last executing test programs:

26.963092921s ago: executing program 0 (id=278):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xa7, 0x1, 0x0, 0x0, 0x0, 0x3b70, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xb51}, 0x4582, 0x32, 0xfffffbff, 0x5, 0x0, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a48500000004000000850000000f00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r1 = perf_event_open$cgroup(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x5, 0x80, 0x0, 0x3ff, 0x100, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xe8, 0x8000}, 0x40, 0x6, 0x8, 0x8, 0x8, 0x0, 0xa8, 0x0, 0x2, 0x0, 0x833}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x4)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8107b77, 0x1, @perf_config_ext={0x10000, 0x1}, 0x1520f, 0x1, 0xdc, 0x5, 0x2, 0x0, 0x44, 0x0, 0x0, 0x0, 0x2005}, 0x0, 0xffffffffffffffff, r1, 0x2) (async)
r2 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000240)="b2", 0x1}, {&(0x7f0000000180)="23480d95ed94c4265b88f5532b5a63b5a84615cc674c206880d2eade17b1b60edf2ac4126ba663cce2046c70b60f7f5cfd0c621f483e40757769dbdf76ebcf74e4400bc1d6a8", 0xffe0}], 0x3a}, 0x80) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='percpu_alloc_percpu\x00', r0}, 0x10) (async)
syz_clone(0x28000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x40, 0x48, 0xfffff010}, {0x6, 0x2, 0x9, 0x80000101}]})
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000001100)={r3}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000010c0)={&(0x7f0000000f80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@decl_tag={0x8, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x2e]}}, &(0x7f0000000fc0)=""/225, 0x2b, 0xe1, 0x1, 0x6, 0x10000, @value=r5}, 0x28) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x3ba, 0x9, 0x0, 0x8, 0xffffffffffffffff, 0x10, '\x00', 0x0, r5, 0x3, 0x3, 0x1, 0x3}, 0x50)

26.873560219s ago: executing program 0 (id=280):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000007a80)={&(0x7f0000007940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@typedef={0x3}]}, {0x0, [0x5f, 0x2e, 0x41, 0x2e, 0x2e]}}, 0x0, 0x2b, 0x0, 0x1, 0x1}, 0x1f)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x30}, 0x94)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x30}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
close(r1)

26.873176468s ago: executing program 0 (id=281):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="b702000006000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2a24a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9877399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a8449f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d2943e6f5f828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000056c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137000059aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c072083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a00000000000000000000d550c9f15fbb2324a3f37dc4ba"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbac141416ac141416440807034d2f87e5890c6aab845013f2325f1a39018603178da1880b251812a59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126f4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffffffffcb6, &(0x7f0000000000), &(0x7f0000000880)="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", 0x6}, 0x2c)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="180000ca0caf5d22000000181100"/28, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r1, &(0x7f00000003c0)={&(0x7f0000000180)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/109, 0x6d}], 0x2, &(0x7f0000000300)=""/153, 0x99}, 0x1)
r2 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000250091"], 0xfe33)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x7, 0x0, 0x0, 0x0, 0x63, 0x11, 0x5f}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23)

26.801009157s ago: executing program 0 (id=283):
socket$kcm(0x11, 0xa, 0x300)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000900)='sched_switch\x00', r3}, 0x18)
perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x80, 0x9, 0x0, 0x37, 0x81, 0x0, 0x400000000, 0x50000, 0xd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f00000000c0)}, 0x114, 0x9, 0x6, 0x7, 0x4, 0x2, 0x1000, 0x0, 0xffffffff, 0x0, 0x10000}, r2, 0xf, 0xffffffffffffffff, 0xa)
sendmsg$tipc(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000e40)=[{0x0}, {&(0x7f0000000dc0)="8ad4", 0x5dc}], 0x2, 0x0, 0x0, 0x24040804}, 0x8800)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r5=>0xffffffffffffffff})
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x80044943, 0x0)
r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8, <r9=>0xffffffffffffffff}, 0x4)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000000000010000000085000000490d0000950000000000000058e22e7e7b64080b477057f523b82e9aed3c33e6529b142bb92ad2ac0a3984c770c20db57546101552234e15dbe4121bfab36d64bd6d87b31137f2881f6e989695ba65ad519c74c42b83cf65b87459547592d331d3f37a10af61b2f441916e5222573645a0420a5cf5c46dc0e0e846549d954cbb48591aab90ba04b90219bc61bd397eb3afac59cef0764344b2ac2f0a21eca9e9f805ab0ccc1dd77fda29fe5dad71e301d06c468c5f6c7550b6d14262b67353ab0c6a8ce177"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c00)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0x80000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$cgroup_netprio_ifpriomap(r7, &(0x7f0000000080), 0x2, 0x0)

26.603838496s ago: executing program 2 (id=285):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000001580)=ANY=[@ANYBLOB="6110800000000000953e03d0c77f6a337cd7dab6fb9e9e38b9289b97fb087e8f91f784e3122892ebbd280c287bb04ec297942a93e2ff41c4d852de4d"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41020}, 0x94)

26.603116088s ago: executing program 2 (id=286):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000ec0)=""/4084, 0xff4}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000002040)=""/4084, 0xff4}, {&(0x7f0000000340)=""/254, 0xfe}, {&(0x7f00000004c0)=""/73, 0x3d}, {&(0x7f0000000540)=""/184, 0xb8}], 0x6, 0x0, 0xfffffffffffffd21}, 0x40012002)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYBLOB='>', @ANYRES8], 0x9a)
sendmsg$inet(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1, <r5=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000002c0)}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000ff0d1400bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x7, @remote, 0x20}, 0x80, 0x0}, 0x20000894)
gettid()
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r4, 0x58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
sendmsg$inet(r0, &(0x7f0000000d80)={&(0x7f0000000780)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000b80)=[{&(0x7f00000007c0)="a75220a7ab22d874a5a662cdacb490fa8aa9fa9756369368ed383bcd6e1e3f951a831c3ad64612a55d1d9e28f167a1cdfb0de1fda6ec59e4c864d6147b41a5a126353afeb0c43ffb8c578e28494ab5082728e8d12e26fe1b72538c80f42b09f37ee6119c2ed3c209372cdc3dddf09d487ecc4e0ac3108b032bbdc002099e0298c9d624dce11b437221bbe3e9d6fe2ebb9cfb29bd0fa83882f3371f15a5f02d9d8138ad3722d041ac14931ec5d034a2709c5769979d25b0285f8e2062b6c87ebae3cd0830cd3879295d831ebf4d426961eefa01", 0xd3}], 0x1, &(0x7f0000000d00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xa}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x68}, 0x48400)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000500)="8236fca008874827ccf1c8ed1e1f", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0)
close(r9)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r9, 0x4, 0x3, 0x1, 0x0, {0xa, 0x4e23, 0x9, @loopback, 0x97}}}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x2000f765)
ioctl$SIOCSIFHWADDR(r9, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random='d@\x00'})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r5}, &(0x7f0000000600), &(0x7f0000000640)=r9}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000004000000000000000000071102b000000175920e386f230b115a3"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
recvmsg$kcm(r1, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002)
socket$kcm(0x2b, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='thermal_zone_trip\x00', 0xffffffffffffffff, 0x0, 0x165}, 0x18)

25.905651322s ago: executing program 1 (id=291):
r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x5}, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x6, 0x16, 0x6c, 0x0, 0x2, 0x82041, 0xa, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7191, 0x1, @perf_config_ext={0x1, 0x9}, 0x10009, 0x2, 0xb4, 0x0, 0x10000, 0x6, 0x3, 0x0, 0xe, 0x0, 0x2000000}, 0xffffffffffffffff, 0x2, r0, 0x1)
close(r1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) (async)
r3 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r3, &(0x7f00000017c0)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)='%', 0x1}], 0x1, &(0x7f00000004c0)=[{0x10, 0x84, 0x7}], 0x10}, 0x51)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x2, &(0x7f00000000c0)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r2}], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)

25.902041813s ago: executing program 2 (id=292):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000001580)=ANY=[@ANYBLOB="6110800000000000953e03d0c77f6a337cd7dab6fb9e9e38b9289b97fb087e8f91f784e3122892ebbd280c287bb04ec297942a93e2ff41c4d852de4d"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x44000}, 0x94)

