last executing test programs:

2m3.353995063s ago: executing program 4 (id=2084):
r0 = socket$kcm(0x29, 0x7, 0x0)
sendmsg$kcm(r0, &(0x7f0000000700)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x1, @rand_addr=0x64010100}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000080)="03a6c4ce4fa318e5b18b66afe1cba168774425", 0x13}, {&(0x7f00000000c0)="1b3f580b9446cc2bf33f64cea29fee9d0bb16d931037daa3f999ffe9971c99686151de2df8351bc55b828f06e8ffbddc7cfbca8b781fc63e84", 0x39}, {&(0x7f0000000100)="8f87c98c0f4ba752f490e2992e7c77dcddc83a1e2ecb6cd5c16ad5b66ab152ad8060a270164d", 0x26}, {&(0x7f0000000140)="a1ddec96f98fddacbff50c61aaec6a6a61bfce52195e9c9103212c7d8052c176ffb41ddf04c035c450af02c845d3bc5a10ee39bdda502190c315d24f1e4804d35c42cc48a8936eaefc6bcf2396046b4d290e14b216432604a3eaf201d812618b9ea44125202f90f5148d7bedd102dca30284877fc5072ea9a07e6496cdb437d28e8e42c664d5643368bf8df7916d7d2a4dde64f5b791281c3efe253e2cdfed46913e881e5104ca59a9bba1f48e989f8d316e62e581193c271b26a8bb84dada7ed5bab0eae2422056c962a9dff70ec36fa5bf8423a808db67270e683fd0d35118917ad27168e37108f4f197897c26788b5ddf2deb", 0xf4}, {&(0x7f0000000240)="478275371e92465b1864", 0xa}, {&(0x7f0000000280)="aab1e9994eede81c6721497b1ed692bb7f5eb193e72932f0e996c4b5aa818c070b38d0c819f7db6daa7adc114a5f77d627c24579fd0d7da193fe75d397812ad4dcd8955d9cd1627f65d26086ca96b81b1be05e33d3b7880c0496125fb4d74d86b7c6fd77959516dd1e3b3351f59038c733ca871134808b6634983324ccd95cb80bcec1", 0x83}, {&(0x7f0000000340)="12a4baeb0c9c0f0b2f98d223dfce407570b872e7d8ffe02b254252c0e4d31bdd4bca6c83f859a62a62509f1a4f644e2c35809fcf28a05ff0aad1ee210ccf4b87f95af5ba043a3584ea0ae2d89ca061616b0682cefe6471ff5d97274ecdaab7cb264df15c3901f95d1b3ae9ac083e082e0dd6e287bbbf5888d36d4ff30da9352080e88c255792f2079e138394480532b74f39fb941a7e97e331144b8646b151c4a62eba740fe47ce80550d231c75791a6062714fd6f6df4e38ef44d03a0", 0xbd}, {&(0x7f0000000400)="3c480d69bfe0a94decdc268959f6ff0de7b0bb32c60264b62db2abf9", 0x1c}, {&(0x7f0000000440)="df1933f96e00741e822a67e453570199c2129630dfb23205126f3d87688fd8c03749d039f0f24312", 0x28}], 0x9, &(0x7f0000000540)=[{0xe8, 0x113, 0x9, "dc3a0f9906bdde34020df4de3b8579c588be0ede24dcce0f96fde750827f301063f2ca1a07837c722a24e77070d81dcaac4eb01ec60f2c8d93c9774a4fdf470b045fef58fd7400f94c42d5f41529506b0ca8dc0a532ddfa3cb3f817b6d3fb306b2faa9229c6e8115ec2dba6e55868c1a28d0dedc05c367a42c4ca2f28156a4ea1268dc964648be04bf3d1b07d91d26ee6ec0b90476010c8da05e4e5a6e33433abc48282f834d8c88cc4d21cfb35f574a2283eb3ace8f6981238622d1968d0f22a8e3e72a4fd104aee4d9f772ad105d8c7447"}, {0xa0, 0x110, 0x7, "359fb41c71f8742fbd110df1fc927de896ffcde28de53dd8dccfafc389c53dda720f9e8bfb550ecc73034d4688fe98f770b88b74a594c21c9e9ccf3de9d95b7a950283f05a1dd4ebfc60101f042736af834d074144e47d314e9fb6a03f03819f7c3f9ab3466a6055d8b11bc99c9ef8101d72bf154b7ad0a7cbe44cffd978671846d50d2386e9f4a776"}], 0x188}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0x58, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000980)=0xffffffffffffffff, 0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xe, &(0x7f0000000740)=@raw=[@ldst={0x2, 0x3, 0x2, 0x8, 0x2, 0x50, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x82, &(0x7f0000000800)=""/130, 0x41000, 0x0, '\x00', r1, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000009c0)=[{0x2, 0x5, 0x1}], 0x10, 0x9}, 0x94)
r4 = socket$kcm(0x29, 0x5, 0x0)
r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b00)=@generic={&(0x7f0000000ac0)='./file0\x00', 0x0, 0x10}, 0x18)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000b40)=r5, 0x4)
r6 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000b80)={r4, r3})
r7 = socket$kcm(0x29, 0x0, 0x0)
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000bc0)=r3, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000fc0)={r3, 0x0, 0x9d, 0xd0, &(0x7f0000000c00)="bf9a96e295c8198345e7bd36314624524c98f20a20f836ac3fdec1475b4e48647a413faa16ce8f47fe4d5b6a51fb868c1b66f7a43acbd157180d93664bb3b1dd7e94f77a82433a34d576064c0979e7c9f821ee7cec0df26d931ff5789bc37515acc094d15e1f0a972e971248161da68df814e77e31f67969e3e9acc161d0e429e421c5ce973d648a96057a02efef692f9fa12454d64782e9cf434cc707", &(0x7f0000000cc0)=""/208, 0x9, 0x0, 0xef, 0xc5, &(0x7f0000000dc0)="154fc6b2168fa848a6101e107971338d908c54ae29a1b1d95a00f6b9f1f855b0bfd431483907f638621305cb7dfe4ded7c29cd0fd5a2002c7205ce6ac540540a1d1a021bbff0200cc6473599746e60eb948fdef98241706389c8d3ea301278b27334e603276848eba521b0f5b3b681c5799465ece46ce0c971598ddcd7885147d663e01ec5c8fbca87fe2d87aa0a6ba64162c8eafa636218f84b31b27174e297b6a318e70ccd63fa86eba21ae16e2aba115a0ebffceedb956f581177ccac16d05e04b694d2512720eca90826449b96f0ca60d071c27fc3f1007f3d605b52140e8eb0075e6b5d15fe0d15b5c7feb59f", &(0x7f0000000ec0)="a48c787c7933846b21e40faad5598df11b24a1e796cf793d9064056455abe3fb4b3add3bc6fd727c267370ac9258717d10997734ad6e0cb10fd4f3de81e0279877d1dc3403529fca1eb2e37d9a90a8fda3b2f0f61337c612e16413e6c63a4facaa6ff3700a21082fddbfa2b22de8915ee08938ae8c13cdce71716fde078ebf1077426f2b2ba7d4ffa63b12e3219da18cd78a047adf18b64e39905704d6bc85685d93645f7fa475251d8d1b229bad3fb1e67163ed349f763de7810d854b4640d0f225b46271", 0x5, 0x0, 0x2}, 0x50)
r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001040), 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r8, r3, 0x4, r3}, 0x10)
sendmsg$kcm(r6, &(0x7f0000001800)={&(0x7f00000010c0)=@ll={0x11, 0xf7, r1, 0x1, 0x2, 0x6, @remote}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001140)="f68764a4a46626fc3c5a29d2fb4719d7532e76dd6c30430c762c1279c1cb9e32f240ee72882b008360eb496ab99fc9e4c6aad540e6f8d6dc8a165ec0ff9bb8b13226405631d53fbe75e50d0a2bea88e614c388", 0x53}, {&(0x7f00000011c0)="8ec763f059b14a65638ebad9cb24395fd19ec66e9bac2c04a7521d85b8fed0ab0ef3d688841c84846b46ebaabe92fc7c0e303d1eaa69b3d351bd674a2818938638be7a27d31a8efd4e17236b16353b306e014265e5fcb1d10c83876fe422a4e90cb926ef5a8bc6ebeb218ac7b593bca9b96c40b702b69e25d6fe9c3e19e9567dbeda0f4083503b0d1a94de20bcee9f75fd022f176dc9df7188d39b3d1d254be6edfb48a441b9e5e6844855846016fd5816384daaedd01215ede2d333e8bff6b875b4ac43b9", 0xc5}, {&(0x7f00000012c0)="4627ec09f675930b647ad11bb98bf63bff", 0x11}, {&(0x7f0000001300)="25fd1d5e858d757b0feb51506f4321560fdba53b", 0x14}, {&(0x7f0000001340)="d5513cfbc5992b2e5899b003c32eb13b867f853ed859949823977b41eba5b65fdbc236e64db70258d88cafa2d3f0799b69218ba2403c6e65ffeacce596e65e9f81f8778c8fa67375c96a604429659f8f1ea8e3183fe71e8cd9bb97f69b15f7cff26a4245b9a42317c9a629185dcd108d19efe97790eac2d2c0ff3c277aa592228383beeb458f6047a755d1b65857f91e272965a3d2c44d3c84c0276ea1c3ffaa026538b3ac0fd4b660a56c972723fdfb475c5d0cf19e69dbe759b5eb2ea9fd380ea131d97f721e763e369e292836055009e5b08e1865fa49", 0xd8}, {&(0x7f0000001440)="e61a239d50f1b164b33d04c4c9f93941b883df6e289e0c4f7d5a7e2bc9f6b2f61abaa1733a5c10cf50aefcea7df3b9d10014297e36e668a337dd198fb392fd3d1729c06b0c64587acd58b0acc30e0004ac84f71ce372558401857fa943464b15daa2575164e5d3db2b6c2402193a40d0c4bb737075fe42f8134540d99ab51f9c3684e7", 0x83}, {&(0x7f0000001500)="28d3cda026fbe2143c255c856279e828a4b5a8a9485efce2eee089eafb937e29c61cee1fe307478abecfe8366e7c1ba69f0743568b7b0b0539514ec4899518c991dd39f5902c97649c54ada75f3e277e1cf33501c43240cc95e19d06286562e0430d2f187525d9bf0afd9ef7e8d0ec929a671cc4a1fce62cd1f347e39577bd53bf84d56516023963336b00a4f533ddd442ec71cdd2e3e585e7d8b6b585", 0x9d}], 0x7, &(0x7f0000001640)=[{0x110, 0x10b, 0x8, "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"}, {0x88, 0x10b, 0x4, "dd5e6f0901c29d072c8605eef8b8adee7429f36d8fa57c34df601c9d7f0fd346931e200937d71e380f192a2f5e602aacc591d84996effa3c17ef7f276843eb7ba53d2c7113705f5e2415d26b28dd4420d227852d3912f916f935e6ac32ae6a731bd73c24012f707c4d20d04187ba7eefc05cd3"}], 0x198}, 0x0)
socket$kcm(0x29, 0x0, 0x0)
sendmsg(r7, &(0x7f0000001c40)={&(0x7f0000001840)=@l2tp={0x2, 0x0, @broadcast, 0x1}, 0x80, &(0x7f0000001980)=[{&(0x7f00000018c0)="1cf63142775918523c8757d546690bf53721bdeac77f9839fe95e0466eb8da822123d1a4a8e468e6c1a5b1f37795dc392730edde8d4c4cd533f57c30c5f258e8c749b8", 0x43}, {&(0x7f0000001940)="496c02cb1e513641f75db3e255d96b8f85283f166199ef228c528448c90bbf3cff1557f2819220c9b31626da9a6099c41874d8daf03e93a9", 0x38}], 0x2, &(0x7f00000019c0)=[{0x18, 0x107, 0x5, "a04c9b"}, {0xb0, 0x119, 0x5, "fe04bccf2fac81d35795592f6e3b67dafee9e73dd2fbf5c978f40b43c9232c46ab0fcfea292398dbc3ffc0532366092b8c800880420a033ff989b251b38e4d01d255bb32f5ee61b89ec7582aeb12cb64d7983d4cf4a67b85c686cf992c0e82d52685d1487fc9dfe346f5971b8872023786f0ebd84340a181023b70c0c0885b53149032b66049c9b6956eab4f7b7bf9fcd0fb3595afcbe367cb28552847"}, {0x80, 0x11, 0x21c, "a6545c0800b0eee7b528dbe2146c04cd9bb4b53efce99b335cdfb4e41b1b38afc94c87a9fa9cdfbe682c548d3c67996a22c43d38808920aa62d318cd75d9feca1698e8e563f52877c2a9a1eb445dfda653f80d4fe281a4824b0f95e51c1d21b847c1fdc78aa41e54e7af430c"}, {0x108, 0x111, 0xfff, "a2952c4724e937079a8878a88449e32b1ea330bc41b8e5fbd6de8c327f345aebe0322d089bdb898f78ad8eca7ecc293a99a7ae9b2c8e29b238b78910279ecf0075816dc7ce01b20098c9af2644698259333cbb9aa11b0847240898d592d3790eaa69c7039c757ad05aeefdc2917a72493a611770cbd3a67cf149bbaf86c4c44ccbb076854c100e4e6f5843a7eaf2080200c40391e5430bf0d0b9f15f6b8e98a4c349a327263062350f130ecd903870f309a348bfd9523df69a90cb20e3f831bf04d7e52e0f5d8b6b0ecba8a51e412ed29dda68f5079d09eca9a3e435bb97eaa4a8879cf9d30ba7b5c9a23057bce44dc3d381518d42d0"}], 0x250}, 0x4000000)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001c80)={0x3, <r9=>0x0}, 0x8)
r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001cc0)={r9}, 0x4)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000001d00)=r3, 0x4)
r11 = socket$kcm(0x29, 0x4, 0x0)
sendmsg$kcm(r4, &(0x7f0000002100)={&(0x7f0000001d40)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x3, 0x1}}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001dc0)="a2001f53818fec74cb4396fe2c210d7d4ac463cf2e7c304f78286a9afea7dd5c86135e5c0199c057f20a1397dde79b66c67d1077da4a7f8ee2752c39a30c582bf496f17e837d078945a8286bd2f6cf9b6920a5c9a2aa69ed12766fc1e845160bc51cb3f46655b4a3c996da86e09456", 0x6f}, {&(0x7f0000001e40)="1401e7a3bde8e99c4109b04006ace5e5aa7ea0cd8369b065d7d9436a7ee02c405718aaa388666ca87b80c9c3195c4a1fcf8823ac43640e37f8fa5b6ba14fb3c0d2c4c11da290d4b95b15da6a5118af8545d3e67d0b9d913a6309654a7269e0ecdc4e876d2112ebc6c2c8e0190a07e92486d1b8964ed45f204cdd7c791943b55db31d2a4c6a8fa14cc94e9146bc0a7125501b97f67418a10b5c60f1a7277aeed75a0a34", 0xa3}, {&(0x7f0000001f00)="0fa6cc2576daafd8fb16ed9e69d62acb7b07521cd3b531ed8325e35ed183068825f4bd132fa697c2aa2fff69aa17061a2ffe7e735daca42dbdc8100029ed450a26ba22f8c6c1f4922de393ef0303c1d9b8e51cecb23201c5928ae000c017cb39efd9a429f538d7fec54dac1601aba64fce2ca731da6a326517737e4f42e970aa8fe1c80de856784b7065b04b214eec4740bfe6711a5a8f394043508f8dfb9171746cc264092714476ef4eea4629c86979872c347bf7e4f87d44670e97c6d1905709de119d2077bca25c4399f2209bfae55bbc63a5a93698df7b2e006c08e681e33ef5af24194ac4ff4cfbdfda7edab4becec109b", 0xf4}, {&(0x7f0000002000)="4c27ce4a24854943507e031dafc60ba591b1bb13b89661826595203f2433b6382f4178e7d3a9322a5a3aff2cd5fe7aa822d7aaad9a9c1900691a6cea7b579093732e9ba852ad077659909419460ea51b472edc1c928f1561104ebcb84f1ad43e3e5790b3c26b34533a02237f1a93908e88d9f0e6e299806ebe4403718211919f9d7bd5c58761803988c4fa654b3d339527fc", 0x92}], 0x4}, 0x40)
r12 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002140)={r9}, 0x4)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002280)={@fallback=<r13=>r12, 0x2, 0x0, 0x40, &(0x7f0000002180)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000021c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002200)=[0x0, 0x0], &(0x7f0000002240)=[0x0, 0x0, 0x0], <r14=>0x0}, 0x40)
r15 = openat$cgroup(0xffffffffffffffff, &(0x7f0000002300)='syz0\x00', 0x200002, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000022c0)={@cgroup=r15, r10, 0xb, 0x2, r10, @void, @value=r10, @void, @void, r14}, 0x20)
sendmsg$inet(r13, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000002340)="c7d7e707a8a2b6e3bb7bc1139a05997fb63f48221f1765edf50bee361f0a1e89e750464c0a71b71be22f29caad3954442f1d9996ffce41543f53d0c47d12adbc4fb866a00994b20117a029a8534acc7b3f6f9e679b6987426ec3f7e26053ef0c091cee1154997075b1135cf94b1fc500043257b665f4e3da9c3301b8f7f8df36f4f7cdb07b8e34ac78e8dc", 0x8b}, {&(0x7f0000002400)="bd989af781ee6e539cdb0b55deba2a42a8ebcd07f928aa66ab33565f7bfb9c580dbbc8ff312ff1b0eb3e4256ea8dac30f7fd56c8ff447567e41890f2dd712a5354ff6bf61ba0e016f2c790c16a5490b18941561e9ebc9657736cfbde8b75039a4ab72d2ca5e666c929f29242b3a7ccb5d434cd0a2ed2153a79d5791e3efb66b22e3d886ec59352958ec77e73405460c2d3e3a33c898b739e1b839cbb1793c8d1c532427db1c8b29f91f63f16e661faeeb23c18d84fc3f13ace6e293dcd79e655bd5a57ebd266", 0xc6}, {&(0x7f0000002500)="9d", 0x1}], 0x3, &(0x7f0000002580)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3488}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@cipso={0x86, 0x17, 0xffffffffffffffff, [{0x1, 0xd, "5628c4cce79b37a2b079c2"}, {0x1, 0x4, "e9c6"}]}, @end, @ssrr={0x89, 0x7, 0x9e, [@multicast1]}, @end, @timestamp_addr={0x44, 0xc, 0x26, 0x1, 0xa, [{@broadcast, 0x7}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xbe8}}], 0x88}, 0x24000090)
r16 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002680)={r9}, 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000026c0)={r11, r16})

2m3.221674898s ago: executing program 4 (id=2089):
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
perf_event_open(0x0, 0x0, 0x400003, 0xffffffffffffffff, 0x8)
r0 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) (async)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) (rerun: 32)
close(r1) (async)
syz_clone(0x111, 0x0, 0x9, 0x0, 0x0, 0x0) (async)
r2 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) (async, rerun: 64)
r3 = socket$kcm(0x10, 0x400000002, 0x0) (rerun: 64)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90335fc60040011", 0x17}], 0x1}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000055009155090893b31b71a54a07"], 0xfe33) (async)
r4 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0xfc40)
recvmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)

2m2.078858218s ago: executing program 4 (id=2095):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x9000, 0x0, 0x2, 0x4, 0x1000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
r1 = socket$kcm(0x2, 0x3, 0x84)
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x8935, &(0x7f00000002c0))

1m59.545818352s ago: executing program 4 (id=2100):
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61129f00000000006113bb0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ffad53010000000000840400000000000005000000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa7664012d42961e1445ce83def332233b081df18961d6822d133bf72a4de1cc0800004537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5bb6f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c767030090a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a976774"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0xffcf}, 0x48)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$kcm(0x10, 0x2, 0x0)
r0 = syz_clone(0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24008, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, 0x0, 0x0)
recvmsg$kcm(r1, 0x0, 0x100)
r2 = socket$kcm(0x10, 0x2, 0x4)
close(r2)
socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x4)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xfffffffffffffffc)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x100, 0x0, 0x0, 0x3, 0x200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c230000)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x95, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0x400c78, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0x80047441, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7030000000000008500000087000000b7000000000000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x3, 0x10)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x93)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a11800152c280014", 0x1f}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x0)

1m59.10091001s ago: executing program 4 (id=2106):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r1, 0x107, 0x17, &(0x7f0000000340), 0x4)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0)
socket$kcm(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r4, 0xe0, &(0x7f0000000480)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r5}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a400014020000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8264, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x3}, 0x10320, 0x0, 0x8, 0x0, 0x1, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdc9}, 0x75)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r9, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r8)
socket$kcm(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0)

1m57.972834023s ago: executing program 4 (id=2115):
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1000000000000400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x100, 0x807a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000280)=ANY=[@ANYRES16=r1], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1000000000000400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x100, 0x807a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000280)=ANY=[@ANYRES16=r1], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) (async)
syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)

1m42.904231642s ago: executing program 32 (id=2115):
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1000000000000400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x100, 0x807a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000280)=ANY=[@ANYRES16=r1], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1000000000000400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x100, 0x807a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000280)=ANY=[@ANYRES16=r1], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) (async)
syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)

29.898115467s ago: executing program 0 (id=3123):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r3=>0x0, <r4=>0x0})
close(r3)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socket$kcm(0x1e, 0x4, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
socket$kcm(0x29, 0x7, 0x0)
r5 = socket$kcm(0x1e, 0x4, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x101d0)
r6 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x27}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)
r7 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0xfe33)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x30570}], 0x1, 0x0, 0xe00}, 0x1f00)
close(r0)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)

29.648899461s ago: executing program 0 (id=3125):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a80016000800014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

