0x20
[  276.486278][ T8147]  ? load_image+0x3b0/0x3b0
[  276.490797][ T8147]  ? __might_sleep+0xe0/0xe0
[  276.495413][ T8147]  ? __lock_acquire+0x7c80/0x7c80
[  276.500463][ T8147]  should_fail_ex+0x39d/0x4d0
[  276.505355][ T8147]  should_failslab+0x9/0x20
[  276.509895][ T8147]  slab_pre_alloc_hook+0x59/0x310
[  276.514972][ T8147]  ? mark_lock+0x94/0x320
[  276.519413][ T8147]  ? ip_setup_cork+0x22e/0x860
[  276.524203][ T8147]  __kmem_cache_alloc_node+0x53/0x260
[  276.529616][ T8147]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  276.535638][ T8147]  ? ip_setup_cork+0x22e/0x860
[  276.540512][ T8147]  kmalloc_trace+0x2a/0xe0
[  276.544961][ T8147]  ip_setup_cork+0x22e/0x860
[  276.549578][ T8147]  ip_append_data+0x135/0x180
[  276.554273][ T8147]  ? raw_send_hdrinc+0x1240/0x1240
[  276.559407][ T8147]  raw_sendmsg+0x1420/0x1950
[  276.564120][ T8147]  ? compat_raw_ioctl+0x70/0x70
[  276.569003][ T8147]  ? aa_sk_perm+0x7fc/0x930
[  276.573622][ T8147]  ? sock_rps_record_flow+0x19/0x400
[  276.579011][ T8147]  ? inet_send_prepare+0x260/0x260
[  276.584144][ T8147]  ? inet_sendmsg+0x7c/0x2f0
[  276.588758][ T8147]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  276.594072][ T8147]  ? security_socket_sendmsg+0x80/0xa0
[  276.599650][ T8147]  ? inet_send_prepare+0x260/0x260
[  276.604788][ T8147]  ____sys_sendmsg+0x5bf/0x950
[  276.609586][ T8147]  ? __sys_sendmsg_sock+0x30/0x30
[  276.614641][ T8147]  ? __import_iovec+0x3fa/0x860
[  276.619525][ T8147]  ? import_iovec+0x73/0xa0
[  276.624048][ T8147]  ___sys_sendmsg+0x220/0x290
[  276.628753][ T8147]  ? __sys_sendmsg+0x270/0x270
[  276.633566][ T8147]  ? __lock_acquire+0x7c80/0x7c80
[  276.638630][ T8147]  __se_sys_sendmsg+0x1a5/0x270
[  276.643490][ T8147]  ? __x64_sys_sendmsg+0x80/0x80
[  276.648437][ T8147]  ? lockdep_hardirqs_on+0x98/0x150
[  276.653637][ T8147]  do_syscall_64+0x55/0xb0
[  276.658060][ T8147]  ? clear_bhb_loop+0x40/0x90
[  276.662818][ T8147]  ? clear_bhb_loop+0x40/0x90
[  276.667488][ T8147]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  276.673377][ T8147] RIP: 0033:0x7ff7b298eba9
[  276.677878][ T8147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  276.697567][ T8147] RSP: 002b:00007ff7b381a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  276.706085][ T8147] RAX: ffffffffffffffda RBX: 00007ff7b2bd5fa0 RCX: 00007ff7b298eba9
[  276.714347][ T8147] RDX: 00000000200040c4 RSI: 0000200000001640 RDI: 0000000000000006
[  276.722320][ T8147] RBP: 00007ff7b381a090 R08: 0000000000000000 R09: 0000000000000000
[  276.730290][ T8147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  276.738299][ T8147] R13: 00007ff7b2bd6038 R14: 00007ff7b2bd5fa0 R15: 00007ffec3ff0db8
[  276.746288][ T8147]  </TASK>
[  277.020500][ T8159] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.676'.
[  277.903130][ T8189] FAULT_INJECTION: forcing a failure.
[  277.903130][ T8189] name failslab, interval 1, probability 0, space 0, times 0
[  277.934557][ T8189] CPU: 0 PID: 8189 Comm: syz.4.690 Not tainted syzkaller #0
[  277.941895][ T8189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  277.951968][ T8189] Call Trace:
[  277.955268][ T8189]  <TASK>
[  277.958214][ T8189]  dump_stack_lvl+0x16c/0x230
[  277.962913][ T8189]  ? show_regs_print_info+0x20/0x20
[  277.968139][ T8189]  ? load_image+0x3b0/0x3b0
[  277.972699][ T8189]  ? __might_sleep+0xe0/0xe0
[  277.977453][ T8189]  ? __lock_acquire+0x7c80/0x7c80
[  277.982503][ T8189]  ? unwind_get_return_address+0x91/0xc0
[  277.988242][ T8189]  ? stack_trace_save+0xe0/0xe0
[  277.993129][ T8189]  should_fail_ex+0x39d/0x4d0
[  277.997856][ T8189]  should_failslab+0x9/0x20
[  278.002390][ T8189]  slab_pre_alloc_hook+0x59/0x310
[  278.007442][ T8189]  ? stack_trace_save+0x9c/0xe0
[  278.012317][ T8189]  kmem_cache_alloc_node+0x60/0x330
[  278.017625][ T8189]  ? __alloc_skb+0x108/0x2c0
[  278.022245][ T8189]  __alloc_skb+0x108/0x2c0
[  278.026776][ T8189]  __ip_append_data+0x2a23/0x3bd0
[  278.031817][ T8189]  ? do_syscall_64+0x55/0xb0
[  278.036424][ T8189]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  278.042525][ T8189]  ? raw_send_hdrinc+0x1240/0x1240
[  278.047639][ T8189]  ? ip_setup_cork+0x860/0x860
[  278.052397][ T8189]  ? ip_setup_cork+0x530/0x860
[  278.057157][ T8189]  ip_append_data+0x10d/0x180
[  278.061930][ T8189]  ? raw_send_hdrinc+0x1240/0x1240
[  278.067029][ T8189]  raw_sendmsg+0x1420/0x1950
[  278.071619][ T8189]  ? compat_raw_ioctl+0x70/0x70
[  278.076468][ T8189]  ? aa_sk_perm+0x7fc/0x930
[  278.081009][ T8189]  ? tomoyo_socket_sendmsg_permission+0x216/0x2f0
[  278.087422][ T8189]  ? sock_rps_record_flow+0x19/0x400
[  278.092716][ T8189]  ? inet_send_prepare+0x260/0x260
[  278.098019][ T8189]  ? inet_sendmsg+0x7c/0x2f0
[  278.102626][ T8189]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  278.107921][ T8189]  ? security_socket_sendmsg+0x80/0xa0
[  278.113403][ T8189]  ? inet_send_prepare+0x260/0x260
[  278.118525][ T8189]  ____sys_sendmsg+0x5bf/0x950
[  278.123297][ T8189]  ? __sys_sendmsg_sock+0x30/0x30
[  278.128500][ T8189]  ? __import_iovec+0x3fa/0x860
[  278.133525][ T8189]  ? import_iovec+0x73/0xa0
[  278.138026][ T8189]  ___sys_sendmsg+0x220/0x290
[  278.142727][ T8189]  ? __sys_sendmsg+0x270/0x270
[  278.147619][ T8189]  __se_sys_sendmsg+0x1a5/0x270
[  278.152487][ T8189]  ? __x64_sys_sendmsg+0x80/0x80
[  278.157441][ T8189]  ? syscall_enter_from_user_mode+0x2e/0x80
[  278.163342][ T8189]  do_syscall_64+0x55/0xb0
[  278.167750][ T8189]  ? clear_bhb_loop+0x40/0x90
[  278.172418][ T8189]  ? clear_bhb_loop+0x40/0x90
[  278.177089][ T8189]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  278.182976][ T8189] RIP: 0033:0x7f70ea78eba9
[  278.187384][ T8189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  278.207015][ T8189] RSP: 002b:00007f70eb649038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  278.215426][ T8189] RAX: ffffffffffffffda RBX: 00007f70ea9d5fa0 RCX: 00007f70ea78eba9
[  278.223433][ T8189] RDX: 00000000200040c4 RSI: 0000200000001640 RDI: 0000000000000006
[  278.231413][ T8189] RBP: 00007f70eb649090 R08: 0000000000000000 R09: 0000000000000000
[  278.239410][ T8189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  278.247402][ T8189] R13: 00007f70ea9d6038 R14: 00007f70ea9d5fa0 R15: 00007ffe9b2c1648
[  278.255384][ T8189]  </TASK>
[  278.440798][ T8200] netlink: 'syz.4.694': attribute type 10 has an invalid length.
[  278.533124][ T8201] netlink: 'syz.4.694': attribute type 10 has an invalid length.
[  278.557179][ T8205] netlink: 'syz.4.694': attribute type 1 has an invalid length.
[  278.564968][ T8205] netlink: 146340 bytes leftover after parsing attributes in process `syz.4.694'.
[  279.527401][ T8228] netlink: 'syz.4.706': attribute type 10 has an invalid length.
[  279.593875][ T8228] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  280.964848][ T8278] FAULT_INJECTION: forcing a failure.
[  280.964848][ T8278] name failslab, interval 1, probability 0, space 0, times 0
[  280.985995][ T8278] CPU: 1 PID: 8278 Comm: syz.7.726 Not tainted syzkaller #0
[  280.993343][ T8278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  281.003419][ T8278] Call Trace:
[  281.006728][ T8278]  <TASK>
[  281.009679][ T8278]  dump_stack_lvl+0x16c/0x230
[  281.014384][ T8278]  ? show_regs_print_info+0x20/0x20
[  281.019591][ T8278]  ? load_image+0x3b0/0x3b0
[  281.024091][ T8278]  ? __lock_acquire+0x7c80/0x7c80
[  281.029113][ T8278]  should_fail_ex+0x39d/0x4d0
[  281.033907][ T8278]  should_failslab+0x9/0x20
[  281.038416][ T8278]  slab_pre_alloc_hook+0x59/0x310
[  281.043444][ T8278]  ? nf_hook+0x9e/0x370
[  281.047604][ T8278]  kmem_cache_alloc+0x5a/0x2e0
[  281.052360][ T8278]  ? skb_clone+0x1eb/0x370
[  281.056777][ T8278]  skb_clone+0x1eb/0x370
[  281.061023][ T8278]  ? ip_mc_output+0x1de/0x580
[  281.065712][ T8278]  ip_mc_output+0x1eb/0x580
[  281.070223][ T8278]  ip_send_skb+0x12f/0x1d0
[  281.074640][ T8278]  raw_sendmsg+0x1488/0x1950
[  281.079230][ T8278]  ? compat_raw_ioctl+0x70/0x70
[  281.084084][ T8278]  ? aa_sk_perm+0x7fc/0x930
[  281.088587][ T8278]  ? tomoyo_socket_sendmsg_permission+0x216/0x2f0
[  281.095006][ T8278]  ? sock_rps_record_flow+0x19/0x400
[  281.100282][ T8278]  ? inet_send_prepare+0x260/0x260
[  281.105403][ T8278]  ? inet_sendmsg+0x7c/0x2f0
[  281.110018][ T8278]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  281.115312][ T8278]  ? security_socket_sendmsg+0x80/0xa0
[  281.120867][ T8278]  ? inet_send_prepare+0x260/0x260
[  281.126002][ T8278]  ____sys_sendmsg+0x5bf/0x950
[  281.130770][ T8278]  ? __sys_sendmsg_sock+0x30/0x30
[  281.135792][ T8278]  ? import_iovec+0x73/0xa0
[  281.140313][ T8278]  ___sys_sendmsg+0x220/0x290
[  281.144983][ T8278]  ? __sys_sendmsg+0x270/0x270
[  281.149771][ T8278]  __se_sys_sendmsg+0x1a5/0x270
[  281.154616][ T8278]  ? __x64_sys_sendmsg+0x80/0x80
[  281.159568][ T8278]  ? syscall_enter_from_user_mode+0x2e/0x80
[  281.165469][ T8278]  do_syscall_64+0x55/0xb0
[  281.169884][ T8278]  ? clear_bhb_loop+0x40/0x90
[  281.174548][ T8278]  ? clear_bhb_loop+0x40/0x90
[  281.179218][ T8278]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  281.185105][ T8278] RIP: 0033:0x7ff7b298eba9
[  281.189525][ T8278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  281.209301][ T8278] RSP: 002b:00007ff7b381a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  281.217732][ T8278] RAX: ffffffffffffffda RBX: 00007ff7b2bd5fa0 RCX: 00007ff7b298eba9
[  281.225706][ T8278] RDX: 00000000200040c4 RSI: 0000200000001640 RDI: 0000000000000006
[  281.233687][ T8278] RBP: 00007ff7b381a090 R08: 0000000000000000 R09: 0000000000000000
[  281.241752][ T8278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  281.249721][ T8278] R13: 00007ff7b2bd6038 R14: 00007ff7b2bd5fa0 R15: 00007ffec3ff0db8
[  281.257699][ T8278]  </TASK>
[  281.303293][ T8282] TCP: TCP_TX_DELAY enabled
[  281.451035][ T8287] netlink: 'syz.4.730': attribute type 4 has an invalid length.
