last executing test programs:

2m26.93355047s ago: executing program 3 (id=1413):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x0}, 0x94)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
r1 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000500)="62042700ffff002f1eafbcf706e12b30087f5c582d26116642c47a5f0400ee601e65abbc06d4b8bf4a81cb3e247345af21", 0x31}], 0x1}, 0x24008000)

2m26.567759516s ago: executing program 3 (id=1417):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b000000050000000500000009"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000001811", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="620ac4ff0000000071102b000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000000500000085000000a0000000950000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc7, &(0x7f0000000140)=""/199}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m25.177748915s ago: executing program 3 (id=1424):
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1d, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x4, 0x47, &(0x7f0000000340)=""/71, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb}, 0x94)
socket$kcm(0xa, 0x5, 0x0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socket$kcm(0xa, 0x2, 0x3a)
ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'team0\x00', @random="2b0100004ec6"})

2m24.752818523s ago: executing program 3 (id=1427):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x5}, 0x48)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}}, 0x0, 0x32}, 0x20)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x2, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x2, 0x2}, 0x48)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})

2m23.522272996s ago: executing program 3 (id=1434):
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x43001000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

2m19.91303409s ago: executing program 3 (id=1446):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4975e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x10008, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x12, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {}, {}, [@exit, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x8000, 0x0, 0x0, 0x41100, 0x74, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x10, 0xa437}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[0x1, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000400)=[{0x5, 0x3, 0xa, 0x2}, {0x1, 0x5, 0x4, 0x6}, {0x1, 0x5, 0x6, 0x6}, {0x1, 0x1, 0x8, 0xc}, {0x2, 0x4, 0xa, 0x1}], 0x10, 0x3}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r3}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000680)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r0, @ANYRES16=r4, @ANYRES64=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x701a00, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r5}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r6}, 0x38)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000300), 0x6e, 0x0, 0x300}, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup(r7, 0x0, 0x200002, 0x0)

2m4.743160928s ago: executing program 32 (id=1446):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4975e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x10008, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x12, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {}, {}, [@exit, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x8000, 0x0, 0x0, 0x41100, 0x74, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x10, 0xa437}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[0x1, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000400)=[{0x5, 0x3, 0xa, 0x2}, {0x1, 0x5, 0x4, 0x6}, {0x1, 0x5, 0x6, 0x6}, {0x1, 0x1, 0x8, 0xc}, {0x2, 0x4, 0xa, 0x1}], 0x10, 0x3}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r3}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000680)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r0, @ANYRES16=r4, @ANYRES64=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x701a00, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r5}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r6}, 0x38)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000300), 0x6e, 0x0, 0x300}, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup(r7, 0x0, 0x200002, 0x0)

1m5.328495138s ago: executing program 4 (id=1727):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m4.985515832s ago: executing program 4 (id=1729):
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xad, 0xad, 0xb, [@func={0x10, 0x0, 0x0, 0xc, 0x2}, @union={0x6, 0x4, 0x0, 0x5, 0x0, 0x4, [{0x10, 0x3, 0x4fa}, {0x0, 0x2, 0x7}, {0x2, 0x3, 0x8}, {0xf, 0x4, 0xf36c}]}, @datasec={0x10, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x0, 0x6}], '`'}, @fwd={0xc}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x5, 0xa}, @enum64={0xa, 0x2, 0x0, 0x13, 0x0, 0x5, [{0xe, 0x2, 0x381}, {0xb, 0x400, 0x300000}]}, @ptr={0x9, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x61, 0x30, 0x30, 0x61, 0x61, 0x0, 0x61, 0x5f, 0x0]}}, &(0x7f0000000680)=""/183, 0xd3, 0xb7, 0x1, 0x1}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x5a, '\x00', 0x0, @fallback=0x1f, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x730, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@type_tag={0x7, 0x0, 0x0, 0x12, 0x1}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x28)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000780)="e10ea784d395f5d2e39879420a85", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x1}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000880), 0x12)
socketpair(0x18, 0x0, 0x2, &(0x7f0000000000))
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x6, 0x4, 0x599, 0xa, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r6, 0x0, 0x1ba8847c99}, 0x38)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000140)=ANY=[], 0xfffffdef)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

1m3.738296646s ago: executing program 4 (id=1738):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10)
syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0)

1m2.671130931s ago: executing program 4 (id=1748):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
sendmsg$tipc(r0, 0x0, 0x0)
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0x24400, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, @perf_config_ext={0x9, 0xb92}, 0x482, 0x81, 0x7ff, 0x0, 0x0, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r2}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00'}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_1\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xaf)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)

1m1.117199428s ago: executing program 4 (id=1758):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_clone(0xc0000000, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)

1m0.060009212s ago: executing program 4 (id=1767):
bpf$MAP_CREATE(0x0, 0x0, 0xfffffefd)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94)
openat$tun(0xffffffffffffff9c, 0x0, 0x701a00, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/12], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r0, @ANYBLOB="00fffffff5000000000000000010", @ANYRES32=0x0, @ANYBLOB], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b0000000700000001000100080000000100"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote})
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbfffffc, 0x4, @perf_config_ext={0x1, 0xda}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000ec0)=@name={0x1e, 0x2, 0x1, {{0x1, 0x2}, 0x1}}, 0x10, 0x0}, 0x460c4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"})
bpf$MAP_CREATE(0x0, 0x0, 0x0)

44.834860523s ago: executing program 33 (id=1767):
bpf$MAP_CREATE(0x0, 0x0, 0xfffffefd)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94)
openat$tun(0xffffffffffffff9c, 0x0, 0x701a00, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/12], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r0, @ANYBLOB="00fffffff5000000000000000010", @ANYRES32=0x0, @ANYBLOB], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b0000000700000001000100080000000100"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote})
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbfffffc, 0x4, @perf_config_ext={0x1, 0xda}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000ec0)=@name={0x1e, 0x2, 0x1, {{0x1, 0x2}, 0x1}}, 0x10, 0x0}, 0x460c4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"})
bpf$MAP_CREATE(0x0, 0x0, 0x0)

39.05531626s ago: executing program 0 (id=1850):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, 0x0}, 0x20)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={0xffffffffffffffff, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x50)
syz_clone(0x43001000, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x101400, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./cgroup.cpu/cpuset.cpus\x00'}, 0x18)
perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_procs(r4, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)

37.814064523s ago: executing program 0 (id=1854):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

37.563494894s ago: executing program 0 (id=1857):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x10102, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.swap.events\x00', 0x26e1, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000d00)='ns/ipc\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x62)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080))

36.707015441s ago: executing program 0 (id=1860):
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0x23, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x20}, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x3c, 0x0, &(0x7f0000000240)="0c87e70f6e1284e6afe0e0492e1090197e0c6c314132eae7f215fd87fec0c2b97135fc949de958f3953116bae94e46939e85b1bb60572d466ba61800", 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x3, 0x0, 0x36d8}, 0x50)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r2 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000180)=r1, 0x4)
openat$cgroup_int(r1, &(0x7f00000001c0)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe800000000000", 0xf}], 0x1}, 0x0)
r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='+l \x00'/15], 0xf)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x50}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x5000000, &(0x7f0000000680)=[{&(0x7f0000000dc0)="5c00000014006b02c84e21000af32c6e0a0675f80800000044000100fec00e000000004e0033df090e8497b1ed90d3d376bd5f6ffe5aa677b1c6f99b214460bc24f65ee2f308ff9d4f5a60eab556a705251e6182949a36c23d3b48df", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r5 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f0000000600), 0x4)
bpf$PROG_BIND_MAP(0x23, &(0x7f00000002c0)={r1, r0}, 0xc)
sendmsg$kcm(r5, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @local, 0x0, 0x3}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000340)="f4001100052b3325fe80070000000000000000000009ffffffe000"/40, 0xfd1b}], 0x1}, 0x20040000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b35d25a806c8c6f94f90f24fc60", 0x14}], 0x1}, 0x0)
socket$kcm(0x29, 0x5, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000500)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140643000000000e000a001000000086419820dd61", 0x2e}], 0x1}, 0x20000088)

36.204156342s ago: executing program 0 (id=1862):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r0}, 0x18)
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080))
socketpair$unix(0x1, 0x1, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907003675f37538e486dd6317ce623900fe800000002000e0865a6596aff57b00000000000000000000000000ac1414"], 0xfe1b)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850000000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff010000007110430000b0fd5618000000"], 0x0, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080))

35.891402206s ago: executing program 0 (id=1863):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x12, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {}, {}, [@exit, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x8000, 0x0, 0x0, 0x41100, 0x74, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x10, 0xa437}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[0x1, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000400)=[{0x5, 0x3, 0xa, 0x2}, {0x1, 0x5, 0x4, 0x6}, {0x1, 0x5, 0x6, 0x6}, {0x1, 0x1, 0x8, 0xc}, {0x2, 0x4, 0xa, 0x1}], 0x10, 0x3}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r3}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000680)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r0, @ANYRES16=r4, @ANYRES64=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x701a00, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r5}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r6}, 0x38)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000300), 0x6e, 0x0, 0x300}, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup(r7, 0x0, 0x200002, 0x0)

20.763410362s ago: executing program 34 (id=1863):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x12, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {}, {}, [@exit, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x8000, 0x0, 0x0, 0x41100, 0x74, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x10, 0xa437}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[0x1, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000400)=[{0x5, 0x3, 0xa, 0x2}, {0x1, 0x5, 0x4, 0x6}, {0x1, 0x5, 0x6, 0x6}, {0x1, 0x1, 0x8, 0xc}, {0x2, 0x4, 0xa, 0x1}], 0x10, 0x3}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r3}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000680)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r0, @ANYRES16=r4, @ANYRES64=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x701a00, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r5}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r6}, 0x38)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000300), 0x6e, 0x0, 0x300}, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup(r7, 0x0, 0x200002, 0x0)

17.854602927s ago: executing program 2 (id=1920):
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0x23, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x20}, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x69, 0x0, &(0x7f0000000240)="0c87e70f6e1284e6afe0e0492e1090197e0c6c314132eae7f215fd87fec0c2b97135fc949de958f3953116bae94e46939e85b1bb60572d466ba618005c1a3cfef34dd8c5e2de387d76edaf605c6c33e14576523ec6c71f58d71ff6a6150c636ed64413f1900d7bce3f", 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x3, 0x0, 0x36d8}, 0x50)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r2 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000180)=r1, 0x4)
openat$cgroup_int(r1, &(0x7f00000001c0)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe800000000000", 0xf}], 0x1}, 0x0)
r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='+l \x00'/15], 0xf)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x50}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x5000000, &(0x7f0000000680)=[{&(0x7f0000000dc0)="5c00000014006b02c84e21000af32c6e0a0675f80800000044000100fec00e000000004e0033df090e8497b1ed90d3d376bd5f6ffe5aa677b1c6f99b214460bc24f65ee2f308ff9d4f5a60eab556a705251e6182949a36c23d3b48df", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r5 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f0000000600), 0x4)
bpf$PROG_BIND_MAP(0x23, &(0x7f00000002c0)={r1, r0}, 0xc)
sendmsg$kcm(r5, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @local, 0x0, 0x3}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000340)="f4001100052b3325fe80070000000000000000000009ffffffe000"/40, 0xfd1b}], 0x1}, 0x20040000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b35d25a806c8c6f94f90f24fc60", 0x14}], 0x1}, 0x0)
socket$kcm(0x29, 0x5, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000500)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140643000000000e000a001000000086419820dd61", 0x2e}], 0x1}, 0x20000088)

17.479096073s ago: executing program 2 (id=1923):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, @perf_config_ext={0x9ae0067}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000004, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1}, 0x37)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, &(0x7f00000016c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES32=r3, @ANYBLOB="0500"/12, @ANYBLOB, @ANYRES64=0x0], 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20)
sendmsg(r1, 0x0, 0x0)
syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0x401}, 0x50)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000f40)={r4, 0x0, 0x0}, 0x20)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\b\x00\x00', &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0)

14.122400976s ago: executing program 5 (id=1933):
perf_event_open$cgroup(&(0x7f0000000180)={0x4, 0x80, 0x1, 0x80, 0xb9, 0x7, 0x0, 0xb, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffb98, 0x2, @perf_bp={0x0, 0x4}, 0x200, 0x40, 0x9, 0x3, 0xff, 0x9, 0x6, 0x0, 0x10000}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0600"], 0x48)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x10005, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
r1 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f00000005c0)=r1, 0x12)
r4 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r6}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r5}, 0x10)
write$cgroup_int(r4, &(0x7f0000000040)=0x1, 0x12)

11.962417239s ago: executing program 2 (id=1938):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x0, 0x5d}, 0x0, 0xca, 0x0, 0x0, 0x3, 0x3ff, 0xfffc, 0x0, 0x0, 0x0, 0x6c6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000300)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
recvmsg$unix(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa8}, 0x0)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_subtree(r5, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRES8=r6], 0x12)

11.817345054s ago: executing program 2 (id=1939):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xf1, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
close(r3)

11.667596921s ago: executing program 2 (id=1941):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x10102, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.swap.events\x00', 0x26e1, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000d00)='ns/ipc\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, 0x0, 0x62)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080))

11.636635882s ago: executing program 1 (id=1942):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18)
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)

11.477421229s ago: executing program 5 (id=1943):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r0}, 0x18)
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080))
socketpair$unix(0x1, 0x1, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907003675f37538e486dd6317ce623900fe800000002000e0865a6596aff57b00000000000000000000000000ac1414"], 0xfe1b)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff010000007110430000b0fd5618000000"], 0x0, 0x4}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080))

11.323252905s ago: executing program 5 (id=1944):
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffffff8500000004000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000", 0x2c}], 0x1}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000)
ioctl$TUNSETOFFLOAD(r1, 0x8010743f, 0xf0ff1f00000000)
syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0)

11.267545418s ago: executing program 2 (id=1945):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x94)
r0 = gettid()
syz_open_procfs$namespace(r0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xf)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000080), 0x1003, r1}, 0x38)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, &(0x7f00000002c0)}, 0x20)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}]}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

9.056784592s ago: executing program 6 (id=1949):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