29.517027767s ago: executing program 0 (id=3127):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000a40)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xaf\xcc\xeeR\xf2/\x00\x00E>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xcc\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc8<s,\xb023Z{\x9f\xc2\x94+e?\x87\x95\x8e\r\t\x0er\x92\xe2\t\xc4S\xd4\xd2\x87.&`\x95\'=0\r\xd2n\xf5\xcd\x9b\x15Oo\xd8Nj0\xe2\xe5A\xb2\xc3\xf7\xc8\xe7 \"+\xd6\x9e\x18\xec\xb7H\xf9\vd\xebE\x9dtI\xe5\xb5\x8e3\x19<\xdeS\xf4\xe6\xba\x0er\xfc]\xcbd@\xe8R#(u\xe1\x9b\xb7\xd5\x82\xab;\xdb\xa2\x9e\xe8W;\x86\x89\x99\xa1\x99\x1b\xbd\xaf\x11\xcf\x1d\xb5n\xe3&\x1b Z|\x18\n/\xe4\x83\xb5\xdd\xed\xd8\xba\xe8\x8d{@\xd1\x00\x00\x00\x00\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xda)

29.450031225s ago: executing program 0 (id=3128):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
socket$kcm(0x2, 0x3, 0x84)
r0 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0xe, 0x0, 0x0, 0x7602, 0x0, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xe, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
r4 = socket$kcm(0x11, 0x3, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000e29400000000000000ddffffff"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$kcm(r4, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xf, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
perf_event_open(&(0x7f0000000280)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fbfffffefff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090020001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000540)=ANY=[], 0x5)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x200, 0x80220, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb54, 0x1}, 0x411, 0x1, 0xb, 0x0, 0x81}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)

29.218669172s ago: executing program 0 (id=3131):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1c000000, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1000000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x803}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9, 0xffb0}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

29.09758893s ago: executing program 0 (id=3132):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0xc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xf}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000080)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000140)=[{0x5, 0x4, 0xf, 0x5}, {0x1, 0x3, 0x9, 0xb}], 0x10, 0x5}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0xe2, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x78, 0x8, 0x8, &(0x7f0000000400)}}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{0xffffffffffffffff, <r2=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)='%-5lx  \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)='%pI4   \x00'}, 0x20)
r4 = socket$kcm(0x29, 0x2, 0x0)
recvmsg$kcm(r4, &(0x7f0000000b40)={&(0x7f0000000700)=@rc={0x1f, @none}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000780)=""/33, 0x21}, {&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f0000000880)=""/21, 0x15}, {&(0x7f00000008c0)=""/216, 0xd8}, {&(0x7f00000009c0)=""/133, 0x85}, {&(0x7f0000000a80)=""/2, 0x2}], 0x6}, 0x2040)
r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000bc0)=@o_path={&(0x7f0000000b80)='./file0\x00', 0x0, 0x0, r4}, 0x18)
close(r0)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c00)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x50)
r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)=@o_path={&(0x7f0000000c80)='./file0\x00', 0x0, 0x8, r5}, 0x18)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002040)={&(0x7f0000000f00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfc, 0xfc, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x7ff}}, @enum64={0xa, 0x9, 0x0, 0x13, 0x1, 0x9, [{0x6, 0x7, 0xa}, {0xa, 0x2, 0x7}, {0x9, 0x5, 0x40}, {0x5, 0x6, 0x1}, {0x9, 0x4, 0x4}, {0x3, 0x7, 0x1}, {0x3, 0x7, 0x81}, {0xf, 0x8, 0xffffffff}, {0xa, 0x2, 0x1}]}, @struct={0x1, 0x7, 0x0, 0x4, 0x1, 0xa, [{0x10, 0x4, 0x200}, {0x0, 0x5, 0x5}, {0x8, 0x4, 0x7fff}, {0xd, 0x5, 0x5}, {0x1, 0x3, 0x5}, {0xb, 0x3, 0x5}, {0x4, 0x0, 0x9}]}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x5f]}}, &(0x7f0000001040)=""/4096, 0x117, 0x1000, 0x0, 0x7fffffff, 0x10000}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002140)={0x6, 0x19, &(0x7f0000000d00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@generic={0x6, 0x2, 0xd, 0x5, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa855}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000e00)='syzkaller\x00', 0x8, 0xa6, &(0x7f0000000e40)=""/166, 0x0, 0x40, '\x00', r1, 0x25, r8, 0x8, &(0x7f0000002080)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000020c0)={0x1, 0x6, 0x6b, 0xe73}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000002100)=[{0x1, 0x4, 0x0, 0xa}, {0x2, 0x2, 0x10, 0x3}], 0x10, 0x401}, 0x94)
unlink(&(0x7f0000002200)='./file0\x00')
recvmsg(r4, &(0x7f0000002500)={&(0x7f0000002240)=@hci, 0x80, &(0x7f0000002440)=[{&(0x7f00000022c0)=""/103, 0x67}, {&(0x7f0000002340)=""/228, 0xe4}], 0x2, &(0x7f0000002480)=""/107, 0x6b}, 0x2042)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={&(0x7f0000002540)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000003740)=[{&(0x7f0000002580)="2a54e268211c62d67d758e81a4d74504c9423f30c132350ff1685191e84afc8f308d1160d192fb432e8fb3a7d799ec558ebd51f14570505387e37421f5a18afe32e37649850eadda33a060e8758bc611b0c4a7fd59db3efbc4e897b61055573cada4b2a400eee59090ccbbaf2a9d897562b4f269c562a3906528bc077b2b5fb217e5eb79f3625126f46e79a436228d3f794266b15987a019214489306a8a5243ec6c8b838498512e7af02181f61eebcd2327019e1197643135316a7d838351bd7319302fd60af7ea5b6e0ce533a97222ffa4e84e51db8143", 0xd8}, {&(0x7f0000002680)="bb50bb7664f629ef4818bf05eb40996af1599bf82a14ff4e4970c15f38b5c94ecb96f6ee60da5c0cf4b905a2a9f9caa34ddcd367dffc27415087c3101fd8a6bcbd17f18f9b9d8f6e9770506ffb98e569b28feb598a4173465355c0432c109f6937bb7cf9ba3917188eabf01f528f95cbe11dbd9e2cb3e71cafdf1bdd0b4846977f90181b776294ae07a82ebb694b74c445f44de5c0816c6a41b8c4019842a62098645550fba0a2288c044c6232468c44702e68919e490621452171b968ea1e39686401516da8e76d0da52a1e91f9831dd05e3294eaeeeacb5dc73cfb1ab89cfe165d099df9dffd829f59ffbef6986277029a4c153ca1da1f64e8009915074f546dfa3bff536eb0bd7166d6fd612a89d592b8a861904372e985f2319154adb6d95fbbbcc1cd26f6567f5fdf678508cbf183948763b6ee2b340474cf363ca5feed92df0a4242824b96bf2cd00ec25a58d377881c79b2eca16aafdbd89dc3df379ed41d34c4f955a98ebbd3189a47c9ced424a2a5f98854f8c13a04cbbeb58962be71c35595c88195503ecc41f15b81d7c83b56d61ce4baa1c56f3add3dacd19d06ad8ff1dd164d92cd3cd4b3083027f64df83251aadfb9f2946dfd559fea15baae3912b966c382bf50a753ce4cec094a06aef32a1201314fe4c7e9e325e27a903a2d25b56e418fa08fcb4badcd8be6734b28b4e77effaed2664802fd8f231f5469f22df9ff2c218c5312c63a268e8381f38b90887b7996d56216f807f01ea6b4b9401c0aec4efccff56d1d44600c45cf37d07da689e4f428946716c4119cb673497506e545d7cf1e5b0b0e6bb992abb1e4203b522c41e76a99e79aae13c6dce7132332ff8170dcdbe9836ee0c3de5d4928f870165fd9f9a4f3fe7c32514f1018996b1b9106d3e461ec7a40a775b87f2cb09b452a3492f0c2e5d701dc61ca013e94df2de571b973283836c0a9d8d5923b4f9598e97c1e8993e622fc18e019cf902e08752c0ce4f7d180405d1da72e7fe09ccbf7b1e519ab9e6f2fc330da9533a0c997c70ea27496e0578df5a44d71573fd52f7b0b75efaef9e247904d451032060baf7d05e21ea2d75f6b94652fd5b063c4975bbe97493343d2758480a310acbce9578ce2f5236004e207411799e9a2c3851872b1f5da39c82dbdaa195f18a943e695d91ba068e177c7ee66d4baa9fe2d75e3c21b21e6b1ef82430ba881c1e1001fde5c3aa69bf2a5dc00be98103e50b27acbcb948fc4e2c660dcb40034719437a9e3b431e385cf4f2352dde3b7591b029b2df37e47f4ff1966614a77e31ab76cbe90a5876db7dd868212a70f9fbb23d4b61dfca7985d5aded7140e5e6db80c310f6dca5de3d2c8174eb93a975faae7a4b5d0ae6eb461dcb80c850c1cd230913e525f208d7a66affbdc3c71b58b5c6cfbdb206de4f25c165c4f916a32501f0e5eec65205822c2827b35b7fb987e6d067ffe3d0027e59c1137445dc0345044905e9cd751c2821a0984ea2543d16dac5bb36bdc829fe4267245cbcbeb67fa1379dcf1abcde0f2847bc894786b77a5458bf46b9a7c581a4f3b48bfc9ebf6f8dafd6820a3dcc24843720501487e32370442d48bb067d8b43c7054bbd507afb6b6f309f397d6b7e38c94d8337e21140d7940cc0827893d16d8ad63b73a17ee806ecd6577a113385517125a2575cd04098ecc9b8dfae2d1c85522776e1dc0bbd67ca336f7e91c7d177539446146f4d23dcb01342980842936dc76bb16cbec8ce770c2800fd062b44198c2c9334d2c81d5515d42da978a551f6a2995d3de19d37f8d9a00db0906df9e66854f92103b4308e35a5ef3844e9c77ab56689d32cfdbb24dfd348874690c0cdc6d9177a27a6763d0242c29938836db2db978b4ae561e66a04c254b32ea24147a07c9d2c16f38d952524f0b6cb742d0a07e5e1025c6b187d74c97a4e9a05e77bd269ab3532e1acca93dc1007c62740b7c86447a86c92143e3c02c2c17925cfb1441525cfdeca098597a79226548cc921c55c196de98802db6bc2761e2422aa6f84f75521e0fd2977e9b42493abd351e0706959e311d4ec5eb8eeb7ae935886cbbfafe772db5d0fa262e1d02c37dac42fa3b9a2116462943d203ab17ddb267af052c990ef4aea4e502735dae034faaa940b2292a7dc4109b8cbd1cd27f1ef80cfdf1aca77bedb88ea261501ed7b09f3cf9455d63a16fa8fb14156accbee2316e3fc3a522d8ca2f8599f1b20536e21e6de8947a1784bf4c98f50e768c4a21029d8b2996b52663e27ad29c2846b817dd802ad7565b3df4c057e7b03fb42cc5d905521cb4150bbe441e8e574bd5a51185fa88f46bf774887f5e5c07d999513ee48e1400716abe5736cd9f972c08aeb776836e5a0d1e4765e6b312356b24ef463b510ee5e93a01553ec6b9aa28c1dd3b5d79e1410e3f3d1407ac94e6bce526fc0678910c08de1c63545208bf1a9ce1c1e9c5dd0fb6d37fdc6c87ee3022b4d87a6039d6d36f18432b54a2849e0bd2a11bc8405d69e3d425e22e12b367ebffc23ba5c1bc9bd89ef781cd9f67284a16b551e74e2e7560c96737c33432d959393b55c714763ea7a35873ac74fd493eeb50e8180ee5fad9700e64b1a0471a018368eb24b730b1c8c74405949ef637e80d17a0406dc720fc74cef9e27014d378314c97b544057a6a679681fca4b246a4c302c93c855cbabae7e5e770921bc3e0bf3fb21d61681a6b0d72dcec4f8389316d21881a11478cb41fc1ddbed61ac4e25ef3d2cbf18a382cce8d803e38066141d8db3216dccf6cf50e00b2dd1612504f11623cb21a9f7cf5626d58e0b1e956e738479a0782ffd5878fa73ea7381334ec322f3ebdfe072f6cb4bf1f75c501675288fda50d7d8e97694db1c4580a5fabffee15cbc2c18fd3bb01e3f77aadaef5b025bcf75aacc8513909bc4646b92e53a3344c3ebea2482dec8d7e3831ea634fdb1cb6e897c250105fbdea81b67e77a8611c9db8981e3a7f08cd1fb24ab413a5c905d2129464695adc458b55a1205c120a682c0fad3e5f73c77761878885d165f14fe1ebd4ae8962de0bd63f7c11b91d1262a634377c4801dc93b1146c0983cec916a15d2005f6e232f0ccbf75e15df9157c8e2425a53add42da82a4579173420a9a76d153f6c9e19369c34ed725e945166d9eb53769f8848201cc44d16b6d5e26f422e7373b0e0a7469eaecb63db9c3ef38772b291b83714046e7dd0c46d03f3d9be9a6c12c58144db319a6d387fa6c8b41ce38f61b6278d16ba3ef8a11b5876ddd297244a4029d12f916eba30f946adbd621c270ebb9d12f566d11984f7848f085f635049bb2ff006b6aebbf1f1a8504b49717216d95c029a3e83e233b1c837b033866f8f6881e532db04dc4fe1bfea48b4077d4510041f9d3c659f40949a729bfba135ddcb3bf3d2faf25bbba5e2b9e2da4a9004aec3006367e82b47a5af708634bbf431c762271ebf863b5b42485513102c51451b7beaa76f5605d6b1946072c1dcf92edc6375211d465146c64eb7457322b16597033482aeabff28a6c8d091936db3a9323b26b68e83dd6ec2e4d1d66a63f499f567a18e645d63c3ac7eb3111c0913d71a837910223a5b4260ab29e316eb4984c6484e3db3357dfdae93c456774e514c6885887d21e80059d620498cf19db8ce420f7007f51f79c8c667ba32371284570c14160d795144aab84657a1fc4b3340bcb1eb3c08bdfb0c0876d0d0159a494b004ff0eda68414883e61c7190cefa2788c9441f37252bfb72f3cc2461839b249da23a4bb5190d12235deddb75fd79b5a609a04dbb68e0101e093a4755153c6b515a4ceef0b735012c23bc14a51be3dd7d9c7ff0909d4317c859ed8a2444972a7eab930436cb9781b97d23af343cca0ef1608dafb3985cebe6d1563b554306daa0bc4e3f1f6a67d0aba77eefaf4d6e57839500451d7d55465abaf764bfc4c6454082886ae4a5bbb89934dc67c035e636784fea1213a67b362769154d1403c1ab612df8eea6290b7dc81fffa9e31cac4f0c4a0b595416efec73fc88f8bab751179bee9561ea6c0835555055b41a4e9b43c8e1028847b5a15a1aeac20064c585df8c2018d1cc665e67ab2d12aedc3950bff729d66ab1caf352fd0a53fa9b03139e2a25db3d3622c83a90ddcfa34524f386de6ed290b8c7b25c8b6b4d72d2ab011467a50a0cb8a727002aa40eefde6d37a9001183f0d72edb701eaf9ebf4c0b14da659befada1de624133c7fe78cb9c18e82bc0a467ca90c0a0cb61a7e2694799a7c1b19dbd5ed954164a116f84e0fe4451c6d1c285bea21ee22ba3b0e23b6f908bcea506eb3e81320a6be00c296785d817fcff2dfe60450326d1e03b098590c8d3fdafa1fbe679bae79b12dd6d7f3f191b1c957623d9661c95e9552918e0be574072bfb6734291eddc1ac11aef9ffa00f16d15067ba7c1a842fc40816774ab8c0ceb007204acec69c865cd89f36e185dd2441104f40523463850e7727a23c24e16484fb0a88832cf91b402a323147690f8bf22255b8e2ebf55a10b80f2156d6964481fcfa926cc115ee0f1e66c3685df0de08559ca979757e88797b10f488202e8aeff205e5818775f573b212f8e47339ca3aabb26d2ccd9d434ffeb60fb66c0b68b650b5a81d7a2e3fdb83d1de0e2fd40b062fe59253fe973208459c5991c6a95ab13bfb33df3a34a05e7b856fd1f4c0e274e9696898198fb63586a316dffb057c38f0363caf8c7bda4f4906f46509eba348a5e55944264a1b8f14d33b08619b9d76ad4958d4136c83d6845d9664f16dad57305d4f098d848971226d9b3663f4173f580eb2162794276d9a8419d5be2045cd51286aa272391327b1a9df730c4bfff3c00ab1e11a00e5850915697cf115a6053a904bf781e438d3dfb5eda658e2be6548310c8976315a5f6c09b40b0b032464aa7165ec7262b48a2f14a32bc656c2df8572530f6ff03159a468e499842f911856ad1284b6a7569ab35bc32a2e55dc27ee7f2499b076ab203a33084efed9f245df6c32133342e4f4b2b0fc8e2f764e6bb6eb6014d3f14172e733732d1c56aa72f0396e21964c1faa3a6056112f9b2a917fb3775ebc2ccc262d136cd86e7db1767f6cef38a98921e4bd7fab7e0f7606bd248bd2fe859aeb228752d31f5d7e08a99f09237ab23626cee4a8148f7dbe480db5f435522a24328a33c8d5f8c7e3b41a0f4e13025894b23b2e32ed1652edfb4fdd1f9ff650fbea30fe89adc104be054765fd9113aa78a6481687215ee0f841a17c6ec96ad543905a72d9a58db56fb41edcf2bd271d96056275e3447cdbd9c32b94e5403c8908cf8d2966063908ea97d31ed5d49762e4fea8814695097af8a49c22df304f8dc1f770ccf4a33c29aa47fe7d9762008f1a87533f5b89eee5435bef4071c8f3391151f35b76294a7efd7ea3f85064e5835c7acc93ebcba34b9746ac78e5cae5978bcfc1bd2354c95ae9c5c653dce034fc0f6cbaec2cc9c8e3c724122c277a6966d964b5c68b7dcb420a8c26a2b6efc195b79330bed0f4a9b8a83f44a4c2d86dbf52849244448a0950503321672e8c4ee1d069b93d4a98d0fe442ca4404bed9f8e22d3fb322297e701f636a1353663c6406c8b0f1429920f6ca224b280bed1a4803e4f2a95acec12bc8e4f71febb7846ef5eb4c2b81e001971ccaf1c2d8f18d4cb3503aff68fb902ad219724540f97b2759c207136f8e90274f8ee67edd0b6eea85869f7cdfac3861f20fdef2c7ec6b233b695d726aa9afc2ed80f803f8a10d841e969f36ce3669", 0x1000}, {&(0x7f0000003680)="7f660b65e4b65fdab71180ea1ffa131cd04265b6fc4d5b4b62f3578755fd2dcbf9d599b6a719cee16832d805d731f2701b4457876a0ab972fa6fdf46bc8a2d61d037e6e4aadac5bde2776b3199d419066331212dbb3c2d73a7a7431fe10f0632b3f7e02e47eb9cefccf029a65a9947af1a2e4de7d486bae0686cc9a22f74ebfbaac113f749728b017916add90976d08b35b3d0824e9512b9f126", 0x9a}], 0x3}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000003840)={r2, 0x58, &(0x7f00000037c0)={0x0, <r9=>0x0}}, 0x10)
r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003880)={r9, 0x0, 0x18}, 0xc)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000038c0)={<r11=>r4})
recvmsg(r11, &(0x7f0000004e40)={&(0x7f0000003900)=@un=@abs, 0x80, &(0x7f0000004d80)=[{&(0x7f0000003980)=""/15, 0xf}, {&(0x7f00000039c0)=""/67, 0x43}, {&(0x7f0000003a40)=""/4096, 0x1000}, {&(0x7f0000004a40)=""/122, 0x7a}, {&(0x7f0000004ac0)=""/145, 0x91}, {&(0x7f0000004b80)=""/159, 0x9f}, {&(0x7f0000004c40)=""/42, 0x2a}, {&(0x7f0000004c80)=""/212, 0xd4}], 0x8, &(0x7f0000004e00)=""/31, 0x1f}, 0x10100)
sendmsg(r11, &(0x7f0000005480)={&(0x7f0000004e80)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}}, 0x80, &(0x7f0000005180)=[{&(0x7f0000004f00)="8f88bfa7990b9f25763b0836a41558fd5037947d868f2b3966306be72c1e6c38b98eb609d65de2ce8a8d291f93f56121cd9baa0e45c5de366910187bcb9f0969411e8e66f4941785cb38cba0435f323f272ff82d", 0x54}, {&(0x7f0000004f80)="3246f051c29ea26fa47c01f944d68b2446acaa802274996ba97ba3655396ef1588ce4369fe52cc103372374afa679363d7b020632cdd2c125c64cc8faba96c926b0e5ba2d0aff145babb17c6371e7426f8fb3fd6405d9894c7363687374a6b1bdd020b", 0x63}, {&(0x7f0000005000)="0f2bc90e98b2b13dc2b423950a11146669551334c1eaee96b859e02cceb5f1cf755196c8fcaef25265742791cc55ab3f52603d382c7616a7f67384f9faeca57c46ab9f33bee13d66cd946db9fb81667d4794f7fca957a10fcce4a4fca72e7951e86cdf675bf00778f56e72f6f05dccb8640450e3935373eb4ec913685fa63083c4178edd09c91db6ec09", 0x8a}, {&(0x7f00000050c0)="174b2ec37f38b02dbb7d32e5bebde065807bba72ac1a13aeead896ba7b0561bbdc4c6c5fb567edee8dfbbded38fd50237b0b57286aeef810b61f44bd0e8a16c71abeba8e8854ccb0e1bacda4bd069c4d31acec339053368b7ead3a322673d98f2e003c96944fd1d2ae9d393ca26159ba4a5c57a0d7d426c11c", 0x79}, {&(0x7f0000005140)="19687cdf136e41d1671a10230d9cba45b0a9bdddf01e3c0b49b3adf41e2bff21c61c66328ce55f98a31ca8afe023b04fd08a2bb7b7a7ff0e0d6f", 0x3a}], 0x5, &(0x7f0000005200)=[{0x108, 0x104, 0x0, "3be559cc5e5b2812dd2a3d8dbe83f8f4a40f32a680e29d904748f16c6e7ea0d146a3e46fc30e1fad681eeba707b049218fb87a67208238668427c9ecf10baa766cfc8714ce0da35a9c500752b1fd894570170fc06fd45589d10a34f9e89b2490126ffd51a82c7067c1f4e236cda3096bd8986ff6a4f764599fbcc38b7a420e01b949378aa21ffbe423f3789b2f42e55dc4f7c9725a17d64ee42a883f68ed740b1f72b8832eb9cb5f9e646c632a51cda3ac3b1151cb1685285d834e0cd9dcbff5c34a52788c15b3741fc2e8abe5dd663a5205da515a1d742f1e1c60ca200acd4b4e67ad7f3c9fc798928dd57708033cd6a5525e33"}, {0x50, 0x103, 0x40, "93d643a6f3e4ba3adfd36b63c8e4298e2004f4f27e1099eac600c0479fd3e9624ab743f4906f7956e92874bf225f4d1522dc6be01db56085228fafb8fcb2f09c"}, {0x20, 0x107, 0x3, "20c3d99688f0220b30"}, {0xe0, 0x29, 0x6, "da6713b81711e4216e7607dc2762ed0dfcf1d75842afa466d534ead293995b6d6f297c024918e2b222b3242231abc5d31848274053bfd5e8ed210af2b27a71a8ddfca7f62ed849bb0ca20aedbfe3a7e6b73986666d074f86daa4c5283f77bd2d59142800dec6d472615bd37187e534e760b143632eac5a7083a9d9afc5a498f4c3a6d18b3314ea19ec25b9adfbccf601dca29e39fdead9f9be056664a60840d26bf42431e10c203b3938a085145d4fb51768fc05c378edf454474f4b773726fbf63a1517ff1acbdf9b70be9e37be0ff4"}], 0x258}, 0x4c094)
r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000057c0)={0x6, 0x20, &(0x7f00000054c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @map_val={0x18, 0x4, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x1000}, @ldst={0x0, 0x0, 0x6, 0x3, 0xb, 0x18, 0xfffffffffffffff0}, @generic={0x6, 0x7, 0xc, 0x0, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x80000001}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000055c0)='GPL\x00', 0x1, 0xab, &(0x7f0000005600)=""/171, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000056c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000005700)={0x1, 0xe, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000005740)=[r3, r6, r6, r7, r7, r7], &(0x7f0000005780)=[{0x2, 0x4, 0x2, 0x8}], 0x10, 0xcc}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000005b80)={r12, 0xe0, &(0x7f0000005a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000005880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f00000058c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000005940)=[0x0], 0x0, 0xa, &(0x7f0000005980)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000059c0), &(0x7f0000005a00), 0x8, 0xdf, 0x8, 0x8, &(0x7f0000005a40)}}, 0x10)
r13 = bpf$ITER_CREATE(0x21, &(0x7f0000005bc0)={r5}, 0x8)
openat$cgroup_pressure(r13, &(0x7f0000005c00)='io.pressure\x00', 0x2, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000005e80)={&(0x7f0000005c40)="240542578f4ffafb94d44250241c2452a80872a00400367d24b61cd997d992facc5f96bab3c443cc0e3575e770b690ecb7d8c1d2351fd15cc0851f8c360fb5aa36ac9e06e601fb937b8cb1d412068f55239eeb5c49595d48530022fd127597a68b19ae", &(0x7f0000005cc0)=""/174, &(0x7f0000005d80)="a66ec53c20424f0c07d387dce6dee26d706b19a45611faaaf4ab64dc553c5c145b72af2890e2866c0c948e9495943884bfb6763d2c569ae97c56722230f2b3a71dcdcf498b78c312d1377aa3bf148e877021140534130b7d16e28a", &(0x7f0000005e00)="673f89cadc0e307343788989aaa2510cc974303b43ca062158134be812dd3c50de50d66543ce2ec76876f41aab39a0924d2686bfc94b74142add33444614cb15ac4fca65088cb20c41ec0879fcad44db298e734453cce1f6", 0xac, r6, 0x4}, 0x38)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000005f00)=@generic={&(0x7f0000005ec0)='./file0\x00', r2}, 0x18)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000005f40)={r9, 0x1, 0x10}, 0xc)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000006000)={r10, 0x58, &(0x7f0000005f80)}, 0x10)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000006140)={r13, &(0x7f0000006040)="33efb074d8190e7831f5eaf9c6ac08883a4598f36d5ea312f96e619c470fc920347805a7c34d21496f9eb7e3436e2d6a2ec179066761a749a6ec46396110aaf76b53955530ed5078182066e0b9bf148a1a3b18bbdffe80f9fd87c527cbf3ccc0b20087beb4c8de40152ec15fe83885e550e9efc7458e6b5dff483fe090e770e9d5006f36995acfcf9763f9e9a8dc51a907c5b88998327164e444a93dc8a8975eea505a19b85b05d7d928cc46ba43228ecea64b4694b959f21c43b6b97753458001ec8f59601e0f97dd88fd13037676bc9dc895fb45578f18297e384ed8a0"}, 0x20)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000006640)={&(0x7f00000061c0)=@ethernet={0x306, @remote}, 0x80, &(0x7f00000063c0)=[{&(0x7f0000006240)="63cb4ac69c42b7e40abcca4e6be4c3c27a686f31171d51345324f45b895c43ab6905052f2ba7a85d4a180125c6a23d41c7059d2d51432694ca21509adb99db1d5d785b523d5251228f9e6cbe53de03bde51373bc85adaefb764ef7984ad1b255e836986a7553fae757bea674dd7fd0d14a2d8bf1114da8651ffcc70c5571fdf4fb5899e973e1d32b88e84faf739fdc7e660d9d4859210d9b3bb4a6c5da43098290b98b85b0cd5786791987e8344f93294880c47cccf3d406e64d9149158d7097baa8e336256189ca848c00954b66f41b0b6d5ffc9f5785ab57de9f042fe11b61dd3b0ead0a14879e1be3a5b82ada3e9c8c", 0xf1}, {&(0x7f0000006340)="eab723056a84a680d55777056e2da5442d2a587c71a55709fdbd253d9dd7a38f6d20f6325f32845093420ef6ffea887ac962f5bbfaf3708515c0fdff4723160e8e9769e2c2", 0x45}], 0x2, &(0x7f0000006400)=[{0xa0, 0xff, 0xfffffff9, "ae413d70677b95eef0bded68fe023c5b1259627c9fae0352dcd7f38ca5b16fa775a77ed631dee3c520b48c4892d8d7f041f721dedaece226931f6b76fb8fc930ecd34c66f5cece786556a3a240d6b91b343b33e0bb0308f50d6bb686b668bf01c75a4f3fc101f2ffe88011b3880d75f4237946d939e8bc0e47f127c1daaa8d53bc3e6c32e2320455b6252605e37f6441"}, {0x88, 0x10a, 0x0, "db3cf75f99412d87a988a6cae76ab4944fa0f3f2b4514f47b3428f0885f3f7f79111086db7fdde498c137427209e0bbec81fc288e4e3cfd0b62658f58d17865bad6f80186a34faa8d5ee2119283d534d8f03b1f801b1ce5c3db67433a98f774eddaa87ada7b7ee60f4750493b15c51c521a5cd4ed5"}, {0x18, 0x116, 0x100, "b40540b92066ce24"}, {0xb0, 0x10d, 0xa, "9cda608e218f2e25b9bb733a80343b5af846a47d2a24ee99bc98c83fb65efb0e24e7418ea9ecd5ddb2f5e09227dcabd2a7f2349907c6da21df730b6317bb781552e88a92b448e71e197b29dc075d4ce120bab6b9b88d58747d18d32753f272b80679885330f9510fbf0f79c4528fca0302a4e9757239049c132395186d357ce22d6e62e9d36afa6e1fd450c04a3aca69ce9b76df9cae3c77bc"}, {0x38, 0x1, 0x8, "0298b858b4a2ff442312af685cd04c71bfeaa823f3bbaa0fd89d158cd948da1d0234891b8f5c3d0e"}], 0x228}, 0x0)

