last executing test programs:

1m20.81021171s ago: executing program 3 (id=589):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0x1400, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x40)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff02c}, {0x6}]})
recvmsg(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0xffffffff}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff], 0x0, 0x10, 0x4, @void, @value}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89b1, &(0x7f0000000000)={'vlan0\x00', @local})
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90624fc60", 0x14}], 0x1}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x400, 0x0)
ioctl$TUNSETTXFILTER(r2, 0x400454d1, 0x0)
close(r1)

1m6.579131224s ago: executing program 3 (id=589):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0x1400, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x40)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff02c}, {0x6}]})
recvmsg(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0xffffffff}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff], 0x0, 0x10, 0x4, @void, @value}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89b1, &(0x7f0000000000)={'vlan0\x00', @local})
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90624fc60", 0x14}], 0x1}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x400, 0x0)
ioctl$TUNSETTXFILTER(r2, 0x400454d1, 0x0)
close(r1)

47.752175342s ago: executing program 3 (id=589):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0x1400, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x40)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff02c}, {0x6}]})
recvmsg(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0xffffffff}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff], 0x0, 0x10, 0x4, @void, @value}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89b1, &(0x7f0000000000)={'vlan0\x00', @local})
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90624fc60", 0x14}], 0x1}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x400, 0x0)
ioctl$TUNSETTXFILTER(r2, 0x400454d1, 0x0)
close(r1)

35.066393843s ago: executing program 3 (id=589):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0x1400, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x40)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff02c}, {0x6}]})
recvmsg(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0xffffffff}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff], 0x0, 0x10, 0x4, @void, @value}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89b1, &(0x7f0000000000)={'vlan0\x00', @local})
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90624fc60", 0x14}], 0x1}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x400, 0x0)
ioctl$TUNSETTXFILTER(r2, 0x400454d1, 0x0)
close(r1)

19.588349336s ago: executing program 3 (id=589):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0x1400, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x40)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff02c}, {0x6}]})
recvmsg(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0xffffffff}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff], 0x0, 0x10, 0x4, @void, @value}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89b1, &(0x7f0000000000)={'vlan0\x00', @local})
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90624fc60", 0x14}], 0x1}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x400, 0x0)
ioctl$TUNSETTXFILTER(r2, 0x400454d1, 0x0)
close(r1)

11.378458297s ago: executing program 0 (id=2411):
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x12, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x8, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0)
mkdirat$cgroup(r3, &(0x7f0000000100)='syz0\x00', 0x1ff)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00')
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x9ba68ab93330003d, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff, @void, @value}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000300)=0x1)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfdef)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"})

10.281108183s ago: executing program 0 (id=2418):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='mem_disconnect\x00', r0}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0x9, 0x2e}, 0x0, 0x0, 0x3, 0x8, 0x80000001, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000002c0)="ae24a21f9a824666f9acf0e0163f", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ceb71c0010ec90db133c22a690ae7080000000000040875b0089"], 0xfe1b)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x0, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000), 0x62)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={0x1, 0x58, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x10)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0), 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r0, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000800)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2000000000000357, 0x6, &(0x7f0000000840)=[0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r7=>0x0, 0x77, &(0x7f00000008c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0x7d, 0x8, 0x8, &(0x7f0000000980)}}, 0x10)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b80)='memory.current\x00', 0x0, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000003000000040001000500000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000bc0)={0x0, 0xae5, 0x18}, 0xc)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000d40)="9301a099ec6566adaa5ff43d3e734a3e8c010000805592a478567802000000000000009cc6329059fcccb9cdc98c1de6c3930cda92565749b99068ab0dfc7aeff23650030f1f4ced996f7576507dc88b80bd4b51f00edc5f5182b1ef4e73402fca127d0efda116630724e742721babfd0ab8edf47bdec5721fad482003527adf158ea80d3bb98b6891a8e5fd1992887d64b9ee7688c423168079ddd6495e70ea3b513341050000000000000e120ce3fbaa3f969c8f2b0000b32b", &(0x7f00000009c0)="8a8fb62927d0161439ba3f08acbee7f53716b311e588c0e0", 0x1000, 0xffffffffffffffff, 0x4}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001d40)={r10, &(0x7f0000001b80), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x8, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="6e317d3645d39de600000000010000001811ad86", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000008520000005000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x1000, 0x25, &(0x7f0000000500)=""/37, 0x41100, 0x40, '\x00', r5, @cgroup_skb, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000007c0)={0x0, 0xe, 0x9, 0xfffffffd}, 0x10, r7, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[r8, r9, r0, r10], 0x0, 0x10, 0x9c, @void, @value}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r11=>0xffffffffffffffff})
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1200000024000000040000000200000000000000", @ANYRES32=r8, @ANYBLOB="0000000000002600edf600"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYRES64=r7, @ANYRES16=r8], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r12}, &(0x7f0000000700), &(0x7f0000000740)=r11}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r12, &(0x7f0000000380)="09c2565fe5b9624c7dc874b13b3216ee476d29d6160bcad6ff2bb37b"}, 0x20)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080))
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0x800}, 0x8)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000140)={r4, r0})
perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x9900000, 0x0, 0x0, 0x0, 0x0, 0x0)

9.911063012s ago: executing program 0 (id=2422):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000000000001000850000000f000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94)
r0 = perf_event_open$cgroup(&(0x7f0000000400)={0x1, 0x80, 0x3, 0x9a, 0x3, 0x68, 0x0, 0xd5, 0x5024, 0x9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000340), 0x2}, 0x100000, 0x5, 0x8, 0x8, 0x200, 0x4, 0x200, 0x0, 0x8, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0xfffffffffffffffe, 0x9}, 0x14185, 0x20032, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0xfffffffc, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, r0, 0x9)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000800"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYRES64=r3], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000), 0x8)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r4}, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
socketpair(0x1, 0x1, 0x0, 0x0)
r6 = socket$kcm(0x21, 0x2, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x5452, 0x0)
setsockopt$sock_attach_bpf(r6, 0x1, 0x7, &(0x7f0000000040), 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x80000002}, 0x240, 0xc8, 0x0, 0x6, 0x9}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x9, 0x8, 0x0, 0x0, 0x0, 0x81, 0x8ca46, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ada}, 0x40, 0x8, 0x0, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0xfffffffd, 0x0, 0x80}, 0x0, 0x2, r1, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x0, 0x400c000}, 0x4008001)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080))

9.141841089s ago: executing program 0 (id=2429):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r2}, &(0x7f0000000680), &(0x7f00000006c0)='%pK    \x00'}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x37)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="3504000040000511d25a35400c00020001ffe42037153e370c04018006041000450000002a560000e7ff00000000", 0x2e}, {&(0x7f0000000180)="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"/1042, 0x412}], 0x2}, 0x10049014)

9.089009269s ago: executing program 1 (id=2430):
close(0xffffffffffffffff)
r0 = getpid()
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x80088, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x7fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r1}, 0x8)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f0000000580)}, 0x10)
perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x99, 0x6, 0x0, 0x2, 0x0, 0x80, 0x41000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff91, 0xfffffffffffffff8}, 0x13fa0, 0x1003, 0x0, 0x0, 0x0, 0x2, 0x7ff, 0x0, 0xa, 0x0, 0x2}, 0xffffffffffffffff, 0x800000000008, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r2, &(0x7f0000003900)={&(0x7f00000025c0)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x80, 0x0}, 0x20000850)
r3 = getpid()
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x62e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x114107, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000180)=0x5)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_int(r8, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000200)=ANY=[], 0x31)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0xd, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000950000000000000018400000ffffffff000000000000000018", @ANYRES32], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
close(0x3)
socket$kcm(0x10, 0x2, 0x0)

8.801008159s ago: executing program 1 (id=2432):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$TUNGETDEVNETNS(r0, 0xff03, 0x0)

8.660273105s ago: executing program 0 (id=2436):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000040000800000000190100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008aa6aec05030000000000009bf19f8514edfc892ae2d27bd55eaa8d1c000000b00000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r1 = getpid()
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
recvmsg$kcm(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/185, 0xb9}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000c80)=""/195, 0xc3}, {&(0x7f0000000880)=""/180, 0xb4}, {&(0x7f0000000ac0)=""/288, 0x120}, {&(0x7f0000002500)=""/4150, 0x1036}, {&(0x7f0000000340)=""/89, 0x59}], 0x7}, 0x10000)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90224fc60", 0x14}], 0x1}, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000009c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001d0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bbfbffa8499c69ac76dd752d00", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0xb, &(0x7f0000000940)=ANY=[@ANYRES8=r1, @ANYRES8=<r5=>r0, @ANYRES8, @ANYRESHEX=r1, @ANYRESHEX=r2, @ANYBLOB="6b9941e7039e1558a54c8be9b9a6638c1d5e34f037ce6f9c9800733680eadd50dd34611bb96809bf8402513664d2ae4ba76baa8af4d88c73baa18413f7"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="240000002e000d190a76", 0xa}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d01", 0x12}], 0x2}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0x3, 0x1000000}, 0x0, 0x1000000000000, 0xffffffffffffffff, 0x8)
syz_clone(0x6063100, 0x0, 0xfffffffffffffe61, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES8=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r6 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e23}}, 0x80, 0x0}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xcfa4)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
mkdir(0x0, 0x81)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000000440)={&(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000580)="a739de997a9b26d2a75bd65d1f859d5f6fe13628eb0651e9694853a24e4f452638824a16bdfd69358ada14f6f10a03147c065022ecb40d673ed28cae1c3ed7b9d08e153af9272fc90929019282bdfb7d0816c7c473c9647086219c882f904ea21b76a0a5be3d02fe92fbb33bec78cf29810504b669615c3cdce4", 0x7a}], 0x1, &(0x7f00000006c0)}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080))

8.526138066s ago: executing program 1 (id=2437):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x26}}}, 0x88, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="100936c9e17f98f6c91de8d224696c543776ec81632bca29ed18d286998fecdc9be5f7fa299a4376994fcb7ea249f038cd4d"], 0x10b8}, 0x20008800)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000480)={0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0}}, 0x10)
r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r4}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000a8db0000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=<r9=>r8], 0x50)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r11}, &(0x7f0000000040), &(0x7f0000000140)=r10}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r11}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r10}, 0x20)
r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYRESOCT=r1, @ANYRES8=r9, @ANYRES8=r5, @ANYRES8=r11, @ANYRESDEC=r5, @ANYRES64=r10, @ANYRESHEX=r6], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r12, &(0x7f0000000400), &(0x7f0000000740)=""/126}, 0x20)
r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0x3, 0x18}, 0xc)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0xffffffffffffffff, <r14=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000070000000000000000080000186a00000c00000000000000000000009506000000f0ffff9400000000000000"], &(0x7f0000000700)='syzkaller\x00', 0x9, 0x29, &(0x7f00000001c0)=""/41, 0x41000, 0x6, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x2000000a, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r12, r13, r14], &(0x7f0000000400), 0x10, 0x4, @void, @value}, 0x94)
r15 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r15, &(0x7f0000000080)=ANY=[@ANYBLOB='-cpu$'], 0x5)
openat$cgroup_int(r1, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0)
r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r17 = openat$cgroup_subtree(r16, &(0x7f0000000200), 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r18 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r18, &(0x7f00000006c0)='cpuset.mem_hardwall\x00', 0x2, 0x0)
write$cgroup_subtree(r17, &(0x7f0000000240)=ANY=[@ANYBLOB="2d6370f52062ae8a16d3a33cc29b5e7f45a0d24e74b5b63e0b1941de27809ee51a4cb7858f9b962aa20823acd2db910eea61d4c0c64892d0eba336123869ec22829d61d44a3ec338bea9c019203fe672a66419d1b7147fd452e214"], 0x5)

7.17900196s ago: executing program 1 (id=2441):
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x4, r0, 0xb)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r1, 0x6, 0xd, &(0x7f0000000000), 0x4)
setsockopt$sock_attach_bpf(r1, 0x1, 0x24, &(0x7f0000000000), 0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000004, 0x8}, 0xc210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
close(0xffffffffffffffff)
r3 = getpid()
r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x80088, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x7fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r4}, 0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r4, @ANYRES32=r2], 0x0, 0x6, 0x1000, &(0x7f0000001b40)=""/4096, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x1, 0x7f}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600), 0x10, 0x9, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r6 = socket$kcm(0x2a, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, 0x0)
socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}], 0x10, 0x0, @void, @value}, 0x90)

7.065112661s ago: executing program 0 (id=2443):
r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2d6e6574202b68756765746c62202b63707573d441762d696f202d7069647320"], 0x29) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8264, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x2018, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) (async)
r3 = getpid()
r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7ff1, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x25346c7d6a446d0f, 0x2, 0x80, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r3, 0x0, 0xffffffffffffffff, 0x3) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0x2f) (async)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
r6 = socket$kcm(0x29, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0xffffffffffffffff}, 0x13)
socketpair(0x28, 0x2, 0x28, &(0x7f0000000040)) (async)
r8 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r9}) (async)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r10) (async)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000040000000900000000000000", @ANYRES32, @ANYBLOB="00000066fd16ad0000e4ff000000000054b7acaa1685bc4394850a00000000000000000000000000b5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r11, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r12}, 0x0, &(0x7f0000000880)=r11}, 0x20)
close(r11)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r12, &(0x7f0000000900)}, 0x20) (async)
socketpair(0x1d, 0x3, 0x1, &(0x7f00000014c0)) (async)
socket$kcm(0x21, 0x2, 0xa)

6.679686756s ago: executing program 1 (id=2446):
r0 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0200000001"], 0x10)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001240)='./cgroup.net/syz1\x00', 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000005580)=""/4084, 0xff4}, {&(0x7f0000000140)=""/4092, 0xffc}, {&(0x7f0000001140)=""/178, 0xb2}], 0x3}, 0x0)
close(r0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800020007fb21b6bbb8000201c01264bc24eab556a705251e6182943d758a0d66ee15b98aa7cfecdaff0051f60a84c9f4d4938037000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x60000)

6.655225833s ago: executing program 3 (id=589):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0x1400, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x40)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff02c}, {0x6}]})
recvmsg(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0xffffffff}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff], 0x0, 0x10, 0x4, @void, @value}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89b1, &(0x7f0000000000)={'vlan0\x00', @local})
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90624fc60", 0x14}], 0x1}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x400, 0x0)
ioctl$TUNSETTXFILTER(r2, 0x400454d1, 0x0)
close(r1)

5.525171735s ago: executing program 1 (id=2449):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x18002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, @perf_config_ext={0x1, 0x5}, 0x10580, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0xffffffff, @empty, 0xfffffffb}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1000000000000000290000003e002000c8aa117d5aa12b46482517fe66f3ebefd2c64853d5696cb044f2a65bcb07201545fcbee325c0cec783d39e28e10af2787f5207b319d0b72e8d0fb0397ddc3dc24f666572802f"], 0x1}, 0x20040096)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000100"/20, @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1bee, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0xe}, 0x200, 0x1, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xa, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x5, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4c080)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r7=>0xffffffffffffffff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
setsockopt$sock_attach_bpf(r7, 0x1, 0x41, &(0x7f0000000100)=r8, 0x8)
setsockopt$sock_attach_bpf(r7, 0x1, 0x25, &(0x7f0000000100)=r6, 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r9 = socket$kcm(0x10, 0x2, 0x10)
setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000080), 0x4)
sendmsg$kcm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="140000003500010000000000000094f90624fc60", 0x14}], 0x1}, 0x8000)

1.186471192s ago: executing program 4 (id=2466):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r2, 0x0, 0x0, 0xb9, 0x0, &(0x7f0000000640)=""/185, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50)
write$cgroup_devices(r1, &(0x7f0000000240)={'c', ' *:* ', 'rw\x00'}, 0x9)

