last executing test programs:

3.675355824s ago: executing program 1 (id=1111):
r0 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000046682d562c31630100000000000000b52f0d6086e274aa97a91fa46cdcefe7534fda04ca542b4c4904446290f93bce3177127ebc0c24e7e718c0b1da96d9c9fa8e95238403007cb9806b9641253a7b99504c950fcba378fae7ec90b6da825996012194da80cc7621803fe840ccedca203b30524e6258edbfe64d0900cdf79924bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x6067, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x10000, 0x200}, 0x80, 0x800, 0x0, 0x0, 0x0, 0x7, 0xfffd, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0xc0800, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7c2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$kcm(0xa, 0x2, 0x88)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x4)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000380), &(0x7f0000000500)='%pB    \x00'}, 0x20)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x0, 0x2000}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, &(0x7f0000000380), &(0x7f0000000000), 0x2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000007c0)={'vcan0\x00', 0x600})
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b80)={r7, 0x20, &(0x7f0000000b40)={&(0x7f0000002040)=""/4109, 0x100d, 0x0, 0x0}}, 0x10)
r8 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b02000000d86e6c1d0002887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r9)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r10, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0)

3.342076904s ago: executing program 3 (id=1113):
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x8, 0x2}, 0x80, 0x0}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[], 0x50)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x10, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r1, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f00000006c0)=[0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r4=>0x0, 0x79, &(0x7f0000000740)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0xcf, 0x8, 0x8, &(0x7f0000000900)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xd, 0x19, &(0x7f0000000380)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x6}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffff18}, @map_fd={0x18, 0x2, 0x1, 0x0, r2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f00000001c0)='syzkaller\x00', 0x10, 0x12, &(0x7f0000000280)=""/18, 0x40f00, 0x0, '\x00', 0x0, @sock_ops=0x3, r3, 0x8, &(0x7f0000000600)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0xe, 0x1000, 0x7}, 0x10, r4, 0xffffffffffffffff, 0x4, &(0x7f0000000a80)=[r2], &(0x7f0000000ac0)=[{0x2, 0x1, 0x10, 0x5}, {0x0, 0x3, 0xc, 0x2}, {0x4, 0x5, 0x7, 0xe}, {0x2, 0x2, 0xc, 0x8}], 0x10, 0x16da00}, 0x94)
socketpair(0x3, 0x800, 0x0, &(0x7f0000000000))
socketpair(0x1, 0x5, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc)
close(0x4)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xc, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e0000009500000000000000"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000240))
unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')

3.126068957s ago: executing program 1 (id=1114):
socket$kcm(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x81, 0x0, 0x0, 0x0, 0xffbffffffffffffb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x12100, 0xc8, 0x2, 0x9, 0x0, 0x10001, 0xa, 0x0, 0x800, 0x0, 0x2}, 0x0, 0xd, 0xffffffffffffffff, 0xc)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80444, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000100)={'macvtap0\x00', @random="b40007350060"})
r1 = getpid()
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x6000, 0x1, 0x0, 0x0, 0x748, 0x4, 0xb}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)}, 0x40010143)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r4, 0x1, 0x10, &(0x7f0000000000), 0x4)
sendmsg$inet(r4, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000040)='P', 0xfe1b}], 0x1}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[@ANYRESDEC=r2], 0xfdef)

3.124655107s ago: executing program 2 (id=1115):
r0 = socket$kcm(0x23, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet={0x23, 0x0, 0xfc}, 0x80, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000080)="9be2", 0x2}], 0x2}, 0x0)

2.934649588s ago: executing program 2 (id=1117):
socket$kcm(0x10, 0x3, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000180)=ANY=[], 0x3)
r2 = socket$kcm(0x23, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet={0x23, 0x0, 0xfc}, 0x80, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000080)="9be2", 0x2}], 0x2}, 0x0)
r3 = socket$kcm(0x11, 0x2, 0x0)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000000c0)=r3, 0x8)
r5 = perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffd46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402000a}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0xfe}, 0x0, 0x0, r5, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'virt_wifi0\x00', 0x11})
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)

2.240532248s ago: executing program 2 (id=1120):
r0 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r0], 0x48, 0x2c}, 0x0)

2.180257882s ago: executing program 3 (id=1121):
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$kcm(0xa, 0x7, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYRES64=r0], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x68}, [@call={0x85, 0x0, 0x0, 0x1a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80)

1.849432382s ago: executing program 2 (id=1124):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20882, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x1, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa11"], 0xfdef)
openat$cgroup(r2, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0xe)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r2, 0x13, 0x0, 0x9f, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0]}, 0x40)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8982, 0x0)

1.823217133s ago: executing program 4 (id=1125):
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r0, &(0x7f0000002c80)={&(0x7f0000000180)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141441ac1414bb000000003c000000000000000000000007000000008917710a01010000000000e0000002e0000002e0000001861400000003070e8235847564d4fec80aa819df0000000011000000260000000000000001"], 0x78}, 0x20000004)

1.71523665s ago: executing program 0 (id=1126):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000074000000000000000000b7080000410000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080040f8ffffffbfa400000000000007040000f0ffffffb70200000800000018000000", @ANYRES32, @ANYBLOB="00000000d5160000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x5, 0x168, &(0x7f00000016c0)=""/4113}, 0x2c)

1.682628601s ago: executing program 0 (id=1127):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000400)=0x1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
close(0x4)

1.679565581s ago: executing program 1 (id=1128):
r0 = socket$kcm(0x23, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet={0x23, 0x0, 0xfc}, 0x80, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000080)="9be2", 0x2}], 0x2}, 0x0)

1.656666403s ago: executing program 3 (id=1129):
socket$kcm(0x10, 0x3, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000180)=ANY=[], 0x3)
r2 = socket$kcm(0x23, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet={0x23, 0x0, 0xfc}, 0x80, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000080)="9be2", 0x2}], 0x2}, 0x0)
r3 = socket$kcm(0x11, 0x2, 0x0)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000000c0)=r3, 0x8)
r5 = perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffd46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402000a}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0xfe}, 0x0, 0x0, r5, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'virt_wifi0\x00', 0x11})
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r6, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)