24.719988015s ago: executing program 5 (id=3179):
r0 = socket$kcm(0x1e, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b406150000000000711171000000000085100000fdffffff840000000000000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70)
r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x40, 0x8}, 0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, <r3=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r1}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r5)
ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"})
openat$cgroup(r5, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r7, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r8, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, r7, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={0x1, <r10=>0xffffffffffffffff}, 0x4)
r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0x0, 0x7fffffff}, 0xc)
r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00"/18, @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000040000000400"/28], 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5241, 0x0, 0x0, 0x0, 0x6}, [@map_fd={0x18, 0x9, 0x1, 0x0, r2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x97}, @ldst={0x1, 0x0, 0x6, 0x8, 0x9, 0x20, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x1, 0xa, 0x2, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000240)='GPL\x00', 0x1, 0x5c, &(0x7f0000000300)=""/92, 0x40f00, 0x4, '\x00', r4, 0x1b, r5, 0x8, &(0x7f0000000400)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0xb, 0x5, 0x4}, 0x10, r9, 0x0, 0x2, &(0x7f0000000640)=[r10, r11, r1, r12], &(0x7f0000000680)=[{0x3, 0x5, 0xa, 0x4}, {0x2, 0x1, 0xa}], 0x10, 0x4395}, 0x94)
sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40000040)

24.518101628s ago: executing program 5 (id=3181):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000020000000000b02000000000000000300000d000000000000000003000000000000000300000004000000030000000000000000000005000000000000005f5f"], &(0x7f0000000b80)=""/4090, 0x5e, 0xffa, 0x1}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b700000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x8100, 0xd, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

21.765987842s ago: executing program 5 (id=3184):
r0 = syz_clone(0x10eb22f000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x25001900, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) (async)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {0x7, 0x0, 0xb, 0x9}}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) (async)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9ff, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xc}, 0x8000, 0x0, 0x80000, 0x1, 0x0, 0x0, 0x3, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
recvmsg$unix(r3, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x10}}], 0x10}, 0x61) (async)
r5 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r5, 0x1, 0x41, &(0x7f0000000040), 0x4) (async)
sendmsg$kcm(r5, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) (async)
recvmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/28, 0x1c}, 0x2042) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00'}, 0x30) (async)
r6 = openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
write$cgroup_int(r6, &(0x7f0000000040)=0x8, 0x12)

17.826111357s ago: executing program 1 (id=3223):
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$kcm(0x10, 0x2, 0x0)
r0 = syz_clone(0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24008, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, 0x0, 0x0)
recvmsg$kcm(r1, 0x0, 0x100)
r2 = socket$kcm(0x10, 0x2, 0x4)
close(r2)
socket$kcm(0x10, 0x400000002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x4)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xfffffffffffffffc)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x100, 0x0, 0x0, 0x3, 0x200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c230000)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x95, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0x400c78, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0x80047441, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7030000000000008500000087000000b7000000000000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0)

17.475197723s ago: executing program 2 (id=3226):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r3=>0x0, <r4=>0x0})
close(r3)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socket$kcm(0x1e, 0x4, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
socket$kcm(0x29, 0x7, 0x0)
r5 = socket$kcm(0x1e, 0x4, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x101d0)
r6 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x27}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)
r7 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0xfe33)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x30570}], 0x1, 0x0, 0xe00}, 0x1f00)
close(r0)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)

17.321847535s ago: executing program 1 (id=3227):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='devices.list\x00', 0x26e1, 0x0)
close(r0)
socket$kcm(0xf, 0x3, 0x2)
r1 = syz_clone(0x800a000, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, r1, 0x7, 0xffffffffffffffff, 0x0) (async)
write$cgroup_pid(r0, &(0x7f0000000400)=r1, 0x9) (async)
r2 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d649379071c33390e418ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ecec37e83efceefd7ca2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a8f27e02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d988c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438a58c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb3bdc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d547bdfba2e0bb24d117ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c38680a377f8c26e6e382067f690089f34b13ee0633a171c7918401acd4575f1443815854f775308c083ff4f4046cfca8bca48e6db6b211113c06797722230af92290231a0f02e247cf96876257dac9ff0b8f07ff5916a8ccd3f15b389d34520f074c6f006e0383280bf0b9765c995ef1e696a1da41d9372a1c9d85f1a83b6213b5fb236fbeda8fb90dee70ca3cfc0833741a0e9341ab4dee09669b832840fef5a2bbebd5957503656c445a428efc5711d1c66093b360c63e63e91cb871f8dc43a915ec87be492daec18847de7032d5c97d0296a1fa97d17f"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730117"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) (async)
r4 = socket$kcm(0xf, 0x3, 0x2) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async)
r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_ID(r5, 0x80082407, &(0x7f0000000000)) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r7) (async)
r8 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='&\x00'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r10}, &(0x7f0000000000), &(0x7f0000000080)=r7}, 0x20)
recvmsg$kcm(r8, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x2101)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xd, 0x0, &(0x7f00000001c0)="0100400871a7832e6b7303c3cd", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) (async)
sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1, 0x0, 0x0, 0x400300}, 0x0)
socket$kcm(0x10, 0x4, 0x0)

17.169909357s ago: executing program 2 (id=3229):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket$kcm(0x21, 0x2, 0x2)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x71e7, 0x830d}, 0x80, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
recvmsg$kcm(r1, &(0x7f00000041c0)={0x0, 0x0, 0x0}, 0x40002000)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000010010000010000"], 0x18}, 0x200000000000000)

17.124971438s ago: executing program 1 (id=3230):
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000700000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007200000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

17.02217731s ago: executing program 3 (id=3231):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0xfffffffc}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xf6ff, 0x0, 0x0, 0x1000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

16.97092822s ago: executing program 2 (id=3232):
mkdir(0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0), 0x12)
r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x9, r0, 0xc)
openat$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.cpus\x00', 0x2, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r2, &(0x7f0000000180)='syz1\x00', 0x1ff)
openat$cgroup_ro(r2, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r4 = openat$cgroup_devices(r3, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:', @ANYRESOCT=r4], 0xa)

16.885864465s ago: executing program 1 (id=3233):
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xd0}, 0x10140)
socket$kcm(0x2b, 0x1, 0x0)
r2 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r2, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011cffd300000000000000000008000000", @ANYRES64=r2], 0x48}, 0x0)

16.797764508s ago: executing program 5 (id=3234):
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xd0}, 0x10140)
socket$kcm(0x2b, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0)
r2 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r2, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000000000000000000070000ff8617a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r2], 0x48}, 0x0)

16.796535738s ago: executing program 3 (id=3235):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x4000, 0x2, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r1, 0x84, 0x83, &(0x7f0000000000), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ceb71c0010ec90db133c22a690ae7080000000000040875b0089"], 0xfe1b)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="0000186df4b1768c36153d428d79eb36a20c0f4bfbbf1c38ece97345e679b88dfe8024658f2cb284e3180b5f59b6a9e8472b7dc9c955af3e9d24881f5227e05f9828c1c16a753ff684070000003d247da76c7fad4ba75e11171f853f4282018007003b250900"/122, @ANYRES32, @ANYRES16=r0], 0x0, 0x2, 0x0, 0x0, 0x0, 0x55}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f4, &(0x7f0000000080))
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xdf, 0x1, 0xd2, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x1, @perf_config_ext={0x408003, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x0, 0x6, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00')
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}], 0xe0}, 0x14002)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)

16.760829082s ago: executing program 2 (id=3236):
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$kcm(0x10, 0x2, 0x0)
r0 = syz_clone(0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24008, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, 0x0, 0x0)
recvmsg$kcm(r1, 0x0, 0x100)
r2 = socket$kcm(0x10, 0x2, 0x4)
close(r2)
socket$kcm(0x10, 0x400000002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x4)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xfffffffffffffffc)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x100, 0x0, 0x0, 0x3, 0x200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c230000)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x95, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0x400c78, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0x80047441, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7030000000000008500000087000000b7000000000000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0)

16.53272838s ago: executing program 5 (id=3237):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848430000009bb9ef7f75c9f12c0e000a000f000000", 0x28}, {&(0x7f0000000000)="40c3ff000000", 0x6}], 0x2}, 0x40)

16.377951081s ago: executing program 1 (id=3238):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
socket$kcm(0x2, 0x3, 0x84)
r0 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0xe, 0x0, 0x0, 0x7602, 0x0, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xe, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
r4 = socket$kcm(0x11, 0x3, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000e29400000000000000ddffffff"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$kcm(r4, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xf, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
perf_event_open(&(0x7f0000000280)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fbfffffefff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090021001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000540)=ANY=[], 0x5)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x200, 0x80220, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb54, 0x1}, 0x411, 0x1, 0xb, 0x0, 0x81}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)

16.330021592s ago: executing program 3 (id=3239):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r3=>0x0, <r4=>0x0})
close(r3)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socket$kcm(0x1e, 0x4, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
socket$kcm(0x29, 0x7, 0x0)
r5 = socket$kcm(0x1e, 0x4, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x101d0)
r6 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x27}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)
r7 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0xfe33)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x30570}], 0x1, 0x0, 0xe00}, 0x1f00)
close(r0)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)

16.174645814s ago: executing program 5 (id=3240):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000500), 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000060000000800000008", @ANYBLOB], 0x50)
r1 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x420, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e8030000a80016000a00", 0x36}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000003d000b08d25a80648c7494f90224fc600b0002400c0004", 0x1b}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r4, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe4, &(0x7f00000000c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x82, 0x8, 0x8, &(0x7f0000000180)}}, 0x10)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000640)={0x2, 0x80, 0x0, 0x3, 0x6, 0xfb, 0x0, 0x8, 0x10, 0x5, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000540), 0x1}, 0x800, 0x6, 0x4, 0x9, 0x9, 0x3, 0x7ff, 0x0, 0xeef6, 0x0, 0x1})
socketpair$unix(0x1, 0x1, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000740)={'veth0_to_hsr\x00', 0x400})
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x31)
r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000080))
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f00000006c0)={r8})
write$cgroup_int(r7, &(0x7f0000000140)=0x400, 0x12)
ioctl$TUNDETACHFILTER(r7, 0x401054d6, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000fbffffff00000000", @ANYRES32=r0, @ANYBLOB="080000002cefeb5ea5fe488f140011d2b53e00000000000000cd2a0a2bcad963cacf8072172d1f3e17000000100000000000859ff4a7c2d4de1cf2bee8706bb6836a166b46b308d79719", @ANYRES32=r5, @ANYRES32=r9, @ANYBLOB="05000000050000000400"/28], 0x50)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

15.804389666s ago: executing program 3 (id=3241):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1c000000, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1000000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x803}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9, 0xffff}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

15.677328502s ago: executing program 1 (id=3242):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x8311}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x11, 0x3, 0x0)
socket$kcm(0x10, 0x2, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x0, 0x6}], {0x95, 0x0, 0x74, 0x2b000000}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r0 = socket$kcm(0xa, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000100)=@in6={0xa, 0x4e22, 0x0, @loopback={0xffffff7f00000000}}, 0x80, 0x0}, 0x0)

15.676583242s ago: executing program 2 (id=3243):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000001f000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) (async)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000380), &(0x7f0000000200)='%+9llu \x00'}, 0x20)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x410140, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0xa}, 0x8}, 0x90) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r4, &(0x7f00000000c0), &(0x7f0000000380)=""/75}, 0x20) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3, <r5=>0xffffffffffffffff}, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000075000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000180)={'team_slave_0\x00', @remote}) (async)
recvmsg$kcm(r7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x10122)
r8 = socket$kcm(0x11, 0x200000000000002, 0x300)
r9 = socket$kcm(0x2, 0x3, 0x106)
sendmsg$inet(r9, &(0x7f00000016c0)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0}, 0x20004) (async)
ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x541b, &(0x7f00000000c0))

15.606199049s ago: executing program 3 (id=3244):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x200, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000008000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095", @ANYRES16], &(0x7f0000000300)='GPL\x00', 0x2, 0x230, &(0x7f0000002500)=""/4106, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdf8, 0x10, 0x0, 0x34, 0x0, 0x0, 0xfffffffffffffe65}, 0x4a)

15.471108815s ago: executing program 3 (id=3245):
socketpair(0x1e, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0))
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x3)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0xfffffffffffffce9, 0x7, 0x0, 0x10, 0xff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x6531aa1a, 0x5}, 0x0, 0xc8, 0x9, 0x8, 0x0, 0x5a, 0x0, 0x0, 0x4, 0x0, 0x200000000000}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x41)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0xfffffffc}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x7602, 0x0, 0x0, 0x1000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

15.443212919s ago: executing program 2 (id=3246):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x10}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380), 0x44)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x17, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@s, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}, {0x95, 0x0, 0x600}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

385.5957ms ago: executing program 33 (id=3242):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x8311}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x11, 0x3, 0x0)
socket$kcm(0x10, 0x2, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x0, 0x6}], {0x95, 0x0, 0x74, 0x2b000000}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r0 = socket$kcm(0xa, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000100)=@in6={0xa, 0x4e22, 0x0, @loopback={0xffffff7f00000000}}, 0x80, 0x0}, 0x0)

339.416172ms ago: executing program 34 (id=3246):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x10}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380), 0x44)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x17, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@s, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}, {0x95, 0x0, 0x600}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

179.752982ms ago: executing program 35 (id=3245):
socketpair(0x1e, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0))
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x3)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0xfffffffffffffce9, 0x7, 0x0, 0x10, 0xff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x6531aa1a, 0x5}, 0x0, 0xc8, 0x9, 0x8, 0x0, 0x5a, 0x0, 0x0, 0x4, 0x0, 0x200000000000}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x41)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0xfffffffc}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x7602, 0x0, 0x0, 0x1000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