25.83160746s ago: executing program 2 (id=293):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="ab", 0x1}], 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000002000000", @ANYRES32=r1, @ANYRES32=r1], 0x18}, 0x20040001)
r2 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x1020a0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8954, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0)
r5 = perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0100, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x6}, 0x10, 0x0, 0x80000003, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000100), 0x10)
ioctl$PERF_EVENT_IOC_RESET(r6, 0x2403, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r3)
ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0x40)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r4], 0x48)
r7 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)="3504000041000511d25a35400c00020001ffe72037153e370c04018006041000450000002a560000e7ff0040", 0x2c}, {&(0x7f0000000600)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb1b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c891cc4556efd6a6d0f8d57f2267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc2261c238a5159ea98db9c00aeef644ae98a8cb8da3ff3b7ba14d7971910b559623af829524d83bf19f18628464076329140e0203fc75859185ccd019302afb784e41e16cf2d31db7aba83d0f500ce25fc2d7f524a04cfaa0015ea8a297477a5517f8a4ac167083a321c78070974afc897fb738fbcfeac369844fd7fc11fff502c02b7607007ead2007a18006a6ca8dc2d0119f01d7083c2ab5760ac7b24d7bf26b9030cf455a08385f9e662cbe0c3ca6e6fd4ac0c8566c0fca986c68ef7016a11d3e44253b6f2d07d53505ed58b8ad410f89425046321b4a9b27b5e767bdfa0ebf7abf3d91b319120000853d8e5cbc4a2c5c560b007eafe03e3332f6017f3164c7f602180aad23dfe5e770fe8855f45925e342b7dfd7ddaa68b65065465cdf4d5b8d995d6e6a7042ebea3d139c6a616232eb4efd1a50d0e6db3188a8e98375fda2a7ebd4cd59b9ea626c13685b05e6cf4d484e32869fd7c7167dbfa48b1529e5dd5f5a02673ccc7dbedfd75e34f3f9eb3c7833734a59acada6dd2ff364475e03f2219deedb5d0c941f2177a23167adcc5a15f4e5441ed537f26a1620df057aeb55b2ad3a00a77e23d304ed6034dd5ec9b2cfe777ca21ec4f48abdafa0d66a78d653068ef871bdc6598fd32edcba60c675a1e8f4e81e83f73414c179bfb7f329d71fe6e291fb2eaa59b9636cb6a74d0deb46a18c77f37abf0894a7083e0e4c237ff7c24872668ac40e307569a975b2765af8d3268d11b473d5d7544edd1ed0e507c319e128daf7e75c349c9b3de603580d52a6c118acf924216130364bfab8d59969e4dbee0a9208adb7bfa855556be06a666334a0612e4ff3fc6f4ddb9a0c209301081f34824496480d688ae9bd0c3c28ea8ecfe01a2b86dcb3750686a89891d9abf0d584c854b4bc6096293fbc8707312f424996361ef9261ef3ba7cd2ddffb0e3c81e6b962d680e02f7a672dc2643cc24ad6", 0x3bf}, {&(0x7f0000000000), 0x700}, {&(0x7f0000000040)="9d493c13b6b02affcc19cb904ec2bd74085b0bd225277e5a44d681809b6d764ecab211ef0c90ba361a4378457b19705b18406f35071130b4e06c4a3b1a6e9a9d7cf1453aeb21e4c30a85207027af69f536ec61a4a59614b3f59314c649223b791213aafb18e08f295189c63c72d255f34987edf7a120ed0fd80500000000000000c4bf95e695a7b864e534d2af6abeee35de087c976a02f4e4b20bdea333455b73232f9297ce2197ce", 0xa9}], 0x4}, 0x10049014)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000003000000050010000b00000001000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32, @ANYRESDEC=r2], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r8}, 0x38)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r4}, 0x8)

25.830864183s ago: executing program 1 (id=294):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000440)={&(0x7f00000003c0)=@abs, 0x6e, &(0x7f00000009c0)=[{&(0x7f00000004c0)=""/139, 0x8b}, {&(0x7f00000007c0)=""/222, 0xde}, {&(0x7f00000006c0)=""/190, 0xbe}, {&(0x7f0000000580)=""/104, 0x68}, {&(0x7f00000008c0)=""/108, 0x6c}], 0x5, &(0x7f0000000bc0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [<r1=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}, 0x40000003)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r1}, &(0x7f0000000940), &(0x7f0000000a40)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000e00)=@framed={{0x7e, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x3c, 0x9}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x9, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x8183, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x2}, 0x108862, 0x0, 0x0, 0x0, 0xc360, 0xfffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x15a}], 0x1}, 0x40050)
r5 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8b0b, &(0x7f0000000180)={'virt_wifi0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}})
perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffd46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402000a}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r6, 0x29, 0x23, &(0x7f0000000040), 0xcf)
r7 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r7, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="0213020902000000e4a17c4e2ca18baa", 0x10}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x5c}, [@ldst={0x5, 0x3, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1a, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100008000008100000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

25.763718425s ago: executing program 2 (id=295):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0xb19, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x2080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x6}, 0x2000, 0x10000, 0x0, 0x0, 0x40000}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8922, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$kcm(0xa, 0x2, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
setsockopt$sock_attach_bpf(r3, 0x29, 0x5, &(0x7f0000000100), 0x120)
r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0x0, 0x5, 0x10}, 0xc)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94)
socketpair(0xf, 0x1, 0xd, &(0x7f0000000100))
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000"], 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r7}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r7}, 0x38)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x8, 0x1, 0x1d73, 0x10010, r4, 0x4, '\x00', r8, 0xffffffffffffffff, 0x1, 0x1, 0x3, 0xa, @void, @value, @value=r10}, 0x50)

25.762410648s ago: executing program 0 (id=296):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="611272000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf6700000000000036000b000fff52004507faff15300000d60600000ee60000bf050000000000003d63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070000000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999eef9d60bb39d0af449deaa27ea949e8f9000d885deea2783835e29eba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f26cac1c7b21bde7d1a55d6ebe700b3be005e47ef55e0dd81244b18590e000000000000356d82e43407a6d7fa94b21002f06cd247b126b6349ab62d7b07ba0a71a72145edade9941f49f300a8c8913e0e4ea9e4c77740ab3312edee62a4dc2fc85755d387d8a1bc8eb71fbe11b2216cc8d1f0160c237d929b49d828724b95555b459f4763c6222175c974be2f76fb5f330b015a68587a75c013000000000000000000000003000000000000d6ddc46e58eff8f4fbadfc6a3af8123b7f4240713a4c0cdc9d7820c4eb67cc0f8b5fe9258eeacb5776aebbab3d5c55020000006082778366dadfc36029633e0514cbcee1f3928970bde148c940434f33acd377cbad17673b2d30b6339255c98eba97efb4e9ac1f11be815dd6045592edcbee7f253ec74c7c1313505bd7ff8fd58b3a6569c91dbdef1df585aeaea7346a2a65caee5c85f9eddeeeee3c8a2e523c864ac430eb47cb4d0c8767b9d4125661b5a1a170c04b64da3a99ddb93bf14fae3ca2d1e882375b8dbac83978e136c34f90b33cc0eeb57debcfe26589efc08125d5d62a7e593c9738a50171adf051ea4f07e7e7e770c2016eeacbe8511afffffbea75759a1ea5404f5453c0b5c46c9700808c096cf8cf5223f341cbea3841b5cd224c1b381d56afebe9f99a00e3cd94dc0bb7af9e8709db487cc4d9b3b96723d69d512ddd57b0dee9b9f6ae80a502cce352098603e77f9ecced07fa25e99e9e415414c91f8bfd1c150570512f26c4ee34a64c131dce3800000000000000006c86287945bd8d258442870e000000000000000000000000f7e6a10de4bf7369b0d5b5373829b09bf5b7b34099b27ac7770fca449d4c4ca15f88b588b2429af2e1d1a4e1fa44cb80fcfae6e50d7e5b4675d7e0be706224f34e6eed553b40e2b897e73752fc7d1e4b0f4c5967eefd7448d5fde5841fa464a67267c631052bd7333769a4b8d19d4794357edce762e8136ab9d7ed34a72baffd849b90579b96b3"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x5e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x10}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)