1.610684266s ago: executing program 4 (id=1130):
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000012c0)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f0000001240), &(0x7f0000001280)='%ps    \x00'}, 0x20)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001300)={&(0x7f0000000000)="de490ffcc49dfdd5d5a099930ea30962c60c318d8a64eda2709eef2ba93271a91bf537191832921597f55744261714d1c80a3c9d2eba0d44168cecd7cd5529ed888a454c8b7736f0825aaf8068127e46d3e9fd9c7c18508f8639b9c04ca60b7cc7e299ae05abb4ea6ce856d2da2141cc8aa6255d6ddfb62bf1a5149f909d0e8762b03113dd226a7bd0e73fe7ba66d8c3ad4419f593060f5bbab641378b9b2f4221b36e07e34387c52f7082b4243f50ce349b8c7a790a29b9625729f5445dc611798efb215b221f17698df09b2800a60161ef0f25db7b4acb64acb1cf393cf182d3536bd14442bb5d4107e369c07b4608da588b", &(0x7f0000000100)=""/4096, &(0x7f0000001100)="561c1aeebadce02725eaeed59c5093828e734c6fccb4a34fc4a2739e02f2dec5ce204ffb87ba9b6458fd60098a483dd25b6bfb2c8bcb75f2bcf125aaa7a4cd9c3ff5775b2bd4f2927d9f7a019fb84db39310fabc2359be62ae9341841df06c99a4440c0d38350b623ae7f94815da50dae434edb2c67b472c8a2f9883a89861a0295be462d0210d652229947ffc560e2e54439c830308fe5de381a475e2c6520e91291ed2b9d9953811f5f341384d8756b89a20f9f6f3a0a3de84a0794d17a10a7dca6b4330470dbde6bece497a6bd16294c502e2918f4b2bb30fe76519ee", &(0x7f0000001200)="de071d97c3b27c04c9d39665742ad70b24509b41b210e88384cf3b37f0", 0x6, r0}, 0x38) (async)
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000001340)=0xd54) (async, rerun: 32)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000003400)={&(0x7f0000001380)="dddd28ecaf648d52", &(0x7f00000013c0)=""/4096, &(0x7f00000023c0)="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", &(0x7f00000033c0)="9779bf6870ee001773d979911b52e4150ad072bd9b1a90e6f6", 0x53, r0, 0x4}, 0x38) (rerun: 32)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000003440)={'veth0_to_hsr\x00', 0x2000})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003740)={0xffffffffffffffff, 0xe0, &(0x7f0000003640)={0x0, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000003480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000034c0)=[0x0, 0x0], &(0x7f0000003500)=[0x0], <r3=>0x0, 0xc0, &(0x7f0000003540)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000003580), &(0x7f00000035c0), 0x8, 0x7e, 0x8, 0x8, &(0x7f0000003600)}}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003780)=@base={0x1e, 0xb8b6, 0x3ccb, 0xffffffff, 0x208, r0, 0x7, '\x00', r2, 0xffffffffffffffff, 0x2, 0x5}, 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000003840)={r4, &(0x7f0000003800)="93c001ebd56a19bb1004117d8545256824b445676b65b22dce9dfd81580720c11afa45671707f867fed9f9e3fc7d4af4a8296a6b11b54f38b2"}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003900)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000003880), &(0x7f00000038c0)}, 0x20) (async, rerun: 64)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000003a00)=r3, 0x4) (async, rerun: 64)
r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000003ac0)={r1}, 0x4) (async)
r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003b00)={0xffffffffffffffff, 0xf09, 0x10}, 0xc) (async)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003b40)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xeecd, '\x00', r2, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000003c40)={0x1e, 0xb, &(0x7f0000003940)=@raw=[@cb_func={0x18, 0x2}, @jmp={0x5, 0x0, 0x7, 0x7, 0x7}, @ldst={0x0, 0x1, 0x0, 0x7, 0x2, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @map_val={0x18, 0xa, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x9}], &(0x7f00000039c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x8, '\x00', r2, @fallback=0x18, r6, 0x8, &(0x7f0000003a40)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000003a80)={0x5, 0x3, 0x1, 0x200}, 0x10, 0x0, r7, 0x1, &(0x7f0000003bc0)=[r8, r0, r0, r0, r0, r9], &(0x7f0000003c00)=[{0x4, 0x2, 0x5, 0x4}], 0x10, 0x3}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000003d00)={@map=r8, r10, 0x1e, 0x24, 0x0, @void, @void, @void, @value=r1}, 0x20) (async, rerun: 64)
r11 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000003d40), 0x2, 0x0) (rerun: 64)
write$cgroup_subtree(r11, &(0x7f0000003d80)={[{0x2b, 'rlimit'}, {0x2d, 'net'}, {0x2b, 'rlimit'}, {0x2d, 'cpuset'}, {0x2b, 'rdma'}, {0x2d, 'net'}, {0x2d, 'rdma'}, {0x2b, 'pids'}, {0x2d, 'rdma'}]}, 0x3a) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000004e80)={r6, 0x20, &(0x7f0000004e40)={&(0x7f0000003dc0)=""/127, 0x7f, <r12=>0x0, &(0x7f0000003e40)=""/4096, 0x1000}}, 0x10) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004f40)={{r9}, &(0x7f0000004ec0), &(0x7f0000004f00)=r10}, 0x20)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000004f80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x4, '\x00', r2, r6, 0x1, 0x0, 0x2}, 0x50) (async)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000005000)=r0, 0x4)
r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000005040)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0x0, '\x00', r2, r6, 0x5, 0x3, 0x3}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000050c0)=@bloom_filter={0x1e, 0x80000000, 0x9, 0x7, 0x2000, r13, 0x9df3, '\x00', r2, r6, 0x5, 0x2, 0x3, 0xa}, 0x50) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000005140)=r12, 0x4)
r14 = perf_event_open$cgroup(&(0x7f0000005180)={0x4, 0x80, 0x3, 0x2, 0x40, 0x6, 0x0, 0xffffffffffffff81, 0x80000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xeb5, 0x0, @perf_config_ext={0x0, 0x1000}, 0x4010, 0x2, 0xb, 0x7, 0xc, 0xfffffff4, 0xbfb8, 0x0, 0xfb, 0x0, 0x2}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x3)
ioctl$PERF_EVENT_IOC_SET_BPF(r14, 0x40042408, r7) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000005280)={r9, 0x58, &(0x7f0000005200)}, 0x10) (async)
r15 = openat$tun(0xffffffffffffff9c, &(0x7f00000052c0), 0x60001, 0x0)
ioctl$TUNSETFILTEREBPF(r15, 0x800454e1, &(0x7f0000005300)=r7) (async, rerun: 32)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005340)) (rerun: 32)

1.610204986s ago: executing program 2 (id=1131):
socket$kcm(0x10, 0x3, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000180)=ANY=[], 0x3)
r2 = socket$kcm(0x23, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet={0x23, 0x0, 0xfc}, 0x80, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000080)="9be2", 0x2}], 0x2}, 0x0)
r3 = socket$kcm(0x11, 0x2, 0x0)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000000c0)=r3, 0x8)
r5 = perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffd46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402000a}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0xfe}, 0x0, 0x0, r5, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'virt_wifi0\x00', 0x11})
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014", 0x5}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)

1.304136573s ago: executing program 2 (id=1132):
socket$kcm(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x81, 0x0, 0x0, 0x0, 0xffbffffffffffffb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x12100, 0xc8, 0x2, 0x9, 0x0, 0x10001, 0xa, 0x0, 0x800, 0x0, 0x2}, 0x0, 0xd, 0xffffffffffffffff, 0xc)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80444, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000100)={'macvtap0\x00', @random="b40007350060"})
r1 = getpid()
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x6000, 0x1, 0x0, 0x0, 0x748, 0x4, 0xb}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/149, 0x95}], 0x1, &(0x7f00000005c0)}, 0x40010143)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r4, 0x1, 0x10, &(0x7f0000000000), 0x4)
sendmsg$inet(r4, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000040)='P', 0xfe1b}], 0x1}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[@ANYRESDEC=r2], 0xfdef)

1.303423303s ago: executing program 4 (id=1133):
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x8, 0x2}, 0x80, 0x0}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[], 0x50)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x10, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r1, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f00000006c0)=[0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r4=>0x0, 0x79, &(0x7f0000000740)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0xcf, 0x8, 0x8, &(0x7f0000000900)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xd, 0x19, &(0x7f0000000380)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x6}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffff18}, @map_fd={0x18, 0x2, 0x1, 0x0, r2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f00000001c0)='syzkaller\x00', 0x10, 0x12, &(0x7f0000000280)=""/18, 0x40f00, 0x0, '\x00', 0x0, @sock_ops=0x3, r3, 0x8, &(0x7f0000000600)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0xe, 0x1000, 0x7}, 0x10, r4, 0xffffffffffffffff, 0x4, &(0x7f0000000a80)=[r2], &(0x7f0000000ac0)=[{0x2, 0x1, 0x10, 0x5}, {0x0, 0x3, 0xc, 0x2}, {0x4, 0x5, 0x7, 0xe}, {0x2, 0x2, 0xc, 0x8}], 0x10, 0x16da00}, 0x94)
socketpair(0x3, 0x800, 0x0, &(0x7f0000000000))
socketpair(0x1, 0x5, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc)
close(0x4)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xc, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e0000009500000000000000"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000240))
unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')

1.302846904s ago: executing program 0 (id=1142):
socket$kcm(0x10, 0x3, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000180)=ANY=[], 0x3)
r2 = socket$kcm(0x23, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet={0x23, 0x0, 0xfc}, 0x80, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000080)="9be2", 0x2}], 0x2}, 0x0)
r3 = socket$kcm(0x11, 0x2, 0x0)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000000c0)=r3, 0x8)
r5 = perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffd46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402000a}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0xfe}, 0x0, 0x0, r5, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'virt_wifi0\x00', 0x11})
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014", 0x5}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)

1.302539523s ago: executing program 1 (id=1134):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20008810)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x25, &(0x7f0000000ac0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040a00000000fe0500002015000600142603600e1209000a00000000000001060000b94dcf5c0468c1d67f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090058651fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xd8}], 0x1}, 0x0)

1.302223523s ago: executing program 3 (id=1135):
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8d}, 0x48)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0xa, 0x1, 0x0)
recvmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10011)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff)

1.065664057s ago: executing program 1 (id=1136):
r0 = syz_clone(0x4000, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000240))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={0xffffffffffffffff, 0x0, 0xc, 0x0, &(0x7f0000000500)="4a3e6a50269bdaa502268e79", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x6a}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='\t\x00\x00\x00'], 0x50)
bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYRES16=r1], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), 0x0, 0xce, r2}, 0x38)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c230000)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400"], 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000600)="b9ff03075fe900", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x50)

987.634352ms ago: executing program 0 (id=1137):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="1200000001000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\b'], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffd80)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r0 = socket$kcm(0x23, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet={0x23, 0x0, 0xfc}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="9b", 0x1}], 0x1}, 0x0)

869.954639ms ago: executing program 3 (id=1138):
r0 = socket$kcm(0x23, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet={0x23, 0x0, 0xfc}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="9b", 0x1}], 0x1}, 0x0)

753.010696ms ago: executing program 3 (id=1139):
socket$kcm(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x81, 0x0, 0x0, 0x0, 0xffbffffffffffffb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x12100, 0xc8, 0x2, 0x9, 0x0, 0x10001, 0xa, 0x0, 0x800, 0x0, 0x2}, 0x0, 0xd, 0xffffffffffffffff, 0xc)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80444, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000100)={'macvtap0\x00', @random="b40007350060"})
r1 = getpid()
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x6000, 0x1, 0x0, 0x0, 0x748, 0x4, 0xb}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)}, 0x40010143)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r4, 0x1, 0x10, &(0x7f0000000000), 0x4)
sendmsg$inet(r4, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000040)='P', 0xfe1b}], 0x1}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[@ANYRESDEC=r2], 0xfdef)

668.76294ms ago: executing program 0 (id=1140):
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$kcm(0xa, 0x7, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYRES64=r0], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x68}, [@call={0x85, 0x0, 0x0, 0x1a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80)

648.774162ms ago: executing program 4 (id=1141):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffd, 0x8, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8, 0xfffffffd}, [@ldst={0x3, 0x3, 0x3, 0x1c10a1, 0x0, 0x98}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000080)=""/196, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1, 0xa833}, 0x47}, 0x94)