0s ago: executing program 36 (id=3240):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000500), 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000060000000800000008", @ANYBLOB], 0x50)
r1 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x420, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e8030000a80016000a00", 0x36}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000003d000b08d25a80648c7494f90224fc600b0002400c0004", 0x1b}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r4, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe4, &(0x7f00000000c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x82, 0x8, 0x8, &(0x7f0000000180)}}, 0x10)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000640)={0x2, 0x80, 0x0, 0x3, 0x6, 0xfb, 0x0, 0x8, 0x10, 0x5, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000540), 0x1}, 0x800, 0x6, 0x4, 0x9, 0x9, 0x3, 0x7ff, 0x0, 0xeef6, 0x0, 0x1})
socketpair$unix(0x1, 0x1, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000740)={'veth0_to_hsr\x00', 0x400})
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x31)
r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000080))
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f00000006c0)={r8})
write$cgroup_int(r7, &(0x7f0000000140)=0x400, 0x12)
ioctl$TUNDETACHFILTER(r7, 0x401054d6, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000fbffffff00000000", @ANYRES32=r0, @ANYBLOB="080000002cefeb5ea5fe488f140011d2b53e00000000000000cd2a0a2bcad963cacf8072172d1f3e17000000100000000000859ff4a7c2d4de1cf2bee8706bb6836a166b46b308d79719", @ANYRES32=r5, @ANYRES32=r9, @ANYBLOB="05000000050000000400"/28], 0x50)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

kernel console output (not intermixed with test programs):

