last executing test programs:

4.797723696s ago: executing program 2 (id=3361):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00', <r0=>0x0}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r0}, 0x4) (async)
r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r0}, 0x4)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0)
openat$cgroup(r2, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0)
r3 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={<r4=>0xffffffffffffffff})
sendmsg$kcm(r3, &(0x7f0000001440)={&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x2, 0x4, 0x4, 0x2, {0xa, 0x4e22, 0x9fc, @empty, 0x9}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)="6f4aa3f9ebbb5841c76c51fb02724f0865076f9924ac43a1cd3f4fb27f2fe849403138cee79e3f8004cae6f83f77f4deababdee538e2e81ccbe1aa4a6e8dca1e32d9a46cbaa34f8269a02099", 0x4c}], 0x1, &(0x7f00000002c0)=[{0xd0, 0x111, 0xe600, "52a2404df2978a4aaa1244d568da8aaa01e74819ef47b6e076b804a3976f208f46b06ff0a0a4a6b17b0bad1a1191c37c421ed93cc3ea869bc0dc500c6a3ed425d6bfa50a19594c057bef7e83b50ee1b3eee2a68b4637135da0aee00652d70896e8f26276843be586923f3d303720d024d4a76c849044306eb09ab2bc4ff858cf5e9131f72e394d10198e84d5bc365101f8ac431ce90db582d31dac6328fdeefc9b3d7f807c94dbbdd78c592f8417beba68f3a4b22650a2a952ecd993d851ba"}, {0x60, 0x118, 0x2, "848851a217bc6fc05ab7d4149d8f185759941780cdc12e6dd9c42c674e0fa3b433ac20dde8058568e1601e5aa1a08b1e3963cb7e2d07650130f1570ceb2834185864e852c02256baf4ee97c8b045"}, {0x1010, 0x116, 0x6, "7492a8dae92abd71963206b882ddf02d13fb17259ed177cacd087f317866572db1c52f9f71d90a5bff904a99d5d08ef1d9b7f3b4e759d5abefca2064752548ffaf7469314d5346f40eef1c51aefcd1ac343d2e9ff27f0b39a30755bff12eaedcd02a2eed194236483203301c81d92296abcbae65b22c154ba519b7348e8304af9ceb845f6e69f755c1427ce047f2c05e2aac2a0984232d2419a9e1d0cd3f41f0f7569adc7f6887f9b6cdbc2039cd765b4396511a2803ff4c606b50fd8495de92dd4eacf7d4733dfa10438f0be86cc22e21625d4a086fc4a6f8083178cb9332f6b450aac1538d5be35f01d01c792f7ab50a96f9c7a50fd577b926a337043f523f03341fd09798e3473d3724b63355436a1d1f3d86c0210da58e6113b103f16bbb4b46d4bb915975c74c36a8a0cac75b079f0fafa783638e2a45b5d044919523313226aa8a3f3103e8efc532faef20273047c964b1e72ecafef8b2878b723d43821c24ddd346a4fb17e7be19e7836d71ccb50ced1874b40213993e6e6ff1a6afe23bb6e507b1b7a805c928cec5164272e6552831bc72cb0aa535c89453e9dddab3c0a03066ef0ab56d624ae002a1f213e85d7be6de0ced1921ac721cb579092b088d3ac58a68381c8ed03527874f858e8bd6f937baad56475ba6736c8cfae508ffaea2dff226c64651ff288d483685fb259a6777fb63fddf48bdf3d922d700df7384f4679eead75e59ff0bc8bbf47300adf6d849bd5fb0ef3ddb55b8f17861c21c2e4a878c9664d54051ae3efcb688594c1c69a1765b1c77af2b18b4d6a730c88bf9f71b9acfb77ce78e2d089066e850171fc9ef5acf46ef3741bf0048c6655f9bc2f0a44ddca4a06030ff6b0a69636b577d33497ca5bd6ec81f66ef914ddb9b2291e5ac5ff27f1002a4e3d7433f7f9888992f6acc61876298cfe98d43eb5f41215bbf597f0fb9bf1995511a4350ba8a0ef0ef4023e6fa445875b80ad1314fcfe4138b69002043364b25dc8f9e8e9ba0d7d43b9f77b67d84c2a7876ab50b53352b765b59a524a4ac089d2254b37ebb4333abd8ac631554eb60fae1f85a877876f37b3543f663ebf69516791413ef4e5b220ad50e8fa2ea23bec450094d50d306defba3d01e309daa00806b60a05e3a8fe47f8c958ffb5a0ace4882260a8fe97f0e9dc62bf503b700d7b0fb352e0622e5d221f2bfc1aaa52e350d32650cd0b927534b3e9986f2b38d2d6e6576339d09cf7dbb0077646ee9492ec144b06ffbd41fb69d51efdad51a84bbffc807ba58a9e33a31418c2fc380aa55b8742769d963b0caaf43b9aafe656f525e02e47c64128f88ebbf7040add9b7b8cb1ddd8c80933ca733cec386c7e1112b178ea08e3fa21b84f001a3deb42356cf8a934b80453e7ddc8db943512e5f824dea754d81f87d3a8b53a817cc712e4ae2d132763d91596e04d4dc3e9c6ecac14eabdae3994d9b61d36f62134fe47c0da308332f8d1d1b56e95dcf5f77c8bf78f4f4ecd858d3de5fdcd8335d7d7578f85173ecf75b8667393e875f7fbb5641ab0af6d6ca5d8f8b0f197514c18ff2e300bdca8a1d0d2ee5956ac68991aa9908ff2e41d6ed5a80d0661d2c95fcf937e2f069822757ef945f26fec7428c0dc844299bddff4067f754203b203ec84bf74dcaafd4b49eafea2135dc324ddb5ce63f673983c0048e51297ad0949e9d89f0ed9cb0125e4aaae2c3ae52798f0d4ce44d39e8b7372746f0ebeabada7c4b684435aa31920620ee69dac5ad6a9d60955dc526fab261d78b00ddc7160bf886a4d891f8523777b938e0399f964aac2726863147e034eb75c6f81c685ff414ff2496b2233607b5ac15e91c7f745ed96234921ac7327f97d1bd28bdf32b24fd4616f44c811f7b5fa2e3ac080ad53731d9812221819674c8a07616c99ae51634c2940f42a2a6ebee3052d5067f8b4eb80b257ae9791637de9e0d5b8a07a03fd5183394bcc7c47e4a233d2d87ae62c0fdb32c97e2e271d4e3c7b6292444a68b5cd28768d312721e030ad0517662be014b34cb02f7247bab09e3a4d1d0f357cff10f85021575756be9cdd547797cc50f2e25903d7e1a0b168892e8b4b2406a52f0f37c362e7cfa2d68a6221b0fa2880cca572183c9f1aaf99ac079974c15f7eef7cc2316081ade6fd9cbb0eeb0a8765ac5a3840a47e356541bf41d4a70c28a56bbedd4003dea13fd1177f65a35c39c2eb79bc706a8de3ac5a743ecb705a1707602b81757e9e951c6cb1717fba69981e4674e7576779a6b95c8e09a60e7935d7d4ffe4aaf6d0352c9eb0632d085cd6ec155d0305fd0904d81cf887eed37d9eeed6208efa1878c8149666bbb29b273656f9f4ce0f20db1bbb057a3f71c8c6387951e7b28a59033565ecc3e4d1d6363cb050a1729c914dd0848e861995c6090d7d2c3db26ae02b5ee05c916128a663abae0609ba88e0143b64c58434ea5ae96a95b0b275d732de89d326d772748dbb108addefdbcc060c959fa6ed09e763c4ac2c6d4154e6e4e79c55f9849ab9acc294844ca53b3637d419e9f74681cda69813c15f84e9372a6f8f5b59fc6d6e0f9c23b196308d1223926a24b245868e244ef9e187920e0fcb1d97141e695adc77cb20b0dd69816dc7de49cb39e5717f4c3bda4796b0c27066ec9d1e34e01c1d4ff7ddd09a575847cf74d383d3fb1fe4f39e4c283c17a66e3830797032de4719b6dac38c850979b0969ba0c191b2494781cde9862b6b6412d732d2c1b533a50ff27629bb86e9f9d4a2626a71efe435517b74979ffc79f276b6cbac9f6793b379fdbebdf90dde8550f2719edcca3d6729c91067a90f894306555c5c201709671d5541057a70e38bf3f559ebd80fa24a14c8c813d647f66658fd2d2e75d043e2115d9fa4b0efba0174692c925cf423c1a7c8e23f839544f55c8d8f3ac876c49af95572f906a3b888c128db20e7e48877b892163152b0de03e009e34540af246737785ccfb686f9aa4aaee5bd30b025f2cf9dd74a103dafaae1ef75c53767e4f46c89d39176a1cf0166feac41eedd86c4c31968ad399f77975c2670b4a49b5360c3413d512791f88800fc1becd3e47199c763cdd223b8068ef85f3bb81d83133203b119dc200b02b2cb9c7dfc2f5fcee9a379284e0eab7b94e0a4d78f093253114dae5260acfcff8fef8fbb93b987ef8296e79c9d94298cc8add9ca96354385e002510f6761addd9863d16117619a567b3fe38dca6752237dd4f72acfc89be484105af5786477ca92f796dda1bd0be9e9b81a5b1cc0fe9214f1afb80ceeee554c780b6490359d5fcdd570c8f3f05cbbaef5e2c008a9c9298fcb9fa2ae47cf66fcf563a2911f428c9a09ecaf72fc2da90bdafc14893cf7dbd08f224b3ba6b54aefaf92325b96c568d5e2c5f96fbc7de9b29af4ad94f0fb8b062bd68df7abdb4af4d45f4d1a337a1c89cafe909566ea21d185023b1ed8c9aff8532e832ffb4d4f4e0192948eaf9d496456d698f6f202f4928e3f8b6172e0cd8329a8399c211f6bdc29ab5708e85603c36465786b62f4424804dbea7a9cc4936dc81ff93bd697df093961ab29229d934d6f497a8c37f78ccd71c03a9592cd01f06fa6a422cca53f566da61d4951414c08103751acbfbcd135ff94e29574ee7a4149b3436d1950cf53e766c8541aaf83f317734e94d72c558f1598731dafced0561331dcf91af9c3c8f446e84a798d451d75258b8abdfa097bc5cd7778e905b8e597371b2543401fca597aa0d568e7095049bbb4982fda86e2a891c1b5f0dbcac56361f0b1d67108d3180deda438a9844c3f06f765ec2452f386ea90afdb117dfc93ae43d1448b516949e1d1f1a5d273eaa738dbc3e021300eebe8dcb4bc4f383b43cc9bc05ee6f7612c51d1020341e23471c5fa1879b7d43ef5824890a85ffd6fe9d51a2cf6b6551589322d121c854ca459d3fcdd104831966d0733cee1291c8b9caaf1981f4b29908e8bac6a90a57fcd8ced92d3828b8ee2df95f41be4cce63cbcf7c65adf02ce1ee451f58f92747e59c10556fcf508d3564b84045c7da77831ccd20973d85d0c57e024ffd4bb7d57443774493e836164f3ac82015f9c9d0b2a04afe55426927e29c6bb45dbf0b3a8a07c64e8d8313d29c7d4b48761c40b0bfb0001b893868516fefe0d2207434099a0462c65f11e82200eb5e816877d52394febe1b54f3543115857397bafe257ab87e93321300efd973c656e6b0ef981b2f31ce26482792b00ef911e34637a25251af14d3c584e38999255c9e6c20d9e580e0affbd95f3b4aca88e42ac8c0ab4e9c85e8a6a71172897ea17c45105dbbc8d9fd2ed03f81a6f864338f185e35c2a9d63522591f39b03dda7c009fd1f4b6e289965c679c3e2fe67a89e36aedc71e8804aa23553295f214ac2eadedc825435d23679ca312d84c4021cb7e6ad26fa10e4e77b476e316b552a7e281aba92a1bd6dc6eadba705d3c2c7d2a9b9cb52a0e8951b51665ca500f7d87dcea950baca6af4e263bfc1f228f091112ead18921157fe136e4e969fcfdc043c87712ad1c623a6bcd2131570ead25b1445ae229014b26fbe65776c63394ebee715dea264b59b3d32bef46864701eb7e0a70633c3f5f2e1fcbec18a845cf01da97162d4353f34fa888cf20f02d9571bb1a0437e1f7b91ea87150265a9ba46b823932ee277ad88b17d66925bbf0c6881e1cbf9b5f6e84fa724c8aea0e4195a6e722c05a642229455d13ffdf5f0da9264f9f9911c00612d92aa5f5feef37bc72d5d3ae6c7472c7f587a2fbc5259dfa436d40517e0e91790ea3c0a66975175c66a6f13fba59e50169c81827cdf7d8c84e5b909c4855b38217afab47daf399162b5a7689dd5a01f8725520317b12ba7df06ccdfb438e32f38b4b5e7cabcb6fb0c56dc9532f986398989baf567c26efccc33f4518755d64f2d67de211b41a8d24fd607a646fdcf2d1fdc645e5acb8305b76885926baaa3185e4bb997a7dc99a1a9e68ca53e7807cef1ede1fe6765011973ef1bb6a37a2785d8d530a4e2f31d94f955d199b6caeb71a4d1d668ca51aaecdbaf0f5d0edec4df49009ab087d25aac93a4f7402708af889b42b4073d311a1f1a4a0f905079206757bf571e6c4644296434cab3d06319aeb93badaa1cf5d2a8286fbb9fe772c1fc1637a6f49a3d6972778e5e98562dcca59530bd191e6eb1b10c09936099df01b8ed79feb714607a815a2cb5c306e3c0b950bae0b13e419227f90b43de077a5798afd1c7876641105cf2a1f19bac468d19016f3e8018f8418b0d190eb34259f3a72e61050263a93dc4274a5c0f1c19f793bcf442b9c811256baa228fc161999eb7c23b3dcaaaffdc7aee35272ef316650e1d40bf796999f59a32bb1529bdc0896fcd154c30850724ed2da0768cd175404b2c85a743ca63ddeff01d9b7fbc46ef9de153474dd53d8ae99bb2b4de0f7384601c8bcf9f18fc427964845bfd83fafe926a87f18591c18e1a3cc3bb726485b85551d03c492d7f1f9b4525d50e21ffdeab893040b01fc6a029505bf2da825f104abd939e49504939d204595a585e5d061c4cba096bca02781c2f7e25a916ec01a60eceb9ecbd053b1cf6441656df0744fe5c0b1a409021bd595546462a955ea6c6e11a0183d9b010b493d6a7197c855e2df33d7995277a6e07e56c3d0a68d0ba0a33bfe371d1d125b2b9d05420846742191eb7b8c06901a28821418b1d9701b925ed144e558bd6a7bb81ab04eb67d6459dc2d3388a26109501e10f504823440a12e9781ab3f2f3f3f12111f1fdd2b7c47"}, {0x38, 0x103, 0x73d, "d8b740f7a45b1a2195833425221551088a29be2bbc623676bb29dfc5ff1298a658bc9f0805c866"}], 0x1178}, 0x40805) (async)
sendmsg$kcm(r3, &(0x7f0000001440)={&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x2, 0x4, 0x4, 0x2, {0xa, 0x4e22, 0x9fc, @empty, 0x9}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)="6f4aa3f9ebbb5841c76c51fb02724f0865076f9924ac43a1cd3f4fb27f2fe849403138cee79e3f8004cae6f83f77f4deababdee538e2e81ccbe1aa4a6e8dca1e32d9a46cbaa34f8269a02099", 0x4c}], 0x1, &(0x7f00000002c0)=[{0xd0, 0x111, 0xe600, "52a2404df2978a4aaa1244d568da8aaa01e74819ef47b6e076b804a3976f208f46b06ff0a0a4a6b17b0bad1a1191c37c421ed93cc3ea869bc0dc500c6a3ed425d6bfa50a19594c057bef7e83b50ee1b3eee2a68b4637135da0aee00652d70896e8f26276843be586923f3d303720d024d4a76c849044306eb09ab2bc4ff858cf5e9131f72e394d10198e84d5bc365101f8ac431ce90db582d31dac6328fdeefc9b3d7f807c94dbbdd78c592f8417beba68f3a4b22650a2a952ecd993d851ba"}, {0x60, 0x118, 0x2, "848851a217bc6fc05ab7d4149d8f185759941780cdc12e6dd9c42c674e0fa3b433ac20dde8058568e1601e5aa1a08b1e3963cb7e2d07650130f1570ceb2834185864e852c02256baf4ee97c8b045"}, {0x1010, 0x116, 0x6, "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"}, {0x38, 0x103, 0x73d, "d8b740f7a45b1a2195833425221551088a29be2bbc623676bb29dfc5ff1298a658bc9f0805c866"}], 0x1178}, 0x40805)
r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001480), 0x4)
r6 = bpf$ITER_CREATE(0x21, &(0x7f00000014c0)={r5}, 0x8)
r7 = getpid()
perf_event_open(&(0x7f0000001500)={0x2, 0x80, 0x20, 0xd, 0xe, 0x8f, 0x0, 0x7fff, 0x800, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x101, 0x2, @perf_config_ext={0x9, 0x8}, 0x4400, 0x5, 0x77, 0x2, 0x1, 0x9, 0x800, 0x0, 0x8, 0x0, 0x2}, r7, 0x8, r6, 0xa) (async)
r8 = perf_event_open(&(0x7f0000001500)={0x2, 0x80, 0x20, 0xd, 0xe, 0x8f, 0x0, 0x7fff, 0x800, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x101, 0x2, @perf_config_ext={0x9, 0x8}, 0x4400, 0x5, 0x77, 0x2, 0x1, 0x9, 0x800, 0x0, 0x8, 0x0, 0x2}, r7, 0x8, r6, 0xa)
ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000001580)) (async)
ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000001580))
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000015c0)=r5, 0x4) (async)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000015c0)=r5, 0x4)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000001600)='\x00')
ioctl$TUNSETFILTEREBPF(r6, 0x800454e1, &(0x7f0000001640)=r8) (async)
ioctl$TUNSETFILTEREBPF(r6, 0x800454e1, &(0x7f0000001640)=r8)
r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000016c0)={r0}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001740)={{r6, <r10=>0xffffffffffffffff}, &(0x7f0000001680), &(0x7f0000001700)=r9}, 0x20)
syz_clone(0x800000, &(0x7f0000001780)="154cc7c64a82e8c9b838c5be555ada6732dd017bd4e3b6501d50f2070800f7400a11a946db7f3a8aa8a42cd847bb2c937e10bea6f140766c825a89876b6d68bdef66083add66b112073010882532fc06a745b8b5d6ea94650108cafc960f5d31cf7a6d0709dff175bb747beb0eb35c96b6d9a74b2a847682c31aee795cb7fa1726499eacd94bfcb06fd5094c30d19ead88c327b2e9bcb2fdeb", 0x99, &(0x7f0000001840), &(0x7f0000001880), &(0x7f00000018c0)="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") (async)
syz_clone(0x800000, &(0x7f0000001780)="154cc7c64a82e8c9b838c5be555ada6732dd017bd4e3b6501d50f2070800f7400a11a946db7f3a8aa8a42cd847bb2c937e10bea6f140766c825a89876b6d68bdef66083add66b112073010882532fc06a745b8b5d6ea94650108cafc960f5d31cf7a6d0709dff175bb747beb0eb35c96b6d9a74b2a847682c31aee795cb7fa1726499eacd94bfcb06fd5094c30d19ead88c327b2e9bcb2fdeb", 0x99, &(0x7f0000001840), &(0x7f0000001880), &(0x7f00000018c0)="4cc1e4b89f6ad342b064465fe436452155bbcab29dc0c806b28676d765325868bd2a51d9fd8173d0c3bfbb42391a4f9a8874fa3c9e001c3fc517361a2db0e9a53e75a7109eb2ed3960cf395515f7f32a8b212d2e19efac1fa860cc759a201d828ba21d665416dfb4ed1ae49c5061da44876e3fed7f31d969d1dd39874dfad67cd49489e1d92ba5f65169d85c3899eddb0b79f4c2e3ba275824f2a1c80074c682681b98826c50feb303aacf2ddc90518aca9ad567fb0dbe4d41bca53de409583c46c9111e97672b85d94dd65ed19bb397085dbcf778c1c64cac64f62892e0e43f560dd91ea20f0a560f2bb03064c65ee5813e0a0f1e79342d27705ec083801f57b3e452a5f2b98aafb5b5ff814fec196c3f31a745d2b79b90eb7bb7df79d4e09a491df71d1e915f3290f57a5e82008237d280ce6d98b40a3daae344c5104f089e4bdce214104ad5c0141c920c9befba926493242a82bdee1bea6a549d380739c40121ae6d8b8016d2b4df2aab5a9bb0a978d3913cff4e65f3a046d2152fd7b725ba94e64f364a64426b010681f1b5a79483cca46f607ce3dbb864585fd23d5ee60a4399aebdbd117df75a953274634ccee7981db538a253720725b177beb6548623dfe69c2d458fa616f9f46bfc3a6333a379a713996c4ae1d6f79ec866d99baad8126e663d534100d655082201d99b11d3d41e97c5934f80c291853ab8d033c7a370a41349fcdfe6402ea16f49a9b21b5e5b290b5bc8a41f14b7beca7de5fc779e0fac144ddc968c05a7ef33cb88883d3100f69f684915d5b5530f68d7deb77c4ef9ca6c19720006ee19b84d124121a64cd49f0ac6fa0787bd006319f6857f0653484bc49455ff9e8031c939d47d298e80ccd34c2e5386c8582ab68fddb2036ed4c9ad8fbd721e29b25b880b2f7f723f99b4d1854f53892a5aa21b3431db5be50a2adc43214eb643aaf2b96e56c668ea073771b29e69ddbaddc3cf2f5391e6d77105fe71cc1856408cecc201d998fbdcf463cd66ce07af618450814266d2b637c72d5a813e3f629c4bae53d66254b5a723cdd5522065ab65f2771d0996c75c032c6c578ae7c346532a92bf61ca0a5afd6278d89f21074921a2e56c8678a2e6f8e5707ac072874e7e6dea169065317d04d55a0624d6132943f1fbcf8113b0c8de4a0a1f99af729f24006684742e35c439ba5808e8e54ea028774dda3ccd3198d58a9e7a92c451a9bd3dbd81b30610f2be38fb8e1e7c2fe6eb193711430db41872ab77e9f2dd8d8616bed288399060e9d6eea2374544c7b0c80cf620995b371ebe1c7cc9e1d025139e46ecaeb623ec6dbf792f545f001069a0aeff8ff2768f8b690cb6a5fc32b43b9199086e2aca043b5eaa0241fec0320bf6865f01f2d990beb571dbb204b032491a628ad173f80d6739036c9cbbfd211a1b00a40d2614c13ac0eabc7b920f32e3a3bf87aa916ce296439b4a21902c3a364e79db097d181f907edd491405e5b1ae5f1b975069c0dcd589728c83142cbd6824750bb37c6a01db561744c0447717140098fa1ed15baec19cb268a1e42cfef261b685a03c4462fd67a95f6c52e4c534e05719bc23e5804cf731b3aad65b6870bd75fc87ff99028890cee40fdcfb12bceb92086adccc95f24a72a217513bf3623c6ace3a601848dc37d0b80e51b845ce9ee2c54432db7dde6a92bb868fdbd7acd19eaa05a53ca2f2c108c5f4e9b5ffaee9d2783864709f1e0b35e002d350b87c93bc50984cdcce7210285792fe71de5bbd520f6b30714bd0576a426102573a5da3bc7ebf034e53f27264e0afbe09b365c40dba1364ed7cab42f85c6f19fbededc1668fb7fe2352b907489abceea8837bc33a3cdde21613fb85e1aaafe20c951233af9cd9b63c76139db7cc0ec1538f59b4d3c9e116d01fa8ff23ec96e1aa237d0678b603b498b7b1ee0809f389a873521df375e76b479f5f5fdf81ff8d5a2de6d7c5c39f35c5cc793267ab741c5da9e6dea88b8ced3016075debd409e6f02456aee7628a7e8d94733c54923bc6c4db1762a2ee426996dd819790d9a1f49f586d45ecbd011164745269080d4d4be18494ea8e205e0bb52e612abc97e470199bebc721e3bb45188912ca831fd2e061d7cf3b65458a29adc6a560b35f9dd6c621a767b473a9c6688f09ecd4332331276ad8a38f6b34e2efbc126ca1b83fafce735413c39dac8af478e6b8f89e58a1ce377f87cad5b982025fb1640a89987c20b37a01223c2eb673d4c96c6093ae5f1556b075be810fd2c3a4b0170953880ce26eaa5958e1f0f5d70bdf93bc9f7fa6148dc73d8e234770972efb4d382a9920c4dec2cbf9fdf3ff8ad71d3da8f487e43e098d026e162d5f119b55ebbfeac0a0d9c6ce5ce95c07f6ee0c6c1ea1ab1981fd0424efa80533e52c4f3026a5f67668c5b73ccee8432b87cb93442bf7fc2b85bad439c45fa9e0e792b06b831db3e3a9b3524209e6161ff70e3dbe2f0fcc73df83d5867dd08cc088db0bd3856c9a700ed3c3133a09a0a5a3718afd7519c2b1561b94c08a2cf8a5844347f99ca85bc3ff09d43b764e95117085e27e1b3296a2f4af7c5d268bfc011c2a13841c98fb72a95a4bca3bd762229650746fd9bc9c880a5b7b71cc118d6da002442c34afc296059972f96cf37d845e25b61614f7b91192bf4833b8136c46dd72834dd7ef2cb97b93014e2ecc46216bc3503544e7f41842a43fa1fd07d7df0913865cfee757d7947a513c3d9e48cd69d625380cb8cdab142f337ba226cb72d816960c900b388dc3a57b0b9da5acbacb9dde3d3930987f1edc17d53043cfae72272bf224adf68a86b3a1acff88fedea6b30be2d22f91cf41539a30eb9572034f0d159ba90418b36304d9846ddf5b0a4d1c4e472717a86135e9eb26b6294c0a3c80f3218e4ebab651ae89daac472e0a09f896b002a9f6a6a5849ebeca96aca1c79ee60c3bb21606bb909a447f0a47411aa53cdd073b6adbd3802a863081628ccf5cf5d5233959734e2b02e3253fba54d6300c300067d2f3bd70721689d8285f741b3823b8cd3769e006145bf755c0f63a56583b467647cd87b21288180386c823ca74b53fcd807038f51e41c339368d53dddcf3bd9296b7ecea2ac6fabeae1a900d863c426040d98e82da8cd38416c04ae3f52ac92f8adea2516cb89ac0ed1c51fa992b7563cab943fd9ee3ce2d37ce394944689b1934dbc99041a31a15b55df04109f6a2bcef31a90722f71a479c68f25c7a343d551d99b06829c82c731341369c4d75ed1e8e1026ed26b90ef954d4d5cfc51e198b7a407125e74e395628159cba6319cdb58d9f5af7c6a7a4e0b6a4af045d151c0825f689911618150bcacf1d2579c24aa2ac79af96946490d12706fd595a6beee5eaaf8fe2ec8d101de53f981d29a8d95b2bd2fc91abe9651fe998e4569953554e6f2c185d643be7f357dd204dda75d342e8f128d27d4e607b261c19973a4e71dc568accb367eb5251a6d68f970911a27f299c515fe497ba77420d4047249b34fb72d399d6b592a040caf432ce31cd19f5e80571a3a09a85e0e158e0a230dd136a7b0c5d839e9beba50d40e2bfa64350f2f0c9551acc7e4263e21f33167a16ae6f680361dd82c41de5ba757e89690a3f75e3e13e2c73c66ed92ddedf14d986a5859daced3ec256fddda8c7fb01c2eacc101500f412d1e6d63735cec9a79d35495e85cef2f528b13d16e406b1c5a0061a35bb89fa631584f8711517ec6c6da0d9f203e1639bbc4a8ddcdb6386f17be8b9a99c3c5e18bc99d43e27ef372ece2c52cf02d0569b50768012c0b037ca63d4056b552bbcb3a2e3452f3571825d2be1b03e1ebb715359adcfc307f5790e6d5d88cb4fa4b6ce978c2b0da57c069cc809797573e60dc3766d70e2d7b728786adc696b6452daae32ace76136054a8b0a774360c36fb8842cb99e0ca80523545770ab94dbb3027cc462d52233601dbeb263d6e7aaddb380e1c73cf07e732dba52bc76ef49f6863b69564934a5045874b3323aca538533abe40e865bf67fd978404fe96f3fe1aa8b21918334ace1113f6a5d0301ebdf9035b5ecfc8c952510d29d3ff238902fd615ec42f8da7fd6622cf9dd5c37ce6bf2232c42f80bb24cb439e15abf67032ace8954cb44e2b1b1324c10947433ea0d614667f6effc54c3aa9b489be2e06f5cc81c43f45636b670b594e07fdc2b61dfbcd3cbb7ee0ffe5297fb1f75845cb8cd5106b8e97ef6c9054fd37a5c43737bdf86a35ba7a9114c3d9a3045a165a4477078b9addb8c597bbb0dc2cbc02bd8987db03ee91aa03f3e57532500ddb92b51ec4235d28c35c428c19d5da3c94c011ea767696717b37cf9c3f726d054e3ff84fb3d98179c3e7ffebeba515587b7e8c3e2cd3bcd0a971429d8d38942cc2822cfc528d3456aee68b3d621095554ba647c9c6549270d3690758ea1b783bb50f3ca41f95db3f750deacc83b8ae84baf5a3cf10c59da0a27b34ffe60cc3739523f190d9766e99a1b25ea92618ebf87e05d14f16891df52a8eda9acb2f536dca58a34de1f332d3e2d24cb1d6a48d191fa68af6251f0ce800b3b3c6835569bfab497b45c42d157c3290427eabe049cf968873e1b680e5145c65a5950f6cabc3305dfafd9f8433c30e5d101846b685d977168759d0bc82f2dee4d0ab3867097d02c8104543152212f49d5b1c1b57e07b11cd7e7c33f9be3a1503cb9a2d00abb2b949ca5d576fff5932459f8ff5fc03049ca56e691bfb305877e16362736252ebef31c3b9d90ffe8b56cce197464dd01862deb928749558de376976dd72b797900e896187e1929abfc2f6af1924d531b59a2fad07ec1db24f0e8ce52d9828e465f3bf851c22c76b0233fccb8a77313fe7103a6c44cb97c7470f511a4c30aa1dea9f61f3ebe7c8a22638755cebbec1d5339dd9069c514d52029cbc24adbf00887c3ca8a9785773e32c75a8b129f942f33f7328303a67f6f134fcedc51dc249f5f5b616cb10da4bdd99528770b8c9c065f3067efec11205f392c2c3994ab20b4043f77e0c43dba4ebd8563a4bdc04867f074fb8e60c027fc0a103e472748bdd5f48b0ed5a538caf7846298194208754a66fe9e0f7b2c78d2a69fa471969330a46196ed11c65f4a6c8f92e1fad144e901e55a978b9aecdb7a1988f4aa256d9965bbbbb27fd7d4bd1be1c2a79f590a35ce42c601063d80e780405f79282ee9b91da8ff5827f60d16d977636fe68c0c2bd815fe48fedb1efefa81473768a58b31b5e02694d26bed20fee663d8a9e7c5cd5ff5980d72bca407a49759f4fce470736fd8a32ca8d26323c8cc7108778b8666d954371e067ca4df5148597aa989726bcc6886374b919b0c69092f75b96eb26ae4263fb8765d199f84108283d223bd82d2e204ba9cce0c454d9d6751f857fff3f145fea72742162d88cec9c1a00df316e362a50cb0eaa3917fc033156632e54d5ace5d134df00e471b3d4abcf26939d3327e6cdd4de9736fb5028b70a5f601fb8e3cd2fe63afd12779997ddfecae58b581d211db9be0cb3efda9635da56cdbeca016d8939943166fa0bd32ff61412914f0f9d762a7dcb47fdd1465b872288ea9ea6672553eb8b6c11c61f679a60dc3325a97081b849b6b1ee6afed1551dc0a68323c0d12265ab442ade15dfa4580123f4760de2e26f1d5cdb3a1c7c3e58f32c48ec97b9efd26943e47b8b43f5a510e14ac388f2f6fc9a91b8f7488263251fd86693d6b2cfb984a1881d9ff40197c7854488d1d5ef735daa4c1e798d8528d0fdad50bc095")
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f00000028c0)={r3, r6})
r11 = openat$cgroup_ro(r2, &(0x7f0000002900)='cpuacct.usage_all\x00', 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000002940)={0x5, 0x80, 0x3, 0x81, 0x40, 0x9, 0x0, 0x100000000, 0x34a0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x354, 0x7953bc7e530dc163, @perf_config_ext={0x7ff, 0xffffffff}, 0x8, 0x8, 0x8, 0x4, 0x3, 0xd, 0x7, 0x0, 0x9, 0x0, 0x3}, r5, 0xb, r8, 0x4) (async)
r12 = perf_event_open$cgroup(&(0x7f0000002940)={0x5, 0x80, 0x3, 0x81, 0x40, 0x9, 0x0, 0x100000000, 0x34a0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x354, 0x7953bc7e530dc163, @perf_config_ext={0x7ff, 0xffffffff}, 0x8, 0x8, 0x8, 0x4, 0x3, 0xd, 0x7, 0x0, 0x9, 0x0, 0x3}, r5, 0xb, r8, 0x4)
ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x40082406, &(0x7f00000029c0)='$\x00')
ioctl$TUNGETFILTER(r11, 0x801054db, &(0x7f0000002a00)=""/4)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000002a40)=r11, 0x4)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000002b00)={r6, &(0x7f0000002a80)="4bcc5aceac24cea98f99d77e33c6052976acae538aedfdcdd526b5ef75a2f8984c2a652b5cdef82a3a1f9138280fc282f069f02103dec124ef868f482e17358efbc5cd636216d931c337e75aebe242e0afff1b8026dffc23dbcd14"}, 0x20)
bpf$ENABLE_STATS(0x20, &(0x7f0000002b40), 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002b80))
mkdir(&(0x7f0000002bc0)='./file0\x00', 0x1) (async)
mkdir(&(0x7f0000002bc0)='./file0\x00', 0x1)
r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002f80)={0x6, 0x12, &(0x7f0000002dc0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x681}, @ldst={0x1, 0x0, 0x6, 0x4, 0x7, 0xffffffffffffff59}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x657}}, @jmp={0x5, 0x1, 0x6, 0x6, 0x0, 0xc}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}], &(0x7f0000002e80)='GPL\x00', 0x5, 0x14, &(0x7f0000002ec0)=""/20, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002f00)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002f40)=[r10], 0x0, 0x10, 0x3, @void, @value}, 0x94)
sendmsg$unix(r11, &(0x7f00000030c0)={&(0x7f0000002c00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002d80)=[{&(0x7f0000002c80)="2e2d41160294ddd1b20eb6b77411d5f4f09356178c8b9234f1e839ae0903cc33123ad9b00186c7bbba704cd9439744db25ecebb876f2afe40700b5249141589c0dab7bb9ef2cdc9564456e65c9ca277b48f784784652382dc78b43aaa8b95add0e5fbae4a2b155f5f2e09572404fdc15a64c33234b1b9172b382b40c63fffe5d6d1c09119c70b8a054b18badc77b75a05ce41df72228bc444549a3de028cf3b01c4ed5b4583248e01ba09e9a0d7b695b", 0xb0}, {&(0x7f0000002d40)="3bf3d08f", 0x4}], 0x2, &(0x7f0000003040)=[@cred={{0x1c, 0x1, 0x2, {r7, 0xee01, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, r11, r2]}}, @rights={{0x18, 0x1, 0x1, [r13, r5]}}], 0x58, 0x85}, 0x4010800) (async)
sendmsg$unix(r11, &(0x7f00000030c0)={&(0x7f0000002c00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002d80)=[{&(0x7f0000002c80)="2e2d41160294ddd1b20eb6b77411d5f4f09356178c8b9234f1e839ae0903cc33123ad9b00186c7bbba704cd9439744db25ecebb876f2afe40700b5249141589c0dab7bb9ef2cdc9564456e65c9ca277b48f784784652382dc78b43aaa8b95add0e5fbae4a2b155f5f2e09572404fdc15a64c33234b1b9172b382b40c63fffe5d6d1c09119c70b8a054b18badc77b75a05ce41df72228bc444549a3de028cf3b01c4ed5b4583248e01ba09e9a0d7b695b", 0xb0}, {&(0x7f0000002d40)="3bf3d08f", 0x4}], 0x2, &(0x7f0000003040)=[@cred={{0x1c, 0x1, 0x2, {r7, 0xee01, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, r11, r2]}}, @rights={{0x18, 0x1, 0x1, [r13, r5]}}], 0x58, 0x85}, 0x4010800)

