last executing test programs:

49.624561206s ago: executing program 2 (id=3711):
r0 = socket$kcm(0x10, 0x2, 0x4)
close(r0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000640)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a7052520957086ce998f701e6182949a3651f60a84c9f4d49380e78ff6a1577ae18ca09945", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000004)
recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r1, &(0x7f0000000900)={0x0, 0xffffff84, 0x0}, 0x0)
recvmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r0, 0x0, 0x40)

49.2089096s ago: executing program 2 (id=3715):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x5, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8, 0x1}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r1, 0x2}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x11, 0x5, &(0x7f00000000c0)=@framed={{0x2e, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@map_fd={0x18, 0x0, 0x1, 0x0, r2}]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r3}, 0x10)
syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0)

48.764079786s ago: executing program 2 (id=3719):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)="a836", 0x2}], 0x1}, 0x4040001)
recvmsg$unix(r1, &(0x7f00000038c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4e}, 0x1)
recvmsg$unix(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)=""/109, 0xffffffe6}], 0x1}, 0x0)

48.465599763s ago: executing program 2 (id=3724):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0400000009000000020000000100000020900000", @ANYRES32, @ANYBLOB="feffffff00"/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000020000000100"/20, @ANYRES32, @ANYBLOB="f765149dab790a50f9423200420830b5a9f4c9254863e73d88e71e041c89994583656b4aa4abbd3a3574a708be3b5237edf54f24975ee41d6e6571e6e21e827f5ff327ec596c474bb3af"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, 0x0, &(0x7f0000000000)=""/8, 0x2}, 0x20)
openat$cgroup_int(r2, &(0x7f00000000c0)='hugetlb.2MB.failcnt\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='cpu<=0||!')
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x90)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000bd0000000003000000850000002700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x18, 0x0, &(0x7f0000000380)="e0bcd7c6a00e0588cd5e47b8bffc8e670f78f1f5b3aac3eb", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640))
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000007, 0x4, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)

48.023212969s ago: executing program 2 (id=3726):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r0}, 0x18)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r1)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67db3e6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b19abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f0000000000f8e10238d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x8c0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, 0x2a}, 0x94)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x2000)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000900)}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="b9fb0307683a0600000000378100", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)

47.224971105s ago: executing program 2 (id=3731):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES8=0x0], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x160e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x45070, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x2008, 0xc8, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0xfffffffffffffffe}, 0x0, 0x8, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200052f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000022eb"], 0xcfa4)
ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f00000004c0)=ANY=[])
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0xfffffffffffffffc, 0x0, 0x0, 0x7, 0x39b8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0xd0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000380), 0x12)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x4000c0fe, 0x0, 0x0, 0x0, 0x0, 0x0)

31.997486084s ago: executing program 32 (id=3731):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES8=0x0], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x160e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x45070, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x2008, 0xc8, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0xfffffffffffffffe}, 0x0, 0x8, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200052f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000022eb"], 0xcfa4)
ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f00000004c0)=ANY=[])
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0xfffffffffffffffc, 0x0, 0x0, 0x7, 0x39b8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0xd0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000380), 0x12)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x4000c0fe, 0x0, 0x0, 0x0, 0x0, 0x0)

19.439956168s ago: executing program 1 (id=3843):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)

19.217117701s ago: executing program 1 (id=3844):
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0xffffffffffffffff)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYRES8=0x0], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101})
close(r3)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0xe8001, 0x0)

18.070559107s ago: executing program 1 (id=3851):
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="02000000040000000800000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x778}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e)

17.963119344s ago: executing program 1 (id=3853):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000040)=""/73}, 0x20)

17.783834854s ago: executing program 1 (id=3856):
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
close(r0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={<r2=>0x0, <r3=>0x0})
close(r2)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r6}, 0x10)
close(r1)

17.518401399s ago: executing program 1 (id=3858):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
close(r0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073015f00000000009500000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={<r2=>0x0, <r3=>0x0})
close(r2)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000300)='target_sequencer_start\x00', 0xffffffffffffffff, 0x0, 0x400}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4], 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000001580)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000002000000010000000100000d"], &(0x7f0000000680)=""/182, 0x2e, 0xb6, 0x1}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
socketpair(0x1d, 0x2, 0x2, &(0x7f0000000280))
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r7=>0x0, 0x0})
close(r7)
close(r1)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f00000002c0), 0x20000000}, 0x20)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0xffffffffffffffbc, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
socketpair(0x1, 0x2, 0x6, &(0x7f00000002c0))
syz_clone(0x410e6080, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)="2fd0ff0006094f492faff2f173e1ac871d48eef87bb90a19da77ed4bb5ae2e86f7b0cf112203043f022f05c93af58dc47d13e4ed9d9426f7db4e53422cbc58b6b2e48d2a7570b19a5bdcded6dfa976c4bce46e30294d29a8f2bbfa35a756c52f5861fc73de3cd1c8f287a49685e7518b86f45801c10da574d850fd5c2ad8f247931b3c139b7fa61e4af791a289f6f3f4e63a92f6a1f5")

5.882118461s ago: executing program 3 (id=3878):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="04000000090000000200", @ANYRES32, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000020000000100"/20, @ANYRES32, @ANYBLOB="f765149dab790a50f9423200420830b5a9f4c9254863e73d88e71e041c89994583656b4aa4abbd3a3574a708be3b5237edf54f24975ee41d6e6571e6e21e827f5ff327ec596c474bb3af"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, 0x0, &(0x7f0000000000)=""/8, 0x2}, 0x20)
openat$cgroup_int(r2, &(0x7f00000000c0)='hugetlb.2MB.failcnt\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='cpu<=0||!')
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x90)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000bd0000000003000000850000002700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x18, 0x0, &(0x7f0000000380)="e0bcd7c6a00e0588cd5e47b8bffc8e670f78f1f5b3aac3eb", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640))
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000007, 0x4, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)

5.783372056s ago: executing program 0 (id=3879):
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x2, @perf_config_ext={0xfffffffffffffffe}, 0x4, 0xc8, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x10040)
write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100036c00fe08fff500000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)

5.302152204s ago: executing program 0 (id=3880):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r1}, 0x18)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r2)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(r2, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67db3e6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b19abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f0000000000f8e10238d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x8c0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, 0x2a}, 0x94)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x2000)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000900)}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="b9fb0307683a0600000000378100", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)

5.114591555s ago: executing program 3 (id=3881):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400})

5.099614616s ago: executing program 4 (id=3778):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="055b2856a4"], 0x48)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r3, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], 0x0, 0xe9, &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x73, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_ext={0x1c, 0x12, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf82c}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @alu={0x4, 0x1, 0x2, 0x8, 0x6, 0x1c, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x7, 0xe0, &(0x7f0000000640)=""/224, 0x40f00, 0x2, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000a40)={0x2, 0xe, 0x2}, 0x10, 0xe775, r3, 0x1, 0x0, &(0x7f0000000a80)=[{0x2, 0x4, 0x8, 0xa}], 0x10, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, <r6=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48)
setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
close(0xffffffffffffffff)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
socketpair(0x4, 0xa, 0x9, &(0x7f00000002c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x8, [@var={0x6, 0x0, 0x0, 0xe, 0x3}, @func={0x5, 0x0, 0x0, 0xc, 0x3}, @const={0x4, 0x0, 0x0, 0xa, 0x2}, @float={0x3, 0x0, 0x0, 0x10, 0x8}, @typedef={0x10, 0x0, 0x0, 0x8, 0x4}, @fwd={0xb}, @fwd={0xd}]}, {0x0, [0x30, 0x30, 0x61, 0x2e, 0x0, 0x5f]}}, &(0x7f0000000d00)=""/144, 0x78, 0x90, 0x1, 0x3}, 0x28)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000dc0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5, r7, 0x2, 0x4}, 0x50)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0xff, 0x78e3, 0x4112, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3, 0xf}, 0x50)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0)

4.139523251s ago: executing program 0 (id=3882):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x8982, 0x20000000)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000300)='rose0\x00')
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147}, 0x80)

3.999373269s ago: executing program 3 (id=3883):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7"], 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0}, 0x94)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2}, 0x10)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8)
write$cgroup_int(r4, &(0x7f00000001c0), 0xfffffdef)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000300)="81bddce743f92530bc71a5a0e24eb69b8d2dcc9fa51369478ef73056e19b880a479cfd4cad6fa8cf817d3c572e4dc21a4b1b91235f49b4fa26dbe193ae7fb33fbfa54177eba0a43e3bf9b976bfe543c0c800e05f1c772ad8ec701875e4850d0f73796f8c5bc6daa6a0f0d5d2b42770cfed7e3638f2ff190b6ef2f224a000bc9032cfd044c56160c064f4393ec671e2ece397d30f6c0aa29f5f3526341cdf27ab8c55e2e07c59b8a70c25f8fff6a56aff3d06952b121c2ff8c5947c326d390f1f1e0271d925e1c7b55f64acf58c8a7c13168bd6ee3f3fd2c86441489e0f4d", 0xde}], 0x2}, 0x24048051)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
recvmsg$unix(r7, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x2000)

2.385061093s ago: executing program 33 (id=3858):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
close(r0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073015f00000000009500000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={<r2=>0x0, <r3=>0x0})
close(r2)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000300)='target_sequencer_start\x00', 0xffffffffffffffff, 0x0, 0x400}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4], 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000001580)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000002000000010000000100000d"], &(0x7f0000000680)=""/182, 0x2e, 0xb6, 0x1}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
socketpair(0x1d, 0x2, 0x2, &(0x7f0000000280))
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r7=>0x0, 0x0})
close(r7)
close(r1)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f00000002c0), 0x20000000}, 0x20)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0xffffffffffffffbc, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
socketpair(0x1, 0x2, 0x6, &(0x7f00000002c0))
syz_clone(0x410e6080, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)="2fd0ff0006094f492faff2f173e1ac871d48eef87bb90a19da77ed4bb5ae2e86f7b0cf112203043f022f05c93af58dc47d13e4ed9d9426f7db4e53422cbc58b6b2e48d2a7570b19a5bdcded6dfa976c4bce46e30294d29a8f2bbfa35a756c52f5861fc73de3cd1c8f287a49685e7518b86f45801c10da574d850fd5c2ad8f247931b3c139b7fa61e4af791a289f6f3f4e63a92f6a1f5")

1.995922445s ago: executing program 0 (id=3885):
perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0x0, 0xcb, 0x0, 0x7, 0x304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0x0, 0x6e}, 0x10000, 0xc8, 0xfff, 0x0, 0xfffffffffffffffd, 0x0, 0x400}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r4}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
write$cgroup_subtree(r2, &(0x7f0000000000), 0xffc0)

1.993283455s ago: executing program 3 (id=3886):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000000000000", @ANYRES32, @ANYBLOB="feffffff00000000000000000000f9b371ff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0xe99, 0x0, 0x0, 0x0, 0xd56, 0x80}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000001100)={0x0, &(0x7f0000001180)=""/127, &(0x7f0000001200), &(0x7f0000000580), 0x6e, r0}, 0x38)

1.519348013s ago: executing program 3 (id=3887):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x862a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x144a8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_pid(r0, &(0x7f0000000980), 0x20000992)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10)

1.517943863s ago: executing program 0 (id=3894):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7"], 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0}, 0x94)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2}, 0x10)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8)
write$cgroup_int(r4, &(0x7f00000001c0), 0xfffffdef)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000300)="81bddce743f92530bc71a5a0e24eb69b8d2dcc9fa51369478ef73056e19b880a479cfd4cad6fa8cf817d3c572e4dc21a4b1b91235f49b4fa26dbe193ae7fb33fbfa54177eba0a43e3bf9b976bfe543c0c800e05f1c772ad8ec701875e4850d0f73796f8c5bc6daa6a0f0d5d2b42770cfed7e3638f2ff190b6ef2f224a000bc9032cfd044c56160c064f4393ec671e2ece397d30f6c0aa29f5f3526341cdf27ab8c55e2e07c59b8a70c25f8fff6a56aff3d06952b121c2ff8c5947c326d390f1f1e0271d925e1c7b55f64acf58c8a7c13168bd6ee3f3fd2c86441489e0f4d", 0xde}], 0x2}, 0x24048051)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
recvmsg$unix(r7, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x2000)

1.307307635s ago: executing program 4 (id=3888):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="04000000090000000200", @ANYRES32, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000020000000100"/20, @ANYRES32, @ANYBLOB="f765149dab790a50f9423200420830b5a9f4c9254863e73d88e71e041c89994583656b4aa4abbd3a3574a708be3b5237edf54f24975ee41d6e6571e6e21e827f5ff327ec596c474bb3af"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, 0x0, &(0x7f0000000000)=""/8, 0x2}, 0x20)
openat$cgroup_int(r2, &(0x7f00000000c0)='hugetlb.2MB.failcnt\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='cpu<=0||!')
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x90)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000bd0000000003000000850000002700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x18, 0x0, &(0x7f0000000380)="e0bcd7c6a00e0588cd5e47b8bffc8e670f78f1f5b3aac3eb", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640))
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000007, 0x4, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)

228.850087ms ago: executing program 0 (id=3889):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x7, &(0x7f0000001680)=ANY=[@ANYBLOB="a5b520000800000085000000b9000000b5733000f0ffffff4d7b1800f0ffffff184c000002000000000000000000000085000000c6000000125c4f0c306f37bd334dca75cbe7b7e6c2ffb9eb8218196d76c26fe96e3978620c07b99958643de8d610f37126b64604c534a13ca63576eccd6bb6a673c8f69a599f56693eab86d936d328b4b7389541e43d0e9340e6b06138b7491542ce2ad491e84364d25f803f2401a87d4ed1532de0"], &(0x7f0000000300)='GPL\x00', 0x1e5c, 0x3a, &(0x7f0000000340)=""/58, 0x0, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000004c0)=[r0, r0, r0, r0], &(0x7f0000000500)=[{0x3, 0x1, 0xb, 0x1}, {0x2, 0x3, 0x2, 0x4}, {0x1, 0x2, 0xc, 0xb}, {0x5, 0x3, 0xf, 0x1}, {0x5, 0x4}, {0x4, 0x4, 0x6, 0x4}, {0x0, 0x1, 0xd, 0x6}, {0x5, 0x3, 0xa, 0x3}, {0x0, 0x3, 0x5, 0x5}], 0x10, 0x80}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='(pu&\"&\t&&')
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'sit0\x00', @remote})
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"})
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000001500)=ANY=[@ANYBLOB="1800000000070000", @ANYRES16=r1, @ANYBLOB="05d9daee430b1d4ab3e2afa5d9bc374a29d90f46a50e8779aed741454198404c5a41f88f61b0c543a1de304da512907d28bc5a7830266bd6d431", @ANYBLOB], 0x0, 0x4, 0x9a, &(0x7f00000013c0)=""/154, 0x41100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0, 0x8}, 0x10000, 0xc8, 0xfff, 0x0, 0x0, 0x0, 0x400}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x15)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})