[  281.490717][ T8287] netlink: 152 bytes leftover after parsing attributes in process `syz.4.730'.
[  281.550814][ T8287] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  282.205450][ T8321] FAULT_INJECTION: forcing a failure.
[  282.205450][ T8321] name failslab, interval 1, probability 0, space 0, times 0
[  282.235876][ T8321] CPU: 1 PID: 8321 Comm: syz.6.743 Not tainted syzkaller #0
[  282.243226][ T8321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  282.253305][ T8321] Call Trace:
[  282.256609][ T8321]  <TASK>
[  282.259549][ T8321]  dump_stack_lvl+0x16c/0x230
[  282.264234][ T8321]  ? show_regs_print_info+0x20/0x20
[  282.269468][ T8321]  ? load_image+0x3b0/0x3b0
[  282.273982][ T8321]  should_fail_ex+0x39d/0x4d0
[  282.278664][ T8321]  should_failslab+0x9/0x20
[  282.283166][ T8321]  slab_pre_alloc_hook+0x59/0x310
[  282.288285][ T8321]  kmem_cache_alloc+0x5a/0x2e0
[  282.293047][ T8321]  ? dst_alloc+0x105/0x170
[  282.297463][ T8321]  dst_alloc+0x105/0x170
[  282.301700][ T8321]  rt_dst_clone+0x58/0x680
[  282.306112][ T8321]  ip_mc_finish_output+0xec/0x250
[  282.311155][ T8321]  ip_mc_output+0x25c/0x580
[  282.315658][ T8321]  ip_send_skb+0x12f/0x1d0
[  282.320075][ T8321]  raw_sendmsg+0x1488/0x1950
[  282.324702][ T8321]  ? raw_sendmsg+0x9bd/0x1950
[  282.329400][ T8321]  ? compat_raw_ioctl+0x70/0x70
[  282.334266][ T8321]  ? aa_sk_perm+0x7fc/0x930
[  282.338774][ T8321]  ? tomoyo_socket_sendmsg_permission+0x216/0x2f0
[  282.345191][ T8321]  ? sock_rps_record_flow+0x19/0x400
[  282.350469][ T8321]  ? inet_send_prepare+0x260/0x260
[  282.355677][ T8321]  ? inet_sendmsg+0x7c/0x2f0
[  282.360273][ T8321]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  282.365552][ T8321]  ? security_socket_sendmsg+0x80/0xa0
[  282.371003][ T8321]  ? inet_send_prepare+0x260/0x260
[  282.376108][ T8321]  ____sys_sendmsg+0x5bf/0x950
[  282.380875][ T8321]  ? __sys_sendmsg_sock+0x30/0x30
[  282.385890][ T8321]  ? __import_iovec+0x3fa/0x860
[  282.390832][ T8321]  ? import_iovec+0x73/0xa0
[  282.395333][ T8321]  ___sys_sendmsg+0x220/0x290
[  282.400008][ T8321]  ? __sys_sendmsg+0x270/0x270
[  282.404785][ T8321]  ? seqcount_lockdep_reader_access+0x160/0x1c0
[  282.411132][ T8321]  __se_sys_sendmsg+0x1a5/0x270
[  282.415988][ T8321]  ? __x64_sys_sendmsg+0x80/0x80
[  282.420935][ T8321]  ? lockdep_hardirqs_on+0x98/0x150
[  282.426134][ T8321]  do_syscall_64+0x55/0xb0
[  282.430547][ T8321]  ? clear_bhb_loop+0x40/0x90
[  282.435221][ T8321]  ? clear_bhb_loop+0x40/0x90
[  282.439890][ T8321]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  282.445782][ T8321] RIP: 0033:0x7f38a1b8eba9
[  282.450189][ T8321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  282.469796][ T8321] RSP: 002b:00007f38a2aa5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  282.478205][ T8321] RAX: ffffffffffffffda RBX: 00007f38a1dd5fa0 RCX: 00007f38a1b8eba9
[  282.486170][ T8321] RDX: 00000000200040c4 RSI: 0000200000001640 RDI: 0000000000000006
[  282.494136][ T8321] RBP: 00007f38a2aa5090 R08: 0000000000000000 R09: 0000000000000000
[  282.502103][ T8321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  282.510068][ T8321] R13: 00007f38a1dd6038 R14: 00007f38a1dd5fa0 R15: 00007fff20b99748
[  282.518050][ T8321]  </TASK>
[  283.514264][ T8355] netlink: 'syz.4.757': attribute type 2 has an invalid length.
[  283.523798][ T8355] netlink: 'syz.4.757': attribute type 1 has an invalid length.
[  283.537191][ T8355] netlink: 'syz.4.757': attribute type 8 has an invalid length.
[  283.544870][ T8355] netlink: 44 bytes leftover after parsing attributes in process `syz.4.757'.
[  283.811802][ T8369] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.763'.
[  283.846557][ T8368] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.763'.
[  283.930003][ T8369] netlink: 'syz.4.763': attribute type 9 has an invalid length.
[  283.968290][ T8369] netlink: 399 bytes leftover after parsing attributes in process `syz.4.763'.
[  284.000104][ T8372] netlink: 'syz.6.762': attribute type 9 has an invalid length.
[  284.014075][ T8372] netlink: 375 bytes leftover after parsing attributes in process `syz.6.762'.
[  285.035201][ T8405] FAULT_INJECTION: forcing a failure.
[  285.035201][ T8405] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  285.073113][ T8405] CPU: 0 PID: 8405 Comm: syz.1.774 Not tainted syzkaller #0
[  285.080456][ T8405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  285.090548][ T8405] Call Trace:
[  285.093848][ T8405]  <TASK>
[  285.096835][ T8405]  dump_stack_lvl+0x16c/0x230
[  285.101545][ T8405]  ? show_regs_print_info+0x20/0x20
[  285.106776][ T8405]  ? load_image+0x3b0/0x3b0
[  285.111319][ T8405]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  285.117511][ T8405]  should_fail_ex+0x39d/0x4d0
[  285.122230][ T8405]  _copy_to_user+0x2f/0xa0
[  285.126677][ T8405]  simple_read_from_buffer+0xe7/0x150
[  285.132093][ T8405]  proc_fail_nth_read+0x1e3/0x250
[  285.137136][ T8405]  ? proc_fault_inject_write+0x340/0x340
[  285.142770][ T8405]  ? fsnotify_perm+0x271/0x5e0
[  285.147534][ T8405]  ? proc_fault_inject_write+0x340/0x340
[  285.153159][ T8405]  vfs_read+0x27e/0x920
[  285.157321][ T8405]  ? kernel_read+0x1e0/0x1e0
[  285.161905][ T8405]  ? __fget_files+0x28/0x4d0
[  285.166487][ T8405]  ? __fget_files+0x44a/0x4d0
[  285.171162][ T8405]  ? __fdget_pos+0x2a3/0x330
[  285.175744][ T8405]  ? ksys_read+0x75/0x250
[  285.180071][ T8405]  ksys_read+0x147/0x250
[  285.184316][ T8405]  ? vfs_write+0x940/0x940
[  285.188737][ T8405]  ? syscall_enter_from_user_mode+0x2e/0x80
[  285.194628][ T8405]  do_syscall_64+0x55/0xb0
[  285.199050][ T8405]  ? clear_bhb_loop+0x40/0x90
[  285.203744][ T8405]  ? clear_bhb_loop+0x40/0x90
[  285.208428][ T8405]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  285.214319][ T8405] RIP: 0033:0x7f3acb98d5bc
[  285.218729][ T8405] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  285.238413][ T8405] RSP: 002b:00007f3acc776030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  285.246835][ T8405] RAX: ffffffffffffffda RBX: 00007f3acbbd6090 RCX: 00007f3acb98d5bc
[  285.254810][ T8405] RDX: 000000000000000f RSI: 00007f3acc7760a0 RDI: 0000000000000007
[  285.262775][ T8405] RBP: 00007f3acc776090 R08: 0000000000000000 R09: 0000000000000000
[  285.270762][ T8405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  285.278736][ T8405] R13: 00007f3acbbd6128 R14: 00007f3acbbd6090 R15: 00007ffd3511f9b8
[  285.286718][ T8405]  </TASK>
[  286.338684][ T8448] netlink: 26 bytes leftover after parsing attributes in process `syz.1.790'.
[  286.557434][ T8454] netlink: 11254 bytes leftover after parsing attributes in process `syz.4.793'.
[  286.591036][ T8454] netlink: 'syz.4.793': attribute type 29 has an invalid length.
[  286.621176][ T8454] netlink: 'syz.4.793': attribute type 29 has an invalid length.
[  287.118929][ T8480] warning: `syz.6.802' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  287.961713][ T8517] netlink: 44 bytes leftover after parsing attributes in process `syz.6.814'.
[  288.008046][ T8517] netlink: 44 bytes leftover after parsing attributes in process `syz.6.814'.
[  288.029192][ T8513] netlink: 44 bytes leftover after parsing attributes in process `syz.6.814'.
[  288.041203][ T8518] netlink: 44 bytes leftover after parsing attributes in process `syz.6.814'.
[  288.374017][ T8533] netlink: 'syz.6.823': attribute type 29 has an invalid length.
[  288.390310][ T8533] netlink: 'syz.6.823': attribute type 3 has an invalid length.
[  289.055395][ T8563] C: renamed from team_slave_0 (while UP)
[  289.101107][ T8563] netlink: 'syz.1.833': attribute type 3 has an invalid length.
[  289.126810][ T8563] __nla_validate_parse: 1 callbacks suppressed
[  289.126824][ T8563] netlink: 152 bytes leftover after parsing attributes in process `syz.1.833'.
[  292.020583][ T8614] netlink: 'syz.1.853': attribute type 3 has an invalid length.
[  292.075607][ T8614] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.853'.
[  292.578580][ T8632] netlink: 'syz.1.862': attribute type 20 has an invalid length.
[  292.970489][ T8644] syz.1.868[8644] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  292.970613][ T8644] syz.1.868[8644] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  293.584683][ T8672] netlink: 60 bytes leftover after parsing attributes in process `syz.4.878'.
[  293.614094][ T8672] netlink: 60 bytes leftover after parsing attributes in process `syz.4.878'.
[  293.625975][ T8669] netlink: 60 bytes leftover after parsing attributes in process `syz.4.878'.
[  293.685210][ T8669] netlink: 32 bytes leftover after parsing attributes in process `syz.4.878'.
[  293.764988][ T8674] netlink: 'syz.1.880': attribute type 29 has an invalid length.
[  293.794973][ T8674] netlink: 'syz.1.880': attribute type 3 has an invalid length.
[  293.825449][ T8674] netlink: 132 bytes leftover after parsing attributes in process `syz.1.880'.
[  294.336712][ T8695] netlink: 65047 bytes leftover after parsing attributes in process `syz.7.889'.
[  294.403331][ T8700] netlink: 'syz.1.892': attribute type 4 has an invalid length.
[  294.415346][ T8700] netlink: 140 bytes leftover after parsing attributes in process `syz.1.892'.
[  298.131477][ T8742] netlink: 10 bytes leftover after parsing attributes in process `syz.6.906'.
[  298.173650][ T8741] netlink: 'syz.4.907': attribute type 21 has an invalid length.
[  298.195737][ T8741] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.907'.
[  299.023909][ T8768] netlink: 207508 bytes leftover after parsing attributes in process `syz.7.916'.
[  299.131214][ T8771] netlink: 64535 bytes leftover after parsing attributes in process `syz.7.916'.
[  301.525019][ T8820] netlink: 'syz.1.939': attribute type 25 has an invalid length.
[  301.544399][ T8820] netlink: 'syz.1.939': attribute type 7 has an invalid length.
[  301.669652][ T8818] syzkaller0: entered promiscuous mode
[  301.675911][ T8818] syzkaller0: entered allmulticast mode
[  304.386438][ T8849] netlink: 'syz.6.949': attribute type 2 has an invalid length.
[  304.523048][ T8859] netlink: 'syz.7.952': attribute type 3 has an invalid length.
[  304.545661][ T8859] netlink: 130984 bytes leftover after parsing attributes in process `syz.7.952'.
[  305.933544][ T8901] netlink: 'syz.7.970': attribute type 7 has an invalid length.
[  305.958323][ T8904] netlink: 'syz.6.972': attribute type 6 has an invalid length.
[  305.991827][ T8904] netlink: 'syz.6.972': attribute type 1 has an invalid length.
[  306.018297][ T8904] netlink: 193500 bytes leftover after parsing attributes in process `syz.6.972'.
[  306.319332][ T8917] netlink: 'syz.4.976': attribute type 10 has an invalid length.
[  306.334399][ T8917] netlink: 'syz.4.976': attribute type 19 has an invalid length.
[  306.363031][ T8917] netlink: 14536 bytes leftover after parsing attributes in process `syz.4.976'.
[  306.446993][ T8917] netlink: 'syz.4.976': attribute type 11 has an invalid length.
[  306.484507][ T8917] netlink: 195824 bytes leftover after parsing attributes in process `syz.4.976'.