430.047465ms ago: executing program 4 (id=1143):
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet={0x23, 0x0, 0xfc}, 0x80, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000080)="9be2", 0x2}], 0x2}, 0x0)

378.151527ms ago: executing program 1 (id=1144):
socket$kcm(0x10, 0x3, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000180)=ANY=[], 0x3)
r2 = socket$kcm(0x23, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet={0x23, 0x0, 0xfc}, 0x80, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000080)="9be2", 0x2}], 0x2}, 0x0)
r3 = socket$kcm(0x11, 0x2, 0x0)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000000c0)=r3, 0x8)
r5 = perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffd46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402000a}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0xfe}, 0x0, 0x0, r5, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'virt_wifi0\x00', 0x11})
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r6, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)

199.469µs ago: executing program 0 (id=1145):
socket$kcm(0x10, 0x3, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000180)=ANY=[], 0x3)
r2 = socket$kcm(0x23, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet={0x23, 0x0, 0xfc}, 0x80, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000080)="9be2", 0x2}], 0x2}, 0x0)
r3 = socket$kcm(0x11, 0x2, 0x0)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000000c0)=r3, 0x8)
r5 = perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffd46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402000a}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0xfe}, 0x0, 0x0, r5, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'virt_wifi0\x00', 0x11})
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r6, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)