f10ef40a799
[  198.868201][ T9174] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b
[  198.876159][ T9174] RBP: 00007f10ed664090 R08: 0000000000000000 R09: 0000000000000000
[  198.884200][ T9174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  198.892188][ T9174] R13: 00007f10ef684038 R14: 00007f10ef683fa0 R15: 00007ffdba4111d8
[  198.900158][ T9174]  </TASK>
[  198.918676][ T9174] Mem-Info:
[  198.922254][ T9174] active_anon:269 inactive_anon:7015 isolated_anon:0
[  198.922254][ T9174]  active_file:19004 inactive_file:41160 isolated_file:0
[  198.922254][ T9174]  unevictable:768 dirty:338 writeback:0
[  198.922254][ T9174]  slab_reclaimable:20366 slab_unreclaimable:95794
[  198.922254][ T9174]  mapped:29863 shmem:1630 pagetables:659 bounce:0
[  198.922254][ T9174]  kernel_misc_reclaimable:0
[  198.922254][ T9174]  free:1369832 free_pcp:10399 free_cma:0
[  198.972457][ T9174] Node 0 active_anon:1044kB inactive_anon:27552kB active_file:75812kB inactive_file:164640kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119452kB dirty:1348kB writeback:0kB shmem:4444kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10384kB pagetables:2536kB all_unreclaimable? no
[  199.007855][ T9174] Node 1 active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no
[  199.046772][ T9174] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  199.076364][ T9174] lowmem_reserve[]: 0 2539 2540 2540 2540
[  199.082735][ T9174] Node 0 DMA32 free:1538436kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1044kB inactive_anon:27652kB active_file:75812kB inactive_file:164640kB unevictable:1536kB writepending:1348kB present:3129332kB managed:2606552kB mlocked:0kB bounce:0kB free_pcp:39876kB local_pcp:18272kB free_cma:0kB
[  199.127893][ T9174] lowmem_reserve[]: 0 0 0 0 0
[  199.168402][ T9174] Node 0 Normal free:4kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB
[  199.333109][ T9174] lowmem_reserve[]: 0 0 0 0 0
[  199.348547][ T9174] Node 1 Normal free:3925736kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:1856kB local_pcp:0kB free_cma:0kB
[  199.348808][ T9206] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4.
[  199.441010][ T9174] lowmem_reserve[]: 0 0 0 0 0
[  199.456180][ T9214] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  199.474245][ T9174] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  199.519195][ T9174] Node 0 DMA32: 2019*4kB (UM) 1617*8kB (UME) 965*16kB (UME) 732*32kB (UME) 586*64kB (UME) 299*128kB (UME) 123*256kB (UM) 63*512kB (UME) 26*1024kB (UME) 7*2048kB (UM) 317*4096kB (UM) = 1538788kB
[  199.566906][ T9174] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[  199.610420][ T9174] Node 1 Normal: 206*4kB (UME) 38*8kB (UME) 12*16kB (UME) 170*32kB (UME) 76*64kB (UME) 25*128kB (UE) 9*256kB (UM) 2*512kB (U) 2*1024kB (UE) 3*2048kB (UME) 952*4096kB (M) = 3925736kB
[  199.659309][ T9174] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  199.681804][ T9174] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  199.702545][ T9174] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  199.728877][ T9174] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  199.746760][ T9174] 61794 total pagecache pages
[  199.756564][ T9174] 0 pages in swap cache
[  199.760744][ T9174] Swap cache stats: add 0, delete 0, find 0/0
[  199.796441][ T9174] Free swap  = 124996kB
[  199.825349][ T9174] Total swap = 124996kB
[  199.855540][ T9174] 2097051 pages RAM
[  199.862473][ T9174] 0 pages HighMem/MovableOnly
[  199.900812][ T9174] 411490 pages reserved
[  199.905041][ T9174] 0 pages cma reserved
[  200.198728][ T9239] netlink: 'syz.3.1666': attribute type 3 has an invalid length.
[  200.246594][ T9239] __nla_validate_parse: 2 callbacks suppressed
[  200.246611][ T9239] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1666'.
[  200.310340][ T9246] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  200.336601][ T9246] batman_adv: batadv0: Removing interface: batadv_slave_0
[  200.347598][ T9246] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  200.392098][ T9246] batman_adv: batadv0: Removing interface: batadv_slave_1
[  200.650670][ T9257] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1670'.
[  200.662017][ T9257] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4.
[  200.725184][ T9256] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  200.990934][ T9272] netlink: 'syz.3.1677': attribute type 10 has an invalid length.
[  201.051318][ T9272] team0: Device hsr_slave_0 failed to register rx_handler
[  201.279824][ T9281] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1679'.
[  201.389562][ T9281] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4.
[  201.694373][ T9278] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1680'.
[  201.705532][ T9278] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4.
[  201.905805][ T9295] netlink: 'syz.2.1684': attribute type 10 has an invalid length.
[  201.938367][ T9295] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1684'.
[  202.035648][ T9300] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1686'.
[  202.076627][ T9300] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4.
[  202.179850][ T9311] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  202.470207][ T9330] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1697'.
[  202.580422][ T9330] netlink: 'syz.0.1697': attribute type 8 has an invalid length.
[  202.605700][ T9330] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1697'.
[  202.781134][ T9340] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1699'.
[  202.808066][ T9344] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1704'.
[  202.819637][ T9344] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4.
[  202.828112][ T9340] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4.
[  202.976836][ T9346] device sit0 entered promiscuous mode
[  203.642004][ T9374] ref_ctr_offset mismatch. inode: 0x7a8 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0
[  204.000510][ T9379] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4.
[  204.133416][ T9397] netlink: 'syz.0.1721': attribute type 10 has an invalid length.
[  204.482689][ T9415] netlink: 'syz.2.1727': attribute type 9 has an invalid length.
[  207.382920][ T9433] netlink: 'syz.2.1734': attribute type 1 has an invalid length.
[  207.441889][ T9433] __nla_validate_parse: 4 callbacks suppressed
[  207.441906][ T9433] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1734'.
[  207.582979][ T9439] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1732'.
[  207.614217][ T9439] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4.
[  208.774545][ T9475] netlink: 137972 bytes leftover after parsing attributes in process `syz.0.1744'.
[  208.938252][ T9489] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1751'.
[  208.963800][ T9487] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1749'.
[  208.998015][ T9489] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.012520][ T9487] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4.
[  209.063193][ T9489] device bridge_slave_0 left promiscuous mode
[  209.074399][ T9489] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.470405][ T9516] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  209.798376][ T9528] netlink: set zone limit has 8 unknown bytes
[  209.918497][ T9536] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1767'.
[  210.020334][ T9545] netlink: 'syz.0.1769': attribute type 8 has an invalid length.
[  210.043056][ T9545] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.1769'.
[  210.118586][ T9553] netlink: 'syz.2.1772': attribute type 4 has an invalid length.
[  210.265588][ T9563] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  210.517201][ T9577] pim6reg1: tun_chr_ioctl cmd 1074025673
[  210.567741][ T9577] pim6reg1: tun_chr_ioctl cmd 1074025673
[  210.573514][ T9577] pim6reg1: tun_chr_ioctl cmd 1074025673
[  210.748170][ T9593] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  210.946527][ T9606] netlink: 'syz.3.1793': attribute type 10 has an invalid length.
[  210.992619][ T9606] team0: Device hsr_slave_0 failed to register rx_handler
[  211.097366][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  211.311210][ T9615] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1797'.
[  211.401168][ T9615] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4.
[  212.868683][ T9685] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1813'.
[  212.908782][ T9684] netlink: 'syz.0.1824': attribute type 39 has an invalid length.
[  212.955541][ T9685] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  212.999084][ T9689] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1815'.
[  213.029402][ T9689] netlink: 'syz.2.1815': attribute type 8 has an invalid length.
[  213.046777][ T9689] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1815'.
[  213.206328][ T9699] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1818'.
[  213.218509][ T9696] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1819'.
[  213.259809][ T9696] bridge0: port 1(bridge_slave_0) entered disabled state
[  213.379973][ T9708] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1817'.
[  213.410800][ T9696] device bridge_slave_0 left promiscuous mode
[  213.448163][ T9696] bridge0: port 1(bridge_slave_0) entered disabled state
[  213.914308][ T9727] IPv6: NLM_F_CREATE should be specified when creating new route
[  214.033695][ T9730] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1829'.
[  214.063856][ T9730] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  214.145008][ T9744] netlink: 'syz.0.1833': attribute type 10 has an invalid length.
[  214.183217][ T9744] netlink: 210880 bytes leftover after parsing attributes in process `syz.0.1833'.
[  214.334173][ T9750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1834'.
[  214.344725][ T9748] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1835'.
[  214.385408][ T9748] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.470996][ T9748] device bridge_slave_0 left promiscuous mode
[  214.519926][ T9748] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.771558][ T9767] netlink: 'syz.3.1842': attribute type 10 has an invalid length.
[  214.787069][ T9767] device team0 entered promiscuous mode
[  214.807303][ T9767] device team_slave_0 entered promiscuous mode
[  214.834011][ T9767] device team_slave_1 entered promiscuous mode
[  214.842409][ T9767] bridge0: port 3(team0) entered blocking state
[  214.859385][ T9767] bridge0: port 3(team0) entered disabled state
[  214.875273][ T9767] bridge0: port 3(team0) entered blocking state
[  214.881679][ T9767] bridge0: port 3(team0) entered forwarding state
[  214.908581][ T9771] netlink: 'syz.4.1843': attribute type 21 has an invalid length.
[  215.063500][ T9773] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  215.371108][ T9795] netlink: 'syz.4.1852': attribute type 10 has an invalid length.
[  215.523505][ T9806] netlink: 'syz.4.1855': attribute type 1 has an invalid length.
[  215.656171][ T9813] ref_ctr_offset mismatch. inode: 0x771 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0
[  215.955950][ T9827] ref_ctr_offset mismatch. inode: 0x157 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0
[  216.580472][ T9852] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  217.907388][ T9909] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  218.204584][ T9921] netlink: set zone limit has 8 unknown bytes
[  218.264459][ T9925] netlink: 'syz.0.1894': attribute type 10 has an invalid length.
[  218.328013][ T9925] device hsr0 entered promiscuous mode
[  218.334695][ T9925] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  218.393265][ T9925] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  218.415566][ T9925] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  218.429023][ T9925] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  218.438975][ T9932] __nla_validate_parse: 7 callbacks suppressed
[  218.438991][ T9932] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1896'.
[  218.488360][ T9933] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1895'.
[  218.667339][ T9941] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1902'.
[  218.838369][ T9942] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1903'.
[  218.896646][ T9942] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  219.075241][ T9962] netlink: 'syz.0.1908': attribute type 10 has an invalid length.
[  219.625501][ T9980] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1913'.
[  219.800452][ T9994] netlink: 'syz.1.1919': attribute type 13 has an invalid length.
[  219.844910][ T9994] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.1919'.
[  219.866134][ T9998] netlink: 'syz.0.1920': attribute type 10 has an invalid length.
[  219.895755][ T9998] team0: Device hsr_slave_0 failed to register rx_handler
[  220.454851][T10015] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1928'.
[  220.517077][T10015] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  220.707925][T10029] netlink: 192440 bytes leftover after parsing attributes in process `syz.3.1932'.
[  220.753419][T10029] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4
[  220.922865][T10044] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1935'.
[  221.009626][T10039] device syzkaller0 entered promiscuous mode
[  221.310118][T10052] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1942'.
[  221.489534][T10060] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  221.847159][T10091] netlink: 'syz.1.1957': attribute type 10 has an invalid length.
[  221.947674][T10098] ref_ctr_offset mismatch. inode: 0x83c offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0
[  221.970106][T10092] device syzkaller0 entered promiscuous mode
[  222.252876][T10106] device syzkaller0 entered promiscuous mode
[  222.286721][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  222.398256][T10122] ref_ctr_offset mismatch. inode: 0x8ad offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0
[  222.966581][T10143] netlink: 'syz.1.1978': attribute type 4 has an invalid length.
[  223.009433][T10143] bridge0: port 4(veth0_to_bridge) entered blocking state
[  223.034131][T10143] bridge0: port 4(veth0_to_bridge) entered disabled state
[  223.103344][T10143] device veth0_to_bridge entered promiscuous mode
[  223.128665][T10143] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  223.173466][T10143] bridge0: port 4(veth0_to_bridge) entered blocking state
[  223.181094][T10143] bridge0: port 4(veth0_to_bridge) entered forwarding state
[  223.312635][T10159] netlink: 'syz.4.1983': attribute type 4 has an invalid length.
[  223.791090][T10190] netlink: 'syz.1.1996': attribute type 11 has an invalid length.
[  223.830283][T10185] __nla_validate_parse: 4 callbacks suppressed
[  223.831631][T10185] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1994'.
[  223.847099][T10190] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1996'.
[  223.878304][T10185] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4.
[  224.094989][T10199] netlink: set zone limit has 8 unknown bytes
[  224.372956][T10205] netlink: 'syz.0.2001': attribute type 10 has an invalid length.
[  224.416678][T10205] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  224.477278][T10205] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  224.531443][T10205] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  224.551096][T10217] netlink: 'syz.4.2003': attribute type 1 has an invalid length.
[  224.584962][T10217] netlink: 146340 bytes leftover after parsing attributes in process `syz.4.2003'.
[  224.601848][T10205] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  224.676012][T10221] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2006'.
[  225.406025][T10256] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2018'.
[  225.586711][T10226] delete_channel: no stack
[  226.256787][T10282] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2032'.
[  226.286177][T10282] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4.
[  226.392232][T10293] netlink: 'syz.0.2035': attribute type 9 has an invalid length.
[  226.428576][T10293] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2035'.
[  226.713519][T10306] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2041'.
[  226.763424][T10306] netlink: 'syz.3.2041': attribute type 8 has an invalid length.
[  226.828596][T10306] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2041'.
[  227.160616][T10331] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2049'.
[  227.315936][T10343] netlink: 'syz.4.2054': attribute type 10 has an invalid length.
[  227.494972][T10350] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  228.398690][T10387] ref_ctr_offset mismatch. inode: 0x860 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0
[  228.510253][T10389] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  228.517787][T10389] IPv6: NLM_F_CREATE should be set when creating new route
[  228.525516][T10389] IPv6: NLM_F_CREATE should be set when creating new route
[  228.533247][T10389] IPv6: NLM_F_CREATE should be set when creating new route
[  228.674208][T10393] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  230.024176][T10435] __nla_validate_parse: 3 callbacks suppressed
[  230.024192][T10435] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2088'.
[  230.113930][T10446] netlink: 'syz.2.2091': attribute type 10 has an invalid length.
[  230.150126][T10435] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  230.404733][T10448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2092'.
[  230.621255][T10451] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2092'.
[  230.741923][T10451] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  233.551626][T10475] netlink: 'syz.3.2099': attribute type 2 has an invalid length.
[  233.601712][T10475] netlink: 'syz.3.2099': attribute type 8 has an invalid length.
[  233.617269][T10475] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2099'.
[  233.683433][T10476] netlink: 'syz.2.2097': attribute type 11 has an invalid length.
[  233.690668][T10475] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.2099'.
[  233.701263][T10476] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2097'.
[  233.718686][T10473] netlink: 'syz.1.2098': attribute type 10 has an invalid length.
[  233.747204][T10473] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2098'.
[  233.848616][T10485] netlink: 'syz.0.2102': attribute type 10 has an invalid length.
[  233.884242][T10485] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  233.930803][T10485] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  233.952630][T10485] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  233.969227][T10485] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  234.068445][T10493] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2106'.
[  234.091523][T10493] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  234.142240][ T3104] bridge0: port 3(team0) entered disabled state
[  234.169700][T10502] delete_channel: no stack
[  234.176151][T10502] delete_channel: no stack
[  235.098118][T10525] netlink: 'syz.0.2114': attribute type 10 has an invalid length.
[  235.143736][T10525] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2114'.
[  235.854347][T10548] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  235.983938][T10555] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2125'.
[  236.007009][T10555] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4.
[  236.196998][T10568] netlink: 'syz.3.2128': attribute type 21 has an invalid length.
[  236.225148][T10568] netlink: 'syz.3.2128': attribute type 1 has an invalid length.
[  236.266668][T10568] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2128'.
[  236.388523][T10575] netlink: 'syz.0.2142': attribute type 10 has an invalid length.
[  236.457201][T10575] team0: Device hsr_slave_0 failed to register rx_handler
[  236.501321][T10578] netlink: 'syz.3.2132': attribute type 10 has an invalid length.
[  236.522614][T10578] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2132'.
[  236.847467][T10591] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  240.199357][T10611] netlink: 'syz.0.2148': attribute type 21 has an invalid length.
[  240.231428][T10611] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2148'.
[  240.469563][T10622] netlink: 'syz.3.2152': attribute type 10 has an invalid length.
[  240.540557][T10622] bridge0: port 3(team0) entered disabled state
[  240.582706][T10622] device team0 left promiscuous mode
[  240.597320][T10622] device team_slave_0 left promiscuous mode
[  240.603742][T10622] device team_slave_1 left promiscuous mode
[  240.647294][T10622] bridge0: port 3(team0) entered disabled state
[  240.671452][T10622] 8021q: adding VLAN 0 to HW filter on device team0
[  240.702861][T10622] bond0: (slave team0): Enslaving as an active interface with an up link
[  240.718678][T10629] netlink: 'syz.2.2155': attribute type 10 has an invalid length.
[  240.739551][T10629] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2155'.
[  240.769828][T10631] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  241.162785][T10652] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2163'.
[  241.320086][T10660] netlink: 56843 bytes leftover after parsing attributes in process `syz.3.2166'.
[  241.434366][T10660] device syzkaller0 entered promiscuous mode
[  241.825235][T10677] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2173'.
[  241.865039][T10677] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  241.927629][T10684] ref_ctr_offset mismatch. inode: 0x8e8 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0
[  241.955318][T10680] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2174'.
[  242.066853][T10680] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  242.437735][T10700] ref_ctr_offset mismatch. inode: 0x8f4 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0
[  242.579320][T10697] netlink: 'syz.3.2179': attribute type 1 has an invalid length.
[  243.309406][T10718] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2186'.
[  243.376105][T10718] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  243.677417][T10727] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2191'.
[  243.696728][T10727] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  243.843526][T10734] netlink: 'syz.3.2194': attribute type 10 has an invalid length.
[  243.862893][T10734] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2194'.
[  243.919975][T10734] bond0: (slave team0): Releasing backup interface
[  244.165192][T10734] bridge0: port 3(team0) entered blocking state
[  244.182221][T10734] bridge0: port 3(team0) entered disabled state
[  244.230351][T10734] device team0 entered promiscuous mode
[  244.258363][T10734] device team_slave_0 entered promiscuous mode
[  244.272287][T10734] device team_slave_1 entered promiscuous mode
[  244.492302][T10753] netlink: 'syz.2.2201': attribute type 10 has an invalid length.
[  244.562911][T10755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2200'.
[  244.781598][T10761] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  244.932306][T10770] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  244.992516][ T4773] bridge0: port 3(team0) entered disabled state
[  245.378753][T10783] netlink: set zone limit has 8 unknown bytes
[  245.949526][T10791] __nla_validate_parse: 2 callbacks suppressed
[  245.949562][T10791] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2211'.
[  246.075740][T10791] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  246.424648][T10806] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2219'.
[  246.481946][T10806] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  246.565406][T10817] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2221'.
[  247.098958][T10838] netlink: 'syz.1.2228': attribute type 11 has an invalid length.
[  247.136823][T10838] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2228'.
[  247.214439][T10853] netlink: 'syz.2.2232': attribute type 10 has an invalid length.
[  247.292582][T10853] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  247.429506][T10856] netlink: 'syz.0.2233': attribute type 10 has an invalid length.
[  247.499716][T10864] netlink: 'syz.0.2233': attribute type 29 has an invalid length.
[  247.520579][T10856] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2233'.
[  247.573453][T10863] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.2236'.
[  247.665582][T10870] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2235'.
[  247.649431][T10856] bridge0: port 1(ipvlan1) entered blocking state
[  247.723812][T10870] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  247.811676][T10856] bridge0: port 1(ipvlan1) entered disabled state
[  247.854226][T10856] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  247.927379][T10864] netlink: 'syz.0.2233': attribute type 29 has an invalid length.
[  248.607734][T10902] netlink: 'syz.1.2248': attribute type 10 has an invalid length.
[  248.647206][T10902] team0: Device hsr_slave_0 failed to register rx_handler
[  248.836329][T10913] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2251'.
[  248.924376][T10908] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2250'.
[  248.984276][T10908] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  249.352276][T10914] device syzkaller0 entered promiscuous mode
[  250.080616][T10966] netlink: 'syz.2.2269': attribute type 10 has an invalid length.
[  250.117267][T10966] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2269'.
[  250.209692][T10961] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  250.735152][T10989] netlink: 'syz.0.2277': attribute type 1 has an invalid length.
[  250.903738][T10997] netlink: 'syz.2.2281': attribute type 2 has an invalid length.
[  251.318544][T10985] chnl_net:caif_netlink_parms(): no params data found
[  251.346017][T11020] __nla_validate_parse: 3 callbacks suppressed
[  251.346035][T11020] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2284'.
[  251.376727][T11020] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  251.697108][T11032] ref_ctr_offset mismatch. inode: 0x342 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0
[  251.764479][T10985] bridge0: port 1(bridge_slave_0) entered blocking state
[  251.822464][T10985] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.830936][T10985] device bridge_slave_0 entered promiscuous mode
[  251.897653][T10985] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.904786][T10985] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.981774][T10985] device bridge_slave_1 entered promiscuous mode
[  252.109567][T11043] netlink: 'syz.0.2294': attribute type 29 has an invalid length.
[  252.158894][T10985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  252.189199][T11043] netlink: 'syz.0.2294': attribute type 29 has an invalid length.
[  252.212668][T11051] netlink: 'syz.0.2294': attribute type 1 has an invalid length.
[  252.228465][T10985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  252.251244][T11051] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.2294'.
[  252.340225][T11050] netlink: 'syz.0.2294': attribute type 29 has an invalid length.
[  252.390866][T10985] team0: Port device team_slave_0 added
[  252.418990][T10985] team0: Port device team_slave_1 added
[  252.535834][T10985] batman_adv: batadv0: Adding interface: batadv_slave_0
[  252.564760][T10985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  252.696577][ T1108] Bluetooth: hci5: command 0x0409 tx timeout
[  252.715299][T10985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  252.885258][T11064] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2301'.
[  252.979988][T11064] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  252.980225][T10985] batman_adv: batadv0: Adding interface: batadv_slave_1
[  253.022825][T10985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  253.237862][T10985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  253.335328][T11068] netlink: 'syz.3.2303': attribute type 10 has an invalid length.
[  253.421470][T11068] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2303'.
[  253.537790][T11074] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2305'.
[  253.639956][T10985] device hsr_slave_0 entered promiscuous mode
[  253.673415][T10985] device hsr_slave_1 entered promiscuous mode
[  253.707372][T10985] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  253.736566][T10985] Cannot create hsr debugfs directory
[  253.805099][T11085] netlink: 'syz.2.2309': attribute type 10 has an invalid length.
[  253.855146][T11085] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2309'.
[  253.920197][T11092] netlink: 'syz.0.2311': attribute type 10 has an invalid length.
[  253.932442][T11092] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2311'.
[  253.974316][T11095] netlink: 'syz.3.2313': attribute type 10 has an invalid length.
[  253.989126][T11095] device netdevsim0 entered promiscuous mode
[  254.558924][T11108] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2317'.
[  254.641950][T11108] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  254.682600][T10985] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  254.731094][T10985] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  254.767584][ T1108] Bluetooth: hci5: command 0x041b tx timeout
[  254.798953][T10985] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  254.905668][T10985] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  254.953623][T11116] netlink: 'syz.1.2320': attribute type 10 has an invalid length.
[  254.997431][T11116] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2320'.
[  255.395492][T10985] 8021q: adding VLAN 0 to HW filter on device bond0
[  255.460190][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  255.499558][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  255.549415][T10985] 8021q: adding VLAN 0 to HW filter on device team0
[  255.584196][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  255.587660][T11150] FAULT_INJECTION: forcing a failure.
[  255.587660][T11150] name failslab, interval 1, probability 0, space 0, times 0
[  255.613890][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  255.649224][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  255.655528][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  255.660987][T11150] CPU: 1 PID: 11150 Comm: syz.0.2333 Not tainted syzkaller #0
[  255.669222][T11150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  255.679547][T11150] Call Trace:
[  255.682283][ T4773] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.682826][T11150]  <TASK>
[  255.682836][T11150]  dump_stack_lvl+0x188/0x250
[  255.682862][T11150]  ? show_regs_print_info+0x20/0x20
[  255.690070][ T4773] bridge0: port 1(bridge_slave_0) entered forwarding state
[  255.692809][T11150]  ? load_image+0x400/0x400
[  255.692830][T11150]  ? __might_sleep+0xf0/0xf0
[  255.718914][T11150]  ? __lock_acquire+0x7d10/0x7d10
[  255.723949][T11150]  ? mark_lock+0x94/0x320
[  255.728301][T11150]  should_fail+0x38c/0x4c0
[  255.732789][T11150]  should_failslab+0x5/0x20