1.181252012s ago: executing program 4 (id=2467):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x7, 0x1, 0x9, 0x0, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000001380)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_clone(0x80f8880, &(0x7f0000001500)="067ed8a9ae877be59f4b484654589f44327bd774e52dc973116dc4eb06f08fc558819f8718e36ebd430e69d394eedf0ea69dba375e58f02a7b637bab3cec073a910a22225630ae02924ef13dce6d4eb11ab09a66df16e0d7764b3d0405db7962cb0b0378c947c663e7212764eb0e4cd7f8b624debb0000000000000000000000c8a2b967cfafbf28e50e8eeadcee99f42179b8ee26210766c8d94e6d846c369a02325a5963bb5f9f88", 0xa9, &(0x7f00000006c0), &(0x7f0000001400), &(0x7f0000001680)="2b42ab39ac8ef0ecfcc5dad48b098c52b0005c4626ffe8a3b4f46755cef0fa0ace87fdae95c77cc511183da0f7607edc0000000000000000009630e6942c9934947e21bf0b8b43459cb3c1a12469b64bcdccc12d37043eb61dd10811e1407aa3153dc8172109a65a9fef41e0c010ca0c2aaf2e121571501074ecc98f078edaab32b7fbd19690481c9ab0749642f64aa3f3ff96ce73cc63cd19d07769658ac99695860b411beb84e2c15d1c8a51a0a8f3ec9c4c7ce56b183ad219d7a345eb9a598de9ac915c884247dac5066e1ad8e96972cae2")
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000feaa6e118a6c10ee87bd073de4c76dd5000000000000"], 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r4, @ANYBLOB="0000000000000000c30000000000000095"], &(0x7f0000000180)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$inet(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000680)=[@ip_tos_u8={{0x18}}, @ip_tos_u8={{0x11}}], 0x30}, 0x0)
sendmsg$unix(r1, &(0x7f0000000840)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000040)="986eb38a8e89c3e1b3432852daf3be104c852fd61e30288dfa39e61644e5262e0b1b0dc37810e0bcd281", 0x2a}, {&(0x7f0000000180)="5d9d0375eb4248a751ca96c4c91f692182702114c12311e106d34ea8a3dd9825b40295f5471bb0ee9cacb0c947d0b8fa1ba98857a05baaaf8a56dc6ea93eb28ed7fb60bd63a1d0f380295af11fefbfaf98b7c21e45b364d3a0094410ee4391889107e7c5076beeb8591090ee50d0f9d4d6d7c42d27f6c3e5e7e91cb1015e483a4a1ec9076bae7b4d6639716556588d4576af8de7a0c6d1f9ea6da2894939fbc12478e9b4ef7de3fec81526834f644407b5cdc0ff2442fec9ee5a67341cd7088731df", 0xc2}, {&(0x7f0000000280)="5088482ea3c5145bc6b466c172e1cc8e762781", 0x13}, {&(0x7f0000000400)="a067a09f364ceaf103bde3890fc03c7c2be213e91181e457af307e2b14dcb8d6290719107d5e69ecbb832f1bb39a6fb1bd8374ef8fc6cc902df028c35fd1ab0c730178136a970c9592f41525cd4040a1a4c082e31469ae3f4f4fb1a4f135fa72e4402ba1e620403cd4378247eaf1e73d22751f93b2c05ffd129527fa8974170b870c01cc5f9e6429cf27a9c8c38682ce8e35da6c48a8329e150fce269c5d70e2ba77b2", 0xa3}, {&(0x7f00000009c0)="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", 0x14e}, {&(0x7f00000002c0)="6f870d4e4b58e2fbfb57caaeb9be5fb1e1f150c3d5e855ddce4b530bdbd5a676234fd0bf78eaf2398acf96d52b726ccd00214b3d28e631bfbcc3480d392a8b2fadd8bf5235de8eab35b4f7901cd840404e567043346b", 0x56}], 0x6, &(0x7f0000000780)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000baa2b69e00000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0], 0x90, 0x4c011}, 0x48000)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x9, 0x0, 0xffffffff, 0x6, 0x0, 0x1, 0xd38, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0x5}, @typedef={0x2, 0x0, 0x0, 0x8, 0x2}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x5f, 0x0, 0x61]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000feffffff00000000020000008500000028000000180100002020642500000000002020207b1af8ff00000000bfa100000007000007010000f8ffffffb702000008000000b7030000fe05000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x10, 0x2, 0x0, 0xff, 0x0, 0xcbf0, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_config_ext={0xffff8880b8722b10, 0x1}, 0x0, 0x2, 0xffffffff, 0x0, 0x4, 0xfffffffc, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000001300)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000001340)=r3, 0x12)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
close(0xffffffffffffffff)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48000000e8fe55a1180015000600142603600e120900210000000401a80016000a0001", 0x37}], 0x1}, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0xfe33)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r6, <r9=>0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000b40)=r2}, 0x20)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYRESHEX=r9], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f40)={r10, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000f80)={<r11=>0xffffffffffffffff})
sendmsg$tipc(r11, &(0x7f00000012c0)={&(0x7f0000000fc0)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x1}}, 0x10, &(0x7f0000001180)=[{&(0x7f0000001000)="93fe9d2913840c8fca9d25ed92d2a1255bc1a5cb8f83b11ebc02e7d3731af04057fee4da51a35b6f862d5f814cf4dcaa1b0176f2f2142afda1b0212746c9b0a0ceb171cca5e628d0fb82a0c14067ef7e04b336fcf491cd2bcd28a361a5057388a51fdb20c538aef945ed2f3cb59037ca49d017f7db6f6e318e70481b21c483fb41d6ab01db597aa9ac703c34a53c60cb25854e4a559a19e3b3282bce5d02bb004172d30ed188787128cb0c3c5bca0b7f467304ed5463c3abdfc809ba", 0xbc}, {&(0x7f00000010c0)="4407c6889aa9f7da57438f5dc89b6bea098ef8200636ceec1612ab45a60d75681b91a5b950b80c66748a6f3718b4b761969d5114f5316607c9a222529e23a3319b8162b1333d06fa27a6753bf6bfc4b8d40bb226490ab946d738b6af1896f5de2a9e381692d7b557c230852e350737f68d45a6a1a5444eefcafbef00dca71a686b11ca51c9b3b97d5e1336aa54c064530fad4a55", 0x94}], 0x2, &(0x7f00000011c0)="f85e2f39f158a5227295297c52c3b4fc8501f75d0064bb7c028b1e2884fb9f302c63c6da837855e4b8ea0982818c6079b6fd051e734640c2a5cdc3922774611d6008968e0ce0e31c736a3fed4020a09f46750a16e8ef76044e3569a6d8408e78190da8111560ec559f54181094bf3c84aa16b7761c1c2395f0ba736f1a81d6ff4891b07e1446a284f6e35eec184856454df5cf7ea9f6269b0d549943b462e78476670640ba1fbab97339ac7323720b725d3aac864932d2dbe25970807f1dfdc6bb12", 0xc2, 0x40}, 0xc010)

1.003749001s ago: executing program 4 (id=2469):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x141001, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
socket$kcm(0xa, 0x5, 0x3a)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup_devices(r3, &(0x7f0000000600)='devices.allow\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x100, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$tipc(r4, &(0x7f0000000b40)={&(0x7f0000000140)=@id={0x1e, 0x3, 0x3, {0x4e23}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24000000}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x8}, 0x8080, 0x2, 0x0, 0x0, 0x7fffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0xfffffffd, 0x0, @void, @value, @void, @value}, 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001300"/28], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r6, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b00)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES64=r5, @ANYRES64=r7, @ANYBLOB="13"], 0x20)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x6)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000080))
sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20000080)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8800, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0004000000000000000000000025e90c8c0000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX], 0x48)

829.295076ms ago: executing program 2 (id=2471):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r0)
ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"})

732.500448ms ago: executing program 2 (id=2472):
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r0 = socket$kcm(0x1e, 0x4, 0x0) (async, rerun: 64)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f1ea3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b2213fdc2881e1a6ec9d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232f0485a2ca9f37fc9c3d2688efcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdcdeb2af1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f925f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5c49209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378ad8f6afb0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3826ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3577], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000280)=ANY=[@ANYRESOCT=r1], &(0x7f0000000040)='GPL\x00', 0x2, 0xc1, &(0x7f0000000580)=""/193, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
close(r2) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) (async)
recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000b00)=""/229, 0xe5}], 0x1}, 0x40000003) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000000711062000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r6, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) (async)
sendmsg$inet(r6, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) (async)
sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async)
r7 = socket$kcm(0x23, 0x5, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x4, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x6}, 0x14107, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xc6d, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext={0x5, 0x400}, 0x8402, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x2) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
recvmsg$kcm(r7, 0x0, 0x0)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async, rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, 0x0) (async, rerun: 64)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32)
write$cgroup_devices(r9, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd) (async, rerun: 32)
r10 = socket$kcm(0x1e, 0x4, 0x0)
openat$cgroup_ro(r8, &(0x7f00000002c0)='rdma.current\x00', 0x0, 0x0) (async, rerun: 64)
setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (rerun: 64)

527.021737ms ago: executing program 2 (id=2473):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4a)
close(r0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000002c09000000000000", @ANYRES32=0x1, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffff010000000200"/28], 0x50)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)=ANY=[], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580), 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, <r3=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000240)=r0}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@map, 0xffffffffffffffff, 0xa, 0x0, 0x0, @void, @value=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x58, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x10)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680)=0xffffffffffffffff, 0x4)
r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@generic={&(0x7f0000000740)='./file0\x00', 0x0, 0x8}, 0x18)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0xc0, 0xff, 0x10, 0x1000, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1, 0x5, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x38, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000007000000000000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000830000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000185200000e0000000000000000000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000007d1feff1000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000a10000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001849000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000085100000feffffffbf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0xa, &(0x7f0000000580)=""/10, 0x41000, 0xa, '\x00', r5, 0x0, r6, 0x8, &(0x7f00000006c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x2, 0x10, 0x6, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000840)=[r7, r8], &(0x7f0000000940)=[{0x1, 0x3, 0x3, 0xa}, {0x2, 0x3, 0x7, 0x4}], 0x10, 0x1, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0xfffffffffffffffe, 0x9}, 0x14185, 0x20032, 0xfffffbff, 0x1, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r9 = socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x80, 0x7f, 0x13, 0xc, 0x7, 0x0, 0x8, 0x4c090, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x8}, 0x8822, 0x200000000101, 0x9, 0x0, 0x1e4f, 0x1, 0xa5, 0x0, 0x140000, 0x0, 0xffffffff}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x5)
r10 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x890b, &(0x7f0000000000))
setsockopt$sock_attach_bpf(r9, 0x1, 0x23, &(0x7f0000000000), 0x4)
socket$kcm(0x10, 0x2, 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r11 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)='P', 0x1}], 0x1}, 0x0)
socket$kcm(0x10, 0x5, 0x10)
r12 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}, 0x0)

424.865041ms ago: executing program 2 (id=2474):
close(0xffffffffffffffff)
r0 = getpid()
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x80088, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x7fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r1}, 0x8)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f0000000580)}, 0x10)
perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x99, 0x6, 0x0, 0x2, 0x0, 0x80, 0x41000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff91, 0xfffffffffffffff8}, 0x13fa0, 0x1003, 0x0, 0x0, 0x0, 0x2, 0x7ff, 0x0, 0xa, 0x0, 0x2}, 0xffffffffffffffff, 0x800000000008, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r2, &(0x7f0000003900)={&(0x7f00000025c0)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x80, 0x0}, 0x20000850)
r3 = getpid()
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x62e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x114107, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000180)=0x5)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_int(r8, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000200)=ANY=[], 0x31)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0xd, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000950000000000000018400000ffffffff000000000000000018", @ANYRES32], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
close(0x3)
socket$kcm(0x10, 0x2, 0x0)

385.025349ms ago: executing program 4 (id=2475):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0)
ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e42000c371303ed6a33f2ff8689b3f20e"])

283.994683ms ago: executing program 2 (id=2476):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, @perf_config_ext={0x6, 0x6}, 0x114107, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
socket$kcm(0xa, 0x5, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r2, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0, 0xfc, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x54, 0x8, 0x8, &(0x7f0000000440)}}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
close(r3)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0x1400, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='cpu\t>0&&\t')
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1400000034000b45d30000000000000001d25a80", 0x14}], 0x1}, 0x0)
r5 = openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r5, &(0x7f0000000240)={'c', ' *:* ', 'rw\x00'}, 0x9)

37.690358ms ago: executing program 4 (id=2477):
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x8000003, <r0=>0x0}, 0x3)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000440)=ANY=[@ANYRESDEC], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x7}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x700, 0x4}, 0x10, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, <r2=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)=r1}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r2, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0x4, [@var={0xe, 0x0, 0x0, 0xe, 0x3, 0x1}, @enum64={0x6, 0xa, 0x0, 0x13, 0x1, 0x3, [{0xe, 0x1000}, {0x3, 0x100, 0x8}, {0x8, 0x19, 0x7b8d}, {0x8, 0x9, 0x3f}, {0x4, 0x198, 0x7}, {0x3, 0x2c8, 0x2}, {0x3, 0x3, 0x3}, {0x8, 0x3, 0x3}, {0x1, 0x80}, {0xf, 0x28, 0xffffff10}]}, @typedef={0x3, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x2e, 0x30]}}, &(0x7f0000000600)=""/227, 0xbc, 0xe3, 0x1, 0x1, 0x10000, @value}, 0x28)
r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@o_path={&(0x7f0000000780)='./file0\x00', 0x0, 0x4000, r1}, 0x18)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x6, 0x0, r2, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f00000009c0)='afs_silly_rename\x00', r1, 0x0, 0x8}, 0x18)
close(r8)
close(r8)
recvmsg$unix(r7, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x101c0)
write$cgroup_subtree(r9, &(0x7f0000000180)=ANY=[@ANYRES8=r8, @ANYBLOB="3ee901"], 0x9a)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x2, 0x0, 0x1, 0x8, 0x7, 0xfffffffffffffffc, 0xfffffffffffffff0}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0xb9, &(0x7f0000000380)=""/185, 0x41100, 0x0, '\x00', r3, 0x1b, r4, 0x8, &(0x7f0000000740)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, r0, 0x0, 0x3, &(0x7f0000000880)=[r5, r6, r9, r2], &(0x7f0000000a40)=[{0x5, 0x4, 0x4, 0x4}, {0x0, 0x5, 0x4}, {0x74, 0x3, 0xd, 0xa}], 0x10, 0xf5f, @void, @value}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r10=>0x0}}, 0x10)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x7, '\x00', r10, 0xffffffffffffffff, 0x3, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50)

12.883386ms ago: executing program 4 (id=2478):
r0 = socket$kcm(0x10, 0x9, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x4, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00'}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000a80)='mm_page_free_batched\x00', r2}, 0x18)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8)
close(r4)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
close(r5)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x0}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r1, 0x4, r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], <r7=>0x0, 0x87, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000200), &(0x7f0000000280), 0x8, 0xc7, 0x8, 0x8, &(0x7f0000000380)}}, 0x10)
r8 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000540)={0x0, r0}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000061121c000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8905, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7606, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={<r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d4f47f00000000000001000000000000000000000014000000000000000000000022000000000000000000000014000000000000000000000014000000000000000000000011000000000000000000000001000000000000000000000002000000010000000000000000000000000000000000000000000000070000008300000000960000206a77bdd1a004129054e7704a000000"], 0xf}, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a00000004000000040000000400000000000000", @ANYRES32=0x1, @ANYBLOB="0000000100"/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="0100"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008230000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000060ff850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_lsm={0x1d, 0x1b, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000104000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0100000000000080090100000000009500000000000000839880001000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000183a0000020000000000000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000580)='syzkaller\x00', 0x9, 0x73, &(0x7f0000000800)=""/115, 0x40f00, 0x0, '\x00', 0x0, 0x1b, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x4, 0xb, 0x3ff, 0x8}, 0x10, r7, 0x0, 0x3, &(0x7f0000000880)=[r10, r10, r10, r10, r10, r10, r10], &(0x7f00000008c0)=[{0x0, 0x2, 0x5, 0xb}, {0x3, 0x5, 0x5, 0x5}, {0x2, 0x5, 0x1, 0x3}], 0x10, 0x3, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50)
sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000000)="5ca11d61", 0x4}], 0x1, &(0x7f0000001ec0)=ANY=[@ANYBLOB="10000000000001000000120020000000"], 0x10}, 0x4000800)

0s ago: executing program 2 (id=2479):
r0 = socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x90000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa000000000000791008000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000bf0300"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf)
sendmsg$kcm(r2, &(0x7f0000001240)={&(0x7f0000000a00)=@in6={0xa, 0x4e23, 0xe, @empty, 0x7}, 0x80, 0x0}, 0x0)
close(r0)
r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
openat$cgroup_devices(r3, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x60, &(0x7f0000000340)=[{&(0x7f0000000440)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800190007000200060018c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

kernel console output (not intermixed with test programs):