0s ago: executing program 4 (id=1146):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000400)=0x1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
close(0x4)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.212' (ED25519) to the list of known hosts.
[   63.051963][ T4172] cgroup: Unknown subsys name 'net'
[   63.193367][ T4172] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   64.706796][ T4172] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   66.381388][ T4190] chnl_net:caif_netlink_parms(): no params data found
[   66.458463][ T4192] chnl_net:caif_netlink_parms(): no params data found
[   66.472032][ T4184] chnl_net:caif_netlink_parms(): no params data found
[   66.570866][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.578757][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.586877][ T4190] device bridge_slave_0 entered promiscuous mode
[   66.602390][ T4185] chnl_net:caif_netlink_parms(): no params data found
[   66.618381][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.625909][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.638205][ T4190] device bridge_slave_1 entered promiscuous mode
[   66.687970][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.713701][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.723703][ T4193] chnl_net:caif_netlink_parms(): no params data found
[   66.752011][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.762050][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.770799][ T4184] device bridge_slave_0 entered promiscuous mode
[   66.780082][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.787627][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.795911][ T4184] device bridge_slave_1 entered promiscuous mode
[   66.815306][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.822765][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.830923][ T4192] device bridge_slave_0 entered promiscuous mode
[   66.845919][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.853669][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.862019][ T4192] device bridge_slave_1 entered promiscuous mode
[   66.902205][ T4190] team0: Port device team_slave_0 added
[   66.923154][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.936191][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.948239][ T4190] team0: Port device team_slave_1 added
[   66.960310][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.993647][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.003241][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.010605][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.019207][ T4185] device bridge_slave_0 entered promiscuous mode
[   67.046518][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.054743][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.082294][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.101315][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.108711][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.136084][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.150970][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.158556][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.166819][ T4185] device bridge_slave_1 entered promiscuous mode
[   67.178265][ T4192] team0: Port device team_slave_0 added
[   67.215448][ T4192] team0: Port device team_slave_1 added
[   67.228495][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.235939][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.244111][ T4193] device bridge_slave_0 entered promiscuous mode
[   67.261103][ T4184] team0: Port device team_slave_0 added
[   67.269251][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.285336][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.293212][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.301654][ T4193] device bridge_slave_1 entered promiscuous mode
[   67.313549][ T4190] device hsr_slave_0 entered promiscuous mode
[   67.321389][ T4190] device hsr_slave_1 entered promiscuous mode
[   67.330433][ T4184] team0: Port device team_slave_1 added
[   67.339018][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.388693][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.395694][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.423170][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.460269][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.475447][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.503332][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.515298][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.522811][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.549864][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.570160][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.582855][ T4185] team0: Port device team_slave_0 added
[   67.590054][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.597445][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.624263][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.647802][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.659342][ T4185] team0: Port device team_slave_1 added
[   67.737548][ T4192] device hsr_slave_0 entered promiscuous mode
[   67.744945][ T4192] device hsr_slave_1 entered promiscuous mode
[   67.752186][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   67.760496][ T4192] Cannot create hsr debugfs directory
[   67.780643][ T4184] device hsr_slave_0 entered promiscuous mode
[   67.788239][ T4184] device hsr_slave_1 entered promiscuous mode
[   67.795599][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   67.804321][ T4184] Cannot create hsr debugfs directory
[   67.812624][ T4193] team0: Port device team_slave_0 added
[   67.825089][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.832756][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.859419][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.873962][ T4193] team0: Port device team_slave_1 added
[   67.899545][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.906534][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.932931][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.964779][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.972131][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.998702][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.014888][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.022069][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.048477][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.108180][ T4197] Bluetooth: hci3: command 0x0409 tx timeout
[   68.117779][ T1108] Bluetooth: hci4: command 0x0409 tx timeout
[   68.124545][ T4197] Bluetooth: hci0: command 0x0409 tx timeout
[   68.125697][ T1108] Bluetooth: hci2: command 0x0409 tx timeout
[   68.138044][ T1108] Bluetooth: hci1: command 0x0409 tx timeout
[   68.182332][ T4185] device hsr_slave_0 entered promiscuous mode
[   68.190262][ T4185] device hsr_slave_1 entered promiscuous mode
[   68.198272][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   68.206318][ T4185] Cannot create hsr debugfs directory
[   68.262129][ T4193] device hsr_slave_0 entered promiscuous mode
[   68.269546][ T4193] device hsr_slave_1 entered promiscuous mode
[   68.276524][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   68.285094][ T4193] Cannot create hsr debugfs directory
[   68.456362][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   68.490345][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   68.503732][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   68.521953][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   68.566714][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   68.600296][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   68.609936][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   68.624723][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   68.679570][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   68.694601][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   68.724024][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   68.768694][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.775722][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   68.793085][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   68.814440][ T4190] 8021q: adding VLAN 0 to HW filter on device team0
[   68.833305][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   68.845685][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   68.855054][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   68.865264][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   68.893996][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   68.922464][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   68.932598][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   68.943256][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.950696][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.960227][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   68.970613][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   68.981739][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.989097][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.998295][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   69.055279][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   69.065068][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   69.075820][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   69.085781][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   69.096760][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   69.110754][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   69.120257][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   69.129679][ T4193] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   69.154217][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.163422][ T4193] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   69.185967][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   69.194739][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   69.207652][ T4193] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   69.220668][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   69.230652][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   69.250523][ T4193] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   69.262467][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   69.273449][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   69.282395][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   69.308268][ T4192] 8021q: adding VLAN 0 to HW filter on device team0
[   69.327900][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   69.336860][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   69.346272][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.353641][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.388088][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   69.397620][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   69.406926][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   69.425548][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.433021][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.443961][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   69.453984][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   69.511232][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   69.523054][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   69.533403][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   69.544014][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   69.566965][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   69.577904][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   69.586446][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   69.608915][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.620083][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.632161][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   69.641306][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   69.676865][ T4184] 8021q: adding VLAN 0 to HW filter on device team0
[   69.691045][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   69.700027][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   69.708900][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   69.716914][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   69.726115][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   69.734326][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   69.744224][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   69.755976][ T4185] 8021q: adding VLAN 0 to HW filter on device team0
[   69.766385][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   69.778505][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   69.788620][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.795922][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.812273][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.865565][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   69.876541][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   69.886699][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   69.896677][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.904715][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.913829][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   69.923543][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   69.932888][  T155] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.940347][  T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.950534][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   69.959825][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   69.969675][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   69.978856][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   69.988532][  T155] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.996129][  T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.004349][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   70.013970][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   70.023636][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   70.058656][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.065767][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   70.083803][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   70.099201][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   70.115341][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   70.128696][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   70.138837][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   70.147849][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   70.158917][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   70.168417][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   70.176534][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   70.192308][   T21] Bluetooth: hci3: command 0x041b tx timeout