4.058192976s ago: executing program 1 (id=3364):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa65, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021f080211000000040000a118000200e014000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100", 0x6c}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

4.058042565s ago: executing program 2 (id=3365):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x5f}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a33120813", 0x0, 0xbffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000240)={'bridge_slave_0\x00', @multicast})

3.869462068s ago: executing program 1 (id=3368):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'pimreg\x00', 0x5dcf70ef8daa5d0e})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$kcm(0x2, 0x922000000001, 0x106)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r2}, 0x0, 0x0}, 0x20)
recvmsg$kcm(r1, &(0x7f0000000580)={&(0x7f0000000340)=@caif=@util, 0x80, &(0x7f0000000280)=[{&(0x7f00000003c0)=""/132, 0x84}], 0x1, &(0x7f0000000680)=""/255, 0xff}, 0x40000002)
socket$kcm(0xf, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x23, &(0x7f00000002c0), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a08e1d891b00000711089000000000095f2ffffff0000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x30, 0x0, 0x0, 0xfffff000}]})
r3 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f0000002200)=""/4052, 0xfd4}, {&(0x7f0000000fc0)=""/198, 0xc6}, {&(0x7f0000000f00)=""/176, 0xb0}, {&(0x7f0000000a00)=""/196, 0xc4}, {&(0x7f0000000780)=""/110, 0x6e}, {&(0x7f0000001100)=""/4089, 0xff9}, {0x0}, {&(0x7f0000000240)=""/137, 0x89}], 0x9}, 0x40002000)
recvmsg$kcm(r3, 0x0, 0x0)
recvmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
write$cgroup_devices(r4, 0x0, 0xffdd)

3.849317288s ago: executing program 2 (id=3369):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r0 = socket$kcm(0x2c, 0x3, 0x0)
sendmsg$inet(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x20000003)
r1 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r1, 0x6, 0xc, 0x0, 0x0)

3.74112845s ago: executing program 0 (id=3372):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2442, 0x0, 0x0, 0x0, 0x0, 0x4977992e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0x11, 0x200000000000002, 0x300)
close(0xffffffffffffffff)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
r1 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x6, 0x4, &(0x7f0000000040), 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xe)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x1a}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r3, r2}, 0xc)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@func={0x2, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x5f, 0x5f, 0x30, 0x2e, 0x5f, 0x0]}}, &(0x7f0000000280)=""/30, 0x2c, 0x1e, 0x0, 0x8, 0x10000, @value}, 0x28)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='percpu_free_percpu\x00', r6}, 0x18)
socketpair(0x11, 0xa, 0x0, &(0x7f0000001080))
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r2, <r8=>0xffffffffffffffff}, 0x0, &(0x7f0000000580)='%ps    \x00'}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x5}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7ff}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @jmp={0x5, 0x0, 0x7, 0x6, 0xa, 0xffffffffffffffc0, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0xff, 0x5a, &(0x7f0000000200)=""/90, 0x40f00, 0x42, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f00000003c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0x5, 0x2, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[r2, r7, r8], 0x0, 0x10, 0x7, @void, @value}, 0x94)

3.552723252s ago: executing program 2 (id=3373):
socket$kcm(0x10, 0x2, 0x0)
getpid()
r0 = perf_event_open(0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0xffffffffffffffff, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804)
sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0)
close(0xffffffffffffffff)
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000040)={'bond_slave_1\x00', @random="0200ac7f7f00"})
r4 = socket$kcm(0xa, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$unix(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000040)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_int(r6, &(0x7f0000000280)='cpuset.sched_load_balance\x00', 0x2, 0x0)
close(r5)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000cc0)={0x2, 0x4e24, @local}, 0x10, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a48500000004000000850000000f000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000002b"], 0x50)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)="67a18449faad4d2cc38c932171cd36cb7078d0859c42ec86617b671523024a7804b2b8faebdc0844f36daa6ab8e65aea319ed7bd8f78aee04ba5ef71ef6e924ef3aa215f57717b009f1c5f4692a60334e1353b38ed8860effbf815e567db3295542205f9bdf3413b6c738d84fa08337bb9a18e0ef2834aa188b3df6af085a48a6bc63ec05932d567cf2b8238874d90df96575d15f011f9dd1574f2a1060000008951683dbb27f4bdb0b00c2f680ab19415de1f459e02e98828a0d8ad97a0790893e795895e59dbf05b45d17886234c68688e86f78eb919764563", &(0x7f0000000340), 0x894, r7}, 0x38)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1')

3.552466802s ago: executing program 3 (id=3374):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x8400)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33)

3.339709525s ago: executing program 3 (id=3375):
socket$kcm(0x2, 0x1000000000000002, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, r0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xfd, 0x0, 0x20, 0x0, 0x0, 0x5d31, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x5, 0xfffffffc, &(0x7f0000000000))
close(0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:* wwr'], 0x9)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r1}, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x0, 0x6, 0x4, 0x1, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
syz_clone(0xa00d000, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600a40003401c000100035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
close(0xffffffffffffffff)
openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r3, &(0x7f0000000900)}, 0x20)

2.9798984s ago: executing program 2 (id=3376):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x10}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='kmem_cache_free\x00', r1}, 0x18)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r3 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000040)="f0c2267098da4c61279bfd4cf56f83a0d17a4329a3015cc704f704479c60331f1d9ac0bc9ac06af913084d35a9b235230485e16b4c190ad23005a28eeef0c00eac352e5677c183507dd227d0d00fb40ef7"}, {&(0x7f0000000100)="6bf15c9d886412627f438b44"}, {&(0x7f0000000140)="1a8ab875631aba92a8c0d8d22140bb28c08056c6c7059b628f56e8cd36ae34b9f60f5c871095bbb6473f51abffe97eebae9dbd2e18747dde4d8e55aa1ea00516ddeb0ec39583f784f7db9313858072a7395fd1ced9f4414dcc2bdaf5934da14992fad1"}, {&(0x7f00000001c0)="20de23a3e48824b5a1d2bbbc570bf903ca78f64e789c206aac6dbcf843a188f40195a7435080b1d44635e2d85c9a496dd73e89a5ada4601b055070e6aefb70ec"}, {&(0x7f0000000280)="72a68b492b6fac22d5f7e3797d3fb1bce5ed73e91b939762c95737be0166088c40efb96459f562b9ed6d0478892b954c209c39c56bc65e6cbb5f73c73aa29dde37eef84a"}, {&(0x7f0000000300)="6ff95a8ed91202e2fb98aef2c168f1e6829b45b3fb9199d0c87e04062539fdcd2e5f113e928547b259419d1580e8779dab61b7a3e38143b95e6503860e7ea0d8dd19d31188997149333611d72296395a14c608af451a69d760c9de72f68a4c1ddc23d71ace218eb4045f40b15f8d5c0c80b103ffae1857373b83c2bb8c210029de7ca55bd941c25f0dbbd2b9142b85554746378de7bfd34a0bbd3ef879eeaef713832112cba63d4750e582409e180c4c1fe78dad8383ee0961df3fd019d5dde12f30c322004bcd1ccc35a10b4f26cd76ea80696c8285b902a2efc3bbf4c82be16022e64c13edfca64c18c02507ef182c4eb4c259d9b229800105ab0f496e432676b22b99d4f0285240d89740e90cc184f44a45bbb5740f4fd76b1b4fc33cab1a8a84f70cb8f396e16c29b12423c0f9b967efca0b519bd27c5c0b76c01906cae2e9c56c8ad3e823d1a74e25113344adf6509f9d248e5bc1411943ea20ce036646c50522a638a92ccc57a355221d59ed66a894983a3488b43775dc3162f11ab61d8cd777ca044a7be68e2350f96ac0dbf7383b03b6f095f70a9f5e66d2a3931633f305745002659e21d860675d997e058ce22246b796c32a3522e3f808c110c046abf1b567a1c5d0bb353cd4d31ebb1e70db01fc6662212af0bfb1bdc5c0f1f88933428b626f4cfeaf501a8ce326a136e8d9a3c36f401483a4e99d9871f94e24fa04ab4e0cc6b0f1b325afa90b2b4fbeb30c24ae9c862b986dc4e664e16b58b8e35aeb2dbf38f526cc34c5de056b56d30ee4e2bbb60e1efb22215ce2167d1822b2a7d4f342957d311f9cf8443c2be064369e493933c47686010896466fab47a01cf0aa2d7637913dbddac835ac88bfeae8e20bb91e37d279f54a5caa7a5c1a261cc6b9d32bbf7b3b0d7812f2b14a68b7627e447a5a4c4803d94c91aa5e780a99b8100c4c8c5062de2b40b0358969dced2bf9fcb5ba6a6c3dfeeab7d35ee8e59ce1b0ba3c15d924782e94639458951d1c41f7aff16480f9fd0b3ef8f760f51ee4fded815cd6a7248037ac926bd2f1464740cf6ad0732243970a6d8f1306d2d4984a6bfab68f157e5cd3896cde378a069a44e29259d28fb5ba5292657fc2e10830eee4d046aee8534765a265f1b30738cfa363c358af45f2f7c8bcf780d3ce96373330cb2ecea30bc4483ae281ea06964571666a2ecdf4befe322548088eab6f06dae9cae20e23edc9c6daa0d62f7c6ccc95673565e3eb47e01528f517f8e834da746dd9177211ceb3e51efc81ce3b55d48e0b90c424c792f89718efd20bb8154ba127eace4e437019ab2771a2dea32501e957ae31dbe711a4f86f2bd0048ccf23b3311ca2ed63973895a23fdaf1b8d54c447649f4719e8d5bed0bc5c586724b3ba9186f7af6aefce08b2f8ff16221d0151d38f0374d6b9f2e209612640e6508793a4544bad2d9c064706ad5edac85d8607b6cb2b24c5340b47eb782749f484a4c463697fafb976070f08e66389d7d00790cf0e036a8d012440616602bb2a500c102e5ef25c8fc43a247e249dba674057f10d6f43b6ee326afaee6d3537b382b914a1db577f47de67123e2ce5333dd692213ff98666939bc5a8dad3e814188354f268094f59ed9111414da06fb824fbb42bf56288f26900df0d5410113fee65d087c63ffd259a2f8b294905d2cfeec1c4ceaea601d92c5ca7222416ee14e264342f1938524686c25ce7ec0a4d759c476b805beeb3adac0dc8c82f14cba360bdff212fe4975b4edd99ad4fffd770fef2aadb9ed93cac63eb1d52c1dd9ee696cba89262a857d87af4aca6ed1cc9ccdeb53347337fafe253e16bf4f273e33d59222ba1035a9c78b70cb6f49e14cda09bd648c44f627fb7bf4946bafe886c72dbc62fd668d4cb7ddcc504af09881321df8ec40916db662480b934d0fd7f64fad7b0c4fea0b8c8351ed3ffa391ac40add82d37073dc768706aa383804896191353c0d5806e445474ebc8121fcf39ff2887a57d8b3e9d9433b91d0dad00b5bdaca1987ee738b84f7333155562bb7c3eb19942ccf6ee691ccc718a02bd7dc98ecd76df3f735b5cd6e41808e904cc3189d5ebaf2d8a927f86910af4c3bf774d89dbf8d9fea25dfd65d4ca873c2ab7f721af58be06efda3c36e3c47e571b3c3d2092f253bccd5a3bbe20e37575dfd9ebfb8918f6da3e1d45b6065995343399aa2d0289d0e07668fdae861bc77ac618f012febabde67305a291b6518cbb97a0fa7d34d55f80ea4b4701da977d4209b3ed9e8e8fed27f3657c49a227cfb71e003fd8f9825722786d528883b097003b8e4c4a2d586dc88bc9dbdd8d791a2beb2bc8f635228cf1aa60ad7711f661a28c76bc2ff0f36b51948e71aee17610088375d1f5197883c5abea20fa13f7e3318bd1ae7014ecf9897c567c6f3db59e1043cfe0a3f23452676ec245e864aad89c40da630cbc9419007f7cd1c36a8fedb1c3e8a445a26930a18593e1c974222c46115fd6f5aec7bd05e404e6ffcee59994804ac92710153935cd1fc751d1135fa790111f0d1f54c7125b736c14ea7d8a97a9f6b800eded5d15e3666f9c4cd8a68d103de71fb949e5514c551c9b4a83e49f99dae4a383bca9df1667acfde083fb29fb97886b7c27803b1fc387e375b5b4c013d752c4355a387f8a9bbd44b4a6d476942ac9fca7aeb5ae65e80d34dc752c8c02bf7189934f840edbd66644949a201eba0ff969921b7b41410ce065266b4d2ca114e32f0bc71341ba7959ef7ba68abf021b98f3c4a83c9cdc7740458add3cc43efb36a957d5b1f83a351eb18e11b541b1f0009e8c2f7b5995363ac643182e68d4e6f386607d79a97eb3c146bf3291fd80fdd7dcdd57d6cbd023281572812fc946d70d73974736943eac545a22e44afc400c797ac062e22024363c93d35b261d15699fdc83ee944a7db84a403cf3569f53db709dec9d0ae7b862fd009741ac55f46db7b308833897bf39caf165d1c00f57910c940c41b389b9429e90b26edb066638c81b6dcfd44d855b81a8d6eb3b84a9ffd2dbed2c24668cd051c39e49eb08103e47dc76889f2c0753969350a3efe294f2d260345135f7047e681c961145c7bfa47d2e4ee19c659c881ecb0ca3bd46d08eb361bee8ef16a726b30c174b6d98cf41e492762bdab4fa3effd40611ed78527b4553f1b59e3dc20612ac3a983d906d7ae645c1091115ca42ad4cbcb4babadf9106f479cbcf1e27e052a2cccf3b157352f2f145611d82a5f11d3c1d65c2bb9ae547226090d0b2eabb1b921fc0f48ecc30a07bbf22ca40e27a1ea13ebbf766e788664c609cff03b74f7bb4d01aa51a78082112f72d3e907b9a2c7122c387bdb5cb53667ab5892cac962999d6ff66505a10b82cb9357770a970a47fa412067b277545d77024d23fc0e1707c165182e57b5200b0b93a3217dcfc6c9e9c44c70b45f75df1266be9db8123fed127454389cd89a6562cee205c5eb16c5890914b415f381fe955cf2cbc29147b8480b173c11e2352e8bbe76879a2647b77a2fbb201b3893e9c413bca30ad0773dc59329de037c3f4d8a375b46a04285ab7366aa6e7a066d488513c4a5212baa7d3b7f9e16bcfc2b002cb9d0d898781dfde59478e4d211c46b79981fdf9f9f64698195a39f1b6c18e9ef822991af8097c99a3c512a68ecccf3c9b3a8c5f771d3061b96d14dc4deb0ec6c9da366db788962ae7621836185fd4fe7adde90eb3a3bfaf02528cce84b34efabdb159c7c8f0f05c7e21fbb65cc39b888f9b65aba6e61487daca2f1bd4c741c9c6047f4ff81b31bd6f7cf0d6b0fbffed4db411fa7ac9fd03d048aacb690dba66846ef399055c1554b2e7549b1ada1da297d077d9aefd422eb77ba7a18a17537db93a1ca217bacd427fbc461dc0e10f4004e05df559f42819c18df3d2400b65a514d057d194339ad480492532e30a343939e97cc8d87c44f0c88c22669c1d852369eda1e6da3175a4876530c1ea73247efbaaa3a4b04a8de719c6d04d8f15aecce37436f828f9ca5ca9f6c28c6cfc25804486605b210ab5a721d155801175029035ac4056a22469ed167417f46d54ef889288f86e5e0a3b52fa22878b891b412a5f88509f0fd0efcd14c50e17b3cbe5bf9b8e644472e483001d72b0b7e70d3f5aab49ec5815c5975333d23116a44b13b256b508269f63c001d8149778eed21ef71a8c449d84a74b2fc757f66086bc74352c1d8ba03f3ee5fc541937aebbd2f6d6e81f51215a436ce630bde6cf26cfeec3a28b79dd939826e3a3f291c17fd1a1b87a47082af1b692c46e988949c99e0c8c10febbe8f58314b219c3c2f2bc896051275a35cb7a44d4d58213dd71aeac06dae296a9dafb45b5f665fb365ef54d5be066642456092bb230e2dbc893d6bda1eff8bda4e3ff9cd6239f47d6fa5061d4c90608f064837bc1ec01d8c905e6f5fd53dc700e63014a0821e707dfe7b72d57ab1590127fe03de8949a786fb897dfd2dabc5d725a855678f9174eb6b4e9426addd224a95c5def7e36d520193f84b639da8527a95365562750b048ae7ef1b311dd8c9d22cfaf359eb773e04abfc8c3d089c4f39b084134564d7254268b23d5b721e675d554a13f8b641e4fcf9472575b76624dcb08077ecb47b05fd9cb866889b4c811db61e8d545965094d952bd7fbeff6c9c3182f4feca630d1953f25783f480eb1497c1351ae7c7a97e6eeddcda3c0831af33d4b8cc638c5129c55798f229b0050f48b185b89835b2bc19074ff48d60d0b4697e4a314583bed6ae089f3c62c6c0508f39179a71566cc47aca0484ab0ea272c1c8e0c86c8a78244f55236c1967417e56e89486fe8f8727c9ca5aebac5355c944c2ba7e24f25b7ab5fece469cb65ef345ab545fb322efe9db23b10ec2bf64428fca670386a0083aa03aa487467f76c57e4b87df434dc4c84d1bc3e13ba466850b80c9ea9888d9fb7bd3cb09ee300225829ad921016b02806bea47099552b05aca4839344fa8e6cf07a6a1b1a1f6c04e95e0cdaec20f19e1668e169a1ae069d0387ad5b8d72dbaf80db834dc66d97bb139b62a301e91cb0379eabecbb9109e76b4d6f02b073bd0d11d2ab0c3a1142782c09e2825b2944a47e8ec2787b5cc4b8edcdc59ac9c3c38447d88d8e1ad07a7d8ef5b34ed05b41c482077969bc883b57c3984cc2c4c8b1a2fb7375374e5d268e83e4c1dc5adfeae45a5ee012a470bfdeb49523e5a7d648acd76cf17b6cc02b77a1f5dfe7caf07de140e9cac60369573f3d745482a73426ac6e42b8585c7c8b854a7034628ef9878d1308730a1eb12ef85388f958ff12a45a4a004492b8c513478f4fbbeb27f32f149a413a39de49a8d848017f1422a28a9b945452cb1e7777759b71837a76b14d9000e8c6ceb8c272e79a20b36e4ff7257c85068312877a78d9c9fe7a064604b1df5a7c67c05563bcd06b97afa707d80e5f18e9dc065edaf9663db56068b9f258ba0758f720c4a1361e28ad80cf36d62f424037f54a13c8dee26e0c5a1af42fcd101a73af897e119a3d95bd44a0f4002cd603a77fb9b2cb3985d3d7e9fb3e3e5f9890d94018f7d17719cccf7187141ff1863ad4ed03aea5c0b36accf1ac690301093c4b6b395179cc710f8698f43f06dee7c1c9dc91f26f6e5f33ceedfb970d016e580e8b030847a3b8a2d97cbb2b367ccb83653f35a092c91466dcd06941f88421f7f0aefe58ed21a793bbf69d3a4caadb738625a4054338dd33fd467a4650a0274dcf643ff614bb9f7242e1bce47634f893ab303a35b02fcacc529ea7"}], 0x3f}, 0x40)
write$cgroup_int(r2, &(0x7f0000001380)=0x7, 0x12)