[  307.603074][ T8933] netlink: 'syz.6.982': attribute type 10 has an invalid length.
[  307.646050][ T8933] dummy0: entered promiscuous mode
[  307.651442][ T8933] dummy0: entered allmulticast mode
[  308.951625][ T9010] netlink: 55631 bytes leftover after parsing attributes in process `syz.7.1009'.
[  309.519328][ T9030] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1018'.
[  309.536410][ T9028] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1018'.
[  312.351264][ T9123] netlink: 830 bytes leftover after parsing attributes in process `syz.7.1051'.
[  312.373256][    C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  312.425838][ T9123] bond_slave_0: entered promiscuous mode
[  312.431914][ T9123] bond_slave_1: entered promiscuous mode
[  312.923612][ T9094] delete_channel: no stack
[  313.250663][ T9142] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.1060'.
[  313.621941][ T9153] netlink: 'syz.7.1066': attribute type 10 has an invalid length.
[  313.696908][ T9153] 8021q: adding VLAN 0 to HW filter on device team0
[  313.722014][ T9153] team_slave_0: entered promiscuous mode
[  313.728067][ T9153] team_slave_1: entered promiscuous mode
[  313.743109][ T9153] bond0: (slave team0): Enslaving as an active interface with an up link
[  313.961328][ T9163] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1069'.
[  313.996064][ T9163] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1069'.
[  314.031390][ T9166] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1069'.
[  314.066377][ T9163] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1069'.
[  314.324375][ T9177] netlink: 'syz.1.1074': attribute type 7 has an invalid length.
[  315.734127][ T9224] netlink: 'syz.4.1093': attribute type 9 has an invalid length.
[  315.752314][ T9224] netlink: 49779 bytes leftover after parsing attributes in process `syz.4.1093'.
[  317.370082][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  317.376711][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  317.661583][ T9276] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1108'.
[  317.692802][ T9276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  317.707535][ T9276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.719008][ T9276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  317.729701][ T9276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.741194][ T9276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  317.753059][ T9276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.778289][ T9276] batadv_slave_1: entered promiscuous mode
[  319.849717][ T9336] netlink: 188 bytes leftover after parsing attributes in process `syz.7.1130'.
[  320.062505][ T9341] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1132'.
[  321.184738][ T9377] netlink: 'syz.7.1147': attribute type 29 has an invalid length.
[  321.215867][ T9377] netlink: 'syz.7.1147': attribute type 29 has an invalid length.
[  321.266007][ T9381] netlink: 'syz.7.1147': attribute type 29 has an invalid length.
[  321.747741][ T9396] netlink: 'syz.1.1156': attribute type 1 has an invalid length.
[  321.766083][ T9396] netlink: 'syz.1.1156': attribute type 4 has an invalid length.
[  321.773944][ T9396] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1156'.
[  322.246833][ T9410] syzkaller0: entered promiscuous mode
[  322.252354][ T9410] syzkaller0: entered allmulticast mode
[  323.315942][ T9448] netlink: 'syz.1.1177': attribute type 9 has an invalid length.
[  324.385391][ T9484] netlink: 'syz.7.1192': attribute type 10 has an invalid length.
[  324.420626][ T9484] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  325.284726][ T9525] netlink: 'syz.6.1210': attribute type 1 has an invalid length.
[  325.306937][ T9525] netlink: 193500 bytes leftover after parsing attributes in process `syz.6.1210'.
[  326.489500][ T9578] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1231'.
[  326.538710][ T9578] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1231'.
[  326.551559][ T9582] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1231'.
[  327.231207][ T9610] netlink: 'syz.7.1246': attribute type 10 has an invalid length.
[  327.249345][ T9610] team_slave_0: left promiscuous mode
[  327.255148][ T9610] team_slave_1: left promiscuous mode
[  331.226085][ T9681] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1273'.
[  331.248233][ T9681] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1273'.
[  331.261611][ T9682] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1273'.
[  331.273476][ T9681] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1273'.
[  331.286775][ T9686] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1273'.
[  331.302385][ T9681] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1273'.
[  331.314608][ T9681] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1273'.
[  331.324488][ T9681] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1273'.
[  331.335289][ T9682] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1273'.
[  331.378048][ T9682] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1273'.
[  332.926399][ T9727] netlink: 'syz.4.1288': attribute type 21 has an invalid length.
[  332.945808][ T9727] netlink: 'syz.4.1288': attribute type 4 has an invalid length.
[  334.375963][ T9764] delete_channel: no stack
[  334.380784][ T9764] delete_channel: no stack
[  334.807629][ T5789] Bluetooth: hci2: command 0x0406 tx timeout
[  335.345049][ T9792] netlink: 'syz.7.1318': attribute type 13 has an invalid length.
[  336.003467][ T9820] netlink: 'syz.6.1327': attribute type 6 has an invalid length.
[  336.025031][ T9820] netlink: 'syz.6.1327': attribute type 1 has an invalid length.
[  336.264538][ T9829] netlink: 'syz.4.1330': attribute type 1 has an invalid length.
[  336.295721][ T9829] __nla_validate_parse: 101 callbacks suppressed
[  336.295733][ T9829] netlink: 146340 bytes leftover after parsing attributes in process `syz.4.1330'.
[  336.587393][ T9838] netlink: 'syz.4.1333': attribute type 21 has an invalid length.
[  337.362308][ T9859] netlink: 'syz.7.1342': attribute type 1 has an invalid length.
[  337.370369][ T9859] netlink: 168864 bytes leftover after parsing attributes in process `syz.7.1342'.
[  338.847231][ T9906] netlink: 'syz.6.1358': attribute type 1 has an invalid length.
[  338.855138][ T9906] netlink: 112860 bytes leftover after parsing attributes in process `syz.6.1358'.
[  338.884911][ T9906] netlink: 'syz.6.1358': attribute type 1 has an invalid length.
[  339.169338][ T9914] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  339.177198][ T9914] IPv6: NLM_F_CREATE should be set when creating new route
[  339.184675][ T9914] IPv6: NLM_F_CREATE should be set when creating new route
[  339.192252][ T9914] IPv6: NLM_F_CREATE should be set when creating new route
[  350.247180][   T50] Bluetooth: hci3: command 0x0406 tx timeout
[  356.869922][T10074] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1420'.
[  357.198988][T10091] netlink: 'syz.6.1425': attribute type 29 has an invalid length.
[  357.219461][T10091] netlink: 'syz.6.1425': attribute type 3 has an invalid length.
[  357.240352][T10091] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1425'.
[  357.356662][T10097] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1427'.
[  357.380153][T10097] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1427'.
[  357.404656][T10096] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1427'.
[  357.461816][T10096] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1427'.
[  357.498409][T10103] netlink: 'syz.6.1429': attribute type 10 has an invalid length.
[  357.538175][T10103] 8021q: adding VLAN 0 to HW filter on device team0
[  357.566792][T10103] team0: entered promiscuous mode
[  357.572117][T10103] team_slave_0: entered promiscuous mode
[  357.579287][T10103] team_slave_1: entered promiscuous mode
[  357.592888][T10103] team0: entered allmulticast mode
[  357.613357][T10103] team_slave_0: entered allmulticast mode
[  357.624381][T10103] team_slave_1: entered allmulticast mode
[  357.632789][T10103] bond0: (slave team0): Enslaving as an active interface with an up link
[  357.642123][T10104] netlink: 'syz.6.1429': attribute type 10 has an invalid length.
[  357.777826][T10111] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  358.319373][T10127] netlink: 'syz.7.1438': attribute type 29 has an invalid length.
[  358.405956][T10127] netlink: 'syz.7.1438': attribute type 3 has an invalid length.
[  358.463940][T10127] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1438'.
[  358.956574][T10142] sit0: left promiscuous mode
[  359.119609][T10149] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1442'.
[  359.145683][T10149] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1442'.
[  359.183789][T10147] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1442'.
[  359.203416][T10142] sit0: entered promiscuous mode
[  359.668442][T10165] bridge0: port 3(bond0) entered disabled state
[  359.676419][T10165] bridge0: port 2(bridge_slave_1) entered disabled state
[  359.684405][T10165] bridge0: port 1(bridge_slave_0) entered disabled state
[  359.820742][T10168] bond0: left allmulticast mode
[  359.842847][T10168] bond_slave_0: left allmulticast mode
[  359.850838][T10168] bond_slave_1: left allmulticast mode
[  359.860851][T10168] bond0: left promiscuous mode
[  359.867257][T10168] bond_slave_0: left promiscuous mode
[  359.873002][T10168] bond_slave_1: left promiscuous mode
[  359.879177][T10168] bridge0: port 3(bond0) entered disabled state
[  359.895692][T10168] bridge_slave_1: left allmulticast mode
[  359.901537][T10168] bridge_slave_1: left promiscuous mode
[  359.916275][T10168] bridge0: port 2(bridge_slave_1) entered disabled state
[  359.931406][T10168] bridge_slave_0: left allmulticast mode
[  359.939245][T10168] bridge_slave_0: left promiscuous mode
[  359.945178][T10168] bridge0: port 1(bridge_slave_0) entered disabled state
[  361.041200][T10189] sit0: left promiscuous mode
[  361.201521][T10191] sit0: entered promiscuous mode
[  362.417126][T10229] bridge0: port 2(bridge_slave_1) entered disabled state
[  362.426061][T10229] bridge0: port 1(bridge_slave_0) entered disabled state
[  362.505152][T10232] bridge_slave_1: left allmulticast mode
[  362.539398][T10232] bridge_slave_1: left promiscuous mode
[  362.595799][T10232] bridge0: port 2(bridge_slave_1) entered disabled state
[  362.612392][T10232] bridge_slave_0: left allmulticast mode
[  362.625809][T10232] bridge_slave_0: left promiscuous mode
[  362.631696][T10232] bridge0: port 1(bridge_slave_0) entered disabled state
[  362.999794][T10238] netlink: 'syz.1.1475': attribute type 46 has an invalid length.
[  363.154516][T10245] __nla_validate_parse: 7 callbacks suppressed
[  363.154548][T10245] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1474'.
[  364.214425][T10248] sit0: left promiscuous mode
[  364.318976][T10254] sit0: left allmulticast mode
[  364.439413][T10245] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1474'.
[  364.477163][T10266] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1480'.
[  364.630321][T10271] sit0: entered promiscuous mode
[  364.638871][T10271] sit0: entered allmulticast mode
[  366.271289][T10297] netlink: 'syz.6.1491': attribute type 10 has an invalid length.
[  366.385743][T10297] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1491'.
[  366.455210][T10297] 8021q: adding VLAN 0 to HW filter on device team0
[  366.562977][T10297] bond0: (slave team0): Releasing backup interface
[  366.918915][T10297] bridge0: port 4(team0) entered blocking state
[  366.936444][T10297] bridge0: port 4(team0) entered disabled state
[  367.507487][T10300] netlink: 'syz.1.1492': attribute type 10 has an invalid length.
[  367.573219][T10300] macvlan0: entered allmulticast mode
[  367.865703][T10300] veth1_vlan: entered allmulticast mode
[  367.981049][T10300] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  368.076810][T10300] syz.1.1492 (10300) used greatest stack depth: 19720 bytes left
[  372.097955][T10319] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1494'.
[  372.113047][T10319] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1494'.
[  372.142354][T10319] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1494'.
[  372.161231][T10319] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1494'.
[  372.187634][T10316] netlink: 'syz.4.1502': attribute type 13 has an invalid length.
[  372.210235][T10316] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1502'.
[  372.220527][T10316] bond0: entered promiscuous mode
[  372.225912][T10316] û]þ5¯\P€: entered promiscuous mode
[  372.232059][T10316] bond_slave_1: entered promiscuous mode
[  372.238109][T10316] bond0: entered allmulticast mode
[  372.243390][T10316] û]þ5¯\P€: entered allmulticast mode
[  372.251106][T10316] bond_slave_1: entered allmulticast mode
[  372.547239][T10330] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.1501'.
[  372.733278][T10337] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1505'.
[  372.760523][T10337] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  372.882110][T10344] netlink: 'syz.7.1507': attribute type 1 has an invalid length.
[  372.922631][T10344] netlink: 112865 bytes leftover after parsing attributes in process `syz.7.1507'.
[  373.403119][T10362] netlink: 'syz.6.1514': attribute type 3 has an invalid length.
[  373.415415][T10362] netlink: 130984 bytes leftover after parsing attributes in process `syz.6.1514'.
[  374.277673][T10388] netlink: 'syz.6.1518': attribute type 1 has an invalid length.
[  374.324580][T10388] netlink: 146340 bytes leftover after parsing attributes in process `syz.6.1518'.
[  374.486214][T10388] pim6reg1: entered promiscuous mode
[  374.495370][T10388] pim6reg1: entered allmulticast mode
[  375.561651][T10422] netlink: 'syz.6.1531': attribute type 10 has an invalid length.
[  375.584991][T10422] netdevsim netdevsim6 netdevsim0: entered promiscuous mode
[  375.595931][T10422] netdevsim netdevsim6 netdevsim0: entered allmulticast mode
[  375.988520][T10443] sctp: [Deprecated]: syz.4.1539 (pid 10443) Use of struct sctp_assoc_value in delayed_ack socket option.
