last executing test programs:

1m25.876519476s ago: executing program 3:
socket$kcm(0x2, 0x0, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec472db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc626b424da1e8c825357861aa50054686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf4d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b0100000000000000b0255f347160ac83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff7020000eea2ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072913152c845cf572cf39310d522a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8abafe4f0f6ea508000000a0c548552b571bed5647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e5251aae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b6588f6008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda34536020000fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bf8d9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177c16810fae053349609000000000000009a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f8100257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33384253af570f4ef9c0254afdd89c73943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b70304669c447c71ca4d54c82395a3958d576c42c08a4d5adfb58306164cc7d870b881f8084a3d185a63c6b05292186095c1f407ce74297d16470988f1647f7b6f6cdc6ab8be3cacc325df963c2cb80cfe07ded6d55f556be0a3dfa85f0a0ace879b0a0a95cd07b66fbbc73d0945beebe87a21dd46fd5804cd63c01199c78b1d774b17686fe3aeadebc4f3d2e6af1110466fecf41384f1b5c96531700db5aefa1a5c17a9ebcaf334110ed582999208cc7ef977ceb2f8a5aa7d00000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r2, 0x1, 0xd, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

1m24.793644508s ago: executing program 1:
socket$kcm(0x10, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000700)={0x1, &(0x7f0000000600)=[{0x20, 0x0, 0x0, 0xfffff021}]})
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x4001, 0x0, 0x0, 0x0, 0x0, 0xffffdffe, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffbfe}, 0x0, 0x0, r0, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
r3 = socket$kcm(0x23, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000000)=@phonet={0x23, 0x2}, 0x80, 0x0}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f91524fc60040207000a000200053582c137143e37000c0980fc0b10930300", 0x2e}], 0x1}, 0x40040d0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0185879, &(0x7f0000000040))
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r4=>0xffffffffffffffff})
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfdef)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000100)=r5)
r6 = socket$kcm(0xa, 0x6, 0x0)
setsockopt$sock_attach_bpf(r6, 0x10d, 0xe, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040), 0xcf)
gettid()
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$kcm(0xa, 0x3, 0x3a)

1m11.495592432s ago: executing program 3:
socket$kcm(0x2, 0x0, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r2, 0x1, 0xd, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

1m8.301097872s ago: executing program 1:
socket$kcm(0x10, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000700)={0x1, &(0x7f0000000600)=[{0x20, 0x0, 0x0, 0xfffff021}]})
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x4001, 0x0, 0x0, 0x0, 0x0, 0xffffdffe, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffbfe}, 0x0, 0x0, r0, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
r3 = socket$kcm(0x23, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000000)=@phonet={0x23, 0x2}, 0x80, 0x0}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f91524fc60040207000a000200053582c137143e37000c0980fc0b10930300", 0x2e}], 0x1}, 0x40040d0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0185879, &(0x7f0000000040))
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r4=>0xffffffffffffffff})
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfdef)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000100)=r5)
r6 = socket$kcm(0xa, 0x6, 0x0)
setsockopt$sock_attach_bpf(r6, 0x10d, 0xe, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040), 0xcf)
gettid()
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$kcm(0xa, 0x3, 0x3a)

55.186138861s ago: executing program 3:
socket$kcm(0x2, 0x0, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r2, 0x1, 0xd, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

54.21040622s ago: executing program 1:
socket$kcm(0x10, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000700)={0x1, &(0x7f0000000600)=[{0x20, 0x0, 0x0, 0xfffff021}]})
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x4001, 0x0, 0x0, 0x0, 0x0, 0xffffdffe, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffbfe}, 0x0, 0x0, r0, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
r3 = socket$kcm(0x23, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000000)=@phonet={0x23, 0x2}, 0x80, 0x0}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f91524fc60040207000a000200053582c137143e37000c0980fc0b10930300", 0x2e}], 0x1}, 0x40040d0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0185879, &(0x7f0000000040))
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r4=>0xffffffffffffffff})
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfdef)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000100)=r5)
r6 = socket$kcm(0xa, 0x6, 0x0)
setsockopt$sock_attach_bpf(r6, 0x10d, 0xe, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040), 0xcf)
gettid()
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$kcm(0xa, 0x3, 0x3a)

43.237860032s ago: executing program 3:
socket$kcm(0x2, 0x0, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r2, 0x1, 0xd, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

40.029881234s ago: executing program 1:
socket$kcm(0x10, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000700)={0x1, &(0x7f0000000600)=[{0x20, 0x0, 0x0, 0xfffff021}]})
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x4001, 0x0, 0x0, 0x0, 0x0, 0xffffdffe, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffbfe}, 0x0, 0x0, r0, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
r3 = socket$kcm(0x23, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000000)=@phonet={0x23, 0x2}, 0x80, 0x0}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f91524fc60040207000a000200053582c137143e37000c0980fc0b10930300", 0x2e}], 0x1}, 0x40040d0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0185879, &(0x7f0000000040))
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r4=>0xffffffffffffffff})
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfdef)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000100)=r5)
r6 = socket$kcm(0xa, 0x6, 0x0)
setsockopt$sock_attach_bpf(r6, 0x10d, 0xe, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040), 0xcf)
gettid()
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$kcm(0xa, 0x3, 0x3a)

29.478846958s ago: executing program 1:
socket$kcm(0x10, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000700)={0x1, &(0x7f0000000600)=[{0x20, 0x0, 0x0, 0xfffff021}]})
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x4001, 0x0, 0x0, 0x0, 0x0, 0xffffdffe, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffbfe}, 0x0, 0x0, r0, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
r3 = socket$kcm(0x23, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000000)=@phonet={0x23, 0x2}, 0x80, 0x0}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f91524fc60040207000a000200053582c137143e37000c0980fc0b10930300", 0x2e}], 0x1}, 0x40040d0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0185879, &(0x7f0000000040))
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r4=>0xffffffffffffffff})
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfdef)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000100)=r5)
r6 = socket$kcm(0xa, 0x6, 0x0)
setsockopt$sock_attach_bpf(r6, 0x10d, 0xe, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040), 0xcf)
gettid()
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$kcm(0xa, 0x3, 0x3a)

29.466539234s ago: executing program 3:
socket$kcm(0x2, 0x0, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec472db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc626b424da1e8c825357861aa50054686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf4d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b0100000000000000b0255f347160ac83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff7020000eea2ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072913152c845cf572cf39310d522a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8abafe4f0f6ea508000000a0c548552b571bed5647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e5251aae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b6588f6008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda34536020000fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bf8d9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177c16810fae053349609000000000000009a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f8100257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33384253af570f4ef9c0254afdd89c73943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b70304669c447c71ca4d54c82395a3958d576c42c08a4d5adfb58306164cc7d870b881f8084a3d185a63c6b05292186095c1f407ce74297d16470988f1647f7b6f6cdc6ab8be3cacc325df963c2cb80cfe07ded6d55f556be0a3dfa85f0a0ace879b0a0a95cd07b66fbbc73d0945beebe87a21dd46fd5804cd63c01199c78b1d774b17686fe3aeadebc4f3d2e6af1110466fecf41384f1b5c96531700db5aefa1a5c17a9ebcaf334110ed582999208cc7ef977ceb2f8a5aa7d00000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r2, 0x1, 0xd, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

4.272402754s ago: executing program 0:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x5, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x2}, 0x48)

3.832951846s ago: executing program 0:
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair(0x0, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.222184144s ago: executing program 4:
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd8e, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280d, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.215951373s ago: executing program 3:
socket$kcm(0x2, 0x0, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r2, 0x1, 0xd, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

3.116168578s ago: executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0)

2.828005502s ago: executing program 0:
socket$kcm(0xa, 0x0, 0x0)
socket$kcm(0x10, 0x0, 0x10)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x88, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_int(r0, &(0x7f0000000100), 0x1001)
close(0xffffffffffffffff)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
socket$kcm(0x1e, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func, @map_fd, @generic, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x2}}]}, 0x0, 0x4}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x50)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000029c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
getpid()

2.510682273s ago: executing program 4:
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup, 0xffffffffffffffff, 0x0, 0x2020, 0xffffffffffffffff, @link_id}, 0x20)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20270, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x1}, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)

2.368651623s ago: executing program 0:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000033c100000000950000000000000068cf0aa5837f378bedc2f98132ba652967ec9346fa6598ecd5257a6db00abfe4125aaf7e08d75a264cc6337fa7d77d4370dbf16e2af65d0942dfed8cf449a3954418a892e16850058be11b95b8e33e2a3bd8fbf35ad623f2314d549400326d82cb5a0622f0d02e7dc19ce561a7052064b6c50caef2295a6cbbad645855a9eeb47b6db3d74d9dad02b8b38490634ce4d226f20e8cfcf1352742e8f8fc9e0993326109781d05a41ec670c182b824b13ef14b9fa3f4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xa, 0x2, 0x8}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f00000004c0), &(0x7f0000000200)=r0}, 0x20)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}], {0x95, 0x0, 0x0, 0x1000000}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147}, 0x80)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3, <r4=>0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000380), 0xffffd6c0, r4}, 0x38)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000080)={'veth1_to_bond\x00'})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x1c, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa1000000000000", @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

2.163389887s ago: executing program 1:
socket$kcm(0x10, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000700)={0x1, &(0x7f0000000600)=[{0x20, 0x0, 0x0, 0xfffff021}]})
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x4001, 0x0, 0x0, 0x0, 0x0, 0xffffdffe, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffbfe}, 0x0, 0x0, r0, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
r3 = socket$kcm(0x23, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000000)=@phonet={0x23, 0x2}, 0x80, 0x0}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f91524fc60040207000a000200053582c137143e37000c0980fc0b10930300", 0x2e}], 0x1}, 0x40040d0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0185879, &(0x7f0000000040))
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r4=>0xffffffffffffffff})
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfdef)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000100)=r5)
r6 = socket$kcm(0xa, 0x6, 0x0)
setsockopt$sock_attach_bpf(r6, 0x10d, 0xe, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040), 0xcf)
gettid()
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$kcm(0xa, 0x3, 0x3a)

1.961223997s ago: executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10)
r3 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0)
r4 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
write$cgroup_freezer_state(r3, &(0x7f0000000400)='FROZEN\x00', 0x7)
write$cgroup_freezer_state(r3, &(0x7f0000000080)='THAWED\x00', 0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

1.582777976s ago: executing program 2:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x5, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x2}, 0x48)

1.470083302s ago: executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0185879, &(0x7f0000000040))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='9p_client_req\x00', r1}, 0x10)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
setsockopt$sock_attach_bpf(r0, 0x1, 0x14, &(0x7f0000000040)=r3, 0x3b)
recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)

1.305924608s ago: executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="140100000000b2000500000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0x43400)
ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000040)=0x1)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00', 0x0, 0x10}, 0x18)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0x400000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r4, &(0x7f0000000000), 0x2a979d)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x88}})

1.204306812s ago: executing program 4:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/2767], &(0x7f00000001c0)='GPL\x00'}, 0x48)

303.214969ms ago: executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x7, 0x5, 0x809}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1808"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20)

245.13718ms ago: executing program 2:
getpid()
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="850200004f000000570000000000000085000000070000009500000000000000f7670880271e3503200ffa95a2c8c037c5a142dfa86a620e77d192ba6287066c5197fabd5f7010e80001000000000000dc39cd340101000000000000e22ff5dde54704d25c79949c04000000000000000ea7c0aac28de194f4480000000098d3712ca47044e06324637e93363e5bccbaa2bb755af3d576090c4867a7b4393e366c6386d5ec7209d0310010000000000000a7f550afc852003bad0742c62f7846c744ae6af3c04143cca8d95c2c505d5e37102124d85cec074c6949e1c768fb9c5ea38ee9fe5f170f4104dbaba408ac3abe6c4d7f47ef6d02ba5388dacecf7eb6baaa4a9779f8555eaea768c1f2c221c110ef050000000e575874ffffff7f000000000000004004b8c5a660459ac9ae0b21675a324812696a62d992a4f8dc8dcba00b1b2d2547c45b0c52087b5efabf84d6b9a95166bd008ea0327b56c0ebfb19a34268335648e1f844ce328c10752a42dca52fb98c1452b651ebf942f7297f7b2744419a2f238f173d0cd46dafc6e95500f53e53090000000000000075d9c07d591019c4da7aea2487d677eb49f8982b6ce629b3b20000000000000000000000000900000000000000000000004e41ffd11d41614f0fa1bd91245d6bd59ef2dc12ca89be9196deffa79f388202637595fef57b7f0c45ed12dc24fbb3c7d3eb03d3d8cf9faa8a97dcf608fa767d9169444c759c3045c6a3777b6aba5fd7c76ff5565ad3bfe59182593182b36fc29865c66e61d81be1afd3462da5a18136a4f79c1af28844b5010000000aed9821b1e4c6f2e2f96e69f37b82dff2693a38c98bc46ea286bd6b74d7817de8b61d28b052b1bb195190c07d4fc61a4002b56497d37803f5c328e236d1f86b25ff27dad249afd2cca8663d4c06efd9e96c6be5daabf68f5434690d8ca3bec085dd3a1e94c1dba6353e6ac4437cb955afb2a559ce95e5c0a0352e012000"/722], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15)