2.637312384s ago: executing program 2 (id=3377):
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfc9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r1=>0x0, 0x0})
close(r1)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r2=>0x0, 0x0})
close(r2)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x24084200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40))
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, <r3=>0x0})
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b07d25a806f8c6394f90624fc602f0000000a740100051382c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
close(r0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000007d000000950000000000000088f4756552cd36f647e61979a9763ce061c04cd7c926e5e466c67f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000b80)=""/4090, 0x5e, 0xffa, 0x1, 0x0, 0x0, @void, @value}, 0x28)
socket$kcm(0xa, 0x3, 0x73)
r4 = syz_clone(0x80180c00, &(0x7f0000000100)="489ba1104612bee7fb54403dda7e7c2efe66a2684d72d849c327d119e0bd5d62dbced6fe6062082247388a80cdebf05d4e024ec119c65acf26b1fc98a97e208b63eba693d914bc96", 0x48, &(0x7f0000000000), 0x0, &(0x7f0000000200))
perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7fff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, r4, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000071122b000000000095bbc3cf22000000d0f386e2ed45fd51c106452ddba65ebf087b2599202548d6b95e075c89a388c86b568a24bae3359be95cf6786d4c71dc45e43a9cca25a55d935371253bf2bf25d08f795816d69a3103de2879f740b7859cf428d68275d1b9e64c970eeccb3cd842f2c93da3e7bae198ed1a3de9019b0c6cfb88aee910c6a441ea2b02f41677cb43ac71f63a79089deb1db39a119488f5703e1946f510e6b739ce2135175174d25696a7d904c83ece54a15a43f44117b559b929edd1c1767c811d9aa6711affe7cac3c44022e19ac65a79201af0aadc693048dc35296a302eaf118f10590a56ad2517cf89d1d1ae48700c3d7cfb326142b15102fdaff31104112084d921"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f96724fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300))
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x8, r3}, 0x18)

2.637107254s ago: executing program 4 (id=3378):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa65, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021f080211000000040000a118000200e014000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025", 0xa2}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

2.636585565s ago: executing program 3 (id=3379):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xf4240}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000001780)="000000000000000002b2138373ef", 0x0, 0x10003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.466696247s ago: executing program 1 (id=3380):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0xf0, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$kcm(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x4)
close(r2)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x0)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00'}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8)
close(r4)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0xa, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b50900000a0000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000540), 0x1}, 0x8080)

2.386119917s ago: executing program 4 (id=3381):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)='D', 0x1}], 0x1}, 0x20000040)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x2, 0x3, 0x2)
recvmsg$kcm(r3, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x18000)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
close(r3)
sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50)
r5 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r5, 0x0, 0x480, 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{r6, <r7=>0xffffffffffffffff}, 0x0, 0x0}, 0x20)
r8 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r8, 0x107, 0x14, &(0x7f0000000000), 0x4)
sendmsg$kcm(r8, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000d40)={r6, r7}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYRES64=r2, @ANYRES64=r2, @ANYRESHEX=r1, @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0xe, &(0x7f0000004000)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000002000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)

2.339897838s ago: executing program 0 (id=3382):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xf4240}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000001780)="000000000000000002b2138373ef", 0x0, 0x10003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 3)

2.22983353s ago: executing program 3 (id=3383):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000009000000ff0100002000"/28], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000a40)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = openat$cgroup_subtree(r0, &(0x7f0000000840), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000d40)=ANY=[@ANYBLOB="2bd0656d6f7279202b6e6574202d72646d61202b6d656d6f7279202b626c6b696f202b6e657420"], 0x27)
r3 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x4)
close(r6)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00040004c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65"], 0xfdef)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe2f, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r7}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea031100fe08000e40000200875a65969ff57b00ff020000000000000000000000000001e2"], 0xfdef)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580))
socket$kcm(0x29, 0x5, 0x0)

1.062498185s ago: executing program 0 (id=3384):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) (async)
bpf$ENABLE_STATS(0x20, &(0x7f0000000600), 0x4)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0xfb1}, 0x8) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
r2 = socket$kcm(0x29, 0xf, 0x0) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080))
sendmsg$kcm(r2, &(0x7f0000000500)={&(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0x3, 0x1, 0x2, {0xa, 0x4e20, 0x7f, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000400)="cd215869519f11eea6cd6aec1274fd35fe109c6bb4bde8d34e4b80e9ca85cb9d0a6909329fde4004ecc7455e6ec00965accd066cb816ed7f459c0b6128f2a6145b0ed13c45fdd2a704beb38cd94cf462ec30cddac0fa7c2142bf9adcf715dd85705d3faf01caa43be6523ae007a53d148dab423ee89e7e99dc3b1f39e3bce3254f6b744a08ec47b7d9f581de5aaf956eeb8d6dc258556434848715a38802aed6fa99663e20446f0f0e49678a24", 0xad}], 0x1, &(0x7f0000001f40)=[{0x48, 0x13d, 0x8, "9099e48c95a4f22bb881700b8ed048a8ad14138ee2ca3a67ef64a9d85cce9e80325fb85b19426ad3616afbe42652e1e0760e1e"}, {0x28, 0x10e, 0x56b, "0c3e1db8c39c4e207862c73439d182f5fb8509e5e57f49"}, {0x1010, 0x107, 0x6, "336500528dfaed2b6d02145a355d415e69cbda45e987dde9c875046730f170f8234e26cf22406e32bbf576b10015573972bf3e9693b069bc685a3a7e5f2f972af9183c25b1aeee2381411fd7ebe8f2f64c86c14d0f330ec8dd758f5c47aa5cada79bd77aaace56165bd50ae6695d8af6e2d71b6d9d516805ad07a3fd4b3153b17d1c3b8b26e8a8f62c94e63b66db3c8836dfaaa8f66faf20bf9920ac6db113ddd5f6b3d21135645945cf596167295c71a218e7ee023731d4b2aca117b0d16bb629f3ef1c67220cabf6938ac8e0118bba9aae627be44cfd12888b465abe3c8d5d3a514ee91c058f41975823860472af184d633ab9217814c5a5e18a048db59e9a0623aa380c06e5a7f17c36a39ac0f02d746ba564515948e95887151f589868b5b2c94d7ca9eb707fe589bd811d1412527b214aaa523907ac8b73fc247e226dc18a12d12d3c611a56cedd586f7c6fcb03dfb7000f73fc2ed8ee060cbde154f225952ac7c53ad7786d379e7ef50915b1c965bd8857c047d9b83e4d7b1f42772ec73cdfa9c3725c05f4dff9fc06ea7cff2d7277995dcde68285ee41716babc41aec8a0083e68f48a9902764d7353919f451c674744caf4d559e3d01b27fb0d29ea67a8f5f9fc7f8b90f2f61410f023d3f2d0e7f5823a1ee37af33f84161c37a78c9dadf1d71892eb488369742e7bbb1bcf465f2eec72b6146099d788e56169e573caef2556571a2e91f53752a33b1a2c92d7cd15d122771b0bd03c01ab6d6fa784b47b7d578c5bb542d0faa69f59666b710a5f3f8a61b3dada0ea0b3ed48d5b31ca15176f6a23b5013be65cf5f11f042b53a70a5b8b1614a96e782372ef056401ff68e0098e0a60289cda0261421b23b35cf16f6fb04d18c041e23b05aee7790dd4178c8dab982e7a95adb5fe7c3499b0a1867a753d73db186d4f1a775b3582a6f946ae9c4b0bbc0903c60e195c549eba67724c4e92199d108605b7c11fe096c69bec9dee1f1b0663b07448e81cdc3bc9807e95fcfdf02ffd6616d35f8c4156efbc4a4a0a7e0b4ae563441a33a83dff02aea9858813e0394f74225744b099ce8f92ea19c500fc90bb8cd8f7d9f580730ff95496e0589da2779cccf48cda041d58f3216beec434341ca6518e88fbc861b513f9a933bac5c3ceddb85604283123c3f161f4dd14abaa7e44f90d9142473d747f2e50d191e3377aa61d716083a7be9f327651426892fbbb9beaaec70db0f692766b0e445be753498023ef21b9da84d866253eec199cbe98a6cb9fbc23c3f9cc89f66237dfe49fdb0508aad97d9ea15a3bb458a7b29e8e31e74ba78af4ca018685b047bd0f473994f70ad3cbfab147c450913911896a920a482484acca3491602c5974f4af67f4bea2feef672b930b02056027586e59f523dd6013d94a0840836134e4a7d8648ecfd4a5b586df6d58eb8caf2c6c175c89c976d8f98d7dc98d1f55065f66754d522ef98e8b778ac71e1a8a88b435a75056b2a7fd0d048f18444b6772798e90b36be4509e93ef4c76412a90f2171abde97a4c0574fb3ec0daee1829e450bb0876f2b41cbd8763a8e09e7a227183b54234cc57ce1c47a4122570ec1b03d4636ada43b9bf5b05659d082841d92e41870a173c80592b8de5b81f91947e5a1de40756495e82b209744a7ef5c3e1a166cc5a95e5dbc162fe9cf982c9f5014510e3bec648fca90abe978f59cc01ee65bad5c87070d56ff96c15e71e65a3b5c001ea5fa12ad3ed832a339344426677b9e71f8ddde18a6b58fc6b9bc444ad8980d565cc49726372f7d86e0fccaf39ca10d12fb3946e9296e2bf12da7d28bf5dd8fdbf86b56d0fcf2e9a186d1490290bf2f57f817bb102a34177a753c5919f981f84b226d64ebdc97a5d9a45e5070196b27df79ada99cf286bd23b2c4b78efd3157a2bfbf638ee6e5db9acd78e69800342aa51b898317e8c14977ce31bf097cfb851dc53e4ac6823c3a922a9307e630d86f298989ef7e90a4de4012dfebd3c3b8261fb4dcde61939b030b617dce383f672373290b2d48e578f434cbb88f374f13172f7b092108cf833c38143b821fb6b52887876b982e3e758d2cc4785eb426cfdaa15bd1bb9f0f95f1b25f06bf6ccc8f4ac1a871d39d19f8c404df68c10cb5cd9f1c7042cb9e79216327a0a3d1e7f61e12787035a7b59af1a81cd39115235ea11cee077ed29659c69aeb9c42141785097ea872918c0b53453da644cff74bc8380e7a4e67639540092a8a23b5ec896ffbf78f20c1cfa2b1edc54a7a3856969357a5a555c28aa6d75def1b1a98437059f0081928784c0afc767ea367565adbe8763a81f9e0ac72a0d188b214402357a2083eef82caa96536630c7383aed7ce6d68615824c038248889d3c30786f294d2e529d1ee5c719eb8e34eef09005f40c67472e3fa88366f14cdef2ec2c590215e575e7b42b7ce9dea840d7d6a7b4a43dff3fb6f253b973413eedbd6fd470c7c571ad84b42cfa9c131c8744d44581007526e6d9b470d17bbb83a8008bcceb50f26cc2a64b5cea087b4990b22cfdd33220c571c5e54e4c5725636eb111260512419aa4e79650e7c3985f087f95d72ac5f73951814a2854ecad395e876ea98e65ec756aa07482c800a5acfdfe43667f0b5116d524453c7e806d22f64a647452bf337a06aa0de9caba404f34f1cb2fd14394de9cc00847f49490dd6180574b058fb9b17ce22a9b500c6a6b84c0dee7d5a2ce9aa43614cf7b6860cec4ca0d1e42ef1298537eb05ce6d3aab35ad9697cf15efc63a97e98151db6884847e0c57ef986f84f1198e6d8d901f305e35ad6081df1d2ce36513b99d7e50ca2516281062618b2c4f1d84e904aa37d8e23eeeb6e91ac0348d2a9d1811213d5c34c3d5bb02804f6e85e1869674560d34ac7f4bc13bf604224dfb957de6c7600ae0c12f6e41ecf9d734dea3b9fd02f3e7d353af89711487e3e45b9a4b20ad8bdf87b2e6f00cef78debe66b086762268b397aac7efaba5ac1c66631a4a13baf92bbdf78088185ff6d323e5c28a0b8d72f88a4c38375c688a94548e721fa133057aafeeeb6ed704a942cc924e92007aac9e4b8c5cd56bfc212399921c9a1d4a40dfd1427fb3daf6ba18e13974231c9a6863c236b6e9287ab248df3a9dbd907534889a40b82eeb3f6fefde53b051dd6cd7df0337e562a2cb80d5cf73137f09f040f0b90059ed83e971155bc2f7ee6302b4c3d6a8a9d6e820cef39d973255213922b1bcb53665a97deda55e6f18e999bfea20ab13cce61a5356c3d169ec0eccd36acb13db3211616d545b70c94e5d3c74b1e4186e2b9aa895bcedd2a403df512116e2b3aa50e695fd7b92cc3f9e69e4e1df4443c4f73f100441e74c59adcdae31ea9343a05786a4bacc7846cb28e8ea9b7f9236e0b75dcb3a6c5dff724ab74f7dd3b9d39b5ea898808234d2cde3809bdac90602993c6e0b26883e5ad134c3e0db4e3276b266f5cbcab377dda0ea392a17a510bfc588e7b49008276b258d4c0b137c97d8787e0c051bb252b370093a59447a37c7a703a543148d59bbded82fab166aade708ac95cb9e66a8a3e22cc87fd0a7094cc6fec747b0c32b68bd1fef94e90f9100877a9df5e95a543b88ad00b25be4586f535d058b9944284d47e07ac4f2347eaeb76bbc7e79d847ed6fc769aeec13c8f0c13bc3e07e8a37b09482dbcb9d4ee70a407e9e0c33c20c0b678d0879990a0911a26139f15621f8cd5947bf9b224e0418298009cf6f72c7c8c2f02213ab6697129f61938ca8dd1a63dc491fb05aa66063564f094ab511913c933c37ba4355a71d7324cfcd107466806d19142e27aa40c8e999495d740546951b67baf6498ee5dd4e92129b67d729eaf7eafdf423436308305d9137bb633c0d3dbf88c97e1bf6d410bfda648fa016e1359fba6d6ecf1a16a305eab9fc6749fbfa70d8aa57a4a62a43de1891ecc1f03ab08c3a12c0b0884bbc7ac9ce01c9a454ece02c8a0d5cc1d7c760a308a822298ec9363d75f6d47e9917823834eb79127bfd99bdd79cd137a6941a1e780f5f97cb00ded169efecdcd95abecfad6193e60aa882e5ee7051158fb41766cedb275f934dbcbe41ac4ac6ce58180ab7ef0b8057d642e16f8552e917d50faa5d16235421a4d1cd058e667a6254b0c300d0f45dd3a2398584724ebede8ef0f79f07a2f43530629d68d13619516e69babd38b330961ed6fdf60d6bfe15b028a95d9f6b419042d905ecd0ecd28634c536cd57e02de513e0d58963b57a43cf9e18dba40962be47e50f06ad27ef9222b9486ae6b482d4d4b62b952664c1b353111101422ab22b20be61b3f89a2b689139a9d35564afa124e9b651c7d1604dc4942f69d62934d9e228eb3ff695253a55c365cecb0ae5a997f39f81f03eac25acccd55cb24524f1441d44d4424ab8405339e5bcdea80389e7c95ea210e92993c821f670608d0ca31a9817ceee11519d0a420d40192f62e8404e7f1a25f4aa1a1b5d9393fc1748c8484107e393f3f1a083818e24355e00c3f91e70a91947674bae18a1419b08b4f2568df512d359490f4d2cfd3b5103be5bc248ec2662ea57cbb2a86b10ef317089edce62204401841795b9f808c05724148064fcb153680f61f7c841dfaa72440a3e2391303fd418d092c8d8dded3535f5fa8faf526c544562b6f27668df5d44effde8e4434f673dbb4c9c6e951688cfdd82ebb4bb32de7769faa3c511ba7f5f979c12edd9952ae990ab65dbdadd123662996af2694bfd6935fa3037f57ee1ec2b3952510e411a455f2b8786c1b3fc311f622cc79c88e8750c2e6bcbc27edee2b41621ec1f629934d60e91eff84a14e1e9834712251bbff9190dbd5ab57242be2c1e8dc465fea49dc1ac53928f0d1e8336520628a4b4db9a95ba92098d73dd191192ca886095e620b1fa6db602e571035d754c6c7563f8e8fd16b3ebc862b0a6fc18708a887129a8bfd3cd505a1c6f9956ccdf3de7732d29592740170e3c2488d8e64d6a7b17ddda5412cad922d3f855f633b3b8037efea2a7c18a57e080d17a666887e8708875a5a3dc71bfbf2c0fe353c6ebeee1bf4d7cede3f5e9fdf0681912a698d885981564ac3f31712cf1d864637871ac518f1f7ea93ec4317fe43fc08e4798719f913b8f9bff329b2eb9f1c6c0d164e7877312cda8604c98c8fc761761ddc3d0b026a4510635c84f21272e7007adcc73a3f0c2e6f97a3dfbc6217eeec4127e7718ba40fa4eec637c15c067ec561fbe0fb4949aca3a9e71a044c4320fd753a6da6aff7d1bedcfa05ed835876700eaf17c9959bf89f8d3e0ee269fe2242df59d0b4a96c595e34f140404f7c598e74a878ab08d2b43c41d77615c616527e1a7d4b2d1eb74cdaceaa5644c6c4ce871e766f683c27f19786cb40c642b88eabc7438c68b5cb7fdffc4ceb5b8e44f3d3caf44be5b5ae041685c37829ee09c99d122390c22e3336512a7dc0eba55147c9977934a2bfda7776c7481111b9f45d2929719a1dc25a7e0016207921eb52a25bb0de6fadde3d6ae469e75ab6a7bfee1b4a9c5a836fea0ce1a34ced1af41bc43aa4d827f139e9e1e5bba0ada099076b61c2a8ba618ceda63825f5618d8d867e1783f04d7c3162386e47f1468eb07bc8325a870bc50cee9e9e5c215336441054171f42b43535364793a599b62cdb7284b7d22c700df328e95988ac3e9383b81dba76517b2270a8fee93a099c97647b5e1b7751eed79552aece017aff67e6ae49b89e7d07977ad760a884ee432e819855e8b3c7fc78c69e32103e622c6f1d53ee66"}, {0x98, 0x29, 0xa7a, "99b3b45bd39dd3f8503901535ac81aefe89f356a050208f501c9c8c52beda3adeddfd52e6e21e61f9c7fb9a274da3e513f53c16465f1d10cac84fb18bc9e822f02f808e42f6677353997a7ab85e24c77a6f52a89088a767746b8ea2002ebcd2076aceea4316081729034a4d8d2b27cbe204ea3e8dc6ed25284d83925690c60d0898e62910a0a"}], 0x1118}, 0x4000000) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff14, 0x0, &(0x7f0000000200)="4e3afa1564522a355162eb24c8acf6a27b9f2c75c0bf50cfc3bb8cd460ec0f0daa03d982d2daa2de7f15e9a9697f55b0c82e87dab7005628da6d78ed890b8ce7eb3df410a73641826aac8276ec155057ac95a44a5c243fb9dc97956b5ea722e3b8c7b03e9b48f6aad485c8a4f8e34893470150b973bdde465eed4d8827", 0x0}, 0x50) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fc43d3ff000000000900000085000000bc0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @union={0x1}]}}, &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0x1, 0x0, 0x0, @void, @value}, 0x28)