[  375.988520][T10443] Use struct sctp_sack_info instead
[  376.045921][T10442] sctp: [Deprecated]: syz.4.1539 (pid 10442) Use of struct sctp_assoc_value in delayed_ack socket option.
[  376.045921][T10442] Use struct sctp_sack_info instead
[  376.376732][T10456] netlink: 'syz.1.1543': attribute type 10 has an invalid length.
[  376.474716][T10456] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  377.480772][T10489] __nla_validate_parse: 1 callbacks suppressed
[  377.480795][T10489] netlink: 22079 bytes leftover after parsing attributes in process `syz.1.1553'.
[  378.323091][T10515] netlink: 'syz.7.1558': attribute type 10 has an invalid length.
[  378.367588][T10515] batman_adv: batadv0: Adding interface: wlan0
[  378.373801][T10515] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  378.413487][T10515] batman_adv: batadv0: Interface activated: wlan0
[  378.821338][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  378.827818][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  379.279815][T10528] netlink: 'syz.1.1566': attribute type 1 has an invalid length.
[  379.306472][T10528] netlink: 146340 bytes leftover after parsing attributes in process `syz.1.1566'.
[  381.740517][T10520] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  381.785782][T10534] pim6reg1: entered promiscuous mode
[  381.791436][T10534] pim6reg1: entered allmulticast mode
[  382.243142][   T50] Bluetooth: hci3: Dropping invalid advertising data
[  382.243743][T10553] netlink: 188 bytes leftover after parsing attributes in process `syz.6.1573'.
[  382.253336][   T50] Bluetooth: hci3: unknown advertising packet type: 0xff
[  382.260111][   T50] Bluetooth: hci3: Malformed LE Event: 0x02
[  382.377608][T10557] netlink: 'syz.4.1577': attribute type 12 has an invalid length.
[  382.385673][T10557] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1577'.
[  382.473409][T10563] netlink: 'syz.7.1578': attribute type 21 has an invalid length.
[  382.493815][T10563] IPv6: NLM_F_CREATE should be specified when creating new route
[  382.503929][T10563] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  382.511256][T10563] IPv6: NLM_F_CREATE should be set when creating new route
[  382.518622][T10563] IPv6: NLM_F_CREATE should be set when creating new route
[  382.525932][T10563] IPv6: NLM_F_CREATE should be set when creating new route
[  384.452866][T10619] netlink: 'syz.4.1595': attribute type 13 has an invalid length.
[  384.506491][T10621] netlink: 'syz.1.1596': attribute type 21 has an invalid length.
[  384.514533][T10622] netlink: 'syz.4.1595': attribute type 13 has an invalid length.
[  384.952372][T10634] netlink: 'syz.1.1601': attribute type 2 has an invalid length.
[  384.966163][T10634] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1601'.
[  384.985719][T10634] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  385.016854][T10634] netlink: 'syz.1.1601': attribute type 41 has an invalid length.
[  385.184979][T10642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1602'.
[  386.044310][T10654] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  386.486750][T10660] Dead loop on virtual device ip6_vti0, fix it urgently!
[  390.921427][T10757] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode
[  390.954174][T10757] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode
[  391.056066][T10753] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1647'.
[  391.070241][T10753] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1647'.
[  391.098984][T10753] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1647'.
[  392.182217][T10791] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1655'.
[  393.699327][T10824] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1667'.
[  393.831980][T10818] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1667'.
[  393.869012][T10818] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1667'.
[  394.256780][T10839] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1671'.
[  394.292741][T10834] batman_adv: batadv0: Interface deactivated: wlan0
[  394.510755][T10837] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode
[  394.543538][T10837] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode
[  394.551496][T10837] batman_adv: batadv0: Interface activated: wlan0
[  394.567768][T10839] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1671'.
[  394.578842][T10841] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1671'.
[  395.204133][T10861] netlink: 'syz.6.1682': attribute type 7 has an invalid length.
[  395.221285][T10861] netlink: 'syz.6.1682': attribute type 6 has an invalid length.
[  395.254516][T10864] netlink: 'syz.6.1682': attribute type 7 has an invalid length.
[  395.268589][T10864] netlink: 'syz.6.1682': attribute type 6 has an invalid length.
[  396.854964][T10924] netlink: 192440 bytes leftover after parsing attributes in process `syz.6.1703'.
[  396.866084][T10924] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4
[  397.188596][T10942] netlink: 'syz.6.1709': attribute type 1 has an invalid length.
[  397.218069][T10942] netlink: 'syz.6.1709': attribute type 4 has an invalid length.
[  397.234688][T10942] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.1709'.
[  398.669469][T10983] syz.7.1723[10983] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  398.669602][T10983] syz.7.1723[10983] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  399.355843][T11014] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.1729'.
[  399.544741][T11018] netlink: 192440 bytes leftover after parsing attributes in process `syz.1.1732'.
[  399.555363][T11018] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4
[  400.475235][T11029] netlink: 'syz.1.1733': attribute type 21 has an invalid length.
[  400.516877][T11029] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1733'.
[  401.165686][T11043] netlink: 192440 bytes leftover after parsing attributes in process `syz.4.1742'.
[  401.176358][T11043] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4
[  403.054411][T11095] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1759'.
[  403.064070][T11095] team0: default FDB implementation only supports local addresses
[  403.585639][T11109] netlink: 'syz.1.1765': attribute type 13 has an invalid length.
[  403.593646][T11109] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.1765'.
[  403.948266][T11119] netlink: 'syz.4.1770': attribute type 10 has an invalid length.
[  404.065813][T11119] team0: Port device geneve1 added
[  404.197014][T11119] syz.4.1770 (11119) used greatest stack depth: 19368 bytes left
[  407.771402][T11176] netlink: 'syz.4.1789': attribute type 29 has an invalid length.
[  407.793891][T11176] netlink: 'syz.4.1789': attribute type 29 has an invalid length.
[  407.878275][T11181] netlink: 'syz.4.1789': attribute type 29 has an invalid length.
[  407.934033][T11176] netlink: 'syz.4.1789': attribute type 29 has an invalid length.
[  407.942745][T11176] netlink: 'syz.4.1789': attribute type 2 has an invalid length.
[  407.965524][T11176] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1789'.
[  408.017429][T11181] netlink: 'syz.4.1789': attribute type 2 has an invalid length.
[  408.025214][T11181] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1789'.
[  408.219400][T11186] netlink: 'syz.1.1793': attribute type 10 has an invalid length.
[  409.179727][T11196] netlink: 'syz.6.1797': attribute type 10 has an invalid length.
[  409.188280][T11196] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1797'.
[  410.004022][T11212] C: renamed from team_slave_0 (while UP)
[  410.029706][T11212] netlink: 'syz.6.1804': attribute type 3 has an invalid length.
[  410.055610][T11212] netlink: 'syz.6.1804': attribute type 1 has an invalid length.
[  410.119914][T11212] netlink: 116 bytes leftover after parsing attributes in process `syz.6.1804'.
[  410.226958][T11217] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1806'.
[  410.765777][T11225] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  410.876468][T11232] -1: renamed from syzkaller0
[  412.303569][T11263] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  413.805668][T11298] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1833'.
[  413.815123][T11298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  413.855758][T11298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  413.869929][T11298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  413.895536][T11298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  413.929082][T11298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  413.960635][T11298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  415.043307][T11308] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  415.508672][T11330] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1843'.
[  415.560422][T11330] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1843'.
[  415.606856][T11330] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1843'.
[  415.664973][T11334] validate_nla: 2 callbacks suppressed
[  415.664994][T11334] netlink: 'syz.7.1845': attribute type 3 has an invalid length.
[  415.671515][T11330] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1843'.
[  415.718426][T11334] netlink: 201336 bytes leftover after parsing attributes in process `syz.7.1845'.
[  416.958874][T11355] ref_ctr_offset mismatch. inode: 0xa26 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20
[  417.003628][T11355] netlink: 'syz.4.1852': attribute type 21 has an invalid length.
[  417.086033][T11355] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1852'.
[  417.095265][T11355] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1852'.
[  417.166985][T11360] netlink: 'syz.1.1853': attribute type 10 has an invalid length.
[  417.265753][T11360] veth0_vlan: left promiscuous mode
[  417.307343][T11360] veth0_vlan: entered promiscuous mode
[  417.315193][T11360] team0: Device veth0_vlan failed to register rx_handler
[  417.511809][T11370] netlink: 15231 bytes leftover after parsing attributes in process `syz.4.1856'.
[  418.549746][T11391] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1865'.
[  418.587478][T11391] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1865'.
[  419.950425][T11434] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  419.978950][T11434] batman_adv: batadv0: Removing interface: batadv_slave_0
[  420.003643][T11434] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  420.026926][T11434] batman_adv: batadv0: Removing interface: batadv_slave_1
[  421.509345][T11475] netlink: 'syz.4.1893': attribute type 21 has an invalid length.
[  421.534360][T11475] IPv6: NLM_F_CREATE should be specified when creating new route
[  421.595014][T11475] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  421.602347][T11475] IPv6: NLM_F_CREATE should be set when creating new route
[  421.609652][T11475] IPv6: NLM_F_CREATE should be set when creating new route
[  421.617094][T11475] IPv6: NLM_F_CREATE should be set when creating new route
[  423.642356][T11543] __nla_validate_parse: 4 callbacks suppressed
[  423.642393][T11543] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1913'.
[  425.292218][T11570] netlink: 201392 bytes leftover after parsing attributes in process `syz.6.1927'.
[  425.335935][T11570] netlink: del zone limit has 8 unknown bytes
[  425.668729][T11596] netlink: 3752 bytes leftover after parsing attributes in process `syz.7.1936'.
[  425.738696][T11599] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.1945'.
[  425.806767][T11601] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  425.826600][T11601] batman_adv: batadv0: Removing interface: batadv_slave_0
[  425.873031][T11601] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  425.888037][T11601] batman_adv: batadv0: Removing interface: batadv_slave_1
[  425.909521][T11601] batman_adv: batadv0: Interface deactivated: wlan0
[  425.917877][T11601] batman_adv: batadv0: Removing interface: wlan0
[  426.807064][T11621] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.1947'.
[  426.835957][T11621] netlink: 8454 bytes leftover after parsing attributes in process `syz.4.1947'.
[  428.882665][T11665] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1963'.
[  430.760533][T11738] netlink: 'syz.6.1991': attribute type 10 has an invalid length.
[  430.773598][T11738] macvlan0: entered allmulticast mode
[  430.796198][T11738] veth1_vlan: entered allmulticast mode
[  430.813382][T11738] macvlan0: entered promiscuous mode
[  430.820675][T11738] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  430.960664][T11747] delete_channel: no stack
[  430.965318][T11747] delete_channel: no stack
[  430.970173][T11747] delete_channel: no stack
[  430.974769][T11747] delete_channel: no stack
[  430.979574][T11747] delete_channel: no stack
[  430.984193][T11747] delete_channel: no stack
[  430.989080][T11747] delete_channel: no stack
[  430.993624][T11747] delete_channel: no stack
[  430.998358][T11747] delete_channel: no stack
[  431.002945][T11747] delete_channel: no stack
[  431.007890][T11747] delete_channel: no stack
[  431.012775][T11747] delete_channel: no stack
[  431.017545][T11747] delete_channel: no stack
[  431.022346][T11747] delete_channel: no stack
[  431.027156][T11747] delete_channel: no stack
[  431.031843][T11747] delete_channel: no stack
[  431.036592][T11747] delete_channel: no stack
[  431.041190][T11747] delete_channel: no stack
[  431.046067][T11747] delete_channel: no stack
[  431.050628][T11747] delete_channel: no stack
[  431.055238][T11747] delete_channel: no stack
[  431.059991][T11747] delete_channel: no stack
[  431.064544][T11747] delete_channel: no stack
[  431.070100][T11747] delete_channel: no stack
[  431.077878][T11747] delete_channel: no stack
[  431.082486][T11747] delete_channel: no stack
[  431.087155][T11747] delete_channel: no stack
[  431.091720][T11747] delete_channel: no stack
[  431.096423][T11747] delete_channel: no stack
[  431.100993][T11747] delete_channel: no stack
[  431.105648][T11747] delete_channel: no stack
[  431.110205][T11747] delete_channel: no stack
[  431.114812][T11747] delete_channel: no stack
[  431.330440][T11754] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1999'.
[  431.545811][T11754] netlink: 'syz.1.1999': attribute type 4 has an invalid length.
[  431.555875][T11754] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1999'.
[  431.803552][T11757] syzkaller0: entered promiscuous mode
[  431.885393][T11760] netlink: 'syz.7.2001': attribute type 8 has an invalid length.
[  431.911258][T11760] netlink: 'syz.7.2001': attribute type 1 has an invalid length.
[  431.920763][T11760] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.2001'.
[  432.327149][T11773] pim6reg1: entered promiscuous mode
[  432.332496][T11773] pim6reg1: entered allmulticast mode
[  432.740805][T11780] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2009'.
[  434.437306][T11820] netlink: 'syz.4.2024': attribute type 8 has an invalid length.