.444753][T11727]  bpf_prog_test_run_xdp+0x79a/0xf90
[  396.444795][T11727]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  396.444825][T11727]  ? __fget_files+0x2a/0x420
[  396.444860][T11727]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  396.444884][T11727]  bpf_prog_test_run+0x2a9/0x340
[  396.444923][T11727]  __sys_bpf+0x4a4/0x860
[  396.444951][T11727]  ? __pfx___sys_bpf+0x10/0x10
[  396.444991][T11727]  ? ksys_write+0x1f0/0x250
[  396.445015][T11727]  ? rcu_is_watching+0x15/0xb0
[  396.445058][T11727]  __x64_sys_bpf+0x7c/0x90
[  396.445082][T11727]  do_syscall_64+0xf6/0x210
[  396.445110][T11727]  ? clear_bhb_loop+0x45/0xa0
[  396.445135][T11727]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  396.445155][T11727] RIP: 0033:0x7f06c0d8e969
[  396.445174][T11727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  396.445191][T11727] RSP: 002b:00007f06c1be5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  396.445212][T11727] RAX: ffffffffffffffda RBX: 00007f06c0fb5fa0 RCX: 00007f06c0d8e969
[  396.445227][T11727] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  396.445241][T11727] RBP: 00007f06c1be5090 R08: 0000000000000000 R09: 0000000000000000
[  396.445253][T11727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  396.445265][T11727] R13: 0000000000000000 R14: 00007f06c0fb5fa0 R15: 00007fffaa148e78
[  396.445297][T11727]  </TASK>
[  398.083308][T11744] netlink: 'syz.0.1621': attribute type 13 has an invalid length.
[  398.091804][T11744] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.1621'.
[  398.264809][ T1335] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.292817][T11750] netlink: 'syz.2.1627': attribute type 1 has an invalid length.
[  398.301213][T11750] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1627'.
[  398.803593][ T1335] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.852967][ T1335] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.933180][ T1335] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.023823][ T1335] bridge_slave_1: left allmulticast mode
[  399.029655][ T1335] bridge_slave_1: left promiscuous mode
[  399.035375][ T1335] bridge0: port 2(bridge_slave_1) entered disabled state
[  399.044807][ T1335] bridge_slave_0: left allmulticast mode
[  399.050940][ T1335] bridge_slave_0: left promiscuous mode
[  399.056790][ T1335] bridge0: port 1(bridge_slave_0) entered disabled state
[  399.418588][ T1335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  399.434784][ T1335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  399.446375][ T1335] bond0 (unregistering): Released all slaves
[  399.626499][T11762] netlink: 6495 bytes leftover after parsing attributes in process `syz.2.1631'.
[  399.975587][T11768] netlink: 'syz.2.1634': attribute type 1 has an invalid length.
[  400.032912][T11768] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1634'.
[  400.066107][T11771] netlink: 'syz.2.1634': attribute type 10 has an invalid length.
[  400.391923][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  400.400241][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  400.409472][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  400.422389][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  400.430326][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  401.188556][ T1335] hsr_slave_0: left promiscuous mode
[  401.226210][ T1335] hsr_slave_1: left promiscuous mode
[  401.251163][ T1335] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  401.287953][ T1335] batman_adv: batadv0: Removing interface: batadv_slave_0
[  401.488691][ T1335] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  401.505702][ T1335] batman_adv: batadv0: Removing interface: batadv_slave_1
[  401.538669][T11804] netlink: 6495 bytes leftover after parsing attributes in process `syz.1.1645'.
[  401.724500][ T1335] veth1_macvtap: left promiscuous mode
[  401.733569][ T1335] veth0_macvtap: left promiscuous mode
[  401.739572][ T1335] veth1_vlan: left promiscuous mode
[  401.745158][ T1335] veth0_vlan: left promiscuous mode
[  402.530765][ T5845] Bluetooth: hci1: command tx timeout
[  403.311882][ T1335] team0 (unregistering): Port device team_slave_1 removed
[  403.679718][ T1335] team0 (unregistering): Port device team_slave_0 removed
[  404.589357][ T5845] Bluetooth: hci1: command tx timeout
[  406.275672][T11783] chnl_net:caif_netlink_parms(): no params data found
[  406.439620][T11840] netlink: 'syz.2.1655': attribute type 10 has an invalid length.
[  406.447883][T11840] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1655'.
[  406.463807][T11840] dummy0: entered promiscuous mode
[  406.469798][T11840] dummy0: entered allmulticast mode
[  406.477034][T11840] bridge0: port 3(dummy0) entered blocking state
[  406.483799][T11840] bridge0: port 3(dummy0) entered disabled state
[  406.499811][T11840] bridge0: port 3(dummy0) entered blocking state
[  406.506357][T11840] bridge0: port 3(dummy0) entered forwarding state
[  406.671176][ T5845] Bluetooth: hci1: command tx timeout
[  407.495621][T11783] bridge0: port 1(bridge_slave_0) entered blocking state
[  407.502942][T11783] bridge0: port 1(bridge_slave_0) entered disabled state
[  407.510439][T11783] bridge_slave_0: entered allmulticast mode
[  407.518196][T11783] bridge_slave_0: entered promiscuous mode
[  407.527224][T11783] bridge0: port 2(bridge_slave_1) entered blocking state
[  407.534979][T11783] bridge0: port 2(bridge_slave_1) entered disabled state
[  407.542261][T11783] bridge_slave_1: entered allmulticast mode
[  407.551294][T11783] bridge_slave_1: entered promiscuous mode
[  407.609663][T11783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  407.633337][T11783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  407.823489][T11863] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  407.830266][T11863] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  407.917648][T11783] team0: Port device team_slave_0 added
[  407.936682][T11783] team0: Port device team_slave_1 added
[  408.092365][T11783] batman_adv: batadv0: Adding interface: batadv_slave_0
[  408.103373][T11783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  408.131348][T11783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  408.184419][T11783] batman_adv: batadv0: Adding interface: batadv_slave_1
[  408.192413][T11783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  408.223590][T11783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  408.265085][T11878] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.1668'.
[  408.483112][T11783] hsr_slave_0: entered promiscuous mode
[  408.490718][T11783] hsr_slave_1: entered promiscuous mode
[  408.497164][T11783] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  408.519433][T11783] Cannot create hsr debugfs directory
[  408.750758][ T5845] Bluetooth: hci1: command tx timeout
[  409.017562][T11891] netlink: 'syz.1.1673': attribute type 21 has an invalid length.
[  409.134076][T11899] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.1676'.
[  410.442827][T11783] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  410.580539][T11933] netlink: 'syz.2.1684': attribute type 3 has an invalid length.
[  410.588332][T11933] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.1684'.
[  410.774282][T11783] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  410.891281][T11783] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  410.938961][T11783] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  411.216375][T11937] netlink: 'syz.1.1687': attribute type 10 has an invalid length.
[  411.388768][T11937] bond0: (slave bond_slave_0): Releasing backup interface
[  412.102174][T11783] 8021q: adding VLAN 0 to HW filter on device bond0
[  412.186686][T11783] 8021q: adding VLAN 0 to HW filter on device team0
[  412.235823][ T4102] bridge0: port 1(bridge_slave_0) entered blocking state
[  412.243091][ T4102] bridge0: port 1(bridge_slave_0) entered forwarding state
[  412.346243][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  412.353547][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  412.427683][T11965] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1694'.
[  412.978457][T11983] netlink: 'syz.1.1698': attribute type 10 has an invalid length.
[  412.993937][T11983] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1698'.
[  413.034605][T11982] netlink: 'syz.0.1699': attribute type 29 has an invalid length.
[  413.054958][T11983] batman_adv: batadv0: Interface deactivated: veth0_vlan
[  414.269073][T11983] batman_adv: batadv0: Removing interface: veth0_vlan
[  415.500534][T11783] 8021q: adding VLAN 0 to HW filter on device batadv0
[  415.988640][T11783] veth0_vlan: entered promiscuous mode
[  416.035931][T11783] veth1_vlan: entered promiscuous mode
[  416.061159][T12015] netlink: 'syz.0.1706': attribute type 3 has an invalid length.
[  416.081989][T12015] netlink: 'syz.0.1706': attribute type 3 has an invalid length.
[  416.118852][T12015] netlink: 'syz.0.1706': attribute type 3 has an invalid length.
[  416.183892][T11783] veth0_macvtap: entered promiscuous mode
[  416.233066][T11783] veth1_macvtap: entered promiscuous mode
[  416.294179][T11783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  416.320569][T11783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  416.350145][T11783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  416.369183][T11783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  416.399392][T11783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  416.410466][T11783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  416.450613][T11783] batman_adv: batadv0: Interface activated: batadv_slave_0
[  416.482457][T11783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  416.529920][T11783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  416.554560][T11783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  416.589200][T11783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  416.614411][T11783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  416.646158][T11783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  416.685114][T11783] batman_adv: batadv0: Interface activated: batadv_slave_1
[  416.726470][T11783] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  416.749776][T11783] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  416.758545][T11783] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  416.798974][T11783] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  417.320660][T12038] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.1714'.
[  417.714383][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  417.739290][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  417.742515][T12056] netlink: 'syz.1.1719': attribute type 10 has an invalid length.
[  417.775843][T12060] netlink: 'syz.1.1719': attribute type 10 has an invalid length.
[  417.807648][T12060] bridge_slave_0: left promiscuous mode
[  417.810861][ T4102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  417.824270][T12060] bridge0: port 1(bridge_slave_0) entered disabled state
[  417.849997][ T4102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  418.050660][T12069] netlink: 'syz.0.1722': attribute type 29 has an invalid length.
[  418.165742][T12071] netlink: 'syz.0.1722': attribute type 29 has an invalid length.
[  420.314962][ T4102] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.642159][ T4102] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.854090][ T4102] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.172927][ T4102] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.495029][ T4102] bridge_slave_1: left allmulticast mode
[  421.512281][ T4102] bridge_slave_1: left promiscuous mode
[  421.531285][ T4102] bridge0: port 2(bridge_slave_1) entered disabled state
[  421.600350][ T4102] bridge_slave_0: left allmulticast mode
[  421.606069][ T4102] bridge_slave_0: left promiscuous mode
[  421.649550][ T4102] bridge0: port 1(bridge_slave_0) entered disabled state
[  422.280370][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  422.290073][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  422.298760][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  422.311452][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  422.321624][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  423.039805][ T4102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  423.054820][ T4102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  423.076177][ T4102] bond0 (unregistering): Released all slaves
[  423.666186][T12136] netlink: 6495 bytes leftover after parsing attributes in process `syz.2.1741'.
[  424.429863][ T5841] Bluetooth: hci1: command tx timeout
[  424.957844][T12150] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.1744'.
[  425.184789][ T4102] hsr_slave_0: left promiscuous mode
[  425.207739][ T4102] hsr_slave_1: left promiscuous mode
[  425.218838][ T4102] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  425.247072][ T4102] batman_adv: batadv0: Removing interface: batadv_slave_0
[  425.287058][ T4102] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  425.310299][ T4102] batman_adv: batadv0: Removing interface: batadv_slave_1
[  425.350521][ T4102] veth1_macvtap: left promiscuous mode
[  425.363015][ T4102] veth0_macvtap: left promiscuous mode
[  425.376618][ T4102] veth1_vlan: left promiscuous mode
[  425.388833][ T4102] veth0_vlan: left promiscuous mode
[  425.523502][T12177] netlink: 'syz.1.1751': attribute type 1 has an invalid length.
[  426.029593][ T4102] team0 (unregistering): Port device team_slave_1 removed
[  426.083093][ T4102] team0 (unregistering): Port device team_slave_0 removed
[  426.513524][ T5841] Bluetooth: hci1: command tx timeout
[  426.599709][T12124] chnl_net:caif_netlink_parms(): no params data found
[  427.308094][T12124] bridge0: port 1(bridge_slave_0) entered blocking state
[  427.326555][T12124] bridge0: port 1(bridge_slave_0) entered disabled state
[  427.339500][T12124] bridge_slave_0: entered allmulticast mode
[  427.347626][T12124] bridge_slave_0: entered promiscuous mode
[  427.361259][T12124] bridge0: port 2(bridge_slave_1) entered blocking state
[  427.389604][T12124] bridge0: port 2(bridge_slave_1) entered disabled state
[  427.396966][T12124] bridge_slave_1: entered allmulticast mode
[  427.404936][T12124] bridge_slave_1: entered promiscuous mode
[  427.435099][T12197] netlink: 6495 bytes leftover after parsing attributes in process `syz.0.1757'.
[  427.502736][T12199] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.1758'.
[  427.727282][T12209] netlink: 'syz.2.1762': attribute type 21 has an invalid length.
[  428.599365][ T5841] Bluetooth: hci1: command tx timeout
[  429.714210][T12209] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1762'.
[  429.723756][T12209] netlink: 'syz.2.1762': attribute type 1 has an invalid length.
[  429.753224][T12124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  429.772492][T12124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  429.873635][T12124] team0: Port device team_slave_0 added
[  429.891406][T12222] nbd: must specify an index to disconnect
[  429.903877][T12219] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1764'.
[  429.917236][T12124] team0: Port device team_slave_1 added
[  430.023533][T12124] batman_adv: batadv0: Adding interface: batadv_slave_0
[  430.034284][T12124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  430.074607][T12124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  430.096093][T12224] syzkaller0: entered promiscuous mode
[  430.101979][T12224] syzkaller0: entered allmulticast mode
[  430.151499][T12124] batman_adv: batadv0: Adding interface: batadv_slave_1
[  430.172342][T12124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  430.230439][T12124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  430.546048][T12245] netlink: 6495 bytes leftover after parsing attributes in process `syz.1.1771'.
[  430.594083][T12124] hsr_slave_0: entered promiscuous mode
[  430.603509][T12124] hsr_slave_1: entered promiscuous mode
[  430.610293][T12124] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  430.618112][T12124] Cannot create hsr debugfs directory
[  430.669410][ T5841] Bluetooth: hci1: command tx timeout
[  431.095570][T12255] netlink: 'syz.1.1775': attribute type 10 has an invalid length.
[  431.145005][T12255] bond0: (slave team0): Releasing backup interface
[  431.233759][T12255] batman_adv: batadv0: Adding interface: team0
[  431.241093][T12255] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  431.275766][T12255] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  432.543278][T12124] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  432.625909][T12124] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  432.641291][T12124] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  432.666439][T12124] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  432.948464][T12124] 8021q: adding VLAN 0 to HW filter on device bond0
[  433.011166][T12124] 8021q: adding VLAN 0 to HW filter on device team0
[  433.099558][ T6026] bridge0: port 1(bridge_slave_0) entered blocking state
[  433.106789][ T6026] bridge0: port 1(bridge_slave_0) entered forwarding state
[  433.379766][ T6027] bridge0: port 2(bridge_slave_1) entered blocking state
[  433.387120][ T6027] bridge0: port 2(bridge_slave_1) entered forwarding state
[  433.724579][T12124] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  435.213831][T12351] netlink: 212424 bytes leftover after parsing attributes in process `syz.0.1803'.
[  435.226872][T12124] 8021q: adding VLAN 0 to HW filter on device batadv0
[  435.411637][T12124] veth0_vlan: entered promiscuous mode
[  435.438297][T12124] veth1_vlan: entered promiscuous mode
[  435.516664][T12124] veth0_macvtap: entered promiscuous mode
[  435.563053][T12124] veth1_macvtap: entered promiscuous mode
[  435.623656][T12124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  435.654064][T12124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  435.672924][T12124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  435.684233][T12124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  435.695982][T12124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  435.706883][T12124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  435.722645][T12124] batman_adv: batadv0: Interface activated: batadv_slave_0
[  435.743359][T12124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  435.754220][T12124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  435.764471][T12124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  435.775384][T12124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  435.786157][T12124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  435.797928][T12124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  435.810753][T12124] batman_adv: batadv0: Interface activated: batadv_slave_1
[  435.823953][T12124] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  435.833726][T12124] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  435.842982][T12124] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  435.852399][T12124] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  436.172020][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  436.209486][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  436.372152][T12381] mac80211_hwsim hwsim14 wlan1: left allmulticast mode
[  436.442078][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  436.469330][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  436.752543][T12392] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.1815'.
[  436.796415][T12393] FAULT_INJECTION: forcing a failure.
[  436.796415][T12393] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  436.968854][T12393] CPU: 1 UID: 0 PID: 12393 Comm: syz.0.1816 Not tainted 6.15.0-rc4-syzkaller-gb615ce5fbefb #0 PREEMPT(full) 
[  436.968885][T12393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  436.968898][T12393] Call Trace:
[  436.968906][T12393]  <TASK>
[  436.968916][T12393]  dump_stack_lvl+0x189/0x250
[  436.968948][T12393]  ? __lock_acquire+0xaac/0xd20
[  436.968979][T12393]  ? __pfx_dump_stack_lvl+0x10/0x10
[  436.969008][T12393]  ? __pfx__printk+0x10/0x10
[  436.969028][T12393]  ? __might_fault+0xb0/0x130
[  436.969081][T12393]  should_fail_ex+0x414/0x560
[  436.969107][T12393]  _copy_from_user+0x2d/0xb0
[  436.969138][T12393]  __sys_bpf+0x1ed/0x860
[  436.969166][T12393]  ? __pfx___sys_bpf+0x10/0x10
[  436.969207][T12393]  ? ksys_write+0x1f0/0x250
[  436.969245][T12393]  __x64_sys_bpf+0x7c/0x90
[  436.969270][T12393]  do_syscall_64+0xf6/0x210
[  436.969299][T12393]  ? clear_bhb_loop+0x45/0xa0
[  436.969323][T12393]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.969343][T12393] RIP: 0033:0x7f6dcbf8e969
[  436.969361][T12393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  436.969379][T12393] RSP: 002b:00007f6dccdc0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  436.969400][T12393] RAX: ffffffffffffffda RBX: 00007f6dcc1b6080 RCX: 00007f6dcbf8e969
[  436.969415][T12393] RDX: 0000000000000023 RSI: 0000200000000240 RDI: 000000000000000a
[  436.969428][T12393] RBP: 00007f6dccdc0090 R08: 0000000000000000 R09: 0000000000000000
[  436.969441][T12393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  436.969453][T12393] R13: 0000000000000001 R14: 00007f6dcc1b6080 R15: 00007fff4e333a18
[  436.969485][T12393]  </TASK>
[  437.206275][T12392] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  440.114507][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  440.121066][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  440.313282][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  440.321895][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  440.339745][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  440.348891][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  440.358289][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  441.675468][ T4102] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.835473][ T4102] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.042216][ T4102] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.374927][T12457] FAULT_INJECTION: forcing a failure.
[  442.374927][T12457] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  442.429401][ T5841] Bluetooth: hci1: command tx timeout