[  255.737378][T11150]  slab_pre_alloc_hook+0x51/0xc0
[  255.742323][T11150]  __kmalloc+0x6b/0x330
[  255.746475][T11150]  ? tomoyo_realpath_from_path+0x118/0x610
[  255.752282][T11150]  tomoyo_realpath_from_path+0x118/0x610
[  255.757999][T11150]  tomoyo_path_number_perm+0x242/0x660
[  255.763540][T11150]  ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0
[  255.770122][T11150]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  255.775619][T11150]  security_file_ioctl+0x6c/0xa0
[  255.780544][T11150]  __se_sys_ioctl+0x48/0x170
[  255.785166][T11150]  do_syscall_64+0x4c/0xa0
[  255.789571][T11150]  ? clear_bhb_loop+0x30/0x80
[  255.794235][T11150]  ? clear_bhb_loop+0x30/0x80
[  255.798895][T11150]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  255.804771][T11150] RIP: 0033:0x7f3c628f4799
[  255.809181][T11150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  255.828772][T11150] RSP: 002b:00007f3c60b4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  255.837177][T11150] RAX: ffffffffffffffda RBX: 00007f3c62b6dfa0 RCX: 00007f3c628f4799
[  255.845138][T11150] RDX: 00002000000002c0 RSI: 0000000000008935 RDI: 0000000000000003
[  255.853093][T11150] RBP: 00007f3c60b4e090 R08: 0000000000000000 R09: 0000000000000000
[  255.861052][T11150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  255.869021][T11150] R13: 00007f3c62b6e038 R14: 00007f3c62b6dfa0 R15: 00007ffdba601c98
[  255.877089][T11150]  </TASK>
[  255.907334][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  255.932055][T11149] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2334'.
[  255.936821][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  255.952851][T11149] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  256.003638][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  256.027179][ T4773] bridge0: port 2(bridge_slave_1) entered blocking state
[  256.034889][ T4773] bridge0: port 2(bridge_slave_1) entered forwarding state
[  256.062658][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  256.112792][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  256.150214][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  256.169824][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  256.191887][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  256.220075][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  256.234956][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  256.275653][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  256.307306][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  256.334924][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  256.356744][T11150] ERROR: Out of memory at tomoyo_realpath_from_path.
[  256.397614][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  256.432090][T10985] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  256.503309][T11165] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2339'.
[  256.723342][T11179] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  256.730629][T11179] IPv6: NLM_F_CREATE should be set when creating new route
[  256.738028][T11179] IPv6: NLM_F_CREATE should be set when creating new route
[  256.745333][T11179] IPv6: NLM_F_CREATE should be set when creating new route
[  256.856783][ T1108] Bluetooth: hci5: command 0x040f tx timeout
[  257.073071][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  257.095496][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  257.114443][T11193] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2348'.
[  257.129338][T11201] netlink: 'syz.2.2350': attribute type 11 has an invalid length.
[  257.137067][T11193] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  257.144703][T11201] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2350'.
[  257.163154][T11198] netlink: 'syz.3.2351': attribute type 10 has an invalid length.
[  257.175376][T11198] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2351'.
[  257.228821][T10985] 8021q: adding VLAN 0 to HW filter on device batadv0
[  257.306082][T11209] netlink: 'syz.3.2353': attribute type 10 has an invalid length.
[  257.335461][T11209] device hsr0 entered promiscuous mode
[  257.351849][T11209] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  258.096083][T11245] netlink: 'syz.0.2363': attribute type 10 has an invalid length.
[  258.150658][T11245] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2363'.
[  258.245819][T11241] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2364'.
[  258.254223][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  258.268121][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  258.300742][T11241] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  258.391115][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  258.428481][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  258.465278][T10985] device veth0_vlan entered promiscuous mode
[  258.509443][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  258.525399][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  258.568673][T11257] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2368'.
[  258.597118][T10985] device veth1_vlan entered promiscuous mode
[  258.605179][T11259] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  258.665398][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  258.675132][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  258.709656][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  258.765981][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  258.852654][T10985] device veth0_macvtap entered promiscuous mode
[  258.893515][T10985] device veth1_macvtap entered promiscuous mode
[  258.927543][   T23] Bluetooth: hci5: command 0x0419 tx timeout
[  258.966965][T11276] netlink: 'syz.3.2376': attribute type 10 has an invalid length.
[  258.992839][T11276] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2376'.
[  259.009320][T11276] device bond0 entered promiscuous mode
[  259.024671][T11276] device bond_slave_0 entered promiscuous mode
[  259.065225][T11276] device bond_slave_1 entered promiscuous mode
[  259.080638][T11276] bridge0: port 4(bond0) entered blocking state
[  259.092306][T11276] bridge0: port 4(bond0) entered disabled state
[  259.103251][T11276] bridge0: port 4(bond0) entered blocking state
[  259.109812][T11276] bridge0: port 4(bond0) entered forwarding state
[  259.127794][T10985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  259.151068][T10985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.190453][T10985] batman_adv: batadv0: Interface activated: batadv_slave_0
[  259.352757][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  259.382853][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  259.448557][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  259.544756][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  259.665193][T10985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  259.705573][T10985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.763490][T10985] batman_adv: batadv0: Interface activated: batadv_slave_1
[  259.798776][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  259.837011][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  259.879926][T10985] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  259.916738][T10985] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  259.953105][T10985] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  259.994654][T10985] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  260.268726][T11292] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2382'.
[  260.349692][T11292] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  260.498927][ T1279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  260.516428][ T1279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  260.538229][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  260.562956][ T4773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  260.599427][ T4773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  260.722757][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  260.773890][T11306] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  262.550760][T11332] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2394'.
[  263.787983][T11346] netlink: 'syz.1.2401': attribute type 11 has an invalid length.
[  263.829588][T11346] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2401'.
[  264.465920][T11344] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.2400'.
[  265.406120][T11363] netlink: 'syz.3.2405': attribute type 14 has an invalid length.
[  265.519049][T11363] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2405'.
[  265.819210][T11368] ref_ctr_offset mismatch. inode: 0x28 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0
[  266.276379][T11384] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  266.445093][T11386] netlink: 'syz.0.2414': attribute type 11 has an invalid length.
[  266.487162][T11386] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2414'.
[  266.763526][T11396] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2415'.
[  266.764095][T11395] netlink: 'syz.0.2417': attribute type 10 has an invalid length.
[  266.814193][T11396] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  266.826828][T11395] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2417'.
[  267.171539][T11406] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2422'.
[  267.222323][T11410] ref_ctr_offset mismatch. inode: 0x3e offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0
[  267.326901][T11417] netlink: 'syz.3.2424': attribute type 10 has an invalid length.
[  267.347760][T11417] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2424'.
[  267.519109][T11422] netlink: 'syz.1.2426': attribute type 10 has an invalid length.
[  267.540578][T11422] device netdevsim0 entered promiscuous mode
[  267.559645][T11426] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  267.586904][T11429] netlink: 'syz.0.2428': attribute type 28 has an invalid length.
[  267.594995][T11429] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2428'.
[  267.726322][T11437] netlink: 'syz.1.2431': attribute type 10 has an invalid length.
[  267.817594][T11437] bridge0: port 3(team0) entered disabled state
[  267.862344][T11437] bridge0: port 3(team0) entered disabled state
[  267.957412][T11437] device team_slave_0 left promiscuous mode
[  268.056975][T11437] team0 (unregistering): Port device team_slave_0 removed
[  268.065160][T11437] device team_slave_1 left promiscuous mode
[  268.092459][T11437] team0 (unregistering): Port device team_slave_1 removed
[  268.113903][T11432] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2430'.
[  268.123549][T11446] netlink: 'syz.2.2433': attribute type 10 has an invalid length.
[  268.136531][T11446] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2433'.
[  268.148559][T11451] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2434'.
[  268.162068][T11451] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  268.591572][T11466] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2443'.
[  268.665791][T11466] netlink: 20624 bytes leftover after parsing attributes in process `syz.1.2443'.
[  268.739407][T11466] tipc: Started in network mode
[  268.744321][T11466] tipc: Node identity d, cluster identity 46
[  268.800562][T11466] tipc: Node number set to 13
[  268.891748][T11466] delete_channel: no stack
[  268.921642][T11480] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  268.993552][T11483] netlink: 'syz.5.2448': attribute type 10 has an invalid length.
[  269.013260][T11483] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2448'.
[  269.028818][T11483] device team0 entered promiscuous mode
[  269.034730][T11483] device team_slave_0 entered promiscuous mode
[  269.041870][T11483] device team_slave_1 entered promiscuous mode
[  269.057795][T11483] bridge0: port 3(team0) entered blocking state
[  269.080765][T11483] bridge0: port 3(team0) entered disabled state
[  269.131528][T11483] bridge0: port 3(team0) entered blocking state
[  269.138005][T11483] bridge0: port 3(team0) entered forwarding state
[  269.635934][T11495] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2451'.
[  269.656032][T11516] netlink: set zone limit has 8 unknown bytes
[  269.709806][T11495] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  270.090103][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  270.296158][T11544] FAULT_INJECTION: forcing a failure.
[  270.296158][T11544] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  270.371642][T11544] CPU: 0 PID: 11544 Comm: syz.2.2470 Not tainted syzkaller #0
[  270.379186][T11544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  270.389260][T11544] Call Trace:
[  270.392544][T11544]  <TASK>
[  270.395482][T11544]  dump_stack_lvl+0x188/0x250
[  270.400188][T11544]  ? show_regs_print_info+0x20/0x20
[  270.405402][T11544]  ? load_image+0x400/0x400
[  270.409914][T11544]  ? perf_trace_lock_acquire+0xed/0x3e0
[  270.415471][T11544]  should_fail+0x38c/0x4c0
[  270.419900][T11544]  prepare_alloc_pages+0x1e4/0x5f0
[  270.425026][T11544]  __alloc_pages+0x11b/0x480
[  270.429628][T11544]  ? zone_statistics+0x170/0x170
[  270.434584][T11544]  new_slab+0xc0/0x4b0
[  270.438751][T11544]  ___slab_alloc+0x80a/0xdd0
[  270.443352][T11544]  ? tomoyo_realpath_from_path+0x118/0x610
[  270.449159][T11544]  __kmalloc+0x1cd/0x330
[  270.453481][T11544]  ? tomoyo_realpath_from_path+0x118/0x610
[  270.459292][T11544]  tomoyo_realpath_from_path+0x118/0x610
[  270.464940][T11544]  tomoyo_path_number_perm+0x242/0x660
[  270.470392][T11544]  ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0
[  270.476982][T11544]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  270.482577][T11544]  security_file_ioctl+0x6c/0xa0
[  270.487517][T11544]  __se_sys_ioctl+0x48/0x170
[  270.492124][T11544]  do_syscall_64+0x4c/0xa0
[  270.496540][T11544]  ? clear_bhb_loop+0x30/0x80
[  270.501301][T11544]  ? clear_bhb_loop+0x30/0x80
[  270.505974][T11544]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  270.511866][T11544] RIP: 0033:0x7f10ef40a799
[  270.516273][T11544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  270.535877][T11544] RSP: 002b:00007f10ed664028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  270.544297][T11544] RAX: ffffffffffffffda RBX: 00007f10ef683fa0 RCX: 00007f10ef40a799
[  270.552261][T11544] RDX: 00002000000002c0 RSI: 0000000000008935 RDI: 0000000000000003
[  270.560405][T11544] RBP: 00007f10ed664090 R08: 0000000000000000 R09: 0000000000000000
[  270.568368][T11544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  270.576333][T11544] R13: 00007f10ef684038 R14: 00007f10ef683fa0 R15: 00007ffdba4111d8
[  270.584317][T11544]  </TASK>
[  270.669437][T11549] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2473'.
[  270.712678][T11552] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2474'.
[  270.861219][T11559] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  271.412338][T11584] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  272.029666][T11603] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  272.121623][T11619] netlink: 'syz.2.2497': attribute type 4 has an invalid length.
[  272.560268][T11632] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  272.781695][T11649] netlink: 'syz.1.2504': attribute type 16 has an invalid length.
[  272.806869][T11649] __nla_validate_parse: 5 callbacks suppressed
[  272.806901][T11649] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2504'.
[  272.873331][T11653] netlink: 'syz.2.2508': attribute type 10 has an invalid length.
[  272.905776][T11653] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2508'.
[  273.001289][T11655] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2510'.
[  273.037057][T11655] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  274.270617][T11684] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  274.693463][T11698] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2522'.
[  274.725005][T11698] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  275.141614][T11719] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  275.693243][T11740] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2542'.
[  275.878686][ T4249] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.970317][T11748] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2541'.
[  275.991670][ T4249] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.049399][T11748] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  276.164398][ T4249] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.293057][ T4249] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.360834][T11764] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  276.752384][T11787] ref_ctr_offset mismatch. inode: 0x46d offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0
[  276.835345][T11781] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2556'.
[  276.877820][T11781] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4.
[  276.925886][T11791] netlink: 203516 bytes leftover after parsing attributes in process `syz.5.2555'.
[  276.992082][T11791] netlink: zone id is out of range
[  277.001752][T11791] netlink: zone id is out of range
[  277.008088][T11791] netlink: zone id is out of range
[  277.013759][T11791] netlink: zone id is out of range
[  277.027043][T11791] netlink: zone id is out of range
[  277.399473][T11802] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2562'.
[  277.460879][T11802] net_ratelimit: 165 callbacks suppressed
[  277.460924][T11802] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  277.630984][T11820] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  278.074803][ T4249] device hsr_slave_0 left promiscuous mode
[  278.100102][ T4249] device hsr_slave_1 left promiscuous mode
[  278.150883][ T4249] bridge0: port 3(team0) entered disabled state
[  278.190982][ T4249] device bridge_slave_1 left promiscuous mode
[  278.212120][ T4249] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.294144][ T4249] device veth1_macvtap left promiscuous mode
[  278.319372][ T4249] device veth0_macvtap left promiscuous mode
[  278.355011][ T4249] device veth0_vlan left promiscuous mode
[  278.795248][T11858] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2578'.
[  278.826612][T11858] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  278.939544][ T4249] device team_slave_1 left promiscuous mode
[  278.954118][ T4249] team0 (unregistering): Port device team_slave_1 removed
[  278.975653][ T4249] device team_slave_0 left promiscuous mode
[  278.994815][ T4249] team0 (unregistering): Port device team_slave_0 removed
[  279.014143][ T4249] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  279.033194][ T4249] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  279.093597][ T4249] bond0 (unregistering): Released all slaves
[  279.157840][T11836] netlink: 'syz.1.2571': attribute type 10 has an invalid length.
[  279.401859][T11868] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  279.441389][T11870] netlink: 'syz.2.2583': attribute type 10 has an invalid length.
[  279.458024][T11870] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2583'.
[  279.552664][T11873] netlink: 191416 bytes leftover after parsing attributes in process `syz.5.2584'.
[  279.706216][T11873] netlink: 18430 bytes leftover after parsing attributes in process `syz.5.2584'.
[  279.791159][T11891] FAULT_INJECTION: forcing a failure.
[  279.791159][T11891] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  279.932759][T11891] CPU: 0 PID: 11891 Comm: syz.3.2589 Not tainted syzkaller #0
[  279.940432][T11891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  279.950516][T11891] Call Trace:
[  279.953819][T11891]  <TASK>
[  279.956769][T11891]  dump_stack_lvl+0x188/0x250
[  279.961479][T11891]  ? show_regs_print_info+0x20/0x20
[  279.966800][T11891]  ? load_image+0x400/0x400
[  279.971334][T11891]  ? __lock_acquire+0x7d10/0x7d10
[  279.976382][T11891]  ? aa_sk_perm+0x910/0x910
[  279.980989][T11891]  should_fail+0x38c/0x4c0
[  279.985418][T11891]  _copy_from_user+0x2e/0x170
[  279.990188][T11891]  sock_setsockopt+0x2e5/0x24c0
[  279.995059][T11891]  ? __sock_set_mark+0x150/0x150
[  279.999993][T11891]  ? __lock_acquire+0x7d10/0x7d10
[  280.005111][T11891]  ? aa_sk_perm+0x7dc/0x910
[  280.009618][T11891]  ? aa_af_perm+0x340/0x340
[  280.014272][T11891]  ? __fget_files+0x40f/0x480
[  280.018988][T11891]  ? aa_sock_opt_perm+0x74/0x100
[  280.023938][T11891]  ? bpf_lsm_socket_setsockopt+0x5/0x10
[  280.029482][T11891]  ? security_socket_setsockopt+0x7a/0xa0
[  280.035206][T11891]  __sys_setsockopt+0x2f6/0x3d0
[  280.040075][T11891]  __x64_sys_setsockopt+0xb1/0xc0
[  280.045103][T11891]  do_syscall_64+0x4c/0xa0
[  280.049512][T11891]  ? clear_bhb_loop+0x30/0x80
[  280.054180][T11891]  ? clear_bhb_loop+0x30/0x80
[  280.058854][T11891]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  280.064849][T11891] RIP: 0033:0x7f69061fd799
[  280.069272][T11891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  280.089047][T11891] RSP: 002b:00007f6904457028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  280.097461][T11891] RAX: ffffffffffffffda RBX: 00007f6906476fa0 RCX: 00007f69061fd799
[  280.105508][T11891] RDX: 000000000000003e RSI: 0000000000000001 RDI: 0000000000000006
[  280.113470][T11891] RBP: 00007f6904457090 R08: 0000000000000004 R09: 0000000000000000
[  280.121521][T11891] R10: 0000200000000640 R11: 0000000000000246 R12: 0000000000000001
[  280.129573][T11891] R13: 00007f6906477038 R14: 00007f6906476fa0 R15: 00007ffce21d3988
[  280.137569][T11891]  </TASK>
[  280.350339][T11902] netlink: set zone limit has 8 unknown bytes
[  280.805722][T11914] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2596'.
[  280.835139][T11914] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  281.125190][T11923] netlink: 'syz.3.2598': attribute type 10 has an invalid length.
[  281.154283][T11923] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2598'.
[  281.261551][T11923] bridge0: port 3(team0) entered blocking state
[  281.268770][T11923] bridge0: port 3(team0) entered forwarding state
[  281.347100][T11923] 8021q: adding VLAN 0 to HW filter on device team0
[  281.457294][T11931] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  281.872588][T11949] device wlan0 entered promiscuous mode
[  281.992238][T11964] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2611'.
[  282.153880][T11976] netlink: 'syz.1.2615': attribute type 10 has an invalid length.
[  282.195066][T11976] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2615'.
[  282.237920][T11981] FAULT_INJECTION: forcing a failure.
[  282.237920][T11981] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  282.342310][T11981] CPU: 1 PID: 11981 Comm: syz.0.2617 Not tainted syzkaller #0
[  282.350003][T11981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  282.360055][T11981] Call Trace:
[  282.363321][T11981]  <TASK>
[  282.366235][T11981]  dump_stack_lvl+0x188/0x250
[  282.370908][T11981]  ? show_regs_print_info+0x20/0x20
[  282.376093][T11981]  ? load_image+0x400/0x400
[  282.380582][T11981]  ? __lock_acquire+0x7d10/0x7d10
[  282.385768][T11981]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  282.391737][T11981]  should_fail+0x38c/0x4c0
[  282.396145][T11981]  _copy_from_user+0x2e/0x170
[  282.400821][T11981]  get_user_ifreq+0x67/0x170
[  282.405421][T11981]  inet_ioctl+0x31d/0x460
[  282.409759][T11981]  ? inet_shutdown+0x370/0x370
[  282.414543][T11981]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  282.420212][T11981]  sock_do_ioctl+0xfb/0x320
[  282.424934][T11981]  ? sock_show_fdinfo+0xb0/0xb0
[  282.429884][T11981]  sock_ioctl+0x4d2/0x710
[  282.434204][T11981]  ? sock_poll+0x410/0x410
[  282.438642][T11981]  ? bpf_lsm_file_ioctl+0x5/0x10
[  282.443568][T11981]  ? security_file_ioctl+0x7c/0xa0
[  282.448667][T11981]  ? sock_poll+0x410/0x410
[  282.453069][T11981]  __se_sys_ioctl+0xfa/0x170
[  282.457751][T11981]  do_syscall_64+0x4c/0xa0
[  282.462245][T11981]  ? clear_bhb_loop+0x30/0x80
[  282.466911][T11981]  ? clear_bhb_loop+0x30/0x80
[  282.471691][T11981]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  282.477626][T11981] RIP: 0033:0x7f3c628f4799
[  282.482049][T11981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  282.502111][T11981] RSP: 002b:00007f3c60b4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  282.510956][T11981] RAX: ffffffffffffffda RBX: 00007f3c62b6dfa0 RCX: 00007f3c628f4799
[  282.518949][T11981] RDX: 00002000000002c0 RSI: 0000000000008935 RDI: 0000000000000003
[  282.526991][T11981] RBP: 00007f3c60b4e090 R08: 0000000000000000 R09: 0000000000000000
[  282.534946][T11981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  282.542900][T11981] R13: 00007f3c62b6e038 R14: 00007f3c62b6dfa0 R15: 00007ffdba601c98
[  282.550868][T11981]  </TASK>
[  282.664428][T11973] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2613'.
[  282.736935][T11973] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  282.780703][T11994] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  284.163795][T12055] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  284.277219][T12074] netlink: 'syz.3.2643': attribute type 8 has an invalid length.
[  284.340996][T12074] netlink: 'syz.3.2643': attribute type 8 has an invalid length.
[  284.430731][T12074] netlink: 'syz.3.2643': attribute type 8 has an invalid length.
[  284.479702][T12074] netlink: 'syz.3.2643': attribute type 8 has an invalid length.
[  284.519054][T12074] netlink: 'syz.3.2643': attribute type 8 has an invalid length.
[  284.578242][T12074] netlink: 'syz.3.2643': attribute type 8 has an invalid length.
[  284.644495][T12074] netlink: 'syz.3.2643': attribute type 8 has an invalid length.
[  284.688032][T12074] netlink: 'syz.3.2643': attribute type 8 has an invalid length.
[  284.737094][T12074] netlink: 'syz.3.2643': attribute type 8 has an invalid length.
[  284.799528][T12074] netlink: 'syz.3.2643': attribute type 8 has an invalid length.
[  285.278791][T12125] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  285.673782][T12145] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.2662'.
[  285.731724][T12145] openvswitch: netlink: IP tunnel dst address not specified
[  285.916906][T12155] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2666'.
[  286.334474][T12176] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  286.794052][T12210] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2680'.
[  286.856050][T12210] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes.
[  287.153222][T12233] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  287.167700][T12234] ref_ctr_offset mismatch. inode: 0x119 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0
[  287.202836][T12239] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2691'.
[  287.384899][T12248] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2695'.
[  287.549309][T12258] ref_ctr_offset mismatch. inode: 0x521 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0
[  287.681247][T12254] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2696'.
[  287.731406][T12254] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4.
[  287.754776][T12273] team0: Device hsr_slave_0 failed to register rx_handler
[  288.059803][T12289] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  288.781789][T12327] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2716'.
[  289.105819][T12345] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  289.718680][T12384] netlink: set zone limit has 8 unknown bytes
[  290.141360][T12406] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2744'.
[  290.348358][T12416] FAULT_INJECTION: forcing a failure.
[  290.348358][T12416] name failslab, interval 1, probability 0, space 0, times 0
[  290.395115][T12416] CPU: 1 PID: 12416 Comm: syz.5.2746 Not tainted syzkaller #0
[  290.402627][T12416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  290.412690][T12416] Call Trace:
[  290.415969][T12416]  <TASK>
[  290.418902][T12416]  dump_stack_lvl+0x188/0x250
[  290.423752][T12416]  ? show_regs_print_info+0x20/0x20
[  290.428986][T12416]  ? load_image+0x400/0x400
[  290.433486][T12416]  ? __might_sleep+0xf0/0xf0
[  290.438060][T12416]  ? __lock_acquire+0x7d10/0x7d10
[  290.443084][T12416]  should_fail+0x38c/0x4c0
[  290.447588][T12416]  should_failslab+0x5/0x20
[  290.452079][T12416]  slab_pre_alloc_hook+0x51/0xc0
[  290.457007][T12416]  kmem_cache_alloc_trace+0x47/0x2a0
[  290.462381][T12416]  ? __request_module+0x300/0x980
[  290.467574][T12416]  __request_module+0x300/0x980
[  290.472405][T12416]  ? kfree+0xef/0x2a0
[  290.476370][T12416]  ? kasan_set_track+0x62/0x70
[  290.481156][T12416]  ? kasan_set_track+0x4b/0x70
[  290.485903][T12416]  ? kasan_set_free_info+0x1f/0x40
[  290.491011][T12416]  ? umd_cleanup+0x110/0x110
[  290.495594][T12416]  ? aa_get_newest_label+0xf5/0x5a0
[  290.500779][T12416]  ? end_current_label_crit_section+0x170/0x170
[  290.507016][T12416]  ? apparmor_capable+0x12c/0x190
[  290.512109][T12416]  ? bpf_lsm_capable+0x5/0x10
[  290.517155][T12416]  ? security_capable+0x85/0xb0
[  290.522006][T12416]  dev_load+0x156/0x1b0
[  290.526152][T12416]  devinet_ioctl+0xdb/0x1a70
[  290.530727][T12416]  ? get_user_ifreq+0x127/0x170
[  290.535572][T12416]  inet_ioctl+0x34c/0x460
[  290.539886][T12416]  ? inet_shutdown+0x370/0x370
[  290.544647][T12416]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  290.550099][T12416]  sock_do_ioctl+0xfb/0x320
[  290.554606][T12416]  ? sock_show_fdinfo+0xb0/0xb0
[  290.559470][T12416]  sock_ioctl+0x4d2/0x710
[  290.563789][T12416]  ? sock_poll+0x410/0x410
[  290.568207][T12416]  ? bpf_lsm_file_ioctl+0x5/0x10
[  290.573236][T12416]  ? security_file_ioctl+0x7c/0xa0
[  290.578350][T12416]  ? sock_poll+0x410/0x410
[  290.582760][T12416]  __se_sys_ioctl+0xfa/0x170
[  290.587353][T12416]  do_syscall_64+0x4c/0xa0
[  290.591768][T12416]  ? clear_bhb_loop+0x30/0x80
[  290.596437][T12416]  ? clear_bhb_loop+0x30/0x80
[  290.601107][T12416]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  290.606992][T12416] RIP: 0033:0x7f9ac7b37799
[  290.611402][T12416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  290.631254][T12416] RSP: 002b:00007f9ac5d91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  290.639651][T12416] RAX: ffffffffffffffda RBX: 00007f9ac7db0fa0 RCX: 00007f9ac7b37799
[  290.647698][T12416] RDX: 00002000000002c0 RSI: 0000000000008935 RDI: 0000000000000003
[  290.655769][T12416] RBP: 00007f9ac5d91090 R08: 0000000000000000 R09: 0000000000000000
[  290.663819][T12416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  290.671771][T12416] R13: 00007f9ac7db1038 R14: 00007f9ac7db0fa0 R15: 00007ffebf102c98
[  290.679749][T12416]  </TASK>
[  291.251029][T12446] validate_nla: 26 callbacks suppressed
[  291.251059][T12446] netlink: 'syz.1.2755': attribute type 10 has an invalid length.
[  291.323248][T12446] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2755'.
[  291.576262][T12470] netlink: 'syz.2.2763': attribute type 10 has an invalid length.
[  291.596518][T12470] team0: Device ip6_vti0 is up. Set it down before adding it as a team port
[  291.732297][T12483] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2764'.