35.621498ms ago: executing program 3 (id=3890):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xffffffffffffff0f, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940))

0s ago: executing program 4 (id=3891):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000001811", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r1}, 0x18)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r2)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(r2, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x8c0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, 0x2a}, 0x94)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x2000)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000900)}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="b9fb0307683a0600000000378100", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)

kernel console output (not intermixed with test programs):

fter parsing attributes in process `syz.2.1528'.
[  232.424643][T10101] netlink: 'syz.2.1528': attribute type 29 has an invalid length.
[  232.449670][T10101] netlink: 'syz.2.1528': attribute type 29 has an invalid length.
[  232.466900][T10105] netlink: 'syz.2.1528': attribute type 29 has an invalid length.
[  233.487774][T10133] __nla_validate_parse: 1 callbacks suppressed
[  233.487794][T10133] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1539'.
[  233.499785][T10137] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1541'.
[  234.559114][T10174] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1554'.
[  234.661156][T10177] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1555'.
[  235.035171][T10190] validate_nla: 1 callbacks suppressed
[  235.035188][T10190] netlink: 'syz.2.1557': attribute type 10 has an invalid length.
[  235.076323][T10190] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1557'.
[  235.096095][T10190] ipvlan1: entered promiscuous mode
[  235.101407][T10190] ipvlan1: entered allmulticast mode
[  235.119758][T10190] bridge0: port 3(ipvlan1) entered blocking state
[  235.130750][T10190] bridge0: port 3(ipvlan1) entered disabled state
[  235.140875][T10190] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  235.187217][T10192] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1560'.
[  235.504252][T10207] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1567'.
[  235.963071][T10225] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1573'.
[  236.072635][T10229] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1575'.
[  236.184104][T10233] netlink: 'syz.3.1577': attribute type 2 has an invalid length.
[  236.192868][T10233] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1577'.
[  236.680331][T10253] netlink: 'syz.1.1585': attribute type 10 has an invalid length.
[  236.700264][T10253] bridge0: port 3(ipvlan1) entered blocking state
[  236.725718][T10253] bridge0: port 3(ipvlan1) entered disabled state
[  236.758090][T10253] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  237.196410][T10272] netlink: 'syz.2.1592': attribute type 10 has an invalid length.
[  237.593730][T10287] netlink: 'syz.2.1598': attribute type 10 has an invalid length.
[  237.603627][T10287] bridge0: port 3(ipvlan1) entered blocking state
[  237.610438][T10287] bridge0: port 3(ipvlan1) entered disabled state
[  237.621037][T10287] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  237.968629][T10295] netlink: 'syz.3.1602': attribute type 10 has an invalid length.
[  237.985280][T10295] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  238.073525][T10299] netlink: 'syz.2.1604': attribute type 10 has an invalid length.
[  238.568116][T10312] netlink: 'syz.2.1608': attribute type 2 has an invalid length.
[  238.585979][T10312] __nla_validate_parse: 7 callbacks suppressed
[  238.586015][T10312] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1608'.
[  238.871328][T10326] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1614'.
[  239.428587][T10336] netlink: 'syz.2.1618': attribute type 10 has an invalid length.
[  239.439494][T10336] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  240.212616][T10353] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1625'.
[  240.373265][T10355] netlink: 'syz.0.1624': attribute type 10 has an invalid length.
[  240.393456][T10355] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1624'.
[  240.431428][T10355] ipvlan1: entered promiscuous mode
[  240.440197][T10355] ipvlan1: entered allmulticast mode
[  240.497870][T10355] bridge0: port 3(ipvlan1) entered blocking state
[  240.506362][T10355] bridge0: port 3(ipvlan1) entered disabled state
[  240.522203][T10355] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  240.567995][T10357] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  240.596355][T10355] syz.0.1624 (10355) used greatest stack depth: 19368 bytes left
[  240.733682][T10367] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1630'.
[  240.759884][T10365] netlink: 'syz.1.1629': attribute type 10 has an invalid length.
[  240.770942][T10365] vlan0: entered allmulticast mode
[  240.904427][T10369] netlink: 'syz.3.1632': attribute type 10 has an invalid length.
[  240.920041][T10369] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  241.518268][T10389] netlink: 'syz.0.1637': attribute type 10 has an invalid length.
[  241.528636][T10389] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1637'.
[  241.554192][T10389] bridge0: port 3(ipvlan1) entered blocking state
[  241.568028][T10389] bridge0: port 3(ipvlan1) entered disabled state
[  241.657558][T10389] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  241.737797][T10395] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1639'.
[  241.842491][T10399] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1641'.
[  242.377415][T10422] netlink: 'syz.3.1648': attribute type 10 has an invalid length.
[  242.386335][T10422] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  242.488776][T10424] netlink: 'syz.1.1649': attribute type 10 has an invalid length.
[  242.826857][T10431] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1652'.
[  242.925340][T10429] netlink: 'syz.1.1651': attribute type 10 has an invalid length.
[  242.934123][T10429] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1651'.
[  243.018965][T10429] bridge0: port 3(ipvlan1) entered blocking state
[  243.047042][T10429] bridge0: port 3(ipvlan1) entered disabled state
[  243.147301][T10429] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  243.614578][T10459] __nla_validate_parse: 1 callbacks suppressed
[  243.614591][T10459] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1660'.
[  243.647788][T10459] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1660'.
[  243.666849][T10460] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1660'.
[  244.258536][T10480] netlink: 'syz.1.1669': attribute type 10 has an invalid length.
[  244.281912][T10480] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1669'.
[  244.317785][T10480] bridge0: port 3(ipvlan1) entered blocking state
[  244.327704][T10480] bridge0: port 3(ipvlan1) entered disabled state
[  244.361672][T10480] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  244.392927][T10487] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1671'.
[  245.135945][T10513] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1681'.
[  245.509400][T10527] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  245.568818][T10529] netlink: 'syz.2.1689': attribute type 10 has an invalid length.
[  245.585510][T10529] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  245.780196][T10537] netlink: 'syz.1.1693': attribute type 2 has an invalid length.
[  245.809317][T10537] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1693'.
[  246.130889][T10547] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1695'.
[  246.149586][T10545] netlink: 'syz.3.1694': attribute type 10 has an invalid length.
[  246.166726][T10545] vlan0: entered allmulticast mode
[  247.437407][T10597] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1716'.
[  247.448443][T10597] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  247.518037][T10600] netlink: 'syz.2.1717': attribute type 10 has an invalid length.
[  247.526744][T10600] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1717'.
[  247.537831][T10600] bridge0: port 3(ipvlan1) entered blocking state
[  247.546931][T10600] bridge0: port 3(ipvlan1) entered disabled state
[  247.571651][T10600] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  248.180287][T10620] netlink: 'syz.1.1727': attribute type 21 has an invalid length.
[  248.644236][T10631] hsr0: entered promiscuous mode
[  248.652358][T10631] hsr0: entered allmulticast mode
[  248.671925][T10631] hsr_slave_0: entered allmulticast mode
[  248.679769][T10631] hsr_slave_1: entered allmulticast mode
[  248.976918][T10636] netlink: 'syz.2.1732': attribute type 10 has an invalid length.
[  248.995823][T10636] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1732'.
[  249.008639][T10636] bridge0: port 3(ipvlan1) entered blocking state
[  249.016214][T10636] bridge0: port 3(ipvlan1) entered disabled state
[  249.035621][T10636] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  249.478380][T10666] netlink: 'syz.2.1744': attribute type 2 has an invalid length.
[  249.495174][T10666] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1744'.
[  249.751076][T10671] netlink: 'syz.3.1745': attribute type 10 has an invalid length.
[  249.763702][T10671] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1745'.
[  249.791658][T10671] bridge0: port 4(ipvlan1) entered blocking state
[  249.802332][T10671] bridge0: port 4(ipvlan1) entered disabled state
[  250.072549][T10671] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  250.384646][T10691] netlink: 'syz.3.1755': attribute type 2 has an invalid length.
[  250.429609][T10691] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1755'.
[  250.480520][T10685] hsr0: entered promiscuous mode
[  250.507763][T10685] hsr0: entered allmulticast mode
[  250.524219][T10685] hsr_slave_0: entered allmulticast mode
[  250.533690][T10685] hsr_slave_1: entered allmulticast mode
[  250.614522][T10695] netlink: 'syz.0.1753': attribute type 10 has an invalid length.
[  250.638900][T10695] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1753'.
[  250.653416][T10695] bridge0: port 3(ipvlan1) entered blocking state
[  250.690029][T10695] bridge0: port 3(ipvlan1) entered disabled state
[  250.725959][T10695] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  251.140864][T10710] netlink: 'syz.2.1763': attribute type 10 has an invalid length.
[  251.154360][T10710] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1763'.
[  251.170867][T10710] bridge0: port 3(ipvlan1) entered blocking state
[  251.182882][T10710] bridge0: port 3(ipvlan1) entered disabled state
[  251.261547][T10710] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  251.466928][T10721] netlink: 'syz.0.1767': attribute type 2 has an invalid length.
[  251.484125][T10721] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1767'.
[  252.027615][T10744] netlink: 'syz.2.1778': attribute type 10 has an invalid length.
[  252.037135][T10744] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1778'.
[  252.049611][T10744] bridge0: port 3(ipvlan1) entered blocking state
[  252.069420][T10744] bridge0: port 3(ipvlan1) entered disabled state
[  252.179051][T10744] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  252.197560][T10746] netlink: 'syz.3.1779': attribute type 2 has an invalid length.
[  252.221766][T10746] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1779'.
[  252.835330][T10775] netlink: 'syz.3.1793': attribute type 2 has an invalid length.
[  252.843809][T10775] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1793'.
[  252.857529][T10772] netlink: 'syz.0.1791': attribute type 10 has an invalid length.
[  252.866430][T10772] bridge0: port 3(ipvlan1) entered blocking state
[  252.873250][T10772] bridge0: port 3(ipvlan1) entered disabled state
[  252.887852][T10772] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  253.740342][T10805] -1: renamed from syzkaller0
[  254.746776][T10848] -1: renamed from syzkaller0
[  255.603319][T10881] -1: renamed from syzkaller0
[  256.029968][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  256.036568][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  256.409852][T10904] netlink: 'syz.0.1849': attribute type 10 has an invalid length.
[  256.422564][T10904] __nla_validate_parse: 1 callbacks suppressed
[  256.422596][T10904] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1849'.
[  256.477384][T10904] bridge0: port 3(ipvlan1) entered blocking state
[  256.501532][T10904] bridge0: port 3(ipvlan1) entered disabled state
[  256.564864][T10904] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  256.845641][T10923] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1856'.
[  256.864719][T10923] bond_slave_0: entered promiscuous mode
[  256.870659][T10923] bond_slave_1: entered promiscuous mode
[  257.404096][T10942] netlink: 'syz.2.1864': attribute type 10 has an invalid length.
[  257.413070][T10942] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1864'.
[  257.426343][T10942] bridge0: port 3(ipvlan1) entered blocking state
[  257.433177][T10942] bridge0: port 3(ipvlan1) entered disabled state
[  257.451996][T10942] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  258.172465][T10965] netlink: 'syz.2.1871': attribute type 10 has an invalid length.
[  258.184333][T10965] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1871'.
[  258.200935][T10965] bridge0: port 3(ipvlan1) entered blocking state
[  258.211134][T10965] bridge0: port 3(ipvlan1) entered disabled state
[  258.293850][T10965] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  258.588597][T10982] netlink: 'syz.0.1877': attribute type 10 has an invalid length.
[  258.598729][T10982] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  258.974900][T10989] netlink: 'syz.2.1880': attribute type 2 has an invalid length.
[  258.985245][T10989] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1880'.
[  259.323450][T11001] syzkaller0: entered promiscuous mode
[  259.332860][T11001] syzkaller0: entered allmulticast mode
[  259.343591][T10999] netlink: 'syz.1.1885': attribute type 10 has an invalid length.
[  259.353801][T10999] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1885'.
[  259.378445][T10999] bridge0: port 3(ipvlan1) entered blocking state
[  259.398481][T10999] bridge0: port 3(ipvlan1) entered disabled state
[  259.529577][T10999] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  261.404666][T11017] netlink: 'syz.1.1889': attribute type 10 has an invalid length.
[  261.412919][T11017] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  261.921084][T11047] netlink: 'syz.0.1901': attribute type 2 has an invalid length.
[  261.935484][T11047] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1901'.
[  262.449936][T11069] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1910'.
[  262.564748][T11073] netlink: 'syz.2.1912': attribute type 2 has an invalid length.
[  262.573534][T11073] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1912'.
[  263.144630][T11097] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1921'.
[  263.256336][T11100] netlink: 'syz.1.1922': attribute type 10 has an invalid length.
[  263.264247][T11100] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  263.503392][T11104] netlink: 'syz.0.1924': attribute type 10 has an invalid length.
[  263.519568][T11104] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1924'.
[  263.572285][T11104] bridge0: port 3(ipvlan1) entered blocking state
[  263.581909][T11104] bridge0: port 3(ipvlan1) entered disabled state
[  263.675304][T11104] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  264.042838][T11125] netlink: 'syz.1.1931': attribute type 1 has an invalid length.
[  264.061145][T11126] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1932'.
[  264.072482][T11125] netlink: 'syz.1.1931': attribute type 3 has an invalid length.
[  264.090811][T11125] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1931'.
[  264.175418][T11130] netlink: 'syz.3.1934': attribute type 10 has an invalid length.
[  264.183336][T11130] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  264.387748][T11135] netlink: 'syz.0.1935': attribute type 10 has an invalid length.
[  264.405658][T11135] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1935'.
[  264.423623][T11135] bridge0: port 3(ipvlan1) entered blocking state
[  264.437427][T11135] bridge0: port 3(ipvlan1) entered disabled state
[  264.451272][T11135] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  264.686958][T11143] netlink: 'syz.0.1938': attribute type 10 has an invalid length.
[  264.698541][T11143] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1938'.
[  264.713525][T11143] bridge0: port 3(ipvlan1) entered blocking state
[  264.729021][T11143] bridge0: port 3(ipvlan1) entered disabled state
[  264.904905][T11143] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  265.124431][T11157] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1944'.
[  265.268240][T11161] netlink: 'syz.3.1946': attribute type 10 has an invalid length.
[  265.301749][T11161] bridge0: port 4(ipvlan1) entered blocking state
[  265.312395][T11161] bridge0: port 4(ipvlan1) entered disabled state
[  265.408550][T11161] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  265.426779][T11164] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  265.771506][T11178] bridge0: port 4(ipvlan1) entered blocking state