25.683785434s ago: executing program 1 (id=297):
r0 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x14, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2) (async)
recvmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6337ce22060000fe0000000000000000000000a8080000000000000056a13571673fa7083671a0129d9301", @ANYRES8=r1], 0xfdef) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x15, 0x16, &(0x7f0000001580)=ANY=[@ANYRES16=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)

25.683214113s ago: executing program 1 (id=298):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='tasks\x00', 0x2, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0)
r5 = perf_event_open$cgroup(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x82, 0x0, 0x7, 0x0, 0x3f16a02, 0x4040, 0x9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffff, 0x1, @perf_bp={&(0x7f0000000240)}, 0x204b6, 0x1, 0x1ff, 0x1, 0x43ad, 0xfffffffd, 0x5, 0x0, 0x7fff, 0x0, 0x3}, r3, 0x7, 0xffffffffffffffff, 0x8)
perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x40209, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0xd01, 0xea9}, 0x447b, 0x80000001, 0x10, 0x0, 0x3, 0x7, 0x8, 0x0, 0xf66, 0x0, 0x7ff}, r4, 0xd, r5, 0x6)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, <r6=>0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@struct={0x9, 0x3, 0x0, 0x4, 0x0, 0x40, [{0xf, 0x1, 0x95}, {0x3, 0x5, 0x4}, {0x6, 0x3, 0xe}]}]}, {0x0, [0x2e, 0x2e, 0x5f, 0x30]}}, &(0x7f00000005c0)=""/214, 0x4e, 0xd6, 0x1, 0xfff, 0x10000}, 0x28)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000740)=[0x0, 0x0], ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x1, 0xa, &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r9=>0x0, 0xf9, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x2d, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x17, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x7}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffff6e}, @call={0x85, 0x0, 0x0, 0x6e}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b00)='GPL\x00', 0x7, 0xb5, &(0x7f0000000b40)=""/181, 0x41000, 0x21, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000c40)={0x0, 0x10, 0x7, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0xa, 0x1b, &(0x7f00000003c0)=@raw=[@map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @jmp={0x5, 0x1, 0x0, 0x0, 0x3, 0x1, 0xffffffffffffffff}, @generic={0x8, 0x9, 0x3, 0x5, 0xffffffff}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000}}], &(0x7f00000004c0)='GPL\x00', 0x7, 0x2d, &(0x7f0000000500)=""/45, 0x40f00, 0x77, '\x00', r1, @fallback=0xa, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x4, 0x8, 0x6, 0xd}, 0x10, r9, r10, 0x1, 0x0, &(0x7f0000000d40)=[{0x2, 0x2, 0x2, 0x2}]}, 0x94)
r11 = perf_event_open(&(0x7f0000000e80)={0x6, 0x80, 0x6, 0x8, 0x4, 0x1, 0x0, 0xffff, 0x4000, 0xa, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xd2ad, 0x4, @perf_bp={&(0x7f0000000e40), 0x9}, 0x100000, 0x100000000, 0x401, 0x5, 0x8001, 0x1, 0x0, 0x0, 0xb, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x40082406, &(0x7f0000000f00)='\xc1%/)\x00')
openat$cgroup_subtree(r4, &(0x7f0000000f40), 0x2, 0x0)
r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002100)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000f80)=@raw=[@call={0x85, 0x0, 0x0, 0xa8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}], &(0x7f0000000fc0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001000)=""/4096, 0x41000, 0x74, '\x00', r1, 0x1b, r7, 0x8, &(0x7f0000002000)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, r9, 0x0, 0x7, &(0x7f0000002040)=[r6, r6], &(0x7f0000002080)=[{0x3, 0x3, 0x10, 0x6}, {0x3, 0x5, 0x0, 0xa}, {0x4, 0x4, 0x5, 0x5}, {0x0, 0x3, 0x1, 0x3}, {0x2, 0x5, 0x5, 0xb}, {0x1, 0x1, 0x10, 0x9}, {0x0, 0x3, 0x2, 0x4}], 0x10, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000021c0)={0x0, r12}, 0x10)
r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000002200), 0x8712dc34d87aa82c, 0x0)
ioctl$TUNSETFILTEREBPF(r13, 0x800454e1, &(0x7f0000002240)=r12)
r14 = socket$kcm(0x29, 0x0, 0x0)
r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002280)={0x1b, 0x0, 0x0, 0x46d1, 0x0, r0, 0x2, '\x00', r1, r7, 0x3, 0x3, 0x1}, 0x50)
r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002500)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x10, '\x00', 0x0, r7, 0x1, 0x3, 0x2}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002600)={0x18, 0x20, &(0x7f0000002300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r15}}, {}, [@ldst={0x1, 0x3, 0x1, 0x3, 0x1, 0x50, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x7fffffff}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xa}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @call={0x85, 0x0, 0x0, 0x9a}, @alu={0x4, 0x1, 0x6, 0x9, 0x3, 0xfffffffffffffffe, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002400)='syzkaller\x00', 0x4, 0x23, &(0x7f0000002440)=""/35, 0x41000, 0x0, '\x00', r1, 0x0, r7, 0x8, &(0x7f0000002480)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000024c0)={0x5, 0x7, 0x3, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000002580)=[r16, r6], &(0x7f00000025c0)=[{0x4, 0x5, 0x4, 0x7}, {0x5, 0x2, 0xa, 0xc}, {0x0, 0x2, 0x5, 0x6}], 0x10, 0x3}, 0x94)
ioctl$sock_kcm_SIOCKCMCLONE(r14, 0x89e2, &(0x7f00000026c0)={r14})
r17 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002980)=@bpf_ext={0x1c, 0x11, &(0x7f0000002700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r15}}, {}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000027c0)='GPL\x00', 0xfffffff7, 0xbe, &(0x7f0000002800)=""/190, 0x41100, 0x9, '\x00', r8, 0x0, r7, 0x8, &(0x7f00000028c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000002900)={0x3, 0x10, 0x8, 0xfc}, 0x10, 0x2a115, r10, 0x0, &(0x7f0000002940)=[r16, r6, 0x1, 0xffffffffffffffff]}, 0x94)
setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000002a40)=r17, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002a80)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
recvmsg(r18, &(0x7f0000002c80)={&(0x7f0000002ac0)=@x25={0x9, @remote}, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000002b40)=""/118, 0x76}], 0x1, &(0x7f0000002c00)=""/124, 0x7c}, 0x40000043)
socket$kcm(0x29, 0x5, 0x0)
perf_event_open$cgroup(&(0x7f0000002d00)={0x1, 0x80, 0x88, 0x2, 0x7, 0x82, 0x0, 0x6, 0x9020, 0xd, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000002cc0), 0x1}, 0x1410a, 0x0, 0x5, 0x3, 0x79eea5a3, 0xa53, 0x3, 0x0, 0x401, 0x0, 0x5}, r2, 0x1, 0xffffffffffffffff, 0x1)