[  442.543865][T12457] CPU: 0 UID: 0 PID: 12457 Comm: syz.0.1830 Not tainted 6.15.0-rc4-syzkaller-gb615ce5fbefb #0 PREEMPT(full) 
[  442.543897][T12457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  442.543910][T12457] Call Trace:
[  442.543918][T12457]  <TASK>
[  442.543928][T12457]  dump_stack_lvl+0x189/0x250
[  442.543966][T12457]  ? __pfx_dump_stack_lvl+0x10/0x10
[  442.543996][T12457]  ? __pfx__printk+0x10/0x10
[  442.544030][T12457]  should_fail_ex+0x414/0x560
[  442.544057][T12457]  _copy_to_user+0x31/0xb0
[  442.544089][T12457]  simple_read_from_buffer+0xe1/0x170
[  442.544121][T12457]  proc_fail_nth_read+0x1df/0x250
[  442.544155][T12457]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  442.544188][T12457]  ? rw_verify_area+0x258/0x650
[  442.544210][T12457]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  442.544242][T12457]  vfs_read+0x1fd/0x980
[  442.544272][T12457]  ? __pfx___mutex_lock+0x10/0x10
[  442.544298][T12457]  ? __pfx_vfs_read+0x10/0x10
[  442.544323][T12457]  ? __fget_files+0x2a/0x420
[  442.544356][T12457]  ? __fget_files+0x3a0/0x420
[  442.544382][T12457]  ? __fget_files+0x2a/0x420
[  442.544420][T12457]  ksys_read+0x145/0x250
[  442.544446][T12457]  ? __pfx_ksys_read+0x10/0x10
[  442.544474][T12457]  ? do_syscall_64+0xba/0x210
[  442.544504][T12457]  do_syscall_64+0xf6/0x210
[  442.544530][T12457]  ? clear_bhb_loop+0x45/0xa0
[  442.544561][T12457]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  442.544581][T12457] RIP: 0033:0x7f6dcbf8d37c
[  442.544599][T12457] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  442.544616][T12457] RSP: 002b:00007f6dccdc0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  442.544637][T12457] RAX: ffffffffffffffda RBX: 00007f6dcc1b6080 RCX: 00007f6dcbf8d37c
[  442.544651][T12457] RDX: 000000000000000f RSI: 00007f6dccdc00a0 RDI: 0000000000000005
[  442.544664][T12457] RBP: 00007f6dccdc0090 R08: 0000000000000000 R09: 0000000000000000
[  442.544676][T12457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  442.544686][T12457] R13: 0000000000000001 R14: 00007f6dcc1b6080 R15: 00007fff4e333a18
[  442.544719][T12457]  </TASK>
[  442.984200][ T4102] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  443.050156][T12428] chnl_net:caif_netlink_parms(): no params data found
[  443.326634][T12475] sctp: [Deprecated]: syz.0.1835 (pid 12475) Use of struct sctp_assoc_value in delayed_ack socket option.
[  443.326634][T12475] Use struct sctp_sack_info instead
[  443.436600][T12467] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1834'.
[  443.731897][T12428] bridge0: port 1(bridge_slave_0) entered blocking state
[  443.769001][T12428] bridge0: port 1(bridge_slave_0) entered disabled state
[  443.824116][T12428] bridge_slave_0: entered allmulticast mode
[  443.851208][T12428] bridge_slave_0: entered promiscuous mode
[  443.926919][T12428] bridge0: port 2(bridge_slave_1) entered blocking state
[  443.954144][T12428] bridge0: port 2(bridge_slave_1) entered disabled state
[  444.171764][T12428] bridge_slave_1: entered allmulticast mode
[  444.208532][T12428] bridge_slave_1: entered promiscuous mode
[  444.230253][T12500] netlink: 'syz.1.1841': attribute type 29 has an invalid length.
[  444.511727][ T5841] Bluetooth: hci1: command tx timeout
[  444.576747][T12428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  444.607815][T12508] netlink: 'syz.4.1844': attribute type 21 has an invalid length.
[  444.629330][ T4102] bridge_slave_1: left allmulticast mode
[  444.635061][ T4102] bridge_slave_1: left promiscuous mode
[  444.675652][ T4102] bridge0: port 2(bridge_slave_1) entered disabled state
[  444.705537][ T4102] bridge_slave_0: left allmulticast mode
[  444.729454][ T4102] bridge_slave_0: left promiscuous mode
[  444.735346][ T4102] bridge0: port 1(bridge_slave_0) entered disabled state
[  445.782767][T12530] netlink: 'syz.2.1850': attribute type 10 has an invalid length.
[  446.589239][ T5841] Bluetooth: hci1: command tx timeout
[  447.225224][ T4102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  447.237574][ T4102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  447.248522][ T4102] bond0 (unregistering): Released all slaves
[  447.263668][T12495] netlink: 'syz.1.1841': attribute type 29 has an invalid length.
[  447.275238][T12428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  447.284738][T12508] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1844'.
[  447.294266][T12508] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1844'.
[  447.313106][T12526] netlink: 'syz.0.1849': attribute type 21 has an invalid length.
[  447.356908][T12526] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.1849'.
[  447.402878][T12530] team0: Device hsr_slave_0 failed to register rx_handler
[  447.609593][T12536] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  447.643500][T12428] team0: Port device team_slave_0 added
[  447.675468][T12428] team0: Port device team_slave_1 added
[  448.050174][T12428] batman_adv: batadv0: Adding interface: batadv_slave_0
[  448.057281][T12428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  448.099245][T12428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  448.151534][T12428] batman_adv: batadv0: Adding interface: batadv_slave_1
[  448.174604][T12428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  448.249200][T12428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  448.350354][ T4102] hsr_slave_0: left promiscuous mode
[  448.394389][ T4102] hsr_slave_1: left promiscuous mode
[  448.411625][ T4102] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  448.430930][ T4102] batman_adv: batadv0: Removing interface: batadv_slave_0
[  448.669780][ T5841] Bluetooth: hci1: command tx timeout
[  448.917556][ T4102] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  448.946252][ T4102] batman_adv: batadv0: Removing interface: batadv_slave_1
[  449.007674][ T4102] veth1_macvtap: left promiscuous mode
[  449.026603][ T4102] veth0_macvtap: left promiscuous mode
[  449.043468][ T4102] veth1_vlan: left promiscuous mode
[  449.056693][ T4102] veth0_vlan: left promiscuous mode
[  449.958340][T12588] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.1869'.
[  450.293831][ T4102] team0 (unregistering): Port device team_slave_1 removed
[  450.382320][ T4102] team0 (unregistering): Port device team_slave_0 removed
[  451.182904][T12579] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  451.199904][T12579] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  451.235814][T12579] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  451.384438][T12428] hsr_slave_0: entered promiscuous mode
[  451.406027][T12428] hsr_slave_1: entered promiscuous mode
[  451.420377][T12428] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  451.438502][T12428] Cannot create hsr debugfs directory
[  452.346289][T12621] netlink: 'syz.0.1880': attribute type 39 has an invalid length.
[  453.339594][T12649] netlink: 'syz.2.1888': attribute type 37 has an invalid length.
[  453.374654][T12428] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  453.466857][T12428] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  453.496087][T12428] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  453.556187][T12428] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  453.867090][T12428] 8021q: adding VLAN 0 to HW filter on device bond0
[  453.935377][T12428] 8021q: adding VLAN 0 to HW filter on device team0
[  454.117401][ T6026] bridge0: port 1(bridge_slave_0) entered blocking state
[  454.124720][ T6026] bridge0: port 1(bridge_slave_0) entered forwarding state
[  454.177780][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  454.185056][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  455.334257][T12428] 8021q: adding VLAN 0 to HW filter on device batadv0
[  455.529516][T12428] veth0_vlan: entered promiscuous mode
[  455.741338][T12428] veth1_vlan: entered promiscuous mode
[  455.866054][T12428] veth0_macvtap: entered promiscuous mode
[  455.903559][T12428] veth1_macvtap: entered promiscuous mode
[  456.001189][T12428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  456.028046][T12428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.063569][T12428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  456.089390][T12428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.117229][T12428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  456.145075][T12428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.183891][T12428] batman_adv: batadv0: Interface activated: batadv_slave_0
[  456.235484][T12428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  456.276686][T12428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.303651][T12428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  456.333283][T12428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.356618][T12428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  456.392731][T12428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.418891][T12428] batman_adv: batadv0: Interface activated: batadv_slave_1
[  456.466670][T12428] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  456.502667][T12428] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  456.542197][T12428] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  456.559422][T12428] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  457.034436][T12728] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1912'.
[  457.425252][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  457.471561][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  457.638425][T12738] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1915'.
[  457.690218][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  457.715976][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  457.729149][T12742] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1917'.
[  457.804491][T12743] netlink: 'syz.1.1916': attribute type 10 has an invalid length.
[  457.827189][T12743] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1916'.
[  458.793627][ T4102] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  458.936819][ T4102] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  458.975082][T12761] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1922'.
[  459.065285][ T4102] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.185483][ T4102] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.317281][ T4102] bridge_slave_1: left allmulticast mode
[  459.323094][ T4102] bridge_slave_1: left promiscuous mode
[  459.328930][ T4102] bridge0: port 2(bridge_slave_1) entered disabled state
[  459.342153][ T4102] bridge_slave_0: left allmulticast mode
[  459.347834][ T4102] bridge_slave_0: left promiscuous mode
[  459.356753][ T4102] bridge0: port 1(bridge_slave_0) entered disabled state
[  459.783550][ T4102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  459.794465][ T4102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  459.804440][ T4102] bond0 (unregistering): Released all slaves
[  460.045837][ T4102] hsr_slave_0: left promiscuous mode
[  460.053829][ T4102] hsr_slave_1: left promiscuous mode
[  460.060004][ T4102] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  460.067394][ T4102] batman_adv: batadv0: Removing interface: batadv_slave_0
[  460.075537][ T4102] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  460.083322][ T4102] batman_adv: batadv0: Removing interface: batadv_slave_1
[  460.100869][ T4102] veth1_macvtap: left promiscuous mode
[  460.106419][ T4102] veth0_macvtap: left promiscuous mode
[  460.112049][ T4102] veth1_vlan: left promiscuous mode
[  460.117326][ T4102] veth0_vlan: left promiscuous mode
[  461.134047][T12786] FAULT_INJECTION: forcing a failure.
[  461.134047][T12786] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  461.176745][T12786] CPU: 1 UID: 0 PID: 12786 Comm: syz.2.1929 Not tainted 6.15.0-rc4-syzkaller-gb615ce5fbefb #0 PREEMPT(full) 
[  461.176776][T12786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  461.176789][T12786] Call Trace:
[  461.176797][T12786]  <TASK>
[  461.176806][T12786]  dump_stack_lvl+0x189/0x250
[  461.176844][T12786]  ? __pfx_dump_stack_lvl+0x10/0x10
[  461.176873][T12786]  ? __pfx__printk+0x10/0x10
[  461.176908][T12786]  should_fail_ex+0x414/0x560
[  461.176935][T12786]  _copy_to_user+0x31/0xb0
[  461.176967][T12786]  bpf_test_finish+0x532/0x660
[  461.176997][T12786]  ? __pfx_bpf_test_finish+0x10/0x10
[  461.177026][T12786]  ? bpf_test_init+0x133/0x170
[  461.177050][T12786]  bpf_prog_test_run_xdp+0x79a/0xf90
[  461.177100][T12786]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  461.177129][T12786]  ? __fget_files+0x2a/0x420
[  461.177163][T12786]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  461.177186][T12786]  bpf_prog_test_run+0x2a9/0x340
[  461.177218][T12786]  __sys_bpf+0x4a4/0x860
[  461.177245][T12786]  ? __pfx___sys_bpf+0x10/0x10
[  461.177285][T12786]  ? ksys_write+0x1f0/0x250
[  461.177308][T12786]  ? rcu_is_watching+0x15/0xb0
[  461.177349][T12786]  __x64_sys_bpf+0x7c/0x90
[  461.177377][T12786]  do_syscall_64+0xf6/0x210
[  461.177403][T12786]  ? clear_bhb_loop+0x45/0xa0
[  461.177428][T12786]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  461.177446][T12786] RIP: 0033:0x7f297178e969
[  461.177464][T12786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  461.177480][T12786] RSP: 002b:00007f2972595038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  461.177501][T12786] RAX: ffffffffffffffda RBX: 00007f29719b5fa0 RCX: 00007f297178e969
[  461.177515][T12786] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  461.177527][T12786] RBP: 00007f2972595090 R08: 0000000000000000 R09: 0000000000000000
[  461.177539][T12786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  461.177551][T12786] R13: 0000000000000000 R14: 00007f29719b5fa0 R15: 00007fffc5768af8
[  461.177581][T12786]  </TASK>
[  461.419157][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  461.428671][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  461.443155][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  461.454584][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  461.475757][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  461.526454][ T4102] team0 (unregistering): Port device team_slave_1 removed
[  461.606011][ T4102] team0 (unregistering): Port device team_slave_0 removed
[  463.187069][T12813] netlink: 'syz.2.1937': attribute type 49 has an invalid length.
[  463.335342][T12792] chnl_net:caif_netlink_parms(): no params data found
[  463.519287][T12826] netlink: 'syz.0.1941': attribute type 3 has an invalid length.
[  463.530060][T12826] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.1941'.
[  463.552476][ T5845] Bluetooth: hci1: command tx timeout
[  463.971903][T12792] bridge0: port 1(bridge_slave_0) entered blocking state
[  463.979349][T12792] bridge0: port 1(bridge_slave_0) entered disabled state
[  463.986604][T12792] bridge_slave_0: entered allmulticast mode
[  464.010309][T12792] bridge_slave_0: entered promiscuous mode
[  464.023065][T12843] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1944'.
[  464.033127][T12842] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1944'.
[  464.059717][T12844] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1944'.
[  464.069967][T12792] bridge0: port 2(bridge_slave_1) entered blocking state
[  464.082920][T12792] bridge0: port 2(bridge_slave_1) entered disabled state
[  464.093537][T12792] bridge_slave_1: entered allmulticast mode
[  464.123381][T12792] bridge_slave_1: entered promiscuous mode
[  464.206260][T12792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  464.220713][T12792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  464.420923][T12792] team0: Port device team_slave_0 added
[  464.445299][T12792] team0: Port device team_slave_1 added
[  464.588347][T12792] batman_adv: batadv0: Adding interface: batadv_slave_0
[  464.608532][T12792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  464.655322][T12792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  464.719887][ T5845] Bluetooth: hci4: ISO packet for unknown connection handle 3082
[  464.973641][T12792] batman_adv: batadv0: Adding interface: batadv_slave_1
[  464.988759][T12792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  465.055268][T12792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  465.096772][T12873] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1952'.
[  465.179171][T12792] hsr_slave_0: entered promiscuous mode
[  465.186629][T12792] hsr_slave_1: entered promiscuous mode
[  465.194695][T12792] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  465.202434][T12792] Cannot create hsr debugfs directory
[  465.631911][ T5845] Bluetooth: hci1: command tx timeout
[  465.973761][T12909] netlink: 'syz.2.1968': attribute type 11 has an invalid length.
[  465.982419][T12909] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1968'.
[  465.995159][T12909] netlink: 'syz.2.1968': attribute type 10 has an invalid length.
[  466.003626][T12909] team0: Device wlan1 is of different type
[  466.010598][T12908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  466.011369][T12792] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  466.052997][T12792] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  466.098709][T12792] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  466.171522][T12792] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  466.197906][T12923] FAULT_INJECTION: forcing a failure.
[  466.197906][T12923] name failslab, interval 1, probability 0, space 0, times 0
[  466.213874][T12923] CPU: 1 UID: 0 PID: 12923 Comm: syz.4.1972 Not tainted 6.15.0-rc4-syzkaller-gb615ce5fbefb #0 PREEMPT(full) 
[  466.213901][T12923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  466.213913][T12923] Call Trace:
[  466.213920][T12923]  <TASK>
[  466.213929][T12923]  dump_stack_lvl+0x189/0x250
[  466.213968][T12923]  ? __pfx_dump_stack_lvl+0x10/0x10
[  466.213997][T12923]  ? __pfx__printk+0x10/0x10
[  466.214022][T12923]  ? __pfx___might_resched+0x10/0x10
[  466.214038][T12923]  ? fs_reclaim_acquire+0x7d/0x100
[  466.214060][T12923]  should_fail_ex+0x414/0x560
[  466.214086][T12923]  should_failslab+0xa8/0x100
[  466.214116][T12923]  __kmalloc_noprof+0xcb/0x4f0
[  466.214142][T12923]  ? security_sk_alloc+0x52/0x390
[  466.214175][T12923]  security_sk_alloc+0x52/0x390
[  466.214205][T12923]  sk_prot_alloc+0x101/0x220
[  466.214227][T12923]  ? sk_alloc+0x24/0x370
[  466.214251][T12923]  sk_alloc+0x3a/0x370
[  466.214271][T12923]  ? bpf_ctx_init+0x167/0x1d0
[  466.214293][T12923]  bpf_prog_test_run_skb+0x2ed/0x1560
[  466.214311][T12923]  ? __fget_files+0x2a/0x420
[  466.214349][T12923]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  466.214368][T12923]  bpf_prog_test_run+0x2a9/0x340
[  466.214398][T12923]  __sys_bpf+0x4a4/0x860
[  466.214428][T12923]  ? __pfx___sys_bpf+0x10/0x10
[  466.214465][T12923]  ? ksys_write+0x1f0/0x250
[  466.214485][T12923]  ? rcu_is_watching+0x15/0xb0
[  466.214525][T12923]  __x64_sys_bpf+0x7c/0x90
[  466.214547][T12923]  do_syscall_64+0xf6/0x210
[  466.214573][T12923]  ? clear_bhb_loop+0x45/0xa0
[  466.214597][T12923]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.214614][T12923] RIP: 0033:0x7fb2a018e969
[  466.214631][T12923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  466.214647][T12923] RSP: 002b:00007fb2a109f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  466.214667][T12923] RAX: ffffffffffffffda RBX: 00007fb2a03b5fa0 RCX: 00007fb2a018e969
[  466.214682][T12923] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a
[  466.214693][T12923] RBP: 00007fb2a109f090 R08: 0000000000000000 R09: 0000000000000000
[  466.214703][T12923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  466.214713][T12923] R13: 0000000000000000 R14: 00007fb2a03b5fa0 R15: 00007ffe0bab8bb8
[  466.214743][T12923]  </TASK>
[  466.515497][T12792] 8021q: adding VLAN 0 to HW filter on device bond0
[  466.544220][T12792] 8021q: adding VLAN 0 to HW filter on device team0
[  466.584644][ T6026] bridge0: port 1(bridge_slave_0) entered blocking state
[  466.591966][ T6026] bridge0: port 1(bridge_slave_0) entered forwarding state
[  466.614973][ T6026] bridge0: port 2(bridge_slave_1) entered blocking state
[  466.622225][ T6026] bridge0: port 2(bridge_slave_1) entered forwarding state
[  467.381085][T12952] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1983'.
[  467.466320][T12792] 8021q: adding VLAN 0 to HW filter on device batadv0
[  467.699827][T12792] veth0_vlan: entered promiscuous mode
[  467.719154][ T5845] Bluetooth: hci1: command tx timeout
[  467.735301][T12792] veth1_vlan: entered promiscuous mode
[  467.810026][T12792] veth0_macvtap: entered promiscuous mode
[  467.833950][T12792] veth1_macvtap: entered promiscuous mode
[  467.867142][T12962] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1986'.
[  467.906821][T12967] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1988'.
[  467.937026][T12961] delete_channel: no stack
[  467.992997][T12792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  468.023671][T12792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  468.034456][T12792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  468.046753][T12792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  468.056918][T12792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  468.067683][T12792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  468.098636][T12792] batman_adv: batadv0: Interface activated: batadv_slave_0
[  468.147610][T12792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  468.194405][T12792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  468.226079][T12792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  468.259758][T12792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  468.302869][T12792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  468.382972][T12792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  468.398000][T12792] batman_adv: batadv0: Interface activated: batadv_slave_1
[  468.411434][T12792] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  468.420517][T12792] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  468.429714][T12792] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  468.439746][T12792] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  469.169451][ T6026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  469.177330][ T6026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  469.254118][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  469.267628][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  469.562250][T12998] raw_sendmsg: syz.1.1997 forgot to set AF_INET. Fix it!