[  292.294420][T12498] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2769'.
[  292.359706][T12498] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  292.521295][T12503] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2770'.
[  292.582654][T12503] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  292.644138][T12507] netlink: 'syz.1.2772': attribute type 10 has an invalid length.
[  292.666664][T12507] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2772'.
[  293.047194][T12517] netlink: 'syz.2.2776': attribute type 10 has an invalid length.
[  293.070397][T12517] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2776'.
[  293.091855][T12520] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2777'.
[  293.887049][T12546] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2786'.
[  293.915564][T12546] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  294.068703][T12554] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2788'.
[  294.090770][T12554] bridge_slave_1: default FDB implementation only supports local addresses
[  295.001540][T12585] netlink: 178564 bytes leftover after parsing attributes in process `syz.3.2800'.
[  295.027369][T12585] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4.
[  295.350429][T12602] ref_ctr_offset mismatch. inode: 0xbb9 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0
[  295.454334][T12595] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  295.542980][T12612] ref_ctr_offset mismatch. inode: 0xbbf offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0
[  296.167215][T12643] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4.
[  296.429758][T12671] netlink: 'syz.5.2828': attribute type 10 has an invalid length.
[  296.475269][T12671] device netdevsim0 entered promiscuous mode
[  296.509860][T12664] __nla_validate_parse: 2 callbacks suppressed
[  296.509904][T12664] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2826'.
[  296.623705][T12677] netlink: 'syz.5.2830': attribute type 11 has an invalid length.
[  296.662265][T12677] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2830'.
[  296.805555][T12683] netlink: 'syz.0.2833': attribute type 10 has an invalid length.
[  296.838851][T12683] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  296.883168][T12683] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  296.928373][T12683] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  296.962202][T12683] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  297.797747][T12721] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  298.057458][T12737] netlink: set zone limit has 8 unknown bytes
[  298.275130][T12743] netlink: 'syz.5.2850': attribute type 10 has an invalid length.
[  298.310366][T12743] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2850'.
[  298.873848][T12761] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  299.049146][T12772] netlink: 'syz.2.2860': attribute type 10 has an invalid length.
[  299.072447][T12772] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2860'.
[  299.102126][T12779] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2861'.
[  299.256360][T12790] FAULT_INJECTION: forcing a failure.
[  299.256360][T12790] name failslab, interval 1, probability 0, space 0, times 0
[  299.334181][T12793] netlink: 'syz.1.2865': attribute type 10 has an invalid length.
[  299.344302][T12793] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2865'.
[  299.390812][T12790] CPU: 0 PID: 12790 Comm: syz.2.2864 Not tainted syzkaller #0
[  299.398308][T12790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  299.408370][T12790] Call Trace:
[  299.411761][T12790]  <TASK>
[  299.414705][T12790]  dump_stack_lvl+0x188/0x250
[  299.419396][T12790]  ? show_regs_print_info+0x20/0x20
[  299.424698][T12790]  ? load_image+0x400/0x400
[  299.429222][T12790]  ? __might_sleep+0xf0/0xf0
[  299.433818][T12790]  ? __lock_acquire+0x7d10/0x7d10
[  299.438852][T12790]  should_fail+0x38c/0x4c0
[  299.443452][T12790]  should_failslab+0x5/0x20
[  299.447964][T12790]  slab_pre_alloc_hook+0x51/0xc0
[  299.452905][T12790]  ? __request_module+0x31c/0x980
[  299.458114][T12790]  __kmalloc_track_caller+0x69/0x330
[  299.463444][T12790]  ? __request_module+0x31c/0x980
[  299.468482][T12790]  kstrdup+0x32/0x70
[  299.472390][T12790]  __request_module+0x31c/0x980
[  299.477639][T12790]  ? kfree+0xef/0x2a0
[  299.481638][T12790]  ? kasan_set_track+0x62/0x70
[  299.486416][T12790]  ? kasan_set_track+0x4b/0x70
[  299.491457][T12790]  ? kasan_set_free_info+0x1f/0x40
[  299.496590][T12790]  ? umd_cleanup+0x110/0x110
[  299.501194][T12790]  ? aa_get_newest_label+0xf5/0x5a0
[  299.506576][T12790]  ? end_current_label_crit_section+0x170/0x170
[  299.512829][T12790]  ? apparmor_capable+0x12c/0x190
[  299.517867][T12790]  ? bpf_lsm_capable+0x5/0x10
[  299.522543][T12790]  ? security_capable+0x85/0xb0
[  299.527394][T12790]  dev_load+0x156/0x1b0
[  299.531538][T12790]  devinet_ioctl+0xdb/0x1a70
[  299.536128][T12790]  ? get_user_ifreq+0x127/0x170
[  299.540972][T12790]  inet_ioctl+0x34c/0x460
[  299.545391][T12790]  ? inet_shutdown+0x370/0x370
[  299.550168][T12790]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  299.555637][T12790]  sock_do_ioctl+0xfb/0x320
[  299.560128][T12790]  ? sock_show_fdinfo+0xb0/0xb0
[  299.564971][T12790]  sock_ioctl+0x4d2/0x710
[  299.569293][T12790]  ? sock_poll+0x410/0x410
[  299.573722][T12790]  ? bpf_lsm_file_ioctl+0x5/0x10
[  299.578646][T12790]  ? security_file_ioctl+0x7c/0xa0
[  299.583742][T12790]  ? sock_poll+0x410/0x410
[  299.588147][T12790]  __se_sys_ioctl+0xfa/0x170
[  299.592724][T12790]  do_syscall_64+0x4c/0xa0
[  299.597129][T12790]  ? clear_bhb_loop+0x30/0x80
[  299.601886][T12790]  ? clear_bhb_loop+0x30/0x80
[  299.606551][T12790]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  299.612428][T12790] RIP: 0033:0x7f10ef40a799
[  299.616844][T12790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  299.636684][T12790] RSP: 002b:00007f10ed664028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  299.645176][T12790] RAX: ffffffffffffffda RBX: 00007f10ef683fa0 RCX: 00007f10ef40a799
[  299.653132][T12790] RDX: 00002000000002c0 RSI: 0000000000008935 RDI: 0000000000000003
[  299.661086][T12790] RBP: 00007f10ed664090 R08: 0000000000000000 R09: 0000000000000000
[  299.669054][T12790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  299.677009][T12790] R13: 00007f10ef684038 R14: 00007f10ef683fa0 R15: 00007ffdba4111d8
[  299.684976][T12790]  </TASK>
[  299.737309][T12804] netlink: 'syz.0.2869': attribute type 10 has an invalid length.
[  299.745978][T12804] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2869'.
[  299.772379][T12804] batman_adv: batadv0: Adding interface: virt_wifi0
[  299.779576][T12804] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  299.835321][T12804] batman_adv: batadv0: Interface activated: virt_wifi0
[  299.945149][T12801] netlink: 'syz.5.2866': attribute type 10 has an invalid length.
[  300.017839][T12801] device vxcan1 entered promiscuous mode
[  300.067949][T12801] team0: Device vxcan1 is of different type
[  300.749388][T12840] syzkaller0: tun_chr_ioctl cmd 1074025688
[  302.100035][T12851] chnl_net:caif_netlink_parms(): no params data found
[  302.165012][T12880] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  302.385295][T12895] netlink: 'syz.1.2891': attribute type 10 has an invalid length.
[  302.510991][T12895] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2891'.
[  302.569289][T12903] netlink: 'syz.3.2892': attribute type 10 has an invalid length.
[  302.627398][T12903] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2892'.
[  302.792233][T12851] bridge0: port 1(bridge_slave_0) entered blocking state
[  302.809988][T12851] bridge0: port 1(bridge_slave_0) entered disabled state
[  302.831414][T12851] device bridge_slave_0 entered promiscuous mode
[  302.877380][T12851] bridge0: port 2(bridge_slave_1) entered blocking state
[  302.905776][T12851] bridge0: port 2(bridge_slave_1) entered disabled state
[  302.939766][T12851] device bridge_slave_1 entered promiscuous mode
[  303.009489][ T4224] Bluetooth: hci2: command 0x0409 tx timeout
[  303.078764][T12851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  303.142620][T12851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  303.302718][T12851] team0: Port device team_slave_0 added
[  303.323956][T12851] team0: Port device team_slave_1 added
[  303.454956][T12851] batman_adv: batadv0: Adding interface: batadv_slave_0
[  303.482456][T12851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  303.591351][T12851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  303.631865][T12937] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  303.644265][T12851] batman_adv: batadv0: Adding interface: batadv_slave_1
[  303.653091][T12851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  303.680747][T12851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  303.769136][T12944] netlink: 'syz.0.2903': attribute type 10 has an invalid length.
[  303.806745][ T4174] Bluetooth: hci3: command 0x0406 tx timeout
[  303.825955][T12944] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2903'.
[  304.004230][T12851] device hsr_slave_0 entered promiscuous mode
[  304.059883][T12851] device hsr_slave_1 entered promiscuous mode
[  304.109383][T12851] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  304.162489][T12851] Cannot create hsr debugfs directory
[  304.202022][T12957] netlink: 'syz.0.2905': attribute type 10 has an invalid length.
[  304.226611][T12957] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2905'.
[  304.354693][T12967] sctp: [Deprecated]: syz.1.2909 (pid 12967) Use of int in max_burst socket option deprecated.
[  304.354693][T12967] Use struct sctp_assoc_value instead
[  304.379842][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  304.510859][T12974] ref_ctr_offset mismatch. inode: 0xc44 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0
[  304.579460][ T3104] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.779730][ T3104] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.935541][ T3104] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.025197][T12994] netlink: 'syz.5.2916': attribute type 10 has an invalid length.
[  305.036040][T12994] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2916'.
[  305.086712][ T4174] Bluetooth: hci2: command 0x041b tx timeout
[  305.147315][T12998] netlink: 'syz.1.2921': attribute type 10 has an invalid length.
[  305.180097][T12998] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2921'.
[  305.212747][ T3104] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.304471][T13017] netlink: 192444 bytes leftover after parsing attributes in process `syz.3.2923'.
[  305.395983][T13019] netlink: 'syz.5.2924': attribute type 10 has an invalid length.
[  305.465132][T13018] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  305.866160][T13033] netlink: 'syz.0.2929': attribute type 11 has an invalid length.
[  305.906735][T13033] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2929'.
[  306.208738][T13050] netlink: 'syz.0.2934': attribute type 10 has an invalid length.
[  306.225159][T13050] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2934'.
[  306.473227][T13065] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2939'.
[  306.675460][T13071] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  306.985711][T12851] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  307.080909][T12851] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  307.127959][T12851] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  307.158813][T13097] netlink: 'syz.3.2947': attribute type 10 has an invalid length.
[  307.167182][   T13] Bluetooth: hci2: command 0x040f tx timeout
[  307.193561][T12851] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  307.410998][T13110] netlink: 'syz.0.2951': attribute type 16 has an invalid length.
[  307.700276][T12851] 8021q: adding VLAN 0 to HW filter on device bond0
[  307.763126][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  307.812434][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  307.859209][T12851] 8021q: adding VLAN 0 to HW filter on device team0
[  307.911204][T13126] netlink: 'syz.3.2955': attribute type 10 has an invalid length.
[  307.969362][T13126] __nla_validate_parse: 3 callbacks suppressed
[  307.969395][T13126] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2955'.
[  308.084279][ T3104] device hsr_slave_0 left promiscuous mode
[  308.111985][ T3104] device hsr_slave_1 left promiscuous mode
[  308.150215][ T3104] bridge0: port 3(team0) entered disabled state
[  308.229459][ T3104] device veth1_macvtap left promiscuous mode
[  308.251188][ T3104] device veth0_macvtap left promiscuous mode
[  308.271779][ T3104] device veth0_vlan left promiscuous mode
[  308.713928][ T3104] device team_slave_1 left promiscuous mode
[  308.725740][ T3104] team0 (unregistering): Port device team_slave_1 removed
[  308.745707][ T3104] device team_slave_0 left promiscuous mode
[  308.754471][ T3104] team0 (unregistering): Port device team_slave_0 removed
[  308.770739][ T3104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  308.791075][ T3104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  308.810426][ T3104] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  308.894424][ T3104] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  308.905800][ T3104] bond0 (unregistering): Released all slaves
[  308.981032][T13132] netlink: 180 bytes leftover after parsing attributes in process `syz.5.2957'.
[  308.993354][T13144] netlink: 'syz.3.2962': attribute type 10 has an invalid length.
[  309.015348][T13144] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2962'.
[  309.030822][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  309.052381][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  309.087554][ T1279] bridge0: port 1(bridge_slave_0) entered blocking state
[  309.094668][ T1279] bridge0: port 1(bridge_slave_0) entered forwarding state
[  309.161398][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  309.198046][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  309.236729][ T1279] bridge0: port 2(bridge_slave_1) entered blocking state
[  309.243856][ T1279] bridge0: port 2(bridge_slave_1) entered forwarding state
[  309.251425][   T13] Bluetooth: hci2: command 0x0419 tx timeout
[  309.295180][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  309.310659][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  309.360738][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  309.405024][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  309.479089][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  309.545359][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  309.584849][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  309.628519][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  309.679737][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  309.713062][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  309.730445][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  309.751527][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  309.792153][T12851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  309.860965][T13186] netlink: 'syz.0.2975': attribute type 10 has an invalid length.
[  309.878547][T13186] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2975'.
[  310.367590][T10415] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  310.375103][T10415] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  310.433499][T12851] 8021q: adding VLAN 0 to HW filter on device batadv0
[  310.586734][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  310.607377][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  310.669278][T13238] netlink: 'syz.3.2990': attribute type 10 has an invalid length.
[  310.690327][T13238] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2990'.
[  310.774976][T13241] netlink: 'syz.5.2991': attribute type 10 has an invalid length.
[  310.793528][T13241] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2991'.
[  310.862639][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  310.881689][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  310.972073][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  311.000805][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  311.045138][T12851] device veth0_vlan entered promiscuous mode
[  311.121249][T12851] device veth1_vlan entered promiscuous mode
[  311.231590][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  311.260954][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  311.314745][T12851] device veth0_macvtap entered promiscuous mode
[  311.342046][T12851] device veth1_macvtap entered promiscuous mode
[  311.442119][T12851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  311.474592][T12851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  311.505078][T12851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  311.522927][T12851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  311.553599][T12851] batman_adv: batadv0: Interface activated: batadv_slave_0
[  311.603349][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  311.621053][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  311.648804][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  311.658113][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  311.685755][T12851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  311.716879][T12851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  311.755066][T12851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  311.780934][T12851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  311.817939][T12851] batman_adv: batadv0: Interface activated: batadv_slave_1
[  311.849707][T13282] netlink: 'syz.5.3005': attribute type 10 has an invalid length.
[  311.881252][T13282] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3005'.
[  311.953577][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  311.963404][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  312.025062][T12851] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  312.076743][T12851] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  312.105601][T12851] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  312.144057][T12851] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  312.180723][T13296] ref_ctr_offset mismatch. inode: 0xc47 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0
[  312.484233][T13310] netlink: 'syz.3.3015': attribute type 21 has an invalid length.
[  312.516118][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  312.535798][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  312.582179][T13310] netlink: 'syz.3.3015': attribute type 21 has an invalid length.
[  312.601604][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  312.649540][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  312.683470][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  312.719199][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  313.144354][T13327] netlink: 'syz.2.3021': attribute type 10 has an invalid length.
[  313.175313][T13328] netlink: 'syz.3.3020': attribute type 29 has an invalid length.
[  313.206713][T13327] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3021'.
[  313.247567][T13327] device team0 entered promiscuous mode
[  313.266793][T13327] device team_slave_0 entered promiscuous mode
[  313.286141][T13327] device team_slave_1 entered promiscuous mode
[  313.337931][T13327] bridge0: port 3(team0) entered blocking state
[  313.360382][T13327] bridge0: port 3(team0) entered disabled state
[  313.456416][T13327] bridge0: port 3(team0) entered blocking state
[  313.463259][T13327] bridge0: port 3(team0) entered forwarding state
[  313.553248][T13331] netlink: 'syz.5.3022': attribute type 10 has an invalid length.
[  313.586077][T13328] netlink: 'syz.3.3020': attribute type 29 has an invalid length.
[  313.937101][T13341] netlink: 'syz.2.3025': attribute type 11 has an invalid length.
[  313.953465][T13341] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3025'.
[  314.285402][T13333] chnl_net:caif_netlink_parms(): no params data found
[  314.618821][T13333] bridge0: port 1(bridge_slave_0) entered blocking state
[  314.656880][T13333] bridge0: port 1(bridge_slave_0) entered disabled state
[  314.702592][T13333] device bridge_slave_0 entered promiscuous mode
[  314.724483][T13333] bridge0: port 2(bridge_slave_1) entered blocking state
[  314.762972][T13333] bridge0: port 2(bridge_slave_1) entered disabled state
[  314.777333][T13364] ref_ctr_offset mismatch. inode: 0x251 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0
[  314.784630][T13333] device bridge_slave_1 entered promiscuous mode
[  314.851963][T13333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  314.902196][T13333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  315.006359][T13333] team0: Port device team_slave_0 added
[  315.037106][T13333] team0: Port device team_slave_1 added
[  315.133180][T13333] batman_adv: batadv0: Adding interface: batadv_slave_0
[  315.175148][T13333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  315.255037][T13333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  315.274990][T13370] netlink: 'syz.5.3035': attribute type 10 has an invalid length.
[  315.286138][T13370] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3035'.
[  315.324994][T13333] batman_adv: batadv0: Adding interface: batadv_slave_1
[  315.358993][T13333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  315.428448][T13333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  315.445849][T13379] netlink: 'syz.2.3039': attribute type 12 has an invalid length.
[  315.466663][T13379] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3039'.
[  315.566714][ T1325] Bluetooth: hci4: command 0x0409 tx timeout
[  315.617440][T13333] device hsr_slave_0 entered promiscuous mode
[  315.639214][T13333] device hsr_slave_1 entered promiscuous mode
[  315.984221][ T3104] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.074914][ T3104] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.190554][ T3104] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.279253][T13400] netlink: 'syz.3.3048': attribute type 10 has an invalid length.
[  316.298714][T13400] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  316.365007][ T3104] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.650436][T13423] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3056'.
[  316.797444][ T3104] tipc: Left network mode
[  317.094000][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  317.100417][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  317.169007][T13442] netlink: set zone limit has 8 unknown bytes
[  317.501813][ T3104] bridge0: port 2(gretap0) entered disabled state
[  317.561111][ T3104] device gretap0 left promiscuous mode
[  317.584408][ T3104] bridge0: port 2(gretap0) entered disabled state
[  317.656673][   T23] Bluetooth: hci4: command 0x041b tx timeout
[  317.696822][T13464] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3068'.
[  317.794017][T13467] FAULT_INJECTION: forcing a failure.
[  317.794017][T13467] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  317.844561][T13467] CPU: 1 PID: 13467 Comm: syz.2.3069 Not tainted syzkaller #0
[  317.852090][T13467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  317.862250][T13467] Call Trace:
[  317.865538][T13467]  <TASK>
[  317.868476][T13467]  dump_stack_lvl+0x188/0x250
[  317.873175][T13467]  ? show_regs_print_info+0x20/0x20
[  317.878397][T13467]  ? load_image+0x400/0x400
[  317.882915][T13467]  ? __lock_acquire+0x7d10/0x7d10
[  317.887951][T13467]  ? vfs_write+0x8b2/0xd60
[  317.892462][T13467]  should_fail+0x38c/0x4c0
[  317.896898][T13467]  _copy_from_user+0x2e/0x170
[  317.901602][T13467]  __sys_bpf+0x26d/0x6f0
[  317.905905][T13467]  ? bpf_link_show_fdinfo+0x380/0x380
[  317.911298][T13467]  ? vtime_user_exit+0x2c8/0x3e0
[  317.916259][T13467]  __x64_sys_bpf+0x78/0x90
[  317.920773][T13467]  do_syscall_64+0x4c/0xa0
[  317.925197][T13467]  ? clear_bhb_loop+0x30/0x80
[  317.929877][T13467]  ? clear_bhb_loop+0x30/0x80
[  317.934569][T13467]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  317.940559][T13467] RIP: 0033:0x7fa3ab240799
[  317.945076][T13467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  317.964696][T13467] RSP: 002b:00007fa3a949a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  317.973218][T13467] RAX: ffffffffffffffda RBX: 00007fa3ab4b9fa0 RCX: 00007fa3ab240799
[  317.981391][T13467] RDX: 0000000000000048 RSI: 0000200000000040 RDI: 000000000000000a
[  317.989392][T13467] RBP: 00007fa3a949a090 R08: 0000000000000000 R09: 0000000000000000
[  317.997383][T13467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  318.005632][T13467] R13: 00007fa3ab4ba038 R14: 00007fa3ab4b9fa0 R15: 00007ffeb34e9e08
[  318.013808][T13467]  </TASK>
[  318.278765][ T3104] device hsr_slave_0 left promiscuous mode
[  318.312309][ T3104] device hsr_slave_1 left promiscuous mode
[  318.342093][ T3104] device veth0_to_bridge left promiscuous mode
[  318.349483][ T3104] bridge0: port 4(veth0_to_bridge) entered disabled state
[  318.383528][ T3104] device bridge_slave_0 left promiscuous mode
[  318.401393][ T3104] bridge0: port 1(bridge_slave_0) entered disabled state
[  318.432564][ T3104] device veth1_macvtap left promiscuous mode
[  318.446714][ T3104] device veth0_macvtap left promiscuous mode
[  318.456658][ T3104] device veth1_vlan left promiscuous mode
[  318.462493][ T3104] device veth0_vlan left promiscuous mode
[  318.985946][ T3104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  319.035357][ T3104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  319.092003][ T3104] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  319.220594][ T3104] bond0 (unregistering): Released all slaves
[  319.296861][T13484] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3075'.
[  319.626063][T13333] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  319.681647][T13333] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  319.726892][ T4228] Bluetooth: hci4: command 0x040f tx timeout
[  319.772117][T13333] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  319.800652][T13333] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  320.016184][T13528] validate_nla: 1 callbacks suppressed
[  320.016200][T13528] netlink: 'syz.5.3089': attribute type 21 has an invalid length.
[  320.066793][T13528] netlink: 'syz.5.3089': attribute type 6 has an invalid length.
[  320.206106][T13333] 8021q: adding VLAN 0 to HW filter on device bond0
[  320.295071][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  320.316266][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  320.367917][T13333] 8021q: adding VLAN 0 to HW filter on device team0
[  320.380306][T13545] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3092'.
[  320.438699][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  320.455464][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  320.486113][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[  320.493265][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[  320.553289][T13549] netlink: 'syz.3.3094': attribute type 10 has an invalid length.
[  320.573375][T13549] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3094'.
[  320.662852][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  320.675487][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  320.769279][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  320.798235][  T155] bridge0: port 2(bridge_slave_1) entered blocking state
[  320.805382][  T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[  320.876042][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  320.885441][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  320.917132][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  320.955647][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  320.968557][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  320.984831][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  321.019075][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  321.044516][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  321.098808][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  321.114856][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  321.206098][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  321.278360][T13333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  321.349885][T13558] syz.2.3096 (13558) used greatest stack depth: 18512 bytes left
[  321.616285][T13586] netlink: 'syz.5.3103': attribute type 10 has an invalid length.
[  321.649231][T13586] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3103'.
[  321.806927][ T4228] Bluetooth: hci4: command 0x0419 tx timeout
[  321.861428][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  321.904924][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  321.928911][T13595] netlink: 'syz.5.3108': attribute type 10 has an invalid length.
[  321.947494][T13595] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3108'.
[  322.022763][T13333] 8021q: adding VLAN 0 to HW filter on device batadv0
[  322.108533][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  322.167290][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  322.379667][T10415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  322.398180][T10415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  322.499328][T13333] device veth0_vlan entered promiscuous mode
[  322.506686][T10415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  322.514763][T10415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  322.557793][T13614] netlink: 'syz.5.3114': attribute type 7 has an invalid length.
[  322.565887][T13615] netlink: 'syz.5.3114': attribute type 7 has an invalid length.
[  322.738425][T13333] device veth1_vlan entered promiscuous mode
[  322.789614][T13629] netlink: 'syz.2.3118': attribute type 10 has an invalid length.
[  322.836754][T13629] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3118'.
[  322.894798][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  322.934362][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  322.952875][T13633] ref_ctr_offset mismatch. inode: 0x313 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0
[  322.984508][T13333] device veth0_macvtap entered promiscuous mode
[  323.015862][T13333] device veth1_macvtap entered promiscuous mode
[  323.146592][T13333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  323.164669][T13333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.175548][T13333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  323.193753][T13333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.204648][T13333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  323.221096][T13333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.265410][T13333] batman_adv: batadv0: Interface activated: batadv_slave_0