[  265.795808][T11178] bridge0: port 4(ipvlan1) entered disabled state
[  265.882714][T11178] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  266.981524][T11205] validate_nla: 4 callbacks suppressed
[  266.981676][T11205] netlink: 'syz.2.1963': attribute type 10 has an invalid length.
[  267.002478][T11205] __nla_validate_parse: 4 callbacks suppressed
[  267.002517][T11205] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1963'.
[  267.031794][T11205] bridge0: port 3(ipvlan1) entered blocking state
[  267.053713][T11205] bridge0: port 3(ipvlan1) entered disabled state
[  267.223366][T11205] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  267.398736][T11219] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1967'.
[  267.562724][T11223] netlink: 'syz.0.1969': attribute type 10 has an invalid length.
[  267.587889][T11223] bond_slave_0: left promiscuous mode
[  267.594219][T11223] bond_slave_1: left promiscuous mode
[  268.172244][T11242] netlink: 'syz.0.1977': attribute type 10 has an invalid length.
[  268.184843][T11242] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1977'.
[  268.225817][T11242] bridge0: port 3(ipvlan1) entered blocking state
[  268.293795][T11242] bridge0: port 3(ipvlan1) entered disabled state
[  268.430996][T11242] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  268.504781][T11246] netlink: 'syz.1.1979': attribute type 2 has an invalid length.
[  268.515263][T11246] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1979'.
[  268.528721][T11243] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1978'.
[  268.877093][T11260] netlink: 'syz.2.1983': attribute type 10 has an invalid length.
[  268.905958][T11260] bond_slave_0: left promiscuous mode
[  268.912114][T11260] bond_slave_1: left promiscuous mode
[  269.038421][T11267] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1986'.
[  269.289565][T11277] netlink: 'syz.2.1988': attribute type 39 has an invalid length.
[  270.018085][T11297] netlink: 'syz.1.1998': attribute type 10 has an invalid length.
[  270.833069][T11325] netlink: 'syz.1.2017': attribute type 2 has an invalid length.
[  270.842514][T11325] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2017'.
[  271.929151][T11356] netlink: 'syz.3.2019': attribute type 10 has an invalid length.
[  271.956336][T11356] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  272.483705][T11366] netlink: 'syz.0.2023': attribute type 10 has an invalid length.
[  272.495675][T11366] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2023'.
[  272.527700][T11366] bridge0: port 3(ipvlan1) entered blocking state
[  272.546627][T11366] bridge0: port 3(ipvlan1) entered disabled state
[  272.711963][T11366] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  272.783857][T11370] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2025'.
[  273.301875][T11394] netlink: 'syz.3.2035': attribute type 21 has an invalid length.
[  273.325947][T11394] netlink: 'syz.3.2035': attribute type 10 has an invalid length.
[  273.418180][T11394] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  273.469148][T11397] netlink: 'syz.1.2036': attribute type 2 has an invalid length.
[  273.490842][T11397] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2036'.
[  273.656350][T11406] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2040'.
[  274.227493][T11418] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2042'.
[  274.446174][T11424] netlink: 'syz.2.2048': attribute type 2 has an invalid length.
[  274.454571][T11424] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2048'.
[  274.615844][T11427] netlink: 'syz.0.2049': attribute type 21 has an invalid length.
[  274.651314][T11427] netlink: 'syz.0.2049': attribute type 10 has an invalid length.
[  274.939701][T11427] syz.0.2049 (11427) used greatest stack depth: 19112 bytes left
[  275.090120][T11449] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2058'.
[  275.534543][T11457] netlink: 'syz.1.2062': attribute type 2 has an invalid length.
[  275.545596][T11457] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2062'.
[  275.746727][T11465] netlink: 'syz.0.2066': attribute type 10 has an invalid length.
[  275.768623][T11465] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  276.320597][T11487] netlink: 'syz.2.2074': attribute type 2 has an invalid length.
[  276.333259][T11487] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2074'.
[  276.378558][T11491] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  276.912328][T11500] Illegal XDP return value 4294967294 on prog  (id 965) dev N/A, expect packet loss!
[  277.307940][T11514] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2087'.
[  277.757370][T11537] validate_nla: 2 callbacks suppressed
[  277.757406][T11537] netlink: 'syz.1.2098': attribute type 2 has an invalid length.
[  277.773415][T11537] __nla_validate_parse: 1 callbacks suppressed
[  277.773448][T11537] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2098'.
[  278.024297][T11548] netlink: 'syz.0.2102': attribute type 21 has an invalid length.
[  278.041230][T11548] netlink: 'syz.0.2102': attribute type 10 has an invalid length.
[  278.135168][T11550] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2103'.
[  278.148255][T11550] hsr_slave_0: left promiscuous mode
[  278.155803][T11550] hsr_slave_1: left promiscuous mode
[  278.303133][T11554] netlink: 'syz.1.2105': attribute type 10 has an invalid length.
[  278.325269][T11554] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  278.469444][T11558] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2107'.
[  278.721296][T11564] netlink: 'syz.2.2109': attribute type 2 has an invalid length.
[  278.739776][T11564] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2109'.
[  278.977707][T11575] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2116'.
[  279.202496][T11586] netlink: 'syz.1.2119': attribute type 10 has an invalid length.
[  279.231727][T11586] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  279.713050][T11597] netlink: 'syz.2.2124': attribute type 10 has an invalid length.
[  279.725969][T11597] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2124'.
[  280.215262][T11607] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2129'.
[  280.325581][T11611] netlink: 'syz.3.2130': attribute type 10 has an invalid length.
[  280.341891][T11611] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2130'.
[  280.362188][T11611] bridge0: port 4(ipvlan1) entered blocking state
[  280.376424][T11611] bridge0: port 4(ipvlan1) entered disabled state
[  280.389812][T11611] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  280.677273][T11624] netlink: 'syz.2.2136': attribute type 10 has an invalid length.
[  280.712993][T11624] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  281.224746][T11641] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2143'.
[  281.370117][T11639] netlink: 'syz.1.2142': attribute type 10 has an invalid length.
[  281.382010][T11639] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2142'.
[  281.409465][T11639] bridge0: port 3(ipvlan1) entered blocking state
[  281.422388][T11639] bridge0: port 3(ipvlan1) entered disabled state
[  281.450569][T11639] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  282.073800][T11667] bridge0: port 3(ipvlan1) entered blocking state
[  282.129244][T11667] bridge0: port 3(ipvlan1) entered disabled state
[  282.255964][T11667] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  283.115849][T11698] validate_nla: 4 callbacks suppressed
[  283.115903][T11698] netlink: 'syz.0.2167': attribute type 10 has an invalid length.
[  283.132729][T11698] __nla_validate_parse: 6 callbacks suppressed
[  283.132758][T11698] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2167'.
[  283.154367][T11698] bridge0: port 3(ipvlan1) entered blocking state
[  283.170541][T11698] bridge0: port 3(ipvlan1) entered disabled state
[  283.251364][T11698] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  283.369588][T11703] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2169'.
[  283.381197][T11703] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2169'.
[  283.394692][T11703] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2169'.
[  283.498007][T11707] netlink: 'syz.1.2171': attribute type 10 has an invalid length.
[  283.515225][T11707] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  283.819000][T11712] netlink: 'syz.0.2173': attribute type 10 has an invalid length.
[  283.848027][T11712] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2173'.
[  284.258185][T11720] netlink: 'syz.1.2175': attribute type 21 has an invalid length.
[  284.278762][T11720] netlink: 'syz.1.2175': attribute type 10 has an invalid length.
[  284.463126][T11728] netlink: 'syz.3.2178': attribute type 10 has an invalid length.
[  284.483036][T11728] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2178'.
[  284.501042][T11728] bridge0: port 4(ipvlan1) entered blocking state
[  284.509446][T11728] bridge0: port 4(ipvlan1) entered disabled state
[  284.519338][T11728] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  284.547615][T11730] netlink: 'syz.1.2180': attribute type 2 has an invalid length.
[  284.564027][T11730] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2180'.
[  284.787899][T11741] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2184'.
[  284.799311][T11741] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2184'.
[  284.856100][T11741] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2184'.
[  285.059276][T11751] netlink: 'syz.3.2188': attribute type 21 has an invalid length.
[  285.080028][T11751] netlink: 'syz.3.2188': attribute type 10 has an invalid length.
[  285.197787][T11755] netlink: 'syz.1.2191': attribute type 10 has an invalid length.
[  285.208625][T11755] bridge0: port 3(ipvlan1) entered blocking state
[  285.216502][T11755] bridge0: port 3(ipvlan1) entered disabled state
[  285.226361][T11755] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  285.820457][T11781] bridge0: port 3(ipvlan1) entered blocking state
[  285.828868][T11781] bridge0: port 3(ipvlan1) entered disabled state
[  285.839123][T11781] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  290.547245][T11855] validate_nla: 3 callbacks suppressed
[  290.547282][T11855] netlink: 'syz.3.2230': attribute type 21 has an invalid length.
[  290.720099][T11865] __nla_validate_parse: 22 callbacks suppressed
[  290.720117][T11865] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2234'.
[  290.745249][T11865] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2234'.
[  290.787569][T11865] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2234'.
[  290.805693][T11865] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2234'.
[  290.832568][T11867] netlink: 'syz.0.2235': attribute type 10 has an invalid length.
[  290.845583][T11867] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  292.000744][T11869] syzkaller0: entered promiscuous mode
[  292.014035][T11869] syzkaller0: entered allmulticast mode
[  292.036311][T11889] netlink: 'syz.0.2242': attribute type 21 has an invalid length.
[  293.672485][T11889] netlink: 'syz.0.2242': attribute type 10 has an invalid length.
[  293.802654][T11895] netlink: 'syz.1.2245': attribute type 2 has an invalid length.
[  293.825971][T11895] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2245'.
[  293.851748][T11897] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2247'.
[  293.937860][T11901] wg2: entered promiscuous mode
[  293.943175][T11901] wg2: entered allmulticast mode
[  293.954539][T11900] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2246'.
[  294.233316][T11914] netlink: 'syz.2.2253': attribute type 39 has an invalid length.
[  294.331098][T11920] netlink: 'syz.3.2254': attribute type 21 has an invalid length.
[  294.344471][T11916] netlink: 'syz.3.2254': attribute type 10 has an invalid length.
[  294.623167][T11926] netlink: 'syz.1.2258': attribute type 2 has an invalid length.
[  294.639860][T11926] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2258'.
[  294.841086][T11924] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  295.249681][T11924] syzkaller0: entered promiscuous mode
[  295.260435][T11924] syzkaller0: entered allmulticast mode
[  295.327222][T11941] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2265'.
[  297.542575][T11941] wg2: entered promiscuous mode
[  297.548330][T11941] wg2: entered allmulticast mode
[  297.563701][T11958] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2270'.
[  297.821212][T11977] netlink: 'syz.0.2279': attribute type 39 has an invalid length.
[  298.023095][T11981] netlink: 'syz.1.2281': attribute type 10 has an invalid length.
[  298.033713][T11981] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2281'.
[  298.059039][T11981] bridge0: port 3(ipvlan1) entered blocking state
[  298.070235][T11981] bridge0: port 3(ipvlan1) entered disabled state
[  298.147358][T11981] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  298.270272][T11988] netlink: 'syz.0.2284': attribute type 10 has an invalid length.
[  298.317644][T11990] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2285'.
[  298.470669][T11995] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2286'.
[  298.624766][T11997] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2288'.
[  298.764617][T12003] netlink: 'syz.2.2291': attribute type 3 has an invalid length.
[  298.792649][T12003] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2291'.
[  299.055780][T12009] netlink: 'syz.0.2294': attribute type 10 has an invalid length.
[  299.066595][T12009] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2294'.
[  299.086642][T12009] bridge0: port 3(ipvlan1) entered blocking state
[  299.107502][T12009] bridge0: port 3(ipvlan1) entered disabled state
[  299.360082][T12009] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  299.686161][T12016] netlink: 'syz.1.2296': attribute type 10 has an invalid length.
[  299.925839][T12026] netlink: 'syz.1.2301': attribute type 2 has an invalid length.
[  299.934042][T12026] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2301'.
[  300.180332][T12035] netlink: 'syz.2.2305': attribute type 10 has an invalid length.
[  300.198962][T12035] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2305'.
[  300.240609][T12035] bridge0: port 3(ipvlan1) entered blocking state
[  300.256479][T12035] bridge0: port 3(ipvlan1) entered disabled state
[  300.293863][T12035] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  300.515786][T12048] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2308'.
[  300.876907][T12052] netlink: 'syz.0.2310': attribute type 10 has an invalid length.
[  301.188951][T12060] netlink: 'syz.0.2314': attribute type 2 has an invalid length.
[  301.602191][T12066] bridge0: port 3(ipvlan1) entered blocking state
[  301.637162][T12066] bridge0: port 3(ipvlan1) entered disabled state
[  301.761918][T12066] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  302.613103][T12092] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  302.798765][T12092] syzkaller0: entered promiscuous mode
[  302.815379][T12092] syzkaller0: entered allmulticast mode
[  302.942202][T12108] validate_nla: 2 callbacks suppressed
[  302.942248][T12108] netlink: 'syz.3.2336': attribute type 10 has an invalid length.
[  302.994184][T12110] __nla_validate_parse: 3 callbacks suppressed
[  302.994202][T12110] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2337'.
[  304.717063][T12110] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2337'.
[  304.729484][T12112] netlink: 'syz.2.2338': attribute type 10 has an invalid length.
[  304.745667][T12112] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  305.171151][T12133] netlink: 'syz.3.2346': attribute type 2 has an invalid length.
[  305.181394][T12133] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2346'.
[  305.223929][T12136] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2347'.
[  305.233907][T12136] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2347'.
[  305.247594][T12136] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2347'.
[  305.257713][T12136] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2347'.
[  305.364577][T12141] netlink: 'syz.2.2349': attribute type 10 has an invalid length.
[  305.392930][T12139] sctp: [Deprecated]: syz.3.2348 (pid 12139) Use of int in max_burst socket option deprecated.
[  305.392930][T12139] Use struct sctp_assoc_value instead
[  305.518393][T12143] netlink: 'syz.2.2350': attribute type 10 has an invalid length.
[  305.532810][T12143] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  305.566332][T12145] netlink: 'syz.3.2351': attribute type 10 has an invalid length.
[  305.574765][T12145] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2351'.
[  305.586927][T12145] bridge0: port 4(ipvlan1) entered blocking state
[  305.594325][T12145] bridge0: port 4(ipvlan1) entered disabled state
[  305.605625][T12145] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  305.849866][T12149] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2353'.
[  306.085352][T12155] netlink: 'syz.1.2356': attribute type 33 has an invalid length.
[  306.104251][T12155] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2356'.
[  306.146698][T12157] netlink: 'syz.2.2357': attribute type 2 has an invalid length.
[  306.331175][T12162] netlink: 'syz.1.2359': attribute type 10 has an invalid length.