7.01124475s ago: executing program 6 (id=1950):
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0x23, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x20}, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x62, 0x0, &(0x7f0000000240)="0c87e70f6e1284e6afe0e0492e1090197e0c6c314132eae7f215fd87fec0c2b97135fc949de958f3953116bae94e46939e85b1bb60572d466ba618005c1a3cfef34dd8c5e2de387d76edaf605c6c33e14576523ec6c71f58d71ff6a6150c636ed644", 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x3, 0x0, 0x36d8}, 0x50)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r2 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000180)=r1, 0x4)
openat$cgroup_int(r1, &(0x7f00000001c0)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe800000000000", 0xf}], 0x1}, 0x0)
r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='+l \x00'/15], 0xf)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x50}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x5000000, &(0x7f0000000680)=[{&(0x7f0000000dc0)="5c00000014006b02c84e21000af32c6e0a0675f80800000044000100fec00e000000004e0033df090e8497b1ed90d3d376bd5f6ffe5aa677b1c6f99b214460bc24f65ee2f308ff9d4f5a60eab556a705251e6182949a36c23d3b48df", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r5 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f0000000600), 0x4)
bpf$PROG_BIND_MAP(0x23, &(0x7f00000002c0)={r1, r0}, 0xc)
sendmsg$kcm(r5, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @local, 0x0, 0x3}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000340)="f4001100052b3325fe80070000000000000000000009ffffffe000"/40, 0xfd1b}], 0x1}, 0x20040000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b35d25a806c8c6f94f90f24fc60", 0x14}], 0x1}, 0x0)
socket$kcm(0x29, 0x5, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000500)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140643000000000e000a001000000086419820dd61", 0x2e}], 0x1}, 0x20000088)

6.641551506s ago: executing program 6 (id=1951):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

6.269482742s ago: executing program 6 (id=1952):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000001811", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

5.835685s ago: executing program 6 (id=1953):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
sendmsg$tipc(r0, 0x0, 0x0)
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0x24400, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, @perf_config_ext={0x9, 0xb92}, 0x482, 0x81, 0x7ff, 0x0, 0x0, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r4, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r3}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r2}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_1\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8922, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xaf)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r6}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r7], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)

5.248798105s ago: executing program 1 (id=1954):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x10102, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.swap.events\x00', 0x26e1, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000d00)='ns/ipc\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, 0x0, 0x62)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080))

5.101652761s ago: executing program 5 (id=1955):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x48)
recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000001c0)}, {&(0x7f00000002c0)=""/82, 0x52}, {&(0x7f0000000500)=""/109, 0x6d}, {&(0x7f0000000580)=""/153, 0x99}, {&(0x7f0000000640)=""/165, 0xa5}, {&(0x7f0000000840)=""/232, 0xe8}, {&(0x7f0000000700)=""/127, 0x7f}], 0x7, &(0x7f0000000a80)=""/146, 0x92}, 0x100)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f00fff9000000000b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000bd0a060000000000d500f4ff0100030018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000006500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x21)

4.781955145s ago: executing program 1 (id=1956):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x210, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x8, 0x0, 0x58c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48)

3.227864511s ago: executing program 1 (id=1957):
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20)

1.776372893s ago: executing program 5 (id=1958):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x0, 0x5d}, 0x0, 0xca, 0x0, 0x0, 0x3, 0x3ff, 0xfffc, 0x0, 0x0, 0x0, 0x6c6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000ff0d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000300)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
recvmsg$unix(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa8}, 0x0)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_subtree(r5, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRES8=r6], 0x12)

976.431208ms ago: executing program 1 (id=1959):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000004c0), 0x5, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10)
unlink(0x0)

279.418957ms ago: executing program 5 (id=1960):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000010c0))

23.503838ms ago: executing program 1 (id=1961):
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0x23, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x20}, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x62, 0x0, &(0x7f0000000240)="0c87e70f6e1284e6afe0e0492e1090197e0c6c314132eae7f215fd87fec0c2b97135fc949de958f3953116bae94e46939e85b1bb60572d466ba618005c1a3cfef34dd8c5e2de387d76edaf605c6c33e14576523ec6c71f58d71ff6a6150c636ed644", 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x3, 0x0, 0x36d8}, 0x50)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r2 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000180)=r1, 0x4)
openat$cgroup_int(r1, &(0x7f00000001c0)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe800000000000", 0xf}], 0x1}, 0x0)
r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='+l \x00'/15], 0xf)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x50}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x5000000, &(0x7f0000000680)=[{&(0x7f0000000dc0)="5c00000014006b02c84e21000af32c6e0a0675f80800000044000100fec00e000000004e0033df090e8497b1ed90d3d376bd5f6ffe5aa677b1c6f99b214460bc24f65ee2f308ff9d4f5a60eab556a705251e6182949a36c23d3b48df", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r5 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f0000000600), 0x4)
bpf$PROG_BIND_MAP(0x23, &(0x7f00000002c0)={r1, r0}, 0xc)
sendmsg$kcm(r5, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @local, 0x0, 0x3}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000340)="f4001100052b3325fe80070000000000000000000009ffffffe000"/40, 0xfd1b}], 0x1}, 0x20040000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b35d25a806c8c6f94f90f24fc60", 0x14}], 0x1}, 0x0)
socket$kcm(0x29, 0x5, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000500)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140643000000000e000a001000000086419820dd61", 0x2e}], 0x1}, 0x20000088)