[   70.197783][ T4226] Bluetooth: hci0: command 0x041b tx timeout
[   70.217855][ T4226] Bluetooth: hci1: command 0x041b tx timeout
[   70.228526][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   70.228566][ T4226] Bluetooth: hci2: command 0x041b tx timeout
[   70.243912][ T4226] Bluetooth: hci4: command 0x041b tx timeout
[   70.251153][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   70.265913][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   70.275559][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   70.284881][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   70.293687][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   70.302989][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   70.312911][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   70.321432][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   70.330657][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   70.342943][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   70.353010][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   70.386144][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   70.398721][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   70.408638][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   70.416307][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   70.425953][ T4193] 8021q: adding VLAN 0 to HW filter on device team0
[   70.440663][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   70.449731][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   70.462517][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.490468][ T4190] device veth0_vlan entered promiscuous mode
[   70.499951][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   70.511558][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   70.523919][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   70.534993][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   70.550652][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.557980][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.567017][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   70.594564][ T4190] device veth1_vlan entered promiscuous mode
[   70.606929][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   70.628616][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   70.648053][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   70.664283][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   70.673841][  T155] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.681333][  T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.696971][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   70.751319][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   70.768689][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   70.779772][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   70.790221][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   70.803871][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   70.812818][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   70.832506][ T4192] device veth0_vlan entered promiscuous mode
[   70.848916][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   70.862657][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   70.872067][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   70.881667][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   70.890550][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   70.899804][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   70.915200][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.934796][ T4190] device veth0_macvtap entered promiscuous mode
[   70.946329][ T4190] device veth1_macvtap entered promiscuous mode
[   70.958901][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   70.966954][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   70.975605][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   70.984877][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   70.993793][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   71.003292][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   71.012535][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   71.033330][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   71.046965][ T4192] device veth1_vlan entered promiscuous mode
[   71.059243][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   71.069533][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   71.078892][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   71.086590][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   71.144850][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.156842][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   71.176040][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   71.188832][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   71.218977][ T4192] device veth0_macvtap entered promiscuous mode
[   71.228117][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.255631][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   71.265805][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   71.275344][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   71.284708][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   71.293467][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   71.302806][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   71.312717][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   71.321559][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   71.330152][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   71.339883][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   71.348216][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   71.358706][ T4184] device veth0_vlan entered promiscuous mode
[   71.366199][ T4192] device veth1_macvtap entered promiscuous mode
[   71.384008][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.404707][ T4184] device veth1_vlan entered promiscuous mode
[   71.412528][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   71.422132][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   71.432073][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   71.442081][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   71.451876][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   71.461070][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   71.475673][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.489835][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.500056][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.510177][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.520449][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.550185][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   71.566373][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.585371][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.596880][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.619629][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   71.641720][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   71.651586][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   71.660781][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   71.683216][ T4185] device veth0_vlan entered promiscuous mode
[   71.693464][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.706231][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.719230][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.734441][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   71.743748][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   71.753874][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   71.763059][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   71.772665][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   71.781724][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   71.803674][ T4185] device veth1_vlan entered promiscuous mode
[   71.819748][ T4184] device veth0_macvtap entered promiscuous mode
[   71.837646][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.846504][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.861180][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.873094][ T1425] ieee802154 phy0 wpan0: encryption failed: -22
[   71.873661][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.879874][ T1425] ieee802154 phy1 wpan1: encryption failed: -22
[   71.925959][ T4184] device veth1_macvtap entered promiscuous mode
[   71.992823][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   72.002394][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   72.011391][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   72.021239][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   72.030626][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   72.039980][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   72.049457][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   72.058788][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   72.097615][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.115037][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.127021][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.138969][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.149381][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.160251][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.173109][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.185190][ T4185] device veth0_macvtap entered promiscuous mode
[   72.203921][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   72.218367][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   72.226619][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   72.236468][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   72.261835][ T4185] device veth1_macvtap entered promiscuous mode
[   72.278122][ T4285] Bluetooth: hci4: command 0x040f tx timeout
[   72.287637][ T4285] Bluetooth: hci2: command 0x040f tx timeout
[   72.293106][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.296585][ T4285] Bluetooth: hci1: command 0x040f tx timeout
[   72.309495][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   72.319559][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.322569][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   72.335316][ T4285] Bluetooth: hci0: command 0x040f tx timeout
[   72.336699][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   72.342219][ T4285] Bluetooth: hci3: command 0x040f tx timeout
[   72.357190][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.370756][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.382023][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.398525][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.410742][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.426620][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.436842][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.446872][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.455781][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.467525][ T4193] device veth0_vlan entered promiscuous mode
[   72.479694][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   72.488789][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   72.496949][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   72.505775][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   72.516638][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   72.545006][ T1244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.565489][ T4193] device veth1_vlan entered promiscuous mode
[   72.572133][ T1244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.582120][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.596008][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.614774][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.626282][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.644690][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.656267][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.668766][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.688137][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   72.696435][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   72.706914][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   72.716206][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   72.748041][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.791535][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.802210][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.814232][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.825602][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.837924][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.853790][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.878017][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   72.895182][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   72.910955][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.922092][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.931790][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.942028][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.956064][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.968776][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.019032][ T4193] device veth0_macvtap entered promiscuous mode
[   73.047015][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   73.056864][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   73.080741][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   73.107086][    C1] hrtimer: interrupt took 53131 ns
[   73.129826][ T4279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.150571][ T4279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.176530][ T4302] netlink: 'syz.3.6': attribute type 3 has an invalid length.
[   73.185994][ T4302] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6'.
[   73.202516][ T4193] device veth1_macvtap entered promiscuous mode