158.486052ms ago: executing program 0:
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x18}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1c0042, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080))
write$cgroup_devices(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="1e0308004d8c71ef2885634a8270000411"], 0xffdd)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2177aa"], 0xfdef)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef)

133.111287ms ago: executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

69.70665ms ago: executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000002c0), 0x8, 0x10, &(0x7f0000000100)={0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0xfffffffffffffdda}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f2f, 0x0, 0x0, &(0x7f00000007c0), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)}, 0x50)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$cgroup_ro(r1, &(0x7f0000000380)='blkio.bfq.time\x00', 0x0, 0x0)
recvmsg$unix(r3, &(0x7f0000000a00)={&(0x7f00000008c0), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000940)=""/168, 0xa8}], 0x1}, 0x40000001)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r7}, 0x10)
write$cgroup_pid(r5, &(0x7f00000000c0), 0x12)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400)
perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r8}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x240, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x8}, 0x8)

0s ago: executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x7f}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000040)='ext4_unlink_enter\x00', r1}, 0x10)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000280))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='ext4_es_find_extent_range_enter\x00', r5}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='ext4_es_find_extent_range_enter\x00', r6}, 0x10)
mkdir(&(0x7f0000000540)='./file0\x00', 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r7}, 0x10)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}], {0x95, 0x0, 0x0, 0x1000000}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147}, 0x80)
unlink(&(0x7f0000000140)='./cgroup\x00')

kernel console output (not intermixed with test programs):