[  435.046483][T11846] netlink: 'syz.4.2031': attribute type 39 has an invalid length.
[  435.871319][T11867] netlink: 'syz.7.2037': attribute type 10 has an invalid length.
[  435.950613][T11867] macvlan0: entered allmulticast mode
[  436.006735][T11867] veth1_vlan: entered allmulticast mode
[  436.028795][T11867] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  436.181884][T11878] IPv6: Can't replace route, no match found
[  436.258378][T11887] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  436.297944][T11888] netlink: 'syz.4.2044': attribute type 10 has an invalid length.
[  436.340668][T11888] team0: Device ipvlan1 failed to register rx_handler
[  436.394643][T11878] netlink: 'syz.6.2042': attribute type 10 has an invalid length.
[  436.467653][T11878] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode
[  436.477675][T11878] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode
[  436.489312][T11878] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  436.553504][T11890] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf
[  437.878768][T11933] netlink: 'syz.1.2062': attribute type 10 has an invalid length.
[  437.892247][T11933] veth0_vlan: left promiscuous mode
[  437.899880][T11933] veth0_vlan: entered promiscuous mode
[  437.910307][T11933] team0: Device veth0_vlan failed to register rx_handler
[  438.448562][T11944] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2066'.
[  440.251633][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  440.266786][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  440.429825][T12006] netlink: 'syz.4.2089': attribute type 9 has an invalid length.
[  440.450561][T12006] netlink: 399 bytes leftover after parsing attributes in process `syz.4.2089'.
[  441.276700][T12033] netlink: 'syz.4.2099': attribute type 29 has an invalid length.
[  441.284566][T12033] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2099'.
[  441.297002][T12033] netlink: 'syz.4.2099': attribute type 29 has an invalid length.
[  441.347768][T12033] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2099'.
[  441.374827][T12036] netlink: 201392 bytes leftover after parsing attributes in process `syz.7.2100'.
[  441.400679][T12036] netlink: zone id is out of range
[  441.406798][T12036] netlink: zone id is out of range
[  441.411975][T12036] netlink: zone id is out of range
[  441.417891][T12036] netlink: zone id is out of range
[  441.423122][T12036] netlink: zone id is out of range
[  441.428854][T12036] netlink: zone id is out of range
[  441.434061][T12036] netlink: zone id is out of range
[  441.440242][T12036] netlink: zone id is out of range
[  441.445838][T12036] netlink: zone id is out of range
[  441.451100][T12036] netlink: zone id is out of range
[  442.103816][T12065] netlink: 'syz.4.2112': attribute type 39 has an invalid length.
[  442.367201][T12078] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.2114'.
[  443.311410][T12111] netlink: 'syz.7.2127': attribute type 29 has an invalid length.
[  443.325878][T12111] netlink: 'syz.7.2127': attribute type 29 has an invalid length.
[  443.442463][T12118] netlink: 'syz.7.2127': attribute type 10 has an invalid length.
[  444.335523][T12148] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.2142'.
[  444.931056][T12172] netlink: 'syz.4.2147': attribute type 10 has an invalid length.
[  444.969079][T12172] macvlan0: entered allmulticast mode
[  445.001892][T12172] veth1_vlan: entered allmulticast mode
[  445.018400][T12172] macvlan0: entered promiscuous mode
[  445.024537][T12172] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  445.662066][T12189] netlink: 'syz.7.2157': attribute type 2 has an invalid length.
[  445.694283][T12189] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2157'.
[  446.938925][T12218] netlink: 'syz.1.2168': attribute type 1 has an invalid length.
[  446.984962][T12218] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2168'.
[  450.263828][T12234] netlink: 763 bytes leftover after parsing attributes in process `syz.6.2172'.
[  450.855206][T12254] netlink: 'syz.7.2181': attribute type 7 has an invalid length.
[  450.956598][T12262] netlink: 'syz.1.2182': attribute type 10 has an invalid length.
[  450.969851][T12262] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2182'.
[  451.008311][T12262] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  451.053655][T12262] net_ratelimit: 212 callbacks suppressed
[  451.053673][T12262] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  455.597191][T12347] netlink: 209844 bytes leftover after parsing attributes in process `syz.6.2207'.
[  456.447298][T12358] netlink: 'syz.4.2214': attribute type 21 has an invalid length.
[  457.040471][T12373] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.2218'.
[  457.359801][T12379] netlink: 'syz.6.2218': attribute type 10 has an invalid length.
[  457.369834][T12379] netlink: 3819 bytes leftover after parsing attributes in process `syz.6.2218'.
[  458.087233][T12418] netlink: 'syz.7.2236': attribute type 33 has an invalid length.
[  458.119980][T12418] netlink: 'syz.7.2236': attribute type 3 has an invalid length.
[  458.165378][T12418] netlink: 153952 bytes leftover after parsing attributes in process `syz.7.2236'.
[  458.237257][T12428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2241'.
[  458.502397][T12437] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.2244'.
[  458.978986][T12459] netlink: 'syz.7.2251': attribute type 16 has an invalid length.
[  459.025666][T12459] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2251'.
[  459.047114][T12459] bridge_slave_0: entered allmulticast mode
[  459.168497][T12467] netlink: 'syz.7.2251': attribute type 10 has an invalid length.
[  459.271756][T12467] netdevsim netdevsim7 netdevsim0: entered promiscuous mode
[  459.321808][T12467] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  459.986554][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  460.001445][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  460.011106][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  460.023138][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  460.031929][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  460.041285][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  460.067223][ T1080] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.291139][ T1080] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.386334][T12491] ÿÿÿÿÿÿ: renamed from vlan1
[  460.513126][ T1080] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.629362][ T1080] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.643891][T12495] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2265'.
[  460.983630][T12481] chnl_net:caif_netlink_parms(): no params data found
[  461.256226][T12509] tun0: tun_chr_ioctl cmd 2147767520
[  461.355100][T12514] tun0: tun_chr_ioctl cmd 1074812117
[  461.410146][T12481] bridge0: port 1(bridge_slave_0) entered blocking state
[  461.418034][T12481] bridge0: port 1(bridge_slave_0) entered disabled state
[  461.425370][T12481] bridge_slave_0: entered allmulticast mode
[  461.434799][T12481] bridge_slave_0: entered promiscuous mode
[  461.444621][T12481] bridge0: port 2(bridge_slave_1) entered blocking state
[  461.453765][T12481] bridge0: port 2(bridge_slave_1) entered disabled state
[  461.463936][T12481] bridge_slave_1: entered allmulticast mode
[  461.478286][T12481] bridge_slave_1: entered promiscuous mode
[  461.607882][T12526] netlink: 'syz.7.2275': attribute type 2 has an invalid length.
[  461.622052][T12526] netlink: 'syz.7.2275': attribute type 1 has an invalid length.
[  461.624308][T12481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  461.631186][T12526] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2275'.
[  461.643703][T12481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  461.680761][T12526] netlink: 'syz.7.2275': attribute type 2 has an invalid length.
[  461.689517][T12526] netlink: 'syz.7.2275': attribute type 1 has an invalid length.
[  461.697846][T12526] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2275'.
[  461.743845][T12481] team0: Port device team_slave_0 added
[  461.837561][T12481] team0: Port device team_slave_1 added
[  461.972810][T12481] batman_adv: batadv0: Adding interface: batadv_slave_0
[  461.981379][T12481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  462.035663][T12481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  462.086657][ T5789] Bluetooth: hci0: command tx timeout
[  462.147628][T12481] batman_adv: batadv0: Adding interface: batadv_slave_1
[  462.154630][T12481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  462.181545][T12481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  462.347692][T12481] hsr_slave_0: entered promiscuous mode
[  462.355706][T12481] hsr_slave_1: entered promiscuous mode
[  462.378182][T12481] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  462.394362][T12481] Cannot create hsr debugfs directory
[  462.625127][T12560] netlink: 'syz.6.2285': attribute type 10 has an invalid length.
[  462.647966][T12560] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2285'.
[  462.673413][T12560] bridge0: port 5(dummy0) entered blocking state
[  462.693505][T12560] bridge0: port 5(dummy0) entered disabled state
[  462.732245][T12560] bridge0: port 5(dummy0) entered blocking state
[  462.738923][T12560] bridge0: port 5(dummy0) entered forwarding state
[  463.274316][T12570] netlink: 'syz.1.2289': attribute type 10 has an invalid length.
[  463.293085][T12570] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2289'.
[  463.315113][T12560] syz.6.2285 (12560) used greatest stack depth: 19336 bytes left
[  463.335799][ T1080] hsr_slave_0: left promiscuous mode
[  463.342425][ T1080] hsr_slave_1: left promiscuous mode
[  463.399964][ T1080] veth0_macvtap: left promiscuous mode
[  463.415317][ T1080] veth1_vlan: left allmulticast mode
[  463.423797][ T1080] veth1_vlan: left promiscuous mode
[  463.679422][ T1080] team0 (unregistering): Port device geneve1 removed
[  463.800619][ T1080] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[  463.810909][ T1080] macvlan0 (unregistering): left promiscuous mode
[  464.117273][ T1080] team0 (unregistering): Port device team_slave_1 removed
[  464.164275][ T1080] team0 (unregistering): Port device team_slave_0 removed
[  464.172749][ T5789] Bluetooth: hci0: command tx timeout
[  464.215192][ T1080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  464.224375][ T1080] bond_slave_1 (unregistering): left promiscuous mode
[  464.231873][ T1080] bond_slave_1 (unregistering): left allmulticast mode
[  464.274345][ T1080] bond0 (unregistering): (slave 
1
0û]þ5¯\P€): Releasing backup interface
[  464.284375][ T1080] û]þ5¯\P€ (unregistering): left promiscuous mode
[  464.291531][ T1080] û]þ5¯\P€ (unregistering): left allmulticast mode
[  464.740311][ T1080] bond0 (unregistering): Released all slaves
[  464.780804][T12573] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2290'.
[  465.243878][T12604] lo: entered promiscuous mode
[  465.543840][T12481] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  465.566135][T12481] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  465.602277][T12481] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  465.620922][T12481] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  465.762566][T12626] netlink: 209820 bytes leftover after parsing attributes in process `syz.7.2304'.
[  465.800884][T12621] syzkaller0: entered promiscuous mode
[  465.807766][T12621] syzkaller0: entered allmulticast mode
[  465.818849][T12626] netlink: 'syz.7.2304': attribute type 17 has an invalid length.
[  465.827751][T12626] netlink: 'syz.7.2304': attribute type 16 has an invalid length.
[  465.835924][T12626] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2304'.
[  465.865804][T12627] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  465.873953][T12627] batman_adv: batadv0: Removing interface: batadv_slave_0
[  465.904105][T12627] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  465.925562][T12627] batman_adv: batadv0: Removing interface: batadv_slave_1
[  466.016168][T12481] 8021q: adding VLAN 0 to HW filter on device bond0
[  466.054383][T12481] 8021q: adding VLAN 0 to HW filter on device team0
[  466.072985][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  466.080308][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  466.254236][ T5789] Bluetooth: hci0: command tx timeout
[  467.862237][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  467.869482][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  467.893316][T12637] team0: Port device team_slave_0 removed
[  467.902505][T12637] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  468.337534][ T5789] Bluetooth: hci0: command tx timeout
[  468.383143][T12481] 8021q: adding VLAN 0 to HW filter on device batadv0
[  468.484099][T12656] netlink: 'syz.7.2311': attribute type 2 has an invalid length.
[  468.505530][T12656] netlink: 'syz.7.2311': attribute type 8 has an invalid length.
[  468.515332][T12656] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2311'.
[  468.802177][T12673] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2317'.
[  468.835647][T12675] netlink: 'syz.6.2316': attribute type 10 has an invalid length.
[  468.848020][T12673] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  468.859985][T12673] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  468.885029][T12675] bond0: (slave wlan1): Releasing backup interface
[  468.909590][T12675] mac80211_hwsim hwsim15 wlan1: left promiscuous mode
[  468.929918][T12675] mac80211_hwsim hwsim15 wlan1: left allmulticast mode
[  469.022242][T12675] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode
[  469.052462][T12675] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode
[  469.072408][T12675] team0: Port device wlan1 added
[  469.121254][T12481] veth0_vlan: entered promiscuous mode
[  469.182729][T12481] veth1_vlan: entered promiscuous mode
[  469.290074][T12481] veth0_macvtap: entered promiscuous mode
[  469.303668][T12481] veth1_macvtap: entered promiscuous mode
[  469.352624][T12481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  469.364044][T12481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  469.386350][T12481] batman_adv: batadv0: Interface activated: batadv_slave_0
[  469.411091][T12481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  469.435516][T12481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  469.456908][T12481] batman_adv: batadv0: Interface activated: batadv_slave_1
[  469.484584][T12481] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  469.508402][T12481] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  469.520768][T12688] netlink: 'syz.7.2322': attribute type 1 has an invalid length.
[  469.529642][T12481] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  469.560977][T12481] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  469.630611][T12689] netlink: 126588 bytes leftover after parsing attributes in process `syz.6.2323'.