[   73.217811][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   73.235491][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   73.255672][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   73.350876][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.378744][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.386422][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.394260][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.421730][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.460920][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.495185][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.520216][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.531640][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.542602][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.557793][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.587610][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   73.597832][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   73.608236][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   73.640937][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.661864][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.675588][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.706831][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.725459][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.742059][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.756141][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.768337][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.781234][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.793148][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.802746][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.812767][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.825284][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.889412][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[   73.923486][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[   73.978061][ T4315] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   73.995758][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   74.006053][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   74.025618][ T1244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.047430][ T4317] netlink: 'syz.2.11': attribute type 10 has an invalid length.
[   74.052939][ T1244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.064464][ T4315] syz.3.10 (4315) used greatest stack depth: 19312 bytes left
[   74.077396][ T4317] netlink: 168 bytes leftover after parsing attributes in process `syz.2.11'.
[   74.124543][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   74.226395][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.264460][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.305645][ T4279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.326174][ T4279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.358483][ T4276] Bluetooth: hci0: command 0x0419 tx timeout
[   74.370051][ T4276] Bluetooth: hci1: command 0x0419 tx timeout
[   74.373478][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   74.385018][ T4276] Bluetooth: hci2: command 0x0419 tx timeout
[   74.426314][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   74.435238][ T4276] Bluetooth: hci4: command 0x0419 tx timeout
[   74.454549][ T1108] Bluetooth: hci3: command 0x0419 tx timeout
[   74.514029][ T4336] netlink: 'syz.2.15': attribute type 10 has an invalid length.
[   74.561069][ T4336] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.571866][ T4335] Zero length message leads to an empty skb
[   74.614004][ T4336] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.639994][ T4336] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[   74.713404][ T4320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.758784][ T4320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.795623][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   75.963942][ T4365] netlink: 'syz.4.25': attribute type 2 has an invalid length.
[   77.336799][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[   77.394523][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[   77.415019][ T4417] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   77.451700][ T4415] netlink: 'syz.0.45': attribute type 10 has an invalid length.
[   77.468100][ T4415] netlink: 168 bytes leftover after parsing attributes in process `syz.0.45'.
[   78.304407][ T4463] netlink: 'syz.0.63': attribute type 1 has an invalid length.
[   78.318125][ T4463] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.63'.
[   78.329200][ T4452] device syzkaller0 entered promiscuous mode
[   79.036637][ T4464] delete_channel: no stack
[   80.564175][ T4490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.73'.
[   80.647586][ T4489] delete_channel: no stack
[   81.077964][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[   81.151175][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[   81.358027][ T4507] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   81.429562][ T4512] netlink: 'syz.1.82': attribute type 10 has an invalid length.
[   81.457331][ T4512] netlink: 168 bytes leftover after parsing attributes in process `syz.1.82'.
[   81.814647][ T4531] netlink: 132 bytes leftover after parsing attributes in process `syz.4.89'.
[   81.848929][ T4531] netlink: 'syz.4.89': attribute type 39 has an invalid length.
[   81.955807][ T4541] netlink: 132 bytes leftover after parsing attributes in process `syz.0.92'.
[   82.172945][   T13] cfg80211: failed to load regulatory.db
[   82.720908][ T4569] netlink: 16083 bytes leftover after parsing attributes in process `syz.2.102'.
[   83.056295][ T4562] netlink: 14 bytes leftover after parsing attributes in process `syz.2.102'.
[   83.454737][ T4560] delete_channel: no stack
[   83.771655][ T4600] netlink: 'syz.0.115': attribute type 3 has an invalid length.
[   83.820075][ T4600] netlink: 132 bytes leftover after parsing attributes in process `syz.0.115'.
[   83.925453][ T4600] netlink: 'syz.0.115': attribute type 1 has an invalid length.
[   83.982006][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[   84.016398][ T4600] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.115'.
[   84.022974][ T4604] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   84.065629][ T4613] netlink: 'syz.4.119': attribute type 10 has an invalid length.
[   84.150022][ T4613] netlink: 168 bytes leftover after parsing attributes in process `syz.4.119'.
[   85.165730][ T4671] Â: renamed from pim6reg1
[   86.418399][ T4707] netlink: 14 bytes leftover after parsing attributes in process `syz.4.153'.
[   86.549017][ T4707] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   86.622853][ T4707] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   86.680727][ T4707] bond0 (unregistering): Released all slaves
[   86.752658][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[   86.798685][ T4717] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   86.898259][ T4719] netlink: 14 bytes leftover after parsing attributes in process `syz.0.157'.
[   87.038173][ T4719] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   87.091690][ T4719] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   87.158245][ T4719] bond0 (unregistering): Released all slaves
[   87.182965][ T4723] netlink: 'syz.3.159': attribute type 10 has an invalid length.
[   87.230318][ T4723] netlink: 168 bytes leftover after parsing attributes in process `syz.3.159'.
[   87.425093][ T4726] netlink: 152 bytes leftover after parsing attributes in process `syz.4.160'.
[   87.907707][ T4743] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.166'.
[   88.580044][ T4739] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.163'.
[   88.674739][ T4739] netlink: 16770 bytes leftover after parsing attributes in process `syz.3.163'.
[   90.856333][ T4825] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[   90.915308][ T4825] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   91.087682][ T4820] __nla_validate_parse: 1 callbacks suppressed
[   91.087707][ T4820] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.191'.
[   91.140269][ T4820] netlink: 16770 bytes leftover after parsing attributes in process `syz.0.191'.
[   91.201598][ T4820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.191'.
[   91.318607][ T4833] netlink: 'syz.4.197': attribute type 10 has an invalid length.
[   91.389008][ T4833] netlink: 168 bytes leftover after parsing attributes in process `syz.4.197'.
[   93.636478][ T4881] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.213'.
[   94.022195][ T4899] netlink: 'syz.0.220': attribute type 8 has an invalid length.
[   94.075335][ T4899] netlink: 197324 bytes leftover after parsing attributes in process `syz.0.220'.
[   94.332447][ T4906] netlink: 763 bytes leftover after parsing attributes in process `syz.4.224'.
[   95.179822][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[   95.273049][ T4931] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   95.480870][ T4933] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.228'.
[   95.542213][ T4933] netlink: 16770 bytes leftover after parsing attributes in process `syz.1.228'.
[   95.657892][ T4933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.228'.
[   96.113744][ T4952] netlink: 32 bytes leftover after parsing attributes in process `syz.0.239'.
[   96.145853][ T4952] netlink: 32 bytes leftover after parsing attributes in process `syz.0.239'.
[   96.197390][ T4951] netlink: 'syz.2.240': attribute type 10 has an invalid length.
[   96.215619][ T4951] netlink: 168 bytes leftover after parsing attributes in process `syz.2.240'.
[   96.712140][ T4959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   96.769430][ T4977] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.248'.
[   98.878889][ T5026] netlink: 60 bytes leftover after parsing attributes in process `syz.2.265'.
[   99.613152][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[   99.666033][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[   99.799665][ T5052] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   99.907594][ T5061] netlink: 'syz.2.278': attribute type 10 has an invalid length.
[   99.932013][ T5061] netlink: 168 bytes leftover after parsing attributes in process `syz.2.278'.
[  100.878706][ T5099] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  105.782739][ T5162] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.313'.
[  106.915456][ T5192] syz.2.325 uses obsolete (PF_INET,SOCK_PACKET)
[  106.948453][ T5193] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  107.003271][ T5193] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  107.068270][ T5193] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  107.121892][ T5195] netlink: 'syz.3.326': attribute type 10 has an invalid length.
[  107.134122][ T5195] netlink: 168 bytes leftover after parsing attributes in process `syz.3.326'.
[  107.526614][ T5218] netlink: 38831 bytes leftover after parsing attributes in process `syz.3.334'.
[  108.638713][ T5252] netlink: 'syz.3.347': attribute type 21 has an invalid length.
[  108.665032][ T5252] netlink: 'syz.3.347': attribute type 6 has an invalid length.
[  108.693188][ T5252] netlink: 132 bytes leftover after parsing attributes in process `syz.3.347'.
[  108.882903][ T5261] netlink: 'syz.3.347': attribute type 1 has an invalid length.
[  108.922163][ T5261] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.347'.
[  109.750942][ T5289] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  109.758624][ T5289] IPv6: NLM_F_CREATE should be set when creating new route
[  109.766079][ T5289] IPv6: NLM_F_CREATE should be set when creating new route
[  109.773758][ T5289] IPv6: NLM_F_CREATE should be set when creating new route
[  111.108545][ T5320] netlink: 'syz.1.372': attribute type 10 has an invalid length.
[  111.116436][ T5320] netlink: 168 bytes leftover after parsing attributes in process `syz.1.372'.
[  111.358010][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  111.385268][ T5332] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  112.236111][ T5352] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  113.087180][ T5372] netlink: 'syz.2.392': attribute type 7 has an invalid length.
[  113.198628][ T5372] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.392'.
[  113.426161][ T5389] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.395'.
[  114.149665][ T5406] netlink: 60 bytes leftover after parsing attributes in process `syz.0.402'.
[  114.199236][ T5406] netlink: 60 bytes leftover after parsing attributes in process `syz.0.402'.
[  115.593577][ T5446] netlink: 'syz.2.415': attribute type 10 has an invalid length.
[  115.690195][ T5446] netlink: 168 bytes leftover after parsing attributes in process `syz.2.415'.
[  115.990238][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  116.040526][ T5449] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  116.204669][ T5459] netlink: 'syz.0.419': attribute type 9 has an invalid length.
[  116.268477][ T5459] netlink: 44 bytes leftover after parsing attributes in process `syz.0.419'.
[  116.349344][ T5465] netlink: 'syz.3.422': attribute type 11 has an invalid length.
[  116.871832][ T5484] netlink: 'syz.3.428': attribute type 25 has an invalid length.
[  116.886855][ T5491] netlink: 'syz.4.432': attribute type 9 has an invalid length.
[  116.928502][ T5484] netlink: 'syz.3.428': attribute type 28 has an invalid length.
[  116.937553][ T5491] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.432'.
[  116.997708][ T5478] delete_channel: no stack
[  117.512050][ T5507] delete_channel: no stack
[  118.393668][ T5518] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.443'.
[  119.190805][ T5543] netlink: 'syz.2.449': attribute type 9 has an invalid length.
[  119.203075][ T5543] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.449'.
[  119.638542][ T5559] netlink: 'syz.3.453': attribute type 10 has an invalid length.
[  119.668173][ T5559] netlink: 168 bytes leftover after parsing attributes in process `syz.3.453'.
[  119.976558][ T5572] netlink: 'syz.1.456': attribute type 29 has an invalid length.
[  120.054005][ T5572] netlink: 'syz.1.456': attribute type 29 has an invalid length.
[  120.107705][ T5573] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  120.217558][ T5573] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  120.263789][ T5582] netlink: 'syz.1.456': attribute type 29 has an invalid length.
[  120.513010][ T5586] netlink: 207496 bytes leftover after parsing attributes in process `syz.4.460'.
[  120.639556][ T5588] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.463'.
[  122.157201][ T5616] netlink: 16222 bytes leftover after parsing attributes in process `syz.4.474'.
[  122.292560][ T5625] netlink: 'syz.2.477': attribute type 1 has an invalid length.
[  122.322944][ T5626] netlink: 'syz.2.477': attribute type 1 has an invalid length.
[  122.452774][ T5635] netlink: 52 bytes leftover after parsing attributes in process `syz.1.480'.
[  122.581389][ T5646] netlink: 'syz.4.482': attribute type 29 has an invalid length.
[  122.741741][ T5646] netlink: 'syz.4.482': attribute type 29 has an invalid length.
[  122.938634][ T5652] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.486'.
[  123.847839][ T5682] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.491'.
[  124.004730][ T5688] netlink: 'syz.0.493': attribute type 10 has an invalid length.
[  124.399106][ T5688] netlink: 168 bytes leftover after parsing attributes in process `syz.0.493'.
[  125.026002][ T5700] netlink: 'syz.1.498': attribute type 21 has an invalid length.
[  125.226533][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  125.300789][ T5707] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  125.369520][ T5718] netlink: 'syz.3.501': attribute type 29 has an invalid length.
[  125.392271][ T5709] device bridge0 entered promiscuous mode