1.060995476s ago: executing program 4 (id=3385):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x8400)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33)

1.060848525s ago: executing program 1 (id=3386):
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xf4240}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000001780)="000000000000000002b2138373ef", 0x0, 0x10003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

964.502087ms ago: executing program 3 (id=3387):
socket$kcm(0x10, 0x2, 0x0)
getpid()
r0 = perf_event_open(0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0xffffffffffffffff, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804)
sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0)
close(0xffffffffffffffff)
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000040)={'bond_slave_1\x00', @random="0200ac7f7f00"})
r4 = socket$kcm(0xa, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$unix(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000040)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_int(r6, &(0x7f0000000280)='cpuset.sched_load_balance\x00', 0x2, 0x0)
close(r5)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000cc0)={0x2, 0x4e24, @local}, 0x10, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a48500000004000000850000000f000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000002b"], 0x50)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)="67a18449faad4d2cc38c932171cd36cb7078d0859c42ec86617b671523024a7804b2b8faebdc0844f36daa6ab8e65aea319ed7bd8f78aee04ba5ef71ef6e924ef3aa215f57717b009f1c5f4692a60334e1353b38ed8860effbf815e567db3295542205f9bdf3413b6c738d84fa08337bb9a18e0ef2834aa188b3df6af085a48a6bc63ec05932d567cf2b8238874d90df96575d15f011f9dd1574f2a1060000008951683dbb27f4bdb0b00c2f680ab19415de1f459e02e98828a0d8ad97a0790893e795895e59dbf05b45d17886234c68688e86f78eb919764563", &(0x7f0000000340), 0x894, r7}, 0x38)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1')

929.782777ms ago: executing program 4 (id=3388):
socket$kcm(0x10, 0x2, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb5}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000500)=r0, 0x4)
sendmsg(r1, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000380)="01", 0x1}], 0x1}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x55, &(0x7f00000000c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000100), &(0x7f0000000180), 0x8, 0xa6, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0xa, [@struct={0xd, 0x2, 0x0, 0x4, 0x0, 0x2, [{0x7, 0x1, 0x807}, {0x8, 0x5, 0x68}]}, @func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{0xc, 0x5}, {0x0, 0x2}, {0x6, 0x4}, {0xc, 0x4}, {0x8, 0x5}, {0x2, 0x5}, {0x1}, {0xd}, {0xe}, {0xb}]}]}, {0x0, [0x5f, 0x61, 0x30, 0x30, 0x30, 0x5f, 0x5f, 0x5f]}}, &(0x7f00000004c0)=""/28, 0xa2, 0x1c, 0x0, 0x1, 0x0, @void, @value}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1, 0xfff, 0x2, 0x18200000, 0x20800, 0x1, 0x5, '\x00', r2, r3, 0x4, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100006400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

841.352339ms ago: executing program 0 (id=3389):
r0 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000811)
sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20040000) (fail_nth: 3)

721.95163ms ago: executing program 1 (id=3390):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
write$cgroup_devices(r0, 0x0, 0xffdd)

470.230653ms ago: executing program 4 (id=3391):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa65, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021f080211000000040000a118000200e014000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025", 0xa2}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

422.751944ms ago: executing program 3 (id=3392):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2442, 0x0, 0x0, 0x0, 0x0, 0x4977992e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0x11, 0x200000000000002, 0x300)
close(0xffffffffffffffff)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
r1 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x6, 0x4, &(0x7f0000000040), 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xe)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x1a}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r3, r2}, 0xc)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@func={0x2, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x5f, 0x5f, 0x30, 0x2e, 0x5f, 0x0]}}, &(0x7f0000000280)=""/30, 0x2c, 0x1e, 0x0, 0x8, 0x10000, @value}, 0x28)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='percpu_free_percpu\x00', r6}, 0x18)
socketpair(0x11, 0xa, 0x0, &(0x7f0000001080))
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r2, <r8=>0xffffffffffffffff}, 0x0, &(0x7f0000000580)='%ps    \x00'}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x5}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7ff}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @jmp={0x5, 0x0, 0x7, 0x6, 0xa, 0xffffffffffffffc0, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0xff, 0x5a, &(0x7f0000000200)=""/90, 0x40f00, 0x42, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f00000003c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0x5, 0x2, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[r2, r7, r8], 0x0, 0x10, 0x7, @void, @value}, 0x94)

353.351735ms ago: executing program 0 (id=3393):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001158000000000000800000850000006d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff81, 0x0}}, 0x10) (fail_nth: 2)

352.616205ms ago: executing program 1 (id=3394):
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async)
sendmsg$inet(r0, 0x0, 0x0) (async)
r1 = socket$kcm(0x2, 0x3, 0x106)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
sendmsg$kcm(r1, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[], 0x10}, 0x0) (async)
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0x1, <r3=>0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={0x1, 0x58, &(0x7f0000000580)}, 0x10) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xc, 0xd52, 0x800, 0x9, 0x4021, r3, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50)
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x23}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_ro(r7, &(0x7f0000000240)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300)={0xffffffffffffffff, r8}, 0xc)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r6, @ANYRES32=r8, @ANYBLOB="07000000202000000000000089bd524e2b136180f30c5d6e2dba432da7a257ed9db10bc87fe61d69046ea8005a3ff0ca06b75a066b628eb68bdd2a708fbe700d30be942d4478774914fc742c7bb239a5d8c89aa9c528d04ce20527b612e39de10d16394d4bc2d9819eb64741e9f2401dbc25bf127c260dd21270ca0b222831bf3a4e75b8527444a1a9d2f95559c72c1ce6ecbe35e0770b9621e4df734b47a006258b8b2db976c457b16fd5", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) (async)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYBLOB='\a'], 0x10) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x468}, 0x20004010)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c00000006000000080000000b000000730d0000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000000000005000000000000000000000000000000000000000b85eacbb5a58843e5ac5abf6e601501e3c7edefabbed20996d1de0b44eb645ff9c4a9fb8991922b45882f1620369223475ea0d8866f919d5915d5830e971198ba7b5649970a549342bf1d2cdb197b29a7d0900063517753bbc880e7d2355f8185a2accaadcd7178751e7e99af30bdbcb56f5581951b"], 0x50)
r9 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x6}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x800002c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x1a) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f0000000080)='\x00') (async)
syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

343.002405ms ago: executing program 4 (id=3395):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001158000000000000800000850000006d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
socket$kcm(0x11, 0x200000000000002, 0x300)
socket$kcm(0x11, 0x200000000000002, 0x300)
close(r1)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff81, 0x0}}, 0x10)

0s ago: executing program 0 (id=3396):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="d80000001c0081030081f782db44b904021d080201000000040000a118000c000600141a62600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x4001)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xfe33)

kernel console output (not intermixed with test programs):