[  323.278851][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  323.289823][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  323.301583][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  323.331574][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  323.391801][T13333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  323.449295][T13333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.496971][T13333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  323.529325][T13333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.565246][T13333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  323.581786][T13333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.603497][T13333] batman_adv: batadv0: Interface activated: batadv_slave_1
[  323.626023][T13652] netlink: 'syz.0.3128': attribute type 11 has an invalid length.
[  323.634669][T13652] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3128'.
[  323.655414][T13648] netlink: 'syz.2.3126': attribute type 10 has an invalid length.
[  323.676360][T13648] device netdevsim0 entered promiscuous mode
[  323.685240][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  323.701818][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  323.750844][T13333] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  323.761143][T13333] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  323.791749][T13333] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  323.801016][T13333] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  323.970613][T13664] tap0: tun_chr_ioctl cmd 1074025677
[  323.987913][T13664] tap0: linktype set to 0
[  323.996210][T13665] ref_ctr_offset mismatch. inode: 0x326 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0
[  324.052721][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.063820][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  324.096322][T10415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  324.121222][T13664] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3133'.
[  324.170284][ T4249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.201039][ T4249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  324.233590][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  325.360121][ T4249] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  325.444811][ T4249] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  325.526609][T13703] chnl_net:caif_netlink_parms(): no params data found
[  325.537619][T13714] validate_nla: 1 callbacks suppressed
[  325.537635][T13714] netlink: 'syz.1.3150': attribute type 2 has an invalid length.
[  325.557299][T13714] netlink: 'syz.1.3150': attribute type 4 has an invalid length.
[  325.565917][T13714] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3150'.
[  325.718688][T13716] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3150'.
[  326.369215][ T4249] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.421454][T13721] netlink: 'syz.5.3152': attribute type 10 has an invalid length.
[  326.438709][T13721] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  326.581757][T13703] bridge0: port 1(bridge_slave_0) entered blocking state
[  326.599510][T13703] bridge0: port 1(bridge_slave_0) entered disabled state
[  326.615562][T13703] device bridge_slave_0 entered promiscuous mode
[  326.670174][ T4249] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.768935][T13750] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3160'.
[  326.786826][T13750] device team0 entered promiscuous mode
[  326.803296][T13750] device team_slave_0 entered promiscuous mode
[  326.812928][T13750] device team_slave_1 entered promiscuous mode
[  326.822560][T13703] bridge0: port 2(bridge_slave_1) entered blocking state
[  326.830593][T13703] bridge0: port 2(bridge_slave_1) entered disabled state
[  326.839116][T13703] device bridge_slave_1 entered promiscuous mode
[  326.846474][T13754] netlink: 'syz.5.3163': attribute type 10 has an invalid length.
[  326.865651][T13754] bridge0: port 3(team0) entered disabled state
[  326.912591][T13759] netlink: set zone limit has 8 unknown bytes
[  326.913195][T13754] device team0 left promiscuous mode
[  326.952506][T13754] device team_slave_0 left promiscuous mode
[  326.960398][T13754] device team_slave_1 left promiscuous mode
[  326.990019][T13754] bridge0: port 3(team0) entered disabled state
[  327.036240][T13754] 8021q: adding VLAN 0 to HW filter on device team0
[  327.072824][T13754] bond0: (slave team0): Enslaving as an active interface with an up link
[  327.134896][T13703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  327.176585][ T1108] Bluetooth: hci0: command 0x0409 tx timeout
[  327.208898][T13703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  327.301371][T13775] netlink: 'syz.1.3169': attribute type 10 has an invalid length.
[  327.403729][T13775] device wlan1 entered promiscuous mode
[  327.423214][T13781] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3172'.
[  327.435047][T13775] team0: Port device wlan1 added
[  327.454277][T13774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  327.468987][T13703] team0: Port device team_slave_0 added
[  327.510957][T13703] team0: Port device team_slave_1 added
[  327.642335][T13703] batman_adv: batadv0: Adding interface: batadv_slave_0
[  327.701997][T13703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  327.770884][T13703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  327.786706][T13786] FAULT_INJECTION: forcing a failure.
[  327.786706][T13786] name failslab, interval 1, probability 0, space 0, times 0
[  327.823889][T13786] CPU: 0 PID: 13786 Comm: syz.2.3174 Not tainted syzkaller #0
[  327.831557][T13786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  327.841635][T13786] Call Trace:
[  327.844919][T13786]  <TASK>
[  327.847854][T13786]  dump_stack_lvl+0x188/0x250
[  327.852540][T13786]  ? show_regs_print_info+0x20/0x20
[  327.857845][T13786]  ? load_image+0x400/0x400
[  327.862359][T13786]  ? __might_sleep+0xf0/0xf0
[  327.866961][T13786]  ? __lock_acquire+0x7d10/0x7d10
[  327.872033][T13786]  should_fail+0x38c/0x4c0
[  327.876473][T13786]  should_failslab+0x5/0x20
[  327.880984][T13786]  slab_pre_alloc_hook+0x51/0xc0
[  327.886110][T13786]  __kmalloc+0x6b/0x330
[  327.890300][T13786]  ? bpf_test_init+0xf8/0x1b0
[  327.894988][T13786]  ? __lock_acquire+0x7d10/0x7d10
[  327.900012][T13786]  bpf_test_init+0xf8/0x1b0
[  327.904520][T13786]  bpf_prog_test_run_skb+0x181/0x1180
[  327.910039][T13786]  ? __fget_files+0x40f/0x480
[  327.914741][T13786]  ? cpu_online+0x60/0x60
[  327.919260][T13786]  bpf_prog_test_run+0x31e/0x390
[  327.924306][T13786]  __sys_bpf+0x5a5/0x6f0
[  327.928553][T13786]  ? bpf_link_show_fdinfo+0x380/0x380
[  327.933939][T13786]  ? vtime_user_exit+0x2c8/0x3e0
[  327.938879][T13786]  __x64_sys_bpf+0x78/0x90
[  327.943379][T13786]  do_syscall_64+0x4c/0xa0
[  327.947791][T13786]  ? clear_bhb_loop+0x30/0x80
[  327.952459][T13786]  ? clear_bhb_loop+0x30/0x80
[  327.957129][T13786]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  327.963013][T13786] RIP: 0033:0x7fa3ab240799
[  327.967426][T13786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  327.987124][T13786] RSP: 002b:00007fa3a949a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  327.995621][T13786] RAX: ffffffffffffffda RBX: 00007fa3ab4b9fa0 RCX: 00007fa3ab240799
[  328.003584][T13786] RDX: 0000000000000048 RSI: 0000200000000040 RDI: 000000000000000a
[  328.011636][T13786] RBP: 00007fa3a949a090 R08: 0000000000000000 R09: 0000000000000000
[  328.019605][T13786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  328.027776][T13786] R13: 00007fa3ab4ba038 R14: 00007fa3ab4b9fa0 R15: 00007ffeb34e9e08
[  328.035863][T13786]  </TASK>
[  328.076729][T13789] netlink: 'syz.1.3173': attribute type 16 has an invalid length.
[  328.099054][T13789] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3173'.
[  328.115294][T13703] batman_adv: batadv0: Adding interface: batadv_slave_1
[  328.142731][T13703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  328.245899][T13796] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3178'.
[  328.256493][T13703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  328.387892][T13803] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3178'.
[  328.548100][T13803] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4.
[  329.248477][ T4226] Bluetooth: hci0: command 0x041b tx timeout
[  331.173113][T13703] device hsr_slave_0 entered promiscuous mode
[  331.180820][T13703] device hsr_slave_1 entered promiscuous mode
[  331.204577][T13703] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  331.212732][T13703] Cannot create hsr debugfs directory
[  331.329926][   T23] Bluetooth: hci0: command 0x040f tx timeout
[  331.355395][T13832] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3186'.
[  331.562452][T13843] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3189'.
[  331.898254][ T4249] bridge0: port 4(gretap0) entered disabled state
[  331.970191][ T4249] device gretap0 left promiscuous mode
[  331.988586][T13877] FAULT_INJECTION: forcing a failure.
[  331.988586][T13877] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  332.003316][ T4249] bridge0: port 4(gretap0) entered disabled state
[  332.019720][T13877] CPU: 0 PID: 13877 Comm: syz.1.3197 Not tainted syzkaller #0
[  332.027304][T13877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  332.037500][T13877] Call Trace:
[  332.040900][T13877]  <TASK>
[  332.043874][T13877]  dump_stack_lvl+0x188/0x250
[  332.048571][T13877]  ? show_regs_print_info+0x20/0x20
[  332.053997][T13877]  ? load_image+0x400/0x400
[  332.058606][T13877]  ? __lock_acquire+0x7d10/0x7d10
[  332.063833][T13877]  should_fail+0x38c/0x4c0
[  332.068274][T13877]  _copy_from_user+0x2e/0x170
[  332.072972][T13877]  ___sys_recvmsg+0x173/0x5c0
[  332.077691][T13877]  ? __sys_recvmsg+0x280/0x280
[  332.082474][T13877]  ? __lock_acquire+0x7d10/0x7d10
[  332.087538][T13877]  __x64_sys_recvmsg+0x1f9/0x2c0
[  332.092628][T13877]  ? ___sys_recvmsg+0x5c0/0x5c0
[  332.097524][T13877]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  332.103535][T13877]  ? lockdep_hardirqs_on+0x94/0x140
[  332.108752][T13877]  do_syscall_64+0x4c/0xa0
[  332.113281][T13877]  ? clear_bhb_loop+0x30/0x80
[  332.118004][T13877]  ? clear_bhb_loop+0x30/0x80
[  332.122792][T13877]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  332.128695][T13877] RIP: 0033:0x7f06507e9799
[  332.133120][T13877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  332.152815][T13877] RSP: 002b:00007f064ea43028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  332.161337][T13877] RAX: ffffffffffffffda RBX: 00007f0650a62fa0 RCX: 00007f06507e9799
[  332.169332][T13877] RDX: 0000000000000000 RSI: 0000200000000bc0 RDI: 0000000000000003
[  332.177347][T13877] RBP: 00007f064ea43090 R08: 0000000000000000 R09: 0000000000000000
[  332.185338][T13877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  332.193421][T13877] R13: 00007f0650a63038 R14: 00007f0650a62fa0 R15: 00007fffb2d78b68
[  332.201403][T13877]  </TASK>
[  332.603975][T13902] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3204'.
[  332.666587][T13703] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  332.719891][T13703] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  332.795076][T13703] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  332.813769][T13703] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  333.119342][T13925] netlink: 'syz.1.3208': attribute type 10 has an invalid length.
[  333.140003][T13925] device geneve0 entered promiscuous mode
[  333.271248][T13925] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  333.395769][ T4249] device hsr_slave_0 left promiscuous mode
[  333.406798][ T4261] Bluetooth: hci0: command 0x0419 tx timeout
[  333.430935][ T4249] device hsr_slave_1 left promiscuous mode
[  333.448453][ T4249] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  333.474058][ T4249] batman_adv: batadv0: Removing interface: batadv_slave_0
[  333.551603][ T4249] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  333.560856][ T4249] batman_adv: batadv0: Removing interface: batadv_slave_1
[  333.594779][ T4249] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  333.611112][ T4249] batman_adv: batadv0: Removing interface: virt_wifi0
[  333.649174][ T4249] bridge0: port 2(team0) entered disabled state
[  333.659038][ T4249] bridge0: port 3(dummy0) entered disabled state
[  333.685883][ T4249] device veth0_vlan left promiscuous mode
[  334.274032][T13965] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  334.355580][ T4249] device team_slave_1 left promiscuous mode
[  334.379291][ T4249] team0 (unregistering): Port device team_slave_1 removed
[  334.409304][ T4249] device team_slave_0 left promiscuous mode
[  334.416778][ T4249] team0 (unregistering): Port device team_slave_0 removed
[  334.434438][ T4249] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  334.452429][ T4249] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  334.482758][ T4249] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  334.595214][ T4249] bond0 (unregistering): Released all slaves
[  334.663701][T13703] 8021q: adding VLAN 0 to HW filter on device bond0
[  334.677681][T13940] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4
[  334.696876][T13940] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4
[  334.722358][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  334.743045][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  334.756887][T13940] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  334.781821][T13703] 8021q: adding VLAN 0 to HW filter on device team0
[  334.837156][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  334.856252][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  334.900668][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[  334.908086][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[  334.949138][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  334.994282][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  335.021552][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  335.069109][ T4773] bridge0: port 2(bridge_slave_1) entered blocking state
[  335.076361][ T4773] bridge0: port 2(bridge_slave_1) entered forwarding state
[  335.114032][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  335.184795][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  335.207961][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  335.243709][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  335.267574][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  335.287233][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  335.381658][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  335.418249][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  335.476026][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  335.494713][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  335.557606][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  335.570243][T13703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  335.998466][T14027] ref_ctr_offset mismatch. inode: 0x758 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0
[  336.086003][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  336.121375][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  336.171573][T13703] 8021q: adding VLAN 0 to HW filter on device batadv0
[  336.341619][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  336.351802][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  336.462462][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  336.483852][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  336.545684][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  336.634986][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  336.700666][T13703] device veth0_vlan entered promiscuous mode
[  336.716226][T14048] netlink: 'syz.5.3237': attribute type 10 has an invalid length.
[  336.788705][T13703] device veth1_vlan entered promiscuous mode
[  336.911939][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  336.931215][T14052] netlink: 'syz.1.3238': attribute type 11 has an invalid length.
[  336.959730][T14052] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3238'.
[  337.149216][T14060] netlink: 'syz.5.3240': attribute type 4 has an invalid length.
[  337.189280][T14060] netlink: 116 bytes leftover after parsing attributes in process `syz.5.3240'.
[  337.410103][T14065] device syzkaller0 entered promiscuous mode
[  337.449962][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  337.477596][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  337.525452][T13703] device veth0_macvtap entered promiscuous mode
[  337.632924][T14082] ref_ctr_offset mismatch. inode: 0x775 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0
[  355.509072][ T4228] Bluetooth: hci1: command 0x0409 tx timeout
[  355.522182][ T4228] Bluetooth: hci6: command 0x0409 tx timeout
[  355.606879][ T4228] Bluetooth: hci8: command 0x0409 tx timeout
[  355.619617][ T4228] Bluetooth: hci7: command 0x0409 tx timeout
[  357.606783][ T4261] Bluetooth: hci6: command 0x041b tx timeout
[  357.614569][ T4261] Bluetooth: hci1: command 0x041b tx timeout
[  357.663096][ T4261] Bluetooth: hci7: command 0x041b tx timeout
[  357.669551][ T4261] Bluetooth: hci8: command 0x041b tx timeout
[  359.656845][ T4261] Bluetooth: hci1: command 0x040f tx timeout
[  359.664387][ T4261] Bluetooth: hci6: command 0x040f tx timeout
[  359.756790][ T4261] Bluetooth: hci8: command 0x040f tx timeout
[  359.766733][ T4261] Bluetooth: hci7: command 0x040f tx timeout
[  361.756722][ T4228] Bluetooth: hci6: command 0x0419 tx timeout
[  361.762971][ T4228] Bluetooth: hci1: command 0x0419 tx timeout
[  361.808579][ T4228] Bluetooth: hci7: command 0x0419 tx timeout
[  361.822596][ T4228] Bluetooth: hci8: command 0x0419 tx timeout
[  375.506733][ T4228] Bluetooth: hci5: command 0x0406 tx timeout
[  386.236795][ T4261] ODEBUG: Out of memory. ODEBUG disabled
[  388.056643][ T4261] Bluetooth: hci9: command 0x0409 tx timeout
[  390.156617][   T21] Bluetooth: hci9: command 0x041b tx timeout
[  392.208349][   T21] Bluetooth: hci9: command 0x040f tx timeout
[  394.308811][   T21] Bluetooth: hci9: command 0x0419 tx timeout
[  416.156725][ T4228] Bluetooth: hci12: command 0x0409 tx timeout
[  416.164221][ T4228] Bluetooth: hci11: command 0x0409 tx timeout
[  416.179010][ T4228] Bluetooth: hci10: command 0x0409 tx timeout
[  416.185190][ T4228] Bluetooth: hci13: command 0x0409 tx timeout
[  418.206747][   T21] Bluetooth: hci13: command 0x041b tx timeout
[  418.218130][   T21] Bluetooth: hci10: command 0x041b tx timeout
[  418.228688][   T21] Bluetooth: hci11: command 0x041b tx timeout
[  418.234939][   T21] Bluetooth: hci12: command 0x041b tx timeout
[  420.306694][ T4228] Bluetooth: hci12: command 0x040f tx timeout
[  420.313656][ T4228] Bluetooth: hci11: command 0x040f tx timeout
[  420.327631][ T4228] Bluetooth: hci10: command 0x040f tx timeout
[  420.333930][ T4228] Bluetooth: hci13: command 0x040f tx timeout
[  422.406696][ T4228] Bluetooth: hci13: command 0x0419 tx timeout
[  422.419292][ T4228] Bluetooth: hci10: command 0x0419 tx timeout
[  422.428737][ T4228] Bluetooth: hci11: command 0x0419 tx timeout
[  422.434980][ T4228] Bluetooth: hci12: command 0x0419 tx timeout
[  442.756422][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  442.763547][    C1] rcu: 	0-....: (1 GPs behind) idle=353/1/0x4000000000000000 softirq=38991/38992 fqs=2098 
[  442.774542][    C1] 	(detected by 1, t=10506 jiffies, g=51365, q=985)
[  442.781174][    C1] Sending NMI from CPU 1 to CPUs 0:
[  442.786638][    C0] NMI backtrace for cpu 0
[  442.786647][    C0] CPU: 0 PID: 14083 Comm: syz.2.3246 Not tainted syzkaller #0
[  442.786664][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  442.786673][    C0] RIP: 0010:irq_exit_rcu+0x5/0x20
[  442.786695][    C0] Code: 80 c1 03 38 c1 7c 81 48 89 df e8 c6 e3 74 00 e9 74 ff ff ff 90 e8 4b 2a 73 08 e9 16 ff ff ff 66 0f 1f 44 00 00 e8 1b 00 00 00 <48> c7 c7 c0 0f 2a 8a e8 bf 30 73 08 65 ff 0d 3c 2d b9 7e c3 0f 1f
[  442.786707][    C0] RSP: 0018:ffffc90000007ff0 EFLAGS: 00000046
[  442.786720][    C0] RAX: 7cad3ad502fc9c00 RBX: ffffc9000151eb78 RCX: 7cad3ad502fc9c00
[  442.786732][    C0] RDX: 0000000000000002 RSI: ffffffff8a79f960 RDI: ffff8880b903ad58
[  442.786742][    C0] RBP: 0000000000000000 R08: ffff88813fe1e407 R09: 1ffff11027fc3c80
[  442.786753][    C0] R10: dffffc0000000000 R11: ffffed1027fc3c81 R12: 0000000000000000
[  442.786764][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  442.786773][    C0] FS:  00007fa3a949a6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  442.786787][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  442.786798][    C0] CR2: 000000110c345acf CR3: 0000000062754000 CR4: 00000000003506f0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  442.786812][    C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
[  442.786821][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  442.786831][    C0] Call Trace:
[  442.786838][    C0]  <IRQ>
[  442.786843][    C0]  sysvec_irq_work+0x9d/0xc0
[  442.786863][    C0]  </IRQ>
[  442.786867][    C0]  <TASK>
[  442.786872][    C0]  asm_sysvec_irq_work+0x16/0x20
[  442.786889][    C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x4a0
[  442.786906][    C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 12 f2 9c 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 20 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08
[  442.786918][    C0] RSP: 0018:ffffc9000151ec20 EFLAGS: 00000206
[  442.786930][    C0] RAX: 7cad3ad502fc9c00 RBX: 1ffff920002a3d88 RCX: 7cad3ad502fc9c00
[  442.786941][    C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2780 RDI: ffffffff8a79f980
[  442.786952][    C0] RBP: ffffc9000151ed00 R08: ffff8880b903b30b R09: 1ffff11017207661
[  442.786964][    C0] R10: dffffc0000000000 R11: ffffed1017207662 R12: ffffffff8c322f00
[  442.786975][    C0] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000001
[  442.786995][    C0]  ? asm_sysvec_apic_timer_interrupt+0x10/0x20
[  442.787013][    C0]  ? __rcu_read_unlock+0xd0/0xd0
[  442.787026][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  442.787050][    C0]  __rcu_read_unlock+0x78/0xd0
[  442.787066][    C0]  mod_objcg_mlstate+0x23b/0x2e0
[  442.787083][    C0]  ? drain_obj_stock+0x370/0x370
[  442.787098][    C0]  ? __lock_acquire+0x7d10/0x7d10
[  442.787122][    C0]  mod_objcg_state+0x324/0x600
[  442.787137][    C0]  ? refill_obj_stock+0x28f/0x470
[  442.787152][    C0]  ? __page_objcg+0x140/0x140
[  442.787167][    C0]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  442.787191][    C0]  ? lock_chain_count+0x20/0x20
[  442.787210][    C0]  memcg_slab_free_hook+0x67/0x1f0
[  442.787228][    C0]  ? qlink_free+0x37/0x80
[  442.787241][    C0]  ___cache_free+0x63/0x120
[  442.787257][    C0]  qlist_free_all+0x35/0x90
[  442.787272][    C0]  kasan_quarantine_reduce+0x150/0x160
[  442.787288][    C0]  __kasan_krealloc+0xa7/0x1b0
[  442.787307][    C0]  ? rcu_nmi_exit+0x6f/0xf0
[  442.787324][    C0]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  442.787343][    C0]  ? lock_chain_count+0x20/0x20
[  442.787363][    C0]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  442.787379][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  442.787395][    C0]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  442.787414][    C0]  ? __phys_addr+0x95/0x170
[  442.787428][    C0]  ? __sanitizer_cov_trace_pc+0x55/0x60
[  442.787447][    C0]  krealloc+0xb1/0xf0
[  442.787462][    C0]  do_check+0x2d3e/0xeb00
[  442.787499][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  442.787518][    C0]  ? mark_reg_unknown+0x5a0/0x5a0
[  442.787534][    C0]  ? do_check_common+0x2c0/0x16e0
[  442.787548][    C0]  ? kasan_check_range+0x84/0x290
[  442.787565][    C0]  ? btf_check_subprog_arg_match+0x13e/0x290
[  442.787584][    C0]  do_check_common+0xe82/0x16e0
[  442.787606][    C0]  bpf_check+0x9c84/0xf270
[  442.787632][    C0]  ? rcu_lock_release+0x5/0x20
[  442.787654][    C0]  ? bpf_get_btf_vmlinux+0x10/0x10
[  442.787673][    C0]  ? trace_call_bpf+0x515/0x5b0
[  442.787694][    C0]  ? __bpf_trace_bpf_trace_printk+0x20/0x20
[  442.787712][    C0]  ? trace_call_bpf+0x515/0x5b0
[  442.787728][    C0]  ? verify_lock_unused+0x140/0x140
[  442.787743][    C0]  ? mark_lock+0x94/0x320
[  442.787759][    C0]  ? perf_trace_run_bpf_submit+0x124/0x1c0
[  442.787779][    C0]  ? rcu_nmi_exit+0x6f/0xf0
[  442.787796][    C0]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  442.787815][    C0]  ? lock_chain_count+0x20/0x20
[  442.787835][    C0]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  442.787851][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  442.787868][    C0]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  442.787887][    C0]  ? seqcount_lockdep_reader_access+0x18d/0x1d0
[  442.787904][    C0]  ? seqcount_lockdep_reader_access+0x196/0x1d0
[  442.787921][    C0]  ? ktime_get_real_ts64+0x440/0x440
[  442.787934][    C0]  ? pcpu_alloc+0x1121/0x1770
[  442.787955][    C0]  ? __might_fault+0xb3/0x110
[  442.787971][    C0]  ? memset+0x1e/0x40
[  442.787987][    C0]  ? bpf_obj_name_cpy+0x190/0x1d0
[  442.788005][    C0]  bpf_prog_load+0xfec/0x1510
[  442.788029][    C0]  ? map_freeze+0x350/0x350
[  442.788044][    C0]  ? __might_fault+0xb7/0x110
[  442.788067][    C0]  ? __might_fault+0xb3/0x110
[  442.788083][    C0]  ? bpf_lsm_bpf+0x5/0x10
[  442.788097][    C0]  ? security_bpf+0x7a/0xa0
[  442.788115][    C0]  __sys_bpf+0x532/0x6f0
[  442.788132][    C0]  ? bpf_link_show_fdinfo+0x380/0x380
[  442.788160][    C0]  __x64_sys_bpf+0x78/0x90
[  442.788181][    C0]  do_syscall_64+0x4c/0xa0
[  442.788196][    C0]  ? clear_bhb_loop+0x30/0x80
[  442.788209][    C0]  ? clear_bhb_loop+0x30/0x80
[  442.788225][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  442.788240][    C0] RIP: 0033:0x7fa3ab240799
[  442.788256][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  442.788268][    C0] RSP: 002b:00007fa3a949a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  442.788283][    C0] RAX: ffffffffffffffda RBX: 00007fa3ab4b9fa0 RCX: 00007fa3ab240799
[  442.788294][    C0] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005
[  442.788304][    C0] RBP: 00007fa3ab2d6bd9 R08: 0000000000000000 R09: 0000000000000000
[  442.788314][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  442.788323][    C0] R13: 00007fa3ab4ba038 R14: 00007fa3ab4b9fa0 R15: 00007ffeb34e9e08
[  442.788344][    C0]  </TASK>
[  445.136451][ T4229] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-... } 10743 jiffies s: 28913 root: 0x1/.
[  445.173580][ T4229] rcu: blocking rcu_node structures (internal RCU debug):
[  445.187473][ T4229] Task dump for CPU 0:
[  445.191648][ T4229] task:syz.2.3246      state:R  running task     stack:23344 pid:14083 ppid: 12851 flags:0x0000400c
[  445.203166][ T4229] Call Trace:
[  445.206649][ T4229]  <TASK>
[  445.209608][ T4229]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  445.215688][ T4229]  ? lock_chain_count+0x20/0x20
[  445.220579][ T4229]  ? asm_sysvec_irq_work+0x16/0x20
[  445.225782][ T4229]  ? trace_hardirqs_off_finish+0xca/0x1f0
[  445.231559][ T4229]  ? trace_irq_enable_rcuidle+0x108/0x180
[  445.237311][ T4229]  ? trace_hardirqs_on+0x57/0x80
[  445.242265][ T4229]  ? asm_sysvec_irq_work+0x16/0x20
[  445.247505][ T4229]  ? rcu_read_unlock_special+0x7f/0x4a0
[  445.253061][ T4229]  ? asm_sysvec_apic_timer_interrupt+0x10/0x20
[  445.259245][ T4229]  ? __rcu_read_unlock+0xd0/0xd0
[  445.264274][ T4229]  ? lockdep_hardirqs_on+0x94/0x140
[  445.269522][ T4229]  ? __rcu_read_unlock+0x78/0xd0
[  445.274476][ T4229]  ? mod_objcg_mlstate+0x23b/0x2e0
[  445.279628][ T4229]  ? drain_obj_stock+0x370/0x370
[  445.284571][ T4229]  ? __lock_acquire+0x7d10/0x7d10
[  445.289631][ T4229]  ? mod_objcg_state+0x324/0x600
[  445.294570][ T4229]  ? refill_obj_stock+0x28f/0x470
[  445.299621][ T4229]  ? __page_objcg+0x140/0x140
[  445.304504][ T4229]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  445.310521][ T4229]  ? lock_chain_count+0x20/0x20
[  445.315386][ T4229]  ? memcg_slab_free_hook+0x67/0x1f0
[  445.320700][ T4229]  ? qlink_free+0x37/0x80
[  445.325029][ T4229]  ? ___cache_free+0x63/0x120
[  445.329749][ T4229]  ? qlist_free_all+0x35/0x90
[  445.334428][ T4229]  ? kasan_quarantine_reduce+0x150/0x160
[  445.340213][ T4229]  ? __kasan_krealloc+0xa7/0x1b0
[  445.345221][ T4229]  ? rcu_nmi_exit+0x6f/0xf0
[  445.349873][ T4229]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  445.355875][ T4229]  ? lock_chain_count+0x20/0x20
[  445.360767][ T4229]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  445.366955][ T4229]  ? lockdep_hardirqs_on+0x94/0x140
[  445.372163][ T4229]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  445.378368][ T4229]  ? __phys_addr+0x95/0x170
[  445.382880][ T4229]  ? __sanitizer_cov_trace_pc+0x55/0x60
[  445.388475][ T4229]  ? krealloc+0xb1/0xf0
[  445.392651][ T4229]  ? do_check+0x2d3e/0xeb00
[  445.397217][ T4229]  ? lockdep_hardirqs_on+0x94/0x140
[  445.402432][ T4229]  ? mark_reg_unknown+0x5a0/0x5a0
[  445.407489][ T4229]  ? do_check_common+0x2c0/0x16e0
[  445.412604][ T4229]  ? kasan_check_range+0x84/0x290
[  445.417680][ T4229]  ? btf_check_subprog_arg_match+0x13e/0x290
[  445.423899][ T4229]  ? do_check_common+0xe82/0x16e0
[  445.428989][ T4229]  ? bpf_check+0x9c84/0xf270
[  445.433604][ T4229]  ? rcu_lock_release+0x5/0x20
[  445.438420][ T4229]  ? bpf_get_btf_vmlinux+0x10/0x10
[  445.443545][ T4229]  ? trace_call_bpf+0x515/0x5b0
[  445.448455][ T4229]  ? __bpf_trace_bpf_trace_printk+0x20/0x20
[  445.454356][ T4229]  ? trace_call_bpf+0x515/0x5b0
[  445.459235][ T4229]  ? verify_lock_unused+0x140/0x140
[  445.464528][ T4229]  ? mark_lock+0x94/0x320
[  445.468989][ T4229]  ? perf_trace_run_bpf_submit+0x124/0x1c0
[  445.474894][ T4229]  ? rcu_nmi_exit+0x6f/0xf0
[  445.479537][ T4229]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  445.485534][ T4229]  ? lock_chain_count+0x20/0x20
[  445.490427][ T4229]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  445.496711][ T4229]  ? lockdep_hardirqs_on+0x94/0x140
[  445.501919][ T4229]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  445.508107][ T4229]  ? seqcount_lockdep_reader_access+0x18d/0x1d0
[  445.514367][ T4229]  ? seqcount_lockdep_reader_access+0x196/0x1d0
[  445.520729][ T4229]  ? ktime_get_real_ts64+0x440/0x440
[  445.526016][ T4229]  ? pcpu_alloc+0x1121/0x1770
[  445.530790][ T4229]  ? __might_fault+0xb3/0x110
[  445.535485][ T4229]  ? memset+0x1e/0x40
[  445.539528][ T4229]  ? bpf_obj_name_cpy+0x190/0x1d0
[  445.544661][ T4229]  ? bpf_prog_load+0xfec/0x1510
[  445.549588][ T4229]  ? map_freeze+0x350/0x350
[  445.554110][ T4229]  ? __might_fault+0xb7/0x110
[  445.558904][ T4229]  ? __might_fault+0xb3/0x110
[  445.563682][ T4229]  ? bpf_lsm_bpf+0x5/0x10
[  445.568045][ T4229]  ? security_bpf+0x7a/0xa0
[  445.572558][ T4229]  ? __sys_bpf+0x532/0x6f0
[  445.577026][ T4229]  ? bpf_link_show_fdinfo+0x380/0x380
[  445.582431][ T4229]  ? __x64_sys_bpf+0x78/0x90
[  445.587053][ T4229]  ? do_syscall_64+0x4c/0xa0
[  445.591646][ T4229]  ? clear_bhb_loop+0x30/0x80
[  445.596326][ T4229]  ? clear_bhb_loop+0x30/0x80
[  445.601040][ T4229]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  445.607276][ T4229]  </TASK>