0s ago: executing program 6 (id=1962):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000000000000000181100", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.192' (ED25519) to the list of known hosts.
[  353.923612][ T4296] cgroup: Unknown subsys name 'net'
[  354.084994][ T4296] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[  355.592795][ T4296] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[  357.563076][ T4315] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  357.571038][ T4315] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  357.579575][ T4315] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  357.587088][ T4315] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  357.595766][ T4315] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  357.604997][ T4315] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  357.611877][ T4324] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  357.612604][ T4315] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  357.619866][ T4324] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  357.627901][ T4315] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  357.633830][ T4324] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  357.641101][ T4315] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  357.647892][ T4324] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  357.654887][ T4315] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  357.662329][ T4324] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  357.668975][ T4315] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  357.676561][ T4324] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  357.683469][ T4315] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  357.690327][ T4324] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  357.696968][ T4315] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  357.703942][ T4324] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  357.711092][ T4315] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  357.717756][ T4324] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  357.725276][ T4315] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  357.750346][ T4320] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  357.757570][ T4320] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  357.764790][ T4320] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  357.769819][ T4315] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  357.779053][ T4325] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  357.786956][ T4315] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  358.216860][ T4313] chnl_net:caif_netlink_parms(): no params data found
[  358.274069][ T4311] chnl_net:caif_netlink_parms(): no params data found
[  358.358397][ T4319] chnl_net:caif_netlink_parms(): no params data found
[  358.460319][ T4321] chnl_net:caif_netlink_parms(): no params data found
[  358.517354][ T4313] bridge0: port 1(bridge_slave_0) entered blocking state
[  358.524815][ T4313] bridge0: port 1(bridge_slave_0) entered disabled state
[  358.534447][ T4313] device bridge_slave_0 entered promiscuous mode
[  358.561175][ T4319] bridge0: port 1(bridge_slave_0) entered blocking state
[  358.568296][ T4319] bridge0: port 1(bridge_slave_0) entered disabled state
[  358.576944][ T4319] device bridge_slave_0 entered promiscuous mode
[  358.585438][ T4313] bridge0: port 2(bridge_slave_1) entered blocking state
[  358.592892][ T4313] bridge0: port 2(bridge_slave_1) entered disabled state
[  358.600826][ T4313] device bridge_slave_1 entered promiscuous mode
[  358.616678][ T4307] chnl_net:caif_netlink_parms(): no params data found
[  358.626400][ T4311] bridge0: port 1(bridge_slave_0) entered blocking state
[  358.633539][ T4311] bridge0: port 1(bridge_slave_0) entered disabled state
[  358.642033][ T4311] device bridge_slave_0 entered promiscuous mode
[  358.654030][ T4319] bridge0: port 2(bridge_slave_1) entered blocking state
[  358.661210][ T4319] bridge0: port 2(bridge_slave_1) entered disabled state
[  358.669227][ T4319] device bridge_slave_1 entered promiscuous mode
[  358.707078][ T4311] bridge0: port 2(bridge_slave_1) entered blocking state
[  358.714389][ T4311] bridge0: port 2(bridge_slave_1) entered disabled state
[  358.722366][ T4311] device bridge_slave_1 entered promiscuous mode
[  358.750790][ T4313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  358.773960][ T4319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  358.796423][ T4313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  358.822830][ T4319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  358.856661][ T4311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  358.896262][ T4311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  358.905884][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state
[  358.913537][ T4321] bridge0: port 1(bridge_slave_0) entered disabled state
[  358.922004][ T4321] device bridge_slave_0 entered promiscuous mode
[  358.931694][ T4319] team0: Port device team_slave_0 added
[  358.937729][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state
[  358.945336][ T4321] bridge0: port 2(bridge_slave_1) entered disabled state
[  358.953396][ T4321] device bridge_slave_1 entered promiscuous mode
[  358.970869][ T4313] team0: Port device team_slave_0 added
[  358.990049][ T4319] team0: Port device team_slave_1 added
[  359.012813][ T4313] team0: Port device team_slave_1 added
[  359.018802][ T4307] bridge0: port 1(bridge_slave_0) entered blocking state
[  359.026487][ T4307] bridge0: port 1(bridge_slave_0) entered disabled state
[  359.035461][ T4307] device bridge_slave_0 entered promiscuous mode
[  359.072983][ T4307] bridge0: port 2(bridge_slave_1) entered blocking state
[  359.080484][ T4307] bridge0: port 2(bridge_slave_1) entered disabled state
[  359.088322][ T4307] device bridge_slave_1 entered promiscuous mode
[  359.097463][ T4311] team0: Port device team_slave_0 added
[  359.105850][ T4311] team0: Port device team_slave_1 added
[  359.121949][ T4321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  359.161437][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_0
[  359.168434][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  359.195068][ T4319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  359.208538][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_1
[  359.215569][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  359.241798][ T4319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  359.255337][ T4321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  359.265062][ T4313] batman_adv: batadv0: Adding interface: batadv_slave_0
[  359.272649][ T4313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  359.299367][ T4313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  359.341749][ T4313] batman_adv: batadv0: Adding interface: batadv_slave_1
[  359.348764][ T4313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  359.374971][ T4313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  359.403614][ T4307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  359.413437][ T4311] batman_adv: batadv0: Adding interface: batadv_slave_0
[  359.420833][ T4311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  359.446918][ T4311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  359.480346][ T4307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  359.502894][ T4311] batman_adv: batadv0: Adding interface: batadv_slave_1
[  359.510089][ T4311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  359.536254][ T4311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  359.549784][ T4321] team0: Port device team_slave_0 added
[  359.563898][ T4313] device hsr_slave_0 entered promiscuous mode
[  359.570826][ T4313] device hsr_slave_1 entered promiscuous mode
[  359.597693][ T4319] device hsr_slave_0 entered promiscuous mode
[  359.604920][ T4319] device hsr_slave_1 entered promiscuous mode
[  359.615157][ T4319] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  359.625280][ T4319] Cannot create hsr debugfs directory
[  359.632762][ T4321] team0: Port device team_slave_1 added
[  359.702785][ T4307] team0: Port device team_slave_0 added
[  359.742912][ T4307] team0: Port device team_slave_1 added
[  359.764527][ T4311] device hsr_slave_0 entered promiscuous mode
[  359.771681][ T4311] device hsr_slave_1 entered promiscuous mode
[  359.778319][ T4311] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  359.787104][ T4311] Cannot create hsr debugfs directory
[  359.793838][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_0
[  359.801008][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  359.827024][ T4321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  359.850285][ T4318] Bluetooth: hci2: command 0x0409 tx timeout
[  359.852419][ T4312] Bluetooth: hci1: command 0x0409 tx timeout
[  359.857195][ T4318] Bluetooth: hci3: command 0x0409 tx timeout
[  359.862890][ T4310] Bluetooth: hci0: command 0x0409 tx timeout
[  359.868999][ T4315] Bluetooth: hci4: command 0x0409 tx timeout
[  359.897697][ T4307] batman_adv: batadv0: Adding interface: batadv_slave_0
[  359.905396][ T4307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  359.932474][ T4307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  359.945548][ T4307] batman_adv: batadv0: Adding interface: batadv_slave_1
[  359.952569][ T4307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  359.978767][ T4307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  359.990558][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_1
[  359.997736][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  360.024747][ T4321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  360.174619][ T4321] device hsr_slave_0 entered promiscuous mode
[  360.181762][ T4321] device hsr_slave_1 entered promiscuous mode
[  360.188454][ T4321] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  360.196244][ T4321] Cannot create hsr debugfs directory
[  360.264496][ T4307] device hsr_slave_0 entered promiscuous mode
[  360.271749][ T4307] device hsr_slave_1 entered promiscuous mode
[  360.278316][ T4307] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  360.286189][ T4307] Cannot create hsr debugfs directory
[  360.438279][ T4319] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  360.467521][ T4319] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  360.486825][ T4319] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  360.505348][ T4319] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  360.560057][ T4313] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  360.570770][ T4313] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  360.596451][ T4313] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  360.606440][ T4313] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  360.703218][ T4321] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  360.716976][ T4321] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  360.727072][ T4321] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  360.763626][ T4321] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  360.853137][ T4311] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  360.868158][ T4319] 8021q: adding VLAN 0 to HW filter on device bond0
[  360.888183][ T4311] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  360.899069][ T4311] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  360.912311][ T4311] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  360.937618][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  360.947885][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  360.981621][ T4307] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  360.992365][ T4307] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  361.002450][ T4307] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  361.014702][ T4319] 8021q: adding VLAN 0 to HW filter on device team0
[  361.024758][ T4313] 8021q: adding VLAN 0 to HW filter on device bond0
[  361.047543][ T4307] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  361.064524][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  361.074216][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  361.087191][ T4313] 8021q: adding VLAN 0 to HW filter on device team0
[  361.123152][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  361.135993][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  361.145368][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  361.152945][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  361.164555][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  361.174378][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  361.183889][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  361.191376][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  361.200349][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  361.208973][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  361.217558][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  361.224694][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  361.259069][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  361.267529][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  361.284411][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  361.294813][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  361.303976][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  361.313296][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  361.320440][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  361.328356][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  361.337510][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  361.347417][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  361.362672][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  361.372957][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  361.382705][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  361.396285][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  361.405860][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  361.437348][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  361.467442][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  361.477606][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  361.486678][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  361.495405][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  361.505679][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  361.514708][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  361.532065][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  361.540875][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  361.549260][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  361.558405][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  361.597050][ T4313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  361.612321][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  361.624820][ T4321] 8021q: adding VLAN 0 to HW filter on device bond0
[  361.637253][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  361.651190][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  361.663840][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  361.694991][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  361.723110][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  361.753225][ T4311] 8021q: adding VLAN 0 to HW filter on device bond0
[  361.793876][ T4321] 8021q: adding VLAN 0 to HW filter on device team0
[  361.831976][ T4307] 8021q: adding VLAN 0 to HW filter on device bond0
[  361.851183][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  361.860530][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  361.889578][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state
[  361.896746][ T4341] bridge0: port 1(bridge_slave_0) entered forwarding state
[  361.906858][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  361.930101][ T4315] Bluetooth: hci4: command 0x041b tx timeout
[  361.936180][ T4315] Bluetooth: hci3: command 0x041b tx timeout
[  361.943011][ T4315] Bluetooth: hci0: command 0x041b tx timeout
[  361.945787][ T4318] Bluetooth: hci1: command 0x041b tx timeout
[  361.949031][ T4315] Bluetooth: hci2: command 0x041b tx timeout
[  361.965293][ T4307] 8021q: adding VLAN 0 to HW filter on device team0
[  361.988199][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  362.011965][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  362.026936][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  362.046798][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  362.055868][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  362.066940][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  362.076511][ T1221] bridge0: port 2(bridge_slave_1) entered blocking state
[  362.083779][ T1221] bridge0: port 2(bridge_slave_1) entered forwarding state
[  362.092817][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  362.106090][ T4311] 8021q: adding VLAN 0 to HW filter on device team0
[  362.132347][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  362.150309][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  362.169025][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state
[  362.176289][ T4341] bridge0: port 1(bridge_slave_0) entered forwarding state
[  362.194880][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  362.205242][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  362.220058][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  362.228620][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state
[  362.235814][ T4341] bridge0: port 1(bridge_slave_0) entered forwarding state
[  362.244728][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  362.253896][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  362.263668][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  362.271939][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  362.280786][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  362.323185][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  362.333024][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  362.342836][ T4341] bridge0: port 2(bridge_slave_1) entered blocking state
[  362.350018][ T4341] bridge0: port 2(bridge_slave_1) entered forwarding state
[  362.358587][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  362.368032][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  362.377547][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  362.386671][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  362.395396][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  362.405235][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  362.414533][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  362.424057][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  362.432781][ T4341] bridge0: port 2(bridge_slave_1) entered blocking state
[  362.439922][ T4341] bridge0: port 2(bridge_slave_1) entered forwarding state
[  362.447889][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  362.456694][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  362.465313][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  362.484602][ T4321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  362.497678][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  362.519708][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  362.531944][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  362.540988][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  362.550925][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  362.559747][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  362.567969][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  362.575828][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  362.584319][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  362.593062][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  362.602842][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  362.611932][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  362.619679][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  362.627104][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  362.636600][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  362.646082][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  362.668670][ T4313] 8021q: adding VLAN 0 to HW filter on device batadv0