[  470.197265][ T5845] Bluetooth: hci0: ISO packet for unknown connection handle 3082
[  470.237465][T13019] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2006'.
[  470.308751][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.502577][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.753034][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.834071][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.931564][   T12] bridge_slave_1: left allmulticast mode
[  470.937258][   T12] bridge_slave_1: left promiscuous mode
[  470.943452][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  470.954722][   T12] bridge_slave_0: left allmulticast mode
[  470.961063][   T12] bridge_slave_0: left promiscuous mode
[  470.966790][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  471.262334][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  471.274035][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  471.284875][   T12] bond0 (unregistering): Released all slaves
[  471.525376][   T12] hsr_slave_0: left promiscuous mode
[  471.531391][   T12] hsr_slave_1: left promiscuous mode
[  471.537204][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  471.544881][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  471.552924][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  471.562073][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  471.583911][   T12] veth1_macvtap: left promiscuous mode
[  471.590343][   T12] veth0_macvtap: left promiscuous mode
[  471.595949][   T12] veth1_vlan: left promiscuous mode
[  471.601372][   T12] veth0_vlan: left promiscuous mode
[  472.087285][   T12] team0 (unregistering): Port device team_slave_1 removed
[  472.178419][T13039] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.2011'.
[  472.235055][   T12] team0 (unregistering): Port device team_slave_0 removed
[  472.427478][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  472.447978][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  472.456862][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  472.479752][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  472.488049][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  472.832213][T13036] C: renamed from team_slave_0 (while UP)
[  472.892144][T13036] netlink: 'syz.2.2009': attribute type 1 has an invalid length.
[  472.918311][T13036] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2009'.
[  472.962306][T13036] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  473.535357][T13046] chnl_net:caif_netlink_parms(): no params data found
[  474.067797][T13046] bridge0: port 1(bridge_slave_0) entered blocking state
[  474.099365][T13046] bridge0: port 1(bridge_slave_0) entered disabled state
[  474.106673][T13046] bridge_slave_0: entered allmulticast mode
[  474.118497][T13088] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.2023'.
[  474.130860][T13046] bridge_slave_0: entered promiscuous mode
[  474.147778][T13046] bridge0: port 2(bridge_slave_1) entered blocking state
[  474.161025][T13046] bridge0: port 2(bridge_slave_1) entered disabled state
[  474.179514][T13046] bridge_slave_1: entered allmulticast mode
[  474.187892][T13046] bridge_slave_1: entered promiscuous mode
[  474.359172][T13046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  474.481376][T13046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  474.649397][ T5845] Bluetooth: hci1: command tx timeout
[  474.908822][T13104] netlink: 'syz.2.2027': attribute type 10 has an invalid length.
[  474.997335][T13104] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2027'.
[  475.403899][T13046] team0: Port device team_slave_0 added
[  475.450690][T13046] team0: Port device team_slave_1 added
[  475.921940][T13046] batman_adv: batadv0: Adding interface: batadv_slave_0
[  475.938539][T13046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  476.032083][T13046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  476.053795][T13111] netlink: 67 bytes leftover after parsing attributes in process `syz.4.2030'.
[  476.101089][T13046] batman_adv: batadv0: Adding interface: batadv_slave_1
[  476.108620][T13046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  476.209250][T13046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  476.628184][T13129] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.2037'.
[  476.679134][ T5845] Bluetooth: hci1: command tx timeout
[  476.717567][T13046] hsr_slave_0: entered promiscuous mode
[  476.724848][T13046] hsr_slave_1: entered promiscuous mode
[  476.731380][T13046] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  476.739111][T13046] Cannot create hsr debugfs directory
[  476.863757][T13134] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  476.871747][T13134] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  477.395592][T13144] netlink: 'syz.2.2041': attribute type 39 has an invalid length.
[  477.473199][T13146] wg2: entered promiscuous mode
[  477.478851][T13146] wg2: entered allmulticast mode
[  478.234151][T13174] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.2050'.
[  478.761283][ T5845] Bluetooth: hci1: command tx timeout
[  479.022036][T13046] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  479.419499][T13046] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  480.835036][ T5845] Bluetooth: hci1: command tx timeout
[  481.078599][T13046] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  481.096252][T13046] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  481.497791][T13046] 8021q: adding VLAN 0 to HW filter on device bond0
[  481.536664][T13046] 8021q: adding VLAN 0 to HW filter on device team0
[  481.580382][T13046] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  481.719148][T13046] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  481.794599][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  481.801855][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  481.894946][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  481.902211][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  482.043491][T13212] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.2063'.
[  482.344217][T13046] 8021q: adding VLAN 0 to HW filter on device batadv0
[  482.482490][T13046] veth0_vlan: entered promiscuous mode
[  482.509776][T13046] veth1_vlan: entered promiscuous mode
[  482.617760][T13046] veth0_macvtap: entered promiscuous mode
[  482.637312][T13046] veth1_macvtap: entered promiscuous mode
[  482.666349][T13046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  482.677285][T13046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  482.688239][T13046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  482.699378][T13046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  482.715025][T13046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  482.737892][T13046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  482.753401][T13046] batman_adv: batadv0: Interface activated: batadv_slave_0
[  482.773346][T13046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  482.784255][T13046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  482.794621][T13046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  482.805283][T13046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  482.816453][T13046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  482.833509][T13046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  482.845376][T13046] batman_adv: batadv0: Interface activated: batadv_slave_1
[  482.877166][T13046] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  482.899151][T13046] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  482.918158][T13046] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  482.948771][T13046] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  483.074065][T13248] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.2075'.
[  483.118059][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  483.143692][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  483.144236][ T4102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  483.159755][ T4102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  483.857263][T13283] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.2087'.
[  484.050184][T13295] FAULT_INJECTION: forcing a failure.
[  484.050184][T13295] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  484.074427][T13295] CPU: 1 UID: 0 PID: 13295 Comm: syz.2.2090 Not tainted 6.15.0-rc4-syzkaller-gb615ce5fbefb #0 PREEMPT(full) 
[  484.074473][T13295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  484.074497][T13295] Call Trace:
[  484.074505][T13295]  <TASK>
[  484.074516][T13295]  dump_stack_lvl+0x189/0x250
[  484.074548][T13295]  ? __lock_acquire+0xaac/0xd20
[  484.074580][T13295]  ? __pfx_dump_stack_lvl+0x10/0x10
[  484.074609][T13295]  ? __pfx__printk+0x10/0x10
[  484.074630][T13295]  ? __might_fault+0xb0/0x130
[  484.074661][T13295]  ? __might_fault+0xb0/0x130
[  484.074696][T13295]  should_fail_ex+0x414/0x560
[  484.074724][T13295]  _copy_from_user+0x2d/0xb0
[  484.074754][T13295]  __sys_bpf+0x1ed/0x860
[  484.074794][T13295]  ? __pfx___sys_bpf+0x10/0x10
[  484.074837][T13295]  ? ksys_write+0x1f0/0x250
[  484.074860][T13295]  ? rcu_is_watching+0x15/0xb0
[  484.074905][T13295]  __x64_sys_bpf+0x7c/0x90
[  484.074929][T13295]  do_syscall_64+0xf6/0x210
[  484.074958][T13295]  ? clear_bhb_loop+0x45/0xa0
[  484.074984][T13295]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.075003][T13295] RIP: 0033:0x7f297178e969
[  484.075021][T13295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  484.075039][T13295] RSP: 002b:00007f2972595038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  484.075061][T13295] RAX: ffffffffffffffda RBX: 00007f29719b5fa0 RCX: 00007f297178e969
[  484.075076][T13295] RDX: 0000000000000048 RSI: 0000200000000500 RDI: 000000000000000a
[  484.075088][T13295] RBP: 00007f2972595090 R08: 0000000000000000 R09: 0000000000000000
[  484.075101][T13295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  484.075112][T13295] R13: 0000000000000000 R14: 00007f29719b5fa0 R15: 00007fffc5768af8
[  484.075149][T13295]  </TASK>
[  484.453598][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  484.483018][T13301] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2094'.
[  485.463383][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.601956][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.663365][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.780702][   T12] bridge_slave_1: left allmulticast mode
[  485.786370][   T12] bridge_slave_1: left promiscuous mode
[  485.792155][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  485.803359][   T12] bridge_slave_0: left allmulticast mode
[  485.809030][   T12] bridge_slave_0: left promiscuous mode
[  485.814846][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  486.120857][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  486.131815][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  486.143185][   T12] bond0 (unregistering): Released all slaves
[  486.277746][T13312] netlink: 'syz.4.2098': attribute type 29 has an invalid length.
[  486.312476][T13312] netlink: 'syz.4.2098': attribute type 29 has an invalid length.
[  486.350580][T13314] netlink: 'syz.0.2095': attribute type 33 has an invalid length.
[  486.373899][T13314] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2095'.
[  486.499394][T13314] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  486.557510][T13322] netlink: 'syz.4.2099': attribute type 41 has an invalid length.
[  486.577066][T13322] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2099'.
[  486.922023][   T12] hsr_slave_0: left promiscuous mode
[  486.931330][T13328] FAULT_INJECTION: forcing a failure.
[  486.931330][T13328] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  486.950965][T13328] CPU: 0 UID: 0 PID: 13328 Comm: syz.2.2102 Not tainted 6.15.0-rc4-syzkaller-gb615ce5fbefb #0 PREEMPT(full) 
[  486.950993][T13328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  486.951024][T13328] Call Trace:
[  486.951032][T13328]  <TASK>
[  486.951040][T13328]  dump_stack_lvl+0x189/0x250
[  486.951078][T13328]  ? __pfx_dump_stack_lvl+0x10/0x10
[  486.951107][T13328]  ? __pfx__printk+0x10/0x10
[  486.951141][T13328]  should_fail_ex+0x414/0x560
[  486.951168][T13328]  _copy_to_user+0x31/0xb0
[  486.951200][T13328]  bpf_prog_test_run_syscall+0x331/0x4b0
[  486.951229][T13328]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[  486.951262][T13328]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[  486.951287][T13328]  bpf_prog_test_run+0x2a9/0x340
[  486.951319][T13328]  __sys_bpf+0x4a4/0x860
[  486.951346][T13328]  ? __pfx___sys_bpf+0x10/0x10
[  486.951385][T13328]  ? ksys_write+0x1f0/0x250
[  486.951408][T13328]  ? rcu_is_watching+0x15/0xb0
[  486.951449][T13328]  __x64_sys_bpf+0x7c/0x90
[  486.951472][T13328]  do_syscall_64+0xf6/0x210
[  486.951500][T13328]  ? clear_bhb_loop+0x45/0xa0
[  486.951525][T13328]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  486.951544][T13328] RIP: 0033:0x7f297178e969
[  486.951561][T13328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  486.951578][T13328] RSP: 002b:00007f2972595038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  486.951599][T13328] RAX: ffffffffffffffda RBX: 00007f29719b5fa0 RCX: 00007f297178e969
[  486.951614][T13328] RDX: 0000000000000048 RSI: 0000200000000500 RDI: 000000000000000a
[  486.951625][T13328] RBP: 00007f2972595090 R08: 0000000000000000 R09: 0000000000000000
[  486.951637][T13328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  486.951648][T13328] R13: 0000000000000000 R14: 00007f29719b5fa0 R15: 00007fffc5768af8
[  486.951679][T13328]  </TASK>
[  486.960632][T13330] netlink: 'syz.4.2103': attribute type 5 has an invalid length.
[  487.165932][   T12] hsr_slave_1: left promiscuous mode
[  487.180193][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  487.198064][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  487.233510][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  487.244219][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  487.254873][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  487.306792][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  487.354874][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  487.381722][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  487.391704][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  487.468317][   T12] veth1_macvtap: left promiscuous mode
[  487.475452][   T12] veth0_macvtap: left promiscuous mode
[  487.481912][   T12] veth1_vlan: left promiscuous mode
[  487.487294][   T12] veth0_vlan: left promiscuous mode
[  487.494535][T13347] netlink: 'syz.1.2106': attribute type 40 has an invalid length.
[  488.306952][   T12] team0 (unregistering): Port device team_slave_1 removed
[  488.345526][   T12] team0 (unregistering): Port device team_slave_0 removed
[  488.706075][T13334] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2101'.
[  489.469504][ T5841] Bluetooth: hci1: command tx timeout
[  489.679430][T13382] veth1_virt_wifi: entered promiscuous mode
[  489.685432][T13382] veth1_virt_wifi: entered allmulticast mode
[  489.833834][T13340] chnl_net:caif_netlink_parms(): no params data found
[  490.033907][T13340] bridge0: port 1(bridge_slave_0) entered blocking state
[  490.042156][T13340] bridge0: port 1(bridge_slave_0) entered disabled state
[  490.050268][T13340] bridge_slave_0: entered allmulticast mode
[  490.059171][T13340] bridge_slave_0: entered promiscuous mode
[  490.082779][T13340] bridge0: port 2(bridge_slave_1) entered blocking state
[  490.090486][T13340] bridge0: port 2(bridge_slave_1) entered disabled state
[  490.097792][T13340] bridge_slave_1: entered allmulticast mode
[  490.106554][T13340] bridge_slave_1: entered promiscuous mode
[  490.168080][T13398] ÿ: renamed from bond_slave_0
[  490.812802][T13340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  490.883119][T13340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  491.034077][T13340] team0: Port device team_slave_0 added
[  491.058927][T13340] team0: Port device team_slave_1 added
[  491.363302][T13421] netlink: 'syz.1.2125': attribute type 29 has an invalid length.
[  491.405614][T13340] batman_adv: batadv0: Adding interface: batadv_slave_0
[  491.412762][T13340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  491.449376][T13340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  491.504607][T13340] batman_adv: batadv0: Adding interface: batadv_slave_1
[  491.522018][T13340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  491.559439][ T5841] Bluetooth: hci1: command tx timeout
[  491.586801][T13340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  492.159963][T13340] hsr_slave_0: entered promiscuous mode
[  492.167540][T13340] hsr_slave_1: entered promiscuous mode
[  492.177294][T13340] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  492.185315][T13340] Cannot create hsr debugfs directory
[  493.073241][T13340] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  493.100673][T13340] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  493.115532][T13340] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  493.140252][T13340] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  493.197386][T13487] netlink: 'syz.2.2146': attribute type 7 has an invalid length.
[  493.206132][T13487] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2146'.
[  493.374482][T13494] netlink: 'syz.4.2150': attribute type 21 has an invalid length.
[  493.416620][T13494] netlink: 14553 bytes leftover after parsing attributes in process `syz.4.2150'.
[  493.535127][T13340] 8021q: adding VLAN 0 to HW filter on device bond0
[  493.635716][ T5841] Bluetooth: hci1: command tx timeout
[  493.660257][T13340] 8021q: adding VLAN 0 to HW filter on device team0
[  493.685738][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  493.692988][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  493.738956][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  493.746240][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  494.130931][T13509] netlink: 'syz.0.2153': attribute type 10 has an invalid length.
[  494.173925][T13509] bond0: left allmulticast mode
[  494.202927][T13509] bond_slave_1: left allmulticast mode
[  494.229420][T13509] dummy0: left allmulticast mode
[  494.255164][T13509] geneve0: left allmulticast mode
[  494.265330][T13509] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  494.287076][T13509] bond0: left promiscuous mode
[  494.297271][T13509] bond_slave_1: left promiscuous mode
[  494.307350][T13509] dummy0: left promiscuous mode
[  494.315533][T13509] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  494.335917][T13509] bridge0: port 3(bond0) entered disabled state
[  495.563751][T13509] 8021q: adding VLAN 0 to HW filter on device bond0
[  495.575716][T13509] bond0: entered promiscuous mode
[  495.582618][T13509] bond_slave_1: entered promiscuous mode
[  495.588777][T13509] dummy0: entered promiscuous mode
[  495.596783][T13509] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  495.606914][T13509] bond0: entered allmulticast mode
[  495.642480][T13509] bond_slave_1: entered allmulticast mode
[  495.661425][T13509] dummy0: entered allmulticast mode
[  495.666911][T13509] geneve0: entered allmulticast mode
[  495.689226][T13509] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  495.700779][T13509] team0: Port device bond0 added
[  495.709488][ T5841] Bluetooth: hci1: command tx timeout
[  495.849924][T13525] netlink: 'syz.2.2157': attribute type 10 has an invalid length.
[  495.862156][T13526] IPv6: Can't replace route, no match found
[  495.883073][T13527] syz.1.2160: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  495.910962][T13525] geneve0: entered promiscuous mode
[  495.926812][T13527] CPU: 1 UID: 0 PID: 13527 Comm: syz.1.2160 Not tainted 6.15.0-rc4-syzkaller-gb615ce5fbefb #0 PREEMPT(full) 
[  495.926848][T13527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  495.926863][T13527] Call Trace:
[  495.926873][T13527]  <TASK>
[  495.926883][T13527]  dump_stack_lvl+0x189/0x250
[  495.926922][T13527]  ? __pfx_dump_stack_lvl+0x10/0x10
[  495.926958][T13527]  ? __pfx__printk+0x10/0x10
[  495.926981][T13527]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  495.927028][T13527]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  495.927066][T13527]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  495.927105][T13527]  warn_alloc+0x214/0x310
[  495.927146][T13527]  ? __pfx_warn_alloc+0x10/0x10
[  495.927177][T13527]  ? kasan_save_track+0x4f/0x80
[  495.927202][T13527]  ? __kmalloc_cache_noprof+0x230/0x3d0
[  495.927229][T13527]  ? xskq_create+0x56/0x170
[  495.927255][T13527]  ? __x64_sys_setsockopt+0x18b/0x220
[  495.927283][T13527]  ? do_syscall_64+0xf6/0x210
[  495.927309][T13527]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  495.927344][T13527]  __vmalloc_node_range_noprof+0x125/0x12c0
[  495.927410][T13527]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  495.927446][T13527]  ? __kasan_kmalloc+0x93/0xb0
[  495.927479][T13527]  vmalloc_user_noprof+0x74/0x80
[  495.927511][T13527]  ? xskq_create+0xbf/0x170
[  495.927533][T13527]  xskq_create+0xbf/0x170
[  495.927561][T13527]  xsk_init_queue+0xb0/0x110
[  495.927589][T13527]  xsk_setsockopt+0x4de/0x710
[  495.927611][T13527]  ? __pfx_xsk_setsockopt+0x10/0x10
[  495.927640][T13527]  ? aa_sock_opt_perm+0x74/0x110
[  495.927667][T13527]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  495.927692][T13527]  ? __pfx_xsk_setsockopt+0x10/0x10
[  495.927718][T13527]  do_sock_setsockopt+0x257/0x3e0
[  495.927748][T13527]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  495.927773][T13527]  ? __fget_files+0x2a/0x420
[  495.927807][T13527]  ? __fget_files+0x3a0/0x420
[  495.927835][T13527]  ? __fget_files+0x2a/0x420
[  495.927873][T13527]  __x64_sys_setsockopt+0x18b/0x220
[  495.927908][T13527]  do_syscall_64+0xf6/0x210
[  495.927937][T13527]  ? clear_bhb_loop+0x45/0xa0