[  306.408111][T12164] syzkaller0: entered promiscuous mode
[  306.413783][T12164] syzkaller0: entered allmulticast mode
[  308.548327][T12179] netlink: 'syz.0.2366': attribute type 10 has an invalid length.
[  308.557303][T12179] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  308.777615][T12193] netlink: 'syz.1.2371': attribute type 10 has an invalid length.
[  308.919078][T12202] netlink: 'syz.3.2376': attribute type 2 has an invalid length.
[  308.934301][T12202] __nla_validate_parse: 1 callbacks suppressed
[  308.934350][T12202] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2376'.
[  309.106206][T12211] netlink: 'syz.3.2379': attribute type 10 has an invalid length.
[  309.119088][T12211] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  309.682459][ T5781] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  309.693348][ T5781] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  309.701608][ T5781] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  309.711212][ T5781] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  309.719580][ T5781] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  309.738172][ T5781] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  310.182508][ T1083] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.286235][T12230] netlink: 'syz.1.2386': attribute type 10 has an invalid length.
[  310.327219][T12232] netlink: 'syz.2.2387': attribute type 2 has an invalid length.
[  310.345565][T12232] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2387'.
[  310.404033][ T1083] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.440699][T12235] netlink: 'syz.3.2389': attribute type 10 has an invalid length.
[  310.449325][T12235] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  310.538191][ T1083] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.604671][T12217] chnl_net:caif_netlink_parms(): no params data found
[  310.734242][ T1083] bond0: (slave netdevsim0): Releasing backup interface
[  310.749205][ T1083] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.938206][T12217] bridge0: port 1(bridge_slave_0) entered blocking state
[  310.947138][T12217] bridge0: port 1(bridge_slave_0) entered disabled state
[  310.956475][T12217] bridge_slave_0: entered allmulticast mode
[  310.964212][T12217] bridge_slave_0: entered promiscuous mode
[  310.974136][T12217] bridge0: port 2(bridge_slave_1) entered blocking state
[  310.983024][T12217] bridge0: port 2(bridge_slave_1) entered disabled state
[  310.995535][T12217] bridge_slave_1: entered allmulticast mode
[  311.003503][T12217] bridge_slave_1: entered promiscuous mode
[  311.045648][T12217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  311.058721][T12217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  311.201962][T12217] team0: Port device team_slave_0 added
[  311.213403][T12217] team0: Port device team_slave_1 added
[  311.311918][T12217] batman_adv: batadv0: Adding interface: batadv_slave_0
[  311.322168][T12217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  311.356850][T12217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  311.371595][T12217] batman_adv: batadv0: Adding interface: batadv_slave_1
[  311.379683][T12217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  311.407257][T12217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  311.772666][T12217] hsr_slave_0: entered promiscuous mode
[  311.783400][T12217] hsr_slave_1: entered promiscuous mode
[  311.786116][ T5780] Bluetooth: hci4: command tx timeout
[  311.798830][T12260] netlink: 'syz.1.2398': attribute type 10 has an invalid length.
[  311.815377][T12260] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2398'.
[  311.840357][T12260] bridge0: port 3(ipvlan1) entered blocking state
[  311.859523][T12260] bridge0: port 3(ipvlan1) entered disabled state
[  312.048693][T12260] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  312.070153][T12264] netlink: 'syz.3.2399': attribute type 2 has an invalid length.
[  312.088829][T12264] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2399'.
[  312.359219][T12280] netlink: 'syz.2.2402': attribute type 10 has an invalid length.
[  312.386995][T12280] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  313.086523][T12306] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2411'.
[  313.109994][T12306] bridge0: port 3(ipvlan1) entered blocking state
[  313.159044][T12306] bridge0: port 3(ipvlan1) entered disabled state
[  313.310712][T12306] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  313.784650][T12322] validate_nla: 2 callbacks suppressed
[  313.784666][T12322] netlink: 'syz.3.2415': attribute type 10 has an invalid length.
[  313.841368][T12321] netlink: 'syz.1.2414': attribute type 10 has an invalid length.
[  313.867297][ T5780] Bluetooth: hci4: command tx timeout
[  313.886961][T12321] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  314.413000][T12332] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2416'.
[  314.511836][T12217] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  314.551389][T12217] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  314.579489][T12217] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  314.620857][T12217] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  315.226420][T12217] 8021q: adding VLAN 0 to HW filter on device bond0
[  315.314153][T12217] 8021q: adding VLAN 0 to HW filter on device team0
[  315.370259][T12363] netlink: 'syz.3.2424': attribute type 10 has an invalid length.
[  315.383955][T12363] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  315.422393][T12365] netlink: 'syz.1.2425': attribute type 2 has an invalid length.
[  315.466699][T12365] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2425'.
[  315.604012][   T73] bridge0: port 1(bridge_slave_0) entered blocking state
[  315.611279][   T73] bridge0: port 1(bridge_slave_0) entered forwarding state
[  315.688758][   T73] bridge0: port 2(bridge_slave_1) entered blocking state
[  315.696128][   T73] bridge0: port 2(bridge_slave_1) entered forwarding state
[  315.939522][T12378] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2427'.
[  315.949248][ T5780] Bluetooth: hci4: command tx timeout
[  315.989419][T12217] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  316.426324][T12393] netlink: 'syz.3.2431': attribute type 10 has an invalid length.
[  316.529538][T12397] netlink: 'syz.2.2433': attribute type 2 has an invalid length.
[  316.555891][T12397] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2433'.
[  316.712020][T12217] 8021q: adding VLAN 0 to HW filter on device batadv0
[  316.898738][T12412] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2437'.
[  316.910201][T12407] netlink: 'syz.1.2436': attribute type 10 has an invalid length.
[  316.928906][T12407] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  317.156569][T12217] veth0_vlan: entered promiscuous mode
[  317.289692][T12217] veth1_vlan: entered promiscuous mode
[  317.469820][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  317.482727][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  317.559307][T12217] veth0_macvtap: entered promiscuous mode
[  317.617150][T12217] veth1_macvtap: entered promiscuous mode
[  317.745363][T12217] batman_adv: batadv0: Interface activated: batadv_slave_0
[  317.819368][T12217] batman_adv: batadv0: Interface activated: batadv_slave_1
[  317.961923][T12438] netlink: 'syz.1.2445': attribute type 10 has an invalid length.
[  317.979988][T12438] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2445'.
[  318.000216][T12438] bridge0: port 3(ipvlan1) entered blocking state
[  318.014121][T12438] bridge0: port 3(ipvlan1) entered disabled state
[  318.043958][ T5780] Bluetooth: hci4: command tx timeout
[  318.134118][T12438] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  318.150875][T12439] netlink: 'syz.2.2444': attribute type 10 has an invalid length.
[  318.197104][T12217] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  318.217645][T12217] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  318.239989][T12217] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  318.261684][T12217] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  318.298853][T12442] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2447'.
[  318.638796][ T1083] bridge_slave_1: left allmulticast mode
[  318.644755][ T1083] bridge_slave_1: left promiscuous mode
[  318.667840][ T1083] bridge0: port 2(bridge_slave_1) entered disabled state
[  318.709020][ T1083] bridge_slave_0: left allmulticast mode
[  318.731335][ T1083] bridge_slave_0: left promiscuous mode
[  318.746116][ T1083] bridge0: port 1(bridge_slave_0) entered disabled state
[  318.856395][ T1083] veth1_macvtap: left promiscuous mode
[  318.881251][ T1083] veth1_vlan: left promiscuous mode
[  319.842815][ T1083] team0 (unregistering): Port device team_slave_1 removed
[  319.888533][ T1083] team0 (unregistering): Port device team_slave_0 removed
[  319.933732][ T1083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  319.983288][ T1083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  320.276482][ T1083] bond0 (unregistering): Released all slaves
[  320.388359][T12465] netlink: 'syz.2.2453': attribute type 10 has an invalid length.
[  320.399697][T12465] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  320.415412][T12480] netlink: 'syz.1.2458': attribute type 10 has an invalid length.
[  320.495413][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  320.513553][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  320.638049][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  320.648893][T12484] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2460'.
[  320.658360][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  321.050957][T12491] bridge0: port 2(bridge_slave_1) entered disabled state
[  321.061398][T12491] bridge0: port 1(bridge_slave_0) entered disabled state
[  321.099525][T12491] bridge0: entered allmulticast mode
[  321.557137][T12500] netlink: 'syz.2.2467': attribute type 10 has an invalid length.
[  321.585571][T12500] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  321.668631][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  321.680929][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  321.699008][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  321.709995][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  321.725581][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  321.733213][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  322.056455][T12508] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2469'.
[  322.179355][  T161] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.386685][  T161] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.637124][  T161] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.721437][  T161] bond0: (slave netdevsim0): Releasing backup interface
[  322.748655][  T161] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.839958][T12502] chnl_net:caif_netlink_parms(): no params data found
[  322.921327][T12533] netlink: 'syz.3.2480': attribute type 10 has an invalid length.
[  322.939722][T12533] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  323.473261][T12544] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2483'.
[  323.581419][T12502] bridge0: port 1(bridge_slave_0) entered blocking state
[  323.594339][T12502] bridge0: port 1(bridge_slave_0) entered disabled state
[  323.603324][T12502] bridge_slave_0: entered allmulticast mode
[  323.611833][T12502] bridge_slave_0: entered promiscuous mode
[  323.640841][T12502] bridge0: port 2(bridge_slave_1) entered blocking state
[  323.657940][T12502] bridge0: port 2(bridge_slave_1) entered disabled state
[  323.668233][T12502] bridge_slave_1: entered allmulticast mode
[  323.677254][T12502] bridge_slave_1: entered promiscuous mode
[  323.791863][ T5781] Bluetooth: hci2: command tx timeout
[  324.000475][T12502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  324.089051][T12502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  324.193109][T12563] netlink: 'syz.3.2491': attribute type 10 has an invalid length.
[  324.236799][T12563] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  324.420666][T12502] team0: Port device team_slave_0 added
[  324.434900][T12502] team0: Port device team_slave_1 added
[  324.541205][T12575] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2494'.
[  324.723888][T12502] batman_adv: batadv0: Adding interface: batadv_slave_0
[  324.732215][T12502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  324.762293][T12502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  324.807441][T12502] batman_adv: batadv0: Adding interface: batadv_slave_1
[  324.835327][T12502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  324.889554][T12502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  325.151202][T12502] hsr_slave_0: entered promiscuous mode
[  325.167345][T12502] hsr_slave_1: entered promiscuous mode
[  325.173947][T12502] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  325.197833][T12502] Cannot create hsr debugfs directory
[  325.352872][T12597] netlink: 'syz.2.2501': attribute type 10 has an invalid length.
[  325.363868][T12597] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2501'.
[  325.383632][T12597] bridge0: port 3(ipvlan1) entered blocking state
[  325.430561][T12597] bridge0: port 3(ipvlan1) entered disabled state
[  325.607277][T12597] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  325.660886][T12599] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2502'.
[  325.865178][ T5781] Bluetooth: hci2: command tx timeout
[  325.938908][T12603] netlink: 'syz.2.2503': attribute type 10 has an invalid length.
[  325.985223][T12603] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  327.212264][T12629] netlink: 'syz.3.2509': attribute type 25 has an invalid length.
[  327.319759][T12635] netlink: 'syz.0.2511': attribute type 10 has an invalid length.
[  327.328886][T12635] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2511'.
[  327.433101][T12635] ipvlan1: entered promiscuous mode
[  327.442077][T12635] ipvlan1: entered allmulticast mode
[  327.456126][T12635] veth0_vlan: entered allmulticast mode
[  327.479145][T12635] bridge0: port 3(ipvlan1) entered blocking state
[  327.487963][T12635] bridge0: port 3(ipvlan1) entered disabled state
[  327.504705][T12635] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  327.523720][T12637] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2512'.
[  327.945837][ T5781] Bluetooth: hci2: command tx timeout
[  328.118932][T12502] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  328.202255][T12502] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  328.228921][T12502] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  328.329590][T12502] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  328.398502][T12660] netlink: 'syz.0.2521': attribute type 10 has an invalid length.
[  328.431658][T12660] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2521'.
[  328.478698][T12660] bridge0: port 3(ipvlan1) entered blocking state
[  328.516736][T12660] bridge0: port 3(ipvlan1) entered disabled state
[  328.604124][T12660] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  328.795134][T12675] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2524'.
[  329.252782][T12502] 8021q: adding VLAN 0 to HW filter on device bond0
[  329.377403][T12502] 8021q: adding VLAN 0 to HW filter on device team0
[  329.409586][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[  329.416857][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[  329.549299][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[  329.556654][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[  329.673598][T12706] netlink: 'syz.3.2533': attribute type 10 has an invalid length.
[  329.692703][T12706] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2533'.
[  329.732680][T12706] bridge0: port 4(ipvlan1) entered blocking state
[  329.748523][T12706] bridge0: port 4(ipvlan1) entered disabled state
[  329.860492][T12706] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  330.025720][ T5781] Bluetooth: hci2: command tx timeout
[  330.191213][  T161] hsr_slave_0: left promiscuous mode
[  330.209245][  T161] hsr_slave_1: left promiscuous mode
[  330.230855][  T161] bridge_slave_1: left allmulticast mode
[  330.240852][  T161] bridge_slave_1: left promiscuous mode
[  330.249476][  T161] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.259554][  T161] bridge_slave_0: left allmulticast mode
[  330.274063][  T161] bridge_slave_0: left promiscuous mode
[  330.285402][  T161] bridge0: port 1(bridge_slave_0) entered disabled state
[  330.337281][  T161] veth1_macvtap: left promiscuous mode
[  330.344082][  T161] veth1_vlan: left promiscuous mode
[  331.073410][  T161] team0 (unregistering): Port device team_slave_1 removed
[  331.115796][  T161] team0 (unregistering): Port device team_slave_0 removed
[  331.164318][  T161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  331.209865][  T161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  331.530905][  T161] bond0 (unregistering): Released all slaves
[  331.603126][T12720] netlink: 'syz.3.2536': attribute type 10 has an invalid length.
[  331.616218][T12719] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2535'.
[  332.357937][T12502] 8021q: adding VLAN 0 to HW filter on device batadv0
[  332.555635][T12754] netlink: 'syz.3.2544': attribute type 10 has an invalid length.