m1 netdevsim1: renamed from eth1
[  163.082480][ T8097] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  163.207356][ T8097] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  163.243144][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.250332][ T5168] bridge0: port 1(bridge_slave_0) entered forwarding state
[  163.291825][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.299021][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state
[  163.431848][ T8084] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  163.445507][ T8084] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  163.564247][ T8376] netlink: 'syz-executor.2': attribute type 33 has an invalid length.
[  163.576037][ T8376] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.2'.
[  163.775652][ T8097] 8021q: adding VLAN 0 to HW filter on device bond0
[  163.843683][ T8097] 8021q: adding VLAN 0 to HW filter on device team0
[  163.914558][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.921708][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state
[  163.952755][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.959969][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state
[  164.338370][ T8084] 8021q: adding VLAN 0 to HW filter on device batadv0
[  164.473441][ T8084] veth0_vlan: entered promiscuous mode
[  164.531590][ T8084] veth1_vlan: entered promiscuous mode
[  164.632721][ T8084] veth0_macvtap: entered promiscuous mode
[  164.673196][ T8084] veth1_macvtap: entered promiscuous mode
[  164.689339][ T8422] netlink: 'syz-executor.2': attribute type 33 has an invalid length.
[  164.700554][ T8422] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.2'.
[  164.757218][ T8097] 8021q: adding VLAN 0 to HW filter on device batadv0
[  164.806165][ T8084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.827367][ T8084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.853788][ T8084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.876761][ T8084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.896844][ T8084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.933612][ T8084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.960855][ T8084] batman_adv: batadv0: Interface activated: batadv_slave_0
[  164.986106][ T8084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.024152][ T8084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.043770][ T8084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.063755][ T8084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.073859][ T8084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.085366][ T8084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.097371][ T8084] batman_adv: batadv0: Interface activated: batadv_slave_1
[  165.158525][ T8084] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  165.172300][ T8084] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  165.182646][ T8084] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  165.191986][ T8084] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  165.574463][ T5901] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  165.587847][ T5901] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.608257][ T8097] veth0_vlan: entered promiscuous mode
[  165.648238][ T5901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  165.671341][ T8097] veth1_vlan: entered promiscuous mode
[  165.690133][ T5901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.901438][ T8097] veth0_macvtap: entered promiscuous mode
[  165.940444][ T8097] veth1_macvtap: entered promiscuous mode
[  166.099296][ T8097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.111989][ T8097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.122884][ T8097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.137809][ T8097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.148286][ T8097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.159108][ T8097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.169676][ T8097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.180700][ T8097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.236147][ T8097] batman_adv: batadv0: Interface activated: batadv_slave_0
[  166.243457][ T8466] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'.
[  166.275339][ T8097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.295017][ T8097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.307501][ T8097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.318536][ T8097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.335787][ T8097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.351924][ T8097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.363511][ T8097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.379952][ T8097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.401904][ T8097] batman_adv: batadv0: Interface activated: batadv_slave_1
[  166.422365][ T8478] : renamed from bond0 (while UP)
[  166.562116][ T8475] netlink: 'syz-executor.4': attribute type 21 has an invalid length.
[  166.596440][ T8097] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  166.606760][ T8097] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  166.627849][ T8097] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  166.656475][ T8097] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  166.700202][ T8486] netlink: 'syz-executor.4': attribute type 21 has an invalid length.
[  167.082126][ T5901] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.211899][ T8493] netlink: 'syz-executor.2': attribute type 15 has an invalid length.
[  167.229154][ T8493] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'.
[  167.296940][ T8405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.331576][ T8405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.355512][ T8407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.363367][ T8407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.803522][ T5127] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  167.813390][ T5127] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  167.828073][ T5127] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  167.836787][ T5127] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  167.844635][ T5127] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  167.848386][ T8519] netlink: 'syz-executor.2': attribute type 274 has an invalid length.
[  167.866159][ T8519] netlink: 134308 bytes leftover after parsing attributes in process `syz-executor.2'.
[  167.870203][ T5127] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  167.880981][ T8519] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  167.893268][ T8519] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  167.941057][ T5901] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.011208][ T5901] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.082710][ T5901] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.158135][ T8520] chnl_net:caif_netlink_parms(): no params data found
[  168.281444][ T5901] bridge_slave_1: left allmulticast mode
[  168.288140][ T5901] bridge_slave_1: left promiscuous mode
[  168.294845][ T5901] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.305786][ T5901] bridge_slave_0: left allmulticast mode
[  168.312885][ T5901] bridge_slave_0: left promiscuous mode
[  168.318976][ T5901] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.422092][ T5901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  169.480994][ T5901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  169.516360][ T5901] bond0 (unregistering): Released all slaves
[  169.667005][ T8520] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.694613][ T8520] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.712554][ T8520] bridge_slave_0: entered allmulticast mode
[  169.723873][ T8520] bridge_slave_0: entered promiscuous mode
[  169.852466][ T8520] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.881615][ T5121] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  169.883657][ T8520] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.897350][ T5121] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  169.905576][ T5121] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  169.908595][ T8520] bridge_slave_1: entered allmulticast mode
[  169.927156][ T5121] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  169.934370][ T4492] Bluetooth: hci0: command tx timeout
[  169.944934][ T5121] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  169.952536][ T5121] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  169.963644][ T8520] bridge_slave_1: entered promiscuous mode
[  170.100917][ T8520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  170.167350][ T8520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  170.249065][ T5901] hsr_slave_0: left promiscuous mode
[  170.259363][ T5901] hsr_slave_1: left promiscuous mode
[  170.265722][ T5901] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  170.275486][ T5901] batman_adv: batadv0: Removing interface: batadv_slave_0
[  170.289878][ T5901] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  170.299081][ T5901] batman_adv: batadv0: Removing interface: batadv_slave_1
[  170.357267][ T5901] veth1_macvtap: left promiscuous mode
[  170.362960][ T5901] veth0_macvtap: left promiscuous mode
[  170.376752][ T5901] veth1_vlan: left promiscuous mode
[  170.382228][ T5901] veth0_vlan: left promiscuous mode
[  170.384105][ T8579] netlink: 'syz-executor.4': attribute type 274 has an invalid length.
[  170.396163][ T8579] netlink: 134308 bytes leftover after parsing attributes in process `syz-executor.4'.
[  171.126485][ T5901] team0 (unregistering): Port device team_slave_1 removed
[  171.186085][ T5901] team0 (unregistering): Port device team_slave_0 removed
[  172.014701][ T5121] Bluetooth: hci2: command tx timeout
[  172.020707][ T5121] Bluetooth: hci0: command tx timeout
[  172.122501][ T8520] team0: Port device team_slave_0 added
[  172.144718][ T8520] team0: Port device team_slave_1 added
[  172.153493][ T8579] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  172.174892][ T8579] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  172.297985][ T8520] batman_adv: batadv0: Adding interface: batadv_slave_0
[  172.317546][ T8520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.394045][ T8520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  172.428831][ T8520] batman_adv: batadv0: Adding interface: batadv_slave_1
[  172.444697][ T8520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.514086][ T8520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  172.760081][ T8520] hsr_slave_0: entered promiscuous mode
[  172.778066][ T8520] hsr_slave_1: entered promiscuous mode
[  172.839745][ T8520] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  172.853543][ T8520] Cannot create hsr debugfs directory
[  173.181067][ T8563] chnl_net:caif_netlink_parms(): no params data found
[  173.298459][ T8406] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.390797][ T8406] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.419622][ T8563] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.435150][ T8563] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.442411][ T8563] bridge_slave_0: entered allmulticast mode
[  173.462481][ T8563] bridge_slave_0: entered promiscuous mode
[  173.479836][ T8563] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.490583][ T8563] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.520271][ T8563] bridge_slave_1: entered allmulticast mode
[  173.540681][ T8563] bridge_slave_1: entered promiscuous mode
[  173.648826][ T8406] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.901991][ T8406] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.947137][ T8563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  174.002804][ T8563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  174.096978][ T5121] Bluetooth: hci0: command tx timeout
[  174.111255][ T5121] Bluetooth: hci2: command tx timeout
[  174.196420][ T8563] team0: Port device team_slave_0 added
[  174.323388][ T8563] team0: Port device team_slave_1 added
[  174.387531][ T8653] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 49 (only 8 groups)
[  174.461452][ T8563] batman_adv: batadv0: Adding interface: batadv_slave_0
[  174.472733][ T8563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.498978][ T8563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  174.510593][ T8406] bridge_slave_1: left allmulticast mode
[  174.519624][ T8406] bridge_slave_1: left promiscuous mode
[  174.528182][ T8406] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.540422][ T8406] bridge_slave_0: left allmulticast mode
[  174.546468][ T8406] bridge_slave_0: left promiscuous mode
[  174.552155][ T8406] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.131238][ T8406] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  175.142864][ T8406] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  175.155336][ T8406] bond0 (unregistering): Released all slaves
[  175.176472][ T8563] batman_adv: batadv0: Adding interface: batadv_slave_1
[  175.183507][ T8563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.209656][ T8563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  175.249062][ T8520] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  175.304318][ T8520] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  175.353448][ T8520] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  175.453081][ T8563] hsr_slave_0: entered promiscuous mode
[  175.462354][ T8563] hsr_slave_1: entered promiscuous mode
[  175.475855][ T8563] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  175.483652][ T8563] Cannot create hsr debugfs directory
[  175.489578][ T8520] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  175.684805][ T8406] hsr_slave_0: left promiscuous mode
[  175.693689][ T8406] hsr_slave_1: left promiscuous mode
[  175.718602][ T8406] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  175.726297][ T8406] batman_adv: batadv0: Removing interface: batadv_slave_0
[  175.741905][ T8406] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  175.763968][ T8406] batman_adv: batadv0: Removing interface: batadv_slave_1
[  175.802770][ T8697] netlink: 'syz-executor.2': attribute type 8 has an invalid length.
[  175.805508][ T8406] veth1_macvtap: left promiscuous mode
[  175.811142][ T8697] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.2'.
[  175.823278][ T8406] veth0_macvtap: left promiscuous mode
[  175.838464][ T8406] veth1_vlan: left promiscuous mode
[  175.844067][ T8406] veth0_vlan: left promiscuous mode
[  176.204582][ T5121] Bluetooth: hci2: command tx timeout
[  176.204608][ T5127] Bluetooth: hci0: command tx timeout
[  176.812950][ T8406] team0 (unregistering): Port device team_slave_1 removed
[  176.849645][ T8406] team0 (unregistering): Port device team_slave_0 removed
[  177.228079][ T8698] pim6reg0: tun_chr_ioctl cmd 1074025677
[  177.233976][ T8698] pim6reg0: linktype set to 804
[  177.615958][ T8723] netlink: 203452 bytes leftover after parsing attributes in process `syz-executor.0'.
[  177.639466][ T8723] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  177.674544][ T8520] 8021q: adding VLAN 0 to HW filter on device bond0
[  177.844583][ T8520] 8021q: adding VLAN 0 to HW filter on device team0
[  177.917540][ T8730] netlink: 703 bytes leftover after parsing attributes in process `syz-executor.0'.
[  177.951966][  T928] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.959110][  T928] bridge0: port 1(bridge_slave_0) entered forwarding state
[  177.976572][  T928] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.983770][  T928] bridge0: port 2(bridge_slave_1) entered forwarding state
[  178.012853][ T8730] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  178.031822][ T8730] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'.
[  178.045848][ T8730] ipvlan1: entered promiscuous mode
[  178.060947][ T8730] ipvlan1: entered allmulticast mode
[  178.069812][ T8730] veth0_vlan: entered allmulticast mode
[  178.089758][ T8730] bridge0: port 3(ipvlan1) entered blocking state
[  178.096721][ T8730] bridge0: port 3(ipvlan1) entered disabled state
[  178.107378][ T8730] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  178.194830][ T8737] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.4'.
[  178.255287][ T5127] Bluetooth: hci2: command tx timeout
[  178.535522][ T8563] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  178.560087][ T8563] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  178.597495][ T8563] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  178.618285][ T8563] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  178.710475][ T8520] 8021q: adding VLAN 0 to HW filter on device batadv0
[  178.891682][ T8563] 8021q: adding VLAN 0 to HW filter on device bond0
[  178.937705][ T8520] veth0_vlan: entered promiscuous mode
[  178.965717][ T8563] 8021q: adding VLAN 0 to HW filter on device team0
[  178.995383][ T8520] veth1_vlan: entered promiscuous mode
[  179.019613][ T5195] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.026821][ T5195] bridge0: port 1(bridge_slave_0) entered forwarding state
[  179.064166][ T5195] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.071359][ T5195] bridge0: port 2(bridge_slave_1) entered forwarding state
[  179.141081][ T8520] veth0_macvtap: entered promiscuous mode
[  179.175599][ T8520] veth1_macvtap: entered promiscuous mode
[  179.280115][ T8520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.306696][ T8520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.333770][ T8520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.347898][ T8520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.357928][ T8520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.370876][ T8520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.405422][ T8520] batman_adv: batadv0: Interface activated: batadv_slave_0
[  179.461686][ T8770] veth0_vlan: left promiscuous mode
[  179.474519][ T8770] veth0_vlan: left allmulticast mode
[  179.485468][ T8770] veth0_vlan: entered promiscuous mode
[  179.500891][ T8520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.517470][ T8520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.531536][ T8520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.552722][ T8520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.562677][ T8520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.580248][ T8520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.594744][ T8520] batman_adv: batadv0: Interface activated: batadv_slave_1
[  179.617806][ T8520] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  179.635108][ T8520] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  179.656673][ T8520] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  179.673940][ T8520] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  179.801573][ T8563] 8021q: adding VLAN 0 to HW filter on device batadv0