25.682561112s ago: executing program 1 (id=299):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x58}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x40000000ffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x4}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001540)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x14}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0x800})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200200000000000000000000000001304000000002e"], 0x0, 0x37}, 0x20)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
r6 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r6, 0x0, 0xeb, 0xa6, &(0x7f0000000b80)="dd554f8a1f18e4a9e14971a580b10f74b727c99a6f920e81912f1ea107989c3e7b40f741cc750e37d6528428b2b8e31da9f3a8b0d0bfbfddbe8d4c95ec54cbb2b5e14051d0b06f4961d47b4fc5491e3abbb5499d8036468d140c44a8be0c2c2fc17cc51d4772c1c11653b1ec4722a399191a24429c938262e40b6933a44c2dd86560cf34356fb39bd27747341c9ab8d894b442b12809cbaa10a68527af5e36e1a707b651bfe78178f0e12408a10c44bce39fc8e42815eaa5f2e7f978256b55c7c3ea316b50f94e2998301cb40fa7531c19548f53e3f814c8037513fea931514901cfef1c6b4d58bd68a673", &(0x7f0000000500)=""/166, 0x9, 0x0, 0x7c, 0x32, &(0x7f0000000640)="8e6849dcdc2269e22a5dc0665b12c64a05db0ca8143cab89833cb3a772bc4175f122b62c9fae611b8f6f2eb2d6f7a1fd471049411214e1160063a5362a15ec9a45b607a57c5b2c5d732769df3e919111967c33685f24bc49c2a14e02021fd95f968cc5a7eafb0c5b59cd75d29687c32dd80bc884ef96b4b0ac3c7c19", &(0x7f0000000040)="b899a9cc9e67ca5c6a9a3a882aea3f91eb40e1d545cf829452dd43f2347fb8bbcb22010eda12071f89692b1f402e0e93acf3", 0x1, 0x0, 0x7}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r7)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000a40)=ANY=[@ANYRES32=r1, @ANYRES32=r7, @ANYRESHEX=r5, @ANYRES16=r0, @ANYRESOCT=r7, @ANYBLOB="46c68b3e7c3f9c9bc1fc4ac2faa497162498fb", @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="79d945a74a013eea86998f953891ce27d536972392688d9c18a0ddcd1504729234ac7ed311dd8c8a5beafb60cc245396938c01b722c1fb32e6f3ac320d228e5e72234ba3d5e59e8cf125367cc3db77302cf55d52fca24b93fd81d738cf20f871b382d7099c11901a5502e994563b4e501c30f2a25fee657c3fdb803c510530fb510f1148731130c127992908856b5fe02d369bce9683656968312db50e5302ede20436045856e1fd9af7a3d738ead458"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080))

25.563376s ago: executing program 0 (id=300):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="05000000040000000800000005000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\x00'/20, @ANYRES32=r0, @ANYBLOB="07c7681eda10e5f58abc019dbf426fa3e9c2ae360cf8dc95f12cca042f481e97455ea28c1f34", @ANYBLOB='\x00'/28], 0x48) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x300, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async)
perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x8, 0x0, 0x6, 0xc0, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xf6f, 0x9ea1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x10000, 0x1, 0x0, 0x0, 0x0, 0x405}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r4, &(0x7f0000000280), 0x9) (async)
r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_subtree(r6, &(0x7f0000000140), 0x2, 0x0) (async)
syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_procs(r8, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
write$cgroup_pid(r9, &(0x7f00000001c0), 0x12) (async)
write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="2b70696473206aa4"], 0x6) (async)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r10) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, 0x0, &(0x7f0000000280)}, 0x20) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) (async)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xa, 0x19, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @generic={0x1, 0x0, 0x1, 0x1000, 0x1000003}, @generic={0x9, 0x7, 0xe, 0x7, 0xe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x7fff}, @generic={0x6, 0x4, 0xb, 0x4, 0x4}, @ringbuf_query, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f00000001c0)='GPL\x00', 0x1, 0xbb, &(0x7f0000000300)=""/187, 0x41000, 0x2c, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f00000005c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000600)=[{0x0, 0x4, 0x103, 0x5}], 0x10, 0xffffff80}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r11, 0x4)

25.562768981s ago: executing program 1 (id=301):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x1408001, 0xaea}, 0x957c5, 0x32, 0xfffffbff, 0x5, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000, 0xfffffffffffffffc}, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async)
r0 = socket$kcm(0x2, 0xa, 0x2)
sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000580)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @broadcast}, 0x1, 0x4, 0x3, 0x2}}, 0x80, 0x0}, 0x20040010) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000004000000000000000300000085000000270000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000aa04000085000000060000009500"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x12, 0x8, 0x4, 0x12}, 0x50)
close(r3) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x8, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000640)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x29400, 0x0) (async)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="188000000c000000a70000cc7562001811000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf09000000000000b60904000000000065000600090000001801000020646c2500000000002020207b9af8ff000000002d9a00000000000034090000f8ffffffb702000008000000b70300000000000015000000060000003d93000000000000b5030000010000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0xd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff98, 0x0, 0x0, 0x0, 0x1}, 0x94)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000600)={'pim6reg\x00', 0x400}) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0xc}, 0x94) (async)
r6 = socket$kcm(0x2, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x80, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2f9, 0x403d87c21de2ff3f, &(0x7f0000000040)="b90103606989068c3c270040f000009e0ff008001fffffe1ffff8100632f080686dd00017f020001be", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) (async)
socket$kcm(0x10, 0x400000002, 0x0) (async)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r7}, 0x4) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7a}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000001240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0xe, 0x0, &(0x7f0000000500)="3d25ab555b19c4cbd00170850800", 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0xffff0000, 0xe, 0x6, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf001, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50)

15.163300149s ago: executing program 2 (id=302):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000001c0), 0x12)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
r4 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_config_ext={0x9, 0x101}, 0x1000, 0x4, 0x0, 0x8, 0x8000000000000000, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
socket$kcm(0x10, 0x2, 0x4) (async)
socket$kcm(0x10, 0x2, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) (async)
recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYBLOB="3eca", @ANYRES8=r7], 0x9a)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r9, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) (async)
r10 = openat$cgroup_procs(r9, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r10, &(0x7f0000000380), 0x12)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r11=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xd, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffbd35010000000000840400000000000014000000100000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b848b00ea6553f304000000815dcf00c3ee7b042d1937ba52037fdedb2150e1918c30b6301f0212feb0cff9fc56357d81b2cc1a9e37d7b75c020b070000003eb22062bafaca036d9cc7db6671573e202e0a92ee4ba12b064981cc32d1ac0b9ecc8f604dcac2563e1c1e7624cc3b88b330ad416c4c1d8c60589b6045a4ffff50df4d34bc5847bebb943a84cb56956931ba9cc39c4a9deea5d77aa843a40000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r11, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xd, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r11, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)

10.080553109s ago: executing program 32 (id=300):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="05000000040000000800000005000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\x00'/20, @ANYRES32=r0, @ANYBLOB="07c7681eda10e5f58abc019dbf426fa3e9c2ae360cf8dc95f12cca042f481e97455ea28c1f34", @ANYBLOB='\x00'/28], 0x48) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x300, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async)
perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x8, 0x0, 0x6, 0xc0, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xf6f, 0x9ea1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x10000, 0x1, 0x0, 0x0, 0x0, 0x405}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r4, &(0x7f0000000280), 0x9) (async)
r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_subtree(r6, &(0x7f0000000140), 0x2, 0x0) (async)
syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_procs(r8, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
write$cgroup_pid(r9, &(0x7f00000001c0), 0x12) (async)
write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="2b70696473206aa4"], 0x6) (async)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r10) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, 0x0, &(0x7f0000000280)}, 0x20) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) (async)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xa, 0x19, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @generic={0x1, 0x0, 0x1, 0x1000, 0x1000003}, @generic={0x9, 0x7, 0xe, 0x7, 0xe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x7fff}, @generic={0x6, 0x4, 0xb, 0x4, 0x4}, @ringbuf_query, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f00000001c0)='GPL\x00', 0x1, 0xbb, &(0x7f0000000300)=""/187, 0x41000, 0x2c, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f00000005c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000600)=[{0x0, 0x4, 0x103, 0x5}], 0x10, 0xffffff80}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r11, 0x4)

9.975170884s ago: executing program 33 (id=301):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x1408001, 0xaea}, 0x957c5, 0x32, 0xfffffbff, 0x5, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000, 0xfffffffffffffffc}, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async)
r0 = socket$kcm(0x2, 0xa, 0x2)
sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000580)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @broadcast}, 0x1, 0x4, 0x3, 0x2}}, 0x80, 0x0}, 0x20040010) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000004000000000000000300000085000000270000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000aa04000085000000060000009500"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x12, 0x8, 0x4, 0x12}, 0x50)
close(r3) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x8, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000640)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x29400, 0x0) (async)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="188000000c000000a70000cc7562001811000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf09000000000000b60904000000000065000600090000001801000020646c2500000000002020207b9af8ff000000002d9a00000000000034090000f8ffffffb702000008000000b70300000000000015000000060000003d93000000000000b5030000010000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0xd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff98, 0x0, 0x0, 0x0, 0x1}, 0x94)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000600)={'pim6reg\x00', 0x400}) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0xc}, 0x94) (async)
r6 = socket$kcm(0x2, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x80, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2f9, 0x403d87c21de2ff3f, &(0x7f0000000040)="b90103606989068c3c270040f000009e0ff008001fffffe1ffff8100632f080686dd00017f020001be", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7"}, 0x28) (async)
socket$kcm(0x10, 0x400000002, 0x0) (async)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r7}, 0x4) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7a}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000001240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0xe, 0x0, &(0x7f0000000500)="3d25ab555b19c4cbd00170850800", 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0xffff0000, 0xe, 0x6, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf001, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50)