[  332.583922][T12754] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2544'.
[  332.631871][T12754] bridge0: port 4(ipvlan1) entered blocking state
[  332.644285][T12754] bridge0: port 4(ipvlan1) entered disabled state
[  332.722889][T12754] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  332.796707][T12502] veth0_vlan: entered promiscuous mode
[  332.845917][T12502] veth1_vlan: entered promiscuous mode
[  332.972035][T12502] veth0_macvtap: entered promiscuous mode
[  333.020675][T12502] veth1_macvtap: entered promiscuous mode
[  333.118200][T12502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  333.168805][T12502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  333.200840][T12502] batman_adv: batadv0: Interface activated: batadv_slave_0
[  333.218289][T12502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  333.239356][T12502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  333.254885][T12502] batman_adv: batadv0: Interface activated: batadv_slave_1
[  333.335235][T12771] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2548'.
[  333.418933][T12502] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  333.445055][T12502] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  333.453934][T12502] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  333.482902][T12502] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  333.511716][T12777] netlink: 'syz.0.2549': attribute type 10 has an invalid length.
[  333.871057][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  333.899540][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  333.923869][T12783] netlink: 'syz.2.2553': attribute type 10 has an invalid length.
[  333.939751][T12783] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  333.993373][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  334.015299][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  334.364529][T12794] netlink: 'syz.1.2463': attribute type 2 has an invalid length.
[  334.398282][T12794] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2463'.
[  334.738564][T12798] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2560'.
[  334.791036][T12802] netlink: 'syz.2.2562': attribute type 10 has an invalid length.
[  335.127783][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  335.137525][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  335.158780][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  335.172147][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  335.181294][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  335.189150][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  335.368621][ T1095] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.517782][ T1095] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.628495][ T1095] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.661232][T12821] netlink: 'syz.0.2569': attribute type 2 has an invalid length.
[  335.670958][T12821] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2569'.
[  335.715198][ T1095] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.974772][T12826] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2572'.
[  336.058032][T12831] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2580'.
[  336.382611][T12810] chnl_net:caif_netlink_parms(): no params data found
[  336.623243][T12850] netlink: 'syz.0.2578': attribute type 10 has an invalid length.
[  336.698207][T12850] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2578'.
[  336.711304][T12850] bridge0: port 3(ipvlan1) entered blocking state
[  336.721615][T12850] bridge0: port 3(ipvlan1) entered disabled state
[  336.808133][T12850] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  337.235205][ T5781] Bluetooth: hci1: command tx timeout
[  337.391469][T12876] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2585'.
[  337.600242][T12810] bridge0: port 1(bridge_slave_0) entered blocking state
[  337.640386][T12810] bridge0: port 1(bridge_slave_0) entered disabled state
[  337.662324][T12810] bridge_slave_0: entered allmulticast mode
[  337.680138][T12810] bridge_slave_0: entered promiscuous mode
[  337.814728][T12885] netlink: 'syz.1.2589': attribute type 10 has an invalid length.
[  337.834038][T12885] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2589'.
[  337.880708][T12885] ipvlan1: entered promiscuous mode
[  337.895699][T12885] ipvlan1: entered allmulticast mode
[  337.911333][T12885] veth0_vlan: entered allmulticast mode
[  338.228985][T12885] bridge0: port 3(ipvlan1) entered blocking state
[  338.238803][T12885] bridge0: port 3(ipvlan1) entered disabled state
[  338.341706][T12885] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  338.374032][T12810] bridge0: port 2(bridge_slave_1) entered blocking state
[  338.401731][T12810] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.412589][T12810] bridge_slave_1: entered allmulticast mode
[  338.427444][T12810] bridge_slave_1: entered promiscuous mode
[  338.627065][T12810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  338.659699][T12810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  338.676223][T12904] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2597'.
[  338.811794][T12810] team0: Port device team_slave_0 added
[  338.838407][T12810] team0: Port device team_slave_1 added
[  338.970198][T12810] batman_adv: batadv0: Adding interface: batadv_slave_0
[  338.998913][T12810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  339.079293][T12810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  339.126892][T12810] batman_adv: batadv0: Adding interface: batadv_slave_1
[  339.143533][T12810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  339.176603][T12810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  339.191942][T12920] netlink: 'syz.1.2604': attribute type 10 has an invalid length.
[  339.321272][ T5781] Bluetooth: hci1: command tx timeout
[  339.327300][T12920] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  339.517154][T12925] netlink: 'syz.0.2605': attribute type 10 has an invalid length.
[  339.545356][T12925] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2605'.
[  339.594007][T12925] bridge0: port 3(ipvlan1) entered blocking state
[  339.622044][T12925] bridge0: port 3(ipvlan1) entered disabled state
[  339.736903][T12925] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  339.880353][T12810] hsr_slave_0: entered promiscuous mode
[  339.897595][T12810] hsr_slave_1: entered promiscuous mode
[  339.909601][T12810] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  339.945358][T12810] Cannot create hsr debugfs directory
[  340.123380][T12945] netlink: 'syz.0.2609': attribute type 10 has an invalid length.
[  340.177255][T12944] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2610'.
[  340.560896][T12951] bridge0: port 2(bridge_slave_1) entered disabled state
[  340.570943][T12951] bridge0: port 1(bridge_slave_0) entered disabled state
[  340.591201][T12951] bridge0: entered allmulticast mode
[  341.181635][T12963] netlink: 'syz.0.2617': attribute type 10 has an invalid length.
[  341.221830][T12963] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2617'.
[  341.244412][T12963] bridge0: port 3(ipvlan1) entered blocking state
[  341.296132][T12963] bridge0: port 3(ipvlan1) entered disabled state
[  341.385378][ T5781] Bluetooth: hci1: command tx timeout
[  341.513639][T12963] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  341.583044][T12978] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2621'.
[  341.847464][T12986] netlink: 'syz.0.2622': attribute type 10 has an invalid length.
[  341.896357][T12986] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  342.600538][T12810] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  342.689629][T12810] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  342.734154][T13007] netlink: 'syz.0.2630': attribute type 10 has an invalid length.
[  342.759351][T13007] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2630'.
[  342.791904][T13007] bridge0: port 3(ipvlan1) entered blocking state
[  342.802634][T13007] bridge0: port 3(ipvlan1) entered disabled state
[  342.818789][T13007] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  342.873750][T12810] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  342.886960][T13013] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2632'.
[  342.939289][T12810] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  343.030452][T13015] netlink: 'syz.2.2634': attribute type 10 has an invalid length.
[  343.050317][T13015] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  343.472327][ T5781] Bluetooth: hci1: command tx timeout
[  344.048705][T12810] 8021q: adding VLAN 0 to HW filter on device bond0
[  344.204287][T12810] 8021q: adding VLAN 0 to HW filter on device team0
[  344.259718][T13050] netlink: 'syz.2.2640': attribute type 2 has an invalid length.
[  344.309844][T13050] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2640'.
[  344.329864][  T161] bridge0: port 1(bridge_slave_0) entered blocking state
[  344.337149][  T161] bridge0: port 1(bridge_slave_0) entered forwarding state
[  344.372713][T13052] netlink: 'syz.0.2641': attribute type 10 has an invalid length.
[  344.470914][T13052] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2641'.
[  344.481599][T13052] bridge0: port 3(ipvlan1) entered blocking state
[  344.495904][T13052] bridge0: port 3(ipvlan1) entered disabled state
[  344.513526][T13052] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  344.539531][  T161] bridge0: port 2(bridge_slave_1) entered blocking state
[  344.546793][  T161] bridge0: port 2(bridge_slave_1) entered forwarding state
[  344.556572][T13054] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2642'.
[  345.804362][T13091] netlink: 'syz.1.2652': attribute type 2 has an invalid length.
[  345.866963][T13091] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2652'.
[  345.898742][T13093] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2653'.
[  345.930843][T13089] netlink: 'syz.2.2651': attribute type 10 has an invalid length.
[  345.951794][T13089] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2651'.
[  345.978596][T13089] bridge0: port 3(ipvlan1) entered blocking state
[  346.000158][T13089] bridge0: port 3(ipvlan1) entered disabled state
[  346.017897][T13089] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  346.130937][T12810] 8021q: adding VLAN 0 to HW filter on device batadv0
[  346.584605][T12810] veth0_vlan: entered promiscuous mode
[  346.667717][ T1095] hsr_slave_0: left promiscuous mode
[  346.691702][ T1095] hsr_slave_1: left promiscuous mode
[  346.708746][ T1095] veth0_to_bridge: left allmulticast mode
[  346.730579][ T1095] veth0_to_bridge: left promiscuous mode
[  346.754578][ T1095] bridge0: port 3(veth0_to_bridge) entered disabled state
[  346.771493][ T1095] bridge_slave_1: left allmulticast mode
[  346.777614][ T1095] bridge_slave_1: left promiscuous mode
[  346.783647][ T1095] bridge0: port 2(bridge_slave_1) entered disabled state
[  346.804462][ T1095] bridge_slave_0: left allmulticast mode
[  346.813466][ T1095] bridge_slave_0: left promiscuous mode
[  346.826255][ T1095] bridge0: port 1(bridge_slave_0) entered disabled state
[  346.960626][ T1095] veth1_macvtap: left promiscuous mode
[  346.973625][ T1095] veth1_vlan: left promiscuous mode
[  347.940931][ T1095] team0 (unregistering): Port device team_slave_1 removed
[  347.993361][ T1095] team0 (unregistering): Port device team_slave_0 removed
[  348.047370][ T1095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  348.099132][ T1095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  348.450323][ T1095] bond0 (unregistering): Released all slaves
[  348.542075][T12810] veth1_vlan: entered promiscuous mode
[  348.550334][T13131] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2663'.
[  348.703289][T12810] veth0_macvtap: entered promiscuous mode
[  348.796535][T12810] veth1_macvtap: entered promiscuous mode
[  348.897992][T12810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  348.916955][T12810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  348.944714][T12810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  348.964781][T12810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  349.012655][T12810] batman_adv: batadv0: Interface activated: batadv_slave_0
[  349.056641][T13154] netlink: 'syz.2.2668': attribute type 10 has an invalid length.
[  349.076289][T13154] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  349.094627][T12810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  349.109158][T12810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  349.121247][T12810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  349.135847][T12810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  349.171765][T12810] batman_adv: batadv0: Interface activated: batadv_slave_1
[  349.244754][T12810] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  349.313137][T12810] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  349.349609][T12810] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  349.388696][T12810] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  349.733130][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  349.745745][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  349.768840][T13162] netlink: 'syz.1.2671': attribute type 2 has an invalid length.
[  349.786880][T13162] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2671'.
[  349.877104][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  349.896094][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  349.943733][T13166] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2673'.
[  350.656190][T13179] bridge0: port 2(bridge_slave_1) entered disabled state
[  350.666581][T13179] bridge0: port 1(bridge_slave_0) entered disabled state
[  350.710132][T13179] bridge0: entered allmulticast mode
[  351.120912][T13187] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2682'.
[  351.446149][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  351.455825][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  351.464055][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  351.473318][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  351.481687][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  351.489532][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  351.795850][  T161] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.329944][  T161] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.360535][T13214] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2693'.
[  352.401150][  T161] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.559083][  T161] bond0: (slave netdevsim0): Releasing backup interface
[  352.599420][  T161] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.778024][T13192] chnl_net:caif_netlink_parms(): no params data found
[  352.921774][T13192] bridge0: port 1(bridge_slave_0) entered blocking state
[  352.965743][T13192] bridge0: port 1(bridge_slave_0) entered disabled state
[  352.988358][T13192] bridge_slave_0: entered allmulticast mode
[  353.008511][T13192] bridge_slave_0: entered promiscuous mode
[  353.017856][T13192] bridge0: port 2(bridge_slave_1) entered blocking state
[  353.025406][T13192] bridge0: port 2(bridge_slave_1) entered disabled state
[  353.032710][T13192] bridge_slave_1: entered allmulticast mode
[  353.041176][T13192] bridge_slave_1: entered promiscuous mode
[  353.147285][T13240] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2703'.
[  353.231501][T13192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  353.286351][T13192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  353.548207][ T5780] Bluetooth: hci0: command tx timeout
[  353.902812][T13248] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2705'.
[  354.052396][T13192] team0: Port device team_slave_0 added
[  354.080422][T13192] team0: Port device team_slave_1 added
[  354.347347][T13192] batman_adv: batadv0: Adding interface: batadv_slave_0
[  354.385289][T13192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  354.442760][T13192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  354.535708][T13192] batman_adv: batadv0: Adding interface: batadv_slave_1
[  354.542731][T13192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  354.587337][T13192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  354.604787][T13274] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2712'.
[  354.858579][T13279] netlink: 'syz.1.2714': attribute type 10 has an invalid length.
[  354.867616][T13279] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2714'.
[  354.896334][T13279] bridge0: port 3(ipvlan1) entered blocking state
[  354.903607][T13279] bridge0: port 3(ipvlan1) entered disabled state
[  354.928347][T13279] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  355.118244][T13192] hsr_slave_0: entered promiscuous mode
[  355.144696][T13192] hsr_slave_1: entered promiscuous mode
[  355.152610][T13192] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  355.170583][T13192] Cannot create hsr debugfs directory
[  355.392254][T13286] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2716'.
[  355.626262][ T5780] Bluetooth: hci0: command tx timeout
[  355.804149][T13304] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2722'.
[  355.967544][T13309] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2723'.
[  356.430395][T13320] netlink: 'syz.1.2725': attribute type 10 has an invalid length.
[  356.487826][T13320] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2725'.