[  179.884071][ T5888] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.892998][ T5888] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.989266][ T8786] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  179.999014][ T8786] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  180.024964][ T8786] batman_adv: batadv0: Removing interface: batadv_slave_0
[  180.049306][ T8786] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  180.071505][ T5880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.091415][ T8563] veth0_vlan: entered promiscuous mode
[  180.104435][ T5880] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.138071][ T8563] veth1_vlan: entered promiscuous mode
[  180.273416][ T8563] veth0_macvtap: entered promiscuous mode
[  180.374918][ T8801] syz-executor.4[8801] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  180.375068][ T8801] syz-executor.4[8801] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  180.417588][ T8563] veth1_macvtap: entered promiscuous mode
[  180.537829][ T8563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  180.552272][ T8563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.562791][ T8563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  180.581164][ T8563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.591255][ T8563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  180.602692][ T8563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.615969][ T8563] batman_adv: batadv0: Interface activated: batadv_slave_0
[  180.632670][ T8563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  180.643359][ T8563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.659492][ T8563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  180.671345][ T8563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.681499][ T8563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  180.692109][ T8563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.702937][ T8563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  180.713667][ T8563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.731549][ T8563] batman_adv: batadv0: Interface activated: batadv_slave_1
[  180.775116][ T8563] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  180.784360][ T8563] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  180.793163][ T8563] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  180.812604][ T8563] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  180.986814][ T5880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.999343][ T5880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  181.048396][ T5880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  181.075582][ T5880] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  181.294119][ T4492] Bluetooth: hci3: command 0x0406 tx timeout
[  181.304159][ T4492] Bluetooth: hci1: command 0x0406 tx timeout
[  181.931667][ T8840] netlink: 'syz-executor.0': attribute type 21 has an invalid length.
[  181.942410][ T8840] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.0'.
[  182.029355][ T8405] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.436111][ T8854] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.2'.
[  182.633574][ T5127] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  182.644995][ T5127] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  182.653247][ T5127] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  182.663534][ T5127] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  182.677233][ T5127] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  182.680245][ T8863] netlink: 'syz-executor.2': attribute type 4 has an invalid length.
[  182.698447][ T5127] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  182.716163][ T8863] netlink: 116376 bytes leftover after parsing attributes in process `syz-executor.2'.
[  182.730103][ T8863] netlink: 18430 bytes leftover after parsing attributes in process `syz-executor.2'.
[  182.941351][ T8861] chnl_net:caif_netlink_parms(): no params data found
[  182.964746][ T8872] netlink: 'syz-executor.0': attribute type 3 has an invalid length.
[  182.978440][ T8872] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.0'.
[  183.018274][ T8405] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.203597][ T8405] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.277847][ T8861] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.293942][ T8861] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.305037][ T8861] bridge_slave_0: entered allmulticast mode
[  183.319141][ T8861] bridge_slave_0: entered promiscuous mode
[  183.342499][ T8405] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.381827][ T8861] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.435942][ T8861] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.443323][ T8861] bridge_slave_1: entered allmulticast mode
[  183.465592][ T8861] bridge_slave_1: entered promiscuous mode
[  183.528786][ T8890] netlink: 763 bytes leftover after parsing attributes in process `syz-executor.0'.
[  183.599119][ T8861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  183.640274][ T8861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  183.826403][ T8861] team0: Port device team_slave_0 added
[  183.883700][ T8861] team0: Port device team_slave_1 added
[  183.912854][ T8405] bridge_slave_1: left allmulticast mode
[  183.933195][ T8907] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  183.948906][ T8405] bridge_slave_1: left promiscuous mode
[  183.960175][ T5127] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  183.969061][ T5127] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  183.977400][ T5127] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  183.990115][ T8405] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.998936][ T5127] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  184.008940][ T5127] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  184.014043][ T8405] bridge_slave_0: left allmulticast mode
[  184.025503][ T5127] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  184.064940][ T8405] bridge_slave_0: left promiscuous mode
[  184.074108][ T8405] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.749259][ T5127] Bluetooth: hci0: command tx timeout
[  185.160044][ T8405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  185.184299][ T8405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  185.200850][ T8405] bond0 (unregistering): Released all slaves
[  185.245566][ T8907] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  185.322871][ T8861] batman_adv: batadv0: Adding interface: batadv_slave_0
[  185.338682][ T8861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.386119][ T8861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  185.407397][ T8861] batman_adv: batadv0: Adding interface: batadv_slave_1
[  185.422326][ T8861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.462704][ T8861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  185.668398][ T8861] hsr_slave_0: entered promiscuous mode
[  185.698593][ T8861] hsr_slave_1: entered promiscuous mode
[  185.705531][ T8861] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  185.715012][ T8861] Cannot create hsr debugfs directory
[  186.062360][ T8976] netlink: 'syz-executor.4': attribute type 13 has an invalid length.
[  186.094859][ T5127] Bluetooth: hci2: command tx timeout
[  186.101229][ T8976] veth0_macvtap: left promiscuous mode
[  186.120323][ T8977] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'.
[  186.139130][ T8976] macvtap0: entered allmulticast mode
[  186.141645][ T8980] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  186.161778][ T8976] macvtap0: refused to change device tx_queue_len
[  186.213101][ T8405] hsr_slave_0: left promiscuous mode
[  186.220638][ T8405] hsr_slave_1: left promiscuous mode
[  186.228305][ T8405] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  186.238701][ T8405] batman_adv: batadv0: Removing interface: batadv_slave_0
[  186.263216][ T8405] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  186.271601][ T8405] batman_adv: batadv0: Removing interface: batadv_slave_1
[  186.293296][ T8405] veth1_macvtap: left promiscuous mode
[  186.300352][ T8405] veth0_macvtap: left promiscuous mode
[  186.306499][ T8405] veth1_vlan: left promiscuous mode
[  186.312535][ T8405] veth0_vlan: left promiscuous mode
[  186.740476][ T8405] team0 (unregistering): Port device team_slave_1 removed
[  186.779933][ T8405] team0 (unregistering): Port device team_slave_0 removed
[  186.814507][ T5127] Bluetooth: hci0: command tx timeout
[  187.154984][ T8980] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  187.184487][ T8986] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'.
[  187.402302][ T9001] netlink: 'syz-executor.4': attribute type 21 has an invalid length.
[  187.536153][ T8999] ��0: renamed from pim6reg1
[  187.832997][ T8909] chnl_net:caif_netlink_parms(): no params data found
[  188.091762][ T8405] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.115830][ T8909] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.134114][ T8909] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.141577][ T8909] bridge_slave_0: entered allmulticast mode
[  188.170100][ T8909] bridge_slave_0: entered promiscuous mode
[  188.177062][ T5127] Bluetooth: hci2: command tx timeout
[  188.196457][ T8909] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.220838][ T8909] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.247361][ T8909] bridge_slave_1: entered allmulticast mode
[  188.272026][ T8909] bridge_slave_1: entered promiscuous mode
[  188.342844][ T8405] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.360012][ T9043] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  188.396173][ T9043] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  188.427411][ T8909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  188.453369][ T8909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  188.533038][ T8405] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.640892][   T29] audit: type=1804 audit(1718093511.855:8): pid=9058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1917982838/syzkaller.vyquVY/372/memory.events" dev="sda1" ino=1947 res=1 errno=0
[  188.683835][   T29] audit: type=1800 audit(1718093511.855:9): pid=9058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1947 res=0 errno=0
[  188.707697][ T8405] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.718656][ T9058] netlink: 'syz-executor.0': attribute type 3 has an invalid length.
[  188.733056][ T9058] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.0'.
[  188.768783][ T8861] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  188.788416][ T8909] team0: Port device team_slave_0 added
[  188.811881][ T8861] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  188.855163][ T8909] team0: Port device team_slave_1 added
[  188.884601][ T9067] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  188.894472][ T5127] Bluetooth: hci0: command tx timeout
[  188.901961][ T8861] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  188.912624][ T9067] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  188.941623][ T8861] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  188.957878][ T9067] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  188.971782][ T8909] batman_adv: batadv0: Adding interface: batadv_slave_0
[  188.982993][ T8909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  189.011441][ T8909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  189.032151][ T8909] batman_adv: batadv0: Adding interface: batadv_slave_1
[  189.040713][ T8909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  189.070353][ T8909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  189.095863][ T9067] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  189.159855][ T9070] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  189.234696][ T8909] hsr_slave_0: entered promiscuous mode
[  189.248630][ T8909] hsr_slave_1: entered promiscuous mode
[  189.259465][ T8909] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  189.271081][ T8909] Cannot create hsr debugfs directory
[  189.302895][ T8405] bridge_slave_1: left allmulticast mode
[  189.309507][ T8405] bridge_slave_1: left promiscuous mode
[  189.317020][ T8405] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.331740][ T8405] bridge_slave_0: left allmulticast mode
[  189.342447][ T8405] bridge_slave_0: left promiscuous mode
[  189.352252][ T8405] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.254264][ T5127] Bluetooth: hci2: command tx timeout
[  190.275319][ T8405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  190.324297][ T8405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  190.337734][ T9098] netlink: 116376 bytes leftover after parsing attributes in process `syz-executor.2'.
[  190.358417][ T9098] netlink: 18430 bytes leftover after parsing attributes in process `syz-executor.2'.
[  190.377347][ T8405] bond0 (unregistering): Released all slaves
[  190.868844][ T8405] hsr_slave_0: left promiscuous mode
[  190.873697][ T9116] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'.
[  190.895758][ T8405] hsr_slave_1: left promiscuous mode
[  190.902414][ T8405] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  190.923096][ T8405] batman_adv: batadv0: Removing interface: batadv_slave_0
[  190.934281][ T8405] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  190.941909][ T8405] batman_adv: batadv0: Removing interface: batadv_slave_1
[  190.970074][ T8405] veth1_macvtap: left promiscuous mode
[  190.975794][ T5127] Bluetooth: hci0: command tx timeout
[  190.979481][ T8405] veth0_macvtap: left promiscuous mode
[  191.015413][ T8405] veth1_vlan: left promiscuous mode
[  191.020899][ T8405] veth0_vlan: left promiscuous mode
[  191.891954][ T8405] team0 (unregistering): Port device team_slave_1 removed
[  191.951003][ T8405] team0 (unregistering): Port device team_slave_0 removed
[  192.333883][ T5127] Bluetooth: hci2: command tx timeout
[  192.474992][ T8861] 8021q: adding VLAN 0 to HW filter on device bond0
[  192.593416][ T8861] 8021q: adding VLAN 0 to HW filter on device team0
[  192.664677][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.671873][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state
[  192.708508][ T9148] validate_nla: 6 callbacks suppressed
[  192.708527][ T9148] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[  192.733917][ T9148] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
[  192.743326][ T9148] team0: entered promiscuous mode
[  192.804576][ T9148] team_slave_0: entered promiscuous mode
[  192.810698][ T9148] team_slave_1: entered promiscuous mode
[  192.824164][ T9148] team0: entered allmulticast mode
[  192.830716][ T9148] team_slave_0: entered allmulticast mode
[  192.838394][ T9148] team_slave_1: entered allmulticast mode
[  192.849169][ T9148] bridge0: port 3(team0) entered blocking state
[  192.856473][ T9148] bridge0: port 3(team0) entered disabled state
[  192.878218][ T5295] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.885553][ T5295] bridge0: port 2(bridge_slave_1) entered forwarding state
[  193.130664][ T8909] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  193.161740][ T8909] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  193.190347][ T8909] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  193.218569][ T8909] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  193.541218][ T8861] 8021q: adding VLAN 0 to HW filter on device batadv0
[  193.640190][ T8909] 8021q: adding VLAN 0 to HW filter on device bond0
[  193.681002][ T8861] veth0_vlan: entered promiscuous mode
[  193.709985][ T8909] 8021q: adding VLAN 0 to HW filter on device team0
[  193.730664][ T8861] veth1_vlan: entered promiscuous mode
[  193.782053][ T5117] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.789264][ T5117] bridge0: port 1(bridge_slave_0) entered forwarding state
[  193.824982][ T9174] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.0'.
[  193.859524][ T5295] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.866774][ T5295] bridge0: port 2(bridge_slave_1) entered forwarding state
[  193.932250][ T8861] veth0_macvtap: entered promiscuous mode
[  193.966192][ T8861] veth1_macvtap: entered promiscuous mode
[  194.041921][ T8861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.059689][ T8861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.081287][ T8861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.099811][ T8861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.112941][ T8861] batman_adv: batadv0: Interface activated: batadv_slave_0
[  194.131109][ T8861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  194.147897][ T8861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.159210][ T8861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  194.176880][ T8861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.191581][ T8861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  194.212059][ T8861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.225224][ T8861] batman_adv: batadv0: Interface activated: batadv_slave_1
[  194.253593][ T9182] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  194.274046][ T9182] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'.
[  194.283504][ T9182] team0: entered promiscuous mode
[  194.289621][ T9182] team_slave_0: entered promiscuous mode
[  194.304713][ T9182] team_slave_1: entered promiscuous mode
[  194.328094][ T9182] team0: entered allmulticast mode
[  194.338032][ T9182] team_slave_0: entered allmulticast mode
[  194.355013][ T9182] team_slave_1: entered allmulticast mode
[  194.377574][ T9182] bond0: (slave team0): Releasing backup interface
[  194.405680][ T9182] bridge0: port 3(team0) entered blocking state
[  194.420295][ T9182] bridge0: port 3(team0) entered disabled state
[  194.499496][ T8861] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  194.528999][ T8861] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  194.554387][ T8861] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  194.563251][ T8861] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  194.585474][ T1250] ieee802154 phy0 wpan0: encryption failed: -22
[  194.591936][ T1250] ieee802154 phy1 wpan1: encryption failed: -22
[  194.663528][ T9193] netlink: 'syz-executor.0': attribute type 3 has an invalid length.
[  194.671897][ T9193] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.0'.
[  194.720384][ T8909] 8021q: adding VLAN 0 to HW filter on device batadv0
[  194.889252][ T8909] veth0_vlan: entered promiscuous mode
[  194.908289][ T8406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.933835][ T8406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.996897][ T9204] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.4'.
[  195.020910][ T9204] bond_slave_0: entered promiscuous mode
[  195.027811][ T9204] bond_slave_1: entered promiscuous mode
[  195.033568][ T9204] batadv_slave_0: entered promiscuous mode
[  195.095945][ T8403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.107524][ T8909] veth1_vlan: entered promiscuous mode