b_loop+0x45/0xa0
[  700.467830][T12911]  ? clear_bhb_loop+0x45/0xa0
[  700.472628][T12911]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  700.478567][T12911] RIP: 0033:0x7f35f678e969
[  700.483092][T12911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  700.502739][T12911] RSP: 002b:00007f35f766c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  700.511365][T12911] RAX: ffffffffffffffda RBX: 00007f35f69b5fa0 RCX: 00007f35f678e969
[  700.519474][T12911] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000008
[  700.527568][T12911] RBP: 00007f35f766c090 R08: 0000000000000000 R09: 0000000000000000
[  700.535928][T12911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  700.544125][T12911] R13: 0000000000000000 R14: 00007f35f69b5fa0 R15: 00007ffdb4dc3e58
[  700.552165][T12911]  </TASK>
[  700.579626][T12911] Mem-Info:
[  700.590480][T12911] active_anon:3953 inactive_anon:0 isolated_anon:0
[  700.590480][T12911]  active_file:21560 inactive_file:38476 isolated_file:0
[  700.590480][T12911]  unevictable:768 dirty:189 writeback:0
[  700.590480][T12911]  slab_reclaimable:21333 slab_unreclaimable:96578
[  700.590480][T12911]  mapped:29855 shmem:1436 pagetables:521
[  700.590480][T12911]  sec_pagetables:0 bounce:0
[  700.590480][T12911]  kernel_misc_reclaimable:0
[  700.590480][T12911]  free:1325156 free_pcp:10134 free_cma:0
[  700.640666][ T4356] device bridge_slave_1 left promiscuous mode
[  700.647346][ T4356] bridge0: port 2(bridge_slave_1) entered disabled state
[  700.654714][T12911] Node 0 active_anon:15812kB inactive_anon:0kB active_file:86240kB inactive_file:153828kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119420kB dirty:756kB writeback:0kB shmem:4208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:9908kB pagetables:2084kB sec_pagetables:0kB all_unreclaimable? no
[  700.690665][ T4356] device bridge_slave_0 left promiscuous mode
[  700.703497][ T4356] bridge0: port 1(bridge_slave_0) entered disabled state
[  700.717203][T12911] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  700.752420][T12911] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  700.782041][ T4356] device veth1_macvtap left promiscuous mode
[  700.797798][T12911] lowmem_reserve[]:
[  700.798173][ T4356] device veth1_vlan left promiscuous mode
[  700.809425][T12911]  0 2529 2531 2531 2531
[  700.813773][T12911] Node 0 DMA32 free:1385664kB boost:0kB min:34708kB low:43384kB high:52060kB reserved_highatomic:0KB active_anon:15812kB inactive_anon:0kB active_file:86240kB inactive_file:153828kB unevictable:1536kB writepending:756kB present:3129332kB managed:2595468kB mlocked:0kB bounce:0kB free_pcp:19640kB local_pcp:10652kB free_cma:0kB
[  700.815524][ T4356] device veth0_vlan left promiscuous mode
[  700.866764][T12911] lowmem_reserve[]: 0 0 1 1 1
[  700.881445][T12911] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1680kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB
[  700.911222][T12911] lowmem_reserve[]: 0 0 0 0 0
[  700.916035][T12911] Node 1 Normal free:3899576kB boost:0kB min:55172kB low:68964kB high:82756kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:22636kB local_pcp:13580kB free_cma:0kB
[  700.945964][T12911] lowmem_reserve[]: 0 0 0 0 0
[  700.951223][T12911] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  700.964623][T12911] Node 0 DMA32: 910*4kB (M) 1375*8kB (ME) 1155*16kB (UME) 933*32kB (ME) 995*64kB (UME) 492*128kB (UME) 200*256kB (UM) 82*512kB (UM) 39*1024kB (UM) 19*2048kB (UME) 250*4096kB (UM) = 1385664kB
[  700.983929][T12911] Node 0 Normal: 2*4kB (U) 2*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB
[  700.996532][T12911] Node 1 Normal: 238*4kB (UME) 52*8kB (UME) 38*16kB (UME) 34*32kB (UME) 17*64kB (UME) 9*128kB (UME) 4*256kB (UME) 2*512kB (ME) 1*1024kB (E) 2*2048kB (UE) 949*4096kB (M) = 3899576kB
[  701.015195][T12911] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  701.034067][T12911] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  701.043772][T12911] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  701.053717][T12911] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  701.063705][T12911] 61472 total pagecache pages
[  701.068684][T12911] 0 pages in swap cache
[  701.072883][T12911] Free swap  = 124996kB
[  701.077574][T12911] Total swap = 124996kB
[  701.081963][T12911] 2097051 pages RAM
[  701.085806][T12911] 0 pages HighMem/MovableOnly
[  701.090753][T12911] 414519 pages reserved
[  701.094951][T12911] 0 pages cma reserved
[  701.253804][T12916] __nla_validate_parse: 6 callbacks suppressed
[  701.253824][T12916] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3011'.
[  701.277566][T12916] net_ratelimit: 181 callbacks suppressed
[  701.277590][T12916] netlink: zone id is out of range
[  701.303507][T12916] netlink: zone id is out of range
[  701.316946][T12916] netlink: zone id is out of range
[  701.325677][T12916] netlink: zone id is out of range
[  701.331777][T12916] netlink: zone id is out of range
[  701.337107][T12916] netlink: zone id is out of range
[  701.343188][T12916] netlink: zone id is out of range
[  701.349620][T12916] netlink: zone id is out of range
[  701.355179][T12916] netlink: zone id is out of range
[  701.366731][T12916] netlink: zone id is out of range
[  701.574623][T12918] validate_nla: 7 callbacks suppressed
[  701.574643][T12918] netlink: 'syz.2.3012': attribute type 2 has an invalid length.
[  701.588553][T12918] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.3012'.
[  701.678051][ T4295] Bluetooth: hci1: command 0x040f tx timeout
[  701.795527][ T4356] team0 (unregistering): Port device team_slave_1 removed
[  701.845893][ T4356] team0 (unregistering): Port device team_slave_0 removed
[  701.892537][ T4356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  701.937297][ T4356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  702.422421][ T4356] bond0 (unregistering): Released all slaves
[  702.536681][T12914] netlink: 'syz.3.3010': attribute type 2 has an invalid length.
[  702.544835][T12914] netlink: 'syz.3.3010': attribute type 8 has an invalid length.
[  702.552938][T12914] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3010'.
[  702.565638][T12920] netlink: 'syz.2.3013': attribute type 10 has an invalid length.
[  702.588598][T12920] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  702.841245][T12927] netlink: 'syz.4.3016': attribute type 3 has an invalid length.
[  702.899878][T12927] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3016'.
[  702.990128][T12927] netlink: 'syz.4.3016': attribute type 2 has an invalid length.
[  703.027504][T12927] netlink: 'syz.4.3016': attribute type 1 has an invalid length.
[  703.122147][T12927] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3016'.
[  703.413258][T12940] FAULT_INJECTION: forcing a failure.
[  703.413258][T12940] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  703.434297][T12940] CPU: 1 PID: 12940 Comm: syz.0.3020 Not tainted 6.1.137-syzkaller #0
[  703.442699][T12940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  703.452883][T12940] Call Trace:
[  703.456187][T12940]  <TASK>
[  703.459179][T12940]  dump_stack_lvl+0x168/0x22e
[  703.464200][T12940]  ? show_regs_print_info+0x12/0x12
[  703.469621][T12940]  ? load_image+0x3b0/0x3b0
[  703.474164][T12940]  ? __lock_acquire+0x7c50/0x7c50
[  703.479233][T12940]  ? lockdep_unlock+0x133/0x2d0
[  703.484396][T12940]  ? lockdep_lock+0x1e0/0x1e0
[  703.489227][T12940]  should_fail_ex+0x399/0x4d0
[  703.493951][T12940]  prepare_alloc_pages+0x1e2/0x5f0
[  703.499660][T12940]  __alloc_pages+0x123/0x4e0
[  703.504310][T12940]  ? zone_statistics+0x170/0x170
[  703.509496][T12940]  ? verify_lock_unused+0x140/0x140
[  703.514810][T12940]  __folio_alloc+0xe/0x30
[  703.519189][T12940]  vma_alloc_folio+0x4a3/0x900
[  703.524012][T12940]  wp_page_copy+0x26c/0x1640
[  703.528913][T12940]  ? do_wp_page+0xaf4/0x1680
[  703.533563][T12940]  ? fault_dirty_shared_page+0x3c0/0x3c0
[  703.539249][T12940]  handle_mm_fault+0x1ca6/0x3e70
[  703.544334][T12940]  ? numa_migrate_prep+0x250/0x250
[  703.549577][T12940]  ? lock_chain_count+0x20/0x20
[  703.554792][T12940]  ? lock_mm_and_find_vma+0xae/0x2f0
[  703.560219][T12940]  do_user_addr_fault+0x51f/0xb10
[  703.565375][T12940]  exc_page_fault+0x60/0x100
[  703.570143][T12940]  ? __might_fault+0xa6/0x120
[  703.575771][T12940]  asm_exc_page_fault+0x22/0x30
[  703.580855][T12940] RIP: 0010:__put_user_nocheck_4+0x3/0x11
[  703.587084][T12940] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 48 bb f9 ef ff ff ff 7f
[  703.607543][T12940] RSP: 0018:ffffc90003367bb8 EFLAGS: 00050293
[  703.613824][T12940] RAX: 0000000000000080 RBX: 00007fffffffeffd RCX: 00002000000013c4
[  703.621911][T12940] RDX: 0000000000000001 RSI: ffffffff8a6c0f80 RDI: ffffffff8abf0da0
[  703.630272][T12940] RBP: 0000000000001fcc R08: dffffc0000000000 R09: fffffbfff1bfd03e
[  703.638540][T12940] R10: fffffbfff1bfd03e R11: 1ffffffff1bfd03d R12: 0000000000000000
[  703.646643][T12940] R13: 00002000000013c4 R14: 0000000000002fcd R15: 00002000000013c0
[  703.654770][T12940]  perf_copy_attr+0xb6/0x850
[  703.659417][T12940]  ? __kmem_cache_free+0xb6/0x1f0
[  703.664496][T12940]  perf_ioctl+0x1b2/0x2340
[  703.668991][T12940]  ? tomoyo_path_number_perm+0x1b6/0x600
[  703.674668][T12940]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  703.680248][T12940]  ? perf_poll+0x1a0/0x1a0
[  703.684958][T12940]  ? bpf_lsm_file_ioctl+0x5/0x10
[  703.690135][T12940]  ? security_file_ioctl+0x7c/0xa0
[  703.695818][T12940]  ? perf_poll+0x1a0/0x1a0
[  703.700458][T12940]  __se_sys_ioctl+0xfa/0x170
[  703.705190][T12940]  do_syscall_64+0x4c/0xa0
[  703.709746][T12940]  ? clear_bhb_loop+0x45/0xa0
[  703.714673][T12940]  ? clear_bhb_loop+0x45/0xa0
[  703.719490][T12940]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  703.725544][T12940] RIP: 0033:0x7fc55f98e969
[  703.730096][T12940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  703.748869][ T4295] Bluetooth: hci1: command 0x0419 tx timeout
[  703.749752][T12940] RSP: 002b:00007fc560809038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  703.749868][T12940] RAX: ffffffffffffffda RBX: 00007fc55fbb5fa0 RCX: 00007fc55f98e969
[  703.772899][T12940] RDX: 00002000000013c0 RSI: 000000004008240b RDI: 0000000000000003
[  703.780954][T12940] RBP: 00007fc560809090 R08: 0000000000000000 R09: 0000000000000000
[  703.789048][T12940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  703.797047][T12940] R13: 0000000000000000 R14: 00007fc55fbb5fa0 R15: 00007fffca026bb8
[  703.805179][T12940]  </TASK>
[  703.879164][T12942] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.3021'.
[  704.076478][T12786] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  704.100714][T12786] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  704.122349][T12786] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  704.155141][T12950] netlink: 'syz.4.3024': attribute type 2 has an invalid length.
[  704.173490][T12950] netlink: 'syz.4.3024': attribute type 8 has an invalid length.
[  704.200588][T12950] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3024'.
[  704.223292][T12786] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  704.282114][T12953] netlink: 'syz.3.3026': attribute type 10 has an invalid length.
[  704.299432][T12953] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  704.404572][T12957] tun0: tun_chr_ioctl cmd 1074025677
[  704.439163][T12957] tun0: linktype set to 270
[  704.684158][T12786] 8021q: adding VLAN 0 to HW filter on device bond0
[  704.785409][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  704.810744][T12966] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3030'.
[  704.824909][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  704.901232][T12786] 8021q: adding VLAN 0 to HW filter on device team0
[  704.969900][T12968] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3030'.
[  704.978600][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  705.007386][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  705.044746][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  705.052081][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  705.120826][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  705.145308][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  705.174736][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  705.203004][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  705.210515][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  705.255697][T12969] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3031'.
[  705.308544][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  705.329690][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  705.411876][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  705.470541][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  705.656066][T12786] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  705.703789][T12786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  705.717736][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  705.728138][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  705.744603][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  705.754492][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  705.763997][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  705.775792][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  705.784965][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  705.798385][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  706.219671][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  706.229005][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  706.243483][T12786] 8021q: adding VLAN 0 to HW filter on device batadv0
[  706.274068][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  706.289724][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  706.335391][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  706.352546][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  706.370451][T12786] device veth0_vlan entered promiscuous mode
[  706.378183][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  706.402526][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  706.438388][T12786] device veth1_vlan entered promiscuous mode
[  706.447655][T12999] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  706.503400][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  706.517756][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  706.535610][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  706.547644][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  706.567147][T12786] device veth0_macvtap entered promiscuous mode
[  706.581637][T12786] device veth1_macvtap entered promiscuous mode
[  706.607402][T12786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  706.619910][T12786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  706.640725][T12786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  706.652496][T12786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  706.662538][T12786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  706.673866][T12786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  706.684159][T12786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  706.695356][T12786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  706.725053][T12786] batman_adv: batadv0: Interface activated: batadv_slave_0
[  706.756247][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  706.786104][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  706.818802][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  706.848689][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  706.882678][T12786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  706.914383][T12786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  706.931269][T12786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  706.968930][T12786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  706.988010][T12786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  707.003417][T13005] validate_nla: 11 callbacks suppressed
[  707.003438][T13005] netlink: 'syz.3.3041': attribute type 29 has an invalid length.
[  707.014603][T13010] netlink: 'syz.0.3043': attribute type 3 has an invalid length.
[  707.024168][T12786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  707.036524][T13010] __nla_validate_parse: 3 callbacks suppressed
[  707.036541][T13010] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3043'.
[  707.036634][T12786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  707.060098][T13011] netlink: 'syz.0.3043': attribute type 2 has an invalid length.
[  707.071372][T12786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  707.084442][T12786] batman_adv: batadv0: Interface activated: batadv_slave_1
[  707.090910][T13011] netlink: 'syz.0.3043': attribute type 1 has an invalid length.
[  707.108324][T13007] netlink: 'syz.2.3042': attribute type 33 has an invalid length.
[  707.127615][T13011] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3043'.
[  707.136830][T13007] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3042'.
[  707.149847][T13005] netlink: 'syz.3.3041': attribute type 29 has an invalid length.
[  707.199291][T13008] netlink: 'syz.3.3041': attribute type 29 has an invalid length.
[  707.214553][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  707.228993][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  707.265187][T12786] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  707.291195][T12786] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  707.307390][T12786] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  707.323370][T12786] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  707.336180][T13013] netlink: 'syz.3.3041': attribute type 29 has an invalid length.
[  707.429072][T13015] tun0: tun_chr_ioctl cmd 1074025677
[  707.435899][T13015] tun0: linktype set to 270
[  707.644548][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  707.693784][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  707.749035][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  707.760476][ T4356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  707.784117][ T4356] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  707.817651][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  707.848402][T13023] netlink: 'syz.3.3047': attribute type 25 has an invalid length.
[  707.897935][T13023] netlink: 'syz.3.3047': attribute type 28 has an invalid length.
[  707.921157][T13024] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.3046'.
[  707.957038][T13024] net_ratelimit: 197 callbacks suppressed
[  707.969286][T13024] netlink: zone id is out of range
[  707.976080][T13024] netlink: zone id is out of range
[  707.984138][T13024] netlink: zone id is out of range
[  708.008155][T13024] netlink: zone id is out of range
[  708.014218][T13024] netlink: zone id is out of range
[  708.039522][T13024] netlink: zone id is out of range
[  708.059317][T13024] netlink: zone id is out of range
[  708.078249][T13024] netlink: zone id is out of range
[  708.093057][T13024] netlink: zone id is out of range
[  708.108165][T13024] netlink: zone id is out of range
[  708.187319][ T4295] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  708.332195][T13030] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  708.651946][T13044] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3054'.
[  708.697186][T13045] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3054'.
[  709.106200][ T4282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  709.117000][ T4282] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  709.126820][ T4282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  709.136641][ T4282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  709.145913][ T4282] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  709.153953][ T4282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  709.304471][   T42] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  709.327003][T13049] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3056'.
[  709.415994][   T42] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  709.474724][T13059] FAULT_INJECTION: forcing a failure.
[  709.474724][T13059] name failslab, interval 1, probability 0, space 0, times 0
[  709.488450][T13059] CPU: 1 PID: 13059 Comm: syz.3.3058 Not tainted 6.1.137-syzkaller #0
[  709.496761][T13059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  709.506855][T13059] Call Trace:
[  709.510275][T13059]  <TASK>
[  709.513234][T13059]  dump_stack_lvl+0x168/0x22e
[  709.518245][T13059]  ? show_regs_print_info+0x12/0x12
[  709.523833][T13059]  ? load_image+0x3b0/0x3b0
[  709.528500][T13059]  ? __lock_acquire+0x7c50/0x7c50
[  709.533762][T13059]  ? __mutex_lock+0x19e/0xaf0
[  709.538566][T13059]  should_fail_ex+0x399/0x4d0
[  709.543440][T13059]  should_failslab+0x5/0x20
[  709.548072][T13059]  slab_pre_alloc_hook+0x59/0x310
[  709.553146][T13059]  ? mutex_lock_nested+0x10/0x10
[  709.558240][T13059]  kmem_cache_alloc+0x56/0x2f0
[  709.563159][T13059]  ? fasync_helper+0x36/0xa0
[  709.568005][T13059]  fasync_helper+0x36/0xa0
[  709.573146][T13059]  pipe_fasync+0x104/0x1e0
[  709.577793][T13059]  ? pipe_release+0x330/0x330
[  709.582531][T13059]  do_vfs_ioctl+0x1083/0x1d10
[  709.587426][T13059]  ? __ia32_compat_sys_ioctl+0x780/0x780
[  709.593576][T13059]  ? tomoyo_path_number_perm+0x1b6/0x600
[  709.599455][T13059]  ? __lock_acquire+0x7c50/0x7c50
[  709.605077][T13059]  ? slab_free_freelist_hook+0x131/0x1a0
[  709.611579][T13059]  ? tomoyo_path_number_perm+0x4ae/0x600
[  709.617551][T13059]  ? __kmem_cache_free+0xb6/0x1f0
[  709.622832][T13059]  ? tomoyo_path_number_perm+0x503/0x600
[  709.628884][T13059]  ? tomoyo_path_number_perm+0x1b6/0x600
[  709.634669][T13059]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  709.640261][T13059]  ? __fget_files+0x28/0x4d0
[  709.645351][T13059]  ? bpf_lsm_file_ioctl+0x5/0x10
[  709.650809][T13059]  ? security_file_ioctl+0x7c/0xa0
[  709.656347][T13059]  __se_sys_ioctl+0x83/0x170
[  709.661109][T13059]  do_syscall_64+0x4c/0xa0
[  709.665710][T13059]  ? clear_bhb_loop+0x45/0xa0
[  709.670441][T13059]  ? clear_bhb_loop+0x45/0xa0
[  709.675466][T13059]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  709.681994][T13059] RIP: 0033:0x7fb5e978e969
[  709.686617][T13059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  709.708341][T13059] RSP: 002b:00007fb5ea5a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  709.717240][T13059] RAX: ffffffffffffffda RBX: 00007fb5e99b5fa0 RCX: 00007fb5e978e969
[  709.725260][T13059] RDX: 00002000000013c0 RSI: 0000000000005452 RDI: 0000000000000000
[  709.733273][T13059] RBP: 00007fb5ea5a6090 R08: 0000000000000000 R09: 0000000000000000
[  709.741385][T13059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  709.749622][T13059] R13: 0000000000000000 R14: 00007fb5e99b5fa0 R15: 00007ffc6baea0d8
[  709.757751][T13059]  </TASK>
[  709.825459][   T42] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  709.861045][T13053] chnl_net:caif_netlink_parms(): no params data found
[  709.873312][ T4282] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18
[  710.015535][   T42] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  710.063794][T13063] tun0: tun_chr_ioctl cmd 1074025677
[  710.129660][T13072] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.3062'.
[  710.139999][T13063] tun0: linktype set to 270
[  710.162681][T13071] device syzkaller0 entered promiscuous mode
[  710.209367][T13070] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  710.336449][T13079] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3064'.
[  710.414360][T13053] bridge0: port 1(bridge_slave_0) entered blocking state
[  710.437039][T13053] bridge0: port 1(bridge_slave_0) entered disabled state
[  710.462243][T13053] device bridge_slave_0 entered promiscuous mode
[  710.480951][T13053] bridge0: port 2(bridge_slave_1) entered blocking state
[  710.498074][T13053] bridge0: port 2(bridge_slave_1) entered disabled state
[  710.507237][T13053] device bridge_slave_1 entered promiscuous mode
[  710.603190][T13053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  710.690285][T13053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  710.845783][T13053] team0: Port device team_slave_0 added
[  711.015011][T13094] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3069'.
[  711.030343][T13053] team0: Port device team_slave_1 added
[  711.081850][T13053] batman_adv: batadv0: Adding interface: batadv_slave_0
[  711.096445][T13053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  711.123555][T13053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  711.139463][T13053] batman_adv: batadv0: Adding interface: batadv_slave_1
[  711.147540][T13053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  711.175445][T13053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  711.188088][ T4282] Bluetooth: hci2: command 0x0409 tx timeout
[  711.427101][T13053] device hsr_slave_0 entered promiscuous mode
[  711.438318][ T4282] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[  711.445927][ T4282] Bluetooth: hci0: Invalid handle: 0x2068 > 0x0eff
[  711.455792][T13053] device hsr_slave_1 entered promiscuous mode
[  711.474408][T13053] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  711.499398][T13053] Cannot create hsr debugfs directory
[  711.685652][T13105] tun0: tun_chr_ioctl cmd 1074025677
[  711.693586][T13105] tun0: linktype set to 270
[  712.047113][T13115] __nla_validate_parse: 1 callbacks suppressed
[  712.047138][T13115] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3077'.
[  712.244024][T13116] validate_nla: 19 callbacks suppressed
[  712.244065][T13116] netlink: 'syz.3.3078': attribute type 10 has an invalid length.
[  712.276705][T13116] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  712.301715][T13120] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.3079'.
[  712.498856][T13125] netlink: 'syz.2.3081': attribute type 39 has an invalid length.
[  712.764028][   T42] device hsr_slave_0 left promiscuous mode
[  712.798668][   T42] device hsr_slave_1 left promiscuous mode
[  712.824531][T13125] syz.2.3081 (13125) used greatest stack depth: 20808 bytes left
[  712.834545][   T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  712.858177][   T42] batman_adv: batadv0: Removing interface: batadv_slave_0
[  712.888390][   T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  712.906552][   T42] batman_adv: batadv0: Removing interface: batadv_slave_1
[  712.927317][   T42] device bridge_slave_1 left promiscuous mode
[  712.953941][   T42] bridge0: port 2(bridge_slave_1) entered disabled state
[  712.963642][   T42] device bridge_slave_0 left promiscuous mode
[  712.970800][   T42] bridge0: port 1(bridge_slave_0) entered disabled state
[  713.059361][T13141] netlink: 'syz.1.3085': attribute type 29 has an invalid length.
[  713.069591][   T42] device veth1_macvtap left promiscuous mode
[  713.077640][   T42] device veth0_macvtap left promiscuous mode
[  713.092061][   T42] device veth1_vlan left promiscuous mode
[  713.101024][   T42] device veth0_vlan left promiscuous mode
[  713.268636][ T4282] Bluetooth: hci2: command 0x041b tx timeout
[  713.542982][T13152] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3089'.
[  713.558016][T13152] net_ratelimit: 198 callbacks suppressed
[  713.558037][T13152] netlink: zone id is out of range
[  713.579763][T13152] netlink: zone id is out of range
[  713.585324][T13152] netlink: zone id is out of range
[  713.591127][T13152] netlink: zone id is out of range
[  713.609579][T13152] netlink: zone id is out of range
[  713.615015][T13152] netlink: zone id is out of range
[  713.622161][T13152] netlink: zone id is out of range
[  713.628392][T13152] netlink: zone id is out of range
[  713.634499][T13152] netlink: zone id is out of range
[  713.640266][T13152] netlink: zone id is out of range
[  713.986277][   T42] team0 (unregistering): Port device team_slave_1 removed
[  714.059601][   T42] team0 (unregistering): Port device team_slave_0 removed
[  714.144705][   T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  714.226428][   T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  714.444352][T13158] netlink: 'syz.3.3091': attribute type 3 has an invalid length.
[  714.453201][T13158] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3091'.
[  714.843021][   T42] bond0 (unregistering): Released all slaves
[  714.935632][T13141] netlink: 'syz.1.3085': attribute type 29 has an invalid length.
[  714.963315][T13149] tun0: tun_chr_ioctl cmd 1074025677
[  714.983623][T13149] tun0: linktype set to 270
[  715.157363][T13053] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  715.179716][T13053] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  715.203832][T13053] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  715.229768][T13053] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  715.286979][T13164] netlink: 'syz.1.3093': attribute type 10 has an invalid length.
[  715.348097][ T4282] Bluetooth: hci2: command 0x040f tx timeout
[  715.356420][T13164] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  715.526800][T13053] 8021q: adding VLAN 0 to HW filter on device bond0
[  715.557786][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  715.567197][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  715.581501][T13053] 8021q: adding VLAN 0 to HW filter on device team0
[  715.596201][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  715.606951][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  715.616650][ T4356] bridge0: port 1(bridge_slave_0) entered blocking state
[  715.624663][ T4356] bridge0: port 1(bridge_slave_0) entered forwarding state
[  715.633346][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  715.654516][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  715.667779][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  715.676784][ T4356] bridge0: port 2(bridge_slave_1) entered blocking state
[  715.683931][ T4356] bridge0: port 2(bridge_slave_1) entered forwarding state