[  469.742429][T12690] netlink: 126588 bytes leftover after parsing attributes in process `syz.6.2323'.
[  469.915717][T11525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  469.931867][T11525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  470.061699][T11525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  470.084055][T11525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  470.250649][T12707] netlink: 539 bytes leftover after parsing attributes in process `syz.7.2329'.
[  470.499697][T12717] netlink: 'syz.7.2332': attribute type 3 has an invalid length.
[  470.518443][T12717] netlink: 13435 bytes leftover after parsing attributes in process `syz.7.2332'.
[  471.490135][   T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  471.501331][   T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  471.516909][   T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  471.526336][   T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  471.534112][   T50] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  471.542065][   T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  472.121839][T12454] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  472.337263][T12454] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  472.414252][T12736] chnl_net:caif_netlink_parms(): no params data found
[  472.541183][T12454] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  472.664709][T12454] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  472.917925][T12770] netlink: 'syz.6.2351': attribute type 29 has an invalid length.
[  473.085055][T12736] bridge0: port 1(bridge_slave_0) entered blocking state
[  473.092551][T12736] bridge0: port 1(bridge_slave_0) entered disabled state
[  473.100891][T12736] bridge_slave_0: entered allmulticast mode
[  473.109547][T12736] bridge_slave_0: entered promiscuous mode
[  473.120722][T12736] bridge0: port 2(bridge_slave_1) entered blocking state
[  473.129098][T12736] bridge0: port 2(bridge_slave_1) entered disabled state
[  473.136878][T12736] bridge_slave_1: entered allmulticast mode
[  473.145080][T12736] bridge_slave_1: entered promiscuous mode
[  473.153533][T12770] netlink: 'syz.6.2351': attribute type 29 has an invalid length.
[  473.179495][T12772] netlink: 'syz.6.2351': attribute type 29 has an invalid length.
[  473.311545][T12777] netlink: 'syz.6.2351': attribute type 29 has an invalid length.
[  473.398684][T12736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  473.434459][T12736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  473.620171][   T50] Bluetooth: hci4: command tx timeout
[  473.659265][T12736] team0: Port device team_slave_0 added
[  473.669109][T12736] team0: Port device team_slave_1 added
[  473.843251][T12736] batman_adv: batadv0: Adding interface: batadv_slave_0
[  473.855492][T12736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  473.944304][T12736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  473.992369][T12736] batman_adv: batadv0: Adding interface: batadv_slave_1
[  474.000521][T12736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  474.049223][T12736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  474.305338][T12736] hsr_slave_0: entered promiscuous mode
[  474.312405][T12736] hsr_slave_1: entered promiscuous mode
[  474.319291][T12736] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  474.329083][T12736] Cannot create hsr debugfs directory
[  474.884415][T12823] FAULT_INJECTION: forcing a failure.
[  474.884415][T12823] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  474.903080][T12823] CPU: 0 PID: 12823 Comm: syz.6.2368 Not tainted syzkaller #0
[  474.910604][T12823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  474.920696][T12823] Call Trace:
[  474.923989][T12823]  <TASK>
[  474.926935][T12823]  dump_stack_lvl+0x16c/0x230
[  474.931639][T12823]  ? show_regs_print_info+0x20/0x20
[  474.936959][T12823]  ? load_image+0x3b0/0x3b0
[  474.941489][T12823]  ? __might_fault+0xaa/0x120
[  474.946181][T12823]  ? __lock_acquire+0x7c80/0x7c80
[  474.951235][T12823]  should_fail_ex+0x39d/0x4d0
[  474.956026][T12823]  _copy_from_user+0x2f/0xe0
[  474.960660][T12823]  ___sys_recvmsg+0x12f/0x510
[  474.965367][T12823]  ? __sys_recvmsg+0x270/0x270
[  474.970155][T12823]  ? ksys_write+0x1c1/0x250
[  474.974683][T12823]  ? __fget_files+0x44a/0x4d0
[  474.979389][T12823]  __x64_sys_recvmsg+0x1f2/0x2c0
[  474.984353][T12823]  ? ___sys_recvmsg+0x510/0x510
[  474.989221][T12823]  ? lockdep_hardirqs_on+0x98/0x150
[  474.994455][T12823]  do_syscall_64+0x55/0xb0
[  474.998867][T12823]  ? clear_bhb_loop+0x40/0x90
[  475.003575][T12823]  ? clear_bhb_loop+0x40/0x90
[  475.008253][T12823]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  475.014175][T12823] RIP: 0033:0x7f38a1b8eba9
[  475.018586][T12823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  475.038201][T12823] RSP: 002b:00007f38a2a84038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  475.046653][T12823] RAX: ffffffffffffffda RBX: 00007f38a1dd6090 RCX: 00007f38a1b8eba9
[  475.054709][T12823] RDX: 0000000040000100 RSI: 0000200000000200 RDI: 0000000000000004
[  475.062697][T12823] RBP: 00007f38a2a84090 R08: 0000000000000000 R09: 0000000000000000
[  475.070684][T12823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  475.078685][T12823] R13: 00007f38a1dd6128 R14: 00007f38a1dd6090 R15: 00007fff20b99748
[  475.086669][T12823]  </TASK>
[  475.367654][T12829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2371'.
[  475.686422][   T50] Bluetooth: hci4: command tx timeout
[  475.911183][T12736] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  475.923165][T12736] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  475.955375][T12736] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  475.966535][T12736] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  476.394107][T12736] 8021q: adding VLAN 0 to HW filter on device bond0
[  476.471222][T12454] hsr_slave_0: left promiscuous mode
[  476.480486][T12454] hsr_slave_1: left promiscuous mode
[  476.491511][T12454] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  476.499249][T12454] batman_adv: batadv0: Removing interface: batadv_slave_0
[  476.516727][T12454] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  476.532318][T12454] batman_adv: batadv0: Removing interface: batadv_slave_1
[  476.675786][T12454] veth1_macvtap: left promiscuous mode
[  476.681437][T12454] veth0_macvtap: left promiscuous mode
[  477.173198][T12867] netlink: 'syz.4.2382': attribute type 3 has an invalid length.
[  477.182661][T12867] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2382'.
[  477.769954][   T50] Bluetooth: hci4: command tx timeout
[  478.837745][T12454] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[  479.119291][T12454] team0 (unregistering): Port device team_slave_1 removed
[  479.162227][T12454] team0 (unregistering): Port device C removed
[  479.207653][T12454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  479.250856][T12454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  479.727130][T12454] bond0 (unregistering): Released all slaves
[  479.762259][T12856] bridge0: port 5(dummy0) entered disabled state
[  479.768860][T12856] bridge0: port 3(bond0) entered disabled state
[  479.775672][T12856] bridge0: port 2(bridge_slave_1) entered disabled state
[  479.783030][T12856] bridge0: port 1(bridge_slave_0) entered disabled state
[  479.792792][T12856] bridge0: entered allmulticast mode
[  479.803691][T12858] bridge0: port 5(dummy0) entered disabled state
[  479.817506][T12858] bridge0: port 4(team0) entered disabled state
[  479.835057][T12858] bond0: left allmulticast mode
[  479.844214][T12858] bond_slave_0: left allmulticast mode
[  479.845918][   T50] Bluetooth: hci4: command tx timeout
[  479.867222][T12858] bond_slave_1: left allmulticast mode
[  479.876519][T12858] bridge0: port 3(bond0) entered disabled state
[  479.884804][T12858] bridge_slave_1: left allmulticast mode
[  479.891269][T12858] bridge_slave_1: left promiscuous mode
[  479.900669][T12858] bridge0: port 2(bridge_slave_1) entered disabled state
[  479.910102][T12858] bridge_slave_0: left allmulticast mode
[  479.917330][T12858] bridge_slave_0: left promiscuous mode
[  479.923211][T12858] bridge0: port 1(bridge_slave_0) entered disabled state
[  480.028220][T12736] 8021q: adding VLAN 0 to HW filter on device team0
[  480.060728][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  480.068000][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  480.113721][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  480.121037][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  480.185194][T12874] delete_channel: no stack
[  480.227213][T12874] delete_channel: no stack
[  480.704515][T12736] 8021q: adding VLAN 0 to HW filter on device batadv0
[  480.803022][T12736] veth0_vlan: entered promiscuous mode
[  480.831856][T12736] veth1_vlan: entered promiscuous mode
[  480.883452][T12736] veth0_macvtap: entered promiscuous mode
[  480.901932][T12736] veth1_macvtap: entered promiscuous mode
[  480.940199][T12736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  480.962767][T12736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  480.987038][T12736] batman_adv: batadv0: Interface activated: batadv_slave_0
[  481.020536][T12736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  481.068120][T12736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  481.108169][T12736] batman_adv: batadv0: Interface activated: batadv_slave_1
[  481.199220][T12736] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  481.211108][T12736] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  481.220409][T12736] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  481.239172][T12736] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  481.343180][T12454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  481.365274][T12454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  481.392471][T12454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  481.400762][T12454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  482.966374][T12952] netlink: 'syz.7.2412': attribute type 1 has an invalid length.
[  482.975009][T12952] netlink: 193500 bytes leftover after parsing attributes in process `syz.7.2412'.
[  487.797756][T12966] netlink: 'syz.7.2418': attribute type 10 has an invalid length.
[  487.846521][T12966] team0: Port device dummy0 added
[  488.647846][T12991] tap0: tun_chr_ioctl cmd 2148553947
[  489.032162][T13003] sit0: entered promiscuous mode
[  489.071756][T13003] sit0: entered allmulticast mode
[  489.716114][T13033] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2444'.
[  490.011216][T13046] sit0: entered promiscuous mode
[  490.021650][T13046] sit0: entered allmulticast mode
[  491.822276][T13098] netlink: 'syz.6.2469': attribute type 10 has an invalid length.
[  492.192092][T13120] netlink: 65055 bytes leftover after parsing attributes in process `syz.7.2477'.
[  493.085336][   T50] Bluetooth: hci0: unknown advertising packet type: 0xff
[  495.744198][T13245] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2523'.
[  496.197058][T13257] netlink: 'syz.4.2529': attribute type 10 has an invalid length.
[  496.214844][T13257] team0: Device ipvlan1 failed to register rx_handler
[  496.528119][T13271] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2536'.
[  496.540380][T13271] netlink: 'syz.4.2536': attribute type 27 has an invalid length.
[  496.550656][T13271] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2536'.
[  496.901736][T13289] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2542'.
[  497.815271][T13327] netlink: 'syz.7.2556': attribute type 29 has an invalid length.
[  497.859034][T13327] netlink: 'syz.7.2556': attribute type 29 has an invalid length.
[  497.887523][T13327] netlink: 'syz.7.2556': attribute type 29 has an invalid length.
[  499.755074][T13385] netlink: 192436 bytes leftover after parsing attributes in process `syz.4.2579'.
[  499.810134][T13385] openvswitch: netlink: Duplicate key (type 0).
[  501.691174][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  501.697800][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  506.455680][T13417] netlink: 'syz.6.2591': attribute type 10 has an invalid length.
[  506.487984][T13417] team0: left promiscuous mode
[  506.494813][T13417] C: left promiscuous mode
[  506.509936][T13417] team_slave_1: left promiscuous mode
[  506.515647][T13417] mac80211_hwsim hwsim15 wlan1: left promiscuous mode
[  506.553078][T13417] team0: left allmulticast mode
[  506.563944][T13417] C: left allmulticast mode
[  506.574066][T13417] team_slave_1: left allmulticast mode
[  506.593150][T13417] mac80211_hwsim hwsim15 wlan1: left allmulticast mode
[  506.628897][T13417] 8021q: adding VLAN 0 to HW filter on device team0
[  506.651592][T13417] team0: entered promiscuous mode
[  506.672153][T13417] C: entered promiscuous mode
[  506.732964][T13417] team_slave_1: entered promiscuous mode
[  506.739506][T13417] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode
[  506.760863][T13417] bond0: (slave team0): Enslaving as an active interface with an up link
[  508.077656][T13460] netlink: 'syz.1.2607': attribute type 3 has an invalid length.
[  508.107529][T13460] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2607'.
[  508.373298][T13477] netlink: 201392 bytes leftover after parsing attributes in process `syz.7.2614'.
[  508.714381][T13488] netlink: 15478 bytes leftover after parsing attributes in process `syz.6.2617'.
[  508.772945][T13488] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2617'.
[  509.313526][T13504] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2627'.
[  509.327178][T13504] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2627'.
[  509.357382][T13504] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2627'.
[  509.438316][T13515] netlink: 'syz.4.2627': attribute type 4 has an invalid length.
[  510.359981][T13549] syz.7.2643[13549] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  510.360203][T13549] syz.7.2643[13549] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  511.754137][T13597] netlink: 'syz.1.2663': attribute type 21 has an invalid length.
[  511.799242][T13597] netlink: 'syz.1.2663': attribute type 20 has an invalid length.
[  513.888504][T13610] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2666'.
[  513.912909][T13610] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2666'.
[  513.950721][T13605] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2666'.
[  513.983965][T13610] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2666'.
[  514.308816][T13628] netlink: 'syz.6.2676': attribute type 1 has an invalid length.