[  495.927962][T13527]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  495.927983][T13527] RIP: 0033:0x7f06c0d8e969
[  495.928013][T13527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  495.928032][T13527] RSP: 002b:00007f06c1be5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  495.928055][T13527] RAX: ffffffffffffffda RBX: 00007f06c0fb5fa0 RCX: 00007f06c0d8e969
[  495.928071][T13527] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000c
[  495.928083][T13527] RBP: 00007f06c0e10ab1 R08: 0000000000000004 R09: 0000000000000000
[  495.928096][T13527] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  495.928109][T13527] R13: 0000000000000000 R14: 00007f06c0fb5fa0 R15: 00007fffaa148e78
[  495.928144][T13527]  </TASK>
[  495.928193][T13527] Mem-Info:
[  495.975966][T13525] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  496.058465][T13527] active_anon:5427 inactive_anon:0 isolated_anon:0
[  496.058465][T13527]  active_file:20993 inactive_file:40026 isolated_file:0
[  496.058465][T13527]  unevictable:768 dirty:213 writeback:0
[  496.058465][T13527]  slab_reclaimable:10636 slab_unreclaimable:96860
[  496.058465][T13527]  mapped:29290 shmem:1365 pagetables:680
[  496.058465][T13527]  sec_pagetables:0 bounce:0
[  496.058465][T13527]  kernel_misc_reclaimable:0
[  496.058465][T13527]  free:1326454 free_pcp:629 free_cma:0
[  496.128085][T13340] 8021q: adding VLAN 0 to HW filter on device batadv0
[  496.204656][T13527] Node 0 active_anon:21708kB inactive_anon:0kB active_file:83972kB inactive_file:159900kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117160kB dirty:852kB writeback:0kB shmem:3924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10088kB pagetables:2720kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  496.389288][T13527] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  496.475449][T13340] veth0_vlan: entered promiscuous mode
[  496.501382][T13527] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  496.663939][T13527] lowmem_reserve[]: 0 2504 2504 2504 2504
[  496.711910][T13527] Node 0 DMA32 free:1377776kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:21700kB inactive_anon:0kB active_file:83972kB inactive_file:159800kB unevictable:1536kB writepending:848kB present:3129332kB managed:2564144kB mlocked:0kB bounce:0kB free_pcp:1200kB local_pcp:760kB free_cma:0kB
[  496.726198][T13340] veth1_vlan: entered promiscuous mode
[  496.843890][T13527] lowmem_reserve[]: 0 0 0 0 0
[  496.868370][T13527] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  497.029334][T13527] lowmem_reserve[]: 0 0 0 0 0
[  497.034234][T13527] Node 1 Normal free:3912908kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  497.130962][T13527] lowmem_reserve[]: 0 0 0 0 0
[  497.135860][T13527] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  497.227085][T13340] veth0_macvtap: entered promiscuous mode
[  497.235513][T13527] Node 0 DMA32: 1980*4kB (UM) 1682*8kB (UME) 1330*16kB (UME) 937*32kB (UME) 844*64kB (UME) 647*128kB (UME) 421*256kB (UM) 306*512kB (UME) 188*1024kB (UM) 26*2048kB (UM) 161*4096kB (UME) = 1379136kB
[  497.279448][T13527] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  497.283877][T13340] veth1_macvtap: entered promiscuous mode
[  497.316948][T13527] Node 1 Normal: 243*4kB (UME) 68*8kB (UME) 50*16kB (UME) 210*32kB (UME) 116*64kB (UME) 35*128kB (UME) 17*256kB (UM) 7*512kB (UME) 5*1024kB (UME) 4*2048kB (UE) 945*4096kB (M) = 3912908kB
[  497.323627][T13340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  497.353894][T13527] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  497.374839][T13340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  497.388146][T13340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  497.398715][T13527] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  497.398742][T13527] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  497.408257][T13340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  497.444488][T13340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  497.447542][T13527] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  497.461443][T13340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  497.465298][T13527] 62381 total pagecache pages
[  497.477246][T13340] batman_adv: batadv0: Interface activated: batadv_slave_0
[  497.492410][T13527] 0 pages in swap cache
[  497.496613][T13527] Free swap  = 124996kB
[  497.506538][T13527] Total swap = 124996kB
[  497.510973][T13527] 2097051 pages RAM
[  497.514805][T13527] 0 pages HighMem/MovableOnly
[  497.559179][T13527] 424357 pages reserved
[  497.563691][T13527] 0 pages cma reserved
[  497.593250][T13340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  497.630649][T13340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  497.642134][T13340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  497.653621][T13340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  497.663750][T13340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  497.731248][T13340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  497.745304][T13340] batman_adv: batadv0: Interface activated: batadv_slave_1
[  497.827237][T13340] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  497.846947][T13340] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  497.857255][T13340] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  497.874859][T13340] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  498.146407][ T4102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  498.185169][ T4102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  499.816938][T13595] netlink: 'syz.0.2180': attribute type 7 has an invalid length.
[  501.556446][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  501.563126][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  501.609335][T13620] FAULT_INJECTION: forcing a failure.
[  501.609335][T13620] name failslab, interval 1, probability 0, space 0, times 0
[  501.627766][T13620] CPU: 0 UID: 0 PID: 13620 Comm: syz.0.2191 Not tainted 6.15.0-rc4-syzkaller-gb615ce5fbefb #0 PREEMPT(full) 
[  501.627796][T13620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  501.627809][T13620] Call Trace:
[  501.627817][T13620]  <TASK>
[  501.627826][T13620]  dump_stack_lvl+0x189/0x250
[  501.627863][T13620]  ? __pfx_dump_stack_lvl+0x10/0x10
[  501.627891][T13620]  ? __pfx__printk+0x10/0x10
[  501.627916][T13620]  ? __pfx___might_resched+0x10/0x10
[  501.627933][T13620]  ? fs_reclaim_acquire+0x7d/0x100
[  501.627955][T13620]  should_fail_ex+0x414/0x560
[  501.627976][T13620]  should_failslab+0xa8/0x100
[  501.628001][T13620]  __kmalloc_noprof+0xcb/0x4f0
[  501.628021][T13620]  ? bpf_test_init+0xc2/0x170
[  501.628042][T13620]  bpf_test_init+0xc2/0x170
[  501.628062][T13620]  bpf_prog_test_run_xdp+0x37c/0xf90
[  501.628094][T13620]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  501.628116][T13620]  ? __fget_files+0x2a/0x420
[  501.628143][T13620]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  501.628162][T13620]  bpf_prog_test_run+0x2a9/0x340
[  501.628187][T13620]  __sys_bpf+0x4a4/0x860
[  501.628209][T13620]  ? __pfx___sys_bpf+0x10/0x10
[  501.628248][T13620]  ? ksys_write+0x1f0/0x250
[  501.628277][T13620]  __x64_sys_bpf+0x7c/0x90
[  501.628296][T13620]  do_syscall_64+0xf6/0x210
[  501.628318][T13620]  ? asm_sysvec_call_function_single+0x1a/0x20
[  501.628335][T13620]  ? clear_bhb_loop+0x45/0xa0
[  501.628354][T13620]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  501.628369][T13620] RIP: 0033:0x7f6dcbf8e969
[  501.628384][T13620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  501.628398][T13620] RSP: 002b:00007f6dccde1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  501.628415][T13620] RAX: ffffffffffffffda RBX: 00007f6dcc1b5fa0 RCX: 00007f6dcbf8e969
[  501.628427][T13620] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a
[  501.628438][T13620] RBP: 00007f6dccde1090 R08: 0000000000000000 R09: 0000000000000000
[  501.628447][T13620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  501.628457][T13620] R13: 0000000000000000 R14: 00007f6dcc1b5fa0 R15: 00007fff4e333a18
[  501.628482][T13620]  </TASK>
[  502.266856][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  502.285238][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  503.262127][T13655] netlink: 'syz.0.2200': attribute type 21 has an invalid length.
[  503.585606][   T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.766079][   T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.833825][   T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.896469][   T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.985576][   T36] bridge_slave_1: left allmulticast mode
[  503.991540][   T36] bridge_slave_1: left promiscuous mode
[  503.997251][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  504.006501][   T36] bridge_slave_0: left allmulticast mode
[  504.012609][   T36] bridge_slave_0: left promiscuous mode
[  504.018340][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  504.317001][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  504.331213][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  504.342843][   T36] bond0 (unregistering): Released all slaves
[  504.597072][   T36] hsr_slave_0: left promiscuous mode
[  504.603149][   T36] hsr_slave_1: left promiscuous mode
[  504.608971][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  504.616570][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  504.626205][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  504.633813][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  504.651651][   T36] veth1_macvtap: left promiscuous mode
[  504.657208][   T36] veth0_macvtap: left promiscuous mode
[  504.662981][   T36] veth1_vlan: left promiscuous mode
[  504.668281][   T36] veth0_vlan: left promiscuous mode
[  505.029965][   T36] team0 (unregistering): Port device team_slave_1 removed
[  505.068628][   T36] team0 (unregistering): Port device team_slave_0 removed
[  506.126235][T13683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2209'.
[  506.525644][T13689] netlink: 'syz.1.2212': attribute type 10 has an invalid length.
[  506.556563][T13689] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2212'.
[  506.586149][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  506.594761][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  506.619230][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  506.628599][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  506.647820][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  506.928922][T13696] chnl_net:caif_netlink_parms(): no params data found
[  507.196158][T13720] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2222'.
[  507.224023][T13719] delete_channel: no stack
[  507.395061][T13696] bridge0: port 1(bridge_slave_0) entered blocking state
[  507.430202][T13696] bridge0: port 1(bridge_slave_0) entered disabled state
[  507.459658][T13696] bridge_slave_0: entered allmulticast mode
[  507.488558][T13696] bridge_slave_0: entered promiscuous mode
[  507.532463][T13696] bridge0: port 2(bridge_slave_1) entered blocking state
[  507.553832][T13696] bridge0: port 2(bridge_slave_1) entered disabled state
[  507.601510][T13696] bridge_slave_1: entered allmulticast mode
[  507.617322][T13696] bridge_slave_1: entered promiscuous mode
[  508.679703][ T5841] Bluetooth: hci1: command tx timeout
[  510.623074][T13696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  510.712208][T13696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  510.752616][ T5841] Bluetooth: hci1: command tx timeout
[  510.841134][T13696] team0: Port device team_slave_0 added
[  510.852333][T13696] team0: Port device team_slave_1 added
[  510.925459][T13696] batman_adv: batadv0: Adding interface: batadv_slave_0
[  510.934888][T13696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  510.966666][T13696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  510.985324][T13696] batman_adv: batadv0: Adding interface: batadv_slave_1
[  511.003104][T13696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  511.036684][T13696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  511.067526][T13765] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2234'.
[  511.125400][T13763] netlink: 'syz.0.2232': attribute type 6 has an invalid length.
[  511.156985][T13765] bridge0: port 3(dummy0) entered disabled state
[  511.165296][T13763] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2232'.
[  511.229744][T13765] bridge0: port 3(dummy0) entered disabled state
[  511.373720][T13696] hsr_slave_0: entered promiscuous mode
[  511.397055][T13696] hsr_slave_1: entered promiscuous mode
[  511.408315][T13696] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  511.446395][T13775] netlink: 'syz.1.2237': attribute type 10 has an invalid length.
[  511.459415][T13696] Cannot create hsr debugfs directory
[  512.456496][T13696] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  512.468662][T13696] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  512.481202][T13696] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  512.493310][T13696] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  512.726956][T13696] 8021q: adding VLAN 0 to HW filter on device bond0
[  512.786339][T13696] 8021q: adding VLAN 0 to HW filter on device team0
[  512.828273][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  512.835590][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  512.849586][ T5841] Bluetooth: hci1: command tx timeout
[  513.018510][T13836] netlink: 'syz.2.2257': attribute type 7 has an invalid length.
[  513.036050][T13824] can: request_module (can-proto-4) failed.
[  513.234948][ T1335] bridge0: port 2(bridge_slave_1) entered blocking state
[  513.242196][ T1335] bridge0: port 2(bridge_slave_1) entered forwarding state
[  513.316674][T13696] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  513.577648][T13854] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.2262'.
[  513.695998][T13696] 8021q: adding VLAN 0 to HW filter on device batadv0
[  513.774783][T13696] veth0_vlan: entered promiscuous mode
[  513.814241][T13696] veth1_vlan: entered promiscuous mode
[  513.856398][T13696] veth0_macvtap: entered promiscuous mode
[  513.877230][T13696] veth1_macvtap: entered promiscuous mode
[  513.917455][T13696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  513.934416][T13696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  513.945033][T13696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  513.957959][T13696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  513.968620][T13696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  513.979299][T13696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  514.011899][T13696] batman_adv: batadv0: Interface activated: batadv_slave_0
[  514.036120][T13696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  514.079145][T13696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  514.089025][T13696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  514.102527][T13696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  514.124583][T13696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  514.148998][T13696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  514.180671][T13696] batman_adv: batadv0: Interface activated: batadv_slave_1
[  514.193036][T13696] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  514.204620][T13696] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  514.213555][T13696] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  514.245918][T13696] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  514.579592][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  514.587662][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  514.717264][ T1335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  514.736887][ T1335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  514.909422][ T5841] Bluetooth: hci1: command tx timeout
[  515.470941][T13922] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.2282'.
[  516.164408][ T6026] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  516.593443][ T6026] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  516.697493][ T6026] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  516.780275][ T6026] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  516.954330][ T6026] bridge_slave_1: left allmulticast mode
[  516.963428][ T6026] bridge_slave_1: left promiscuous mode
[  516.969314][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state
[  516.979699][ T6026] bridge_slave_0: left allmulticast mode
[  516.985968][ T6026] bridge_slave_0: left promiscuous mode
[  516.996401][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state
[  517.403983][ T6026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  517.424081][ T6026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  517.434953][ T6026] bond0 (unregistering): Released all slaves
[  517.671133][ T6026] hsr_slave_0: left promiscuous mode
[  517.677216][ T6026] hsr_slave_1: left promiscuous mode
[  517.684655][ T6026] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  517.692304][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_0
[  517.702652][ T6026] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  517.710952][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_1
[  517.740873][ T6026] veth1_macvtap: left promiscuous mode
[  517.746468][ T6026] veth0_macvtap: left promiscuous mode
[  517.755245][ T6026] veth1_vlan: left promiscuous mode
[  517.760630][ T6026] veth0_vlan: left promiscuous mode
[  518.185228][ T6026] team0 (unregistering): Port device team_slave_1 removed
[  518.221812][ T6026] team0 (unregistering): Port device team_slave_0 removed
[  518.391790][T13942] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.2290'.
[  518.970377][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  518.980725][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  518.991723][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  519.002052][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  519.010262][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  519.412850][T13968] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2292'.
[  519.435065][T13968] netlink: zone id is out of range
[  519.443236][T13968] netlink: zone id is out of range
[  519.448449][T13968] netlink: zone id is out of range
[  519.464257][T13968] netlink: zone id is out of range
[  519.474609][T13968] netlink: zone id is out of range
[  519.502556][T13968] netlink: zone id is out of range
[  519.510252][T13968] netlink: zone id is out of range
[  519.527349][T13968] netlink: zone id is out of range
[  519.548921][T13968] netlink: zone id is out of range
[  519.573476][T13968] netlink: zone id is out of range
[  519.834756][T13946] mac80211_hwsim hwsim14 wlan1: entered promiscuous mode
[  519.848368][T13946] mac80211_hwsim hwsim14 wlan1: entered allmulticast mode
[  519.868996][T13949] netlink: 'syz.2.2289': attribute type 10 has an invalid length.
[  519.878013][T13949] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.2289'.
[  519.891581][T13963] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2292'.
[  520.210882][T13984] netlink: 'syz.2.2299': attribute type 4 has an invalid length.
[  520.497072][T13998] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.2304'.
[  520.998704][T13957] chnl_net:caif_netlink_parms(): no params data found
[  521.069612][ T5845] Bluetooth: hci1: command tx timeout
[  521.361466][T13957] bridge0: port 1(bridge_slave_0) entered blocking state
[  521.394700][T13957] bridge0: port 1(bridge_slave_0) entered disabled state
[  521.398468][T14027] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2311'.
[  521.414429][T13957] bridge_slave_0: entered allmulticast mode
[  521.459374][T13957] bridge_slave_0: entered promiscuous mode
[  521.503563][T13957] bridge0: port 2(bridge_slave_1) entered blocking state
[  521.513065][T13957] bridge0: port 2(bridge_slave_1) entered disabled state
[  521.520547][T13957] bridge_slave_1: entered allmulticast mode
[  521.529092][T13957] bridge_slave_1: entered promiscuous mode
[  521.577881][T13957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  521.631882][T13957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  521.673946][T14033] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.2315'.
[  521.723643][T13957] team0: Port device team_slave_0 added
[  521.743043][T13957] team0: Port device team_slave_1 added
[  521.807089][T13957] batman_adv: batadv0: Adding interface: batadv_slave_0
[  521.817503][T13957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  521.849676][T13957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  521.865587][T13957] batman_adv: batadv0: Adding interface: batadv_slave_1
[  521.873535][T13957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  521.938224][T13957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  522.316171][T14046] netlink: 'syz.2.2319': attribute type 1 has an invalid length.
[  522.395348][T14046] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2319'.
[  522.953586][T13957] hsr_slave_0: entered promiscuous mode
[  522.990483][T13957] hsr_slave_1: entered promiscuous mode
[  522.996888][T13957] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  523.045023][T13957] Cannot create hsr debugfs directory
[  523.149494][ T5845] Bluetooth: hci1: command tx timeout
[  523.697846][T14064] tap0: tun_chr_ioctl cmd 1074025681
[  524.637345][T14083] netlink: 'syz.2.2330': attribute type 21 has an invalid length.
[  524.647192][T14083] netlink: 9254 bytes leftover after parsing attributes in process `syz.2.2330'.
[  524.650573][T14084] syzkaller0: entered promiscuous mode
[  524.667428][T14084] syzkaller0: entered allmulticast mode
[  524.719544][T13957] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  524.890725][T14089] netlink: 'syz.0.2332': attribute type 29 has an invalid length.
[  524.953724][T13957] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  525.109439][T14086] netlink: 'syz.0.2332': attribute type 29 has an invalid length.
[  525.149219][T13957] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  525.230803][T13957] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  525.239747][ T5845] Bluetooth: hci1: command tx timeout
[  525.542841][T13957] 8021q: adding VLAN 0 to HW filter on device bond0