[  362.693520][ T4307] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  362.719770][ T4307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  362.751175][ T4311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  362.779600][ T4311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  362.795070][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  362.810878][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  362.826705][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  362.838344][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  362.847577][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  362.856644][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  362.866021][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  362.878847][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  362.887878][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  362.896322][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  362.910422][ T4319] 8021q: adding VLAN 0 to HW filter on device batadv0
[  363.009581][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  363.018492][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  363.071357][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  363.081937][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  363.117841][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  363.138372][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  363.171395][ T4319] device veth0_vlan entered promiscuous mode
[  363.216907][ T4319] device veth1_vlan entered promiscuous mode
[  363.278743][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  363.298035][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  363.350763][ T4319] device veth0_macvtap entered promiscuous mode
[  363.380248][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  363.390162][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  363.425091][ T4319] device veth1_macvtap entered promiscuous mode
[  363.442913][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  363.455854][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  363.503816][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_0
[  363.545724][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  363.581131][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  363.600298][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  363.607878][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  363.636738][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_1
[  363.660618][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  363.678376][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  363.699558][ T4321] 8021q: adding VLAN 0 to HW filter on device batadv0
[  363.719684][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  363.727266][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  363.742570][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  363.750522][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  363.759601][ T4319] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  363.768548][ T4319] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  363.778327][ T4319] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  363.787370][ T4319] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  363.842944][ T4311] 8021q: adding VLAN 0 to HW filter on device batadv0
[  363.870059][ T4307] 8021q: adding VLAN 0 to HW filter on device batadv0
[  363.890188][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  363.901891][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  363.971788][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  363.981970][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  363.993311][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  364.002908][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  364.011717][ T4315] Bluetooth: hci1: command 0x040f tx timeout
[  364.011896][ T4318] Bluetooth: hci0: command 0x040f tx timeout
[  364.017748][ T4315] Bluetooth: hci3: command 0x040f tx timeout
[  364.023869][ T4310] Bluetooth: hci4: command 0x040f tx timeout
[  364.030998][ T4312] Bluetooth: hci2: command 0x040f tx timeout
[  364.056485][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  364.065500][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  364.076165][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  364.085165][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  364.100313][ T4412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  364.108366][ T4412] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  364.115587][ T4313] device veth0_vlan entered promiscuous mode
[  364.131048][ T4321] device veth0_vlan entered promiscuous mode
[  364.141132][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  364.149016][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  364.158548][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  364.167609][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  364.177467][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  364.188549][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  364.196901][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  364.240482][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  364.250469][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  364.267772][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  364.276268][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  364.293264][ T4321] device veth1_vlan entered promiscuous mode
[  364.306434][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  364.316904][ T4313] device veth1_vlan entered promiscuous mode
[  364.328946][ T4311] device veth0_vlan entered promiscuous mode
[  364.341822][ T4412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  364.351179][ T4412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  364.372981][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  364.381537][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  364.390265][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  364.398704][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  364.408281][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  364.422750][ T4307] device veth0_vlan entered promiscuous mode
[  364.433171][ T4311] device veth1_vlan entered promiscuous mode
[  364.455058][ T4307] device veth1_vlan entered promiscuous mode
[  364.464098][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  364.473472][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  364.488445][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  364.502982][ T4321] device veth0_macvtap entered promiscuous mode
[  364.547274][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  364.558738][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  364.598739][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  364.611562][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  364.630529][ T4321] device veth1_macvtap entered promiscuous mode
[  364.642912][ T4313] device veth0_macvtap entered promiscuous mode
[  364.665517][ T4313] device veth1_macvtap entered promiscuous mode
[  364.709860][ T4313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  364.728372][ T4313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.741856][ T4313] batman_adv: batadv0: Interface activated: batadv_slave_0
[  364.755669][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  364.766970][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.777043][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  364.787661][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.800199][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_0
[  364.816713][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  364.825870][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  364.840334][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  364.848846][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  364.860146][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  364.869973][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  364.879040][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  364.888305][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  364.898327][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  364.909982][ T4311] device veth0_macvtap entered promiscuous mode
[  364.917431][ T4313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  364.928449][ T4313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.941211][ T4313] batman_adv: batadv0: Interface activated: batadv_slave_1
[  364.953884][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  364.965014][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.976420][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  364.987810][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  365.002280][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_1
[  365.031133][ T4311] device veth1_macvtap entered promiscuous mode
[  365.039010][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  365.050797][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  365.065975][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  365.076572][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  365.091521][ T4429] syz.3.4 (4429) used greatest stack depth: 16648 bytes left
[  365.104662][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  365.120132][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  365.128991][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  365.145447][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  365.158078][ T4313] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  365.167749][ T4313] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  365.171731][    C0] hrtimer: interrupt took 52309 ns
[  365.177104][ T4313] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  365.197452][ T4313] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  365.221468][ T4307] device veth0_macvtap entered promiscuous mode
[  365.232045][ T4321] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  365.248825][ T4321] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  365.257826][ T4321] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  365.273839][ T4321] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  365.387989][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  365.418150][ T4311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  365.436323][ T4311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  365.459668][ T4311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  365.482268][ T4311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  365.505802][ T4311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  365.534375][ T4311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  365.564246][ T4311] batman_adv: batadv0: Interface activated: batadv_slave_0
[  365.584479][ T4307] device veth1_macvtap entered promiscuous mode
[  365.614003][ T4415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  365.630636][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  365.643896][ T4415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  365.652163][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  365.669094][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  365.688133][ T4311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  365.711105][ T4311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  365.727194][ T4311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  365.738487][ T4311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  365.758862][ T4311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  365.772568][ T4311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  365.785753][ T4311] batman_adv: batadv0: Interface activated: batadv_slave_1
[  365.818616][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  365.833072][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  365.847007][ T4311] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  365.856785][ T4311] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  365.866418][ T4311] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  365.883647][ T4311] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  365.944942][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  365.955812][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  365.966748][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  365.978296][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  365.988781][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  366.007973][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  366.018445][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  366.056090][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  366.088025][ T4307] batman_adv: batadv0: Interface activated: batadv_slave_0
[  366.096626][ T4315] Bluetooth: hci0: command 0x0419 tx timeout
[  366.103800][ T4312] Bluetooth: hci4: command 0x0419 tx timeout
[  366.110096][ T4315] Bluetooth: hci1: command 0x0419 tx timeout
[  366.116125][ T4315] Bluetooth: hci3: command 0x0419 tx timeout
[  366.122329][ T4312] Bluetooth: hci2: command 0x0419 tx timeout
[  366.150218][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  366.159099][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  366.172851][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  366.183808][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  366.195660][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  366.206271][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  366.216300][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  366.226954][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  366.238201][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  366.249101][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  366.261991][ T4307] batman_adv: batadv0: Interface activated: batadv_slave_1
[  366.281898][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  366.308702][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  366.312744][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  366.319667][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  366.336555][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  366.374993][ T4307] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  366.384749][ T4307] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  366.395178][ T4307] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  366.404255][ T4307] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  366.506042][ T4412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  366.516148][ T4412] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  366.585472][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  366.614190][ T4397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  366.643002][ T4397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  366.695487][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  366.769107][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  366.787670][ T4415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  366.805685][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  366.818185][ T4415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  366.848065][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  366.880430][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  366.898876][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  366.907466][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  366.948495][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  367.128793][ T4397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  367.166510][ T4397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  367.212693][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  367.386208][ T4315] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18
[  368.120515][ T4315] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  369.449654][ T4315] Bluetooth: hci3: command 0x2016 tx timeout
[  370.253161][ T4315] Bluetooth: hci2: command 0x2016 tx timeout
[  370.671891][ T4315] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18
[  370.680558][ T4315] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0'
[  370.692177][ T4315] CPU: 0 PID: 4315 Comm: kworker/u5:3 Not tainted syzkaller #0
[  370.699859][ T4315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  370.709957][ T4315] Workqueue: hci3 hci_rx_work
[  370.714871][ T4315] Call Trace:
[  370.718183][ T4315]  <TASK>
[  370.721128][ T4315]  dump_stack_lvl+0x168/0x22e
[  370.725829][ T4315]  ? show_regs_print_info+0x12/0x12
[  370.731037][ T4315]  ? load_image+0x3b0/0x3b0
[  370.735579][ T4315]  sysfs_create_dir_ns+0x252/0x280
[  370.740712][ T4315]  ? hci_rx_work+0x3eb/0xd40
[  370.745406][ T4315]  ? sysfs_warn_dup+0xa0/0xa0
[  370.750098][ T4315]  ? do_raw_spin_unlock+0x11d/0x230
[  370.755338][ T4315]  kobject_add_internal+0x6b8/0xc80
[  370.760565][ T4315]  kobject_add+0x152/0x210
[  370.765007][ T4315]  ? kobject_init+0x1d0/0x1d0
[  370.770049][ T4315]  ? klist_children_get+0x50/0x50
[  370.775082][ T4315]  ? get_device_parent+0x121/0x3f0
[  370.780204][ T4315]  device_add+0x483/0xfb0
[  370.784627][ T4315]  ? kmem_cache_free+0xf7/0x290
[  370.789598][ T4315]  hci_conn_add_sysfs+0xd1/0x1e0
[  370.794548][ T4315]  le_conn_complete_evt+0xfec/0x15d0
[  370.800019][ T4315]  ? bt_warn+0x108/0x150
[  370.804273][ T4315]  ? hci_le_big_info_adv_report_evt+0x310/0x310
[  370.810523][ T4315]  ? bt_info+0x150/0x150
[  370.814774][ T4315]  ? __mutex_unlock_slowpath+0x19e/0x6a0
[  370.820423][ T4315]  ? skb_pull_data+0xf7/0x200
[  370.825126][ T4315]  hci_le_conn_complete_evt+0x183/0x440
[  370.830780][ T4315]  ? hci_remote_host_features_evt+0x270/0x270
[  370.836860][ T4315]  hci_event_packet+0x791/0x1210
[  370.841817][ T4315]  ? bis_list+0x280/0x280
[  370.846158][ T4315]  ? __hci_send_to_channel+0x271/0x280
[  370.851707][ T4315]  ? __hci_send_to_channel+0x270/0x280
[  370.857435][ T4315]  ? hci_send_to_monitor+0x2d/0x4a0
[  370.862640][ T4315]  ? hci_send_to_monitor+0x9c/0x4a0
[  370.867845][ T4315]  hci_rx_work+0x3eb/0xd40
[  370.872287][ T4315]  ? process_one_work+0x7a1/0x1160
[  370.877408][ T4315]  process_one_work+0x898/0x1160
[  370.882373][ T4315]  ? worker_detach_from_pool+0x240/0x240
[  370.888017][ T4315]  ? _raw_spin_lock_irq+0xab/0xe0
[  370.893056][ T4315]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[  370.898468][ T4315]  ? kthread_data+0x4b/0xc0
[  370.903033][ T4315]  worker_thread+0xaa2/0x1250
[  370.907764][ T4315]  ? __kthread_parkme+0x162/0x1c0
[  370.912986][ T4315]  kthread+0x29d/0x330
[  370.917683][ T4315]  ? worker_clr_flags+0x1a0/0x1a0
[  370.922808][ T4315]  ? kthread_blkcg+0xd0/0xd0
[  370.927460][ T4315]  ret_from_fork+0x1f/0x30
[  370.932016][ T4315]  </TASK>
[  370.939940][ T4315] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  370.954104][ T4315] Bluetooth: hci3: failed to register connection device
[  372.990597][ T4315] Bluetooth: hci3: command 0x2016 tx timeout
[  375.676261][ T4315] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  377.689483][ T4315] Bluetooth: hci1: command 0x2016 tx timeout
[  378.641204][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  378.647956][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  383.812841][ T4315] Bluetooth: hci1: unexpected subevent 0x19 length: 150 > 28
[  383.820864][ T4315] Bluetooth: hci1: Invalid connection link type handle 0x0000
[  389.960143][ T4315] Bluetooth: hci3: Malformed LE Event: 0x02
[  397.596126][ T4683] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  398.145889][ T4683] device syzkaller0 entered promiscuous mode