[  125.548403][ T5718] netlink: 'syz.3.501': attribute type 29 has an invalid length.
[  125.649127][ T5709] netlink: 'syz.1.502': attribute type 10 has an invalid length.
[  125.709108][ T5709] device hsr0 entered promiscuous mode
[  125.778409][ T5709] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  125.817731][ T5709] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  125.857471][ T5709] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  125.880861][ T5709] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  125.943466][ T5720] netlink: 'syz.3.501': attribute type 29 has an invalid length.
[  126.385776][ T5756] netlink: 'syz.4.516': attribute type 3 has an invalid length.
[  126.393982][ T5756] netlink: 'syz.4.516': attribute type 1 has an invalid length.
[  126.402928][ T5756] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.516'.
[  128.476293][ T5798] netlink: 2491 bytes leftover after parsing attributes in process `syz.3.533'.
[  128.558350][ T5806] netlink: 'syz.3.533': attribute type 21 has an invalid length.
[  128.717152][ T5803] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.531'.
[  128.762546][ T5807] netlink: 'syz.1.535': attribute type 10 has an invalid length.
[  128.811625][ T5807] netlink: 168 bytes leftover after parsing attributes in process `syz.1.535'.
[  129.207735][ T5822] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  129.351453][ T5822] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  130.420833][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.435633][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.455834][ T5875] netlink: 'syz.4.561': attribute type 46 has an invalid length.
[  133.413161][ T1425] ieee802154 phy0 wpan0: encryption failed: -22
[  133.420699][ T1425] ieee802154 phy1 wpan1: encryption failed: -22
[  133.605029][ T5896] netlink: 'syz.1.569': attribute type 10 has an invalid length.
[  133.659606][ T5896] netlink: 168 bytes leftover after parsing attributes in process `syz.1.569'.
[  134.093309][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  134.181956][ T5912] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  136.327490][ T5988] netlink: 'syz.1.604': attribute type 10 has an invalid length.
[  136.344187][ T5988] netlink: 168 bytes leftover after parsing attributes in process `syz.1.604'.
[  136.901904][ T6010] netlink: 'syz.2.610': attribute type 10 has an invalid length.
[  136.945695][ T6010] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  136.985075][ T6007] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  137.061672][ T6007] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  137.543063][ T6017] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.613'.
[  138.286813][ T6040] netlink: 13439 bytes leftover after parsing attributes in process `syz.3.621'.
[  138.395380][ T6047] netlink: 13439 bytes leftover after parsing attributes in process `syz.3.621'.
[  138.678837][ T6038] device aaaaaaaaaaaaaaa entered promiscuous mode
[  138.716923][ T6027] syz.1.618 (6027) used greatest stack depth: 15440 bytes left
[  139.214580][ T6061] IPv6: Can't replace route, no match found
[  139.446571][ T6061] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  141.498633][ T6091] netlink: 'syz.1.638': attribute type 10 has an invalid length.
[  141.557562][ T6091] device hsr0 left promiscuous mode
[  141.581695][ T6091] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  143.192249][ T6114] device aaaaaaaaaaaaaaa entered promiscuous mode
[  143.327165][  T155] wlan1: Trigger new scan to find an IBSS to join
[  143.385702][ T6132] IPv6: Can't replace route, no match found
[  143.716888][ T6132] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  144.631300][ T6147] netlink: 'syz.4.653': attribute type 10 has an invalid length.
[  145.092332][ T6147] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  145.744165][ T6157] IPv6: Can't replace route, no match found
[  145.990248][ T6157] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  146.091945][ T6173] netlink: 'syz.2.659': attribute type 10 has an invalid length.
[  146.178898][ T6173] netlink: 168 bytes leftover after parsing attributes in process `syz.2.659'.
[  147.184828][ T6190] device aaaaaaaaaaaaaaa entered promiscuous mode
[  147.775481][ T6209] netlink: 40 bytes leftover after parsing attributes in process `syz.4.670'.
[  147.945028][ T6216] netlink: 'syz.3.671': attribute type 10 has an invalid length.
[  148.021544][ T6216] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  148.258724][ T6227] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  148.351921][ T4279] wlan1: Trigger new scan to find an IBSS to join
[  148.407610][ T6227] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  148.637949][ T6224] IPv6: Can't replace route, no match found
[  148.775777][ T6224] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  150.875072][ T6279] delete_channel: no stack
[  151.284795][ T6293] netlink: 'syz.0.693': attribute type 10 has an invalid length.
[  151.309951][  T155] wlan1: Trigger new scan to find an IBSS to join
[  151.447524][ T6293] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  152.110222][ T6301] IPv6: Can't replace route, no match found
[  152.145652][ T6301] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  154.016338][ T6343] device aaaaaaaaaaaaaaa entered promiscuous mode
[  154.374135][  T144] wlan1: Trigger new scan to find an IBSS to join
[  154.567198][ T6364] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.731'.
[  154.622071][ T6364] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.731'.
[  154.632693][ T6360] IPv6: Can't replace route, no match found
[  154.700120][ T6364] netlink: 12 bytes leftover after parsing attributes in process `syz.0.731'.
[  154.713069][ T6360] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  155.307383][  T155] wlan1: Trigger new scan to find an IBSS to join
[  155.501938][ T6394] netlink: 'syz.0.732': attribute type 10 has an invalid length.
[  155.557602][ T6394] netlink: 168 bytes leftover after parsing attributes in process `syz.0.732'.
[  155.862842][ T6391] IPv6: Can't replace route, no match found
[  156.044152][ T6391] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  157.308097][  T144] wlan1: Creating new IBSS network, BSSID 7a:9f:51:1c:bb:14
[  157.316001][  T154] wlan1: Trigger new scan to find an IBSS to join
[  157.670979][ T6436] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  157.739929][ T6436] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  158.441368][ T6464] IPv6: Can't replace route, no match found
[  158.501547][ T6479] netlink: 'syz.3.761': attribute type 1 has an invalid length.
[  158.555590][ T6480] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  159.299135][ T6498] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.763'.
[  159.309030][  T155] wlan1: Trigger new scan to find an IBSS to join
[  159.321287][ T6498] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes.
[  159.495092][ T6483] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.763'.
[  159.616800][ T6505] netlink: 144 bytes leftover after parsing attributes in process `syz.4.767'.
[  159.759636][ T6500] netlink: 'syz.4.767': attribute type 8 has an invalid length.
[  159.791668][ T6500] netlink: 48 bytes leftover after parsing attributes in process `syz.4.767'.
[  159.866627][ T6487] netlink: 'syz.1.763': attribute type 21 has an invalid length.
[  160.314564][ T6517] device syzkaller0 entered promiscuous mode
[  161.107125][ T6537] IPv6: Can't replace route, no match found
[  161.294145][ T6546] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  161.408027][ T1244] wlan1: Trigger new scan to find an IBSS to join
[  161.414848][ T1244] wlan1: Trigger new scan to find an IBSS to join
[  161.708526][ T6553] netlink: 'syz.1.796': attribute type 10 has an invalid length.
[  161.819949][ T6553] netlink: 40 bytes leftover after parsing attributes in process `syz.1.796'.
[  161.971895][ T6553] batman_adv: batadv0: Adding interface: virt_wifi0
[  162.094812][ T6553] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.144831][ T6553] batman_adv: batadv0: Interface activated: virt_wifi0
[  162.211012][ T6539] IPv6: Can't replace route, no match found
[  162.330880][ T6554] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.786'.
[  162.387415][ T6554] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes.
[  162.531684][ T6554] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.786'.
[  162.767880][ T6560] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  162.787565][ T6556] netlink: 'syz.4.786': attribute type 21 has an invalid length.
[  162.915413][ T6554] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  163.307400][  T144] wlan1: Trigger new scan to find an IBSS to join
[  164.228645][ T6599] IPv6: Can't replace route, no match found
[  164.357537][ T6183] wlan1: Trigger new scan to find an IBSS to join
[  164.364444][ T6183] wlan1: Trigger new scan to find an IBSS to join
[  164.380818][ T6599] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  164.424111][ T6614] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.803'.
[  164.737319][ T6618] netlink: 'syz.4.805': attribute type 10 has an invalid length.
[  164.742642][ T6614] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes.
[  164.868439][ T6618] netlink: 168 bytes leftover after parsing attributes in process `syz.4.805'.
[  165.360730][ T1244] wlan1: Creating new IBSS network, BSSID 9e:16:16:bd:ed:48
[  165.725293][ T6645] netlink: 'syz.1.813': attribute type 29 has an invalid length.
[  165.845094][ T6645] netlink: 'syz.1.813': attribute type 29 has an invalid length.
[  165.943089][ T6646] netlink: 'syz.1.813': attribute type 29 has an invalid length.
[  165.953657][ T6645] netlink: 'syz.1.813': attribute type 29 has an invalid length.
[  166.421766][ T6632] IPv6: Can't replace route, no match found
[  166.573554][ T6632] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  167.059151][ T6670] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.819'.
[  167.192164][ T6670] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes.
[  167.397679][  T154] wlan1: Trigger new scan to find an IBSS to join
[  167.445630][ T6663] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.819'.
[  167.534792][  T144] wlan1: Creating new IBSS network, BSSID f6:2f:92:82:53:b1
[  167.817920][ T6676] device syzkaller0 entered promiscuous mode
[  168.069218][ T6669] netlink: 'syz.3.819': attribute type 21 has an invalid length.
[  168.111789][ T6663] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  168.182659][ T6681] IPv6: Can't replace route, no match found
[  168.347314][  T144] wlan1: Trigger new scan to find an IBSS to join
[  168.357157][ T1244] wlan1: Trigger new scan to find an IBSS to join
[  168.364247][ T6689] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  168.792894][ T6682] IPv6: Can't replace route, no match found
[  169.282862][ T6697] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  169.368303][ T6697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  169.468297][ T6700] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  169.808651][ T6715] netlink: 'syz.1.832': attribute type 10 has an invalid length.
[  170.359687][ T6183] wlan1: Creating new IBSS network, BSSID ba:fa:50:52:31:ee
[  170.367937][ T4320] wlan1: Trigger new scan to find an IBSS to join
[  170.535564][ T6715] team0: Device ipvlan1 failed to register rx_handler
[  170.719397][ T6716] netlink: 'syz.3.834': attribute type 39 has an invalid length.
[  170.755947][ T6716] device hsr_slave_1 left promiscuous mode
[  170.790260][ T6710] IPv6: Can't replace route, no match found
[  170.837744][ T6721] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  172.212445][ T6739] IPv6: Can't replace route, no match found
[  172.367139][  T144] wlan1: Trigger new scan to find an IBSS to join
[  172.393476][ T6739] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  172.492954][  T144] wlan1: Creating new IBSS network, BSSID 6a:80:53:0d:eb:f0
[  172.515904][ T6754] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.847'.
[  172.863092][ T6756] netlink: 'syz.2.848': attribute type 39 has an invalid length.
[  173.309985][ T1244] wlan1: Trigger new scan to find an IBSS to join
[  173.387368][  T154] wlan1: Trigger new scan to find an IBSS to join
[  173.691063][ T6756] device hsr_slave_1 left promiscuous mode
[  173.729925][ T6773] IPv6: Can't replace route, no match found
[  173.841259][ T6786] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  175.402711][ T1244] wlan1: Trigger new scan to find an IBSS to join
[  175.760892][ T6827] netlink: 'syz.0.870': attribute type 39 has an invalid length.
[  176.095554][ T6835] netlink: 'syz.1.875': attribute type 3 has an invalid length.
[  176.178551][ T6835] netlink: 118424 bytes leftover after parsing attributes in process `syz.1.875'.
[  176.196719][ T6827] device hsr_slave_1 left promiscuous mode
[  176.322687][ T6821] IPv6: Can't replace route, no match found
[  176.331896][ T6834] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  176.358721][ T6183] wlan1: Trigger new scan to find an IBSS to join
[  177.095916][ T6850] netlink: 'syz.0.881': attribute type 10 has an invalid length.
[  177.127211][ T6850] team0: Device ip6_vti0 is of different type
[  177.144911][ T6850] netlink: 132 bytes leftover after parsing attributes in process `syz.0.881'.
[  177.229546][ T6850] netlink: 'syz.0.881': attribute type 33 has an invalid length.
[  177.283590][ T6850] netlink: 152 bytes leftover after parsing attributes in process `syz.0.881'.
[  177.417084][ T1244] wlan1: Trigger new scan to find an IBSS to join
[  177.561044][  T144] wlan1: Creating new IBSS network, BSSID 52:61:50:87:cc:8d
[  177.893104][ T6865] netlink: 'syz.3.888': attribute type 10 has an invalid length.
[  177.923753][ T6865] netlink: 168 bytes leftover after parsing attributes in process `syz.3.888'.
[  178.000887][ T6854] IPv6: Can't replace route, no match found
[  178.086919][ T6873] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  178.366274][ T6183] wlan1: Trigger new scan to find an IBSS to join
[  180.347488][ T6183] wlan1: Trigger new scan to find an IBSS to join
[  180.348129][ T1244] wlan1: Trigger new scan to find an IBSS to join
[  180.964658][ T6913] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  181.006882][ T6913] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  181.310365][ T6920] IPv6: Can't replace route, no match found
[  181.350479][ T6920] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  182.357907][ T1244] wlan1: Creating new IBSS network, BSSID b6:94:9b:12:c7:4e
[  182.358301][  T154] wlan1: Trigger new scan to find an IBSS to join
[  182.591828][ T6974] netlink: 'syz.2.926': attribute type 2 has an invalid length.
[  183.041901][ T6973] IPv6: Can't replace route, no match found
[  183.125756][ T6973] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  183.400438][ T1244] wlan1: Trigger new scan to find an IBSS to join