[  356.513552][T13320] bridge0: port 3(ipvlan1) entered blocking state
[  356.567001][T13320] bridge0: port 3(ipvlan1) entered disabled state
[  356.652934][T13320] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  357.201792][T13192] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  357.359284][T13192] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  357.387343][T13345] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2733'.
[  357.420943][T13192] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  357.501043][T13192] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  357.633467][T13359] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2736'.
[  357.735182][ T5780] Bluetooth: hci0: command tx timeout
[  357.853990][T13367] netlink: 'syz.1.2737': attribute type 10 has an invalid length.
[  357.902262][T13367] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2737'.
[  357.933002][T13367] bridge0: port 3(ipvlan1) entered blocking state
[  357.965276][T13367] bridge0: port 3(ipvlan1) entered disabled state
[  357.974370][T13367] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  358.377992][T13192] 8021q: adding VLAN 0 to HW filter on device bond0
[  358.482187][T13192] 8021q: adding VLAN 0 to HW filter on device team0
[  358.574190][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  358.581608][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  358.605445][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  358.612670][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  359.571036][T13401] netlink: 'syz.3.2749': attribute type 10 has an invalid length.
[  359.615955][T13401] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2749'.
[  359.654013][T13401] ipvlan1: entered promiscuous mode
[  359.662712][T13401] ipvlan1: entered allmulticast mode
[  359.748680][T13401] veth0_vlan: entered allmulticast mode
[  359.760190][T13401] bridge0: port 3(ipvlan1) entered blocking state
[  359.767051][T13401] bridge0: port 3(ipvlan1) entered disabled state
[  359.776192][T13401] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  359.795234][ T5780] Bluetooth: hci0: command tx timeout
[  360.136802][T13415] netlink: 'syz.0.2758': attribute type 10 has an invalid length.
[  360.165149][T13415] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2758'.
[  360.183913][T13415] bridge0: port 3(ipvlan1) entered blocking state
[  360.211673][T13415] bridge0: port 3(ipvlan1) entered disabled state
[  360.489673][T13415] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  361.311356][T13192] 8021q: adding VLAN 0 to HW filter on device batadv0
[  362.086556][  T161] hsr_slave_0: left promiscuous mode
[  362.148879][  T161] hsr_slave_1: left promiscuous mode
[  362.175160][  T161] bridge_slave_1: left allmulticast mode
[  362.197731][  T161] bridge_slave_1: left promiscuous mode
[  362.203586][  T161] bridge0: port 2(bridge_slave_1) entered disabled state
[  362.242366][  T161] bridge_slave_0: left allmulticast mode
[  362.255365][  T161] bridge_slave_0: left promiscuous mode
[  362.261220][  T161] bridge0: port 1(bridge_slave_0) entered disabled state
[  362.329113][  T161] veth1_macvtap: left promiscuous mode
[  362.347781][  T161] veth1_vlan: left promiscuous mode
[  363.052746][  T161] team0 (unregistering): Port device team_slave_1 removed
[  363.112864][  T161] team0 (unregistering): Port device team_slave_0 removed
[  363.167361][  T161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  363.218823][  T161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  363.524671][  T161] bond0 (unregistering): Released all slaves
[  363.663658][T13478] netlink: 'syz.0.2772': attribute type 10 has an invalid length.
[  363.675426][T13478] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2772'.
[  363.722247][T13478] bridge0: port 3(ipvlan1) entered blocking state
[  363.745352][T13478] bridge0: port 3(ipvlan1) entered disabled state
[  363.754590][T13478] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  363.822615][T13192] veth0_vlan: entered promiscuous mode
[  363.888291][T13192] veth1_vlan: entered promiscuous mode
[  364.038324][T13192] veth0_macvtap: entered promiscuous mode
[  364.088071][T13192] veth1_macvtap: entered promiscuous mode
[  364.221184][T13192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  364.268781][T13192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.298648][T13192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  364.310435][T13192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.322022][T13192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  364.332758][T13192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.369955][T13192] batman_adv: batadv0: Interface activated: batadv_slave_0
[  364.415438][T13501] netlink: 'syz.0.2778': attribute type 10 has an invalid length.
[  364.531189][T13192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  364.541956][T13192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.552210][T13192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  364.563928][T13192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.574294][T13192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  364.590859][T13192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.627288][T13192] batman_adv: batadv0: Interface activated: batadv_slave_1
[  364.647300][T13192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  364.669768][T13192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  364.682340][T13192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  364.693629][T13192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  364.989432][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  365.014997][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  365.439037][T13512] netlink: 'syz.0.2782': attribute type 10 has an invalid length.
[  365.466131][T13512] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2782'.
[  365.504595][T13512] bridge0: port 3(ipvlan1) entered blocking state
[  365.560011][T13512] bridge0: port 3(ipvlan1) entered disabled state
[  365.575777][T13512] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  365.593973][T13516] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2783'.
[  365.621948][  T161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  365.649608][  T161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  366.000831][T13532] netlink: 'syz.0.2791': attribute type 10 has an invalid length.
[  366.046286][T13533] netlink: 'syz.2.2790': attribute type 10 has an invalid length.
[  366.111833][T13533] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  366.163307][T13536] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2792'.
[  366.686698][T13556] netlink: 'syz.1.2801': attribute type 10 has an invalid length.
[  366.738194][T13556] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  366.759975][T13561] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2803'.
[  366.938846][T13568] netlink: 'syz.3.2806': attribute type 10 has an invalid length.
[  366.979450][T13568] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  367.473174][T13589] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2816'.
[  367.757924][T13597] netlink: 'syz.1.2820': attribute type 10 has an invalid length.
[  367.802149][T13597] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  368.562595][T13611] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2827'.
[  369.308364][T13629] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2837'.
[  369.655919][T13637] netlink: 'syz.3.2840': attribute type 10 has an invalid length.
[  369.664171][T13637] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  370.769409][T13656] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2849'.
[  371.034122][T13666] netlink: 'syz.0.2854': attribute type 10 has an invalid length.
[  371.047706][T13666] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2854'.
[  371.059622][T13666] bridge0: port 3(ipvlan1) entered blocking state
[  371.080173][T13666] bridge0: port 3(ipvlan1) entered disabled state
[  371.142844][T13666] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  371.544405][T13683] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2861'.
[  371.733202][T13688] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2864'.
[  371.780358][T13691] netlink: 'syz.0.2865': attribute type 10 has an invalid length.
[  372.017850][T13695] netlink: 'syz.1.2867': attribute type 10 has an invalid length.
[  372.036464][T13695] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2867'.
[  372.051718][T13695] bridge0: port 3(ipvlan1) entered blocking state
[  372.063641][T13695] bridge0: port 3(ipvlan1) entered disabled state
[  372.133388][T13695] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  372.370659][T13707] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2873'.
[  372.545520][T13712] netlink: 'syz.2.2875': attribute type 1 has an invalid length.
[  372.553867][T13712] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.2875'.
[  372.576291][T13716] netlink: 'syz.3.2876': attribute type 10 has an invalid length.
[  372.609703][T13716] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  372.902182][T13725] netlink: 'syz.3.2882': attribute type 10 has an invalid length.
[  372.927910][T13725] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2882'.
[  372.953516][T13725] bridge0: port 3(ipvlan1) entered blocking state
[  372.962821][T13725] bridge0: port 3(ipvlan1) entered disabled state
[  373.058080][T13725] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  373.177634][T13731] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2885'.
[  373.306640][T13736] netlink: 'syz.1.2887': attribute type 10 has an invalid length.
[  373.328275][T13736] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  373.509947][T13742] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2890'.
[  373.550639][T13744] netlink: 'syz.0.2891': attribute type 10 has an invalid length.
[  374.263037][T13768] netlink: 'syz.3.2902': attribute type 10 has an invalid length.
[  374.374036][T13770] netlink: 'syz.0.2904': attribute type 10 has an invalid length.
[  374.480687][T13770] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  375.071242][T13798] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  375.783153][T13822] __nla_validate_parse: 4 callbacks suppressed
[  375.783191][T13822] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2926'.
[  376.019672][T13831] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2930'.
[  376.350914][T13847] validate_nla: 2 callbacks suppressed
[  376.350941][T13847] netlink: 'syz.3.2937': attribute type 10 has an invalid length.
[  376.378102][T13847] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2937'.
[  376.401191][T13842] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2934'.
[  376.628543][T13852] netlink: 192 bytes leftover after parsing attributes in process `syz.3.2938'.
[  378.919657][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  378.926296][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  379.553974][T13870] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2944'.
[  379.711075][T13878] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2948'.
[  379.881338][T13880] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2949'.
[  380.349478][T13903] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2959'.
[  380.386178][T13905] netlink: 'syz.2.2960': attribute type 2 has an invalid length.
[  380.394397][T13905] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2960'.
[  380.642157][T13913] netlink: 'syz.2.2964': attribute type 10 has an invalid length.
[  380.652653][T13913] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  380.937886][T13921] netlink: 'syz.1.2968': attribute type 10 has an invalid length.
[  381.135622][T13926] __nla_validate_parse: 1 callbacks suppressed
[  381.135665][T13926] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2970'.
[  381.181520][T13928] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2971'.
[  381.342420][T13935] netlink: 'syz.2.2972': attribute type 2 has an invalid length.
[  381.355609][T13935] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2972'.
[  382.075308][T13951] netlink: 'syz.2.2983': attribute type 10 has an invalid length.
[  382.083564][T13951] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  382.493226][T13969] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2990'.
[  383.145275][T13989] netlink: 'syz.2.2999': attribute type 10 has an invalid length.
[  383.153621][T13989] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  383.778737][T14018] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3010'.
[  384.112093][T14028] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3015'.
[  384.473745][T14043] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3022'.
[  384.675994][T14051] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3026'.
[  384.965425][T14058] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3030'.
[  385.166674][T14069] netlink: 'syz.2.3034': attribute type 10 has an invalid length.
[  385.184809][T14069] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  385.209445][T14071] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3035'.
[  386.238386][T14101] __nla_validate_parse: 3 callbacks suppressed
[  386.238406][T14101] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3050'.
[  386.814992][T14111] netlink: 'syz.2.3054': attribute type 10 has an invalid length.
[  386.832980][T14111] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  387.112883][T14117] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3057'.
[  387.323824][T14126] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3061'.
[  387.909120][T14150] netlink: 'syz.1.3073': attribute type 10 has an invalid length.
[  387.924788][T14150] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  387.947457][T14151] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3072'.
[  388.888830][T14182] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3086'.
[  388.943462][T14184] netlink: 'syz.1.3088': attribute type 10 has an invalid length.
[  388.993641][T14184] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  389.899751][T14204] sit0: entered allmulticast mode
[  390.216036][T14205] sit0: entered promiscuous mode
[  390.361700][T14220] netlink: 192 bytes leftover after parsing attributes in process `syz.1.3101'.
[  391.418047][T14241] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3110'.
[  392.129950][T14254] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3116'.
[  393.370199][T14271] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3122'.
[  393.428457][T14270] sit0: entered allmulticast mode
[  393.940233][T14272] sit0: entered promiscuous mode
[  395.429785][T14282] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3127'.
[  395.500903][T14284] bridge0: port 2(bridge_slave_1) entered disabled state
[  395.508707][T14284] bridge0: port 1(bridge_slave_0) entered disabled state
[  395.525437][T14284] bridge0: entered allmulticast mode
[  397.191373][T14306] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3135'.
[  400.055253][T14337] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3148'.
[  400.728233][T14352] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3153'.
[  401.880550][T14365] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3159'.
[  402.469684][T14385] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3167'.
[  403.886628][T14403] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3173'.
[  405.580225][T14440] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3186'.
[  407.394215][T14480] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3199'.
[  408.393917][T14512] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3213'.
[  409.222769][T14531] wg2: entered promiscuous mode
[  409.262010][T14531] wg2: entered allmulticast mode
[  409.524411][T14540] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3225'.
[  411.227114][T14570] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3236'.
[  412.422435][T14591] netlink: 192 bytes leftover after parsing attributes in process `syz.0.3245'.
[  412.762160][T14599] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3248'.
[  412.926081][T14604] netlink: 'syz.1.3251': attribute type 10 has an invalid length.
[  412.960802][T14604] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  413.834361][T14620] netlink: 192 bytes leftover after parsing attributes in process `syz.0.3256'.
[  415.242983][T14640] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3262'.
[  416.157154][T14644] netlink: 'syz.2.3265': attribute type 10 has an invalid length.
[  416.203720][T14644] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  416.408932][T14650] netlink: 192 bytes leftover after parsing attributes in process `syz.1.3267'.
[  416.962811][T14654] pim6reg1: entered promiscuous mode
[  417.006727][T14654] pim6reg1: entered allmulticast mode
[  419.339213][T14678] netlink: 'syz.2.3279': attribute type 10 has an invalid length.
[  419.348966][T14678] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  424.223428][T14713] netlink: 'syz.3.3291': attribute type 10 has an invalid length.
[  424.242726][T14713] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  424.633786][T14718] netlink: 192 bytes leftover after parsing attributes in process `syz.0.3293'.
[  427.227893][T14752] netlink: 192 bytes leftover after parsing attributes in process `syz.0.3305'.