[  402.801178][ T4768] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  403.411256][ T4315] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4
[  405.773495][ T4867] mac80211_hwsim hwsim6 »»»»»»: renamed from wlan0
[  405.814089][ T4315] Bluetooth: hci4: unexpected event 0x06 length: 15 > 3
[  407.450531][ T4315] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  407.466269][ T4315] Bluetooth: hci2: Injecting HCI hardware error event
[  407.474815][ T4312] Bluetooth: hci2: hardware error 0x00
[  408.323489][ T4931] device lo entered promiscuous mode
[  408.447204][ T4934] device wg2 entered promiscuous mode
[  409.529673][ T4312] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  411.025943][ T5013] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  411.434237][ T5013] device syzkaller0 entered promiscuous mode
[  411.665606][ T5034] Illegal XDP return value 4294967274 on prog  (id 144) dev N/A, expect packet loss!
[  414.664193][ T5054] netlink: 'syz.1.230': attribute type 2 has an invalid length.
[  414.690669][ T5054] netlink: 'syz.1.230': attribute type 8 has an invalid length.
[  414.698518][ T5054] netlink: 132 bytes leftover after parsing attributes in process `syz.1.230'.
[  415.634384][ T5103] device bridge_slave_1 left promiscuous mode
[  415.699460][ T5103] bridge0: port 2(bridge_slave_1) entered disabled state
[  416.002074][ T5103] device bridge_slave_0 left promiscuous mode
[  416.039369][ T5103] bridge0: port 1(bridge_slave_0) entered disabled state
[  418.556657][ T5121] netlink: 'syz.1.252': attribute type 21 has an invalid length.
[  418.801303][ T4312] Bluetooth: hci3: unexpected event 0x35 length: 15 > 6
[  419.115304][ T5137] Zero length message leads to an empty skb
[  419.163992][ T5140] netlink: 'syz.2.260': attribute type 25 has an invalid length.
[  419.552739][ T5146] device hsr0 entered promiscuous mode
[  419.784639][ T5158] netlink: 'syz.4.266': attribute type 27 has an invalid length.
[  419.801311][ T5157] netlink: 60 bytes leftover after parsing attributes in process `syz.2.267'.
[  419.840499][ T5157] netlink: 60 bytes leftover after parsing attributes in process `syz.2.267'.
[  419.864762][ T5159] netlink: 60 bytes leftover after parsing attributes in process `syz.2.267'.
[  420.923360][ T5184] netlink: 'syz.0.278': attribute type 10 has an invalid length.
[  421.415918][ T5184] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  421.671969][ T5192] delete_channel: no stack
[  422.064205][ T5210] netlink: 'syz.2.289': attribute type 10 has an invalid length.
[  422.145045][ T5210] 8021q: adding VLAN 0 to HW filter on device team0
[  422.158759][ T5210] bond0: (slave team0): Enslaving as an active interface with an up link
[  423.697987][ T5258] netlink: 'syz.3.307': attribute type 2 has an invalid length.
[  423.790967][ T5258] netlink: 'syz.3.307': attribute type 8 has an invalid length.
[  423.874454][ T5258] netlink: 132 bytes leftover after parsing attributes in process `syz.3.307'.
[  424.471649][ T4312] Bluetooth: Frame is too long (len 13, expected len 4)
[  424.833417][ T5280] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.315'.
[  425.017832][ T5283] netlink: 'syz.1.318': attribute type 10 has an invalid length.
[  425.049931][ T5283] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  425.116043][ T5283] batman_adv: batadv0: Removing interface: batadv_slave_0
[  425.170691][ T5283] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  425.268286][ T5293] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  425.288284][ T5293] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  430.227883][ T5345] netlink: 'syz.1.342': attribute type 7 has an invalid length.
[  430.237844][ T5348] delete_channel: no stack
[  431.394413][ T5363] netlink: 61959 bytes leftover after parsing attributes in process `syz.4.347'.
[  431.583333][ T5372] syz.3.350 uses obsolete (PF_INET,SOCK_PACKET)
[  431.861804][ T5384] netlink: 142168 bytes leftover after parsing attributes in process `syz.0.352'.
[  432.946438][ T5407] netlink: 'syz.4.363': attribute type 10 has an invalid length.
[  433.024523][ T5407] netlink: 55 bytes leftover after parsing attributes in process `syz.4.363'.
[  439.228657][ T5490] netlink: 132 bytes leftover after parsing attributes in process `syz.1.392'.
[  439.920755][ T5504] IPv6: pim6reg1: Disabled Multicast RS
[  440.033697][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  440.040230][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  442.698283][ T5524] netlink: 'syz.4.402': attribute type 11 has an invalid length.
[  445.383793][ T5568] netlink: 'syz.3.418': attribute type 2 has an invalid length.
[  445.436016][ T5568] netlink: 'syz.3.418': attribute type 8 has an invalid length.
[  445.559210][ T5568] netlink: 132 bytes leftover after parsing attributes in process `syz.3.418'.
[  445.937370][ T5580] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  446.149451][ T5583] netlink: 60 bytes leftover after parsing attributes in process `syz.0.423'.
[  446.220448][ T5583] netlink: 60 bytes leftover after parsing attributes in process `syz.0.423'.
[  446.256349][ T5583] netlink: 60 bytes leftover after parsing attributes in process `syz.0.423'.
[  448.812500][ T5590] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.426'.
[  449.005523][ T5594] netlink: 'syz.3.427': attribute type 16 has an invalid length.
[  449.017152][ T5596] netlink: 40 bytes leftover after parsing attributes in process `syz.0.430'.
[  449.039133][ T5594] netlink: 48 bytes leftover after parsing attributes in process `syz.3.427'.
[  449.058660][ T5596] netlink: 40 bytes leftover after parsing attributes in process `syz.0.430'.
[  449.102055][ T5601] netlink: 40 bytes leftover after parsing attributes in process `syz.0.430'.
[  449.352828][ T5607] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  449.578007][ T5611] delete_channel: no stack
[  451.849370][ T4397] wlan1: Trigger new scan to find an IBSS to join
[  454.889552][ T4412] wlan1: Trigger new scan to find an IBSS to join
[  455.817202][ T5760] netlink: 'syz.4.495': attribute type 2 has an invalid length.
[  455.851413][ T5760] netlink: 'syz.4.495': attribute type 8 has an invalid length.
[  455.869465][ T5760] netlink: 132 bytes leftover after parsing attributes in process `syz.4.495'.
[  456.334530][ T5770] device syzkaller0 entered promiscuous mode
[  456.872251][ T5786] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  457.043618][ T5786] device syzkaller0 entered promiscuous mode
[  457.856163][   T51] wlan1: Trigger new scan to find an IBSS to join
[  458.772424][ T4341] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00
[  460.399620][ T5851] device bridge_slave_1 left promiscuous mode
[  460.440926][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[  460.619116][ T5851] device bridge_slave_0 left promiscuous mode
[  460.668784][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[  461.500412][ T5864] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  461.625235][ T5864] device syzkaller0 entered promiscuous mode
[  464.879833][ T4312] Bluetooth: hci1: unexpected event 0x35 length: 15 > 6
[  464.955335][ T5915] device bridge_slave_1 left promiscuous mode
[  465.022916][ T5915] bridge0: port 2(bridge_slave_1) entered disabled state
[  465.118602][ T5915] device bridge_slave_0 left promiscuous mode
[  465.125686][ T5915] bridge0: port 1(bridge_slave_0) entered disabled state
[  465.589878][ T5929] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  465.899932][ T5929] device syzkaller0 entered promiscuous mode
[  468.284718][ T5947] netlink: 'syz.4.553': attribute type 10 has an invalid length.
[  468.353441][ T5947] 8021q: adding VLAN 0 to HW filter on device team0
[  468.390609][ T5947] bond0: (slave team0): Enslaving as an active interface with an up link
[  468.567279][ T5953] netlink: 'syz.0.567': attribute type 10 has an invalid length.
[  468.614057][ T5953] 8021q: adding VLAN 0 to HW filter on device team0
[  468.648832][ T5953] bond0: (slave team0): Enslaving as an active interface with an up link
[  468.843059][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready
[  468.965811][ T5963] netlink: 'syz.0.560': attribute type 2 has an invalid length.
[  469.005245][ T5963] netlink: 'syz.0.560': attribute type 8 has an invalid length.
[  469.051300][ T5963] netlink: 132 bytes leftover after parsing attributes in process `syz.0.560'.
[  469.147773][ T5968] device bridge_slave_1 left promiscuous mode
[  469.179331][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state
[  469.280143][ T5968] device bridge_slave_0 left promiscuous mode
[  469.293124][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state
[  471.708743][ T6015] netlink: 'syz.2.578': attribute type 2 has an invalid length.
[  471.727569][ T6015] netlink: 'syz.2.578': attribute type 8 has an invalid length.
[  471.749471][ T6015] netlink: 132 bytes leftover after parsing attributes in process `syz.2.578'.
[  474.563967][ T6053] netlink: 61959 bytes leftover after parsing attributes in process `syz.3.591'.
[  477.927046][ T6136] netlink: 'syz.2.627': attribute type 21 has an invalid length.
[  478.369527][ T6153] netlink: 'syz.1.629': attribute type 10 has an invalid length.
[  478.817688][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  478.872395][ T6163] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  479.198220][ T6181] netlink: 'syz.2.642': attribute type 2 has an invalid length.
[  479.241849][ T6181] netlink: 'syz.2.642': attribute type 8 has an invalid length.
[  479.292060][ T6181] netlink: 132 bytes leftover after parsing attributes in process `syz.2.642'.
[  479.650557][ T6191] netlink: 'syz.3.647': attribute type 10 has an invalid length.
[  479.695823][ T6191] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  479.824030][ T6191] batman_adv: batadv0: Removing interface: batadv_slave_0
[  479.879182][ T6191] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  480.217886][ T6202] netlink: 'syz.4.652': attribute type 21 has an invalid length.
[  481.502243][ T4315] Bluetooth: hci3: unexpected event 0x0f length: 15 > 4
[  482.809607][ T1221] wlan1: Trigger new scan to find an IBSS to join
[  483.051621][ T4315] Bluetooth: hci4: command 0x0406 tx timeout
[  483.051682][ T4312] Bluetooth: hci0: command 0x0406 tx timeout
[  483.057889][ T4315] Bluetooth: hci1: command 0x0406 tx timeout
[  483.157069][ T6301] netlink: 'syz.1.698': attribute type 10 has an invalid length.
[  483.264029][ T6301] 8021q: adding VLAN 0 to HW filter on device batadv0
[  483.286504][ T6301] team0: Port device batadv0 added
[  483.536276][ T4315] Bluetooth: hci0: unexpected event 0x34 length: 15 > 6
[  484.218193][ T6333] netlink: 'syz.2.714': attribute type 10 has an invalid length.
[  484.318914][ T6333] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  484.363519][ T6333] batman_adv: batadv0: Removing interface: batadv_slave_0
[  484.438416][ T6333] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  485.530287][ T4315] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  485.538881][ T4315] Bluetooth: hci3: Injecting HCI hardware error event
[  485.548351][ T4310] Bluetooth: hci3: hardware error 0x00
[  485.849988][ T4397] wlan1: Trigger new scan to find an IBSS to join
[  487.302343][   T51] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00
[  487.913301][ T6370] netlink: 'syz.1.730': attribute type 10 has an invalid length.
[  487.942949][ T6370] 8021q: adding VLAN 0 to HW filter on device team0
[  487.957701][ T6370] bond0: (slave team0): Enslaving as an active interface with an up link
[  488.203996][ T4315] Bluetooth: hci1: unexpected event 0x34 length: 15 > 6
[  489.370269][ T4310] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  491.552170][ T4310] Bluetooth: hci4: unexpected event 0x0f length: 15 > 4
[  492.843739][ T6511] netlink: 'syz.4.783': attribute type 10 has an invalid length.
[  495.609724][ T4310] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  495.618777][ T4310] Bluetooth: hci4: Injecting HCI hardware error event
[  495.628470][ T4315] Bluetooth: hci4: hardware error 0x00
[  495.956341][ T6526] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  495.995751][ T6526] device syzkaller0 entered promiscuous mode
[  496.008682][ T4310] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4
[  497.850413][ T4315] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  498.273588][ T6566] netlink: 'syz.0.800': attribute type 10 has an invalid length.
[  498.545645][ T6569] device hsr0 entered promiscuous mode
[  499.287596][ T6592] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  499.326672][ T6592] device syzkaller0 entered promiscuous mode
[  500.009785][ T4315] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  500.018740][ T4315] Bluetooth: hci0: Injecting HCI hardware error event
[  500.027322][ T4315] Bluetooth: hci0: hardware error 0x00
[  501.463241][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  501.469772][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  502.128678][ T6609] netlink: 'syz.4.815': attribute type 10 has an invalid length.
[  502.152500][ T6609] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  502.387172][ T6615] netlink: 'syz.2.817': attribute type 10 has an invalid length.
[  502.409689][ T6615] netlink: 40 bytes leftover after parsing attributes in process `syz.2.817'.
[  502.438170][ T6615] team0: Port device geneve0 added
[  502.489774][ T4315] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  503.137823][ T6629] IPv6: pim6reg1: Disabled Multicast RS
[  504.079779][ T6649] device syzkaller0 entered promiscuous mode
[  504.125286][ T6656] netlink: 'syz.2.831': attribute type 10 has an invalid length.
[  504.362477][ T6656] 8021q: adding VLAN 0 to HW filter on device batadv0
[  504.405981][ T6656] team0: Port device batadv0 added
[  505.239132][ T6669] netlink: 'syz.0.837': attribute type 29 has an invalid length.
[  506.997387][ T6660] device hsr0 entered promiscuous mode
[  507.005005][ T6669] netlink: 'syz.0.837': attribute type 29 has an invalid length.
[  508.772962][ T6715] netlink: 'syz.1.855': attribute type 10 has an invalid length.
[  508.872058][ T4315] Bluetooth: hci1: unexpected event 0x33 length: 15 > 10
[  509.263301][ T6709] device syzkaller0 entered promiscuous mode
[  515.207740][ T6800] device syzkaller0 entered promiscuous mode
[  517.325322][    T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  519.071565][ T6814] netlink: 'syz.2.896': attribute type 10 has an invalid length.
[  520.437890][ T6843] netlink: 'syz.4.907': attribute type 2 has an invalid length.
[  520.459367][ T6843] netlink: 'syz.4.907': attribute type 8 has an invalid length.
[  520.467927][ T6843] netlink: 132 bytes leftover after parsing attributes in process `syz.4.907'.
[  520.644725][ T6852] netlink: 'syz.2.911': attribute type 10 has an invalid length.
[  521.010686][ T6862] macvtap0: refused to change device tx_queue_len
[  521.485134][ T6880] netlink: 'syz.2.923': attribute type 2 has an invalid length.
[  521.507233][ T6880] netlink: 'syz.2.923': attribute type 8 has an invalid length.
[  521.546552][ T6880] netlink: 132 bytes leftover after parsing attributes in process `syz.2.923'.
[  522.557001][ T6908] macvtap0: refused to change device tx_queue_len
[  522.844980][ T6918] netlink: 'syz.3.937': attribute type 2 has an invalid length.
[  522.876353][ T6918] netlink: 'syz.3.937': attribute type 8 has an invalid length.
[  522.897733][ T6918] netlink: 132 bytes leftover after parsing attributes in process `syz.3.937'.
[  523.244600][ T6928] syz.3.939[6928] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  523.244709][ T6928] syz.3.939[6928] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  523.336751][ T6928] syz.3.939[6928] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  523.409680][ T6928] syz.3.939[6928] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  524.372396][ T6943] macvtap0: refused to change device tx_queue_len
[  524.454354][ T6948] IPv6: Can't replace route, no match found
[  524.624803][ T6950] netlink: 'syz.2.951': attribute type 2 has an invalid length.
[  524.636705][ T6950] netlink: 'syz.2.951': attribute type 8 has an invalid length.
[  524.648970][ T6950] netlink: 132 bytes leftover after parsing attributes in process `syz.2.951'.
[  525.664510][ T6970] device syzkaller0 entered promiscuous mode
[  532.589179][ T6996] netlink: 'syz.0.968': attribute type 2 has an invalid length.
[  532.597253][ T6996] netlink: 'syz.0.968': attribute type 8 has an invalid length.
[  532.606095][ T6996] netlink: 132 bytes leftover after parsing attributes in process `syz.0.968'.
[  533.267578][ T7017] netlink: 'syz.2.978': attribute type 1 has an invalid length.
[  533.278067][ T7017] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.978'.
[  533.367058][ T7022] netlink: 'syz.4.980': attribute type 2 has an invalid length.
[  533.406270][ T7022] netlink: 'syz.4.980': attribute type 8 has an invalid length.
[  533.527936][ T7022] netlink: 132 bytes leftover after parsing attributes in process `syz.4.980'.
[  534.606103][ T7028] device syzkaller0 entered promiscuous mode
[  536.472570][ T7054] netlink: 'syz.4.992': attribute type 1 has an invalid length.
[  536.480675][ T7054] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.992'.
[  538.943780][ T7059] netlink: 'syz.1.994': attribute type 2 has an invalid length.
[  538.952413][ T7059] netlink: 'syz.1.994': attribute type 8 has an invalid length.
[  538.964929][ T7059] netlink: 132 bytes leftover after parsing attributes in process `syz.1.994'.
[  539.912786][ T7093] netlink: 'syz.1.1008': attribute type 10 has an invalid length.
[  540.304621][ T7089] device syzkaller0 entered promiscuous mode
[  540.359972][ T7105] macvtap0: refused to change device tx_queue_len
[  540.367355][ T7096] netlink: 'syz.4.1010': attribute type 2 has an invalid length.
[  540.389034][ T7096] netlink: 'syz.4.1010': attribute type 8 has an invalid length.
[  540.410227][ T7096] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1010'.
[  540.753844][ T4315] Bluetooth: hci1: unexpected event 0x35 length: 15 > 6
[  542.597810][ T7130] macvtap0: refused to change device tx_queue_len
[  542.708989][ T7132] netlink: 'syz.4.1026': attribute type 10 has an invalid length.
[  542.796468][ T7132] 8021q: adding VLAN 0 to HW filter on device batadv0
[  542.823649][ T7132] team0: Port device batadv0 added
[  542.863044][ T7135] netlink: 'syz.0.1028': attribute type 1 has an invalid length.
[  542.892465][ T7138] IPv6: Can't replace route, no match found
[  542.904179][ T7135] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.1028'.
[  542.919608][ T7136] netlink: 'syz.1.1027': attribute type 2 has an invalid length.
[  542.946354][ T7136] netlink: 'syz.1.1027': attribute type 8 has an invalid length.
[  542.967138][ T7136] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1027'.
[  543.239183][ T7149] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1034'.
[  543.488243][ T7160] macvtap0: refused to change device tx_queue_len
[  543.772749][ T7170] netlink: 'syz.0.1045': attribute type 2 has an invalid length.
[  543.799406][ T7170] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1045'.
[  544.040938][ T7180] syz.4.1049[7180] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  544.041047][ T7180] syz.4.1049[7180] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  544.069502][ T7178] device wg2 entered promiscuous mode
[  544.074014][ T7181] syz.4.1049[7181] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  544.135117][ T7181] syz.4.1049[7181] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  544.330085][ T7190] macvtap0: refused to change device tx_queue_len
[  544.789959][ T7207] syz.1.1061[7207] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  544.790072][ T7207] syz.1.1061[7207] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  544.809689][ T7203] device syzkaller0 entered promiscuous mode