0s ago: executing program 34 (id=302):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000001c0), 0x12)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
r4 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_config_ext={0x9, 0x101}, 0x1000, 0x4, 0x0, 0x8, 0x8000000000000000, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
socket$kcm(0x10, 0x2, 0x4) (async)
socket$kcm(0x10, 0x2, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) (async)
recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYBLOB="3eca", @ANYRES8=r7], 0x9a)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r9, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) (async)
r10 = openat$cgroup_procs(r9, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r10, &(0x7f0000000380), 0x12)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r11=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xd, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r11, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xd, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffbd35010000000000840400000000000014000000100000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b848b00ea6553f304000000815dcf00c3ee7b042d1937ba52037fdedb2150e1918c30b6301f0212feb0cff9fc56357d81b2cc1a9e37d7b75c020b070000003eb22062bafaca036d9cc7db6671573e202e0a92ee4ba12b064981cc32d1ac0b9ecc8f604dcac2563e1c1e7624cc3b88b330ad416c4c1d8c60589b6045a4ffff50df4d34bc5847bebb943a84cb56956931ba9cc39c4a9deea5d77aa843a40000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r11, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:53857' (ED25519) to the list of known hosts.
syzkaller login: [   41.667804][ T5768] cgroup: Unknown subsys name 'net'
[   41.748289][ T5768] cgroup: Unknown subsys name 'cpuset'
[   41.752084][ T5768] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   43.054363][ T5768] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   46.305031][ T5221] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   46.308262][ T5221] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   46.310960][ T5221] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   46.316337][ T5221] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   46.319160][ T5221] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   46.327646][ T5221] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   46.332084][ T5221] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   46.337144][ T5221] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   46.341298][ T5221] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   46.344113][ T5221] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   46.391784][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   46.396326][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   46.399257][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   46.402252][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   46.411396][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.520232][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   46.530031][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   46.631457][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.634194][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.637337][ T5832] bridge_slave_0: entered allmulticast mode
[   46.640077][ T5832] bridge_slave_0: entered promiscuous mode
[   46.657775][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.660194][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.662588][ T5832] bridge_slave_1: entered allmulticast mode
[   46.665587][ T5832] bridge_slave_1: entered promiscuous mode
[   46.675502][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.679071][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.681452][ T5828] bridge_slave_0: entered allmulticast mode
[   46.684167][ T5828] bridge_slave_0: entered promiscuous mode
[   46.695522][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.698369][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.700732][ T5828] bridge_slave_1: entered allmulticast mode
[   46.703462][ T5828] bridge_slave_1: entered promiscuous mode
[   46.712009][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   46.718297][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.733236][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.738271][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.752745][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.778180][ T5832] team0: Port device team_slave_0 added
[   46.791712][ T5832] team0: Port device team_slave_1 added
[   46.801396][ T5828] team0: Port device team_slave_0 added
[   46.810651][ T5828] team0: Port device team_slave_1 added
[   46.841210][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.843580][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.852174][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.864591][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.867244][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.875530][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.879831][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.882203][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.884603][ T5837] bridge_slave_0: entered allmulticast mode
[   46.887816][ T5837] bridge_slave_0: entered promiscuous mode
[   46.890835][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.893194][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.902451][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.917587][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.919890][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.928439][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.932196][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.934594][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.937437][ T5837] bridge_slave_1: entered allmulticast mode
[   46.940228][ T5837] bridge_slave_1: entered promiscuous mode
[   46.961952][ T5832] hsr_slave_0: entered promiscuous mode
[   46.964803][ T5832] hsr_slave_1: entered promiscuous mode
[   46.978061][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.990717][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.020354][ T5828] hsr_slave_0: entered promiscuous mode
[   47.022698][ T5828] hsr_slave_1: entered promiscuous mode
[   47.024847][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.027670][ T5828] Cannot create hsr debugfs directory
[   47.062943][ T5837] team0: Port device team_slave_0 added
[   47.069145][ T5837] team0: Port device team_slave_1 added
[   47.114436][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.116889][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.125295][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.130025][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.132317][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.141184][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.201733][ T5837] hsr_slave_0: entered promiscuous mode
[   47.204135][ T5837] hsr_slave_1: entered promiscuous mode
[   47.206842][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.209347][ T5837] Cannot create hsr debugfs directory
[   47.258840][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   47.276645][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   47.285721][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   47.294105][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.348572][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   47.357819][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.362111][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.367145][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   47.372103][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.374542][ T5832] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.377353][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.379758][ T5832] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.420091][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   47.429830][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   47.434268][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   47.439491][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   47.447464][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.449851][ T5828] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.452366][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.454758][ T5828] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.488288][   T64] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.491725][   T64] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.495607][   T64] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.499004][   T64] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.515726][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.548991][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   47.563593][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.574330][ T3130] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.577387][ T3130] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.583063][ T3130] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.586083][ T3130] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.605276][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   47.618070][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.620536][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.627016][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.629397][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.641676][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.670802][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   47.682729][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.685218][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.702253][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.704672][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.800365][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.817566][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.852662][ T5828] veth0_vlan: entered promiscuous mode
[   47.866568][ T5828] veth1_vlan: entered promiscuous mode
[   47.872581][ T5832] veth0_vlan: entered promiscuous mode
[   47.885730][ T5828] veth0_macvtap: entered promiscuous mode
[   47.889815][ T5832] veth1_vlan: entered promiscuous mode
[   47.893572][ T5828] veth1_macvtap: entered promiscuous mode