[  427.353693][T14754] netlink: 'syz.2.3306': attribute type 10 has an invalid length.
[  427.370272][T14754] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  429.328027][T14787] netlink: 192 bytes leftover after parsing attributes in process `syz.3.3318'.
[  429.663851][T14797] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3322'.
[  430.569805][T14819] syz.0.3328[14819] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  430.633454][T14821] netlink: 192 bytes leftover after parsing attributes in process `syz.3.3329'.
[  430.936281][T14831] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3334'.
[  431.513442][T14846] netlink: 192 bytes leftover after parsing attributes in process `syz.0.3339'.
[  432.188625][ T5780] Bluetooth: hci4: command 0x0406 tx timeout
[  432.669042][T14848] syzkaller0: entered promiscuous mode
[  435.636535][T14852] sit0: left promiscuous mode
[  435.722152][T14855] sit0: entered promiscuous mode
[  435.855727][T14870] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3345'.
[  437.113256][T14887] netlink: 192 bytes leftover after parsing attributes in process `syz.2.3350'.
[  437.697720][T14897] syz.1.3353[14897] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  439.558380][T14931] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3363'.
[  439.807827][T14934] syz.3.3364[14934] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  440.390736][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  440.415335][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  440.595332][T14957] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3375'.
[  441.304599][T14979] syz.2.3379[14979] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  442.196346][T14996] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3386'.
[  442.443926][T15002] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3390'.
[  443.735771][T15032] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3400'.
[  445.756628][T15064] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3410'.
[  447.785719][ T5781] Bluetooth: hci2: command 0x0406 tx timeout
[  453.670852][T15081] netlink: 'syz.3.3417': attribute type 10 has an invalid length.
[  453.685842][T15081] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  453.833444][T15088] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3420'.
[  454.993742][T15116] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3430'.
[  455.179036][T15126] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3435'.
[  455.602943][T15136] syzkaller0: entered promiscuous mode
[  455.611573][T15136] syzkaller0: entered allmulticast mode
[  457.785398][ T5781] Bluetooth: hci1: command 0x0406 tx timeout
[  458.401924][T15150] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3445'.
[  458.425217][T15157] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3447'.
[  458.671748][T15161] syzkaller0: entered promiscuous mode
[  458.692297][T15161] syzkaller0: entered allmulticast mode
[  461.404268][T15181] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3457'.
[  461.819189][T15189] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3460'.
[  462.681448][T15204] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3466'.
[  463.447977][T15214] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3477'.
[  463.720205][T15219] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3471'.
[  464.504511][T15241] pim6reg1: entered promiscuous mode
[  464.516894][T15241] pim6reg1: entered allmulticast mode
[  465.481623][T15248] netlink: 'syz.1.3482': attribute type 2 has an invalid length.
[  465.498286][T15248] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3482'.
[  465.712555][T15254] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3485'.
[  467.884616][T15287] netlink: 'syz.2.3495': attribute type 2 has an invalid length.
[  467.920228][T15287] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3495'.
[  468.058363][T15292] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3497'.
[  469.851041][T15312] syzkaller0: entered promiscuous mode
[  469.869389][T15312] syzkaller0: entered allmulticast mode
[  473.260971][T15326] netlink: 'syz.0.3508': attribute type 2 has an invalid length.
[  473.269089][T15326] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3508'.
[  473.404836][T15329] syzkaller0: entered promiscuous mode
[  473.422470][T15329] syzkaller0: entered allmulticast mode
[  477.353463][T15368] netlink: 'syz.0.3519': attribute type 2 has an invalid length.
[  477.371394][T15368] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3519'.
[  478.265348][ T5781] Bluetooth: hci0: command 0x0406 tx timeout
[  478.703636][T15392] netlink: 'syz.3.3535': attribute type 10 has an invalid length.
[  478.715179][T15392] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  478.991727][T15398] netlink: 'syz.2.3529': attribute type 2 has an invalid length.
[  479.010716][T15398] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3529'.
[  480.911186][T15432] netlink: 'syz.2.3541': attribute type 2 has an invalid length.
[  480.919195][T15432] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3541'.
[  484.467233][T15465] netlink: 'syz.1.3552': attribute type 2 has an invalid length.
[  484.486526][T15465] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3552'.
[  484.754296][T15475] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3556'.
[  485.208033][T15497] netlink: 'syz.1.3565': attribute type 2 has an invalid length.
[  485.226755][T15497] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3565'.
[  485.467116][T15506] syz.3.3569[15506] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  485.467385][T15506] syz.3.3569[15506] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  486.020944][T15510] sit0: left promiscuous mode
[  486.855904][T15514] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3571'.
[  488.483105][T15544] netlink: 'syz.3.3581': attribute type 10 has an invalid length.
[  488.503337][T15544] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  489.426805][T15553] veth0_vlan: left promiscuous mode
[  489.433127][T15553] veth0_vlan: entered promiscuous mode
[  489.561923][T15559] netlink: 'syz.3.3585': attribute type 2 has an invalid length.
[  489.583868][T15559] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3585'.
[  490.237193][T15577] netlink: 'syz.2.3593': attribute type 10 has an invalid length.
[  490.273461][T15577] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  490.693858][T15593] tap0: tun_chr_ioctl cmd 2147767506
[  490.879099][T15591] wg2: entered promiscuous mode
[  490.922197][T15591] wg2: entered allmulticast mode
[  491.041462][T15601] netlink: 'syz.2.3600': attribute type 2 has an invalid length.
[  491.070587][T15601] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3600'.
[  491.321894][T15609] netlink: 'syz.1.3604': attribute type 10 has an invalid length.
[  491.333840][T15609] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  492.722387][T15635] netlink: 'syz.1.3613': attribute type 2 has an invalid length.
[  492.731493][T15635] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3613'.
[  494.577088][T15680] syz.0.3629[15680] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  494.577271][T15680] syz.0.3629[15680] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  495.735469][T15696] bond_slave_1: mtu less than device minimum
[  495.961522][T15705] sit0: entered allmulticast mode
[  495.996203][T15707] netlink: 'syz.2.3640': attribute type 10 has an invalid length.
[  496.004457][T15707] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  496.163333][T15705] sit0: entered promiscuous mode
[  498.616122][T15712] wg2: entered promiscuous mode
[  498.645320][T15712] wg2: entered allmulticast mode
[  499.718450][T15736] netlink: 'syz.2.3651': attribute type 10 has an invalid length.
[  499.747998][T15736] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  500.658675][T15745] sit0: entered promiscuous mode
[  502.156559][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  502.162963][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  502.794946][T15753] wg2: left promiscuous mode
[  502.814777][T15753] wg2: left allmulticast mode
[  502.924580][T15754] wg2: entered promiscuous mode
[  502.935202][T15754] wg2: entered allmulticast mode
[  503.223094][T15772] netlink: 'syz.2.3664': attribute type 10 has an invalid length.
[  503.245272][T15772] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  503.531705][T15774] syz.0.3666[15774] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  503.720562][T15782] sit0: entered allmulticast mode
[  503.857945][T15782] sit0: entered promiscuous mode
[  505.015873][T15803] syz.3.3676[15803] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  505.016035][T15803] syz.3.3676[15803] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  505.871941][T15798] wg2: entered promiscuous mode
[  505.889469][T15798] wg2: entered allmulticast mode
[  506.999213][T15816] netlink: 'syz.2.3680': attribute type 10 has an invalid length.
[  507.044724][T15816] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  508.314354][T15838] syz.3.3687[15838] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  508.626402][T15846] netlink: 'syz.2.3691': attribute type 10 has an invalid length.
[  508.648342][T15846] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  509.410750][T15864] netlink: 'syz.1.3699': attribute type 2 has an invalid length.
[  509.422460][T15864] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3699'.
[  509.901933][T15873] syz.2.3702[15873] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  510.411519][T15876] syzkaller0: entered promiscuous mode
[  510.478821][T15876] syzkaller0: entered allmulticast mode
[  513.095908][T15886] netlink: 'syz.2.3707': attribute type 10 has an invalid length.
[  513.104063][T15886] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  513.124315][T15891] sit0: left promiscuous mode
[  513.253186][T15892] sit0: entered promiscuous mode
[  513.442573][T15899] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3712'.
[  514.325117][T15928] netlink: 'syz.0.3720': attribute type 10 has an invalid length.
[  514.352381][T15928] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  514.588261][T15936] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3724'.
[  515.548812][T15952] netlink: 'syz.1.3730': attribute type 2 has an invalid length.
[  515.559391][T15952] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3730'.
[  516.276360][T15972] bond_slave_1: mtu less than device minimum
[  516.482931][T15974] netlink: 'syz.1.3735': attribute type 10 has an invalid length.
[  516.525404][T15974] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  517.821531][T15985] netlink: 'syz.3.3742': attribute type 2 has an invalid length.
[  517.844222][T15985] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3742'.
[  518.222399][T15987] sit0: left promiscuous mode
[  518.898813][T16003] pim6reg1: entered promiscuous mode
[  518.905344][T16003] pim6reg1: entered allmulticast mode
[  521.610056][T16018] netlink: 'syz.3.3752': attribute type 10 has an invalid length.
[  521.618986][T16018] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  531.540649][T16105] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  531.551011][T16105] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  531.560025][T16105] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  531.579520][T16105] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  531.592238][T16105] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  531.669730][T16105] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  532.263927][T16113] netlink: 'syz.3.3783': attribute type 10 has an invalid length.
[  532.275336][T16113] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  532.382549][T16102] chnl_net:caif_netlink_parms(): no params data found
[  532.525657][T15894] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  532.642595][T15894] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  532.831260][T15894] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  533.382709][T15894] bond0: (slave netdevsim0): Releasing backup interface
[  533.419431][T15894] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  533.452050][T16142] netlink: 'syz.0.3794': attribute type 10 has an invalid length.
[  533.469125][T16142] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  533.495083][T16102] bridge0: port 1(bridge_slave_0) entered blocking state
[  533.502388][T16102] bridge0: port 1(bridge_slave_0) entered disabled state
[  533.534483][T16102] bridge_slave_0: entered allmulticast mode
[  533.552294][T16102] bridge_slave_0: entered promiscuous mode
[  533.577517][T16102] bridge0: port 2(bridge_slave_1) entered blocking state
[  533.585066][T16102] bridge0: port 2(bridge_slave_1) entered disabled state
[  533.592359][T16102] bridge_slave_1: entered allmulticast mode
[  533.602282][T16102] bridge_slave_1: entered promiscuous mode
[  533.638424][T16149] syz.1.3796[16149] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  533.638566][T16149] syz.1.3796[16149] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  533.768208][T16102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  533.790892][T16105] Bluetooth: hci3: command tx timeout
[  533.934016][T16102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  534.354147][T16102] team0: Port device team_slave_0 added
[  534.430542][T16102] team0: Port device team_slave_1 added
[  534.976118][T16102] batman_adv: batadv0: Adding interface: batadv_slave_0
[  534.983326][T16102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  535.100013][T16102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  535.173394][T16102] batman_adv: batadv0: Adding interface: batadv_slave_1
[  535.180657][T16102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  535.214965][T16102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  535.561258][T16177] netlink: 'syz.3.3805': attribute type 10 has an invalid length.
[  535.572344][T16177] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  535.742045][T16102] hsr_slave_0: entered promiscuous mode
[  535.775532][T16102] hsr_slave_1: entered promiscuous mode
[  535.837935][T16102] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  535.860811][T16102] Cannot create hsr debugfs directory
[  535.869269][T16105] Bluetooth: hci3: command tx timeout
[  537.965252][T16105] Bluetooth: hci3: command tx timeout
[  538.478832][T16231] netlink: 'syz.0.3816': attribute type 10 has an invalid length.
[  538.525181][T16231] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  538.967654][T15894] hsr_slave_0: left promiscuous mode
[  538.982011][T15894] hsr_slave_1: left promiscuous mode
[  538.999755][T15894] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  539.044005][T15894] batman_adv: batadv0: Removing interface: batadv_slave_0
[  539.076149][T15894] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  539.083773][T15894] batman_adv: batadv0: Removing interface: batadv_slave_1
[  539.106362][T15894] bridge_slave_1: left allmulticast mode
[  539.112359][T15894] bridge0: port 2(bridge_slave_1) entered disabled state
[  539.138254][T15894] bridge_slave_0: left allmulticast mode
[  539.144007][T15894] bridge_slave_0: left promiscuous mode
[  539.181420][T15894] bridge0: port 1(bridge_slave_0) entered disabled state
[  539.250621][T15894] veth1_macvtap: left promiscuous mode
[  539.262447][T15894] veth0_macvtap: left promiscuous mode
[  539.268739][T15894] veth1_vlan: left promiscuous mode
[  539.274578][T15894] veth0_vlan: left promiscuous mode
[  540.026005][T16105] Bluetooth: hci3: command tx timeout
[  540.591192][T15894] team0 (unregistering): Port device team_slave_1 removed
[  540.651291][T15894] team0 (unregistering): Port device team_slave_0 removed
[  540.708831][T15894] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  540.770480][T15894] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  541.213009][T15894] bond0 (unregistering): Released all slaves
[  541.321887][T16102] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  541.389091][T16102] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  541.402485][T16102] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  541.432913][T16102] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  542.060952][T16102] 8021q: adding VLAN 0 to HW filter on device bond0
[  542.123724][T16102] 8021q: adding VLAN 0 to HW filter on device team0
[  542.162483][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  542.169867][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  542.283370][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  542.290702][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  543.601958][T16102] 8021q: adding VLAN 0 to HW filter on device batadv0
[  544.599218][T16351] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3848'.
[  545.139426][T16102] veth0_vlan: entered promiscuous mode
[  545.151380][T16377] sit0: left promiscuous mode
[  545.293527][T16380] sit0: entered promiscuous mode
[  548.893792][T16394] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3860'.
[  549.708301][T16102] veth1_vlan: entered promiscuous mode
[  553.529239][T16431] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3870'.
[  553.567456][T16102] veth0_macvtap: entered promiscuous mode
[  554.483200][T16102] veth1_macvtap: entered promiscuous mode