[  544.846282][ T7207] syz.1.1061[7207] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  544.846390][ T7207] syz.1.1061[7207] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  546.717753][ T7210] validate_nla: 1 callbacks suppressed
[  546.717769][ T7210] netlink: 'syz.0.1062': attribute type 2 has an invalid length.
[  546.742601][ T7210] netlink: 'syz.0.1062': attribute type 8 has an invalid length.
[  546.750510][ T7210] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1062'.
[  546.769740][ T7222] macvtap0: refused to change device tx_queue_len
[  547.089516][ T7230] device wg2 entered promiscuous mode
[  547.829826][ T7254] macvtap0: refused to change device tx_queue_len
[  547.906940][ T7252] netlink: 'syz.1.1080': attribute type 2 has an invalid length.
[  547.936991][ T7252] netlink: 'syz.1.1080': attribute type 8 has an invalid length.
[  548.003860][ T7252] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1080'.
[  548.345709][ T7268] device wg2 left promiscuous mode
[  548.356713][ T4412] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  548.424893][ T7268] device wg2 entered promiscuous mode
[  548.610513][ T7275] device syzkaller0 entered promiscuous mode
[  548.640414][ T7277] netlink: 'syz.0.1091': attribute type 4 has an invalid length.
[  548.655961][ T7277] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1091'.
[  548.710886][ T7277] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  551.273439][ T7284] macvtap0: refused to change device tx_queue_len
[  551.297785][ T7296] netlink: 'syz.0.1099': attribute type 2 has an invalid length.
[  551.332401][ T7296] netlink: 'syz.0.1099': attribute type 8 has an invalid length.
[  551.349778][ T7296] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1099'.
[  552.677852][ T7332] netlink: 'syz.2.1113': attribute type 2 has an invalid length.
[  552.692350][ T7332] netlink: 'syz.2.1113': attribute type 8 has an invalid length.
[  552.704147][ T7332] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1113'.
[  553.733225][ T7365] macvtap0: refused to change device tx_queue_len
[  553.848682][ T7369] netlink: 'syz.3.1129': attribute type 2 has an invalid length.
[  553.910989][ T7369] netlink: 'syz.3.1129': attribute type 8 has an invalid length.
[  553.958423][ T7369] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1129'.
[  554.689796][ T7398] macvtap0: refused to change device tx_queue_len
[  554.952164][ T7408] netlink: 'syz.3.1145': attribute type 2 has an invalid length.
[  554.972859][ T7408] netlink: 'syz.3.1145': attribute type 8 has an invalid length.
[  555.038601][ T7408] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1145'.
[  556.190556][ T7442] netlink: 'syz.4.1162': attribute type 2 has an invalid length.
[  556.203088][ T7442] netlink: 'syz.4.1162': attribute type 8 has an invalid length.
[  556.217283][ T7442] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1162'.
[  558.868715][ T7514] IPv6: Can't replace route, no match found
[  559.831192][ T7540] netlink: 'syz.1.1204': attribute type 2 has an invalid length.
[  559.864756][ T7540] netlink: 'syz.1.1204': attribute type 8 has an invalid length.
[  559.926082][ T7540] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1204'.
[  560.109386][ T7529] device syzkaller0 entered promiscuous mode
[  562.820777][ T7553] macvtap0: refused to change device tx_queue_len
[  562.891787][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  562.898785][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  563.234698][ T7573] netlink: 'syz.0.1218': attribute type 10 has an invalid length.
[  563.307474][ T7573] 8021q: adding VLAN 0 to HW filter on device batadv0
[  563.346672][ T7573] team0: Port device batadv0 added
[  563.651464][ T7589] macvtap0: refused to change device tx_queue_len
[  564.812650][ T7628] netlink: 'syz.0.1243': attribute type 2 has an invalid length.
[  564.858952][ T7628] netlink: 'syz.0.1243': attribute type 8 has an invalid length.
[  564.870014][ T7628] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1243'.
[  565.949341][ T7668] netlink: 'syz.3.1260': attribute type 2 has an invalid length.
[  565.969536][ T7668] netlink: 'syz.3.1260': attribute type 8 has an invalid length.
[  566.004468][ T7668] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1260'.
[  566.139157][ T7679] macvtap0: refused to change device tx_queue_len
[  567.289645][ T7714] netlink: 'syz.0.1278': attribute type 2 has an invalid length.
[  567.311318][ T7714] netlink: 'syz.0.1278': attribute type 8 has an invalid length.
[  567.362460][ T7714] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1278'.
[  567.799552][ T7734] macvtap0: refused to change device tx_queue_len
[  568.481560][ T7756] netlink: 'syz.4.1298': attribute type 2 has an invalid length.
[  568.502807][ T7756] netlink: 'syz.4.1298': attribute type 8 has an invalid length.
[  568.529168][ T7756] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1298'.
[  568.774165][ T7768] macvtap0: refused to change device tx_queue_len
[  569.557273][ T7793] device pim6reg1 entered promiscuous mode
[  569.707562][ T7801] netlink: 'syz.4.1315': attribute type 2 has an invalid length.
[  569.742159][ T7801] netlink: 'syz.4.1315': attribute type 8 has an invalid length.
[  569.775516][ T7801] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1315'.
[  569.962965][ T7808] macvtap0: refused to change device tx_queue_len
[  570.631461][ T7823] macvtap0: refused to change device tx_queue_len
[  571.837065][ T7838] netlink: 'syz.3.1329': attribute type 2 has an invalid length.
[  571.886463][ T7838] netlink: 'syz.3.1329': attribute type 8 has an invalid length.
[  572.001605][ T7838] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1329'.
[  579.324490][ T7898] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  579.447097][ T4341] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  579.544528][ T7898] device syzkaller0 entered promiscuous mode
[  584.476440][ T7932] netlink: 'syz.4.1357': attribute type 2 has an invalid length.
[  584.514139][ T7932] netlink: 'syz.4.1357': attribute type 8 has an invalid length.
[  584.541299][ T7932] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1357'.
[  587.192170][ T7974] macvtap0: refused to change device tx_queue_len
[  587.672054][ T7979] netlink: 'syz.2.1370': attribute type 2 has an invalid length.
[  587.737390][ T7979] netlink: 'syz.2.1370': attribute type 8 has an invalid length.
[  587.925713][ T7979] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1370'.
[  589.606857][ T7988] bond_slave_1: mtu less than device minimum
[  591.670118][ T8020] macvtap0: refused to change device tx_queue_len
[  591.923106][ T8023] device pim6reg1 entered promiscuous mode
[  591.953769][ T8025] netlink: 'syz.2.1387': attribute type 2 has an invalid length.
[  591.964562][ T8025] netlink: 'syz.2.1387': attribute type 8 has an invalid length.
[  591.973880][ T8025] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1387'.
[  592.170222][ T8035] device wg2 left promiscuous mode
[  592.784992][ T8028] device syzkaller0 entered promiscuous mode
[  592.823778][ T8035] device wg2 entered promiscuous mode
[  592.969468][ T8049] device sit0 entered promiscuous mode
[  596.864083][ T8063] macvtap0: refused to change device tx_queue_len
[  597.322457][ T8068] netlink: 'syz.3.1400': attribute type 10 has an invalid length.
[  597.400936][ T8068] 8021q: adding VLAN 0 to HW filter on device batadv0
[  597.460709][ T8068] team0: Port device batadv0 added
[  597.554219][ T8072] netlink: 'syz.1.1403': attribute type 2 has an invalid length.
[  597.562361][ T8072] netlink: 'syz.1.1403': attribute type 8 has an invalid length.
[  597.570421][ T8072] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1403'.
[  600.137801][ T8092] bond_slave_1: mtu less than device minimum
[  600.473071][ T8120] netlink: 'syz.2.1415': attribute type 2 has an invalid length.
[  600.528127][ T8120] netlink: 'syz.2.1415': attribute type 8 has an invalid length.
[  600.562830][ T8120] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1415'.
[  603.357800][ T8170] netlink: 'syz.2.1430': attribute type 2 has an invalid length.
[  603.369754][ T8170] netlink: 'syz.2.1430': attribute type 8 has an invalid length.
[  603.396028][ T8170] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1430'.
[  603.985626][ T8172] device syzkaller0 entered promiscuous mode
[  604.009119][ T8184] device sit0 entered promiscuous mode
[  607.483937][ T8217] netlink: 'syz.0.1444': attribute type 2 has an invalid length.
[  607.502992][ T8217] netlink: 'syz.0.1444': attribute type 8 has an invalid length.
[  607.523312][ T8217] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1444'.
[  607.697834][ T8221] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  608.068663][ T8221] device syzkaller0 entered promiscuous mode
[  608.382682][ T8231] device sit0 entered promiscuous mode
[  610.514488][   T51] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  612.093063][ T8261] netlink: 'syz.4.1458': attribute type 2 has an invalid length.
[  612.122392][ T8261] netlink: 'syz.4.1458': attribute type 8 has an invalid length.
[  612.133939][ T8261] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1458'.
[  612.669073][ T8272] device syzkaller0 entered promiscuous mode
[  619.476628][ T8293] device wg2 left promiscuous mode
[  620.380625][ T8299] device pim6reg1 entered promiscuous mode
[  620.954257][ T8309] netlink: 'syz.1.1471': attribute type 2 has an invalid length.
[  620.969457][ T8309] netlink: 'syz.1.1471': attribute type 8 has an invalid length.
[  620.993597][ T8309] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1471'.
[  623.222452][ T8343] netlink: 'syz.4.1482': attribute type 2 has an invalid length.
[  623.234339][ T8343] netlink: 'syz.4.1482': attribute type 8 has an invalid length.
[  623.248815][ T8343] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1482'.
[  623.666382][ T4310] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  623.675994][ T4310] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  623.684370][ T4310] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  623.694476][ T4310] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  623.702463][ T4310] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  623.712681][ T4310] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  624.317983][ T8365] device pim6reg1 entered promiscuous mode
[  624.336821][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  624.345983][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  624.711857][ T8351] chnl_net:caif_netlink_parms(): no params data found
[  625.478766][ T8351] bridge0: port 1(bridge_slave_0) entered blocking state
[  625.486425][ T8351] bridge0: port 1(bridge_slave_0) entered disabled state
[  625.516154][ T8351] device bridge_slave_0 entered promiscuous mode
[  625.540930][ T8389] netlink: 'syz.0.1494': attribute type 2 has an invalid length.
[  625.599505][ T8389] netlink: 'syz.0.1494': attribute type 8 has an invalid length.
[  625.629528][ T8389] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1494'.
[  625.770580][ T4315] Bluetooth: hci5: command 0x0409 tx timeout
[  625.780405][ T8351] bridge0: port 2(bridge_slave_1) entered blocking state
[  625.810115][ T8351] bridge0: port 2(bridge_slave_1) entered disabled state
[  625.896915][ T8351] device bridge_slave_1 entered promiscuous mode
[  626.499666][ T8351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  626.580231][ T8351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  626.835528][ T8351] team0: Port device team_slave_0 added
[  627.015398][ T8351] team0: Port device team_slave_1 added
[  627.032343][ T8406] netlink: 'syz.0.1507': attribute type 2 has an invalid length.
[  627.063821][ T8406] netlink: 'syz.0.1507': attribute type 8 has an invalid length.
[  627.081539][ T8406] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1507'.
[  627.302506][ T8351] batman_adv: batadv0: Adding interface: batadv_slave_0
[  627.309952][ T8351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  627.351977][ T8351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  627.383252][ T8415] device pim6reg1 entered promiscuous mode
[  627.419705][ T8351] batman_adv: batadv0: Adding interface: batadv_slave_1
[  627.436251][ T8351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  627.563823][ T8351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  627.849479][ T4310] Bluetooth: hci5: command 0x041b tx timeout
[  628.061626][ T8351] device hsr_slave_0 entered promiscuous mode
[  628.085175][ T8351] device hsr_slave_1 entered promiscuous mode
[  628.139960][ T8351] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  628.162496][ T8351] Cannot create hsr debugfs directory
[  628.637345][ T8351] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  628.647943][ T8351] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  628.673718][ T8351] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  628.683762][ T8351] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  628.777808][ T8351] 8021q: adding VLAN 0 to HW filter on device bond0
[  628.797085][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  628.805827][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  628.818602][ T8351] 8021q: adding VLAN 0 to HW filter on device team0
[  628.829131][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  628.839650][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  628.848330][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  628.855638][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  628.886784][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  628.897136][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  628.937822][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  628.954982][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  628.962195][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  629.170648][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  629.393438][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  629.416555][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  629.426707][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  629.436782][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  629.574108][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  629.585155][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  629.754060][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  629.775505][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  629.844579][ T8351] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  629.866593][ T8351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  629.880341][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  629.900977][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  629.929456][ T4310] Bluetooth: hci5: command 0x040f tx timeout
[  630.537307][ T8459] netlink: 'syz.1.1509': attribute type 2 has an invalid length.
[  630.556347][ T8459] netlink: 'syz.1.1509': attribute type 8 has an invalid length.
[  630.567298][ T8459] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1509'.
[  631.219571][ T4341] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  631.451642][ T4341] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  631.641181][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  631.648808][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  631.788422][ T4341] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  631.866838][ T8351] 8021q: adding VLAN 0 to HW filter on device batadv0
[  632.016337][ T4310] Bluetooth: hci5: command 0x0419 tx timeout
[  632.069516][ T8481] device syzkaller0 entered promiscuous mode
[  632.134117][ T8492] bond_slave_1: mtu less than device minimum
[  632.196160][ T4341] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  634.441418][ T8513] netlink: 'syz.0.1524': attribute type 2 has an invalid length.
[  634.457860][ T8513] netlink: 'syz.0.1524': attribute type 8 has an invalid length.
[  634.466532][ T8513] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1524'.
[  634.961072][ T8523] netlink: 'syz.0.1525': attribute type 10 has an invalid length.
[  635.545362][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  635.600071][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  635.989274][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  636.001703][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  636.042044][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  636.108137][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  636.205991][ T8351] device veth0_vlan entered promiscuous mode
[  636.277793][ T8351] device veth1_vlan entered promiscuous mode
[  636.424118][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  636.456386][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  636.469042][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  636.478331][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  636.751899][ T8351] device veth0_macvtap entered promiscuous mode
[  636.799853][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  636.834428][ T8351] device veth1_macvtap entered promiscuous mode
[  637.388591][ T8351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  637.417392][ T8351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  637.509646][ T8351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  637.562657][ T8351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  637.651819][ T8351] batman_adv: batadv0: Interface activated: batadv_slave_0
[  637.663573][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  637.678579][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  638.037877][ T8351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  638.074175][ T8351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  638.106145][ T8351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  638.155174][ T8351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  638.197221][ T8351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  638.255345][ T8351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  638.291825][ T8351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  638.325033][ T8351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  638.361795][ T8351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  638.372797][ T8351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  638.403475][ T8351] batman_adv: batadv0: Interface activated: batadv_slave_1
[  638.438117][ T8591] netlink: 'syz.4.1535': attribute type 2 has an invalid length.
[  638.452105][ T8591] netlink: 'syz.4.1535': attribute type 8 has an invalid length.
[  638.464955][ T8591] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1535'.
[  638.480532][ T8595] netlink: 'syz.1.1536': attribute type 10 has an invalid length.
[  638.488868][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  638.514343][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  638.576031][ T8584] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  638.614182][ T8584] device syzkaller0 entered promiscuous mode
[  641.380452][ T8351] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  641.389741][ T8351] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  641.398474][ T8351] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  641.407903][ T8351] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  641.540938][ T4415] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  642.677925][ T4412] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  642.721200][ T4292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  642.757507][ T4292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  642.915324][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  643.083448][ T8638] netlink: 'syz.0.1548': attribute type 2 has an invalid length.
[  643.101249][ T8638] netlink: 'syz.0.1548': attribute type 8 has an invalid length.
[  643.169530][ T8638] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1548'.