[   47.903013][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.918891][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.929366][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.932625][ T5832] veth0_macvtap: entered promiscuous mode
[   47.945133][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.948523][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.951387][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.954974][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.965050][ T5832] veth1_macvtap: entered promiscuous mode
[   47.981635][ T5837] veth0_vlan: entered promiscuous mode
[   47.998318][ T5837] veth1_vlan: entered promiscuous mode
[   48.002767][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.017256][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.024468][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.028181][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.031093][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.033979][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.064525][ T5837] veth0_macvtap: entered promiscuous mode
[   48.076053][ T5837] veth1_macvtap: entered promiscuous mode
[   48.076911][ T3130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.088859][ T3130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.094099][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.101071][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.111943][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.116656][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.119532][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.122387][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.133723][ T3587] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.142826][ T3587] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.152370][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.155001][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.188705][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.191584][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.202778][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   48.224321][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.230169][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.252868][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.262011][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.277588][   T54] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4
[   48.288462][ T5895] netlink: 67 bytes leftover after parsing attributes in process `syz.0.1'.
[   48.321054][ T5897] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[   48.356811][   T54] Bluetooth: hci1: command tx timeout
[   48.358837][   T54] Bluetooth: hci0: command tx timeout
[   48.373968][ T5905] netlink: 'syz.0.6': attribute type 22 has an invalid length.
[   48.395999][ T5905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6'.
[   48.436225][   T54] Bluetooth: hci2: command tx timeout
[   48.513102][ T5919] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   48.553315][ T5921] netlink: 'syz.1.11': attribute type 1 has an invalid length.
[   48.556177][ T5921] netlink: 10938 bytes leftover after parsing attributes in process `syz.1.11'.
[   48.640446][    C1] hrtimer: interrupt took 33304 ns
[   48.701184][ T5917] syz.0.9 (5917) used greatest stack depth: 20224 bytes left
[   49.434155][ T5942] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   49.612106][ T5946] Zero length message leads to an empty skb
[   49.692290][ T5953] netlink: 188 bytes leftover after parsing attributes in process `syz.2.21'.
[   49.859526][ T5962] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   49.864833][ T5963] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   49.890197][   T54] Bluetooth: hci1: ISO packet for unknown connection handle 62
[   49.904619][ T5968] warning: `syz.1.27' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   49.952701][ T5971] netlink: 'syz.0.28': attribute type 21 has an invalid length.
[   50.334613][ T5992] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   50.421159][ T5996] GPL: port 1(erspan0) entered blocking state
[   50.423497][ T5996] GPL: port 1(erspan0) entered disabled state
[   50.425718][ T5996] erspan0: entered allmulticast mode
[   50.429705][ T5996] erspan0: entered promiscuous mode
[   50.435936][   T54] Bluetooth: hci1: command tx timeout
[   50.446312][   T54] Bluetooth: hci0: command tx timeout
[   50.515894][   T54] Bluetooth: hci2: command tx timeout
[   50.659995][ T6012] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   50.758056][ T6018] netlink: 13 bytes leftover after parsing attributes in process `syz.0.47'.
[   50.793318][ T6028] netlink: 'syz.0.51': attribute type 22 has an invalid length.
[   50.799246][ T6028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.51'.
[   50.850691][ T6038] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   50.910337][ T6046] netlink: 'syz.2.54': attribute type 29 has an invalid length.
[   50.918723][ T6046] netlink: 'syz.2.54': attribute type 29 has an invalid length.
[   51.126449][ T6062] netlink: 'syz.1.60': attribute type 39 has an invalid length.
[   51.178045][ T6064] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   51.350681][ T6082] netlink: 'syz.1.66': attribute type 10 has an invalid length.
[   51.518023][ T6090] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   52.039350][ T6100] netlink: 'syz.2.72': attribute type 28 has an invalid length.
[   52.108920][ T6109] C: renamed from team_slave_0 (while UP)
[   52.122614][ T6109] netlink: 'syz.2.74': attribute type 3 has an invalid length.
[   52.125568][ T6109] netlink: 116 bytes leftover after parsing attributes in process `syz.2.74'.
[   52.246010][ T6109] syz.2.74 (6109) used greatest stack depth: 20144 bytes left
[   52.369908][ T6121] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.78'.
[   52.516097][ T5221] Bluetooth: hci1: command tx timeout
[   52.518564][   T54] Bluetooth: hci0: command tx timeout
[   52.596030][   T54] Bluetooth: hci2: command tx timeout
[   52.748752][ T6137] delete_channel: no stack
[   53.137674][ T6160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.91'.
[   54.379958][ T6199] bond_slave_1: entered promiscuous mode
[   54.381862][ T6199] bond_slave_1: entered allmulticast mode
[   54.408077][ T6197] Driver unsupported XDP return value 0 on prog  (id 144) dev N/A, expect packet loss!
[   54.596904][ T5221] Bluetooth: hci1: command tx timeout
[   54.598788][   T54] Bluetooth: hci0: command tx timeout
[   54.675994][   T54] Bluetooth: hci2: command tx timeout
[   56.149605][ T6242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.116'.
[   56.155337][ T6243] validate_nla: 2 callbacks suppressed
[   56.155347][ T6243] netlink: 'syz.1.115': attribute type 2 has an invalid length.
[   56.433835][ T6259] netlink: 'syz.2.121': attribute type 12 has an invalid length.
[   56.437660][ T6259] netlink: 120 bytes leftover after parsing attributes in process `syz.2.121'.
[   56.518894][ T6261] ksmbd: Unknown IPC event: 1, ignore.
[   56.521475][ T6261] netlink: 'syz.2.122': attribute type 27 has an invalid length.
[   56.524749][ T6261] netlink: 164 bytes leftover after parsing attributes in process `syz.2.122'.
[   57.124157][ T6276] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   57.475685][ T6298] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   57.982293][ T6335] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   58.285858][ T6366] netlink: 'syz.1.152': attribute type 21 has an invalid length.
[   58.291269][ T6366] IPv6: NLM_F_CREATE should be specified when creating new route
[   58.368034][ T6374] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   58.432368][ T6377] raw_sendmsg: syz.1.155 forgot to set AF_INET. Fix it!
[   58.661524][ T6389] can: request_module (can-proto-0) failed.
[   58.808793][ T6397] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   58.941138][ T6403] netlink: 60 bytes leftover after parsing attributes in process `syz.1.164'.
[   58.946537][ T6403] netlink: 60 bytes leftover after parsing attributes in process `syz.1.164'.
[   58.960757][ T6403] netlink: 60 bytes leftover after parsing attributes in process `syz.1.164'.
[   59.103856][ T6415] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   59.475080][ T6427] sock: sock_timestamping_bind_phc: sock not bind to device
[   59.544088][ T6426] netlink: 'syz.2.172': attribute type 8 has an invalid length.
[   59.557155][ T6426] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.172'.
[   59.601835][ T6434] netlink: 'syz.0.175': attribute type 12 has an invalid length.
[   59.604532][ T6434] netlink: 120 bytes leftover after parsing attributes in process `syz.0.175'.
[   59.659517][ T6439] netlink: 'syz.2.177': attribute type 39 has an invalid length.
[   60.277234][ T6454] netlink: 'syz.1.181': attribute type 8 has an invalid length.
[   60.284018][ T6454] netlink: 156 bytes leftover after parsing attributes in process `syz.1.181'.
[   60.422141][ T6456] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   60.489344][ T6458] netlink: 'syz.1.183': attribute type 13 has an invalid length.
[   60.495251][ T6458] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.183'.
[   60.572449][ T6463] netlink: 'syz.1.184': attribute type 10 has an invalid length.
[   60.579630][ T6463] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   60.618487][   T54] Bluetooth: hci0: unexpected cc 0x1004 length: 12 > 11
[   61.453593][ T6478] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   61.757217][ T6502] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   62.139601][ T6528] netlink: 17 bytes leftover after parsing attributes in process `syz.1.206'.
[   62.252597][ T6535] netlink: 60 bytes leftover after parsing attributes in process `syz.1.207'.
[   62.258084][ T6530] netlink: 60 bytes leftover after parsing attributes in process `syz.1.207'.
[   62.347403][ T6540] netlink: 14 bytes leftover after parsing attributes in process `syz.2.209'.
[   62.350240][ T6540] openvswitch: netlink: Message has 4 unknown bytes.
[   63.012822][ T6561] netlink: 'syz.1.219': attribute type 21 has an invalid length.
[   63.021697][ T6561] netlink: 164 bytes leftover after parsing attributes in process `syz.1.219'.
[   63.033007][ T6561] netlink: 164 bytes leftover after parsing attributes in process `syz.1.219'.