[  514.318176][T13628] netlink: 181400 bytes leftover after parsing attributes in process `syz.6.2676'.
[  514.717609][T13646] netlink: 'syz.1.2682': attribute type 4 has an invalid length.
[  514.742915][T13646] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2682'.
[  514.788059][T13646] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  515.470870][T13673] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2692'.
[  515.529448][T13672] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2692'.
[  515.782596][T13681] netlink: 'syz.1.2696': attribute type 16 has an invalid length.
[  515.812632][T13681] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2696'.
[  516.948868][T13697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  517.375829][T13724] pim6reg1: entered promiscuous mode
[  517.382315][T13724] pim6reg1: entered allmulticast mode
[  521.578013][T13822] netlink: 'syz.7.2748': attribute type 27 has an invalid length.
[  521.586181][T13822] netlink: 164 bytes leftover after parsing attributes in process `syz.7.2748'.
[  521.751100][T13829] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2751'.
[  522.210994][T13845] netlink: 'syz.4.2754': attribute type 21 has an invalid length.
[  522.242487][T13845] netlink: 'syz.4.2754': attribute type 11 has an invalid length.
[  522.622708][T13864] netlink: 'syz.7.2764': attribute type 21 has an invalid length.
[  522.631111][T13864] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  522.638441][T13864] IPv6: NLM_F_CREATE should be set when creating new route
[  522.645818][T13864] IPv6: NLM_F_CREATE should be set when creating new route
[  522.653082][T13864] IPv6: NLM_F_CREATE should be set when creating new route
[  522.892573][T13873] netlink: 'syz.4.2768': attribute type 1 has an invalid length.
[  522.901452][T13873] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2768'.
[  524.806888][T13932] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  524.819094][T13932] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  524.829303][T13932] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  524.858703][T13932] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  524.880858][T13932] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  524.895660][T13932] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  525.141236][ T1080] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.353146][ T1080] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.399592][T13943] netlink: 'syz.1.2795': attribute type 4 has an invalid length.
[  525.534121][ T1080] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.652320][T13958] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.2801'.
[  525.728104][ T1080] bond0: (slave netdevsim0): Releasing backup interface
[  525.759295][ T1080] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.988858][T13956] netlink: 'syz.1.2800': attribute type 21 has an invalid length.
[  526.020017][T13956] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2800'.
[  526.050096][T13930] chnl_net:caif_netlink_parms(): no params data found
[  526.431216][T13930] bridge0: port 1(bridge_slave_0) entered blocking state
[  526.439132][T13930] bridge0: port 1(bridge_slave_0) entered disabled state
[  526.446553][T13930] bridge_slave_0: entered allmulticast mode
[  526.453941][T13930] bridge_slave_0: entered promiscuous mode
[  526.551240][T13930] bridge0: port 2(bridge_slave_1) entered blocking state
[  526.567029][T13930] bridge0: port 2(bridge_slave_1) entered disabled state
[  526.574406][T13930] bridge_slave_1: entered allmulticast mode
[  526.616555][T13930] bridge_slave_1: entered promiscuous mode
[  526.758393][T13930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  526.788842][T13930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  526.973174][T13932] Bluetooth: hci1: command tx timeout
[  527.044856][T13930] team0: Port device team_slave_0 added
[  527.064076][T13930] team0: Port device team_slave_1 added
[  527.159487][T13999] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.2815'.
[  527.262658][T13930] batman_adv: batadv0: Adding interface: batadv_slave_0
[  527.269759][T13930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  527.297999][T13930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  527.356118][T14006] netlink: 'syz.4.2818': attribute type 10 has an invalid length.
[  527.373142][T14006] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2818'.
[  527.382318][T14006] bond0: entered promiscuous mode
[  527.392575][T14006] bond_slave_0: entered promiscuous mode
[  527.400198][T14006] bond_slave_1: entered promiscuous mode
[  527.411650][T14006] bridge0: port 3(bond0) entered blocking state
[  527.423662][T14006] bridge0: port 3(bond0) entered disabled state
[  527.435086][T14006] bond0: entered allmulticast mode
[  527.440432][T14006] bond_slave_0: entered allmulticast mode
[  527.446691][T14006] bond_slave_1: entered allmulticast mode
[  527.454375][T14006] bridge0: port 3(bond0) entered blocking state
[  527.460813][T14006] bridge0: port 3(bond0) entered forwarding state
[  527.489128][T13930] batman_adv: batadv0: Adding interface: batadv_slave_1
[  527.496301][T13930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  527.522836][T13930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  527.639301][T13930] hsr_slave_0: entered promiscuous mode
[  527.656648][T13930] hsr_slave_1: entered promiscuous mode
[  527.669710][T13930] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  527.685887][T13930] Cannot create hsr debugfs directory
[  527.695225][T14015] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.2821'.
[  528.426508][ T1080] hsr_slave_0: left promiscuous mode
[  528.464651][ T1080] hsr_slave_1: left promiscuous mode
[  528.637228][ T1080] veth1_macvtap: left promiscuous mode
[  528.681110][ T1080] veth0_macvtap: left promiscuous mode
[  528.712372][ T1080] veth1_vlan: left allmulticast mode
[  528.725867][ T1080] veth1_vlan: left promiscuous mode
[  529.046130][T13932] Bluetooth: hci1: command tx timeout
[  529.513368][ T1080] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[  529.890970][ T1080] team0 (unregistering): Port device team_slave_1 removed
[  529.987416][ T1080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  530.040985][ T1080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  530.280932][ T1080] team0 (unregistering): Port device dummy0 removed
[  530.411205][ T1080] bond0 (unregistering): (slave team0): Releasing backup interface
[  530.548474][ T1080] bond0 (unregistering): Released all slaves
[  531.087678][T14052] syzkaller0: entered promiscuous mode
[  531.093302][T14052] syzkaller0: entered allmulticast mode
[  531.125800][T13932] Bluetooth: hci1: command tx timeout
[  533.206059][T13932] Bluetooth: hci1: command tx timeout
[  533.240653][T13930] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  533.276085][T13930] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  533.322483][T13930] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  533.353912][T13930] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  533.600514][T13930] 8021q: adding VLAN 0 to HW filter on device bond0
[  533.642174][T13930] 8021q: adding VLAN 0 to HW filter on device team0
[  533.666262][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[  533.673513][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[  533.725219][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[  533.732424][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[  535.006214][T14109] Dead loop on virtual device ip6_vti0, fix it urgently!
[  535.347241][T14114] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2858'.
[  536.431593][T14114] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2858'.
[  536.652384][T13930] 8021q: adding VLAN 0 to HW filter on device batadv0
[  537.264723][T13930] veth0_vlan: entered promiscuous mode
[  537.280197][T13930] veth1_vlan: entered promiscuous mode
[  537.334909][T13930] veth0_macvtap: entered promiscuous mode
[  537.360249][T13930] veth1_macvtap: entered promiscuous mode
[  537.402512][T13930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  537.428729][T13930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  537.451985][T13930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  537.462636][T13930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  537.475058][T13930] batman_adv: batadv0: Interface activated: batadv_slave_0
[  537.487873][T13930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  537.498665][T13930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  537.510768][T13930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  537.521465][T13930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  537.533827][T13930] batman_adv: batadv0: Interface activated: batadv_slave_1
[  537.579998][T13930] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  537.602699][T13930] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  537.616696][T13930] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  537.625682][T13930] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  537.768058][  T128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  537.784266][  T128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  537.997066][ T1080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  538.019527][ T1080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  538.296499][T14188] netlink: 'syz.1.2881': attribute type 2 has an invalid length.
[  538.315755][T14188] netlink: 'syz.1.2881': attribute type 8 has an invalid length.
[  538.333720][T14188] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2881'.
[  538.378890][T14192] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2881'.
[  538.437891][T14188] netlink: 'syz.1.2881': attribute type 21 has an invalid length.
[  539.272773][   T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  539.282631][   T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  539.300821][   T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  539.316127][   T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  539.323893][   T50] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  539.335151][   T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  539.533400][   T42] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  539.660998][   T42] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  539.678030][T14228] netlink: 'syz.4.2898': attribute type 6 has an invalid length.
[  539.688603][T14228] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2898'.
[  539.770491][   T42] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  539.820777][T14235] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2901'.
[  539.834038][T14235] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  539.949009][   T42] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  539.995313][T14238] sit0: entered promiscuous mode
[  540.027414][T14238] sit0: entered allmulticast mode
[  540.141800][T14214] chnl_net:caif_netlink_parms(): no params data found
[  540.263142][T14244] netlink: 'syz.4.2904': attribute type 10 has an invalid length.
[  540.500612][T14244] team0: Port device wlan1 added
[  541.319673][T14267] bridge0: port 2(bridge_slave_1) entered disabled state
[  541.327272][T14267] bridge0: port 1(bridge_slave_0) entered disabled state
[  541.339762][T14267] bridge0: entered promiscuous mode
[  541.353743][T14268] bridge_slave_1: left allmulticast mode
[  541.360390][T14268] bridge_slave_1: left promiscuous mode
[  541.366087][   T50] Bluetooth: hci2: command tx timeout
[  541.373339][T14268] bridge0: port 2(bridge_slave_1) entered disabled state
[  541.383797][T14268] bridge_slave_0: left allmulticast mode
[  541.390419][T14268] bridge_slave_0: left promiscuous mode
[  541.402404][T14268] bridge0: port 1(bridge_slave_0) entered disabled state
[  541.490704][T14214] bridge0: port 1(bridge_slave_0) entered blocking state
[  541.503925][T14214] bridge0: port 1(bridge_slave_0) entered disabled state
[  541.511857][T14214] bridge_slave_0: entered allmulticast mode
[  541.525804][T14214] bridge_slave_0: entered promiscuous mode
[  541.540471][T14214] bridge0: port 2(bridge_slave_1) entered blocking state
[  541.547945][T14214] bridge0: port 2(bridge_slave_1) entered disabled state
[  541.555146][T14214] bridge_slave_1: entered allmulticast mode
[  541.564186][T14214] bridge_slave_1: entered promiscuous mode
[  541.661633][T14278] bridge0: port 3(bond0) entered disabled state
[  541.668367][T14278] bridge0: port 2(bridge_slave_1) entered disabled state
[  541.675995][T14278] bridge0: port 1(bridge_slave_0) entered disabled state
[  541.690405][T14278] bridge0: entered allmulticast mode
[  541.731100][T14277] bridge0: port 3(bond0) entered blocking state
[  541.738555][T14277] bridge0: port 3(bond0) entered forwarding state
[  541.746640][T14277] bridge0: port 2(bridge_slave_1) entered blocking state
[  541.754564][T14277] bridge0: port 2(bridge_slave_1) entered forwarding state
[  541.763400][T14277] bridge0: port 1(bridge_slave_0) entered blocking state
[  541.771479][T14277] bridge0: port 1(bridge_slave_0) entered forwarding state
[  541.793825][T14277] bridge0: entered promiscuous mode
[  541.826919][T14280] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2914'.
[  541.847127][T14280] tc_dump_action: action bad kind
[  541.931732][T14214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  541.953334][T14214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  542.214736][T14214] team0: Port device team_slave_0 added
[  542.266968][T14214] team0: Port device team_slave_1 added
[  542.388671][T14214] batman_adv: batadv0: Adding interface: batadv_slave_0
[  542.408705][T14214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  542.443748][T14214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  542.526418][T14214] batman_adv: batadv0: Adding interface: batadv_slave_1
[  542.536825][T14214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  542.583286][T14214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  543.445755][   T50] Bluetooth: hci2: command tx timeout
[  545.525649][   T50] Bluetooth: hci2: command tx timeout
[  545.642121][T14214] hsr_slave_0: entered promiscuous mode
[  545.669746][T14214] hsr_slave_1: entered promiscuous mode
[  545.696397][T14214] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  545.704827][T14214] Cannot create hsr debugfs directory
[  546.670694][   T42] 
[  546.673073][   T42] ======================================================
[  546.680094][   T42] WARNING: possible circular locking dependency detected
[  546.687133][   T42] syzkaller #0 Not tainted
[  546.691565][   T42] ------------------------------------------------------
[  546.698659][   T42] kworker/u4:2/42 is trying to acquire lock:
[  546.704650][   T42] ffff88802e36cd00 (team->team_lock_key#7){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0
[  546.714275][   T42] 
[  546.714275][   T42] but task is already holding lock:
[  546.721639][   T42] ffff88807c8b8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680
[  546.732006][   T42] 
[  546.732006][   T42] which lock already depends on the new lock.