[  643.239693][ T4415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  643.247856][ T4415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  643.673966][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  644.344475][ T8676] netlink: 'syz.0.1553': attribute type 10 has an invalid length.
[  644.449122][ T4341] device hsr_slave_0 left promiscuous mode
[  644.496749][ T4341] device hsr_slave_1 left promiscuous mode
[  644.512720][ T4341] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  644.527929][ T4341] batman_adv: batadv0: Removing interface: batadv_slave_1
[  644.942025][ T4341] device veth1_macvtap left promiscuous mode
[  644.966385][ T4341] device veth0_macvtap left promiscuous mode
[  644.990011][ T4341] device veth1_vlan left promiscuous mode
[  645.848888][ T4341] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[  645.943849][ T4341] team0 (unregistering): Port device team_slave_1 removed
[  646.007288][ T4341] team0 (unregistering): Port device team_slave_0 removed
[  646.100628][ T4341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  646.184577][ T4341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  646.407332][ T4341] team0 (unregistering): Port device batadv0 removed
[  646.673911][ T4341] bond0 (unregistering): Released all slaves
[  646.724104][ T8667] device syzkaller0 entered promiscuous mode
[  650.115890][ T8703] netlink: 'syz.5.1561': attribute type 2 has an invalid length.
[  650.127797][ T8703] netlink: 'syz.5.1561': attribute type 8 has an invalid length.
[  650.140609][ T8703] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1561'.
[  650.799810][ T8712] bond_slave_1: mtu less than device minimum
[  651.316960][ T8729] netlink: 'syz.5.1570': attribute type 10 has an invalid length.
[  651.401082][ T8729] 8021q: adding VLAN 0 to HW filter on device batadv0
[  651.443381][ T8729] team0: Port device batadv0 added
[  651.576254][ T8736] device wg2 left promiscuous mode
[  651.653084][ T8735] device sit0 entered promiscuous mode
[  652.424519][ T8751] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  652.512686][ T8751] device syzkaller0 entered promiscuous mode
[  653.473498][ T4315] Bluetooth: hci1: unexpected event 0x34 length: 15 > 6
[  657.280420][ T8779] bond_slave_1: mtu less than device minimum
[  657.663703][ T8793] netlink: 'syz.4.1588': attribute type 10 has an invalid length.
[  659.128235][ T8819] device wg2 entered promiscuous mode
[  661.423136][ T8863] netlink: 'syz.2.1608': attribute type 2 has an invalid length.
[  661.442396][ T8863] netlink: 'syz.2.1608': attribute type 8 has an invalid length.
[  661.536067][ T8863] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1608'.
[  662.835516][ T8899] bond_slave_1: mtu less than device minimum
[  663.247756][ T8910] GPL: port 1(erspan0) entered blocking state
[  663.256377][ T8910] GPL: port 1(erspan0) entered disabled state
[  663.425602][ T8910] device erspan0 entered promiscuous mode
[  663.440266][ T8909] ref_ctr_offset mismatch. inode: 0x6b0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe
[  663.700558][ T8917] netlink: 'syz.4.1625': attribute type 2 has an invalid length.
[  663.708358][ T8917] netlink: 'syz.4.1625': attribute type 8 has an invalid length.
[  663.719445][ T8917] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1625'.
[  663.795381][ T8920] GPL: port 1(erspan0) entered blocking state
[  663.801746][ T8920] GPL: port 1(erspan0) entered forwarding state
[  665.666369][ T8961] netlink: 'syz.4.1641': attribute type 2 has an invalid length.
[  665.682677][ T8961] netlink: 'syz.4.1641': attribute type 8 has an invalid length.
[  665.701302][ T8961] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1641'.
[  666.846187][ T8979] ref_ctr_offset mismatch. inode: 0x70f offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe
[  666.895168][ T8980] GPL: port 1(erspan0) entered blocking state
[  666.925760][ T8980] GPL: port 1(erspan0) entered disabled state
[  666.940682][ T8980] device erspan0 entered promiscuous mode
[  667.050438][ T8979] GPL: port 1(erspan0) entered blocking state
[  667.062559][ T8979] GPL: port 1(erspan0) entered forwarding state
[  667.665749][ T9004] netlink: 'syz.4.1656': attribute type 2 has an invalid length.
[  667.836212][ T9004] netlink: 'syz.4.1656': attribute type 8 has an invalid length.
[  667.909433][ T9004] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1656'.
[  668.168706][ T9014] bond_slave_1: mtu less than device minimum
[  674.137442][ T4315] Bluetooth: hci5: unexpected event 0x34 length: 15 > 6
[  674.743001][ T9116] netlink: 'syz.2.1683': attribute type 2 has an invalid length.
[  674.951889][ T9116] netlink: 'syz.2.1683': attribute type 8 has an invalid length.
[  675.210958][ T9116] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1683'.
[  675.507535][ T9126] netlink: 'syz.0.1687': attribute type 10 has an invalid length.
[  675.890888][ T9128] ref_ctr_offset mismatch. inode: 0x710 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe
[  676.760334][ T4315] Bluetooth: hci5: unexpected event 0x34 length: 15 > 6
[  676.806941][ T9152] device wg2 entered promiscuous mode
[  677.084473][ T9160] syz.2.1700[9160] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  677.084636][ T9160] syz.2.1700[9160] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  677.254104][ T9168] netlink: 'syz.4.1701': attribute type 10 has an invalid length.
[  677.819389][ T9178] bond_slave_1: mtu less than device minimum
[  680.169269][ T9230] netlink: 'syz.5.1717': attribute type 10 has an invalid length.
[  682.372442][ T9281] netlink: 'syz.1.1731': attribute type 10 has an invalid length.
[  682.762319][ T9290] netlink: 'syz.1.1733': attribute type 2 has an invalid length.
[  682.803190][ T9290] netlink: 'syz.1.1733': attribute type 8 has an invalid length.
[  682.817874][ T9290] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1733'.
[  683.738294][ T9308] netlink: 'syz.1.1746': attribute type 2 has an invalid length.
[  683.774574][ T9308] netlink: 'syz.1.1746': attribute type 8 has an invalid length.
[  683.785176][ T9308] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1746'.
[  683.803325][ T9317] bridge0: port 2(bridge_slave_1) entered disabled state
[  684.209858][ T9322] device pim6reg1 entered promiscuous mode
[  684.513627][ T9339] netlink: 'syz.5.1744': attribute type 10 has an invalid length.
[  685.316915][ T4315] Bluetooth: hci5: unexpected event 0x34 length: 15 > 6
[  685.772043][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  685.790307][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  685.834020][ T9365] netlink: 'syz.2.1753': attribute type 2 has an invalid length.
[  685.860053][ T9365] netlink: 'syz.2.1753': attribute type 8 has an invalid length.
[  685.874035][ T9365] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1753'.
[  686.484607][ T9386] netlink: 'syz.1.1760': attribute type 10 has an invalid length.
[  688.134350][ T9410] netlink: 'syz.5.1769': attribute type 2 has an invalid length.
[  688.155638][ T9410] netlink: 'syz.5.1769': attribute type 8 has an invalid length.
[  688.267763][ T9410] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1769'.
[  689.113473][ T9422] device pim6reg1 entered promiscuous mode
[  689.828988][ T9433] netlink: 'syz.0.1774': attribute type 10 has an invalid length.
[  694.475563][ T9474] netlink: 'syz.2.1794': attribute type 2 has an invalid length.
[  694.611435][ T9474] netlink: 'syz.2.1794': attribute type 8 has an invalid length.
[  694.678849][ T9474] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1794'.
[  694.744128][ T9480] device wg2 entered promiscuous mode
[  695.278001][ T9489] netlink: 'syz.1.1787': attribute type 10 has an invalid length.
[  697.248145][ T9524] netlink: 'syz.2.1797': attribute type 2 has an invalid length.
[  697.279514][ T9524] netlink: 'syz.2.1797': attribute type 8 has an invalid length.
[  697.316282][ T9524] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1797'.
[  698.075661][ T9555] netlink: 'syz.2.1803': attribute type 10 has an invalid length.
[  698.469857][ T9563] netlink: 'syz.0.1815': attribute type 10 has an invalid length.
[  700.136554][ T9590] netlink: 'syz.2.1811': attribute type 2 has an invalid length.
[  700.169419][ T9590] netlink: 'syz.2.1811': attribute type 8 has an invalid length.
[  700.199378][ T9590] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1811'.
[  700.806669][ T9611] netlink: 'syz.5.1819': attribute type 10 has an invalid length.
[  702.901767][ T9650] netlink: 'syz.2.1827': attribute type 2 has an invalid length.
[  702.953661][ T9650] netlink: 'syz.2.1827': attribute type 8 has an invalid length.
[  702.987536][ T9650] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1827'.
[  703.582398][ T4310] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  703.592555][ T4310] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  703.602795][ T4310] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  703.621557][ T4310] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  703.638107][ T4310] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  703.646159][ T4310] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  703.703953][ T9670] netlink: 'syz.5.1833': attribute type 10 has an invalid length.
[  704.442228][ T9687] syz.5.1839[9687] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  704.442334][ T9687] syz.5.1839[9687] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  704.452576][ T9689] device syzkaller0 entered promiscuous mode
[  704.520034][ T9687] syz.5.1839[9687] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  704.520148][ T9687] syz.5.1839[9687] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  705.697631][ T4315] Bluetooth: hci4: command 0x0409 tx timeout
[  707.769266][ T4310] Bluetooth: hci4: command 0x041b tx timeout
[  707.856857][ T9663] chnl_net:caif_netlink_parms(): no params data found
[  708.096920][ T9712] netlink: 'syz.2.1849': attribute type 10 has an invalid length.
[  708.175672][ T9716] device pim6reg1 entered promiscuous mode
[  708.423294][ T9663] bridge0: port 1(bridge_slave_0) entered blocking state
[  708.439331][ T9663] bridge0: port 1(bridge_slave_0) entered disabled state
[  708.519125][ T9663] device bridge_slave_0 entered promiscuous mode
[  708.570288][ T9663] bridge0: port 2(bridge_slave_1) entered blocking state
[  708.582757][ T9663] bridge0: port 2(bridge_slave_1) entered disabled state
[  708.646993][ T9663] device bridge_slave_1 entered promiscuous mode
[  708.781563][ T9663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  708.879268][ T9663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  709.116908][ T9663] team0: Port device team_slave_0 added
[  709.197868][ T9663] team0: Port device team_slave_1 added
[  709.426909][ T9663] batman_adv: batadv0: Adding interface: batadv_slave_0
[  709.444707][ T9663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  709.582531][ T9663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  709.728891][ T9663] batman_adv: batadv0: Adding interface: batadv_slave_1
[  709.748840][ T9663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  709.849498][ T4310] Bluetooth: hci4: command 0x040f tx timeout
[  709.926507][ T9663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  710.341812][ T9663] device hsr_slave_0 entered promiscuous mode
[  710.389809][ T9663] device hsr_slave_1 entered promiscuous mode
[  710.410524][ T9663] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  710.443253][ T9663] Cannot create hsr debugfs directory
[  710.754821][ T9768] netlink: 'syz.0.1860': attribute type 10 has an invalid length.
[  711.931106][ T4315] Bluetooth: hci4: command 0x0419 tx timeout
[  712.067113][ T9663] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  712.164527][ T9663] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  712.307642][ T9663] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  712.377241][ T9663] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  713.201537][ T9663] 8021q: adding VLAN 0 to HW filter on device bond0
[  713.260993][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  713.273663][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  713.321097][ T9663] 8021q: adding VLAN 0 to HW filter on device team0
[  713.413908][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  713.431762][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  713.497405][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  713.504650][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  713.604906][ T9788] netlink: 'syz.1.1866': attribute type 2 has an invalid length.
[  713.630071][ T9788] netlink: 'syz.1.1866': attribute type 8 has an invalid length.
[  713.673820][ T9788] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1866'.
[  713.733647][ T4310] Bluetooth: hci1: unexpected event 0x33 length: 15 > 10
[  713.757335][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  713.818301][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  713.858332][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  713.925840][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  713.933099][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  714.037943][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  714.117076][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  714.160721][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  714.222263][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  714.277950][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  714.360848][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  714.443883][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  714.537039][ T9663] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  714.548301][ T9663] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  714.570840][ T7859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  714.658639][ T7859] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  714.689064][ T7859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  714.735643][ T7859] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  714.766487][ T7859] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  714.865104][ T9800] netlink: 'syz.2.1871': attribute type 10 has an invalid length.
[  715.455370][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  715.478237][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  715.650140][ T9663] 8021q: adding VLAN 0 to HW filter on device batadv0
[  717.560960][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  717.591084][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  717.710289][ T7859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  717.752901][ T7859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  717.811228][ T9663] device veth0_vlan entered promiscuous mode
[  717.834442][ T7859] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  717.880702][ T7859] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  718.014921][ T9663] device veth1_vlan entered promiscuous mode
[  718.041039][ T9832] netlink: 'syz.1.1879': attribute type 2 has an invalid length.
[  718.062787][ T9832] netlink: 'syz.1.1879': attribute type 8 has an invalid length.
[  718.100949][ T9832] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1879'.
[  718.230200][ T7859] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  718.251662][ T7859] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  718.280325][ T7859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  718.385483][ T7859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  718.470066][ T9663] device veth0_macvtap entered promiscuous mode
[  718.493074][ T9663] device veth1_macvtap entered promiscuous mode
[  718.534603][ T9839] netlink: 'syz.1.1882': attribute type 10 has an invalid length.
[  718.569430][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  718.583057][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  718.646360][ T9663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  718.683460][ T9663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  718.721312][ T9663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  718.760485][ T9663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  718.777444][ T9663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  718.795227][ T9663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  718.817841][ T9663] batman_adv: batadv0: Interface activated: batadv_slave_0
[  718.845753][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  718.891866][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  718.931205][ T9663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  719.009573][ T9663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  719.080829][ T9663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  719.119455][ T9663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  719.143792][ T9663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  719.177427][ T9663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  719.201303][ T9663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  719.236722][ T9663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  719.275666][ T9663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  719.290764][ T9663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  719.311623][ T9663] batman_adv: batadv0: Interface activated: batadv_slave_1
[  719.330836][ T9847] netlink: 'syz.1.1893': attribute type 10 has an invalid length.
[  719.363639][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  719.373557][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  719.486526][ T9663] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  719.496143][ T9663] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  719.505159][ T9663] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  719.522150][ T9663] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  719.960508][   T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  719.968703][   T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  720.085547][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  720.106428][   T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  720.138204][   T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  720.194305][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  722.803811][ T4310] Bluetooth: hci4: unexpected event 0x33 length: 15 > 10
[  723.441170][ T9888] netlink: 'syz.5.1891': attribute type 2 has an invalid length.
[  723.470763][ T9888] netlink: 'syz.5.1891': attribute type 8 has an invalid length.
[  723.484501][ T9888] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1891'.
[  724.067267][ T9896] netlink: 'syz.5.1896': attribute type 10 has an invalid length.
[  725.755088][ T9909] device pim6reg1 entered promiscuous mode
[  726.256086][ T4310] Bluetooth: hci1: unexpected event 0x33 length: 15 > 10
[  727.211841][ T9925] netlink: 'syz.2.1909': attribute type 10 has an invalid length.
[  727.347841][ T9924] netlink: 'syz.1.1907': attribute type 2 has an invalid length.
[  727.397075][ T9924] netlink: 'syz.1.1907': attribute type 8 has an invalid length.
[  727.449891][ T9924] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1907'.
[  728.423560][ T9608] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  728.517809][ T4315] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  728.530973][ T4315] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  728.540070][ T4315] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  728.548496][ T4315] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  728.559738][ T4315] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  728.572326][ T4315] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  728.593720][ T9936] bond_slave_1: mtu less than device minimum
[  728.751524][ T9608] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  728.996748][ T4315] Bluetooth: hci4: unexpected event 0x33 length: 15 > 10
[  729.015237][ T9608] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  729.306633][ T9608] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  729.438994][ T9959] netlink: 'syz.2.1920': attribute type 10 has an invalid length.