[  183.513952][  T154] wlan1: Creating new IBSS network, BSSID 1e:95:3c:5f:d0:4c
[  183.806145][ T7009] netlink: 'syz.4.938': attribute type 10 has an invalid length.
[  183.908761][ T7009] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.938'.
[  183.957333][ T7009] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  184.868745][ T7041] IPv6: Can't replace route, no match found
[  184.914770][ T7041] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  184.992204][ T7050] netlink: 132 bytes leftover after parsing attributes in process `syz.2.953'.
[  185.100559][ T7058] netlink: 'syz.3.954': attribute type 10 has an invalid length.
[  185.142053][ T7058] netlink: 168 bytes leftover after parsing attributes in process `syz.3.954'.
[  185.307472][ T6183] wlan1: Trigger new scan to find an IBSS to join
[  185.314366][ T6183] wlan1: Trigger new scan to find an IBSS to join
[  185.358332][ T7061] IPv6: Can't replace route, no match found
[  185.419043][ T7061] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  186.736120][ T7115] IPv6: Can't replace route, no match found
[  186.854732][ T7123] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  187.091465][ T7131] IPv6: Can't replace route, no match found
[  187.134455][ T7131] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  187.233221][ T7136] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  187.285515][ T7136] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  187.397738][ T1244] wlan1: Trigger new scan to find an IBSS to join
[  187.713629][ T7155] netlink: 72 bytes leftover after parsing attributes in process `syz.4.983'.
[  187.744750][ T7155] netlink: 'syz.4.983': attribute type 10 has an invalid length.
[  187.764229][ T7155] netlink: 40 bytes leftover after parsing attributes in process `syz.4.983'.
[  187.846631][ T7155] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  187.875947][ T7155] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  187.907635][ T7155] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  187.930243][ T7155] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  188.313725][ T7170] IPv6: Can't replace route, no match found
[  188.514089][ T7179] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  188.655172][ T7182] IPv6: Can't replace route, no match found
[  188.770071][ T7182] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  189.060451][ T7191] netlink: 'syz.2.996': attribute type 10 has an invalid length.
[  189.139351][ T7191] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.190754][ T7191] device bridge_slave_1 left promiscuous mode
[  189.219713][ T7191] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.307601][ T4320] wlan1: Trigger new scan to find an IBSS to join
[  189.314457][  T155] wlan1: Trigger new scan to find an IBSS to join
[  189.334210][ T7191] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  189.609701][ T7221] netlink: 'syz.2.1006': attribute type 4 has an invalid length.
[  189.932881][ T7232] IPv6: Can't replace route, no match found
[  190.027578][ T7236] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  190.094186][ T7225] IPv6: Can't replace route, no match found
[  190.200174][ T7225] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  190.503403][ T7252] netlink: 'syz.0.1016': attribute type 3 has an invalid length.
[  190.546707][ T7252] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1016'.
[  191.309770][ T6183] wlan1: Trigger new scan to find an IBSS to join
[  191.387603][ T4320] wlan1: Trigger new scan to find an IBSS to join
[  191.455045][ T7280] netlink: 'syz.3.1032': attribute type 10 has an invalid length.
[  191.475187][ T7280] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1032'.
[  191.708985][   T21] Bluetooth: hci3: command 0x0406 tx timeout
[  191.709511][    T7] Bluetooth: hci0: command 0x0406 tx timeout
[  191.857885][    T7] Bluetooth: hci1: command 0x0406 tx timeout
[  191.865911][    T7] Bluetooth: hci4: command 0x0406 tx timeout
[  191.880650][ T7284] IPv6: Can't replace route, no match found
[  192.019873][    T7] Bluetooth: hci2: command 0x0406 tx timeout
[  192.114932][ T7284] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  192.273181][ T7290] netlink: 'syz.2.1033': attribute type 3 has an invalid length.
[  192.327668][ T7290] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1033'.
[  192.349550][ T1244] wlan1: Trigger new scan to find an IBSS to join
[  192.554898][ T1244] wlan1: Creating new IBSS network, BSSID f2:1f:7b:f5:63:e1
[  193.307311][ T6183] wlan1: Creating new IBSS network, BSSID 7e:96:0c:1c:12:b7
[  193.399919][ T6183] wlan1: Trigger new scan to find an IBSS to join
[  194.001377][ T7325] netlink: 'syz.3.1045': attribute type 2 has an invalid length.
[  194.080901][ T7331] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1048'.
[  194.348122][ T6183] wlan1: Trigger new scan to find an IBSS to join
[  194.419938][ T7336] netlink: 'syz.1.1050': attribute type 3 has an invalid length.
[  194.705886][ T7336] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1050'.
[  195.194611][ T1425] ieee802154 phy0 wpan0: encryption failed: -22
[  195.201641][ T1425] ieee802154 phy1 wpan1: encryption failed: -22
[  195.307643][ T1244] wlan1: Creating new IBSS network, BSSID 7a:a9:20:86:e0:db
[  196.225804][ T7344] IPv6: Can't replace route, no match found
[  196.410825][    T9] wlan1: Trigger new scan to find an IBSS to join
[  196.417997][ T7345] netlink: 'syz.0.1061': attribute type 2 has an invalid length.
[  196.547849][ T7344] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  197.272650][ T7350] IPv6: Can't replace route, no match found
[  197.514004][ T7350] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  198.404163][ T1244] wlan1: Trigger new scan to find an IBSS to join
[  199.254604][ T7394] netlink: 'syz.1.1068': attribute type 2 has an invalid length.
[  199.528211][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  199.659443][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  199.824814][ T7402] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  200.532615][ T7403] IPv6: Can't replace route, no match found
[  200.713148][ T4320] wlan1: Trigger new scan to find an IBSS to join
[  200.719986][  T155] wlan1: Trigger new scan to find an IBSS to join
[  200.758105][ T7403] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  200.969348][ T4320] wlan1: Creating new IBSS network, BSSID 12:0d:3c:f8:d5:51
[  201.397568][ T6183] wlan1: Trigger new scan to find an IBSS to join
[  202.504969][ T7436] netlink: 'syz.4.1083': attribute type 1 has an invalid length.
[  202.517230][ T7436] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.1083'.
[  202.958290][ T7421] IPv6: Can't replace route, no match found
[  203.101500][ T7443] delete_channel: no stack
[  203.195534][ T7421] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  203.307191][ T6183] wlan1: Trigger new scan to find an IBSS to join
[  204.162616][ T7459] IPv6: Can't replace route, no match found
[  204.196161][ T7464] netlink: 'syz.1.1103': attribute type 1 has an invalid length.
[  204.270693][ T7464] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.1103'.
[  204.303739][ T7459] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  204.456974][ T7464] delete_channel: no stack
[  205.307380][ T1244] wlan1: Trigger new scan to find an IBSS to join
[  206.348923][    T9] wlan1: Trigger new scan to find an IBSS to join
[  206.539490][ T7501] netlink: 'syz.2.1106': attribute type 16 has an invalid length.
[  206.737258][ T7501] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1106'.
[  206.818064][ T7501] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  207.210492][ T1244] wlan1: Created IBSS using preconfigured BSSID 00:00:ff:ff:00:00
[  207.240793][ T1244] wlan1: Creating new IBSS network, BSSID 00:00:ff:ff:00:00
[  207.521042][ T7514] netlink: 'syz.3.1109': attribute type 1 has an invalid length.
[  207.587054][ T7499] IPv6: Can't replace route, no match found
[  207.595769][ T7514] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.1109'.
[  207.770536][ T7499] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  208.783161][ T7531] IPv6: Can't replace route, no match found
[  208.868255][ T7531] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  210.177460][ T7580] netlink: 'syz.1.1134': attribute type 10 has an invalid length.
[  210.201659][ T7580] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1134'.
[  210.400946][ T4320] wlan1: Trigger new scan to find an IBSS to join
[  210.400966][    T9] wlan1: Trigger new scan to find an IBSS to join
[  210.811976][ T7585] IPv6: Can't replace route, no match found
[  210.898572][ T4320] wlan1: Created IBSS using preconfigured BSSID 00:00:ff:ff:00:00
[  210.906585][ T4320] wlan1: Creating new IBSS network, BSSID 00:00:ff:ff:00:00
[  210.939061][ T7585] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  211.193749][ T7600] IPv6: Can't replace route, no match found
[  211.308103][ T4320] wlan1: Trigger new scan to find an IBSS to join
[  211.350196][ T4320] wlan1: Creating new IBSS network, BSSID 1a:c0:a9:69:d1:49
[  211.388046][ T6183] wlan1: Trigger new scan to find an IBSS to join
[  211.413106][ T7612] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  211.422566][ T4320] ------------[ cut here ]------------
[  211.458310][ T4320] WARNING: CPU: 0 PID: 4320 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x428/0x4b0
[  211.601697][ T4320] Modules linked in:
[  211.611331][ T4320] CPU: 1 PID: 4320 Comm: kworker/u4:6 Not tainted syzkaller #0
[  211.721399][ T4320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  211.791104][ T4320] Workqueue: cfg80211 cfg80211_event_work
[  211.810338][ T4320] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0
[  211.817934][ T4320] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c1 2b 44 f8 0f 0b eb bb e8 b8 2b 44 f8 <0f> 0b eb b2 e8 af 2b 44 f8 0f 0b e9 77 fd ff ff e8 a3 2b 44 f8 0f
[  211.843348][ T4320] RSP: 0018:ffffc9000354faa0 EFLAGS: 00010293
[  211.850107][ T4320] RAX: ffffffff8934f3e8 RBX: dffffc0000000000 RCX: ffff888023311dc0
[  211.858697][ T4320] RDX: 0000000000000000 RSI: ffffffff8a2b2780 RDI: ffffffff8a79f780
[  211.867464][ T4320] RBP: ffffc9000354fb70 R08: ffffffff901d112f R09: 1ffffffff203a225
[  211.876096][ T4320] R10: dffffc0000000000 R11: fffffbfff203a226 R12: ffff8880790a3590
[  211.884636][ T4320] R13: 1ffff920006a9f5c R14: 000000000000001f R15: ffff88805fd60c90
[  211.893334][ T4320] FS:  0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  211.914318][ T4320] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  211.921562][ T4320] CR2: 00007faf3257c600 CR3: 0000000079736000 CR4: 00000000003506f0
[  211.934250][ T4320] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  211.944255][ T4320] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  211.962874][ T4320] Call Trace:
[  211.966656][ T4320]  <TASK>
[  211.971304][ T4320]  ? trace_rdev_return_void+0x1c0/0x1c0
[  211.977555][ T4320]  ? cfg80211_event_work+0x23/0x40
[  211.982823][ T4320]  cfg80211_process_wdev_events+0x3ad/0x4f0
[  211.989373][ T4320]  cfg80211_process_rdev_events+0x9d/0x110
[  211.995919][ T4320]  cfg80211_event_work+0x2b/0x40
[  212.001360][ T4320]  process_one_work+0x85f/0x1010
[  212.006754][ T4320]  ? worker_detach_from_pool+0x240/0x240
[  212.012933][ T4320]  ? lockdep_hardirqs_off+0x70/0x100
[  212.018804][ T4320]  ? _raw_spin_lock_irq+0xb7/0xf0
[  212.024529][ T4320]  ? _raw_spin_lock_irqsave+0x100/0x100
[  212.030700][ T4320]  ? wq_worker_running+0x97/0x170
[  212.036240][ T4320]  worker_thread+0xaa6/0x1290
[  212.041258][ T4320]  ? lockdep_hardirqs_on+0x94/0x140
[  212.047118][ T4320]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  212.053607][ T4320]  kthread+0x436/0x520
[  212.058046][ T4320]  ? rcu_lock_release+0x20/0x20
[  212.063041][ T4320]  ? kthread_blkcg+0xd0/0xd0
[  212.069986][ T4320]  ret_from_fork+0x1f/0x30
[  212.074641][ T4320]  </TASK>
[  212.078057][ T4320] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  212.085978][ T4320] CPU: 0 PID: 4320 Comm: kworker/u4:6 Not tainted syzkaller #0
[  212.094610][ T4320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  212.105736][ T4320] Workqueue: cfg80211 cfg80211_event_work
[  212.112221][ T4320] Call Trace:
[  212.115610][ T4320]  <TASK>
[  212.118673][ T4320]  dump_stack_lvl+0x188/0x250
[  212.123597][ T4320]  ? show_regs_print_info+0x20/0x20
[  212.129016][ T4320]  ? load_image+0x400/0x400
[  212.133923][ T4320]  panic+0x2e5/0x810
[  212.138401][ T4320]  ? bpf_jit_dump+0xd0/0xd0
[  212.143227][ T4320]  ? ret_from_fork+0x1f/0x30
[  212.147933][ T4320]  ? __cfg80211_ibss_joined+0x428/0x4b0
[  212.153853][ T4320]  __warn+0x248/0x2b0
[  212.158045][ T4320]  ? __cfg80211_ibss_joined+0x428/0x4b0
[  212.163975][ T4320]  report_bug+0x1b7/0x2e0
[  212.168461][ T4320]  handle_bug+0x3a/0x70
[  212.172722][ T4320]  exc_invalid_op+0x16/0x40
[  212.177335][ T4320]  asm_exc_invalid_op+0x16/0x20
[  212.182290][ T4320] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0
[  212.188604][ T4320] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c1 2b 44 f8 0f 0b eb bb e8 b8 2b 44 f8 <0f> 0b eb b2 e8 af 2b 44 f8 0f 0b e9 77 fd ff ff e8 a3 2b 44 f8 0f
[  212.209577][ T4320] RSP: 0018:ffffc9000354faa0 EFLAGS: 00010293
[  212.216413][ T4320] RAX: ffffffff8934f3e8 RBX: dffffc0000000000 RCX: ffff888023311dc0
[  212.224964][ T4320] RDX: 0000000000000000 RSI: ffffffff8a2b2780 RDI: ffffffff8a79f780
[  212.233152][ T4320] RBP: ffffc9000354fb70 R08: ffffffff901d112f R09: 1ffffffff203a225
[  212.241144][ T4320] R10: dffffc0000000000 R11: fffffbfff203a226 R12: ffff8880790a3590
[  212.249543][ T4320] R13: 1ffff920006a9f5c R14: 000000000000001f R15: ffff88805fd60c90
[  212.257804][ T4320]  ? __cfg80211_ibss_joined+0x428/0x4b0
[  212.263421][ T4320]  ? trace_rdev_return_void+0x1c0/0x1c0
[  212.269580][ T4320]  ? cfg80211_event_work+0x23/0x40
[  212.274943][ T4320]  cfg80211_process_wdev_events+0x3ad/0x4f0
[  212.280873][ T4320]  cfg80211_process_rdev_events+0x9d/0x110
[  212.286715][ T4320]  cfg80211_event_work+0x2b/0x40
[  212.292574][ T4320]  process_one_work+0x85f/0x1010
[  212.297937][ T4320]  ? worker_detach_from_pool+0x240/0x240
[  212.303979][ T4320]  ? lockdep_hardirqs_off+0x70/0x100
[  212.309773][ T4320]  ? _raw_spin_lock_irq+0xb7/0xf0
[  212.315279][ T4320]  ? _raw_spin_lock_irqsave+0x100/0x100
[  212.320903][ T4320]  ? wq_worker_running+0x97/0x170
[  212.326319][ T4320]  worker_thread+0xaa6/0x1290
[  212.331482][ T4320]  ? lockdep_hardirqs_on+0x94/0x140
[  212.336914][ T4320]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  212.343226][ T4320]  kthread+0x436/0x520
[  212.347487][ T4320]  ? rcu_lock_release+0x20/0x20
[  212.352607][ T4320]  ? kthread_blkcg+0xd0/0xd0
[  212.357645][ T4320]  ret_from_fork+0x1f/0x30
[  212.362394][ T4320]  </TASK>
[  212.366196][ T4320] Kernel Offset: disabled
[  212.370734][ T4320] Rebooting in 86400 seconds..