[  715.693890][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  715.706639][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  715.726441][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  715.746048][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  715.763537][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  715.773036][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  715.786475][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  715.795647][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  715.805369][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  715.821102][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  715.831023][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  715.844097][T13053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  716.024279][T13175] netlink: 'syz.4.3096': attribute type 39 has an invalid length.
[  716.209471][T13179] netlink: 'syz.1.3105': attribute type 10 has an invalid length.
[  716.224835][T13179] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  716.250831][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  716.262525][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  716.274840][T13053] 8021q: adding VLAN 0 to HW filter on device batadv0
[  716.304647][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  716.316297][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  716.345879][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  716.366649][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  716.382447][T13053] device veth0_vlan entered promiscuous mode
[  716.409810][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  716.419346][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  716.446699][T13053] device veth1_vlan entered promiscuous mode
[  716.493944][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  716.507767][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  716.517167][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  716.526999][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  716.537575][T13189] netlink: 'syz.4.3100': attribute type 2 has an invalid length.
[  716.546180][T13189] netlink: 'syz.4.3100': attribute type 8 has an invalid length.
[  716.564169][T13189] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3100'.
[  716.577297][T13053] device veth0_macvtap entered promiscuous mode
[  716.589511][T13190] device lo entered promiscuous mode
[  716.601033][T13053] device veth1_macvtap entered promiscuous mode
[  716.621508][T13053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  716.632816][T13053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  716.643313][T13053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  716.654349][T13053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  716.665131][T13053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  716.683631][T13053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  716.695562][T13053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  716.719160][T13053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  716.744182][T13053] batman_adv: batadv0: Interface activated: batadv_slave_0
[  716.764951][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  716.783895][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  716.802064][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  716.844152][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  716.860673][T13053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  716.880136][T13053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  716.890525][T13053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  716.901479][T13053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  716.911952][T13053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  716.929949][T13053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  716.940251][T13053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  716.951302][T13053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  716.963363][T13053] batman_adv: batadv0: Interface activated: batadv_slave_1
[  716.985640][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  717.011517][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  717.030987][T13053] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  717.048310][T13053] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  717.081789][T13053] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  717.107460][T13053] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  717.316533][T13201] netlink: 'syz.2.3104': attribute type 33 has an invalid length.
[  717.332654][T13201] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3104'.
[  717.356391][   T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  717.378863][   T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  717.395989][T13205] tun0: tun_chr_ioctl cmd 1074025677
[  717.408709][T13205] tun0: linktype set to 270
[  717.413845][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  717.429894][ T4282] Bluetooth: hci2: command 0x0419 tx timeout
[  717.458903][T13204] netlink: 'syz.4.3106': attribute type 10 has an invalid length.
[  717.469781][T13204] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  717.497263][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  717.578816][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  717.624145][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  717.753985][T13209] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3107'.
[  718.234883][T13226] netlink: 'syz.0.3111': attribute type 29 has an invalid length.
[  718.315331][T13226] netlink: 'syz.0.3111': attribute type 29 has an invalid length.
[  718.357731][T13219] netlink: 'syz.0.3111': attribute type 29 has an invalid length.
[  718.376626][T13226] netlink: 'syz.0.3111': attribute type 29 has an invalid length.
[  718.391127][ T4282] Bluetooth: hci2: unexpected event 0x20 length: 151 > 7
[  718.700914][   T41] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  718.855574][ T4295] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  718.865993][ T4295] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  718.876338][ T4295] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  718.885150][ T4295] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  718.889766][   T41] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  718.908100][ T4295] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  718.916607][ T4295] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  719.118264][   T41] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  719.193977][T13248] device lo entered promiscuous mode
[  719.216250][T13244] netlink: 'syz.3.3118': attribute type 10 has an invalid length.
[  719.246278][T13244] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  719.273962][T13253] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3122'.
[  719.317307][T13253] net_ratelimit: 132 callbacks suppressed
[  719.317400][T13253] netlink: zone id is out of range
[  719.330368][T13253] netlink: zone id is out of range
[  719.340155][T13253] netlink: zone id is out of range
[  719.345747][T13253] netlink: zone id is out of range
[  719.351375][T13253] netlink: zone id is out of range
[  719.358495][T13253] netlink: zone id is out of range
[  719.364208][T13253] netlink: zone id is out of range
[  719.384489][T13253] netlink: zone id is out of range
[  719.394418][   T41] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  719.405365][T13253] netlink: zone id is out of range
[  719.417268][T13253] netlink: zone id is out of range
[  719.637167][T13255] tun0: tun_chr_ioctl cmd 1074025677
[  719.644642][T13255] tun0: linktype set to 270
[  719.815338][T13264] netlink: 'syz.3.3127': attribute type 2 has an invalid length.
[  719.823093][T13268] netlink: 'syz.1.3126': attribute type 29 has an invalid length.
[  719.830935][T13264] netlink: 'syz.3.3127': attribute type 8 has an invalid length.
[  719.840364][T13264] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3127'.
[  719.916832][ T4295] Bluetooth: hci1: unexpected event 0x20 length: 151 > 7
[  720.018066][T13239] chnl_net:caif_netlink_parms(): no params data found
[  720.094458][T13273] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3129'.
[  720.304695][T13282] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  720.403120][T13239] bridge0: port 1(bridge_slave_0) entered blocking state
[  720.411970][T13239] bridge0: port 1(bridge_slave_0) entered disabled state
[  720.420582][T13239] device bridge_slave_0 entered promiscuous mode
[  720.498699][T13290] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3135'.
[  720.508999][T13239] bridge0: port 2(bridge_slave_1) entered blocking state
[  720.521661][T13239] bridge0: port 2(bridge_slave_1) entered disabled state
[  720.541002][T13239] device bridge_slave_1 entered promiscuous mode
[  720.656146][T13297] FAULT_INJECTION: forcing a failure.
[  720.656146][T13297] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  720.706215][T13297] CPU: 1 PID: 13297 Comm: syz.3.3138 Not tainted 6.1.137-syzkaller #0
[  720.714541][T13297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  720.724716][T13297] Call Trace:
[  720.728036][T13297]  <TASK>
[  720.730980][T13297]  dump_stack_lvl+0x168/0x22e
[  720.735893][T13297]  ? show_regs_print_info+0x12/0x12
[  720.741369][T13297]  ? load_image+0x3b0/0x3b0
[  720.745968][T13297]  ? __lock_acquire+0x7c50/0x7c50
[  720.751094][T13297]  should_fail_ex+0x399/0x4d0
[  720.755886][T13297]  _copy_from_user+0x2c/0x170
[  720.760672][T13297]  __copy_msghdr+0x3b7/0x580
[  720.765365][T13297]  ___sys_sendmsg+0x1a2/0x290
[  720.770057][T13297]  ? __sys_sendmsg+0x270/0x270
[  720.774846][T13297]  ? __lock_acquire+0x7c50/0x7c50
[  720.779895][T13297]  ? __fdget+0x17c/0x200
[  720.784330][T13297]  __se_sys_sendmsg+0x19e/0x270
[  720.789211][T13297]  ? __x64_sys_sendmsg+0x80/0x80
[  720.794180][T13297]  ? syscall_enter_from_user_mode+0x2a/0x80
[  720.800160][T13297]  do_syscall_64+0x4c/0xa0
[  720.804676][T13297]  ? clear_bhb_loop+0x45/0xa0
[  720.809357][T13297]  ? clear_bhb_loop+0x45/0xa0
[  720.814204][T13297]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  720.820211][T13297] RIP: 0033:0x7fb5e978e969
[  720.824634][T13297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  720.844459][T13297] RSP: 002b:00007fb5ea5a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  720.852929][T13297] RAX: ffffffffffffffda RBX: 00007fb5e99b5fa0 RCX: 00007fb5e978e969
[  720.860922][T13297] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000007
[  720.869076][T13297] RBP: 00007fb5ea5a6090 R08: 0000000000000000 R09: 0000000000000000
[  720.877315][T13297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  720.885395][T13297] R13: 0000000000000000 R14: 00007fb5e99b5fa0 R15: 00007ffc6baea0d8
[  720.893488][T13297]  </TASK>
[  720.917238][T13239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  720.948550][ T4295] Bluetooth: hci3: command 0x0409 tx timeout
[  720.962712][T13239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  721.124549][T13308] tun0: tun_chr_ioctl cmd 1074025677
[  721.149390][T13308] tun0: linktype set to 270
[  721.261806][ T4295] Bluetooth: hci2: unexpected event 0x20 length: 151 > 7
[  721.379164][T13239] team0: Port device team_slave_0 added
[  721.425267][T13314] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3143'.
[  721.526755][T13239] team0: Port device team_slave_1 added
[  721.776967][T13318] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3145'.
[  721.845839][T13239] batman_adv: batadv0: Adding interface: batadv_slave_0
[  721.868615][T13239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  721.946513][T13239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  722.130030][T13327] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3149'.
[  722.155405][T13321] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  722.172560][T13239] batman_adv: batadv0: Adding interface: batadv_slave_1
[  722.185479][T13239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  722.215096][T13239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  722.301881][T13239] device hsr_slave_0 entered promiscuous mode
[  722.328508][T13239] device hsr_slave_1 entered promiscuous mode
[  722.341556][T13239] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  722.359449][T13239] Cannot create hsr debugfs directory
[  722.391952][   T41] device hsr_slave_0 left promiscuous mode
[  722.408615][   T41] device hsr_slave_1 left promiscuous mode
[  722.428318][   T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  722.446221][   T41] batman_adv: batadv0: Removing interface: batadv_slave_0
[  722.465141][   T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  722.483364][   T41] batman_adv: batadv0: Removing interface: batadv_slave_1
[  722.504381][   T41] device bridge_slave_1 left promiscuous mode
[  722.511376][   T41] bridge0: port 2(bridge_slave_1) entered disabled state
[  722.532511][   T41] device bridge_slave_0 left promiscuous mode
[  722.539263][   T41] bridge0: port 1(bridge_slave_0) entered disabled state
[  722.571934][T13345] validate_nla: 15 callbacks suppressed
[  722.571955][T13345] netlink: 'syz.0.3154': attribute type 29 has an invalid length.
[  722.598171][   T41] device veth0_macvtap left promiscuous mode
[  722.605661][   T41] device veth1_vlan left promiscuous mode
[  722.613086][   T41] device veth0_vlan left promiscuous mode
[  723.029986][ T4295] Bluetooth: hci3: command 0x041b tx timeout
[  723.217067][   T41] team0 (unregistering): Port device team_slave_1 removed
[  723.272198][   T41] team0 (unregistering): Port device team_slave_0 removed
[  723.351873][   T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  723.405732][   T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  723.900956][   T41] bond0 (unregistering): Released all slaves
[  724.008899][T13345] netlink: 'syz.0.3154': attribute type 29 has an invalid length.
[  724.029762][T13357] tun0: tun_chr_ioctl cmd 1074025677
[  724.035424][T13357] tun0: linktype set to 270
[  724.364856][T13368] netlink: 'syz.1.3162': attribute type 33 has an invalid length.
[  724.381984][T13368] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3162'.
[  724.397569][T13366] netlink: 'syz.0.3160': attribute type 10 has an invalid length.
[  724.459743][T13370] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.3161'.
[  724.471500][T13370] net_ratelimit: 200 callbacks suppressed
[  724.471657][T13370] netlink: zone id is out of range
[  724.483625][T13370] netlink: zone id is out of range
[  724.489552][T13370] netlink: zone id is out of range
[  724.495534][T13370] netlink: zone id is out of range
[  724.501244][T13370] netlink: zone id is out of range
[  724.507210][T13370] netlink: zone id is out of range
[  724.521629][T13370] netlink: zone id is out of range
[  724.534203][T13370] netlink: zone id is out of range
[  724.584061][T13370] netlink: zone id is out of range
[  724.633247][T13370] netlink: zone id is out of range
[  724.640824][T13366] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  724.828649][T13366] syz.0.3160 (13366) used greatest stack depth: 20672 bytes left
[  725.108292][ T4295] Bluetooth: hci3: command 0x040f tx timeout
[  725.253781][T13388] netlink: 'syz.3.3168': attribute type 3 has an invalid length.
[  725.351202][T13389] netlink: 'syz.3.3168': attribute type 2 has an invalid length.
[  725.357072][T13388] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3168'.
[  725.369587][T13389] netlink: 'syz.3.3168': attribute type 1 has an invalid length.
[  725.377659][T13389] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3168'.
[  725.529328][T13239] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  725.554288][T13239] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  725.596789][T13239] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  725.625790][T13239] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  725.743023][T13399] netlink: 'syz.1.3169': attribute type 29 has an invalid length.
[  725.771606][T13400] tun0: tun_chr_ioctl cmd 1074025677
[  725.780700][T13400] tun0: linktype set to 270
[  725.839916][T13399] netlink: 'syz.1.3169': attribute type 29 has an invalid length.
[  725.863103][T13392] netlink: 'syz.1.3169': attribute type 29 has an invalid length.
[  725.913925][ T4295] Bluetooth: hci1: unexpected event 0x20 length: 151 > 7
[  726.043218][T13239] 8021q: adding VLAN 0 to HW filter on device bond0
[  726.126619][T13239] 8021q: adding VLAN 0 to HW filter on device team0
[  726.157717][T13406] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3173'.
[  726.175875][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  726.199405][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  726.235340][T13408] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3174'.
[  726.258355][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  726.279341][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  726.318918][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  726.326076][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  726.354568][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  726.389240][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  726.410775][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  726.434980][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  726.442365][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  726.473473][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  726.494588][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  726.526557][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  726.570088][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  726.579695][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  726.612794][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  726.635619][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  726.656013][T13418] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  726.693277][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  726.772730][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  726.821536][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  726.872292][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  726.922458][T13239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  727.188225][ T4295] Bluetooth: hci3: command 0x0419 tx timeout
[  727.315869][ T4295] Bluetooth: hci1: unexpected event 0x20 length: 151 > 7
[  727.534866][T13445] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3186'.
[  727.574709][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  727.584185][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  727.625206][T13239] 8021q: adding VLAN 0 to HW filter on device batadv0
[  727.635663][T13447] validate_nla: 7 callbacks suppressed
[  727.635681][T13447] netlink: 'syz.4.3187': attribute type 33 has an invalid length.
[  727.656591][T13447] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3187'.
[  727.755521][T13449] netlink: 'syz.4.3189': attribute type 3 has an invalid length.
[  727.764151][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  727.774321][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  727.788520][T13449] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3189'.
[  727.806099][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  727.822653][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  727.841168][T13452] netlink: 'syz.4.3189': attribute type 2 has an invalid length.
[  727.855766][T13239] device veth0_vlan entered promiscuous mode
[  727.872418][T13452] netlink: 'syz.4.3189': attribute type 1 has an invalid length.
[  727.885743][T13452] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3189'.
[  728.306403][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  728.317594][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  728.339347][T13457] tun0: tun_chr_ioctl cmd 1074025677
[  728.349600][T13457] tun0: linktype set to 270
[  728.355264][T13455] netlink: 'syz.3.3190': attribute type 10 has an invalid length.
[  728.375916][T13455] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  728.413973][T13239] device veth1_vlan entered promiscuous mode
[  728.482088][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  728.499013][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  728.534261][T13239] device veth0_macvtap entered promiscuous mode
[  728.552458][T13239] device veth1_macvtap entered promiscuous mode
[  728.596018][T13239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  728.657898][T13239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  728.683761][T13239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  728.713802][T13239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  728.724631][T13239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  728.739452][T13239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  728.749955][T13239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  728.760922][T13239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  728.773727][T13239] batman_adv: batadv0: Interface activated: batadv_slave_0
[  728.824745][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  728.834845][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  728.843514][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  728.864058][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  728.887264][T13239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  728.930187][T13239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  728.950120][T13239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  728.981203][T13239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  729.000607][T13239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  729.017873][T13239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  729.041936][T13239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  729.057938][T13239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  729.079572][T13239] batman_adv: batadv0: Interface activated: batadv_slave_1
[  729.105158][T13239] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  729.134456][T13239] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  729.147320][T13475] netlink: 'syz.4.3195': attribute type 29 has an invalid length.
[  729.165864][T13239] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  729.175106][T13239] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  729.196981][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  729.227562][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  729.251254][T13475] netlink: 'syz.4.3195': attribute type 29 has an invalid length.
[  729.270628][T13477] netlink: 'syz.4.3195': attribute type 29 has an invalid length.
[  729.283925][T13481] netlink: 'syz.4.3195': attribute type 29 has an invalid length.
[  729.321962][T13483] netlink: 'syz.1.3198': attribute type 33 has an invalid length.
[  729.456076][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  729.476328][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  729.508493][T13490] __nla_validate_parse: 1 callbacks suppressed
[  729.508512][T13490] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3200'.
[  729.538222][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  729.569321][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  729.583837][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  729.629946][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  729.693377][T13494] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3201'.
[  729.709177][T13492] tun0: tun_chr_ioctl cmd 1074025677
[  729.717337][T13492] tun0: linktype set to 270
[  729.760750][T13497] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3201'.
[  729.887198][T13496] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  729.943015][T13501] FAULT_INJECTION: forcing a failure.
[  729.943015][T13501] name failslab, interval 1, probability 0, space 0, times 0
[  730.007300][T13501] CPU: 1 PID: 13501 Comm: syz.3.3204 Not tainted 6.1.137-syzkaller #0
[  730.015708][T13501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  730.025899][T13501] Call Trace:
[  730.029473][T13501]  <TASK>
[  730.032449][T13501]  dump_stack_lvl+0x168/0x22e
[  730.037361][T13501]  ? show_regs_print_info+0x12/0x12
[  730.042615][T13501]  ? load_image+0x3b0/0x3b0
[  730.047283][T13501]  should_fail_ex+0x399/0x4d0
[  730.052008][T13501]  should_failslab+0x5/0x20
[  730.056576][T13501]  slab_pre_alloc_hook+0x59/0x310
[  730.061679][T13501]  ? lockdep_hardirqs_on+0x94/0x140
[  730.067230][T13501]  ? memcg_alloc_slab_cgroups+0x83/0x120
[  730.073353][T13501]  __kmem_cache_alloc_node+0x4f/0x260
[  730.078845][T13501]  ? memcg_alloc_slab_cgroups+0x83/0x120
[  730.084826][T13501]  __kmalloc_node+0xa0/0x240
[  730.089745][T13501]  memcg_alloc_slab_cgroups+0x83/0x120
[  730.096352][T13501]  new_slab+0xc3/0x2c0
[  730.100497][T13501]  ___slab_alloc+0xbc6/0x1220
[  730.105345][T13501]  ? sock_alloc_inode+0x24/0xc0
[  730.110346][T13501]  kmem_cache_alloc_lru+0x1ae/0x2e0
[  730.115603][T13501]  ? sock_alloc_inode+0x24/0xc0
[  730.120882][T13501]  sock_alloc_inode+0x24/0xc0
[  730.125822][T13501]  ? sockfs_init_fs_context+0xa0/0xa0
[  730.131786][T13501]  new_inode_pseudo+0x5f/0x1c0
[  730.136781][T13501]  __sock_create+0x129/0x940
[  730.141621][T13501]  __sys_socket+0xc4/0x190
[  730.146111][T13501]  __x64_sys_socket+0x76/0x80
[  730.150945][T13501]  do_syscall_64+0x4c/0xa0
[  730.155612][T13501]  ? clear_bhb_loop+0x45/0xa0
[  730.160336][T13501]  ? clear_bhb_loop+0x45/0xa0
[  730.165156][T13501]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  730.172213][T13501] RIP: 0033:0x7fb5e978e969
[  730.176844][T13501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  730.196677][T13501] RSP: 002b:00007fb5ea5a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  730.205770][T13501] RAX: ffffffffffffffda RBX: 00007fb5e99b5fa0 RCX: 00007fb5e978e969
[  730.214704][T13501] RDX: 0000000000000106 RSI: 0200000000000001 RDI: 0000000000000002
[  730.222754][T13501] RBP: 00007fb5ea5a6090 R08: 0000000000000000 R09: 0000000000000000
[  730.230939][T13501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  730.239569][T13501] R13: 0000000000000000 R14: 00007fb5e99b5fa0 R15: 00007ffc6baea0d8
[  730.247705][T13501]  </TASK>
[  730.512506][T13502] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  730.730594][ T4295] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  731.272981][T13525] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3212'.
[  731.650128][T13533] device syzkaller0 entered promiscuous mode
[  731.741269][ T4282] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  731.751828][ T4282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  731.782551][ T4282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  731.792649][ T4282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  731.802014][ T4282] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  731.815078][ T4282] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  733.924091][ T4295] Bluetooth: hci4: command 0x0409 tx timeout
[  733.954725][T13543] FAULT_INJECTION: forcing a failure.
[  733.954725][T13543] name failslab, interval 1, probability 0, space 0, times 0
[  733.984628][   T42] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  733.995545][T13543] CPU: 1 PID: 13543 Comm: syz.0.3218 Not tainted 6.1.137-syzkaller #0
[  734.004015][T13543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  734.014112][T13543] Call Trace:
[  734.017426][T13543]  <TASK>
[  734.020391][T13543]  dump_stack_lvl+0x168/0x22e
[  734.025207][T13543]  ? show_regs_print_info+0x12/0x12
[  734.030491][T13543]  ? load_image+0x3b0/0x3b0
[  734.035039][T13543]  ? __lock_acquire+0x7c50/0x7c50
[  734.040102][T13543]  ? stack_trace_save+0x98/0xe0
[  734.044982][T13543]  should_fail_ex+0x399/0x4d0
[  734.050076][T13543]  should_failslab+0x5/0x20
[  734.054776][T13543]  slab_pre_alloc_hook+0x59/0x310
[  734.059836][T13543]  kmem_cache_alloc_lru+0x49/0x2e0
[  734.065140][T13543]  ? __d_alloc+0x31/0x700
[  734.069937][T13543]  __d_alloc+0x31/0x700
[  734.074116][T13543]  d_alloc_pseudo+0x19/0x70
[  734.078671][T13543]  alloc_file_pseudo+0xc8/0x1f0
[  734.083723][T13543]  ? alloc_empty_file_noaccount+0x80/0x80
[  734.089814][T13543]  ? __lock_acquire+0x7c50/0x7c50
[  734.095061][T13543]  ? __local_bh_enable_ip+0x12a/0x1b0
[  734.100456][T13543]  ? _local_bh_enable+0xa0/0xa0
[  734.105383][T13543]  ? __radix_tree_preload+0x82/0x880
[  734.110879][T13543]  anon_inode_getfile+0xc1/0x1a0
[  734.115953][T13543]  bpf_link_prime+0xa2/0x1d0
[  734.120664][T13543]  cgroup_bpf_link_attach+0x1c9/0x3d0
[  734.126055][T13543]  ? __fget_files+0x28/0x4d0
[  734.130663][T13543]  ? cgroup_bpf_prog_detach+0x1b0/0x1b0
[  734.136240][T13543]  ? bpf_lsm_capable+0x5/0x10
[  734.140948][T13543]  ? security_capable+0x85/0xb0
[  734.145831][T13543]  link_create+0x78f/0xa70
[  734.150299][T13543]  __sys_bpf+0x633/0x6d0
[  734.154557][T13543]  ? bpf_link_show_fdinfo+0x310/0x310
[  734.160060][T13543]  ? lock_chain_count+0x20/0x20
[  734.164960][T13543]  __x64_sys_bpf+0x78/0x90
[  734.169489][T13543]  do_syscall_64+0x4c/0xa0
[  734.173925][T13543]  ? clear_bhb_loop+0x45/0xa0
[  734.178608][T13543]  ? clear_bhb_loop+0x45/0xa0
[  734.183302][T13543]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  734.189224][T13543] RIP: 0033:0x7f409778e969
[  734.193675][T13543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  734.213677][T13543] RSP: 002b:00007f4098562038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  734.222299][T13543] RAX: ffffffffffffffda RBX: 00007f40979b5fa0 RCX: 00007f409778e969
[  734.231073][T13543] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 000000000000001c
[  734.239631][T13543] RBP: 00007f4098562090 R08: 0000000000000000 R09: 0000000000000000
[  734.247638][T13543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  734.255627][T13543] R13: 0000000000000000 R14: 00007f40979b5fa0 R15: 00007ffdf77357e8
[  734.263622][T13543]  </TASK>
[  734.290453][ T4295] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18
[  734.384551][   T42] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  734.515662][   T42] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  734.541548][T13556] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3224'.
[  734.594075][T13556] net_ratelimit: 200 callbacks suppressed
[  734.594200][T13556] netlink: zone id is out of range