[  525.598925][T14109] netlink: 'syz.1.2337': attribute type 1 has an invalid length.
[  525.617048][T14109] netlink: 'syz.1.2337': attribute type 4 has an invalid length.
[  525.626689][T14109] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2337'.
[  525.667091][T13957] 8021q: adding VLAN 0 to HW filter on device team0
[  525.710830][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[  525.718455][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[  525.740855][T14115] netlink: 'syz.2.2340': attribute type 19 has an invalid length.
[  525.757372][T14115] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2340'.
[  525.796218][ T4102] bridge0: port 2(bridge_slave_1) entered blocking state
[  525.803555][ T4102] bridge0: port 2(bridge_slave_1) entered forwarding state
[  525.942527][T13957] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  526.116534][T14131] netlink: 'syz.0.2346': attribute type 2 has an invalid length.
[  526.330212][T14139] netlink: 'syz.1.2348': attribute type 33 has an invalid length.
[  526.357856][T14139] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2348'.
[  526.374194][T14139] net_ratelimit: 75 callbacks suppressed
[  526.374214][T14139] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  526.432242][T13957] 8021q: adding VLAN 0 to HW filter on device batadv0
[  526.550078][T13957] veth0_vlan: entered promiscuous mode
[  526.596494][T13957] veth1_vlan: entered promiscuous mode
[  526.746541][T13957] veth0_macvtap: entered promiscuous mode
[  526.775425][T13957] veth1_macvtap: entered promiscuous mode
[  526.794726][T13957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  526.806943][T13957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  526.817694][T13957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  526.869782][T13957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  526.895435][T13957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  526.910159][T13957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  526.991137][T13957] batman_adv: batadv0: Interface activated: batadv_slave_0
[  527.018333][T13957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  527.030843][T13957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  527.041790][T13957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  527.052616][T13957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  527.066101][T13957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  527.076697][T13957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  527.094012][T13957] batman_adv: batadv0: Interface activated: batadv_slave_1
[  527.127949][T13957] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  527.149739][T13957] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  527.176443][T13957] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  527.215597][T13957] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  527.309415][ T5845] Bluetooth: hci1: command tx timeout
[  528.267460][ T6026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  528.289151][ T6026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  528.680683][ T6026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  528.718510][ T6026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  531.695311][ T6026] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.935141][ T6026] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  532.035119][ T6026] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  532.100542][ T6026] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  532.262484][ T6026] bridge_slave_1: left allmulticast mode
[  532.268184][ T6026] bridge_slave_1: left promiscuous mode
[  532.278701][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state
[  532.292812][ T6026] bridge_slave_0: left allmulticast mode
[  532.298509][ T6026] bridge_slave_0: left promiscuous mode
[  532.304922][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state
[  532.743962][ T6026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  532.756788][ T6026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  532.768051][ T6026] bond0 (unregistering): Released all slaves
[  533.004596][ T6026] hsr_slave_0: left promiscuous mode
[  533.010692][ T6026] hsr_slave_1: left promiscuous mode
[  533.016506][ T6026] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  533.023950][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_0
[  533.033211][ T6026] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  533.040725][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_1
[  533.058620][ T6026] veth1_macvtap: left promiscuous mode
[  533.064403][ T6026] veth0_macvtap: left promiscuous mode
[  533.070634][ T6026] veth1_vlan: left promiscuous mode
[  533.075941][ T6026] veth0_vlan: left promiscuous mode
[  533.437072][ T6026] team0 (unregistering): Port device team_slave_1 removed
[  533.473139][ T6026] team0 (unregistering): Port device team_slave_0 removed
[  533.829328][T14252] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.2376'.
[  534.079239][T14249] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2374'.
[  534.135257][T14249] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.2374'.
[  534.169330][T14249] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2374'.
[  534.207757][T14249] tc_dump_action: action bad kind
[  534.274542][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  534.283541][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  534.300218][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  534.312683][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  534.323424][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  534.501636][T14269] netlink: 'syz.4.2383': attribute type 21 has an invalid length.
[  534.846289][T14265] chnl_net:caif_netlink_parms(): no params data found
[  534.862323][T14282] netlink: 'syz.4.2384': attribute type 11 has an invalid length.
[  534.949266][T14282] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2384'.
[  534.987171][T14281] netlink: 'syz.2.2386': attribute type 17 has an invalid length.
[  535.009553][T14281] netlink: 'syz.2.2386': attribute type 41 has an invalid length.
[  535.020454][T14281] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2386'.
[  535.371015][T14280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  535.588121][T14265] bridge0: port 1(bridge_slave_0) entered blocking state
[  535.609308][T14265] bridge0: port 1(bridge_slave_0) entered disabled state
[  535.616776][T14265] bridge_slave_0: entered allmulticast mode
[  535.626438][T14265] bridge_slave_0: entered promiscuous mode
[  535.635547][T14265] bridge0: port 2(bridge_slave_1) entered blocking state
[  535.842375][T14265] bridge0: port 2(bridge_slave_1) entered disabled state
[  535.862929][T14265] bridge_slave_1: entered allmulticast mode
[  535.886494][T14265] bridge_slave_1: entered promiscuous mode
[  536.006236][T14265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  536.063906][T14265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  536.257711][T14265] team0: Port device team_slave_0 added
[  536.283996][T14265] team0: Port device team_slave_1 added
[  536.390176][T14314] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2392'.
[  536.429491][ T5845] Bluetooth: hci1: command tx timeout
[  536.507121][T14318] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.2393'.
[  536.700114][T14265] batman_adv: batadv0: Adding interface: batadv_slave_0
[  536.717379][T14265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  536.799334][T14265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  536.855462][T14265] batman_adv: batadv0: Adding interface: batadv_slave_1
[  536.919169][T14265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  537.004166][T14265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  537.306697][T14265] hsr_slave_0: entered promiscuous mode
[  537.335404][T14265] hsr_slave_1: entered promiscuous mode
[  537.361751][T14265] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  537.386332][T14332] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  537.392894][T14332] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  537.393039][T14265] Cannot create hsr debugfs directory
[  537.483161][T14334] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.2398'.
[  538.252105][T14343] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2401'.
[  538.519722][ T5845] Bluetooth: hci1: command tx timeout
[  538.773655][T14353] openvswitch: netlink: Message has 4 unknown bytes.
[  539.363488][T14265] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  539.383275][T14265] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  539.427438][T14265] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  539.454440][T14265] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  539.492420][T14380] __nla_validate_parse: 1 callbacks suppressed
[  539.492440][T14380] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2410'.
[  539.811476][T14265] 8021q: adding VLAN 0 to HW filter on device bond0
[  539.926753][T14265] 8021q: adding VLAN 0 to HW filter on device team0
[  540.044021][ T1335] bridge0: port 1(bridge_slave_0) entered blocking state
[  540.051623][ T1335] bridge0: port 1(bridge_slave_0) entered forwarding state
[  540.177781][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  540.185415][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  540.600794][ T5845] Bluetooth: hci1: command tx timeout
[  541.173208][T14265] 8021q: adding VLAN 0 to HW filter on device batadv0
[  541.595816][T14265] veth0_vlan: entered promiscuous mode
[  541.640190][T14265] veth1_vlan: entered promiscuous mode
[  541.723819][T14265] veth0_macvtap: entered promiscuous mode
[  541.760486][T14265] veth1_macvtap: entered promiscuous mode
[  541.791720][T14265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  541.810031][T14430] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2427'.
[  541.819139][T14265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  541.849212][T14265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  541.865588][T14265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  541.893891][T14265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  541.919134][T14265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  541.940873][T14265] batman_adv: batadv0: Interface activated: batadv_slave_0
[  541.977786][T14434] netlink: 'syz.0.2429': attribute type 1 has an invalid length.
[  541.993451][T14434] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2429'.
[  542.048201][T14265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  542.063060][T14265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  542.073276][T14265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  542.084491][T14265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  542.094404][T14265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  542.105144][T14265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  542.121253][T14265] batman_adv: batadv0: Interface activated: batadv_slave_1
[  542.182525][T14265] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  542.203438][T14265] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  542.219252][T14265] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  542.248393][T14265] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  542.441312][T14447] netlink: 'syz.0.2436': attribute type 29 has an invalid length.
[  542.732067][ T5845] Bluetooth: hci1: command tx timeout
[  543.538295][ T1335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  543.588644][ T1335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  543.687213][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  543.717609][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  544.740362][   T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  544.963044][   T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  545.035334][ T5829] team0: Port device syz_tun removed
[  545.116089][   T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  545.182046][ T5831] syz_tun (unregistering): left promiscuous mode
[  545.188439][ T5831] syz_tun (unregistering): left allmulticast mode
[  545.214947][ T5831] team0: Port device syz_tun removed
[  545.262107][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  545.262355][   T62] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  545.276412][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  545.288006][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  545.296774][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  545.304655][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  545.606347][   T62] bridge_slave_1: left allmulticast mode
[  545.619290][   T62] bridge_slave_1: left promiscuous mode
[  545.625126][   T62] bridge0: port 2(bridge_slave_1) entered disabled state
[  545.680596][   T62] bridge_slave_0: left allmulticast mode
[  545.686483][   T62] bridge_slave_0: left promiscuous mode
[  545.692359][   T62] bridge0: port 1(bridge_slave_0) entered disabled state
[  546.604813][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  546.620204][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  546.629353][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  546.641850][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  546.650228][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  546.698195][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  546.707268][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  546.715484][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  546.725331][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  546.733665][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  546.817273][   T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  546.827838][   T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  546.837954][   T62] bond0 (unregistering): Released all slaves
[  546.964650][T14488] chnl_net:caif_netlink_parms(): no params data found
[  547.180214][T14517] netlink: 'syz.4.2455': attribute type 33 has an invalid length.
[  547.194015][T14517] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2455'.
[  547.267255][T14517] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  547.297579][   T62] hsr_slave_0: left promiscuous mode
[  547.304149][   T62] hsr_slave_1: left promiscuous mode
[  547.310400][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  547.318054][   T62] batman_adv: batadv0: Removing interface: batadv_slave_0
[  547.326822][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  547.335600][   T62] batman_adv: batadv0: Removing interface: batadv_slave_1
[  547.366105][   T62] veth1_macvtap: left promiscuous mode
[  547.371841][   T62] veth0_macvtap: left promiscuous mode
[  547.381999][   T62] veth1_vlan: left promiscuous mode
[  547.387690][   T62] veth0_vlan: left promiscuous mode
[  547.393532][ T5841] Bluetooth: hci0: command tx timeout
[  547.456951][T14522] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.2457'.
[  547.858981][   T62] team0 (unregistering): Port device team_slave_1 removed
[  547.897199][   T62] team0 (unregistering): Port device team_slave_0 removed
[  548.449364][T14488] bridge0: port 1(bridge_slave_0) entered blocking state
[  548.473616][T14488] bridge0: port 1(bridge_slave_0) entered disabled state
[  548.487588][T14488] bridge_slave_0: entered allmulticast mode
[  548.529399][T14488] bridge_slave_0: entered promiscuous mode
[  548.566434][T14488] bridge0: port 2(bridge_slave_1) entered blocking state
[  548.582750][T14488] bridge0: port 2(bridge_slave_1) entered disabled state
[  548.590217][T14488] bridge_slave_1: entered allmulticast mode
[  548.598024][T14488] bridge_slave_1: entered promiscuous mode
[  548.749405][ T5841] Bluetooth: hci1: command tx timeout
[  548.830848][ T5841] Bluetooth: hci2: command tx timeout
[  548.853597][T14488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  548.873427][T14488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  548.957601][T14488] team0: Port device team_slave_0 added
[  548.967920][T14488] team0: Port device team_slave_1 added
[  549.465155][T14488] batman_adv: batadv0: Adding interface: batadv_slave_0
[  549.469343][ T5841] Bluetooth: hci0: command tx timeout
[  549.478192][T14488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  549.478227][T14488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  549.630472][   T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.655344][T14488] batman_adv: batadv0: Adding interface: batadv_slave_1
[  549.663136][T14488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  549.694732][T14488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  549.772451][   T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.839721][T14559] netlink: 'syz.4.2467': attribute type 33 has an invalid length.
[  549.847719][T14559] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2467'.
[  549.881092][T14505] chnl_net:caif_netlink_parms(): no params data found
[  549.898374][T14559] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  549.960101][T14507] chnl_net:caif_netlink_parms(): no params data found
[  550.027735][   T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  550.057301][T14488] hsr_slave_0: entered promiscuous mode
[  550.064612][T14488] hsr_slave_1: entered promiscuous mode
[  550.071474][T14488] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  550.080407][T14488] Cannot create hsr debugfs directory
[  550.227646][   T62] bond0: (slave netdevsim0): Releasing backup interface
[  550.240790][   T62] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode
[  550.260172][   T62] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode
[  550.286067][   T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  550.352734][T14564] syzkaller0: entered promiscuous mode
[  550.358547][T14564] syzkaller0: entered allmulticast mode
[  550.609988][T14507] bridge0: port 1(bridge_slave_0) entered blocking state
[  550.632881][T14507] bridge0: port 1(bridge_slave_0) entered disabled state
[  550.641197][T14507] bridge_slave_0: entered allmulticast mode
[  550.648506][T14507] bridge_slave_0: entered promiscuous mode
[  550.695134][T14507] bridge0: port 2(bridge_slave_1) entered blocking state
[  550.704678][T14507] bridge0: port 2(bridge_slave_1) entered disabled state
[  550.714332][T14507] bridge_slave_1: entered allmulticast mode
[  550.722317][T14507] bridge_slave_1: entered promiscuous mode
[  550.775449][T14505] bridge0: port 1(bridge_slave_0) entered blocking state
[  550.783443][T14505] bridge0: port 1(bridge_slave_0) entered disabled state
[  550.791259][T14505] bridge_slave_0: entered allmulticast mode
[  550.798538][T14505] bridge_slave_0: entered promiscuous mode
[  550.829491][ T5841] Bluetooth: hci1: command tx timeout
[  550.843089][T14505] bridge0: port 2(bridge_slave_1) entered blocking state
[  550.851061][T14505] bridge0: port 2(bridge_slave_1) entered disabled state
[  550.858270][T14505] bridge_slave_1: entered allmulticast mode
[  550.866210][T14505] bridge_slave_1: entered promiscuous mode
[  550.903572][T14507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  550.909373][ T5841] Bluetooth: hci2: command tx timeout
[  550.928271][T14507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  550.988109][   T62] bridge0: port 5(batadv0) entered disabled state
[  551.068627][   T62] team0: left allmulticast mode
[  551.083136][   T62] team_slave_0: left allmulticast mode
[  551.096500][   T62] team_slave_1: left allmulticast mode
[  551.104467][   T62] bond0: left allmulticast mode
[  551.109589][   T62] bond_slave_1: left allmulticast mode
[  551.115094][   T62] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:578
[  551.124507][   T62] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 62, name: kworker/u8:4
[  551.134363][   T62] preempt_count: 0, expected: 0
[  551.139350][   T62] RCU nest depth: 1, expected: 0
[  551.144326][   T62] 5 locks held by kworker/u8:4/62:
[  551.149538][   T62]  #0: ffff88801aef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0
[  551.160595][   T62]  #1: ffffc90001547c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0
[  551.172350][   T62]  #2: ffffffff8f2e7710 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x145/0xbd0
[  551.182016][   T62]  #3: ffffffff8f2f4248 (rtnl_mutex){+.+.}-{4:4}, at: cleanup_net+0x611/0xbd0
[  551.191452][   T62]  #4: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: team_change_rx_flags+0x29/0x330
[  551.201502][   T62] CPU: 0 UID: 0 PID: 62 Comm: kworker/u8:4 Not tainted 6.15.0-rc4-syzkaller-gb615ce5fbefb #0 PREEMPT(full) 
[  551.201529][   T62] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  551.201539][   T62] Workqueue: netns cleanup_net
[  551.201559][   T62] Call Trace:
[  551.201565][   T62]  <TASK>
[  551.201572][   T62]  dump_stack_lvl+0x189/0x250
[  551.201598][   T62]  ? __pfx_dump_stack_lvl+0x10/0x10
[  551.201625][   T62]  ? print_lock_name+0xde/0x100
[  551.201653][   T62]  __might_resched+0x495/0x610
[  551.201670][   T62]  ? dev_set_rx_mode+0x54/0x2d0
[  551.201687][   T62]  ? __pfx___might_resched+0x10/0x10
[  551.201700][   T62]  ? __pfx__printk+0x10/0x10
[  551.201717][   T62]  ? perf_trace_preemptirq_template+0xa3/0x340
[  551.201740][   T62]  __mutex_lock+0x106/0xe80
[  551.201761][   T62]  ? __pfx___dev_notify_flags+0x10/0x10
[  551.201780][   T62]  ? __local_bh_enable_ip+0x12d/0x1c0
[  551.201803][   T62]  ? lockdep_hardirqs_on+0x9c/0x150
[  551.201818][   T62]  ? dev_set_allmulti+0x10e/0x260
[  551.201838][   T62]  ? __pfx___mutex_lock+0x10/0x10
[  551.201857][   T62]  ? do_raw_spin_unlock+0x122/0x240
[  551.201878][   T62]  ? netif_set_allmulti+0x267/0x380
[  551.201901][   T62]  dev_set_allmulti+0x10e/0x260
[  551.201918][   T62]  ? netdev_info+0x10a/0x160
[  551.201936][   T62]  bond_change_rx_flags+0x4cd/0x690
[  551.201962][   T62]  ? __pfx_bond_change_rx_flags+0x10/0x10
[  551.201988][   T62]  ? __local_bh_enable_ip+0x12d/0x1c0
[  551.202019][   T62]  ? __pfx_bond_change_rx_flags+0x10/0x10
[  551.202040][   T62]  netif_set_allmulti+0x20f/0x380
[  551.202065][   T62]  dev_set_allmulti+0x12b/0x260
[  551.202087][   T62]  team_change_rx_flags+0x20f/0x330
[  551.202109][   T62]  ? team_change_rx_flags+0x29/0x330
[  551.202132][   T62]  ? __pfx_team_change_rx_flags+0x10/0x10
[  551.202153][   T62]  netif_set_allmulti+0x20f/0x380