[  195.122131][ T8403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.218093][ T9205] syzkaller0: entered allmulticast mode
[  195.368810][ T8909] veth0_macvtap: entered promiscuous mode
[  195.419779][ T9213] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  195.436688][ T9213] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.4'.
[  195.441338][ T8909] veth1_macvtap: entered promiscuous mode
[  195.486058][ T8909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  195.497308][ T8909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.515444][ T8909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  195.534404][ T8909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.545756][ T8909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  195.569834][ T8909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.596206][ T8909] batman_adv: batadv0: Interface activated: batadv_slave_0
[  195.651985][ T8909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  195.671932][ T8909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.684951][ T8909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  195.699182][ T8909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.719116][ T8909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  195.741345][ T8909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.755416][ T8909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  195.773296][ T8909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.800055][ T8909] batman_adv: batadv0: Interface activated: batadv_slave_1
[  195.871138][ T8909] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  195.888580][ T8909] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  195.901375][ T8909] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  195.928103][ T8909] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  195.994297][ T9224] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  196.226017][ T9224] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  196.471420][ T5888] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.589285][ T8406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.601274][ T8406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.620045][ T9229] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  196.631304][ T9229] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[  196.653904][ T9229] team0: entered promiscuous mode
[  196.665377][ T9229] team_slave_0: entered promiscuous mode
[  196.682374][ T9229] team_slave_1: entered promiscuous mode
[  196.705417][ T9229] team0: entered allmulticast mode
[  196.711182][ T9229] team_slave_0: entered allmulticast mode
[  196.717349][ T9229] team_slave_1: entered allmulticast mode
[  196.724591][ T9229] bridge0: port 3(team0) entered blocking state
[  196.731431][ T9229] bridge0: port 3(team0) entered disabled state
[  196.751810][ T9229] bridge0: port 3(team0) entered blocking state
[  196.758329][ T9229] bridge0: port 3(team0) entered forwarding state
[  196.920676][ T8405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.932573][ T8405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.990529][ T9239] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  197.420268][ T9246] netlink: 'syz-executor.2': attribute type 4 has an invalid length.
[  197.454438][ T9246] netlink: 116376 bytes leftover after parsing attributes in process `syz-executor.2'.
[  197.500567][ T9246] netlink: 18430 bytes leftover after parsing attributes in process `syz-executor.2'.
[  197.524578][ T5121] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  197.534592][ T5121] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  197.545127][ T5121] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  197.555257][ T5121] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  197.570950][ T5121] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  197.578547][ T5121] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  197.599287][ T5888] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.712203][ T5888] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.748889][ T9257] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  197.792731][ T9257] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  197.892382][ T5888] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.121538][ T9274] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.4'.
[  198.133176][ T9274] team0: default FDB implementation only supports local addresses
[  198.206204][ T9276] : renamed from bond0 (while UP)
[  198.311711][ T9279] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[  198.354118][ T9279] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
[  198.398463][ T5888] bridge_slave_1: left allmulticast mode
[  198.412561][ T5888] bridge_slave_1: left promiscuous mode
[  198.433670][ T5888] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.453282][ T5888] bridge_slave_0: left allmulticast mode
[  198.461885][ T5888] bridge_slave_0: left promiscuous mode
[  198.471452][ T5888] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.967894][ T9299] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  199.083669][ T5888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  199.106529][ T5888] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  199.119857][ T5888] bond0 (unregistering): Released all slaves
[  199.140107][ T9249] chnl_net:caif_netlink_parms(): no params data found
[  199.157218][ T9299] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  199.327249][ T9249] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.340651][ T9249] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.350669][ T9249] bridge_slave_0: entered allmulticast mode
[  199.359853][ T9249] bridge_slave_0: entered promiscuous mode
[  199.379880][ T9249] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.393917][ T9249] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.411378][ T9249] bridge_slave_1: entered allmulticast mode
[  199.425328][ T9249] bridge_slave_1: entered promiscuous mode
[  199.625031][ T5121] Bluetooth: hci0: command tx timeout
[  199.680021][ T9249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  199.915135][ T9249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  200.040904][ T9318] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[  200.053263][ T9318] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
[  200.189090][ T5888] hsr_slave_0: left promiscuous mode
[  200.230362][ T5888] hsr_slave_1: left promiscuous mode
[  200.242816][ T5888] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  200.252027][ T5888] batman_adv: batadv0: Removing interface: batadv_slave_0
[  200.275013][ T5888] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  200.286312][ T5888] batman_adv: batadv0: Removing interface: batadv_slave_1
[  200.458835][ T5888] veth1_macvtap: left promiscuous mode
[  200.480245][ T5888] veth0_macvtap: left promiscuous mode
[  200.508623][ T5888] veth1_vlan: left promiscuous mode
[  200.534592][ T5888] veth0_vlan: left promiscuous mode
[  200.789224][ T9340] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  200.895031][ T5127] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  200.905557][ T5127] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  200.913864][ T5127] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  200.922963][ T5127] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  200.934057][ T5127] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  200.941513][ T5127] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  201.370973][ T5888] team0 (unregistering): Port device team_slave_1 removed
[  201.410600][ T5888] team0 (unregistering): Port device team_slave_0 removed
[  201.694060][ T5127] Bluetooth: hci0: command tx timeout
[  201.746469][ T9249] team0: Port device team_slave_0 added
[  201.770058][ T9340] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  201.819068][ T9249] team0: Port device team_slave_1 added
[  201.896689][ T9249] batman_adv: batadv0: Adding interface: batadv_slave_0
[  201.910216][ T9249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.938936][ T9249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  201.966359][ T9249] batman_adv: batadv0: Adding interface: batadv_slave_1
[  201.973338][ T9249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.023669][ T9249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  202.088075][ T9353] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  202.097061][ T9353] batman_adv: batadv0: Removing interface: batadv_slave_1
[  202.312783][ T9249] hsr_slave_0: entered promiscuous mode
[  202.350810][ T9249] hsr_slave_1: entered promiscuous mode
[  202.384043][ T9249] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  202.391750][ T9249] Cannot create hsr debugfs directory
[  202.929344][ T5888] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.966506][ T9368] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
[  202.976228][ T5127] Bluetooth: hci2: command tx timeout
[  203.003584][ T9342] chnl_net:caif_netlink_parms(): no params data found
[  203.106908][ T5888] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.359208][ T5888] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.479919][ T5888] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.507817][ T9389] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.4'.
[  203.559767][ T9391] netlink: 'syz-executor.2': attribute type 23 has an invalid length.
[  203.601963][ T9342] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.610501][ T9342] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.618470][ T9342] bridge_slave_0: entered allmulticast mode
[  203.626078][ T9342] bridge_slave_0: entered promiscuous mode
[  203.635331][ T9342] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.642642][ T9342] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.650065][ T9342] bridge_slave_1: entered allmulticast mode
[  203.657422][ T9342] bridge_slave_1: entered promiscuous mode
[  203.773994][ T5127] Bluetooth: hci0: command tx timeout
[  203.781748][ T9399] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  203.796133][ T9399] batman_adv: batadv0: Removing interface: batadv_slave_0
[  203.821983][ T9399] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  203.844965][ T9399] batman_adv: batadv0: Removing interface: batadv_slave_1
[  203.952663][ T9342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  204.053301][ T9342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  204.067272][ T9406] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  204.101044][ T5888] bridge_slave_1: left allmulticast mode
[  204.108703][ T5888] bridge_slave_1: left promiscuous mode
[  204.125082][ T5888] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.145010][ T5888] bridge_slave_0: left allmulticast mode
[  204.150883][ T5888] bridge_slave_0: left promiscuous mode
[  204.157407][ T5888] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.645443][ T5888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  204.678623][ T5888] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  204.708194][ T5888] bond0 (unregistering): Released all slaves
[  204.736858][ T9406] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  204.804064][ T9342] team0: Port device team_slave_0 added
[  204.937695][ T9407] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  204.996730][ T9342] team0: Port device team_slave_1 added
[  205.054412][ T5127] Bluetooth: hci2: command tx timeout
[  205.384863][ T9342] batman_adv: batadv0: Adding interface: batadv_slave_0
[  205.392003][ T9342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.420068][ T9342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  205.443172][ T9433] IPv6: NLM_F_CREATE should be specified when creating new route
[  205.517828][ T5888] hsr_slave_0: left promiscuous mode
[  205.535225][ T5888] hsr_slave_1: left promiscuous mode
[  205.542632][ T5888] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  205.553047][ T5888] batman_adv: batadv0: Removing interface: batadv_slave_0
[  205.561993][ T5888] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  205.570226][ T5888] batman_adv: batadv0: Removing interface: batadv_slave_1
[  205.615982][ T5888] veth1_macvtap: left promiscuous mode
[  205.623407][ T5888] veth0_macvtap: left promiscuous mode
[  205.629778][ T5888] veth1_vlan: left promiscuous mode
[  205.635566][ T5888] veth0_vlan: left promiscuous mode
[  205.858301][ T5127] Bluetooth: hci0: command tx timeout
[  206.752764][ T5888] team0 (unregistering): Port device team_slave_1 removed
[  206.842456][ T5888] team0 (unregistering): Port device team_slave_0 removed
[  207.142142][ T5127] Bluetooth: hci2: command tx timeout
[  207.741588][ T9342] batman_adv: batadv0: Adding interface: batadv_slave_1
[  207.754001][ T9342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  207.802826][ T9342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  207.851273][ T9249] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  207.905250][ T9249] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  207.945535][ T9249] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  207.972165][ T9342] hsr_slave_0: entered promiscuous mode
[  208.009866][ T9342] hsr_slave_1: entered promiscuous mode
[  208.029205][ T9342] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  208.046974][ T9342] Cannot create hsr debugfs directory
[  208.053642][ T9249] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  208.127858][ T9467] netlink: 103 bytes leftover after parsing attributes in process `syz-executor.2'.
[  208.418875][ T9476] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  208.446301][ T9249] 8021q: adding VLAN 0 to HW filter on device bond0
[  208.463297][ T9476] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  208.473378][ T9477] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  208.473471][ T9476] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  208.546038][ T9249] 8021q: adding VLAN 0 to HW filter on device team0
[  208.559799][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.567030][ T5168] bridge0: port 1(bridge_slave_0) entered forwarding state
[  208.600138][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.607305][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state
[  208.662512][ T9486] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
[  208.691606][ T9486] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.2'.
[  208.721143][ T9488] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  208.753485][ T9488] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  208.796847][ T9486] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  208.810672][ T9486] netlink: 'syz-executor.2': attribute type 12 has an invalid length.
[  208.820305][ T9342] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  208.823922][ T9486] netlink: 'syz-executor.2': attribute type 11 has an invalid length.
[  208.841294][ T9342] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  208.844797][ T9486] netlink: 176412 bytes leftover after parsing attributes in process `syz-executor.2'.
[  208.870415][ T9342] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  208.892601][ T9342] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  209.043463][ T9249] 8021q: adding VLAN 0 to HW filter on device batadv0
[  209.075306][ T9342] 8021q: adding VLAN 0 to HW filter on device bond0
[  209.111655][ T9342] 8021q: adding VLAN 0 to HW filter on device team0
[  209.141967][   T25] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.149231][   T25] bridge0: port 1(bridge_slave_0) entered forwarding state
[  209.205365][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.212498][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state
[  209.222510][ T5127] Bluetooth: hci2: command tx timeout
[  209.247284][ T9249] veth0_vlan: entered promiscuous mode
[  209.249437][ T9501] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  209.269584][ T9249] veth1_vlan: entered promiscuous mode
[  209.279361][ T9501] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  209.318384][ T9501] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  209.422482][ T9249] veth0_macvtap: entered promiscuous mode
[  209.462213][ T9249] veth1_macvtap: entered promiscuous mode
[  209.600354][ T9249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  209.641320][ T9249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.709878][ T9249] batman_adv: batadv0: Interface activated: batadv_slave_0
[  209.745759][ T9249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  209.759951][ T9249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.789280][ T9249] batman_adv: batadv0: Interface activated: batadv_slave_1
[  209.821659][ T9249] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  209.832359][ T9249] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  209.844651][ T9249] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  209.861670][ T9249] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  209.907877][ T9342] 8021q: adding VLAN 0 to HW filter on device batadv0
[  210.105848][ T5905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  210.116997][ T9342] veth0_vlan: entered promiscuous mode
[  210.127343][ T5905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  210.137085][ T8404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  210.155542][ T8404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  210.192113][ T9342] veth1_vlan: entered promiscuous mode
[  210.246549][ T9342] veth0_macvtap: entered promiscuous mode
[  210.292252][ T9342] veth1_macvtap: entered promiscuous mode
[  210.411942][ T9342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  210.430031][ T9342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.440421][ T9342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  210.452960][ T9342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.482612][ T9342] batman_adv: batadv0: Interface activated: batadv_slave_0
[  210.537046][ T9542] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  210.548974][ T9342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  210.561762][ T9342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.584844][ T9342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  210.605923][ T9342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.630178][ T9342] batman_adv: batadv0: Interface activated: batadv_slave_1
[  210.655318][ T9342] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  210.667177][ T9342] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  210.678504][ T9342] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  210.687477][ T9342] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  210.716886][ T9542] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  210.952486][ T8406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  210.966900][ T8406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.017382][ T8404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.028759][ T8404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.232608][ T9568] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.0'.