[  555.525867][T16102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  555.538603][T16102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  555.550465][T16102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  555.565041][T16102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  555.575065][T16102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  555.586963][T16102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  555.598741][T16102] batman_adv: batadv0: Interface activated: batadv_slave_0
[  556.180323][T16102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  556.207167][T16102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  556.219650][T16102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  556.231577][T16102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  556.245444][T16102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  556.263888][T16102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  556.277486][T16102] batman_adv: batadv0: Interface activated: batadv_slave_1
[  556.293689][T16102] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  556.345191][T16102] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  556.354000][T16102] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  556.383233][T16102] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  557.182236][T16468] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3878'.
[  557.298391][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  557.347539][ T1083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  557.367022][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  557.400645][ T1083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  561.412511][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  561.425395][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  561.435373][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  561.445726][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  561.453927][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  561.474604][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  562.218289][T16530] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3888'.
[  562.615394][T16516] chnl_net:caif_netlink_parms(): no params data found
[  562.849858][  T161] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  562.902614][T16540] sit0: entered promiscuous mode
[  563.007721][T14867] 
[  563.010300][T14867] ======================================================
[  563.017357][T14867] WARNING: possible circular locking dependency detected
[  563.024429][T14867] syzkaller #0 Not tainted
[  563.028976][T14867] ------------------------------------------------------
[  563.036288][T14867] kworker/1:9/14867 is trying to acquire lock:
[  563.042488][T14867] ffff8880b8f29370 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x166/0x790
[  563.051238][T14867] 
[  563.051238][T14867] but task is already holding lock:
[  563.058653][T14867] ffff8880b8f29598 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270
[  563.067604][T14867] 
[  563.067604][T14867] which lock already depends on the new lock.
[  563.067604][T14867] 
[  563.078069][T14867] 
[  563.078069][T14867] the existing dependency chain (in reverse order) is:
[  563.087226][T14867] 
[  563.087226][T14867] -> #1 (&base->lock){-.-.}-{2:2}:
[  563.094774][T14867]        _raw_spin_lock_irqsave+0xb4/0x100
[  563.100635][T14867]        lock_timer_base+0x123/0x270
[  563.105981][T14867]        __mod_timer+0xf9/0xdb0
[  563.110879][T14867]        queue_delayed_work_on+0x131/0x200
[  563.116713][T14867]        kvfree_call_rcu+0x54d/0x790
[  563.122135][T14867]        rtnl_register_internal+0x486/0x590
[  563.128171][T14867]        rtnl_register+0x32/0x70
[  563.133169][T14867]        ip_rt_init+0x2ec/0x390
[  563.138111][T14867]        ip_init+0xe/0x20
[  563.142503][T14867]        inet_init+0x2c1/0x3e0
[  563.147318][T14867]        do_one_initcall+0x242/0x790
[  563.152641][T14867]        do_initcall_level+0x137/0x1f0
[  563.158130][T14867]        do_initcalls+0x69/0xd0
[  563.163044][T14867]        kernel_init_freeable+0x3ed/0x580
[  563.168806][T14867]        kernel_init+0x1d/0x1c0
[  563.173698][T14867]        ret_from_fork+0x48/0x80
[  563.178665][T14867]        ret_from_fork_asm+0x11/0x20
[  563.184099][T14867] 
[  563.184099][T14867] -> #0 (krc.lock){..-.}-{2:2}:
[  563.191164][T14867]        __lock_acquire+0x2df1/0x7d40
[  563.196555][T14867]        lock_acquire+0x19e/0x420
[  563.201607][T14867]        _raw_spin_lock+0x2e/0x40
[  563.206670][T14867]        kvfree_call_rcu+0x166/0x790
[  563.212074][T14867]        trie_delete_elem+0x534/0x6a0
[  563.217481][T14867]        bpf_prog_2c29ac5cdc6b1842+0x42/0x46
[  563.223497][T14867]        bpf_trace_run3+0x3a0/0x470
[  563.228721][T14867]        __bpf_trace_timer_start+0x17f/0x1d0
[  563.234730][T14867]        enqueue_timer+0x3e0/0x550
[  563.239866][T14867]        __mod_timer+0x977/0xdb0
[  563.244858][T14867]        queue_delayed_work_on+0x131/0x200
[  563.250718][T14867]        process_scheduled_works+0xa5d/0x15d0
[  563.256819][T14867]        worker_thread+0xa55/0xfc0
[  563.261974][T14867]        kthread+0x2fa/0x390
[  563.266591][T14867]        ret_from_fork+0x48/0x80
[  563.271558][T14867]        ret_from_fork_asm+0x11/0x20
[  563.276872][T14867] 
[  563.276872][T14867] other info that might help us debug this:
[  563.276872][T14867] 
[  563.287121][T14867]  Possible unsafe locking scenario:
[  563.287121][T14867] 
[  563.294592][T14867]        CPU0                    CPU1
[  563.300069][T14867]        ----                    ----
[  563.305454][T14867]   lock(&base->lock);
[  563.309549][T14867]                                lock(krc.lock);
[  563.315901][T14867]                                lock(&base->lock);
[  563.322528][T14867]   lock(krc.lock);
[  563.326487][T14867] 
[  563.326487][T14867]  *** DEADLOCK ***
[  563.326487][T14867] 
[  563.334651][T14867] 4 locks held by kworker/1:9/14867:
[  563.339963][T14867]  #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  563.351137][T14867]  #1: ffffc9000564fd00 ((work_completion)(&(&hwstats->traffic_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  563.364495][T14867]  #2: ffff8880b8f29598 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270
[  563.373904][T14867]  #3: ffffffff8d12ffe0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run3+0x10e/0x470
[  563.383364][T14867] 
[  563.383364][T14867] stack backtrace:
[  563.389300][T14867] CPU: 1 PID: 14867 Comm: kworker/1:9 Not tainted syzkaller #0
[  563.396881][T14867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  563.406966][T14867] Workqueue: events nsim_dev_hwstats_traffic_work
[  563.413529][T14867] Call Trace:
[  563.416888][T14867]  <TASK>
[  563.419880][T14867]  dump_stack_lvl+0x18c/0x250
[  563.424586][T14867]  ? load_image+0x400/0x400
[  563.429121][T14867]  ? show_regs_print_info+0x20/0x20
[  563.434431][T14867]  ? print_circular_bug+0x12b/0x1a0
[  563.439659][T14867]  check_noncircular+0x2fc/0x400
[  563.444638][T14867]  ? print_deadlock_bug+0x5d0/0x5d0
[  563.449949][T14867]  ? lockdep_lock+0xf5/0x230
[  563.454592][T14867]  ? _find_first_zero_bit+0xd3/0x100
[  563.459928][T14867]  __lock_acquire+0x2df1/0x7d40
[  563.464831][T14867]  ? __stack_depot_save+0x560/0x630
[  563.470066][T14867]  ? verify_lock_unused+0x140/0x140
[  563.475403][T14867]  ? kasan_save_stack+0x4d/0x60
[  563.480276][T14867]  ? kasan_save_stack+0x3e/0x60
[  563.485147][T14867]  ? __kasan_record_aux_stack+0xaf/0xc0
[  563.490728][T14867]  ? kvfree_call_rcu+0xee/0x790
[  563.495606][T14867]  ? trie_delete_elem+0x534/0x6a0
[  563.500661][T14867]  ? bpf_prog_2c29ac5cdc6b1842+0x42/0x46
[  563.506415][T14867]  ? bpf_trace_run3+0x3a0/0x470
[  563.511379][T14867]  ? __bpf_trace_timer_start+0x17f/0x1d0
[  563.517044][T14867]  ? enqueue_timer+0x3e0/0x550
[  563.521828][T14867]  ? __mod_timer+0x977/0xdb0
[  563.526452][T14867]  ? queue_delayed_work_on+0x131/0x200
[  563.531941][T14867]  ? process_scheduled_works+0xa5d/0x15d0
[  563.537687][T14867]  ? worker_thread+0xa55/0xfc0
[  563.542476][T14867]  ? kthread+0x2fa/0x390
[  563.546754][T14867]  ? ret_from_fork+0x48/0x80
[  563.551461][T14867]  ? ret_from_fork_asm+0x11/0x20
[  563.556438][T14867]  lock_acquire+0x19e/0x420
[  563.560962][T14867]  ? kvfree_call_rcu+0x166/0x790
[  563.565933][T14867]  ? read_lock_is_recursive+0x20/0x20
[  563.571336][T14867]  ? __phys_addr+0xba/0x170
[  563.575868][T14867]  _raw_spin_lock+0x2e/0x40
[  563.580394][T14867]  ? kvfree_call_rcu+0x166/0x790
[  563.585364][T14867]  kvfree_call_rcu+0x166/0x790
[  563.590199][T14867]  ? call_rcu+0x950/0x950
[  563.594559][T14867]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  563.600484][T14867]  ? _raw_spin_unlock+0x40/0x40
[  563.605448][T14867]  trie_delete_elem+0x534/0x6a0
[  563.610332][T14867]  ? bpf_trace_run3+0x10e/0x470
[  563.615213][T14867]  bpf_prog_2c29ac5cdc6b1842+0x42/0x46
[  563.620696][T14867]  bpf_trace_run3+0x3a0/0x470
[  563.625410][T14867]  ? bpf_trace_run2+0x3e0/0x3e0
[  563.630280][T14867]  ? __bpf_trace_timer_start+0x15c/0x1d0
[  563.635941][T14867]  __bpf_trace_timer_start+0x17f/0x1d0
[  563.641444][T14867]  ? __bpf_trace_timer_class+0x100/0x100
[  563.647106][T14867]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  563.653116][T14867]  ? _raw_spin_unlock+0x40/0x40
[  563.658004][T14867]  ? _raw_spin_lock_irqsave+0xc0/0x100
[  563.663489][T14867]  ? _raw_spin_lock+0x40/0x40
[  563.668189][T14867]  enqueue_timer+0x3e0/0x550
[  563.672800][T14867]  __mod_timer+0x977/0xdb0
[  563.677250][T14867]  queue_delayed_work_on+0x131/0x200
[  563.682565][T14867]  ? delayed_work_timer_fn+0x80/0x80
[  563.687876][T14867]  ? nsim_dev_hwstats_traffic_work+0x159/0x1b0
[  563.694061][T14867]  ? process_scheduled_works+0x96f/0x15d0
[  563.699903][T14867]  process_scheduled_works+0xa5d/0x15d0
[  563.705496][T14867]  ? assign_work+0x430/0x430
[  563.710118][T14867]  ? assign_work+0x3d0/0x430
[  563.714746][T14867]  worker_thread+0xa55/0xfc0
[  563.719378][T14867]  kthread+0x2fa/0x390
[  563.723482][T14867]  ? pr_cont_work+0x560/0x560
[  563.728183][T14867]  ? kthread_blkcg+0xd0/0xd0
[  563.732852][T14867]  ret_from_fork+0x48/0x80
[  563.737293][T14867]  ? kthread_blkcg+0xd0/0xd0
[  563.741903][T14867]  ret_from_fork_asm+0x11/0x20
[  563.746702][T14867]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  563.793863][ T5780] Bluetooth: hci0: command tx timeout
[  563.802137][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  563.808749][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  563.962268][  T161] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  564.321123][  T161] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  564.489480][  T161] bond0: (slave netdevsim0): Releasing backup interface
[  564.500776][  T161] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  565.702174][  T161] hsr_slave_0: left promiscuous mode
[  565.716431][  T161] hsr_slave_1: left promiscuous mode
[  565.725799][  T161] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  565.733262][  T161] batman_adv: batadv0: Removing interface: batadv_slave_0
[  565.755669][  T161] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  565.763150][  T161] batman_adv: batadv0: Removing interface: batadv_slave_1
[  565.771634][  T161] bridge_slave_1: left allmulticast mode
[  565.777465][  T161] bridge_slave_1: left promiscuous mode
[  565.783340][  T161] bridge0: port 2(bridge_slave_1) entered disabled state
[  565.792637][  T161] bridge_slave_0: left allmulticast mode
[  565.799069][  T161] bridge_slave_0: left promiscuous mode
[  565.805641][  T161] bridge0: port 1(bridge_slave_0) entered disabled state
[  565.823945][  T161] veth1_macvtap: left promiscuous mode
[  565.831597][  T161] veth0_macvtap: left promiscuous mode
[  565.838568][  T161] veth1_vlan: left promiscuous mode
[  565.843933][  T161] veth0_vlan: left promiscuous mode
[  566.119768][  T161] team0 (unregistering): Port device team_slave_1 removed
[  566.151492][  T161] team0 (unregistering): Port device team_slave_0 removed
[  566.183891][  T161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  566.213349][  T161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  566.335918][  T161] bond0 (unregistering): Released all slaves
[  566.799544][  T161] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  566.840813][  T161] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  566.917612][  T161] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  567.010959][  T161] bond0: (slave netdevsim0): Releasing backup interface
[  567.022102][  T161] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  567.172271][  T161] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  567.233806][  T161] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  567.292022][  T161] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  567.371361][  T161] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  567.516123][  T161] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  567.573815][  T161] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  567.623560][  T161] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  567.690528][  T161] bond0: (slave netdevsim0): Releasing backup interface
[  567.700631][  T161] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  569.185661][  T161] hsr_slave_0: left promiscuous mode
[  569.191720][  T161] hsr_slave_1: left promiscuous mode
[  569.201995][  T161] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  569.210128][  T161] batman_adv: batadv0: Removing interface: batadv_slave_0
[  569.218587][  T161] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  569.226381][  T161] batman_adv: batadv0: Removing interface: batadv_slave_1
[  569.234192][  T161] bridge_slave_1: left allmulticast mode
[  569.240433][  T161] bridge_slave_1: left promiscuous mode
[  569.246450][  T161] bridge0: port 2(bridge_slave_1) entered disabled state
[  569.261442][  T161] bridge_slave_0: left allmulticast mode
[  569.275056][  T161] bridge_slave_0: left promiscuous mode
[  569.280929][  T161] bridge0: port 1(bridge_slave_0) entered disabled state
[  569.295186][  T161] hsr_slave_0: left promiscuous mode
[  569.301147][  T161] hsr_slave_1: left promiscuous mode
[  569.309967][  T161] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  569.317673][  T161] batman_adv: batadv0: Removing interface: batadv_slave_0
[  569.326449][  T161] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  569.333990][  T161] batman_adv: batadv0: Removing interface: batadv_slave_1
[  569.342213][  T161] bridge_slave_1: left allmulticast mode
[  569.348181][  T161] bridge_slave_1: left promiscuous mode
[  569.353928][  T161] bridge0: port 2(bridge_slave_1) entered disabled state
[  569.363445][  T161] bridge_slave_0: left allmulticast mode
[  569.369532][  T161] bridge_slave_0: left promiscuous mode
[  569.375896][  T161] bridge0: port 1(bridge_slave_0) entered disabled state
[  569.391292][  T161] hsr_slave_0: left promiscuous mode
[  569.398330][  T161] hsr_slave_1: left promiscuous mode
[  569.404344][  T161] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  569.412207][  T161] batman_adv: batadv0: Removing interface: batadv_slave_0
[  569.422570][  T161] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  569.430355][  T161] batman_adv: batadv0: Removing interface: batadv_slave_1
[  569.438605][  T161] bridge_slave_1: left allmulticast mode
[  569.444291][  T161] bridge_slave_1: left promiscuous mode
[  569.451982][  T161] bridge0: port 2(bridge_slave_1) entered disabled state
[  569.461571][  T161] bridge_slave_0: left allmulticast mode
[  569.467799][  T161] bridge_slave_0: left promiscuous mode
[  569.473718][  T161] bridge0: port 1(bridge_slave_0) entered disabled state
[  569.491271][  T161] veth1_macvtap: left promiscuous mode
[  569.496935][  T161] veth0_macvtap: left promiscuous mode
[  569.502616][  T161] veth1_vlan: left promiscuous mode
[  569.511304][  T161] veth0_vlan: left promiscuous mode
[  569.518108][  T161] veth1_macvtap: left promiscuous mode
[  569.523686][  T161] veth0_macvtap: left promiscuous mode
[  569.532757][  T161] veth1_vlan: left promiscuous mode
[  569.538185][  T161] veth0_vlan: left promiscuous mode
[  569.548050][  T161] veth1_macvtap: left promiscuous mode
[  569.553659][  T161] veth0_macvtap: left promiscuous mode
[  569.559950][  T161] veth1_vlan: left promiscuous mode
[  569.567224][  T161] veth0_vlan: left promiscuous mode
[  570.062954][  T161] team0 (unregistering): Port device team_slave_1 removed
[  570.093035][  T161] team0 (unregistering): Port device team_slave_0 removed
[  570.125410][  T161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  570.156302][  T161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  570.303912][  T161] bond0 (unregistering): Released all slaves
[  570.516358][  T161] team0 (unregistering): Port device team_slave_1 removed
[  570.548220][  T161] team0 (unregistering): Port device team_slave_0 removed
[  570.575301][  T161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  570.603689][  T161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  570.703877][  T161] bond0 (unregistering): Released all slaves
[  570.775970][  T161] bond0 (unregistering): Released all slaves
[  570.931204][  T161] team0 (unregistering): Port device team_slave_1 removed
[  570.966139][  T161] team0 (unregistering): Port device team_slave_0 removed
[  570.996837][  T161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  571.011684][  T161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  571.104110][  T161] bond0 (unregistering): Released all slaves