[  551.202178][   T62]  dev_set_allmulti+0x12b/0x260
[  551.202199][   T62]  del_nbp+0xae/0xa60
[  551.202220][   T62]  br_dev_delete+0x6e/0x100
[  551.202235][   T62]  br_net_exit_batch_rtnl+0xfc/0x1a0
[  551.202253][   T62]  ? __pfx_br_net_exit_batch_rtnl+0x10/0x10
[  551.202272][   T62]  cleanup_net+0x664/0xbd0
[  551.202291][   T62]  ? __pfx_cleanup_net+0x10/0x10
[  551.202314][   T62]  ? _raw_spin_unlock_irq+0x23/0x50
[  551.202328][   T62]  ? process_scheduled_works+0x9ec/0x17a0
[  551.202349][   T62]  ? process_scheduled_works+0x9ec/0x17a0
[  551.202373][   T62]  process_scheduled_works+0xadb/0x17a0
[  551.202419][   T62]  ? __pfx_process_scheduled_works+0x10/0x10
[  551.202455][   T62]  worker_thread+0x8a0/0xda0
[  551.202490][   T62]  kthread+0x70e/0x8a0
[  551.202510][   T62]  ? __pfx_worker_thread+0x10/0x10
[  551.202522][   T62]  ? __pfx_kthread+0x10/0x10
[  551.202540][   T62]  ? __pfx_kthread+0x10/0x10
[  551.202555][   T62]  ? _raw_spin_unlock_irq+0x23/0x50
[  551.202569][   T62]  ? lockdep_hardirqs_on+0x9c/0x150
[  551.202586][   T62]  ? __pfx_kthread+0x10/0x10
[  551.202602][   T62]  ret_from_fork+0x4b/0x80
[  551.202615][   T62]  ? __pfx_kthread+0x10/0x10
[  551.202631][   T62]  ret_from_fork_asm+0x1a/0x30
[  551.202658][   T62]  </TASK>
[  551.202808][   T62] 
[  551.497277][   T62] =============================
[  551.502117][   T62] [ BUG: Invalid wait context ]
[  551.506960][   T62] 6.15.0-rc4-syzkaller-gb615ce5fbefb #0 Tainted: G        W          
[  551.515104][   T62] -----------------------------
[  551.519946][   T62] kworker/u8:4/62 is trying to lock:
[  551.525222][   T62] ffff88805ccb0d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: dev_set_allmulti+0x10e/0x260
[  551.535329][   T62] other info that might help us debug this:
[  551.541212][   T62] context-{5:5}
[  551.544749][   T62] 5 locks held by kworker/u8:4/62:
[  551.549855][   T62]  #0: ffff88801aef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0
[  551.560761][   T62]  #1: ffffc90001547c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0
[  551.571390][   T62]  #2: ffffffff8f2e7710 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x145/0xbd0
[  551.580798][   T62]  #3: ffffffff8f2f4248 (rtnl_mutex){+.+.}-{4:4}, at: cleanup_net+0x611/0xbd0
[  551.589679][   T62]  #4: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: team_change_rx_flags+0x29/0x330
[  551.599531][   T62] stack backtrace:
[  551.603247][   T62] CPU: 1 UID: 0 PID: 62 Comm: kworker/u8:4 Tainted: G        W           6.15.0-rc4-syzkaller-gb615ce5fbefb #0 PREEMPT(full) 
[  551.603270][   T62] Tainted: [W]=WARN
[  551.603275][   T62] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  551.603286][   T62] Workqueue: netns cleanup_net
[  551.603304][   T62] Call Trace:
[  551.603310][   T62]  <TASK>
[  551.603318][   T62]  dump_stack_lvl+0x189/0x250
[  551.603343][   T62]  ? __pfx_dump_stack_lvl+0x10/0x10
[  551.603364][   T62]  ? __pfx__printk+0x10/0x10
[  551.603380][   T62]  ? print_lock_name+0xde/0x100
[  551.603405][   T62]  __lock_acquire+0xbcf/0xd20
[  551.603428][   T62]  ? dev_set_allmulti+0x10e/0x260
[  551.603446][   T62]  lock_acquire+0x120/0x360
[  551.603465][   T62]  ? dev_set_allmulti+0x10e/0x260
[  551.603485][   T62]  ? perf_trace_preemptirq_template+0xa3/0x340
[  551.603505][   T62]  __mutex_lock+0x182/0xe80
[  551.603524][   T62]  ? dev_set_allmulti+0x10e/0x260
[  551.603543][   T62]  ? __pfx___dev_notify_flags+0x10/0x10
[  551.603562][   T62]  ? __local_bh_enable_ip+0x12d/0x1c0
[  551.603585][   T62]  ? lockdep_hardirqs_on+0x9c/0x150
[  551.603602][   T62]  ? dev_set_allmulti+0x10e/0x260
[  551.603621][   T62]  ? __pfx___mutex_lock+0x10/0x10
[  551.603640][   T62]  ? do_raw_spin_unlock+0x122/0x240
[  551.603659][   T62]  ? netif_set_allmulti+0x267/0x380
[  551.603680][   T62]  dev_set_allmulti+0x10e/0x260
[  551.603704][   T62]  ? netdev_info+0x10a/0x160
[  551.603721][   T62]  bond_change_rx_flags+0x4cd/0x690
[  551.603747][   T62]  ? __pfx_bond_change_rx_flags+0x10/0x10
[  551.603769][   T62]  ? __local_bh_enable_ip+0x12d/0x1c0
[  551.603796][   T62]  ? __pfx_bond_change_rx_flags+0x10/0x10
[  551.603818][   T62]  netif_set_allmulti+0x20f/0x380
[  551.603840][   T62]  dev_set_allmulti+0x12b/0x260
[  551.603859][   T62]  team_change_rx_flags+0x20f/0x330
[  551.603882][   T62]  ? team_change_rx_flags+0x29/0x330
[  551.603904][   T62]  ? __pfx_team_change_rx_flags+0x10/0x10
[  551.603926][   T62]  netif_set_allmulti+0x20f/0x380
[  551.603967][   T62]  dev_set_allmulti+0x12b/0x260
[  551.603987][   T62]  del_nbp+0xae/0xa60
[  551.604004][   T62]  br_dev_delete+0x6e/0x100
[  551.604019][   T62]  br_net_exit_batch_rtnl+0xfc/0x1a0
[  551.604038][   T62]  ? __pfx_br_net_exit_batch_rtnl+0x10/0x10
[  551.604057][   T62]  cleanup_net+0x664/0xbd0
[  551.604077][   T62]  ? __pfx_cleanup_net+0x10/0x10
[  551.604097][   T62]  ? _raw_spin_unlock_irq+0x23/0x50
[  551.604113][   T62]  ? process_scheduled_works+0x9ec/0x17a0
[  551.604136][   T62]  ? process_scheduled_works+0x9ec/0x17a0
[  551.604160][   T62]  process_scheduled_works+0xadb/0x17a0
[  551.604196][   T62]  ? __pfx_process_scheduled_works+0x10/0x10
[  551.604227][   T62]  worker_thread+0x8a0/0xda0
[  551.604252][   T62]  kthread+0x70e/0x8a0
[  551.604270][   T62]  ? __pfx_worker_thread+0x10/0x10
[  551.604284][   T62]  ? __pfx_kthread+0x10/0x10
[  551.604302][   T62]  ? __pfx_kthread+0x10/0x10
[  551.604318][   T62]  ? _raw_spin_unlock_irq+0x23/0x50
[  551.604334][   T62]  ? lockdep_hardirqs_on+0x9c/0x150
[  551.604352][   T62]  ? __pfx_kthread+0x10/0x10
[  551.604369][   T62]  ret_from_fork+0x4b/0x80
[  551.604384][   T62]  ? __pfx_kthread+0x10/0x10
[  551.604401][   T62]  ret_from_fork_asm+0x1a/0x30
[  551.604422][   T62]  </TASK>
[  551.914561][ T5841] Bluetooth: hci0: command tx timeout
[  551.921636][   T62] dummy0: left allmulticast mode
[  551.926696][   T62] geneve0: left allmulticast mode
[  551.932281][   T62] bridge0: port 4(team0) entered disabled state
[  551.940318][   T62] bridge_slave_1: left allmulticast mode
[  551.945981][   T62] bridge_slave_1: left promiscuous mode
[  551.951835][   T62] bridge0: port 2(bridge_slave_1) entered disabled state
[  551.960555][   T62] bridge_slave_0: left allmulticast mode
[  551.966218][   T62] bridge_slave_0: left promiscuous mode
[  552.015933][T14606] netlink: 'syz.4.2480': attribute type 10 has an invalid length.
[  552.031613][   T62] bridge0: port 1(bridge_slave_0) entered disabled state
[  552.041905][   T62] erspan0: left allmulticast mode
[  552.046964][   T62] erspan0: left promiscuous mode
[  552.052077][T14606] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2480'.
[  552.061968][   T62] GPL: port 1(erspan0) entered disabled state
[  552.145438][   T62] bond0 (unregistering): (slave geneve0): Releasing backup interface
[  552.364063][   T62] bond0 (unregistering): left promiscuous mode
[  552.370530][   T62] bond_slave_1: left promiscuous mode
[  552.376031][   T62] dummy0: left promiscuous mode
[  552.382072][   T62] team0: Port device bond0 removed
[  552.388598][   T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  552.398621][   T62] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  552.407675][   T62] bond0 (unregistering): Released all slaves
[  552.428183][T14505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  552.438891][T14603] netlink: 'syz.2.2479': attribute type 25 has an invalid length.
[  552.497959][T14507] team0: Port device team_slave_0 added
[  552.508919][T14505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  552.521501][T14507] team0: Port device team_slave_1 added
[  552.565117][T14505] team0: Port device team_slave_0 added
[  552.575406][T14507] batman_adv: batadv0: Adding interface: batadv_slave_0
[  552.582889][T14507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  552.611550][T14507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  552.623774][T14505] team0: Port device team_slave_1 added
[  552.634471][T14507] batman_adv: batadv0: Adding interface: batadv_slave_1
[  552.641757][T14507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  552.667910][T14507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  552.706361][T14505] batman_adv: batadv0: Adding interface: batadv_slave_0
[  552.713778][T14505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  552.740282][T14505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  552.752872][T14505] batman_adv: batadv0: Adding interface: batadv_slave_1
[  552.759906][T14505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  552.786089][T14505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  552.826776][T14507] hsr_slave_0: entered promiscuous mode
[  552.833025][T14507] hsr_slave_1: entered promiscuous mode
[  552.838997][T14507] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  552.847722][T14507] Cannot create hsr debugfs directory
[  552.896909][T14505] hsr_slave_0: entered promiscuous mode
[  552.903486][T14505] hsr_slave_1: entered promiscuous mode
[  552.909435][ T5841] Bluetooth: hci1: command tx timeout
[  552.912737][T14505] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  552.922546][T14505] Cannot create hsr debugfs directory
[  552.965522][T14488] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  552.987371][T14488] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  552.994668][ T5841] Bluetooth: hci2: command tx timeout
[  553.012576][T14488] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  553.040073][T14488] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  553.074198][   T62] hsr_slave_0: left promiscuous mode
[  553.080231][   T62] hsr_slave_1: left promiscuous mode
[  553.085897][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  553.093355][   T62] batman_adv: batadv0: Removing interface: batadv_slave_0
[  553.102011][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  553.109495][   T62] batman_adv: batadv0: Removing interface: batadv_slave_1
[  553.118284][   T62] veth1_macvtap: left promiscuous mode
[  553.225920][   T62] team_slave_1 (unregistering): left promiscuous mode
[  553.233425][   T62] team0 (unregistering): Port device team_slave_1 removed
[  553.261128][   T62] team_slave_0 (unregistering): left promiscuous mode
[  553.268433][   T62] team0 (unregistering): Port device team_slave_0 removed
[  553.459741][T14507] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  553.524820][T14507] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  553.546426][T14488] 8021q: adding VLAN 0 to HW filter on device bond0
[  553.560855][T14488] 8021q: adding VLAN 0 to HW filter on device team0
[  553.573606][ T6026] bridge0: port 1(bridge_slave_0) entered blocking state
[  553.580780][ T6026] bridge0: port 1(bridge_slave_0) entered forwarding state
[  553.598014][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  553.605172][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  553.623967][T14507] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  553.700498][T14507] netdevsim netdevsim1 ªªªªªª (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  553.801393][T14488] 8021q: adding VLAN 0 to HW filter on device batadv0
[  553.813720][T14507] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  553.831254][T14507] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  553.842098][T14507] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  553.852288][T14507] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  553.884764][T14488] veth0_vlan: entered promiscuous mode
[  553.907032][T14488] veth1_vlan: entered promiscuous mode
[  553.950937][T14488] veth0_macvtap: entered promiscuous mode
[  553.961412][ T5841] Bluetooth: hci0: command tx timeout
[  553.970550][T14488] veth1_macvtap: entered promiscuous mode
[  553.984596][T14507] 8021q: adding VLAN 0 to HW filter on device bond0
[  553.997421][T14488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  554.008122][T14488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  554.018082][T14488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  554.028658][T14488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  554.040818][T14488] batman_adv: batadv0: Interface activated: batadv_slave_0
[  554.061047][T14507] 8021q: adding VLAN 0 to HW filter on device team0
[  554.069852][T14488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  554.081935][T14488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  554.092122][T14488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  554.102919][T14488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  554.114651][T14488] batman_adv: batadv0: Interface activated: batadv_slave_1
[  554.127086][T14488] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  554.136009][T14488] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  554.144838][T14488] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  554.154309][T14488] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  554.172612][ T6026] bridge0: port 1(bridge_slave_0) entered blocking state
[  554.179755][ T6026] bridge0: port 1(bridge_slave_0) entered forwarding state
[  554.207979][ T6026] bridge0: port 2(bridge_slave_1) entered blocking state
[  554.215125][ T6026] bridge0: port 2(bridge_slave_1) entered forwarding state
[  554.230101][T14505] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  554.244323][T14505] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  554.253737][T14505] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  554.273840][T14505] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  554.285108][T14488] ieee80211 phy62: Selected rate control algorithm 'minstrel_ht'
[  554.346360][T14488] ieee80211 phy63: Selected rate control algorithm 'minstrel_ht'
[  554.352587][ T6026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  554.362529][ T6026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  554.395632][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  554.407426][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  554.448254][T14505] 8021q: adding VLAN 0 to HW filter on device bond0
[  554.470337][T14505] 8021q: adding VLAN 0 to HW filter on device team0
[  554.486440][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  554.493635][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  554.507697][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  554.514855][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  554.554992][T14507] 8021q: adding VLAN 0 to HW filter on device batadv0
[  554.604714][T14507] veth0_vlan: entered promiscuous mode
[  554.617766][T14507] veth1_vlan: entered promiscuous mode
[  554.646238][T14507] veth0_macvtap: entered promiscuous mode
[  554.655301][T14507] veth1_macvtap: entered promiscuous mode
[  554.677155][T14507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  554.688941][T14507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  554.701824][T14507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  554.712300][T14507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  554.722395][T14507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  554.732899][T14507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  554.744666][T14507] batman_adv: batadv0: Interface activated: batadv_slave_0
[  554.757790][T14507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  554.768422][T14507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  554.780982][T14507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  554.791860][T14507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  554.802417][T14507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  554.813497][T14507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  554.824482][T14507] batman_adv: batadv0: Interface activated: batadv_slave_1
[  554.837011][T14507] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  554.846272][T14507] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  554.855505][T14507] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  554.864407][T14507] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  554.892146][T14505] 8021q: adding VLAN 0 to HW filter on device batadv0
[  554.925206][T14507] ieee80211 phy64: Selected rate control algorithm 'minstrel_ht'
[  554.954456][T14505] veth0_vlan: entered promiscuous mode
[  554.960402][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  554.968209][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  554.977250][T14507] ieee80211 phy65: Selected rate control algorithm 'minstrel_ht'
[  554.989679][ T5841] Bluetooth: hci1: command tx timeout
[  554.996934][T14505] veth1_vlan: entered promiscuous mode
[  555.013377][ T6026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  555.024025][ T6026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  555.035866][T14505] veth0_macvtap: entered promiscuous mode
[  555.046147][T14505] veth1_macvtap: entered promiscuous mode
[  555.063466][T14505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  555.079189][ T5841] Bluetooth: hci2: command tx timeout
[  555.085004][T14505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  555.094860][T14505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  555.105526][T14505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  555.115471][T14505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  555.126027][T14505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  555.135926][T14505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  555.146485][T14505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  555.158241][T14505] batman_adv: batadv0: Interface activated: batadv_slave_0
[  555.168150][T14505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  555.178742][T14505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  555.189952][T14505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  555.200443][T14505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  555.210464][T14505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  555.221131][T14505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  555.231106][T14505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  555.242000][T14505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  555.254669][T14505] batman_adv: batadv0: Interface activated: batadv_slave_1
[  555.275132][T14505] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  555.284950][T14505] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  555.293966][T14505] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  555.302789][T14505] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  555.334114][T14505] ieee80211 phy66: Selected rate control algorithm 'minstrel_ht'
[  555.358573][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  555.361050][T14505] ieee80211 phy67: Selected rate control algorithm 'minstrel_ht'
[  555.371905][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  555.402858][ T6026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  555.412644][ T6026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  556.573957][ T6026] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  557.854195][ T6026] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  558.666252][ T6026] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  558.724257][ T6026] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  558.810729][ T6026] bridge_slave_1: left allmulticast mode
[  558.816432][ T6026] bridge_slave_1: left promiscuous mode
[  558.823507][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state
[  558.834764][ T6026] bridge_slave_0: left allmulticast mode
[  558.840727][ T6026] bridge_slave_0: left promiscuous mode
[  558.846437][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state
[  558.980528][ T6026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  558.995578][ T6026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  559.006477][ T6026] bond0 (unregistering): Released all slaves
[  559.241807][ T6026] hsr_slave_0: left promiscuous mode
[  559.247636][ T6026] hsr_slave_1: left promiscuous mode
[  559.255407][ T6026] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  559.264345][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_0
[  559.274189][ T6026] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  559.282519][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_1
[  559.295357][ T6026] veth1_macvtap: left promiscuous mode
[  559.300957][ T6026] veth0_macvtap: left promiscuous mode
[  559.306558][ T6026] veth1_vlan: left promiscuous mode
[  559.315924][ T6026] veth0_vlan: left promiscuous mode
[  559.501258][ T6026] team0 (unregistering): Port device team_slave_1 removed
[  559.515237][ T6026] team0 (unregistering): Port device team_slave_0 removed
[  559.915157][ T6026] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  559.974938][ T6026] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  560.047233][ T6026] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  560.104832][ T6026] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  560.191770][ T6026] bridge_slave_1: left allmulticast mode
[  560.197477][ T6026] bridge_slave_1: left promiscuous mode
[  560.205164][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state
[  560.216507][ T6026] bridge_slave_0: left allmulticast mode
[  560.223384][ T6026] bridge_slave_0: left promiscuous mode
[  560.229140][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state
[  560.365748][ T6026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  560.376147][ T6026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  560.387290][ T6026] bond0 (unregistering): Released all slaves
[  560.588025][ T6026] hsr_slave_0: left promiscuous mode
[  560.594024][ T6026] hsr_slave_1: left promiscuous mode
[  560.601751][ T6026] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  560.610143][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_0
[  560.618692][ T6026] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  560.627525][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_1
[  560.641151][ T6026] veth1_macvtap: left promiscuous mode
[  560.646708][ T6026] veth0_macvtap: left promiscuous mode
[  560.654983][ T6026] veth1_vlan: left promiscuous mode
[  560.661086][ T6026] veth0_vlan: left promiscuous mode
[  560.827819][ T6026] team0 (unregistering): Port device team_slave_1 removed
[  560.846712][ T6026] team0 (unregistering): Port device team_slave_0 removed