[  212.125067][ T9591] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.2'.
[  212.140526][ T9592] netlink: 116376 bytes leftover after parsing attributes in process `syz-executor.4'.
[  212.152299][ T9592] netlink: 18430 bytes leftover after parsing attributes in process `syz-executor.4'.
[  212.700025][ T5888] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.171839][ T5121] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  213.180563][ T5121] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  213.191339][ T5121] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  213.202324][ T5121] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  213.223964][ T5121] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  213.236398][ T5121] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  213.350346][ T9614] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'.
[  213.462211][ T9607] chnl_net:caif_netlink_parms(): no params data found
[  213.563480][ T9607] bridge0: port 1(bridge_slave_0) entered blocking state
[  213.573241][ T9607] bridge0: port 1(bridge_slave_0) entered disabled state
[  213.591561][ T9607] bridge_slave_0: entered allmulticast mode
[  213.603251][ T9607] bridge_slave_0: entered promiscuous mode
[  213.618204][ T9607] bridge0: port 2(bridge_slave_1) entered blocking state
[  213.639989][ T9607] bridge0: port 2(bridge_slave_1) entered disabled state
[  213.652031][ T9607] bridge_slave_1: entered allmulticast mode
[  213.661162][ T9607] bridge_slave_1: entered promiscuous mode
[  213.756830][ T9607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  213.799311][ T9607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  213.902166][ T9607] team0: Port device team_slave_0 added
[  213.917639][ T9607] team0: Port device team_slave_1 added
[  213.996174][ T9641] validate_nla: 6 callbacks suppressed
[  213.996212][ T9641] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  214.035469][ T9641] netlink: 116376 bytes leftover after parsing attributes in process `syz-executor.4'.
[  214.063445][ T9641] netlink: 18430 bytes leftover after parsing attributes in process `syz-executor.4'.
[  214.400834][ T5121] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  214.416144][ T5121] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  214.424974][ T5121] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  214.436504][ T5121] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  214.446455][ T5121] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  214.455154][ T5121] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  214.495665][ T9607] batman_adv: batadv0: Adding interface: batadv_slave_0
[  214.533001][ T9607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  214.577795][ T9607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  214.584586][ T9650] netlink: 'syz-executor.2': attribute type 8 has an invalid length.
[  214.601020][ T9607] batman_adv: batadv0: Adding interface: batadv_slave_1
[  214.612725][ T9607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  214.638904][ T9650] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  214.638927][ T9650] netlink: 191384 bytes leftover after parsing attributes in process `syz-executor.2'.
[  214.676054][ T9607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  214.846066][ T9607] hsr_slave_0: entered promiscuous mode
[  214.864739][ T9607] hsr_slave_1: entered promiscuous mode
[  214.876641][ T9607] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  214.887405][ T9607] Cannot create hsr debugfs directory
[  215.089012][ T5888] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.101946][ T9663] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  215.124230][ T9663] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.4'.
[  215.257459][ T5888] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.297724][ T5127] Bluetooth: hci0: command tx timeout
[  215.347355][ T5888] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.623441][ T9644] chnl_net:caif_netlink_parms(): no params data found
[  215.683694][ T5888] bridge_slave_1: left allmulticast mode
[  215.691393][ T5888] bridge_slave_1: left promiscuous mode
[  215.697750][ T5888] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.707056][ T5888] bridge_slave_0: left allmulticast mode
[  215.712706][ T5888] bridge_slave_0: left promiscuous mode
[  215.719542][ T5888] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.101586][ T5888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  216.165158][ T5888] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  216.179592][ T5888] bond0 (unregistering): Released all slaves
[  216.222584][ T9689] netlink: 'syz-executor.2': attribute type 15 has an invalid length.
[  216.239009][ T9689] netlink: 'syz-executor.2': attribute type 4 has an invalid length.
[  216.410313][ T9694] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
[  216.425533][ T9694] netlink: 116376 bytes leftover after parsing attributes in process `syz-executor.0'.
[  216.441790][ T9694] netlink: 18430 bytes leftover after parsing attributes in process `syz-executor.0'.
[  216.495261][ T5127] Bluetooth: hci2: command tx timeout
[  216.526951][ T9644] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.538018][ T9644] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.545916][ T9644] bridge_slave_0: entered allmulticast mode
[  216.556612][ T9644] bridge_slave_0: entered promiscuous mode
[  216.577029][ T9644] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.601804][ T9644] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.620409][ T9644] bridge_slave_1: entered allmulticast mode
[  216.636695][ T9644] bridge_slave_1: entered promiscuous mode
[  216.765085][ T9644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  216.794284][ T9644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  216.842486][ T5888] hsr_slave_0: left promiscuous mode
[  216.857782][ T5888] hsr_slave_1: left promiscuous mode
[  216.889981][ T5888] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  216.897890][ T5888] batman_adv: batadv0: Removing interface: batadv_slave_0
[  216.910725][ T5888] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  216.926365][ T5888] batman_adv: batadv0: Removing interface: batadv_slave_1
[  216.959125][ T5888] veth1_macvtap: left promiscuous mode
[  216.976682][ T5888] veth0_macvtap: left promiscuous mode
[  216.994098][ T5888] veth1_vlan: left promiscuous mode
[  216.999468][ T5888] veth0_vlan: left promiscuous mode
[  217.374209][ T5127] Bluetooth: hci0: command tx timeout
[  217.742019][ T5888] team0 (unregistering): Port device team_slave_1 removed
[  217.793148][ T5888] team0 (unregistering): Port device team_slave_0 removed
[  218.478806][ T9644] team0: Port device team_slave_0 added
[  218.499572][ T9644] team0: Port device team_slave_1 added
[  218.580190][ T5127] Bluetooth: hci2: command tx timeout
[  218.852233][ T9607] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  218.882419][ T9644] batman_adv: batadv0: Adding interface: batadv_slave_0
[  218.905524][ T9644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  218.940920][ T9644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  218.954681][ T9644] batman_adv: batadv0: Adding interface: batadv_slave_1
[  218.961670][ T9644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  219.034529][ T9644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  219.065188][ T9607] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  219.091132][ T9607] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  219.108357][ T9749] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  219.108905][ T9607] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  219.131463][ T9749] netlink: 116376 bytes leftover after parsing attributes in process `syz-executor.4'.
[  219.149134][ T9749] netlink: 18430 bytes leftover after parsing attributes in process `syz-executor.4'.
[  219.265425][ T9644] hsr_slave_0: entered promiscuous mode
[  219.283217][ T9644] hsr_slave_1: entered promiscuous mode
[  219.289673][ T9644] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  219.298235][ T9644] Cannot create hsr debugfs directory
[  219.454190][ T5127] Bluetooth: hci0: command tx timeout
[  219.474644][ T5888] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.586906][ T5888] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.602775][ T9761] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'.
[  219.690536][ T5888] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.723375][ T9607] 8021q: adding VLAN 0 to HW filter on device bond0
[  219.755276][ T9607] 8021q: adding VLAN 0 to HW filter on device team0
[  219.812367][ T5888] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.852516][ T5117] bridge0: port 1(bridge_slave_0) entered blocking state
[  219.859755][ T5117] bridge0: port 1(bridge_slave_0) entered forwarding state
[  219.878590][ T5117] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.885777][ T5117] bridge0: port 2(bridge_slave_1) entered forwarding state
[  219.973608][ T9607] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  220.131134][ T9776] bridge0: port 4(veth0_to_bond) entered blocking state
[  220.156423][ T9776] bridge0: port 4(veth0_to_bond) entered disabled state
[  220.185719][ T9776] veth0_to_bond: entered allmulticast mode
[  220.207275][ T9776] veth0_to_bond: entered promiscuous mode
[  220.236976][ T9776] bridge0: port 4(veth0_to_bond) entered blocking state
[  220.244972][ T9776] bridge0: port 4(veth0_to_bond) entered forwarding state
[  220.260469][ T5888] bridge_slave_1: left allmulticast mode
[  220.277373][ T5888] bridge_slave_1: left promiscuous mode
[  220.294091][ T5888] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.317853][ T5888] bridge_slave_0: left allmulticast mode
[  220.328998][ T5888] bridge_slave_0: left promiscuous mode
[  220.335337][ T5888] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.519304][ T9793] netlink: 'syz-executor.0': attribute type 7 has an invalid length.
[  220.664040][ T5127] Bluetooth: hci2: command tx timeout
[  220.758877][ T5888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  220.774388][ T5888] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  220.785734][ T5888] bond0 (unregistering): Released all slaves
[  220.812929][ T9780] veth0_to_bond: left allmulticast mode
[  220.825047][ T9780] veth0_to_bond: left promiscuous mode
[  220.845215][ T9780] bridge0: port 4(veth0_to_bond) entered disabled state
[  221.111684][ T9803] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
[  221.134235][ T9803] netlink: 116376 bytes leftover after parsing attributes in process `syz-executor.0'.
[  221.154689][ T9803] netlink: 18430 bytes leftover after parsing attributes in process `syz-executor.0'.
[  221.295601][ T9607] 8021q: adding VLAN 0 to HW filter on device batadv0
[  221.361604][ T5888] hsr_slave_0: left promiscuous mode
[  221.370207][ T5888] hsr_slave_1: left promiscuous mode
[  221.379665][ T5888] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  221.391071][ T5888] batman_adv: batadv0: Removing interface: batadv_slave_0
[  221.402181][ T5888] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  221.411176][ T5888] batman_adv: batadv0: Removing interface: batadv_slave_1
[  221.433393][ T5888] veth1_macvtap: left promiscuous mode
[  221.439372][ T5888] veth0_macvtap: left promiscuous mode
[  221.445033][ T5888] veth1_vlan: left promiscuous mode
[  221.450450][ T5888] veth0_vlan: left promiscuous mode
[  221.534483][ T5127] Bluetooth: hci0: command tx timeout
[  221.872807][ T5888] team0 (unregistering): Port device team_slave_1 removed
[  221.935733][ T5888] team0 (unregistering): Port device team_slave_0 removed
[  222.564805][ T9813] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
[  222.674552][ T9820] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'.
[  222.698503][ T9820] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  222.733868][ T5127] Bluetooth: hci2: command tx timeout
[  222.739266][ T9607] veth0_vlan: entered promiscuous mode
[  222.871016][ T9607] veth1_vlan: entered promiscuous mode
[  223.000288][ T9644] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  223.022496][ T9607] veth0_macvtap: entered promiscuous mode
[  223.042414][ T9644] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  223.062152][ T9644] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  223.087829][ T9607] veth1_macvtap: entered promiscuous mode
[  223.099215][ T9644] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  223.154558][ T9849] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  223.193191][ T9607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  223.194284][ T9849] netlink: 116376 bytes leftover after parsing attributes in process `syz-executor.4'.
[  223.205920][ T9607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.219425][ T9849] netlink: 18430 bytes leftover after parsing attributes in process `syz-executor.4'.
[  223.265069][ T9607] batman_adv: batadv0: Interface activated: batadv_slave_0
[  223.312810][ T9607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  223.325530][ T9607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.344611][ T9607] batman_adv: batadv0: Interface activated: batadv_slave_1
[  223.386583][ T9607] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  223.397254][ T9607] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  223.407509][ T9607] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  223.416571][ T9607] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  223.458659][ T9644] 8021q: adding VLAN 0 to HW filter on device bond0
[  223.520387][ T9644] 8021q: adding VLAN 0 to HW filter on device team0
[  223.551317][   T25] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.558638][   T25] bridge0: port 1(bridge_slave_0) entered forwarding state
[  223.615029][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.622219][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state
[  223.656434][ T8404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  223.677715][ T8404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  223.740647][ T8406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  223.754794][ T8406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  224.112441][ T9644] 8021q: adding VLAN 0 to HW filter on device batadv0
[  224.202614][ T9644] veth0_vlan: entered promiscuous mode
[  224.220690][ T9644] veth1_vlan: entered promiscuous mode
[  224.273974][ T9644] veth0_macvtap: entered promiscuous mode
[  224.295620][ T9644] veth1_macvtap: entered promiscuous mode
[  224.319853][ T9644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  224.345692][ T9644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.359420][ T9644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  224.371559][ T9644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.388288][ T9644] batman_adv: batadv0: Interface activated: batadv_slave_0
[  224.499286][ T9875] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.2'.
[  224.509276][ T9875] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  224.561716][ T9644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  224.581946][ T9644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.598338][ T9644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  224.609321][ T9644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.629851][ T9644] batman_adv: batadv0: Interface activated: batadv_slave_1
[  224.751896][ T9644] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  224.762412][ T9644] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  224.781126][ T9644] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  224.790573][ T9644] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  224.917741][ T9900] netlink: 'syz-executor.2': attribute type 4 has an invalid length.
[  224.931057][ T9900] netlink: 116376 bytes leftover after parsing attributes in process `syz-executor.2'.
[  224.942116][ T9900] netlink: 18430 bytes leftover after parsing attributes in process `syz-executor.2'.
[  224.952130][ T5880] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.080859][ T5880] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.193355][ T8404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  225.223867][ T8404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  225.278266][ T5880] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.428123][ T5880] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.459643][ T8404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  225.473384][ T8404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  225.488015][ T5121] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  225.498031][ T5121] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  225.509490][ T5121] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  225.522538][ T5121] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  225.531639][ T5121] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  225.540634][ T5121] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  225.866592][ T9926] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'.
[  225.983305][ T9915] chnl_net:caif_netlink_parms(): no params data found
[  226.036213][ T5880] bridge_slave_1: left allmulticast mode
[  226.041873][ T5880] bridge_slave_1: left promiscuous mode
[  226.053783][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.098060][ T5880] bridge_slave_0: left allmulticast mode
[  226.104109][ T5880] bridge_slave_0: left promiscuous mode
[  226.109950][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.458990][ T9948] netlink: 'syz-executor.2': attribute type 4 has an invalid length.
[  226.468002][ T9948] netlink: 116376 bytes leftover after parsing attributes in process `syz-executor.2'.
[  226.490408][ T9948] netlink: 18430 bytes leftover after parsing attributes in process `syz-executor.2'.
[  226.672668][ T5880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  226.700338][ T5880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  226.720690][ T5880] bond0 (unregistering): Released all slaves
[  226.912648][ T9915] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.920100][ T9915] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.927576][ T9915] bridge_slave_0: entered allmulticast mode
[  226.935999][ T9915] bridge_slave_0: entered promiscuous mode
[  227.013954][ T9915] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.025888][ T9915] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.033435][ T9915] bridge_slave_1: entered allmulticast mode
[  227.040364][ T9915] bridge_slave_1: entered promiscuous mode
[  227.075292][ T9915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  227.087728][ T9960] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  227.133561][ T9915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  227.256509][ T9966] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  227.277516][ T9966] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[  227.305303][ T9966] bridge0: port 4(syz_tun) entered blocking state