[  734.615241][T13556] netlink: zone id is out of range
[  734.633930][T13556] netlink: zone id is out of range
[  734.658483][T13556] netlink: zone id is out of range
[  734.675445][T13556] netlink: zone id is out of range
[  734.675937][   T42] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  734.688787][T13556] netlink: zone id is out of range
[  734.697753][T13556] netlink: zone id is out of range
[  734.722714][T13556] netlink: zone id is out of range
[  734.757579][T13556] netlink: zone id is out of range
[  734.763289][T13556] netlink: zone id is out of range
[  734.913432][T13536] chnl_net:caif_netlink_parms(): no params data found
[  735.186580][T13576] FAULT_INJECTION: forcing a failure.
[  735.186580][T13576] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  735.207644][T13576] CPU: 0 PID: 13576 Comm: syz.1.3230 Not tainted 6.1.137-syzkaller #0
[  735.216044][T13576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  735.226332][T13576] Call Trace:
[  735.229651][T13576]  <TASK>
[  735.232650][T13576]  dump_stack_lvl+0x168/0x22e
[  735.237740][T13576]  ? show_regs_print_info+0x12/0x12
[  735.243072][T13576]  ? load_image+0x3b0/0x3b0
[  735.247715][T13576]  ? __lock_acquire+0x7c50/0x7c50
[  735.252816][T13576]  should_fail_ex+0x399/0x4d0
[  735.257645][T13576]  prepare_alloc_pages+0x1e2/0x5f0
[  735.262843][T13576]  __alloc_pages+0x123/0x4e0
[  735.267478][T13576]  ? zone_statistics+0x170/0x170
[  735.272626][T13576]  ? verify_lock_unused+0x140/0x140
[  735.277973][T13576]  __folio_alloc+0xe/0x30
[  735.282801][T13576]  vma_alloc_folio+0x4a3/0x900
[  735.287912][T13576]  ? mpol_shared_policy_lookup+0x147/0x1e0
[  735.293871][T13576]  shmem_alloc_and_acct_folio+0x42e/0xb60
[  735.299775][T13576]  ? shmem_replace_folio+0xda0/0xda0
[  735.305344][T13576]  ? xas_load+0x119/0x140
[  735.309777][T13576]  ? __filemap_get_folio+0xf0/0xdd0
[  735.314999][T13576]  ? __filemap_get_folio+0xb24/0xdd0
[  735.320328][T13576]  ? __filemap_get_folio+0xf0/0xdd0
[  735.326232][T13576]  ? page_cache_prev_miss+0x350/0x350
[  735.331822][T13576]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  735.337826][T13576]  ? do_user_addr_fault+0x7a0/0xb10
[  735.343154][T13576]  ? lock_chain_count+0x20/0x20
[  735.348037][T13576]  shmem_get_folio_gfp+0x1361/0x3400
[  735.353465][T13576]  shmem_write_begin+0xee/0x3f0
[  735.358347][T13576]  generic_perform_write+0x2db/0x560
[  735.363845][T13576]  ? generic_file_direct_write+0x660/0x660
[  735.369771][T13576]  ? __file_remove_privs+0x5b0/0x5b0
[  735.375184][T13576]  ? preempt_count_add+0x8d/0x190
[  735.380324][T13576]  ? rwsem_write_trylock+0x12f/0x1b0
[  735.385638][T13576]  ? clear_nonspinnable+0x60/0x60
[  735.390764][T13576]  ? generic_write_checks_count+0x3d9/0x4c0
[  735.396669][T13576]  __generic_file_write_iter+0x172/0x430
[  735.402345][T13576]  generic_file_write_iter+0xab/0x2e0
[  735.407828][T13576]  vfs_write+0x44c/0x960
[  735.412129][T13576]  ? file_end_write+0x250/0x250
[  735.417105][T13576]  ? __fget_files+0x44a/0x4d0
[  735.422081][T13576]  ? __fdget_pos+0x2ae/0x360
[  735.426684][T13576]  ? ksys_write+0x71/0x240
[  735.431371][T13576]  ksys_write+0x143/0x240
[  735.435799][T13576]  ? __ia32_sys_read+0x80/0x80
[  735.440644][T13576]  ? lockdep_hardirqs_on+0x94/0x140
[  735.445868][T13576]  do_syscall_64+0x4c/0xa0
[  735.450570][T13576]  ? clear_bhb_loop+0x45/0xa0
[  735.455629][T13576]  ? clear_bhb_loop+0x45/0xa0
[  735.460326][T13576]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  735.466521][T13576] RIP: 0033:0x7fb205d8e969
[  735.471049][T13576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  735.491635][T13576] RSP: 002b:00007fb206b25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  735.500087][T13576] RAX: ffffffffffffffda RBX: 00007fb205fb5fa0 RCX: 00007fb205d8e969
[  735.508431][T13576] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000006
[  735.516766][T13576] RBP: 00007fb206b25090 R08: 0000000000000000 R09: 0000000000000000
[  735.524835][T13576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  735.533003][T13576] R13: 0000000000000000 R14: 00007fb205fb5fa0 R15: 00007ffd7f833aa8
[  735.541093][T13576]  </TASK>
[  735.572786][T13536] bridge0: port 1(bridge_slave_0) entered blocking state
[  735.590991][T13536] bridge0: port 1(bridge_slave_0) entered disabled state
[  735.614581][T13536] device bridge_slave_0 entered promiscuous mode
[  735.626028][T13536] bridge0: port 2(bridge_slave_1) entered blocking state
[  735.634212][T13536] bridge0: port 2(bridge_slave_1) entered disabled state
[  735.643389][T13536] device bridge_slave_1 entered promiscuous mode
[  735.664561][T13572] netlink: 177648 bytes leftover after parsing attributes in process `syz.3.3228'.
[  735.788644][ T4295] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  735.824764][T13536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  735.842970][T13536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  735.912221][T13536] team0: Port device team_slave_0 added
[  735.923078][T13536] team0: Port device team_slave_1 added
[  735.992199][T13536] batman_adv: batadv0: Adding interface: batadv_slave_0
[  735.998010][ T4295] Bluetooth: hci4: command 0x041b tx timeout
[  736.000172][T13536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  736.035120][T13536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  736.054699][T13536] batman_adv: batadv0: Adding interface: batadv_slave_1
[  736.062124][T13536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  736.090518][T13536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  736.150856][T13536] device hsr_slave_0 entered promiscuous mode
[  736.159176][T13536] device hsr_slave_1 entered promiscuous mode
[  736.604627][   T42] device hsr_slave_0 left promiscuous mode
[  736.611584][   T42] device hsr_slave_1 left promiscuous mode
[  736.618177][   T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  736.625999][   T42] batman_adv: batadv0: Removing interface: batadv_slave_0
[  736.642189][   T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  736.650039][   T42] batman_adv: batadv0: Removing interface: batadv_slave_1
[  736.658439][   T42] device bridge_slave_1 left promiscuous mode
[  736.664833][   T42] bridge0: port 2(bridge_slave_1) entered disabled state
[  736.673814][   T42] device bridge_slave_0 left promiscuous mode
[  736.680994][   T42] bridge0: port 1(bridge_slave_0) entered disabled state
[  736.705864][   T42] device veth0_macvtap left promiscuous mode
[  736.712706][   T42] device veth1_vlan left promiscuous mode
[  736.718813][   T42] device veth0_vlan left promiscuous mode
[  737.229706][   T42] team0 (unregistering): Port device team_slave_1 removed
[  737.277336][   T42] team0 (unregistering): Port device team_slave_0 removed
[  737.322564][   T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  737.368199][   T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  737.721236][   T42] bond0 (unregistering): (slave team0): Releasing backup interface
[  738.068672][ T4295] Bluetooth: hci4: command 0x040f tx timeout
[  738.089762][T13594] FAULT_INJECTION: forcing a failure.
[  738.089762][T13594] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  738.178777][T13594] CPU: 0 PID: 13594 Comm: syz.0.3237 Not tainted 6.1.137-syzkaller #0
[  738.187280][T13594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  738.197500][T13594] Call Trace:
[  738.200822][T13594]  <TASK>
[  738.203798][T13594]  dump_stack_lvl+0x168/0x22e
[  738.208702][T13594]  ? show_regs_print_info+0x12/0x12
[  738.214075][T13594]  ? load_image+0x3b0/0x3b0
[  738.218638][T13594]  ? __lock_acquire+0x7c50/0x7c50
[  738.224097][T13594]  ? __virt_addr_valid+0x188/0x540
[  738.229356][T13594]  should_fail_ex+0x399/0x4d0
[  738.234088][T13594]  _copy_from_user+0x2c/0x170
[  738.238961][T13594]  bpf_test_init+0xf9/0x150
[  738.243609][T13594]  bpf_prog_test_run_xdp+0x359/0xe50
[  738.248954][T13594]  ? dev_put+0x80/0x80
[  738.253107][T13594]  ? dev_put+0x80/0x80
[  738.257227][T13594]  bpf_prog_test_run+0x31e/0x390
[  738.262315][T13594]  __sys_bpf+0x593/0x6d0
[  738.266617][T13594]  ? bpf_link_show_fdinfo+0x310/0x310
[  738.272493][T13594]  ? lock_chain_count+0x20/0x20
[  738.277506][T13594]  __x64_sys_bpf+0x78/0x90
[  738.282159][T13594]  do_syscall_64+0x4c/0xa0
[  738.286650][T13594]  ? clear_bhb_loop+0x45/0xa0
[  738.291560][T13594]  ? clear_bhb_loop+0x45/0xa0
[  738.296278][T13594]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  738.302220][T13594] RIP: 0033:0x7f409778e969
[  738.306765][T13594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  738.326686][T13594] RSP: 002b:00007f4098562038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  738.335147][T13594] RAX: ffffffffffffffda RBX: 00007f40979b5fa0 RCX: 00007f409778e969
[  738.343295][T13594] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a
[  738.351399][T13594] RBP: 00007f4098562090 R08: 0000000000000000 R09: 0000000000000000
[  738.359566][T13594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  738.367579][T13594] R13: 0000000000000000 R14: 00007f40979b5fa0 R15: 00007ffdf77357e8
[  738.375691][T13594]  </TASK>
[  738.413823][   T42] bond0 (unregistering): Released all slaves
[  738.587515][T13604] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3239'.
[  738.768698][T13607] validate_nla: 11 callbacks suppressed
[  738.768718][T13607] netlink: 'syz.3.3241': attribute type 1 has an invalid length.
[  738.790437][T13607] netlink: 'syz.3.3241': attribute type 21 has an invalid length.
[  738.805793][T13607] netlink: 'syz.3.3241': attribute type 6 has an invalid length.
[  738.814001][T13607] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3241'.
[  738.824678][T13536] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  738.856527][T13536] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  738.895694][T13536] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  738.928866][T13536] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  739.016503][T13610] netlink: 'syz.0.3243': attribute type 19 has an invalid length.
[  739.027469][T13610] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3243'.
[  739.194811][T13615] netlink: 'syz.3.3245': attribute type 9 has an invalid length.
[  739.216297][T13615] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.3245'.
[  739.408397][T13536] 8021q: adding VLAN 0 to HW filter on device bond0
[  739.466231][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  739.492525][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  739.514376][T13536] 8021q: adding VLAN 0 to HW filter on device team0
[  739.527176][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  739.537267][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  739.557376][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  739.564586][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  739.610361][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  739.630851][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  739.664508][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  739.673502][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  739.680810][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  739.698517][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  739.721230][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  739.737175][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  739.764578][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  739.789604][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  739.816680][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  739.826250][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  739.852125][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  739.861895][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  739.883064][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  739.916954][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  739.928119][T13536] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  740.019124][T13634] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3252'.
[  740.031127][T13634] net_ratelimit: 130 callbacks suppressed
[  740.031167][T13634] netlink: zone id is out of range
[  740.035151][T13636] netlink: 17861 bytes leftover after parsing attributes in process `syz.3.3253'.
[  740.039937][T13634] netlink: zone id is out of range
[  740.067509][T13634] netlink: zone id is out of range
[  740.075425][T13634] netlink: zone id is out of range
[  740.081623][T13634] netlink: zone id is out of range
[  740.087482][T13634] netlink: zone id is out of range
[  740.094967][T13634] netlink: zone id is out of range
[  740.101499][T13634] netlink: zone id is out of range
[  740.107395][T13634] netlink: zone id is out of range
[  740.113721][T13634] netlink: zone id is out of range
[  740.159970][ T4295] Bluetooth: hci4: command 0x0419 tx timeout
[  740.277285][T13640] FAULT_INJECTION: forcing a failure.
[  740.277285][T13640] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  740.299599][T13640] CPU: 1 PID: 13640 Comm: syz.3.3254 Not tainted 6.1.137-syzkaller #0
[  740.307915][T13640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  740.318529][T13640] Call Trace:
[  740.321853][T13640]  <TASK>
[  740.324829][T13640]  dump_stack_lvl+0x168/0x22e
[  740.329576][T13640]  ? show_regs_print_info+0x12/0x12
[  740.334920][T13640]  ? load_image+0x3b0/0x3b0
[  740.339479][T13640]  ? __lock_acquire+0x7c50/0x7c50
[  740.344773][T13640]  should_fail_ex+0x399/0x4d0
[  740.349503][T13640]  _copy_from_user+0x2c/0x170
[  740.354270][T13640]  bpf_prog_test_run_skb+0x258/0x11b0
[  740.359858][T13640]  ? __fget_files+0x28/0x4d0
[  740.364585][T13640]  ? __fget_files+0x44a/0x4d0
[  740.369311][T13640]  ? cpu_online+0xa0/0xa0
[  740.373755][T13640]  bpf_prog_test_run+0x31e/0x390
[  740.378726][T13640]  __sys_bpf+0x593/0x6d0
[  740.383300][T13640]  ? bpf_link_show_fdinfo+0x310/0x310
[  740.388799][T13640]  ? lock_chain_count+0x20/0x20
[  740.393951][T13640]  __x64_sys_bpf+0x78/0x90
[  740.398402][T13640]  do_syscall_64+0x4c/0xa0
[  740.403041][T13640]  ? clear_bhb_loop+0x45/0xa0
[  740.407827][T13640]  ? clear_bhb_loop+0x45/0xa0
[  740.412544][T13640]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  740.418578][T13640] RIP: 0033:0x7fb5e978e969
[  740.423173][T13640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  740.443758][T13640] RSP: 002b:00007fb5ea5a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  740.452467][T13640] RAX: ffffffffffffffda RBX: 00007fb5e99b5fa0 RCX: 00007fb5e978e969
[  740.460635][T13640] RDX: 0000000000000050 RSI: 0000200000001a00 RDI: 000000000000000a
[  740.469140][T13640] RBP: 00007fb5ea5a6090 R08: 0000000000000000 R09: 0000000000000000
[  740.477229][T13640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  740.485356][T13640] R13: 0000000000000000 R14: 00007fb5e99b5fa0 R15: 00007ffc6baea0d8
[  740.493494][T13640]  </TASK>
[  740.524872][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  740.533408][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  740.559859][T13536] 8021q: adding VLAN 0 to HW filter on device batadv0
[  740.643352][T13646] netlink: 'syz.3.3256': attribute type 33 has an invalid length.
[  740.673911][T13646] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3256'.
[  740.929837][T13657] netlink: 'syz.0.3259': attribute type 39 has an invalid length.
[  740.950896][T13657] device veth0_macvtap left promiscuous mode
[  741.230544][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  741.272044][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  741.308135][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  741.323838][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  741.346250][T13536] device veth0_vlan entered promiscuous mode
[  741.354651][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  741.368772][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  741.392068][T13536] device veth1_vlan entered promiscuous mode
[  741.441300][T13673] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3264'.
[  741.448590][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  741.470295][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  741.482568][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  741.492040][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  741.519935][T13536] device veth0_macvtap entered promiscuous mode
[  741.544050][T13536] device veth1_macvtap entered promiscuous mode
[  741.596701][T13676] netlink: 'syz.3.3265': attribute type 3 has an invalid length.
[  741.621993][T13676] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3265'.
[  741.631764][T13536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  741.631968][T13536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  741.631987][T13536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  741.632006][T13536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  741.632024][T13536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  741.632044][T13536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  741.632061][T13536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  741.632080][T13536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  741.645634][T13536] batman_adv: batadv0: Interface activated: batadv_slave_0
[  741.742137][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  741.753497][T13679] FAULT_INJECTION: forcing a failure.
[  741.753497][T13679] name failslab, interval 1, probability 0, space 0, times 0
[  741.755227][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  741.777414][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  741.788935][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  741.804808][T13536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  741.818479][T13679] CPU: 1 PID: 13679 Comm: syz.2.3266 Not tainted 6.1.137-syzkaller #0
[  741.824298][T13536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  741.827157][T13679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  741.827172][T13679] Call Trace:
[  741.827183][T13679]  <TASK>
[  741.827193][T13679]  dump_stack_lvl+0x168/0x22e
[  741.837501][T13536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  741.847349][T13679]  ? show_regs_print_info+0x12/0x12
[  741.851027][T13536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  741.853800][T13679]  ? load_image+0x3b0/0x3b0
[  741.858512][T13536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  741.869778][T13679]  ? __might_sleep+0xd0/0xd0
[  741.869823][T13679]  ? __lock_acquire+0x7c50/0x7c50
[  741.869854][T13679]  should_fail_ex+0x399/0x4d0
[  741.869889][T13679]  should_failslab+0x5/0x20
[  741.875321][T13536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  741.885581][T13679]  slab_pre_alloc_hook+0x59/0x310
[  741.885624][T13679]  kmem_cache_alloc_node+0x5a/0x320
[  741.885648][T13679]  ? __alloc_skb+0xfc/0x7e0
[  741.885681][T13679]  __alloc_skb+0xfc/0x7e0
[  741.885707][T13679]  ? netlink_autobind+0xda/0x300
[  741.885741][T13679]  netlink_sendmsg+0x645/0xbc0
[  741.885781][T13679]  ? netlink_getsockopt+0x540/0x540
[  741.885814][T13679]  ? aa_sock_msg_perm+0x94/0x150
[  741.885837][T13679]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  741.885859][T13679]  ? security_socket_sendmsg+0x7c/0xa0
[  741.885898][T13679]  ? netlink_getsockopt+0x540/0x540
[  741.885927][T13679]  ____sys_sendmsg+0x59b/0x970
[  741.885965][T13679]  ? __sys_sendmsg_sock+0x30/0x30
[  741.885993][T13679]  ? __import_iovec+0x315/0x500
[  741.886025][T13679]  ? import_iovec+0x6f/0xa0
[  741.886051][T13679]  ___sys_sendmsg+0x21c/0x290
[  741.886084][T13679]  ? __sys_sendmsg+0x270/0x270
[  741.886138][T13679]  ? __lock_acquire+0x7c50/0x7c50
[  741.886187][T13679]  ? __fdget+0x17c/0x200
[  741.886222][T13679]  __se_sys_sendmsg+0x19e/0x270
[  741.886257][T13679]  ? __x64_sys_sendmsg+0x80/0x80
[  741.886305][T13679]  ? lockdep_hardirqs_on+0x94/0x140
[  741.886341][T13679]  do_syscall_64+0x4c/0xa0
[  741.886366][T13679]  ? clear_bhb_loop+0x45/0xa0
[  741.886387][T13679]  ? clear_bhb_loop+0x45/0xa0
[  741.886409][T13679]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  741.886441][T13679] RIP: 0033:0x7f1d8078e969
[  741.886461][T13679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  741.886479][T13679] RSP: 002b:00007f1d816e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  741.886508][T13679] RAX: ffffffffffffffda RBX: 00007f1d809b5fa0 RCX: 00007f1d8078e969
[  741.886525][T13679] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003
[  741.886539][T13679] RBP: 00007f1d816e1090 R08: 0000000000000000 R09: 0000000000000000
[  741.886552][T13679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  741.886566][T13679] R13: 0000000000000000 R14: 00007f1d809b5fa0 R15: 00007ffc9d19df48
[  741.886598][T13679]  </TASK>
[  742.156911][T13536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  742.177432][T13536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  742.196100][T13536] batman_adv: batadv0: Interface activated: batadv_slave_1
[  742.206691][T13681] netlink: 'syz.0.3267': attribute type 19 has an invalid length.
[  742.218197][T13681] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3267'.
[  742.231743][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  742.245114][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  742.258603][T13536] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  742.267499][T13536] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  742.284909][T13536] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  742.296015][T13536] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  742.523152][T13688] netlink: 'syz.2.3269': attribute type 33 has an invalid length.
[  742.557968][T13688] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3269'.
[  742.599878][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  742.631691][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  742.672849][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  742.720749][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  742.766942][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  742.775425][T13695] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3273'.
[  742.802929][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  743.136341][T13717] device lo entered promiscuous mode
[  743.666487][T13716] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3279'.
[  743.865123][T13735] validate_nla: 2 callbacks suppressed
[  743.865145][T13735] netlink: 'syz.1.3284': attribute type 33 has an invalid length.
[  743.904739][T13735] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3284'.
[  744.097151][T13743] FAULT_INJECTION: forcing a failure.
[  744.097151][T13743] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  744.117355][T13743] CPU: 1 PID: 13743 Comm: syz.0.3287 Not tainted 6.1.137-syzkaller #0
[  744.125700][T13743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  744.135795][T13743] Call Trace:
[  744.139131][T13743]  <TASK>
[  744.142349][T13743]  dump_stack_lvl+0x168/0x22e
[  744.147172][T13743]  ? show_regs_print_info+0x12/0x12
[  744.152528][T13743]  ? load_image+0x3b0/0x3b0
[  744.157181][T13743]  ? __lock_acquire+0x7c50/0x7c50
[  744.162441][T13743]  should_fail_ex+0x399/0x4d0
[  744.162764][T13728] netlink: 'syz.4.3281': attribute type 3 has an invalid length.
[  744.167236][T13743]  _copy_from_user+0x2c/0x170
[  744.167271][T13743]  ____sys_sendmsg+0x2d5/0x970
[  744.167302][T13743]  ? __lock_acquire+0x7c50/0x7c50
[  744.167338][T13743]  ? __sys_sendmsg_sock+0x30/0x30
[  744.167367][T13743]  ? __import_iovec+0x315/0x500
[  744.167400][T13743]  ? import_iovec+0x6f/0xa0
[  744.167426][T13743]  ___sys_sendmsg+0x21c/0x290
[  744.167460][T13743]  ? __sys_sendmsg+0x270/0x270
[  744.167520][T13743]  ? __lock_acquire+0x7c50/0x7c50
[  744.167569][T13743]  ? __fdget+0x17c/0x200
[  744.167607][T13743]  __se_sys_sendmsg+0x19e/0x270
[  744.167642][T13743]  ? __x64_sys_sendmsg+0x80/0x80
[  744.167690][T13743]  ? lockdep_hardirqs_on+0x94/0x140
[  744.167727][T13743]  do_syscall_64+0x4c/0xa0
[  744.167751][T13743]  ? clear_bhb_loop+0x45/0xa0
[  744.167772][T13743]  ? clear_bhb_loop+0x45/0xa0
[  744.167794][T13743]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  744.167824][T13743] RIP: 0033:0x7f409778e969
[  744.167843][T13743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  744.167862][T13743] RSP: 002b:00007f4098562038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  744.167886][T13743] RAX: ffffffffffffffda RBX: 00007f40979b5fa0 RCX: 00007f409778e969
[  744.167903][T13743] RDX: 0000000000000000 RSI: 0000200000001280 RDI: 0000000000000003
[  744.167916][T13743] RBP: 00007f4098562090 R08: 0000000000000000 R09: 0000000000000000
[  744.167929][T13743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  744.167943][T13743] R13: 0000000000000000 R14: 00007f40979b5fa0 R15: 00007ffdf77357e8
[  744.167976][T13743]  </TASK>
[  744.439219][T13746] syz.1.3290[13746] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  744.571249][T13752] netlink: 'syz.1.3292': attribute type 29 has an invalid length.
[  744.596722][T13752] netlink: 'syz.1.3292': attribute type 29 has an invalid length.
[  744.614069][T13753] netlink: 'syz.1.3292': attribute type 29 has an invalid length.
[  744.642706][T13752] netlink: 'syz.1.3292': attribute type 29 has an invalid length.
[  745.023629][T13766] netlink: 'syz.0.3298': attribute type 10 has an invalid length.
[  745.278850][T13766] syz.0.3298 (13766) used greatest stack depth: 19912 bytes left
[  745.328138][T13772] device ipvlan1 entered promiscuous mode
[  745.338416][T13774] __nla_validate_parse: 2 callbacks suppressed
[  745.338434][T13774] netlink: 166 bytes leftover after parsing attributes in process `syz.0.3302'.
[  745.473461][T13779] FAULT_INJECTION: forcing a failure.
[  745.473461][T13779] name failslab, interval 1, probability 0, space 0, times 0
[  745.492709][T13779] CPU: 1 PID: 13779 Comm: syz.0.3304 Not tainted 6.1.137-syzkaller #0
[  745.501103][T13779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  745.511443][T13779] Call Trace:
[  745.514845][T13779]  <TASK>
[  745.517806][T13779]  dump_stack_lvl+0x168/0x22e
[  745.522890][T13779]  ? show_regs_print_info+0x12/0x12
[  745.528295][T13779]  ? load_image+0x3b0/0x3b0
[  745.533335][T13779]  ? __might_sleep+0xd0/0xd0
[  745.538009][T13779]  ? __lock_acquire+0x7c50/0x7c50
[  745.543099][T13779]  should_fail_ex+0x399/0x4d0
[  745.547828][T13779]  should_failslab+0x5/0x20
[  745.552424][T13779]  slab_pre_alloc_hook+0x59/0x310
[  745.557507][T13779]  kmem_cache_alloc_node+0x5a/0x320
[  745.562766][T13779]  ? __alloc_skb+0xfc/0x7e0
[  745.567861][T13779]  __alloc_skb+0xfc/0x7e0
[  745.572618][T13779]  ? netlink_autobind+0xda/0x300
[  745.577724][T13779]  netlink_sendmsg+0x645/0xbc0
[  745.582568][T13779]  ? netlink_getsockopt+0x540/0x540
[  745.587838][T13779]  ? aa_sock_msg_perm+0x94/0x150
[  745.593186][T13779]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  745.598619][T13779]  ? security_socket_sendmsg+0x7c/0xa0
[  745.604137][T13779]  ? netlink_getsockopt+0x540/0x540
[  745.609530][T13779]  ____sys_sendmsg+0x59b/0x970
[  745.614560][T13779]  ? __sys_sendmsg_sock+0x30/0x30
[  745.619653][T13779]  ? __import_iovec+0x315/0x500
[  745.624769][T13779]  ? import_iovec+0x6f/0xa0
[  745.629321][T13779]  ___sys_sendmsg+0x21c/0x290
[  745.634328][T13779]  ? __sys_sendmsg+0x270/0x270
[  745.639253][T13779]  ? __lock_acquire+0x7c50/0x7c50
[  745.644466][T13779]  ? __fdget+0x17c/0x200
[  745.648835][T13779]  __se_sys_sendmsg+0x19e/0x270
[  745.653732][T13779]  ? __x64_sys_sendmsg+0x80/0x80
[  745.658809][T13779]  ? lockdep_hardirqs_on+0x94/0x140
[  745.664073][T13779]  do_syscall_64+0x4c/0xa0
[  745.668505][T13779]  ? clear_bhb_loop+0x45/0xa0
[  745.673199][T13779]  ? clear_bhb_loop+0x45/0xa0
[  745.678146][T13779]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  745.684077][T13779] RIP: 0033:0x7f409778e969
[  745.688682][T13779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  745.708675][T13779] RSP: 002b:00007f4098562038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  745.717181][T13779] RAX: ffffffffffffffda RBX: 00007f40979b5fa0 RCX: 00007f409778e969
[  745.725170][T13779] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  745.733331][T13779] RBP: 00007f4098562090 R08: 0000000000000000 R09: 0000000000000000
[  745.741327][T13779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  745.749433][T13779] R13: 0000000000000000 R14: 00007f40979b5fa0 R15: 00007ffdf77357e8
[  745.757486][T13779]  </TASK>
[  746.327042][T13799] netlink: 'syz.0.3311': attribute type 29 has an invalid length.
[  746.346990][T13799] netlink: 'syz.0.3311': attribute type 29 has an invalid length.
[  746.356947][T13804] netlink: 'syz.0.3311': attribute type 29 has an invalid length.
[  746.773281][T13821] bond0: (slave bond_slave_0): Releasing backup interface
[  747.401858][T13834] FAULT_INJECTION: forcing a failure.
[  747.401858][T13834] name failslab, interval 1, probability 0, space 0, times 0
[  747.456051][T13834] CPU: 1 PID: 13834 Comm: syz.0.3325 Not tainted 6.1.137-syzkaller #0
[  747.464287][T13834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  747.474808][T13834] Call Trace:
[  747.478099][T13834]  <TASK>
[  747.481037][T13834]  dump_stack_lvl+0x168/0x22e
[  747.485828][T13834]  ? show_regs_print_info+0x12/0x12
[  747.491172][T13834]  ? load_image+0x3b0/0x3b0
[  747.495876][T13834]  ? __lock_acquire+0x7c50/0x7c50
[  747.500918][T13834]  should_fail_ex+0x399/0x4d0
[  747.505782][T13834]  should_failslab+0x5/0x20
[  747.510394][T13834]  slab_pre_alloc_hook+0x59/0x310
[  747.515466][T13834]  ? memcg_alloc_slab_cgroups+0x83/0x120
[  747.521208][T13834]  __kmem_cache_alloc_node+0x4f/0x260
[  747.526683][T13834]  ? memcg_alloc_slab_cgroups+0x83/0x120
[  747.532590][T13834]  __kmalloc_node+0xa0/0x240
[  747.537556][T13834]  memcg_alloc_slab_cgroups+0x83/0x120
[  747.543125][T13834]  slab_post_alloc_hook+0xba/0x480
[  747.548331][T13834]  kmem_cache_alloc_node+0x14d/0x320
[  747.553634][T13834]  ? __alloc_skb+0xfc/0x7e0
[  747.558159][T13834]  __alloc_skb+0xfc/0x7e0
[  747.562503][T13834]  ? _raw_spin_unlock_irqrestore+0x82/0x100
[  747.568587][T13834]  alloc_skb_with_frags+0xa7/0x710
[  747.573727][T13834]  ? finish_wait+0xc3/0x1d0