[  546.732006][   T42] 
[  546.742403][   T42] 
[  546.742403][   T42] the existing dependency chain (in reverse order) is:
[  546.751496][   T42] 
[  546.751496][   T42] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}:
[  546.759226][   T42]        __mutex_lock+0x129/0xcc0
[  546.764260][   T42]        ieee80211_open+0x144/0x200
[  546.769546][   T42]        __dev_open+0x2bc/0x430
[  546.774439][   T42]        dev_open+0xab/0x170
[  546.779111][   T42]        team_add_slave+0xae7/0x2660
[  546.784391][   T42]        do_setlink+0xe14/0x3fb0
[  546.789410][   T42]        rtnl_newlink+0x175b/0x2020
[  546.794598][   T42]        rtnetlink_rcv_msg+0x7c7/0xf10
[  546.800051][   T42]        netlink_rcv_skb+0x216/0x480
[  546.805350][   T42]        netlink_unicast+0x751/0x8d0
[  546.810629][   T42]        netlink_sendmsg+0x8c1/0xbe0
[  546.815923][   T42]        ____sys_sendmsg+0x5bf/0x950
[  546.821217][   T42]        ___sys_sendmsg+0x220/0x290
[  546.826408][   T42]        __se_sys_sendmsg+0x1a5/0x270
[  546.831865][   T42]        do_syscall_64+0x55/0xb0
[  546.836814][   T42]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  546.843330][   T42] 
[  546.843330][   T42] -> #0 (team->team_lock_key#7){+.+.}-{3:3}:
[  546.851500][   T42]        __lock_acquire+0x2ddb/0x7c80
[  546.856952][   T42]        lock_acquire+0x197/0x410
[  546.861963][   T42]        __mutex_lock+0x129/0xcc0
[  546.866984][   T42]        team_del_slave+0x32/0x1c0
[  546.872090][   T42]        team_device_event+0x28d/0xa20
[  546.877545][   T42]        notifier_call_chain+0x197/0x390
[  546.883258][   T42]        unregister_netdevice_many_notify+0xf36/0x1810
[  546.890122][   T42]        unregister_netdevice_queue+0x324/0x360
[  546.896355][   T42]        _cfg80211_unregister_wdev+0x16b/0x580
[  546.902504][   T42]        ieee80211_remove_interfaces+0x496/0x680
[  546.908827][   T42]        ieee80211_unregister_hw+0x5d/0x2a0
[  546.914713][   T42]        mac80211_hwsim_del_radio+0x274/0x450
[  546.920772][   T42]        hwsim_exit_net+0x585/0x640
[  546.925968][   T42]        cleanup_net+0x6f4/0xb90
[  546.930916][   T42]        process_scheduled_works+0xa45/0x15b0
[  546.936973][   T42]        worker_thread+0xa55/0xfc0
[  546.942115][   T42]        kthread+0x2fa/0x390
[  546.946729][   T42]        ret_from_fork+0x48/0x80
[  546.951662][   T42]        ret_from_fork_asm+0x11/0x20
[  546.956951][   T42] 
[  546.956951][   T42] other info that might help us debug this:
[  546.956951][   T42] 
[  546.967261][   T42]  Possible unsafe locking scenario:
[  546.967261][   T42] 
[  546.974717][   T42]        CPU0                    CPU1
[  546.980077][   T42]        ----                    ----
[  546.985428][   T42]   lock(&rdev->wiphy.mtx);
[  546.989921][   T42]                                lock(team->team_lock_key#7);
[  546.997376][   T42]                                lock(&rdev->wiphy.mtx);
[  547.004621][   T42]   lock(team->team_lock_key#7);
[  547.009590][   T42] 
[  547.009590][   T42]  *** DEADLOCK ***
[  547.009590][   T42] 
[  547.017821][   T42] 5 locks held by kworker/u4:2/42:
[  547.022921][   T42]  #0: ffff888017873938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0
[  547.033889][   T42]  #1: ffffc90000b2fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0
[  547.044407][   T42]  #2: ffffffff8dfafad0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x136/0xb90
[  547.053811][   T42]  #3: ffffffff8dfbc908 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0
[  547.063653][   T42]  #4: ffff88807c8b8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680
[  547.074551][   T42] 
[  547.074551][   T42] stack backtrace:
[  547.080435][   T42] CPU: 1 PID: 42 Comm: kworker/u4:2 Not tainted syzkaller #0
[  547.087969][   T42] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  547.098015][   T42] Workqueue: netns cleanup_net
[  547.102781][   T42] Call Trace:
[  547.106048][   T42]  <TASK>
[  547.108970][   T42]  dump_stack_lvl+0x16c/0x230
[  547.113644][   T42]  ? load_image+0x3b0/0x3b0
[  547.118138][   T42]  ? show_regs_print_info+0x20/0x20
[  547.123333][   T42]  ? print_circular_bug+0x12b/0x1a0
[  547.128546][   T42]  check_noncircular+0x2bd/0x3c0
[  547.133508][   T42]  ? print_deadlock_bug+0x5d0/0x5d0
[  547.138695][   T42]  ? lockdep_lock+0xe0/0x220
[  547.143274][   T42]  ? perf_trace_lock_acquire+0xfb/0x3e0
[  547.148813][   T42]  ? _find_first_zero_bit+0xd3/0x100
[  547.154092][   T42]  __lock_acquire+0x2ddb/0x7c80
[  547.158942][   T42]  ? verify_lock_unused+0x140/0x140
[  547.164126][   T42]  ? perf_trace_lock_acquire+0xfb/0x3e0
[  547.169763][   T42]  ? trace_event_raw_event_lock_acquire+0x2a0/0x2a0
[  547.176347][   T42]  ? perf_trace_lock_acquire+0xfb/0x3e0
[  547.181889][   T42]  lock_acquire+0x197/0x410
[  547.186381][   T42]  ? team_del_slave+0x32/0x1c0
[  547.191136][   T42]  ? __might_sleep+0xe0/0xe0
[  547.195893][   T42]  ? read_lock_is_recursive+0x20/0x20
[  547.201256][   T42]  __mutex_lock+0x129/0xcc0
[  547.205756][   T42]  ? team_del_slave+0x32/0x1c0
[  547.210531][   T42]  ? __lock_acquire+0x7c80/0x7c80
[  547.215563][   T42]  ? rcu_is_watching+0x15/0xb0
[  547.220314][   T42]  ? trace_contention_end+0x39/0xe0
[  547.225507][   T42]  ? __mutex_lock+0x304/0xcc0
[  547.230177][   T42]  ? team_del_slave+0x32/0x1c0
[  547.234928][   T42]  ? mutex_lock_nested+0x20/0x20
[  547.239881][   T42]  ? bond_netdev_event+0xe1/0xef0
[  547.244905][   T42]  ? __mutex_unlock_slowpath+0x1a2/0x6a0
[  547.250703][   T42]  ? bond_ipsec_offload_ok+0x410/0x410
[  547.256161][   T42]  team_del_slave+0x32/0x1c0
[  547.260768][   T42]  team_device_event+0x28d/0xa20
[  547.265711][   T42]  notifier_call_chain+0x197/0x390
[  547.270822][   T42]  unregister_netdevice_many_notify+0xf36/0x1810
[  547.277150][   T42]  ? lock_chain_count+0x20/0x20
[  547.281996][   T42]  ? unregister_netdevice_many+0x20/0x20
[  547.287623][   T42]  ? kernfs_remove_by_name_ns+0x117/0x150
[  547.293338][   T42]  ? __lock_acquire+0x7c80/0x7c80
[  547.298356][   T42]  unregister_netdevice_queue+0x324/0x360
[  547.304160][   T42]  ? list_netdevice+0x730/0x730
[  547.309088][   T42]  ? kernfs_remove_by_name_ns+0x117/0x150
[  547.314793][   T42]  _cfg80211_unregister_wdev+0x16b/0x580
[  547.320420][   T42]  ieee80211_remove_interfaces+0x496/0x680
[  547.326219][   T42]  ? ieee80211_do_stop+0x1db0/0x1db0
[  547.331536][   T42]  ? rcu_is_watching+0x15/0xb0
[  547.336299][   T42]  ieee80211_unregister_hw+0x5d/0x2a0
[  547.341668][   T42]  mac80211_hwsim_del_radio+0x274/0x450
[  547.347205][   T42]  ? rhashtable_remove_fast+0xbf0/0xbf0
[  547.352742][   T42]  hwsim_exit_net+0x585/0x640
[  547.357411][   T42]  ? hwsim_init_net+0x90/0x90
[  547.362074][   T42]  ? __ip_vs_dev_cleanup_batch+0x238/0x250
[  547.367872][   T42]  cleanup_net+0x6f4/0xb90
[  547.372281][   T42]  ? ops_free_list+0x3b0/0x3b0
[  547.377040][   T42]  ? _raw_spin_unlock_irq+0x23/0x50
[  547.382271][   T42]  ? process_scheduled_works+0x957/0x15b0
[  547.387999][   T42]  ? process_scheduled_works+0x957/0x15b0
[  547.393736][   T42]  process_scheduled_works+0xa45/0x15b0
[  547.399304][   T42]  ? assign_work+0x400/0x400
[  547.403905][   T42]  ? assign_work+0x39e/0x400
[  547.408517][   T42]  worker_thread+0xa55/0xfc0
[  547.413108][   T42]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[  547.419080][   T42]  ? _raw_spin_unlock+0x40/0x40
[  547.423919][   T42]  ? _raw_spin_unlock_irqrestore+0x86/0x110
[  547.429811][   T42]  kthread+0x2fa/0x390
[  547.433879][   T42]  ? pr_cont_work+0x560/0x560
[  547.438554][   T42]  ? kthread_blkcg+0xd0/0xd0
[  547.443145][   T42]  ret_from_fork+0x48/0x80
[  547.447573][   T42]  ? kthread_blkcg+0xd0/0xd0
[  547.452173][   T42]  ret_from_fork_asm+0x11/0x20
[  547.457030][   T42]  </TASK>
[  547.462567][   T42] mac80211_hwsim hwsim15 wlan1 (unregistering): left promiscuous mode
[  547.478476][   T42] team0: Port device wlan1 removed
[  547.525767][T14346] wg2: entered promiscuous mode
[  547.546923][T14346] wg2: entered allmulticast mode
[  547.605506][   T50] Bluetooth: hci2: command tx timeout
[  547.607171][T14345] syzkaller0: entered promiscuous mode
[  547.616536][T14345] syzkaller0: entered allmulticast mode
[  547.642644][T14345] veth1_macvtap: left promiscuous mode
[  547.662064][   T42] hsr_slave_0: left promiscuous mode
[  547.668257][   T42] hsr_slave_1: left promiscuous mode
[  547.681052][   T42] veth1_macvtap: left allmulticast mode
[  547.690225][   T42] veth1_macvtap: left promiscuous mode
[  547.698896][   T42] veth0_macvtap: left promiscuous mode
[  547.704698][   T42] veth1_vlan: left allmulticast mode
[  547.710916][   T42] veth1_vlan: left promiscuous mode
[  547.717640][   T42] veth0_vlan: left promiscuous mode
[  547.823125][   T42] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[  547.914573][   T42] team_slave_1 (unregistering): left promiscuous mode
[  547.925952][   T42] team0 (unregistering): Port device team_slave_1 removed
[  547.951815][   T42] C (unregistering): left promiscuous mode
[  547.958273][   T42] team0 (unregistering): Port device C removed
[  547.970328][   T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  547.979400][   T42] bond_slave_1 (unregistering): left promiscuous mode
[  547.990763][   T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  547.999551][   T42] bond_slave_0 (unregistering): left promiscuous mode
[  548.182873][   T42] bond0 (unregistering): (slave team0): Releasing backup interface
[  548.191535][   T42] team0 (unregistering): left promiscuous mode
[  548.212107][   T42] bond0 (unregistering): Released all slaves
[  548.304977][T14214] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  548.323490][T14214] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  548.339292][T14214] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  548.359552][T14214] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  548.430478][T14214] 8021q: adding VLAN 0 to HW filter on device bond0
[  548.449359][T14214] 8021q: adding VLAN 0 to HW filter on device team0
[  548.461049][T11524] bridge0: port 1(bridge_slave_0) entered blocking state
[  548.468204][T11524] bridge0: port 1(bridge_slave_0) entered forwarding state
[  548.481294][T10814] bridge0: port 2(bridge_slave_1) entered blocking state
[  548.488816][T10814] bridge0: port 2(bridge_slave_1) entered forwarding state
[  548.669207][T14214] 8021q: adding VLAN 0 to HW filter on device batadv0
[  548.814825][T14214] veth0_vlan: entered promiscuous mode
[  548.825202][T14214] veth1_vlan: entered promiscuous mode
[  548.845223][T14214] veth0_macvtap: entered promiscuous mode
[  548.854208][T14214] veth1_macvtap: entered promiscuous mode
[  548.868776][T14214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  548.880882][T14214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  548.891105][T14214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  548.901978][T14214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  548.912091][T14214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  548.922701][T14214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  548.934074][T14214] batman_adv: batadv0: Interface activated: batadv_slave_0
[  548.947157][T14214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  548.957709][T14214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  548.968684][T14214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  548.979136][T14214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  548.989066][T14214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  548.999612][T14214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  549.010754][T14214] batman_adv: batadv0: Interface activated: batadv_slave_1
[  549.021348][T14214] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  549.030324][T14214] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  549.039144][T14214] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  549.049073][T14214] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  549.077203][T14214] ieee80211 phy32: Selected rate control algorithm 'minstrel_ht'
[  549.097225][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  549.098821][T14214] ieee80211 phy33: Selected rate control algorithm 'minstrel_ht'
[  549.110183][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  549.131178][T11527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  549.139762][T11527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50