[  227.320750][ T9966] bridge0: port 4(syz_tun) entered disabled state
[  227.345939][ T9966] syz_tun: entered allmulticast mode
[  227.352332][ T9966] syz_tun: entered promiscuous mode
[  227.371372][ T9966] bridge0: port 4(syz_tun) entered blocking state
[  227.378002][ T9966] bridge0: port 4(syz_tun) entered forwarding state
[  227.462971][ T5880] hsr_slave_0: left promiscuous mode
[  227.491162][ T5880] hsr_slave_1: left promiscuous mode
[  227.511749][ T5880] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  227.529880][ T5880] batman_adv: batadv0: Removing interface: batadv_slave_0
[  227.549078][ T5880] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  227.568963][ T5880] batman_adv: batadv0: Removing interface: batadv_slave_1
[  227.598791][ T5880] veth1_macvtap: left promiscuous mode
[  227.607343][ T5880] veth0_macvtap: left promiscuous mode
[  227.613042][ T5880] veth1_vlan: left promiscuous mode
[  227.618441][ T5127] Bluetooth: hci0: command tx timeout
[  227.620482][ T5880] veth0_vlan: left promiscuous mode
[  228.423921][ T5880] team0 (unregistering): Port device team_slave_1 removed
[  228.480875][ T5880] team0 (unregistering): Port device team_slave_0 removed
[  228.561825][ T5121] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  228.572816][ T5121] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  228.613967][ T5121] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  228.629306][ T5121] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  228.639374][ T5121] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  228.651488][ T5121] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  228.996353][ T9915] team0: Port device team_slave_0 added
[  229.044444][ T9915] team0: Port device team_slave_1 added
[  229.129529][ T9915] batman_adv: batadv0: Adding interface: batadv_slave_0
[  229.139975][ T9915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  229.166545][ T9915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  229.184892][ T9915] batman_adv: batadv0: Adding interface: batadv_slave_1
[  229.191848][ T9915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  229.229485][ T9915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  229.279348][T10000] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  229.443049][ T9915] hsr_slave_0: entered promiscuous mode
[  229.460139][ T9915] hsr_slave_1: entered promiscuous mode
[  229.466790][ T9915] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  229.476971][ T9915] Cannot create hsr debugfs directory
[  229.559059][T10010] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  229.588935][T10010] netlink: 116376 bytes leftover after parsing attributes in process `syz-executor.4'.
[  229.603859][T10010] netlink: 18430 bytes leftover after parsing attributes in process `syz-executor.4'.
[  229.694134][ T5121] Bluetooth: hci0: command tx timeout
[  229.804444][ T5880] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.971913][ T5880] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.004212][ T9990] chnl_net:caif_netlink_parms(): no params data found
[  230.104556][ T5880] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.431358][T10039] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[  230.555909][ T5880] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.734259][ T5121] Bluetooth: hci2: command tx timeout
[  230.750150][ T9990] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.757717][ T9990] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.772092][ T9990] bridge_slave_0: entered allmulticast mode
[  230.780140][ T9990] bridge_slave_0: entered promiscuous mode
[  230.822062][ T9990] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.831368][ T9990] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.840098][ T9990] bridge_slave_1: entered allmulticast mode
[  230.847730][ T9990] bridge_slave_1: entered promiscuous mode
[  230.969028][ T9990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  230.979159][ T5880] bridge_slave_1: left allmulticast mode
[  230.989017][ T5880] bridge_slave_1: left promiscuous mode
[  230.998780][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.008915][ T5880] bridge_slave_0: left allmulticast mode
[  231.018692][ T5880] bridge_slave_0: left promiscuous mode
[  231.024644][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.090209][T10072] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
[  231.099048][T10072] netlink: 116376 bytes leftover after parsing attributes in process `syz-executor.0'.
[  231.109103][T10072] netlink: 18430 bytes leftover after parsing attributes in process `syz-executor.0'.
[  231.343445][ T5880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  231.358870][ T5880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  231.371397][ T5880] bond0 (unregistering): Released all slaves
[  231.386164][ T9990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  231.468521][ T9990] team0: Port device team_slave_0 added
[  231.482367][ T9990] team0: Port device team_slave_1 added
[  231.573633][ T9990] batman_adv: batadv0: Adding interface: batadv_slave_0
[  231.580901][ T9990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  231.611575][ T9990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  231.639752][ T9915] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  231.655845][ T9915] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  231.692136][ T9990] batman_adv: batadv0: Adding interface: batadv_slave_1
[  231.710393][ T9990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  231.746584][ T9990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  231.774840][ T5121] Bluetooth: hci0: command tx timeout
[  231.780386][ T9915] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  231.822404][ T9915] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  231.931756][T10080] netlink: 'syz-executor.4': attribute type 39 has an invalid length.
[  231.946561][T10080] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  231.960649][T10080] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.4'.
[  232.010913][T10080] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  232.062074][T10083] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[  232.098870][ T9990] hsr_slave_0: entered promiscuous mode
[  232.110718][ T9990] hsr_slave_1: entered promiscuous mode
[  232.126720][ T9990] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  232.143903][ T9990] Cannot create hsr debugfs directory
[  232.154893][ T5880] hsr_slave_0: left promiscuous mode
[  232.161881][ T5880] hsr_slave_1: left promiscuous mode
[  232.177473][ T5880] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  232.190178][ T5880] batman_adv: batadv0: Removing interface: batadv_slave_0
[  232.207372][ T5880] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  232.222335][ T5880] batman_adv: batadv0: Removing interface: batadv_slave_1
[  232.246620][ T5880] veth1_macvtap: left promiscuous mode
[  232.252210][ T5880] veth0_macvtap: left promiscuous mode
[  232.277076][ T5880] veth1_vlan: left promiscuous mode
[  232.294618][ T5880] veth0_vlan: left promiscuous mode
[  232.814080][ T5121] Bluetooth: hci2: command tx timeout
[  232.919472][ T5880] team0 (unregistering): Port device team_slave_1 removed
[  232.957706][ T5880] team0 (unregistering): Port device team_slave_0 removed
[  233.752124][ T9915] 8021q: adding VLAN 0 to HW filter on device bond0
[  233.855025][ T5121] Bluetooth: hci0: command tx timeout
[  233.855136][ T9915] 8021q: adding VLAN 0 to HW filter on device team0
[  233.890317][  T928] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.897508][  T928] bridge0: port 1(bridge_slave_0) entered forwarding state
[  233.916658][ T5117] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.923838][ T5117] bridge0: port 2(bridge_slave_1) entered forwarding state
[  234.002586][ T9915] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  234.014761][ T9915] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  234.216901][ T9990] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  234.227739][    C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  234.232100][ T9990] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  234.266919][ T9990] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  234.287984][ T9990] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  234.408017][ T9915] 8021q: adding VLAN 0 to HW filter on device batadv0
[  234.463620][ T9990] 8021q: adding VLAN 0 to HW filter on device bond0
[  234.499438][ T9990] 8021q: adding VLAN 0 to HW filter on device team0
[  234.526380][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.533770][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state
[  234.578677][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.585900][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state
[  234.622143][ T9915] veth0_vlan: entered promiscuous mode
[  234.643598][ T9915] veth1_vlan: entered promiscuous mode
[  234.746572][ T9915] veth0_macvtap: entered promiscuous mode
[  234.769206][ T9915] veth1_macvtap: entered promiscuous mode
[  234.811414][ T9915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  234.829503][ T9915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.841385][ T9915] batman_adv: batadv0: Interface activated: batadv_slave_0
[  234.857784][ T9915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  234.878185][ T9915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.890091][ T9915] batman_adv: batadv0: Interface activated: batadv_slave_1
[  234.894846][ T5121] Bluetooth: hci2: command tx timeout
[  234.927002][ T9915] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  234.951977][ T9915] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  234.989241][ T9915] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  235.013080][ T9915] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  235.138873][T10176] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
[  235.139731][ T9990] 8021q: adding VLAN 0 to HW filter on device batadv0
[  235.160224][T10176] netlink: 116376 bytes leftover after parsing attributes in process `syz-executor.0'.
[  235.194039][T10176] netlink: 18430 bytes leftover after parsing attributes in process `syz-executor.0'.
[  235.299178][ T8406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  235.311518][ T8406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  235.361251][ T9990] veth0_vlan: entered promiscuous mode
[  235.373299][ T8406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  235.407361][ T8406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  235.410169][ T9990] veth1_vlan: entered promiscuous mode
[  235.497880][ T9990] veth0_macvtap: entered promiscuous mode
[  235.518498][ T9990] veth1_macvtap: entered promiscuous mode
[  235.561075][ T9990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  235.571933][ T9990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.582107][ T9990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  235.593923][ T9990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.607259][ T9990] batman_adv: batadv0: Interface activated: batadv_slave_0
[  235.627840][ T9990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.650731][ T9990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.671769][ T9990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.682532][ T9990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.696543][ T9990] batman_adv: batadv0: Interface activated: batadv_slave_1
[  235.721627][ T9990] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  235.730695][ T9990] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  235.739691][ T9990] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  235.748629][ T9990] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  235.922308][ T5880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  235.936371][ T5880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  235.985856][ T5905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  235.999833][ T5905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  236.144832][T10200] �: renamed from pim6reg1
[  236.164079][T10206] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  236.183700][T10206] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  236.195089][T10204] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  236.209800][T10204] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  236.231666][T10205] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  236.411683][T10219] netlink: 'syz-executor.0': attribute type 8 has an invalid length.
[  236.421123][T10219] netlink: 156764 bytes leftover after parsing attributes in process `syz-executor.0'.
[  236.432011][T10222] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
[  236.440972][T10222] netlink: 132008 bytes leftover after parsing attributes in process `syz-executor.2'.
[  236.721183][T10231] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
[  236.732948][T10231] netlink: 116376 bytes leftover after parsing attributes in process `syz-executor.0'.
[  236.746503][T10231] netlink: 18430 bytes leftover after parsing attributes in process `syz-executor.0'.
[  238.182300][T10249] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  238.219726][T10249] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.0'.
[  238.238631][T10249] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  238.470763][ T8407] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.483211][ T5127] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  239.494888][ T5127] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  239.504712][ T5127] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  239.515958][ T5127] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  239.545092][ T5127] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  239.564336][ T5127] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  239.639628][ T5127] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  239.650886][ T5127] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  239.660678][ T5127] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  239.674413][ T5127] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  239.683044][ T5127] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  239.690898][ T5127] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  240.929550][T10290] netlink: 116376 bytes leftover after parsing attributes in process `syz-executor.0'.
[  240.972214][T10290] netlink: 18430 bytes leftover after parsing attributes in process `syz-executor.0'.
[  241.071225][   T29] audit: type=1804 audit(1718093564.285:10): pid=10299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir491126104/syzkaller.gJaITr/511/memory.events" dev="sda1" ino=1956 res=1 errno=0
[  241.072683][ T8407] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.125689][   T29] audit: type=1800 audit(1718093564.345:11): pid=10299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.events" dev="sda1" ino=1956 res=0 errno=0
[  241.201814][T10278] chnl_net:caif_netlink_parms(): no params data found
[  241.246544][ T8407] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.341834][ T8407] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.402860][T10281] chnl_net:caif_netlink_parms(): no params data found
[  241.497575][T10278] bridge0: port 1(bridge_slave_0) entered blocking state
[  241.522341][T10278] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.542886][T10278] bridge_slave_0: entered allmulticast mode
[  241.557323][T10278] bridge_slave_0: entered promiscuous mode
[  241.594211][T10311] validate_nla: 1 callbacks suppressed
[  241.594246][T10311] netlink: 'syz-executor.2': attribute type 33 has an invalid length.
[  241.618906][ T5127] Bluetooth: hci0: command tx timeout
[  241.639868][T10278] bridge0: port 2(bridge_slave_1) entered blocking state
[  241.651205][T10278] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.661076][T10278] bridge_slave_1: entered allmulticast mode
[  241.672165][T10278] bridge_slave_1: entered promiscuous mode
[  241.730093][ T5162] bridge0: port 3(team0) entered blocking state
[  241.736533][ T5162] bridge0: port 3(team0) entered forwarding state
[  241.778684][ T5127] Bluetooth: hci2: command tx timeout
[  241.888606][T10278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  242.067305][T10278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  242.091711][T10281] bridge0: port 1(bridge_slave_0) entered blocking state
[  242.111207][T10281] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.121425][T10281] bridge_slave_0: entered allmulticast mode
[  242.132766][T10281] bridge_slave_0: entered promiscuous mode
[  242.228195][T10281] bridge0: port 2(bridge_slave_1) entered blocking state
[  242.240138][T10281] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.251326][T10281] bridge_slave_1: entered allmulticast mode
[  242.259267][T10281] bridge_slave_1: entered promiscuous mode
[  242.310682][ T8407] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.345325][T10278] team0: Port device team_slave_0 added
[  242.403159][T10278] team0: Port device team_slave_1 added
[  242.459745][ T8407] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.512359][T10281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  242.561709][ T8407] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.608371][T10281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  242.679841][T10344] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  242.688577][T10344] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.2'.
[  242.709306][T10344] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[  242.715364][T10278] batman_adv: batadv0: Adding interface: batadv_slave_0
[  242.742756][T10278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  242.778887][T10278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  242.791018][T10349] netlink: 134788 bytes leftover after parsing attributes in process `syz-executor.4'.
[  242.848476][ T8407] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.869292][T10278] batman_adv: batadv0: Adding interface: batadv_slave_1
[  242.881691][T10278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  242.913208][T10278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  242.943684][T10281] team0: Port device team_slave_0 added
[  242.952937][T10281] team0: Port device team_slave_1 added
[  243.693917][ T5127] Bluetooth: hci0: command tx timeout
[  243.854250][ T5127] Bluetooth: hci2: command tx timeout
[  244.694164][T10278] hsr_slave_0: entered promiscuous mode
[  244.705287][T10278] hsr_slave_1: entered promiscuous mode
[  244.711972][T10278] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  244.720037][T10278] Cannot create hsr debugfs directory
[  244.728595][T10356] netlink: 'syz-executor.0': attribute type 33 has an invalid length.