[   63.113862][ T6579] netlink: 'syz.1.224': attribute type 12 has an invalid length.
[   63.120376][ T6579] netlink: 120 bytes leftover after parsing attributes in process `syz.1.224'.
[   63.376790][ T6605] netlink: 'syz.2.233': attribute type 12 has an invalid length.
[   63.379319][ T6605] netlink: 120 bytes leftover after parsing attributes in process `syz.2.233'.
[   63.432476][ T6607] sctp: [Deprecated]: syz.2.234 (pid 6607) Use of int in maxseg socket option.
[   63.432476][ T6607] Use struct sctp_assoc_value instead
[   64.426512][ T6633] netlink: 'syz.1.241': attribute type 12 has an invalid length.
[   64.435935][ T6633] netlink: 120 bytes leftover after parsing attributes in process `syz.1.241'.
[   64.676619][   T54] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[   64.679569][   T54] Bluetooth: hci0: Injecting HCI hardware error event
[   64.683258][ T5221] Bluetooth: hci0: hardware error 0x00
[   65.442610][ T6639] netlink: 'syz.1.243': attribute type 10 has an invalid length.
[   65.446243][ T6639] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[   65.450251][ T6639] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   65.455183][ T6639] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[   67.088361][ T6669] netlink: 'syz.0.255': attribute type 11 has an invalid length.
[   67.090819][ T6669] netlink: 149476 bytes leftover after parsing attributes in process `syz.0.255'.
[   67.143108][ T6669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   67.216614][ T6673] __nla_validate_parse: 1 callbacks suppressed
[   67.216691][ T6673] netlink: 188 bytes leftover after parsing attributes in process `syz.2.257'.
[   67.266134][ T6680] IPv6: NLM_F_REPLACE set, but no existing node found!
[   67.388301][ T6692] netlink: 'syz.1.262': attribute type 10 has an invalid length.
[   67.543360][ T6703] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   67.720100][   T54] Bluetooth: hci2: ISO packet for unknown connection handle 2622
[   67.872401][ T6715] netlink: 'syz.2.269': attribute type 3 has an invalid length.
[   67.875262][ T6715] netlink: 169664 bytes leftover after parsing attributes in process `syz.2.269'.
[   67.952457][ T6719] netlink: 'syz.2.271': attribute type 22 has an invalid length.
[   67.955120][ T6719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.271'.
[   68.744493][ T6730] delete_channel: no stack
[   68.755916][ T5221] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[   68.893346][ T6744] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.281'.
[   69.186717][ T6762] netlink: 60 bytes leftover after parsing attributes in process `syz.2.286'.
[   69.190669][ T6760] netlink: 60 bytes leftover after parsing attributes in process `syz.2.286'.
[   69.270321][ T6762] netlink: 60 bytes leftover after parsing attributes in process `syz.2.286'.
[   69.880678][ T6779] netlink: 17 bytes leftover after parsing attributes in process `syz.2.293'.
[   69.884361][ T6779] netlink: zone id is out of range
[   69.893709][ T6779] netlink: zone id is out of range
[   69.895556][ T6779] netlink: zone id is out of range
[   69.898205][ T6779] netlink: zone id is out of range
[   69.900030][ T6779] netlink: zone id is out of range
[   69.901729][ T6779] netlink: zone id is out of range
[   69.903519][ T6779] netlink: zone id is out of range
[   69.905185][ T6779] netlink: zone id is out of range
[   69.908582][ T6779] netlink: zone id is out of range
[   69.911697][ T6779] netlink: zone id is out of range
[   70.842215][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.845988][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   84.772575][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1005624645 wd_nsec: 1005611551
[   86.458318][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   86.461524][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   86.464348][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   86.472314][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   86.475301][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   86.550254][ T5221] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   86.555656][ T5221] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   86.560032][ T5221] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   86.564595][ T5221] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   86.568071][ T5221] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   87.191865][ T6813] chnl_net:caif_netlink_parms(): no params data found
[   87.276969][ T6816] chnl_net:caif_netlink_parms(): no params data found
[   88.516139][ T5221] Bluetooth: hci3: command tx timeout
[   88.596505][ T5221] Bluetooth: hci4: command tx timeout
[   90.596271][ T5221] Bluetooth: hci3: command tx timeout
[   90.676877][ T5221] Bluetooth: hci4: command tx timeout
[   92.676037][ T5221] Bluetooth: hci3: command tx timeout
[   92.756010][ T5221] Bluetooth: hci4: command tx timeout
[   94.757057][ T5221] Bluetooth: hci3: command tx timeout
[   94.836659][ T5221] Bluetooth: hci4: command tx timeout
[   96.213282][   T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   96.216594][   T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   96.219398][   T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   96.223212][   T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   96.232311][   T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   98.279407][   T54] Bluetooth: hci5: command tx timeout
[  100.356265][   T54] Bluetooth: hci5: command tx timeout
[  102.436281][   T54] Bluetooth: hci5: command tx timeout
[  104.516533][   T54] Bluetooth: hci5: command tx timeout
[  132.828287][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.830387][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  141.683099][  T790] cfg80211: failed to load regulatory.db
[  146.779117][ T5221] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  146.793205][ T5221] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  146.796606][ T5221] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  146.799935][ T5221] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  146.802896][ T5221] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  146.916494][ T5221] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  146.919646][ T5221] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  146.922415][ T5221] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  146.926512][ T5221] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  146.929485][ T5221] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  148.835964][   T54] Bluetooth: hci6: command tx timeout
[  148.996476][   T54] Bluetooth: hci7: command tx timeout
[  150.916135][   T54] Bluetooth: hci6: command tx timeout
[  151.076009][   T54] Bluetooth: hci7: command tx timeout
[  152.995946][   T54] Bluetooth: hci6: command tx timeout
[  153.156049][   T54] Bluetooth: hci7: command tx timeout
[  155.075939][   T54] Bluetooth: hci6: command tx timeout
[  155.235961][   T54] Bluetooth: hci7: command tx timeout
[  155.265884][    C0] sched: DL replenish lagged too much
[  155.814929][ T6834] chnl_net:caif_netlink_parms(): no params data found
[  156.563618][ T5221] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  156.573549][ T5221] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  156.577595][ T5221] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  156.581353][ T5221] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  156.584425][ T5221] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  158.596193][ T5221] Bluetooth: hci0: command tx timeout
[  160.676218][ T5221] Bluetooth: hci0: command tx timeout
[  162.756082][ T5221] Bluetooth: hci0: command tx timeout
[  164.836102][ T5221] Bluetooth: hci0: command tx timeout
[  170.202785][ T5834] Bluetooth: hci2: command 0x0406 tx timeout
[  170.204913][ T5834] Bluetooth: hci1: command 0x0406 tx timeout
[  194.406061][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  194.408202][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  206.823416][ T6859] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  206.826961][ T6859] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  206.829909][ T6859] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  206.833295][ T6859] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  206.842997][ T6859] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  207.875446][ T6864] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  207.880840][ T6864] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  207.886755][ T6864] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  207.890689][ T6864] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  207.893764][ T6864] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  211.157447][ T6867] Bluetooth: hci3: command 0x0406 tx timeout
[  211.159541][ T6867] Bluetooth: hci4: command 0x0406 tx timeout
[  216.863068][ T6872] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  216.868205][ T6872] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  216.871258][ T6872] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  216.877517][ T6872] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  216.880641][ T6872] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  221.398095][ T6875] Bluetooth: hci5: command 0x0406 tx timeout
[  225.717457][   T34] INFO: task syz.2.302:6807 blocked for more than 143 seconds.
[  225.720156][   T34]       Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0
[  225.723651][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  225.755963][   T34] task:syz.2.302       state:D stack:26824 pid:6807  tgid:6806  ppid:5837   task_flags:0x400040 flags:0x00004004
[  225.759808][   T34] Call Trace:
[  225.760911][   T34]  <TASK>
[  225.761909][   T34]  __schedule+0x16f5/0x4d00
[  225.763470][   T34]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  225.765357][   T34]  ? schedule+0x165/0x360
[  225.774645][   T34]  ? __pfx___schedule+0x10/0x10
[  225.777135][   T34]  ? schedule+0x91/0x360
[  225.778599][   T34]  schedule+0x165/0x360
[  225.780003][   T34]  schedule_preempt_disabled+0x13/0x30
[  225.781761][   T34]  __mutex_lock+0x724/0xe80
[  225.783266][   T34]  ? perf_trace_lock+0x2f8/0x3b0
[  225.784868][   T34]  ? __mutex_lock+0x51b/0xe80
[  225.811944][   T34]  ? cgroup_kn_lock_live+0x13c/0x230
[  225.813792][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  225.815530][   T34]  ? cgroup_tryget+0x55/0x2b0