[  747.578270][T13834]  sock_alloc_send_pskb+0x853/0x980
[  747.583508][T13834]  ? sock_kzfree_s+0x50/0x50
[  747.588311][T13834]  ? do_raw_spin_lock+0x11d/0x280
[  747.593641][T13834]  ? wake_bit_function+0x200/0x200
[  747.598947][T13834]  ? __rwlock_init+0x140/0x140
[  747.603996][T13834]  ? do_raw_spin_unlock+0x11d/0x230
[  747.609646][T13834]  unix_dgram_sendmsg+0x57e/0x18d0
[  747.614777][T13834]  ? mark_lock+0x94/0x320
[  747.619555][T13834]  ? aa_sk_perm+0x7e5/0x920
[  747.624419][T13834]  ? unix_dgram_poll+0x660/0x660
[  747.629467][T13834]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[  747.635911][T13834]  ? aa_sock_msg_perm+0x94/0x150
[  747.640865][T13834]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  747.646208][T13834]  ? security_socket_sendmsg+0x7c/0xa0
[  747.651683][T13834]  ? unix_dgram_poll+0x660/0x660
[  747.656722][T13834]  ____sys_sendmsg+0x59b/0x970
[  747.661768][T13834]  ? __might_fault+0xa6/0x120
[  747.666813][T13834]  ? __sys_sendmsg_sock+0x30/0x30
[  747.671854][T13834]  ? __import_iovec+0x315/0x500
[  747.676745][T13834]  ? __might_fault+0xa6/0x120
[  747.681434][T13834]  ? import_iovec+0x6f/0xa0
[  747.685947][T13834]  ___sys_sendmsg+0x21c/0x290
[  747.690647][T13834]  ? __sys_sendmsg+0x270/0x270
[  747.695530][T13834]  ? __lock_acquire+0x7c50/0x7c50
[  747.700667][T13834]  ? __fdget+0x17c/0x200
[  747.704934][T13834]  __se_sys_sendmsg+0x19e/0x270
[  747.709823][T13834]  ? __x64_sys_sendmsg+0x80/0x80
[  747.714839][T13834]  ? lockdep_hardirqs_on+0x94/0x140
[  747.720104][T13834]  do_syscall_64+0x4c/0xa0
[  747.724535][T13834]  ? clear_bhb_loop+0x45/0xa0
[  747.729221][T13834]  ? clear_bhb_loop+0x45/0xa0
[  747.733902][T13834]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  747.740357][T13834] RIP: 0033:0x7f409778e969
[  747.744911][T13834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  747.764971][T13834] RSP: 002b:00007f4098562038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  747.773868][T13834] RAX: ffffffffffffffda RBX: 00007f40979b5fa0 RCX: 00007f409778e969
[  747.781957][T13834] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004
[  747.790195][T13834] RBP: 00007f4098562090 R08: 0000000000000000 R09: 0000000000000000
[  747.798299][T13834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  747.806366][T13834] R13: 0000000000000000 R14: 00007f40979b5fa0 R15: 00007ffdf77357e8
[  747.814386][T13834]  </TASK>
[  747.973675][T13844] FAULT_INJECTION: forcing a failure.
[  747.973675][T13844] name failslab, interval 1, probability 0, space 0, times 0
[  747.997114][T13844] CPU: 1 PID: 13844 Comm: syz.1.3328 Not tainted 6.1.137-syzkaller #0
[  748.005467][T13844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  748.015824][T13844] Call Trace:
[  748.019184][T13844]  <TASK>
[  748.022175][T13844]  dump_stack_lvl+0x168/0x22e
[  748.026904][T13844]  ? show_regs_print_info+0x12/0x12
[  748.032146][T13844]  ? load_image+0x3b0/0x3b0
[  748.036688][T13844]  ? __might_sleep+0xd0/0xd0
[  748.041336][T13844]  ? __lock_acquire+0x7c50/0x7c50
[  748.046622][T13844]  should_fail_ex+0x399/0x4d0
[  748.051348][T13844]  should_failslab+0x5/0x20
[  748.055889][T13844]  slab_pre_alloc_hook+0x59/0x310
[  748.061248][T13844]  ? file_end_write+0x156/0x250
[  748.066196][T13844]  kmem_cache_alloc+0x56/0x2f0
[  748.071022][T13844]  ? getname_flags+0xb7/0x500
[  748.075761][T13844]  getname_flags+0xb7/0x500
[  748.080423][T13844]  do_sys_openat2+0xcf/0x490
[  748.085164][T13844]  ? do_sys_open+0xe0/0xe0
[  748.089638][T13844]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  748.095699][T13844]  ? lock_chain_count+0x20/0x20
[  748.100581][T13844]  __x64_sys_openat+0x135/0x160
[  748.105550][T13844]  do_syscall_64+0x4c/0xa0
[  748.110121][T13844]  ? clear_bhb_loop+0x45/0xa0
[  748.114809][T13844]  ? clear_bhb_loop+0x45/0xa0
[  748.119511][T13844]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  748.125555][T13844] RIP: 0033:0x7fb205d8e969
[  748.130302][T13844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  748.150371][T13844] RSP: 002b:00007fb206b25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  748.158825][T13844] RAX: ffffffffffffffda RBX: 00007fb205fb5fa0 RCX: 00007fb205d8e969
[  748.166901][T13844] RDX: 000075324cc7ada9 RSI: 0000200000000040 RDI: ffffffffffffffff
[  748.175099][T13844] RBP: 00007fb206b25090 R08: 0000000000000000 R09: 0000000000000000
[  748.183083][T13844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  748.191156][T13844] R13: 0000000000000000 R14: 00007fb205fb5fa0 R15: 00007ffd7f833aa8
[  748.199190][T13844]  </TASK>
[  748.300565][T13832] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3324'.
[  750.706158][T13863] validate_nla: 4 callbacks suppressed
[  750.706252][T13863] netlink: 'syz.3.3333': attribute type 3 has an invalid length.
[  750.727740][T13863] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3333'.
[  750.842205][T13848] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3339'.
[  750.851740][T13850] netlink: 'syz.2.3329': attribute type 29 has an invalid length.
[  751.226312][T13879] device lo entered promiscuous mode
[  751.516091][T13887] netlink: 'syz.1.3344': attribute type 1 has an invalid length.
[  751.527642][T13887] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3344'.
[  751.545123][T13890] FAULT_INJECTION: forcing a failure.
[  751.545123][T13890] name failslab, interval 1, probability 0, space 0, times 0
[  751.598023][T13890] CPU: 0 PID: 13890 Comm: syz.2.3345 Not tainted 6.1.137-syzkaller #0
[  751.606347][T13890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  751.616702][T13890] Call Trace:
[  751.620052][T13890]  <TASK>
[  751.623136][T13890]  dump_stack_lvl+0x168/0x22e
[  751.628067][T13890]  ? show_regs_print_info+0x12/0x12
[  751.633412][T13890]  ? load_image+0x3b0/0x3b0
[  751.637958][T13890]  ? __might_sleep+0xd0/0xd0
[  751.642604][T13890]  ? __lock_acquire+0x7c50/0x7c50
[  751.647686][T13890]  should_fail_ex+0x399/0x4d0
[  751.652404][T13890]  should_failslab+0x5/0x20
[  751.656946][T13890]  slab_pre_alloc_hook+0x59/0x310
[  751.662094][T13890]  kmem_cache_alloc_node+0x5a/0x320
[  751.667403][T13890]  ? __alloc_skb+0xfc/0x7e0
[  751.672115][T13890]  __alloc_skb+0xfc/0x7e0
[  751.676462][T13890]  ? netlink_autobind+0xda/0x300
[  751.681606][T13890]  netlink_sendmsg+0x645/0xbc0
[  751.686408][T13890]  ? netlink_getsockopt+0x540/0x540
[  751.691832][T13890]  ? aa_sock_msg_perm+0x94/0x150
[  751.696806][T13890]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  751.702140][T13890]  ? security_socket_sendmsg+0x7c/0xa0
[  751.707883][T13890]  ? netlink_getsockopt+0x540/0x540
[  751.713185][T13890]  ____sys_sendmsg+0x59b/0x970
[  751.718060][T13890]  ? __sys_sendmsg_sock+0x30/0x30
[  751.723278][T13890]  ? __import_iovec+0x315/0x500
[  751.728589][T13890]  ? import_iovec+0x6f/0xa0
[  751.733197][T13890]  ___sys_sendmsg+0x21c/0x290
[  751.737893][T13890]  ? __sys_sendmsg+0x270/0x270
[  751.742772][T13890]  ? __lock_acquire+0x7c50/0x7c50
[  751.747915][T13890]  ? __fdget+0x17c/0x200
[  751.752183][T13890]  __se_sys_sendmsg+0x19e/0x270
[  751.757419][T13890]  ? ct_nmi_exit+0x145/0x1c0
[  751.762150][T13890]  ? __x64_sys_sendmsg+0x80/0x80
[  751.767329][T13890]  ? lockdep_hardirqs_on+0x94/0x140
[  751.773183][T13890]  do_syscall_64+0x4c/0xa0
[  751.777868][T13890]  ? clear_bhb_loop+0x45/0xa0
[  751.782717][T13890]  ? clear_bhb_loop+0x45/0xa0
[  751.787421][T13890]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  751.793347][T13890] RIP: 0033:0x7f1d8078e969
[  751.797862][T13890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  751.817768][T13890] RSP: 002b:00007f1d816e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  751.826581][T13890] RAX: ffffffffffffffda RBX: 00007f1d809b5fa0 RCX: 00007f1d8078e969
[  751.834681][T13890] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  751.842868][T13890] RBP: 00007f1d816e1090 R08: 0000000000000000 R09: 0000000000000000
[  751.851031][T13890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  751.859309][T13890] R13: 0000000000000000 R14: 00007f1d809b5fa0 R15: 00007ffc9d19df48
[  751.867319][T13890]  </TASK>
[  752.115678][T13903] netlink: 'syz.4.3350': attribute type 29 has an invalid length.
[  752.156140][T13903] netlink: 'syz.4.3350': attribute type 29 has an invalid length.
[  752.166029][T13908] netlink: 'syz.4.3350': attribute type 29 has an invalid length.
[  752.186550][T13903] netlink: 'syz.4.3350': attribute type 29 has an invalid length.
[  752.320027][T13912] netlink: 'syz.1.3354': attribute type 10 has an invalid length.
[  752.363279][T13912] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3354'.
[  752.409652][T13912] device bond0 entered promiscuous mode
[  752.415513][T13912] device bond_slave_0 entered promiscuous mode
[  752.440675][T13912] device bond_slave_1 entered promiscuous mode
[  752.465350][T13912] bridge0: port 3(bond0) entered blocking state
[  752.494953][T13912] bridge0: port 3(bond0) entered disabled state
[  752.545689][T13923] FAULT_INJECTION: forcing a failure.
[  752.545689][T13923] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  752.562795][T13923] CPU: 0 PID: 13923 Comm: syz.0.3359 Not tainted 6.1.137-syzkaller #0
[  752.571377][T13923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  752.581470][T13923] Call Trace:
[  752.584982][T13923]  <TASK>
[  752.588066][T13923]  dump_stack_lvl+0x168/0x22e
[  752.592898][T13923]  ? show_regs_print_info+0x12/0x12
[  752.598522][T13923]  ? load_image+0x3b0/0x3b0
[  752.603281][T13923]  ? __lock_acquire+0x7c50/0x7c50
[  752.608808][T13923]  should_fail_ex+0x399/0x4d0
[  752.613639][T13923]  _copy_from_user+0x2c/0x170
[  752.618642][T13923]  bpf_prog_test_run_skb+0x258/0x11b0
[  752.624251][T13923]  ? __fget_files+0x28/0x4d0
[  752.629425][T13923]  ? __fget_files+0x44a/0x4d0
[  752.634170][T13923]  ? cpu_online+0xa0/0xa0
[  752.638632][T13923]  bpf_prog_test_run+0x31e/0x390
[  752.639716][T13912] bridge0: port 3(bond0) entered blocking state
[  752.643773][T13923]  __sys_bpf+0x593/0x6d0
[  752.643810][T13923]  ? bpf_link_show_fdinfo+0x310/0x310
[  752.643855][T13923]  ? lock_chain_count+0x20/0x20
[  752.643899][T13923]  __x64_sys_bpf+0x78/0x90
[  752.643928][T13923]  do_syscall_64+0x4c/0xa0
[  752.643956][T13923]  ? clear_bhb_loop+0x45/0xa0
[  752.643976][T13923]  ? clear_bhb_loop+0x45/0xa0
[  752.643999][T13923]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  752.657844][T13912] bridge0: port 3(bond0) entered forwarding state
[  752.660223][T13923] RIP: 0033:0x7f409778e969
[  752.660249][T13923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  752.660269][T13923] RSP: 002b:00007f4098562038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  752.660293][T13923] RAX: ffffffffffffffda RBX: 00007f40979b5fa0 RCX: 00007f409778e969
[  752.660309][T13923] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a
[  752.660324][T13923] RBP: 00007f4098562090 R08: 0000000000000000 R09: 0000000000000000
[  752.660338][T13923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  752.660351][T13923] R13: 0000000000000000 R14: 00007f40979b5fa0 R15: 00007ffdf77357e8
[  752.660383][T13923]  </TASK>
[  752.712782][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  752.798210][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  752.821000][T13916] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3354'.
[  753.127272][T13937] FAULT_INJECTION: forcing a failure.
[  753.127272][T13937] name failslab, interval 1, probability 0, space 0, times 0
[  753.171571][T13937] CPU: 1 PID: 13937 Comm: syz.4.3362 Not tainted 6.1.137-syzkaller #0
[  753.180186][T13937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  753.190366][T13937] Call Trace:
[  753.193713][T13937]  <TASK>
[  753.196706][T13937]  dump_stack_lvl+0x168/0x22e
[  753.201422][T13937]  ? show_regs_print_info+0x12/0x12
[  753.206829][T13937]  ? load_image+0x3b0/0x3b0
[  753.211452][T13937]  ? __lock_acquire+0x7c50/0x7c50
[  753.216849][T13937]  should_fail_ex+0x399/0x4d0
[  753.221749][T13937]  should_failslab+0x5/0x20
[  753.226799][T13937]  slab_pre_alloc_hook+0x59/0x310
[  753.231953][T13937]  ? memcg_alloc_slab_cgroups+0x83/0x120
[  753.237645][T13937]  __kmem_cache_alloc_node+0x4f/0x260
[  753.243082][T13937]  ? memcg_alloc_slab_cgroups+0x83/0x120
[  753.248842][T13937]  __kmalloc_node+0xa0/0x240
[  753.253488][T13937]  memcg_alloc_slab_cgroups+0x83/0x120
[  753.258993][T13937]  slab_post_alloc_hook+0xba/0x480
[  753.264162][T13937]  kmem_cache_alloc_node+0x14d/0x320
[  753.269586][T13937]  ? __alloc_skb+0xfc/0x7e0
[  753.274131][T13937]  __alloc_skb+0xfc/0x7e0
[  753.278928][T13937]  ? _raw_spin_unlock_irqrestore+0x82/0x100
[  753.285833][T13937]  alloc_skb_with_frags+0xa7/0x710
[  753.291105][T13937]  ? finish_wait+0xc3/0x1d0
[  753.295819][T13937]  sock_alloc_send_pskb+0x853/0x980
[  753.301310][T13937]  ? sock_kzfree_s+0x50/0x50
[  753.306290][T13937]  ? do_raw_spin_lock+0x11d/0x280
[  753.311652][T13937]  ? wake_bit_function+0x200/0x200
[  753.316987][T13937]  ? __rwlock_init+0x140/0x140
[  753.321978][T13937]  ? do_raw_spin_unlock+0x11d/0x230
[  753.327528][T13937]  unix_dgram_sendmsg+0x57e/0x18d0
[  753.332684][T13937]  ? mark_lock+0x94/0x320
[  753.337358][T13937]  ? aa_sk_perm+0x7e5/0x920
[  753.342405][T13937]  ? unix_dgram_poll+0x660/0x660
[  753.347355][T13937]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[  753.353802][T13937]  ? aa_sock_msg_perm+0x94/0x150
[  753.358761][T13937]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  753.364143][T13937]  ? security_socket_sendmsg+0x7c/0xa0
[  753.369736][T13937]  ? unix_dgram_poll+0x660/0x660
[  753.374680][T13937]  ____sys_sendmsg+0x59b/0x970
[  753.379458][T13937]  ? __might_fault+0xa6/0x120
[  753.384247][T13937]  ? __sys_sendmsg_sock+0x30/0x30
[  753.389287][T13937]  ? __import_iovec+0x315/0x500
[  753.394263][T13937]  ? __might_fault+0xa6/0x120
[  753.399124][T13937]  ? import_iovec+0x6f/0xa0
[  753.403822][T13937]  ___sys_sendmsg+0x21c/0x290
[  753.408606][T13937]  ? __sys_sendmsg+0x270/0x270
[  753.413579][T13937]  ? __lock_acquire+0x7c50/0x7c50
[  753.418831][T13937]  ? __fdget+0x17c/0x200
[  753.423268][T13937]  __se_sys_sendmsg+0x19e/0x270
[  753.428174][T13937]  ? __x64_sys_sendmsg+0x80/0x80
[  753.433437][T13937]  ? lockdep_hardirqs_on+0x94/0x140
[  753.438671][T13937]  do_syscall_64+0x4c/0xa0
[  753.443195][T13937]  ? clear_bhb_loop+0x45/0xa0
[  753.448244][T13937]  ? clear_bhb_loop+0x45/0xa0
[  753.453135][T13937]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  753.459218][T13937] RIP: 0033:0x7fdebaf8e969
[  753.463817][T13937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  753.483525][T13937] RSP: 002b:00007fdebbd91038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  753.492142][T13937] RAX: ffffffffffffffda RBX: 00007fdebb1b5fa0 RCX: 00007fdebaf8e969
[  753.500230][T13937] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004
[  753.508426][T13937] RBP: 00007fdebbd91090 R08: 0000000000000000 R09: 0000000000000000
[  753.516584][T13937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  753.524668][T13937] R13: 0000000000000000 R14: 00007fdebb1b5fa0 R15: 00007ffc18dbc1d8
[  753.533122][T13937]  </TASK>
[  753.923315][T13957] netlink: 'syz.3.3370': attribute type 2 has an invalid length.
[  753.937187][T13957] netlink: 'syz.3.3370': attribute type 3 has an invalid length.
[  753.945399][T13957] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3370'.
[  754.689629][T13972] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3375'.
[  755.368838][T13986] FAULT_INJECTION: forcing a failure.
[  755.368838][T13986] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  755.428243][T13986] CPU: 0 PID: 13986 Comm: syz.0.3382 Not tainted 6.1.137-syzkaller #0
[  755.436578][T13986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  755.446675][T13986] Call Trace:
[  755.449980][T13986]  <TASK>
[  755.453029][T13986]  dump_stack_lvl+0x168/0x22e
[  755.457765][T13986]  ? show_regs_print_info+0x12/0x12
[  755.463018][T13986]  ? load_image+0x3b0/0x3b0
[  755.467662][T13986]  ? __lock_acquire+0x7c50/0x7c50
[  755.472856][T13986]  should_fail_ex+0x399/0x4d0
[  755.477755][T13986]  _copy_from_user+0x2c/0x170
[  755.482472][T13986]  bpf_prog_test_run_flow_dissector+0x255/0x600
[  755.489037][T13986]  ? xdp_convert_buff_to_md+0x200/0x200
[  755.494722][T13986]  ? __fget_files+0x28/0x4d0
[  755.499368][T13986]  ? __fget_files+0x44a/0x4d0
[  755.504185][T13986]  ? xdp_convert_buff_to_md+0x200/0x200
[  755.509798][T13986]  bpf_prog_test_run+0x31e/0x390
[  755.514789][T13986]  __sys_bpf+0x593/0x6d0
[  755.519185][T13986]  ? bpf_link_show_fdinfo+0x310/0x310
[  755.524745][T13986]  ? lock_chain_count+0x20/0x20
[  755.529668][T13986]  __x64_sys_bpf+0x78/0x90
[  755.534749][T13986]  do_syscall_64+0x4c/0xa0
[  755.539516][T13986]  ? clear_bhb_loop+0x45/0xa0
[  755.544530][T13986]  ? clear_bhb_loop+0x45/0xa0
[  755.549247][T13986]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  755.555298][T13986] RIP: 0033:0x7f409778e969
[  755.560134][T13986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  755.579880][T13986] RSP: 002b:00007f4098562038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  755.588539][T13986] RAX: ffffffffffffffda RBX: 00007f40979b5fa0 RCX: 00007f409778e969
[  755.596901][T13986] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a
[  755.606300][T13986] RBP: 00007f4098562090 R08: 0000000000000000 R09: 0000000000000000
[  755.614953][T13986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  755.623501][T13986] R13: 0000000000000000 R14: 00007f40979b5fa0 R15: 00007ffdf77357e8
[  755.631701][T13986]  </TASK>
[  756.017073][T13992] validate_nla: 6 callbacks suppressed
[  756.017095][T13992] netlink: 'syz.2.3377': attribute type 3 has an invalid length.
[  756.136413][T13992] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3377'.
[  756.638700][T14001] syz.0.3384[14001] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  756.638826][T14001] syz.0.3384[14001] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  756.844709][T14011] FAULT_INJECTION: forcing a failure.
[  756.844709][T14011] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  756.921469][T14011] CPU: 1 PID: 14011 Comm: syz.0.3389 Not tainted 6.1.137-syzkaller #0
[  756.930068][T14011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  756.940437][T14011] Call Trace:
[  756.943751][T14011]  <TASK>
[  756.946740][T14011]  dump_stack_lvl+0x168/0x22e
[  756.951567][T14011]  ? show_regs_print_info+0x12/0x12
[  756.957002][T14011]  ? load_image+0x3b0/0x3b0
[  756.961647][T14011]  ? __lock_acquire+0x7c50/0x7c50
[  756.966718][T14011]  ? snprintf+0xd7/0x120
[  756.971004][T14011]  should_fail_ex+0x399/0x4d0
[  756.975838][T14011]  _copy_to_user+0x2c/0x130
[  756.980482][T14011]  simple_read_from_buffer+0xe3/0x150
[  756.985915][T14011]  proc_fail_nth_read+0x19a/0x210
[  756.991248][T14011]  ? proc_fault_inject_write+0x2f0/0x2f0
[  756.997235][T14011]  ? fsnotify_perm+0x248/0x550
[  757.002135][T14011]  ? proc_fault_inject_write+0x2f0/0x2f0
[  757.007903][T14011]  vfs_read+0x2c0/0x920
[  757.012116][T14011]  ? kernel_read+0x1e0/0x1e0
[  757.016762][T14011]  ? __fget_files+0x28/0x4d0
[  757.021413][T14011]  ? __fget_files+0x44a/0x4d0
[  757.026242][T14011]  ? __fdget_pos+0x2ae/0x360
[  757.030884][T14011]  ? ksys_read+0x71/0x240
[  757.035521][T14011]  ksys_read+0x143/0x240
[  757.039895][T14011]  ? vfs_write+0x960/0x960
[  757.044549][T14011]  ? lockdep_hardirqs_on+0x94/0x140
[  757.049807][T14011]  do_syscall_64+0x4c/0xa0
[  757.054403][T14011]  ? clear_bhb_loop+0x45/0xa0
[  757.059122][T14011]  ? clear_bhb_loop+0x45/0xa0
[  757.063926][T14011]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  757.069971][T14011] RIP: 0033:0x7f409778d37c
[  757.074527][T14011] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  757.094729][T14011] RSP: 002b:00007f4098562030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  757.103274][T14011] RAX: ffffffffffffffda RBX: 00007f40979b5fa0 RCX: 00007f409778d37c
[  757.111433][T14011] RDX: 000000000000000f RSI: 00007f40985620a0 RDI: 0000000000000004
[  757.119613][T14011] RBP: 00007f4098562090 R08: 0000000000000000 R09: 0000000000000000
[  757.127921][T14011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  757.136469][T14011] R13: 0000000000000000 R14: 00007f40979b5fa0 R15: 00007ffdf77357e8
[  757.144653][T14011]  </TASK>
[  757.317326][T14022] FAULT_INJECTION: forcing a failure.
[  757.317326][T14022] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  757.342237][T14022] CPU: 1 PID: 14022 Comm: syz.0.3393 Not tainted 6.1.137-syzkaller #0
[  757.350734][T14022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  757.361410][T14022] Call Trace:
[  757.364808][T14022]  <TASK>
[  757.367855][T14022]  dump_stack_lvl+0x168/0x22e
[  757.372670][T14022]  ? show_regs_print_info+0x12/0x12
[  757.377998][T14022]  ? load_image+0x3b0/0x3b0
[  757.382622][T14022]  ? __lock_acquire+0x7c50/0x7c50
[  757.387697][T14022]  should_fail_ex+0x399/0x4d0
[  757.392583][T14022]  _copy_from_user+0x2c/0x170
[  757.397394][T14022]  bpf_obj_get_info_by_fd+0x3f9/0x2c00
[  757.402992][T14022]  ? verify_lock_unused+0x140/0x140
[  757.408371][T14022]  ? bpf_map_get_fd_by_id+0x310/0x310
[  757.413789][T14022]  ? get_pid_task+0x1c/0x1e0
[  757.418538][T14022]  ? __might_fault+0xa6/0x120
[  757.423338][T14022]  ? __might_fault+0xc2/0x120
[  757.428071][T14022]  ? __might_fault+0xa6/0x120
[  757.432794][T14022]  ? bpf_lsm_bpf+0x5/0x10
[  757.437211][T14022]  ? security_bpf+0x7a/0xa0
[  757.441855][T14022]  __sys_bpf+0x46d/0x6d0
[  757.446212][T14022]  ? bpf_link_show_fdinfo+0x310/0x310
[  757.451792][T14022]  ? lock_chain_count+0x20/0x20
[  757.456677][T14022]  __x64_sys_bpf+0x78/0x90
[  757.461120][T14022]  do_syscall_64+0x4c/0xa0
[  757.465748][T14022]  ? clear_bhb_loop+0x45/0xa0
[  757.470667][T14022]  ? clear_bhb_loop+0x45/0xa0
[  757.475546][T14022]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  757.481468][T14022] RIP: 0033:0x7f409778e969
[  757.485928][T14022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  757.505641][T14022] RSP: 002b:00007f4098562038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  757.514062][T14022] RAX: ffffffffffffffda RBX: 00007f40979b5fa0 RCX: 00007f409778e969
[  757.522235][T14022] RDX: 0000000000000010 RSI: 0000200000000400 RDI: 000000000000000f
[  757.530580][T14022] RBP: 00007f4098562090 R08: 0000000000000000 R09: 0000000000000000
[  757.538830][T14022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  757.547175][T14022] R13: 0000000000000000 R14: 00007f40979b5fa0 R15: 00007ffdf77357e8
[  757.555755][T14022]  </TASK>
[  757.750899][T14035] netlink: 'syz.0.3396': attribute type 12 has an invalid length.
[  757.767168][T14035] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3396'.
[  758.120184][T14020] 
[  758.122563][T14020] ============================================
[  758.129015][T14020] WARNING: possible recursive locking detected
[  758.135367][T14020] 6.1.137-syzkaller #0 Not tainted
[  758.140572][T14020] --------------------------------------------
[  758.146849][T14020] syz.3.3392/14020 is trying to acquire lock:
[  758.153025][T14020] ffff8880238a7a18 (&qs->lock){..-.}-{2:2}, at: __stack_map_get+0x11a/0x440
[  758.162365][T14020] 
[  758.162365][T14020] but task is already holding lock:
[  758.169996][T14020] ffff8880238a7a18 (&qs->lock){..-.}-{2:2}, at: queue_stack_map_push_elem+0x16c/0x5e0
[  758.179666][T14020] 
[  758.179666][T14020] other info that might help us debug this:
[  758.187716][T14020]  Possible unsafe locking scenario:
[  758.187716][T14020] 
[  758.195172][T14020]        CPU0
[  758.198476][T14020]        ----
[  758.201765][T14020]   lock(&qs->lock);
[  758.205670][T14020]   lock(&qs->lock);
[  758.209583][T14020] 
[  758.209583][T14020]  *** DEADLOCK ***
[  758.209583][T14020] 
[  758.218010][T14020]  May be due to missing lock nesting notation
[  758.218010][T14020] 
[  758.226513][T14020] 5 locks held by syz.3.3392/14020:
[  758.231744][T14020]  #0: ffffffff8c92a960 (rcu_read_lock){....}-{1:2}, at: bpf_test_timer_enter+0x1a/0x140
[  758.241595][T14020]  #1: ffffffff8c92a960 (rcu_read_lock){....}-{1:2}, at: netif_receive_skb_list_internal+0x4a5/0xc50
[  758.252587][T14020]  #2: ffffffff8c92a960 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run3+0xf0/0x400
[  758.262261][T14020]  #3: ffff8880238a7a18 (&qs->lock){..-.}-{2:2}, at: queue_stack_map_push_elem+0x16c/0x5e0
[  758.272476][T14020]  #4: ffffffff8c92a960 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0xda/0x3b0
[  758.281889][T14020] 
[  758.281889][T14020] stack backtrace:
[  758.287769][T14020] CPU: 0 PID: 14020 Comm: syz.3.3392 Not tainted 6.1.137-syzkaller #0
[  758.296257][T14020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  758.306581][T14020] Call Trace:
[  758.309905][T14020]  <TASK>
[  758.312936][T14020]  dump_stack_lvl+0x168/0x22e
[  758.317721][T14020]  ? show_regs_print_info+0x12/0x12
[  758.323112][T14020]  ? load_image+0x3b0/0x3b0
[  758.327647][T14020]  __lock_acquire+0x122f/0x7c50
[  758.332516][T14020]  ? tracing_gen_ctx_irq_test+0xc9/0x150
[  758.338367][T14020]  ? perf_trace_buf_alloc+0x300/0x300
[  758.344244][T14020]  ? perf_trace_buf_update+0x9c/0x220
[  758.349713][T14020]  ? verify_lock_unused+0x140/0x140
[  758.355044][T14020]  ? perf_swevent_event+0xc8/0x530
[  758.360276][T14020]  ? mark_lock+0x94/0x320
[  758.364700][T14020]  ? __lock_acquire+0x12e5/0x7c50
[  758.369808][T14020]  ? perf_trace_buf_alloc+0x300/0x300
[  758.375354][T14020]  lock_acquire+0x1b4/0x490
[  758.379859][T14020]  ? __stack_map_get+0x11a/0x440
[  758.384815][T14020]  ? mark_lock+0x94/0x320
[  758.389234][T14020]  ? read_lock_is_recursive+0x10/0x10
[  758.394723][T14020]  ? perf_trace_buf_update+0x9c/0x220
[  758.400090][T14020]  _raw_spin_lock_irqsave+0xa4/0xf0
[  758.405342][T14020]  ? __stack_map_get+0x11a/0x440
[  758.410312][T14020]  ? _raw_spin_lock+0x40/0x40
[  758.415023][T14020]  __stack_map_get+0x11a/0x440
[  758.419917][T14020]  ? __queue_map_get+0x4a0/0x4a0
[  758.424875][T14020]  ? __cant_sleep+0x210/0x210
[  758.429792][T14020]  bpf_prog_94b194d4ebfffdd5+0x3d/0x41
[  758.435531][T14020]  bpf_trace_run2+0x1cd/0x3b0
[  758.440432][T14020]  ? bpf_trace_run2+0xda/0x3b0
[  758.445236][T14020]  ? bpf_trace_run1+0x3b0/0x3b0
[  758.450110][T14020]  ? verify_lock_unused+0x140/0x140
[  758.455339][T14020]  trace_contention_end+0x13f/0x190
[  758.460626][T14020]  __pv_queued_spin_lock_slowpath+0x7e8/0x9c0
[  758.466701][T14020]  ? __pv_queued_spin_unlock_slowpath+0x290/0x290
[  758.473192][T14020]  ? ct_nmi_exit+0x145/0x1c0
[  758.477964][T14020]  queued_spin_lock_slowpath+0x43/0x50
[  758.483438][T14020]  do_raw_spin_lock+0x217/0x280
[  758.488475][T14020]  ? __rwlock_init+0x140/0x140
[  758.493285][T14020]  ? _raw_spin_lock_irqsave+0x7f/0xf0
[  758.498943][T14020]  ? _raw_spin_lock_irqsave+0x7f/0xf0
[  758.504441][T14020]  _raw_spin_lock_irqsave+0xb0/0xf0
[  758.509859][T14020]  ? _raw_spin_lock+0x40/0x40
[  758.514651][T14020]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  758.520924][T14020]  queue_stack_map_push_elem+0x16c/0x5e0
[  758.526597][T14020]  ? queue_stack_map_delete_elem+0x10/0x10
[  758.532510][T14020]  ? __cant_sleep+0x210/0x210
[  758.537228][T14020]  ? free_unref_page+0x195/0x3f0
[  758.542287][T14020]  bpf_prog_80daba7f9ca62790+0x3a/0x3e
[  758.547752][T14020]  bpf_trace_run3+0x1e3/0x400
[  758.552432][T14020]  ? bpf_trace_run3+0xf0/0x400
[  758.557718][T14020]  ? bpf_trace_run2+0x3b0/0x3b0
[  758.562678][T14020]  ? llc_rcv+0x755/0xc60
[  758.566925][T14020]  ? free_unref_page+0x19f/0x3f0
[  758.571893][T14020]  ? llc_rcv+0x755/0xc60
[  758.576220][T14020]  __bpf_trace_kmem_cache_free+0x99/0xc0
[  758.581928][T14020]  ? llc_rcv+0x755/0xc60
[  758.586472][T14020]  kmem_cache_free+0x1ef/0x290
[  758.591535][T14020]  llc_rcv+0x755/0xc60
[  758.595728][T14020]  ? llc_set_station_handler+0x40/0x40
[  758.601509][T14020]  __netif_receive_skb_list_core+0x6db/0x740
[  758.607555][T14020]  ? set_rps_cpu+0x670/0x670
[  758.612165][T14020]  netif_receive_skb_list_internal+0x90f/0xc50
[  758.619036][T14020]  ? netif_receive_skb_list_internal+0x4a5/0xc50
[  758.625931][T14020]  ? netif_receive_skb_core+0x230/0x230
[  758.631866][T14020]  ? __xdp_release_frame+0x21/0x320
[  758.637276][T14020]  ? __xdp_build_skb_from_frame+0x380/0x8d0
[  758.643366][T14020]  netif_receive_skb_list+0x51/0x4e0
[  758.648860][T14020]  ? bpf_test_run_xdp_live+0x16a1/0x1970
[  758.654683][T14020]  bpf_test_run_xdp_live+0x16bc/0x1970
[  758.660332][T14020]  ? bpf_test_run_xdp_live+0x45c/0x1970
[  758.666529][T14020]  ? xdp_convert_md_to_buff+0x330/0x330
[  758.672310][T14020]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[  758.678965][T14020]  ? bpf_test_init+0x134/0x150
[  758.683770][T14020]  ? xdp_convert_md_to_buff+0x5b/0x330
[  758.689266][T14020]  bpf_prog_test_run_xdp+0x6f1/0xe50
[  758.694751][T14020]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  758.700994][T14020]  ? dev_put+0x80/0x80
[  758.705255][T14020]  ? dev_put+0x80/0x80
[  758.709354][T14020]  bpf_prog_test_run+0x31e/0x390
[  758.714302][T14020]  __sys_bpf+0x593/0x6d0
[  758.718556][T14020]  ? bpf_link_show_fdinfo+0x310/0x310
[  758.724133][T14020]  ? lock_chain_count+0x20/0x20
[  758.728999][T14020]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  758.735068][T14020]  __x64_sys_bpf+0x78/0x90
[  758.739484][T14020]  do_syscall_64+0x4c/0xa0
[  758.744386][T14020]  ? clear_bhb_loop+0x45/0xa0
[  758.749152][T14020]  ? clear_bhb_loop+0x45/0xa0
[  758.754006][T14020]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  758.760085][T14020] RIP: 0033:0x7fb5e978e969
[  758.764587][T14020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  758.784467][T14020] RSP: 002b:00007fb5ea5a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  758.792987][T14020] RAX: ffffffffffffffda RBX: 00007fb5e99b5fa0 RCX: 00007fb5e978e969
[  758.800975][T14020] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  758.809292][T14020] RBP: 00007fb5e9810ab1 R08: 0000000000000000 R09: 0000000000000000
[  758.817436][T14020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  758.825819][T14020] R13: 0000000000000000 R14: 00007fb5e99b5fa0 R15: 00007ffc6baea0d8
[  758.833889][T14020]  </TASK>