[  244.759206][T10281] batman_adv: batadv0: Adding interface: batadv_slave_0
[  244.778906][T10281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  244.815386][T10281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  244.836994][T10281] batman_adv: batadv0: Adding interface: batadv_slave_1
[  244.844869][T10281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  245.000859][T10281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  245.453414][T10281] hsr_slave_0: entered promiscuous mode
[  245.469060][T10281] hsr_slave_1: entered promiscuous mode
[  245.476353][T10281] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  245.484134][T10281] Cannot create hsr debugfs directory
[  245.600025][ T8407] bridge_slave_1: left allmulticast mode
[  245.606693][ T8407] bridge_slave_1: left promiscuous mode
[  245.612566][ T8407] bridge0: port 2(bridge_slave_1) entered disabled state
[  245.622939][ T8407] bridge_slave_0: left allmulticast mode
[  245.629358][ T8407] bridge_slave_0: left promiscuous mode
[  245.636446][ T8407] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.649686][ T8407] bridge_slave_1: left allmulticast mode
[  245.650588][T10381] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'.
[  245.655701][ T8407] bridge_slave_1: left promiscuous mode
[  245.670826][ T8407] bridge0: port 2(bridge_slave_1) entered disabled state
[  245.680084][ T8407] bridge_slave_0: left allmulticast mode
[  245.686971][ T8407] bridge_slave_0: left promiscuous mode
[  245.693540][ T8407] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.777906][ T5127] Bluetooth: hci0: command tx timeout
[  245.933980][ T5127] Bluetooth: hci2: command tx timeout
[  246.352518][ T8407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  246.365601][ T8407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  246.391432][ T8407] bond0 (unregistering): Released all slaves
[  246.508849][ T8407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  246.537607][ T8407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  246.549572][ T8407] bond0 (unregistering): Released all slaves
[  247.862818][ T5127] Bluetooth: hci0: command tx timeout
[  248.023893][ T5127] Bluetooth: hci2: command tx timeout
[  248.926726][T10408] syz-executor.0[10408] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  248.926957][T10408] syz-executor.0[10408] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  249.131984][T10408] syzkaller0: entered promiscuous mode
[  249.152806][T10408] syzkaller0: entered allmulticast mode
[  251.339826][T10419] ������: renamed from vlan0 (while UP)
[  251.926902][ T8407] hsr_slave_0: left promiscuous mode
[  251.944175][ T8407] hsr_slave_1: left promiscuous mode
[  251.955643][ T8407] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  251.963222][ T8407] batman_adv: batadv0: Removing interface: batadv_slave_0
[  252.012006][ T8407] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  252.056239][ T8407] batman_adv: batadv0: Removing interface: batadv_slave_1
[  252.087211][ T8407] hsr_slave_0: left promiscuous mode
[  252.094326][ T8407] hsr_slave_1: left promiscuous mode
[  252.101108][ T8407] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  252.115103][ T8407] batman_adv: batadv0: Removing interface: batadv_slave_0
[  252.123609][ T8407] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  252.135859][ T8407] batman_adv: batadv0: Removing interface: batadv_slave_1
[  252.211958][ T8407] veth1_macvtap: left promiscuous mode
[  252.223862][ T8407] veth0_macvtap: left promiscuous mode
[  252.229716][ T8407] veth1_vlan: left promiscuous mode
[  252.236330][ T8407] veth0_vlan: left promiscuous mode
[  252.275758][ T8407] veth1_macvtap: left promiscuous mode
[  252.291210][ T8407] veth0_macvtap: left promiscuous mode
[  252.297174][ T8407] veth1_vlan: left promiscuous mode
[  252.302594][ T8407] veth0_vlan: left promiscuous mode
[  254.122178][ T8407] team0 (unregistering): Port device team_slave_1 removed
[  254.204452][ T8407] team0 (unregistering): Port device team_slave_0 removed
[  255.440498][ T8407] team0 (unregistering): Port device team_slave_1 removed
[  255.498229][ T8407] team0 (unregistering): Port device team_slave_0 removed
[  256.016212][ T1250] ieee802154 phy0 wpan0: encryption failed: -22
[  256.022560][ T1250] ieee802154 phy1 wpan1: encryption failed: -22
[  257.655274][T10281] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  257.761158][T10281] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  258.132674][T10281] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  258.267732][T10281] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  258.333246][T10278] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  258.373004][T10278] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  258.420914][T10472] sit0: entered allmulticast mode
[  258.457545][T10278] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  258.542072][T10278] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  259.328124][T10278] 8021q: adding VLAN 0 to HW filter on device bond0
[  259.382793][T10281] 8021q: adding VLAN 0 to HW filter on device bond0
[  259.511967][T10281] 8021q: adding VLAN 0 to HW filter on device team0
[  259.552036][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[  259.559230][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[  259.642421][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[  259.649702][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[  259.682470][T10278] 8021q: adding VLAN 0 to HW filter on device team0
[  260.078761][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.086002][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[  260.211507][ T5295] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.218749][ T5295] bridge0: port 2(bridge_slave_1) entered forwarding state
[  260.370457][T10281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  260.462774][T10504] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  260.585445][T10504] batadv0: mtu greater than device maximum
[  260.976501][T10281] 8021q: adding VLAN 0 to HW filter on device batadv0
[  261.189502][T10278] 8021q: adding VLAN 0 to HW filter on device batadv0
[  261.214794][T10281] veth0_vlan: entered promiscuous mode
[  261.253321][T10281] veth1_vlan: entered promiscuous mode
[  261.308750][T10533] netlink: 'syz-executor.4': attribute type 17 has an invalid length.
[  261.334360][T10533] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  261.512611][T10278] veth0_vlan: entered promiscuous mode
[  261.663522][T10281] veth0_macvtap: entered promiscuous mode
[  261.699004][T10278] veth1_vlan: entered promiscuous mode
[  261.835545][T10281] veth1_macvtap: entered promiscuous mode
[  262.148060][T10281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  262.176020][T10281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  262.218928][T10281] batman_adv: batadv0: Interface activated: batadv_slave_0
[  262.264066][T10550] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  262.287400][T10550] team0: left allmulticast mode
[  262.304094][T10550] team_slave_0: left allmulticast mode
[  262.317609][T10550] team_slave_1: left allmulticast mode
[  262.332896][T10550] team0: left promiscuous mode
[  262.343891][T10550] team_slave_0: left promiscuous mode
[  262.349588][T10550] team_slave_1: left promiscuous mode
[  262.390496][T10550] bridge0: port 3(team0) entered disabled state
[  262.425396][T10550] batman_adv: batadv0: Adding interface: team0
[  262.441876][T10550] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  262.481740][T10278] veth0_macvtap: entered promiscuous mode
[  262.514399][T10281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  262.541746][T10281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  262.569730][T10281] batman_adv: batadv0: Interface activated: batadv_slave_1
[  262.603098][T10278] veth1_macvtap: entered promiscuous mode
[  262.653508][T10560] netlink: 'syz-executor.0': attribute type 39 has an invalid length.
[  262.734698][T10281] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  262.743447][T10281] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  262.777392][T10281] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  262.788210][T10281] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  262.804859][T10564] netlink: 'syz-executor.2': attribute type 17 has an invalid length.
[  262.827055][T10564] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  262.926379][T10278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  262.975482][T10278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.027924][T10278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.058785][T10278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.090235][T10278] batman_adv: batadv0: Interface activated: batadv_slave_0
[  263.126998][T10278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.160644][T10278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.179670][T10278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.190581][T10278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.208834][T10278] batman_adv: batadv0: Interface activated: batadv_slave_1
[  263.238834][T10570] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'.
[  263.388106][T10278] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  263.418761][T10278] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  263.432519][T10278] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  263.441711][T10278] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  263.616023][ T8407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  263.659554][ T8407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  263.712814][ T8406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  263.887201][ T8406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  263.940512][ T5905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  263.983768][ T5905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  264.072403][ T5905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  264.126671][ T5905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  264.957953][T10604] netlink: 'syz-executor.4': attribute type 39 has an invalid length.
[  265.001236][T10604] bridge0: port 4(syz_tun) entered disabled state
[  265.079090][T10604] syz_tun (unregistering): left allmulticast mode
[  265.101716][T10604] syz_tun (unregistering): left promiscuous mode
[  265.120125][T10604] bridge0: port 4(syz_tun) entered disabled state
[  265.343242][ T5909] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.620363][ T5909] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.722128][ T5121] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  265.769236][ T5121] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  265.778039][ T5121] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  265.788179][ T5121] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  265.795976][ T5121] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  265.803357][ T5121] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  266.073565][ T5909] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.329943][ T5909] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.695530][ T5909] bridge_slave_1: left allmulticast mode
[  266.701248][ T5909] bridge_slave_1: left promiscuous mode
[  266.711092][ T5909] bridge0: port 2(bridge_slave_1) entered disabled state
[  266.805529][ T5909] bridge_slave_0: left allmulticast mode
[  266.811491][ T5909] bridge_slave_0: left promiscuous mode
[  266.921794][ T5909] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.521561][ T5121] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  267.540612][ T5121] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  267.549321][ T5121] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  267.559541][ T5121] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  267.567459][ T5121] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  267.576473][ T5121] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  267.866972][ T5121] Bluetooth: hci0: command tx timeout
[  268.314431][T10655] 
[  268.316801][T10655] ============================================
[  268.322927][T10655] WARNING: possible recursive locking detected
[  268.329094][T10655] 6.10.0-rc2-syzkaller-00235-g93792130a938 #0 Not tainted
[  268.336173][T10655] --------------------------------------------
[  268.342387][T10655] syz-executor.4/10655 is trying to acquire lock:
[  268.348770][T10655] ffff88802e0581d8 (&qs->lock){..-.}-{2:2}, at: __stack_map_get+0x14b/0x4b0
[  268.357465][T10655] 
[  268.357465][T10655] but task is already holding lock:
[  268.364801][T10655] ffff88805f33c1d8 (&qs->lock){..-.}-{2:2}, at: queue_stack_map_push_elem+0x1b2/0x660
[  268.374425][T10655] 
[  268.374425][T10655] other info that might help us debug this:
[  268.382459][T10655]  Possible unsafe locking scenario:
[  268.382459][T10655] 
[  268.389881][T10655]        CPU0
[  268.393148][T10655]        ----
[  268.396409][T10655]   lock(&qs->lock);
[  268.400285][T10655]   lock(&qs->lock);
[  268.404160][T10655] 
[  268.404160][T10655]  *** DEADLOCK ***
[  268.404160][T10655] 
[  268.412281][T10655]  May be due to missing lock nesting notation
[  268.412281][T10655] 
[  268.420602][T10655] 4 locks held by syz-executor.4/10655:
[  268.426118][T10655]  #0: ffff8880b943e7d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  268.436014][T10655]  #1: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0x244/0x590
[  268.445382][T10655]  #2: ffff88805f33c1d8 (&qs->lock){..-.}-{2:2}, at: queue_stack_map_push_elem+0x1b2/0x660
[  268.455356][T10655]  #3: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1fc/0x540
[  268.464762][T10655] 
[  268.464762][T10655] stack backtrace:
[  268.470644][T10655] CPU: 0 PID: 10655 Comm: syz-executor.4 Not tainted 6.10.0-rc2-syzkaller-00235-g93792130a938 #0
[  268.481126][T10655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  268.491248][T10655] Call Trace:
[  268.494508][T10655]  <TASK>
[  268.497420][T10655]  dump_stack_lvl+0x241/0x360
[  268.502090][T10655]  ? __pfx_dump_stack_lvl+0x10/0x10
[  268.507272][T10655]  ? print_deadlock_bug+0x479/0x620
[  268.512450][T10655]  validate_chain+0x15d3/0x5900
[  268.517280][T10655]  ? __pfx_validate_chain+0x10/0x10
[  268.522463][T10655]  ? cmp_ex_search+0x74/0xa0
[  268.527032][T10655]  ? __pfx_validate_chain+0x10/0x10
[  268.532382][T10655]  ? bsearch+0x98/0xc0
[  268.536459][T10655]  ? __pfx_cmp_ex_search+0x10/0x10
[  268.541547][T10655]  ? __get_user_nocheck_8+0xa/0x20
[  268.546638][T10655]  ? __pfx_search_extable+0x10/0x10
[  268.551811][T10655]  ? __get_user_nocheck_8+0xa/0x20
[  268.556899][T10655]  ? search_extable+0xb3/0x100
[  268.561639][T10655]  ? __lock_acquire+0x1346/0x1fd0
[  268.566641][T10655]  ? __pfx_validate_chain+0x10/0x10
[  268.571820][T10655]  ? mark_lock+0x9a/0x350
[  268.576127][T10655]  ? __pfx_validate_chain+0x10/0x10
[  268.581300][T10655]  __lock_acquire+0x1346/0x1fd0
[  268.586133][T10655]  lock_acquire+0x1ed/0x550
[  268.590613][T10655]  ? __stack_map_get+0x14b/0x4b0
[  268.595535][T10655]  ? __pfx_lock_acquire+0x10/0x10
[  268.600544][T10655]  ? __lock_acquire+0x1346/0x1fd0
[  268.605558][T10655]  _raw_spin_lock_irqsave+0xd5/0x120
[  268.610843][T10655]  ? __stack_map_get+0x14b/0x4b0
[  268.615759][T10655]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  268.621634][T10655]  ? bpf_trace_run2+0x1fc/0x540
[  268.626468][T10655]  __stack_map_get+0x14b/0x4b0
[  268.631211][T10655]  ? __pfx_lock_acquire+0x10/0x10
[  268.636212][T10655]  ? __pfx_validate_chain+0x10/0x10
[  268.641822][T10655]  ? __pfx___stack_map_get+0x10/0x10
[  268.647085][T10655]  ? __pfx___cant_migrate+0x10/0x10
[  268.652263][T10655]  ? bpf_trace_run2+0x1fc/0x540
[  268.657093][T10655]  bpf_prog_94b194d4ebfffdd5+0x45/0x49
[  268.662533][T10655]  bpf_trace_run2+0x2ec/0x540
[  268.667190][T10655]  ? __pfx_bpf_trace_run2+0x10/0x10
[  268.672365][T10655]  ? rcu_read_lock_sched_held+0x8d/0x130
[  268.677975][T10655]  trace_contention_end+0x114/0x140
[  268.683152][T10655]  __pv_queued_spin_lock_slowpath+0xb81/0xdc0
[  268.689291][T10655]  ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10
[  268.695861][T10655]  queued_spin_lock_slowpath+0x42/0x50
[  268.701298][T10655]  do_raw_spin_lock+0x272/0x370
[  268.706129][T10655]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  268.711477][T10655]  ? __lock_acquire+0x1346/0x1fd0
[  268.716493][T10655]  _raw_spin_lock_irqsave+0xe1/0x120
[  268.721760][T10655]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  268.727721][T10655]  queue_stack_map_push_elem+0x1b2/0x660
[  268.733368][T10655]  ? __pfx_lock_acquire+0x10/0x10
[  268.738374][T10655]  ? __pfx_queue_stack_map_push_elem+0x10/0x10
[  268.744513][T10655]  ? __pfx___cant_migrate+0x10/0x10
[  268.749698][T10655]  ? bpf_trace_run4+0x244/0x590
[  268.754531][T10655]  bpf_prog_216c997a1f42e404+0x3f/0x43
[  268.759970][T10655]  bpf_trace_run4+0x334/0x590
[  268.764628][T10655]  ? __pfx_rcu_read_lock_sched_held+0x10/0x10
[  268.770760][T10655]  ? __pfx_bpf_trace_run4+0x10/0x10
[  268.775936][T10655]  ? __pfx_probe_sched_switch+0x10/0x10
[  268.781464][T10655]  ? tracing_record_taskinfo_sched_switch+0x7b/0x390
[  268.788135][T10655]  ? __pfx___bpf_trace_sched_switch+0x10/0x10
[  268.794190][T10655]  __traceiter_sched_switch+0x98/0xd0
[  268.799544][T10655]  __schedule+0x2587/0x4a20
[  268.804030][T10655]  ? handle_softirqs+0x7a5/0x970
[  268.808946][T10655]  ? __pfx___schedule+0x10/0x10
[  268.813779][T10655]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  268.819735][T10655]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  268.826039][T10655]  schedule+0x14b/0x320
[  268.830175][T10655]  irqentry_exit_to_user_mode+0xe7/0x280
[  268.835786][T10655]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  268.841753][T10655] RIP: 0033:0x7f18fa433fc9
[  268.846147][T10655] Code: 00 00 00 48 89 de bf ca 00 00 00 31 c0 e8 9f 8f 04 00 8b 03 85 c0 74 e1 c7 45 08 00 00 00 00 48 89 ef e8 0a bf ff ff 8b 45 0c <85> c0 75 39 b9 40 42 0f 00 ba 81 00 00 00 4c 89 e6 41 c7 04 24 01
2024/06/11 08:13:12 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  268.865729][T10655] RSP: 002b:00007f18fb256180 EFLAGS: 00000202
[  268.871791][T10655] RAX: 0000000000000000 RBX: 00007f18fa5b3f88 RCX: 00007f18fa4db83d
[  268.879738][T10655] RDX: 000000000002a386 RSI: 0000000000000000 RDI: 00007f18fa4ec81a
[  268.887686][T10655] RBP: 00007f18fa5b3f80 R08: ffffffffffffffff R09: 7fffffffffffffff
[  268.895637][T10655] R10: 00007f18fb2570b8 R11: 00007f18fb257080 R12: 00007f18fa5b3f8c
[  268.903583][T10655] R13: 000000000000004d R14: 00007ffe6f3ef290 R15: 00007ffe6f3ef378
[  268.911540][T10655]  </TASK>
[  269.136041][ T5909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  269.174146][ T5909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  269.197319][ T5909] bond0 (unregistering): Released all slaves
Connection to 10.128.0.191 closed by remote host.