[  729.747812][ T9964] netlink: 'syz.6.1921': attribute type 2 has an invalid length.
[  729.772422][ T9964] netlink: 'syz.6.1921': attribute type 8 has an invalid length.
[  729.808901][ T9964] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1921'.
[  729.855541][ T9940] chnl_net:caif_netlink_parms(): no params data found
[  730.650179][ T4315] Bluetooth: hci2: command 0x0409 tx timeout
[  731.100718][ T9974] bond_slave_1: mtu less than device minimum
[  731.923378][ T4315] Bluetooth: hci4: unexpected event 0x33 length: 15 > 10
[  731.925624][ T9940] bridge0: port 1(bridge_slave_0) entered blocking state
[  731.971180][ T9940] bridge0: port 1(bridge_slave_0) entered disabled state
[  732.036085][ T9940] device bridge_slave_0 entered promiscuous mode
[  732.339851][ T9940] bridge0: port 2(bridge_slave_1) entered blocking state
[  732.347020][ T9940] bridge0: port 2(bridge_slave_1) entered disabled state
[  732.412471][ T9940] device bridge_slave_1 entered promiscuous mode
[  732.746513][ T4315] Bluetooth: hci2: command 0x041b tx timeout
[  732.869725][T10001] netlink: 'syz.6.1932': attribute type 10 has an invalid length.
[  732.931475][T10001] 8021q: adding VLAN 0 to HW filter on device batadv0
[  732.954298][T10001] team0: Port device batadv0 added
[  732.962774][ T9940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  733.081234][ T9940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  733.552528][ T9940] team0: Port device team_slave_0 added
[  733.596595][ T9940] team0: Port device team_slave_1 added
[  734.021852][ T9940] batman_adv: batadv0: Adding interface: batadv_slave_0
[  734.039099][ T9940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  734.235584][ T9940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  734.416536][ T9940] batman_adv: batadv0: Adding interface: batadv_slave_1
[  734.444837][ T9940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  734.664945][ T9940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  734.809408][ T4315] Bluetooth: hci2: command 0x040f tx timeout
[  735.072876][ T9940] device hsr_slave_0 entered promiscuous mode
[  735.133437][ T9940] device hsr_slave_1 entered promiscuous mode
[  735.189704][ T9940] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  735.211291][ T9940] Cannot create hsr debugfs directory
[  735.294391][ T4315] Bluetooth: hci1: unexpected event 0x33 length: 15 > 10
[  735.326863][ T9608] bond0: (slave wlan1): Releasing backup interface
[  735.884771][ T9608] device hsr_slave_0 left promiscuous mode
[  735.901775][ T9608] device hsr_slave_1 left promiscuous mode
[  735.922605][ T9608] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  735.936192][ T9608] batman_adv: batadv0: Removing interface: batadv_slave_0
[  735.958592][ T9608] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  735.991266][ T9608] batman_adv: batadv0: Removing interface: batadv_slave_1
[  736.052220][ T9608] device veth1_macvtap left promiscuous mode
[  736.058318][ T9608] device veth0_macvtap left promiscuous mode
[  736.079076][ T9608] device veth1_vlan left promiscuous mode
[  736.088452][ T9608] device veth0_vlan left promiscuous mode
[  736.898831][ T4315] Bluetooth: hci2: command 0x0419 tx timeout
[  737.978490][ T4315] Bluetooth: hci4: unexpected event 0x33 length: 15 > 10
[  738.020319][ T9608] team0 (unregistering): Port device team_slave_1 removed
[  738.259391][ T9608] team0 (unregistering): Port device team_slave_0 removed
[  738.380521][ T9608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  738.485591][ T9608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  739.496030][ T9608] team0 (unregistering): Port device batadv0 removed
[  739.791448][ T9608] bond0 (unregistering): (slave team0): Releasing backup interface
[  739.967991][ T9608] bond0 (unregistering): Released all slaves
[  740.224075][T10059] netlink: 'syz.6.1950': attribute type 10 has an invalid length.
[  740.637678][ T9940] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  740.704796][ T9940] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  740.793400][ T9940] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  740.854407][ T9940] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  741.459653][ T9940] 8021q: adding VLAN 0 to HW filter on device bond0
[  741.760115][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  741.768087][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  741.882028][ T9940] 8021q: adding VLAN 0 to HW filter on device team0
[  742.008152][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  742.064503][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  742.075025][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state
[  742.082283][ T4341] bridge0: port 1(bridge_slave_0) entered forwarding state
[  742.111405][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  742.124320][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  742.136983][ T4341] bridge0: port 2(bridge_slave_1) entered blocking state
[  742.144389][ T4341] bridge0: port 2(bridge_slave_1) entered forwarding state
[  742.156739][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  742.187516][ T9940] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  742.204580][ T9940] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  742.223369][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  742.240477][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  742.297159][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  742.349545][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  742.426239][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  742.466678][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  742.499824][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  742.539954][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  742.706921][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  742.859582][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  742.981499][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  743.090139][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  746.231644][ T4315] Bluetooth: hci5: unexpected event 0x33 length: 15 > 10
[  747.175298][T10091] 
[  747.184727][T10091] ======================================================
[  747.191860][T10091] WARNING: possible circular locking dependency detected
[  747.198893][T10091] syzkaller #0 Not tainted
[  747.203418][T10091] ------------------------------------------------------
[  747.210448][T10091] syz.5.1960/10091 is trying to acquire lock:
[  747.216522][T10091] ffff8880b8f281d8 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x184/0x870
[  747.225138][T10091] 
[  747.225138][T10091] but task is already holding lock:
[  747.232511][T10091] ffff8880b8f28418 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270
[  747.241375][T10091] 
[  747.241375][T10091] which lock already depends on the new lock.
[  747.241375][T10091] 
[  747.251771][T10091] 
[  747.251771][T10091] the existing dependency chain (in reverse order) is:
[  747.260789][T10091] 
[  747.260789][T10091] -> #1 (&base->lock){-.-.}-{2:2}:
[  747.268105][T10091]        _raw_spin_lock_irqsave+0xa4/0xf0
[  747.273834][T10091]        lock_timer_base+0x123/0x270
[  747.279198][T10091]        __mod_timer+0xfe/0xd00
[  747.284055][T10091]        queue_delayed_work_on+0x126/0x1e0
[  747.289969][T10091]        kvfree_call_rcu+0x4cb/0x870
[  747.295254][T10091]        rtnl_register_internal+0x489/0x590
[  747.301141][T10091]        rtnl_register+0x2e/0x70
[  747.306069][T10091]        ip_rt_init+0x323/0x3b5
[  747.311204][T10091]        ip_init+0xa/0x14
[  747.315626][T10091]        inet_init+0x2bd/0x3cf
[  747.320392][T10091]        do_one_initcall+0x214/0x7a0
[  747.325807][T10091]        do_initcall_level+0x137/0x1e4
[  747.331379][T10091]        do_initcalls+0x4b/0x8a
[  747.336247][T10091]        kernel_init_freeable+0x3fa/0x5ac
[  747.342492][T10091]        kernel_init+0x19/0x1b0
[  747.347341][T10091]        ret_from_fork+0x1f/0x30
[  747.352376][T10091] 
[  747.352376][T10091] -> #0 (krc.lock){..-.}-{2:2}:
[  747.359572][T10091]        __lock_acquire+0x2cf8/0x7c50
[  747.364994][T10091]        lock_acquire+0x1b4/0x490
[  747.370113][T10091]        _raw_spin_lock+0x2a/0x40
[  747.375149][T10091]        kvfree_call_rcu+0x184/0x870
[  747.380517][T10091]        trie_delete_elem+0x52d/0x690
[  747.385909][T10091]        bpf_prog_41385012b43a9f2e+0x40/0x44
[  747.391882][T10091]        bpf_trace_run3+0x1e3/0x400
[  747.397074][T10091]        enqueue_timer+0x411/0x5c0
[  747.402181][T10091]        __mod_timer+0x911/0xd00
[  747.407198][T10091]        sk_reset_timer+0x1f/0xb0
[  747.412304][T10091]        tipc_sk_finish_conn+0x154/0x7e0
[  747.418038][T10091]        tipc_socketpair+0x250/0x470
[  747.423318][T10091]        __sys_socketpair+0x2ac/0x540
[  747.428682][T10091]        __x64_sys_socketpair+0x97/0xb0
[  747.434230][T10091]        do_syscall_64+0x4c/0xa0
[  747.439186][T10091]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  747.445589][T10091] 
[  747.445589][T10091] other info that might help us debug this:
[  747.445589][T10091] 
[  747.455827][T10091]  Possible unsafe locking scenario:
[  747.455827][T10091] 
[  747.463269][T10091]        CPU0                    CPU1
[  747.468622][T10091]        ----                    ----
[  747.473976][T10091]   lock(&base->lock);
[  747.478035][T10091]                                lock(krc.lock);
[  747.484441][T10091]                                lock(&base->lock);
[  747.491039][T10091]   lock(krc.lock);
[  747.494836][T10091] 
[  747.494836][T10091]  *** DEADLOCK ***
[  747.494836][T10091] 
[  747.502995][T10091] 2 locks held by syz.5.1960/10091:
[  747.508182][T10091]  #0: ffff8880b8f28418 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270
[  747.517498][T10091]  #1: ffffffff8cb2aca0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run3+0xf0/0x400
[  747.526798][T10091] 
[  747.526798][T10091] stack backtrace:
[  747.532770][T10091] CPU: 1 PID: 10091 Comm: syz.5.1960 Not tainted syzkaller #0
[  747.540212][T10091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  747.550266][T10091] Call Trace:
[  747.553538][T10091]  <TASK>
[  747.556481][T10091]  dump_stack_lvl+0x168/0x22e
[  747.561154][T10091]  ? load_image+0x3b0/0x3b0
[  747.565656][T10091]  ? show_regs_print_info+0x12/0x12
[  747.570862][T10091]  ? print_circular_bug+0x12b/0x1a0
[  747.576141][T10091]  check_noncircular+0x274/0x310
[  747.581078][T10091]  ? add_chain_block+0x940/0x940
[  747.586008][T10091]  ? lockdep_lock+0xdc/0x1e0
[  747.590592][T10091]  ? _find_first_zero_bit+0xcf/0x100
[  747.595874][T10091]  __lock_acquire+0x2cf8/0x7c50
[  747.600719][T10091]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  747.606613][T10091]  ? verify_lock_unused+0x140/0x140
[  747.611803][T10091]  ? kasan_save_stack+0x4c/0x60
[  747.616654][T10091]  ? kasan_save_stack+0x3a/0x60
[  747.621496][T10091]  ? __kasan_record_aux_stack+0xb2/0xc0
[  747.627044][T10091]  ? kvfree_call_rcu+0x108/0x870
[  747.631976][T10091]  ? trie_delete_elem+0x52d/0x690
[  747.636996][T10091]  ? bpf_prog_41385012b43a9f2e+0x40/0x44
[  747.642624][T10091]  ? bpf_trace_run3+0x1e3/0x400
[  747.647494][T10091]  ? enqueue_timer+0x411/0x5c0
[  747.652257][T10091]  ? __mod_timer+0x911/0xd00
[  747.656846][T10091]  ? sk_reset_timer+0x1f/0xb0
[  747.661509][T10091]  ? tipc_sk_finish_conn+0x154/0x7e0
[  747.666790][T10091]  ? tipc_socketpair+0x250/0x470
[  747.671719][T10091]  ? __sys_socketpair+0x2ac/0x540
[  747.676748][T10091]  ? __x64_sys_socketpair+0x97/0xb0
[  747.681934][T10091]  ? do_syscall_64+0x4c/0xa0
[  747.686517][T10091]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  747.692681][T10091]  lock_acquire+0x1b4/0x490
[  747.697193][T10091]  ? kvfree_call_rcu+0x184/0x870
[  747.702136][T10091]  ? read_lock_is_recursive+0x10/0x10
[  747.707522][T10091]  ? __phys_addr+0xb6/0x170
[  747.712019][T10091]  _raw_spin_lock+0x2a/0x40
[  747.716524][T10091]  ? kvfree_call_rcu+0x184/0x870
[  747.721454][T10091]  kvfree_call_rcu+0x184/0x870
[  747.726213][T10091]  ? rcu_leak_callback+0x10/0x10
[  747.731163][T10091]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  747.737064][T10091]  ? _raw_spin_unlock+0x40/0x40
[  747.741909][T10091]  trie_delete_elem+0x52d/0x690
[  747.746771][T10091]  bpf_prog_41385012b43a9f2e+0x40/0x44
[  747.752225][T10091]  bpf_trace_run3+0x1e3/0x400
[  747.757000][T10091]  ? do_raw_spin_unlock+0x11d/0x230
[  747.762393][T10091]  ? bpf_trace_run3+0xf0/0x400
[  747.767261][T10091]  ? bpf_trace_run2+0x3b0/0x3b0
[  747.772114][T10091]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  747.778107][T10091]  ? _raw_spin_lock_irqsave+0xb0/0xf0
[  747.783491][T10091]  ? _raw_spin_lock+0x40/0x40
[  747.788162][T10091]  enqueue_timer+0x411/0x5c0
[  747.792741][T10091]  __mod_timer+0x911/0xd00
[  747.797152][T10091]  ? __lock_acquire+0x7c50/0x7c50
[  747.802259][T10091]  sk_reset_timer+0x1f/0xb0
[  747.806752][T10091]  tipc_sk_finish_conn+0x154/0x7e0
[  747.811972][T10091]  tipc_socketpair+0x250/0x470
[  747.816747][T10091]  __sys_socketpair+0x2ac/0x540
[  747.821589][T10091]  __x64_sys_socketpair+0x97/0xb0
[  747.826621][T10091]  do_syscall_64+0x4c/0xa0
[  747.831028][T10091]  ? clear_bhb_loop+0x60/0xb0
[  747.835698][T10091]  ? clear_bhb_loop+0x60/0xb0
[  747.840376][T10091]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  747.846263][T10091] RIP: 0033:0x7f5df038f749
[  747.850670][T10091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  747.870355][T10091] RSP: 002b:00007f5df1202038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[  747.878777][T10091] RAX: ffffffffffffffda RBX: 00007f5df05e5fa0 RCX: 00007f5df038f749
[  747.886743][T10091] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000001e
[  747.894806][T10091] RBP: 00007f5df0413f91 R08: 0000000000000000 R09: 0000000000000000
[  747.902766][T10091] R10: 00002000000010c0 R11: 0000000000000246 R12: 0000000000000000
[  747.910835][T10091] R13: 00007f5df05e6038 R14: 00007f5df05e5fa0 R15: 00007ffc8b33d048
[  747.918831][T10091]  </TASK>
[  747.927945][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  747.941829][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  748.037305][ T7859] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  748.048206][ T7859] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  748.059355][T10093] netlink: 'syz.1.1961': attribute type 10 has an invalid length.
[  748.071235][ T9940] 8021q: adding VLAN 0 to HW filter on device batadv0
[  748.431062][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  748.442762][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  748.462872][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  748.472009][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  748.484792][ T9940] device veth0_vlan entered promiscuous mode
[  748.492461][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  748.504225][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  748.518307][ T9940] device veth1_vlan entered promiscuous mode
[  748.544860][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  748.553443][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  748.563898][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  748.573045][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  748.585580][ T9940] device veth0_macvtap entered promiscuous mode
[  748.596858][ T9940] device veth1_macvtap entered promiscuous mode
[  748.620683][ T9940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  748.632493][ T9940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  748.642899][ T9940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  748.653945][ T9940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  748.664097][ T9940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  748.675271][ T9940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  748.688255][ T9940] batman_adv: batadv0: Interface activated: batadv_slave_0
[  748.696545][ T7859] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  748.707651][ T7859] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  748.716511][ T7859] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  748.731098][ T7859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  748.742618][ T9940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  748.754070][ T9940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  748.765954][ T9940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  748.777343][ T9940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  748.789201][ T9940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  748.801563][ T9940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  748.811657][ T9940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  748.824038][ T9940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  748.837921][ T9940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  748.851949][ T9940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  748.863285][ T9940] batman_adv: batadv0: Interface activated: batadv_slave_1
[  748.873169][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  748.883250][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  748.896678][ T9940] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  748.905675][ T9940] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  748.914560][ T9940] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  748.923340][ T9940] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  748.989718][ T9940] ieee80211 phy18: Selected rate control algorithm 'minstrel_ht'
[  749.015191][ T4341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  749.016043][ T9940] ieee80211 phy19: Selected rate control algorithm 'minstrel_ht'
[  749.027957][ T4341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  749.046975][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  749.062727][ T4341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  749.070686][ T4341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  749.078425][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  749.484378][ T4341] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  749.533948][ T4341] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  749.604491][ T4341] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  749.670336][ T4341] bond0: (slave netdevsim0): Releasing backup interface
[  749.678330][ T4341] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  749.930182][ T4310] Bluetooth: hci5: command 0x0406 tx timeout
[  750.373726][ T4341] device hsr_slave_0 left promiscuous mode
[  750.380054][ T4341] device hsr_slave_1 left promiscuous mode
[  750.386581][ T4341] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  750.394272][ T4341] batman_adv: batadv0: Removing interface: batadv_slave_0
[  750.403978][ T4341] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  750.412786][ T4341] batman_adv: batadv0: Removing interface: batadv_slave_1
[  750.421100][ T4341] device bridge_slave_1 left promiscuous mode
[  750.427295][ T4341] bridge0: port 2(bridge_slave_1) entered disabled state
[  750.435209][ T4341] device bridge_slave_0 left promiscuous mode
[  750.441680][ T4341] bridge0: port 1(bridge_slave_0) entered disabled state
[  750.451880][ T4341] device veth1_macvtap left promiscuous mode
[  750.457902][ T4341] device veth0_macvtap left promiscuous mode
[  750.464033][ T4341] device veth1_vlan left promiscuous mode
[  750.469897][ T4341] device veth0_vlan left promiscuous mode
[  750.602484][ T4341] team0 (unregistering): Port device team_slave_1 removed
[  750.630736][ T4341] team0 (unregistering): Port device team_slave_0 removed
[  750.641618][ T4341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  750.668031][ T4341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  750.711899][ T4341] team0 (unregistering): Port device batadv0 removed
[  750.828884][ T4341] bond0 (unregistering): (slave team0): Releasing backup interface
[  750.849891][ T4341] bond0 (unregistering): Released all slaves