[  225.817727][   T34]  ? cgroup_tryget+0x55/0x2b0
[  225.819326][   T34]  ? cgroup_tryget+0x55/0x2b0
[  225.820919][   T34]  ? cgroup_tryget+0x55/0x2b0
[  225.822753][   T34]  cgroup_kn_lock_live+0x13c/0x230
[  225.824460][   T34]  ? __pfx_cgroup_mkdir+0x10/0x10
[  225.834766][   T34]  cgroup_mkdir+0x4b/0xe60
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  225.847027][   T34]  ? kernfs_root+0x1c/0x230
[  225.848592][   T34]  ? kernfs_root+0x1c/0x230
[  225.850077][   T34]  ? kernfs_root+0x1c/0x230
[  225.851640][   T34]  ? __pfx_cgroup_mkdir+0x10/0x10
[  225.853356][   T34]  kernfs_iop_mkdir+0x211/0x350
[  225.854974][   T34]  vfs_mkdir+0x306/0x510
[  225.876266][   T34]  do_mkdirat+0x247/0x590
[  225.877857][   T34]  ? __pfx_do_mkdirat+0x10/0x10
[  225.879533][   T34]  ? getname_flags+0x1e5/0x540
[  225.881172][   T34]  __x64_sys_mkdirat+0x87/0xa0
[  225.882811][   T34]  do_syscall_64+0xfa/0x3b0
[  225.884391][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  225.926038][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.928211][   T34]  ? exc_page_fault+0x9f/0xf0
[  225.929839][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.931852][   T34] RIP: 0033:0x7ff27318e9a9
[  225.933385][   T34] RSP: 002b:00007ff273f41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  225.967937][   T34] RAX: ffffffffffffffda RBX: 00007ff2733b5fa0 RCX: 00007ff27318e9a9
[  225.970681][   T34] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c
[  225.973327][   T34] RBP: 00007ff273210d69 R08: 0000000000000000 R09: 0000000000000000
[  225.987234][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  225.989963][   T34] R13: 0000000000000001 R14: 00007ff2733b5fa0 R15: 00007ffd56059638
[  225.992654][   T34]  </TASK>
[  225.993728][   T34] INFO: task syz.2.302:6808 blocked for more than 143 seconds.
[  226.001344][   T34]       Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0
[  226.004117][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  226.009675][   T34] task:syz.2.302       state:D stack:27880 pid:6808  tgid:6806  ppid:5837   task_flags:0x400040 flags:0x00004004
[  226.013658][   T34] Call Trace:
[  226.014821][   T34]  <TASK>
[  226.021037][   T34]  __schedule+0x16f5/0x4d00
[  226.022739][   T34]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  226.024801][   T34]  ? schedule+0x165/0x360
[  226.029438][   T34]  ? __pfx___schedule+0x10/0x10
[  226.031099][   T34]  ? schedule+0x91/0x360
[  226.032530][   T34]  schedule+0x165/0x360
[  226.033894][   T34]  schedule_preempt_disabled+0x13/0x30
[  226.035661][   T34]  rwsem_down_write_slowpath+0xbec/0x1030
[  226.042731][   T34]  ? rwsem_down_write_slowpath+0x7ec/0x1030
[  226.044780][   T34]  ? __pfx_rwsem_down_write_slowpath+0x10/0x10
[  226.050791][   T34]  ? __lock_acquire+0xab9/0xd20
[  226.052450][   T34]  ? filename_create+0x1f9/0x470
[  226.054117][   T34]  down_write_nested+0x1b5/0x200
[  226.060903][   T34]  ? __pfx_down_write_nested+0x10/0x10
[  226.062735][   T34]  ? mnt_get_write_access+0x223/0x2a0
[  226.064550][   T34]  filename_create+0x1f9/0x470
[  226.069138][   T34]  ? __pfx_filename_create+0x10/0x10
[  226.070937][   T34]  do_mkdirat+0xa0/0x590
[  226.072338][   T34]  ? __pfx_do_mkdirat+0x10/0x10
[  226.073962][   T34]  ? getname_flags+0x1e5/0x540
[  226.075568][   T34]  __x64_sys_mkdirat+0x87/0xa0
[  226.084541][   T34]  do_syscall_64+0xfa/0x3b0
[  226.089295][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  226.091044][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.093065][   T34]  ? exc_page_fault+0x9f/0xf0
[  226.094633][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.101706][   T34] RIP: 0033:0x7ff27318e9a9
[  226.103244][   T34] RSP: 002b:00007ff273f20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  226.108941][   T34] RAX: ffffffffffffffda RBX: 00007ff2733b6080 RCX: 00007ff27318e9a9
[  226.111531][   T34] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c
[  226.114083][   T34] RBP: 00007ff273210d69 R08: 0000000000000000 R09: 0000000000000000
[  226.125395][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  226.128528][   T34] R13: 0000000000000000 R14: 00007ff2733b6080 R15: 00007ffd56059638
[  226.131374][   T34]  </TASK>
[  226.132422][   T34] 
[  226.132422][   T34] Showing all locks held in the system:
[  226.134958][   T34] 1 lock held by pool_workqueue_/3:
[  226.143943][   T34]  #0: ffffffff8e144bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  226.147828][   T34] 3 locks held by kworker/u8:1/13:
[  226.149514][   T34]  #0: ffff888108e39148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  226.153258][   T34]  #1: ffffc90000107bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  226.179838][   T34]  #2: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  226.183139][   T34] 3 locks held by kworker/1:0/24:
[  226.184783][   T34]  #0: ffff88801a481d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  226.202856][   T34]  #1: ffffc900001c7bc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  226.216123][   T34]  #2: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf00
[  226.219239][   T34] 1 lock held by khungtaskd/34:
[  226.220864][   T34]  #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  226.224119][   T34] 6 locks held by kworker/u11:0/54:
[  226.246090][   T34]  #0: ffff888111c13948 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  226.249651][   T34]  #1: ffffc900007cfbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  226.253703][   T34]  #2: ffff88811215cdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  226.276434][   T34]  #3: ffff88811215c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  226.279738][   T34]  #4: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  226.282934][   T34]  #5: ffff88802a5ce338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  226.309467][   T34] 3 locks held by kworker/1:2/790:
[  226.315934][   T34] 5 locks held by kworker/u11:1/5221:
[  226.317754][   T34]  #0: ffff888100a92148 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  226.321286][   T34]  #1: ffffc900248b7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  226.325414][   T34]  #2: ffff88802ac60dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  226.344743][   T34]  #3: ffff88802ac600b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  226.354351][   T34]  #4: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  226.362077][   T34] 1 lock held by dhcpcd/5577:
[  226.364221][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x5b7/0xd20
[  226.372303][   T34] 2 locks held by getty/5659:
[  226.373913][   T34]  #0: ffff8880201550a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  226.381692][   T34]  #1: ffffc900029032f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  226.385178][   T34] 1 lock held by syz-executor/5828:
[  226.390946][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  226.393945][   T34] 5 locks held by kworker/u11:2/5830:
[  226.399952][   T34]  #0: ffff88802a6ef148 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  226.403687][   T34]  #1: ffffc900034efbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  226.411903][   T34]  #2: ffff888029274dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  226.415231][   T34]  #3: ffff8880292740b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  226.426052][   T34]  #4: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  226.429345][   T34] 5 locks held by kworker/u11:3/5834:
[  226.431143][   T34]  #0: ffff88802a6e9148 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  226.434743][   T34]  #1: ffffc9000340fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  226.445073][   T34]  #2: ffff88810ebf8dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  226.448898][   T34]  #3: ffff88810ebf80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  226.452040][   T34]  #4: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  226.455183][   T34] 5 locks held by syz.0.300/6796:
[  226.463827][   T34] 3 locks held by syz.2.302/6807:
[  226.465531][   T34]  #0: ffff88810e338428 (sb_writers#10){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  226.469205][   T34]  #1: ffff88802b7cee90 (&type->i_mutex_dir_key#7/1){+.+.}-{4:4}, at: filename_create+0x1f9/0x470
[  226.472702][   T34]  #2: ffffffff8e1766c8 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_kn_lock_live+0x13c/0x230
[  226.482766][   T34] 2 locks held by syz.2.302/6808:
[  226.484485][   T34]  #0: ffff88810e338428 (sb_writers#10){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  226.489173][   T34]  #1: ffff88802b7cee90 (&type->i_mutex_dir_key#7/1){+.+.}-{4:4}, at: filename_create+0x1f9/0x470
[  226.492725][   T34] 1 lock held by syz-executor/6816:
[  226.494486][   T34]  #0: ffffffff8e144bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  226.506197][   T34] 2 locks held by syz-executor/6834:
[  226.508115][   T34]  #0: ffffffff8eca43a0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  226.511423][   T34]  #1: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  226.514545][   T34] 3 locks held by kworker/u9:6/6838:
[  226.525534][   T34]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  226.533343][   T34]  #1: ffffc9000726fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  226.543930][   T34]  #2: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  226.547447][   T34] 1 lock held by syz-executor/6842:
[  226.549162][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  226.552238][   T34] 1 lock held by syz-executor/6846:
[  226.553974][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  226.564687][   T34] 1 lock held by syz-executor/6854:
[  226.566663][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  226.569755][   T34] 1 lock held by syz-executor/6857:
[  226.571455][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  226.574551][   T34] 4 locks held by kworker/u11:4/6859:
[  226.584087][   T34]  #0: ffff888046301148 ((wq_completion)hci8#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  226.588453][   T34]  #1: ffffc90004ccfbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  226.592353][   T34]  #2: ffff88801fc0c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0
[  226.595570][   T34]  #3: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0
[  226.605983][   T34] 1 lock held by syz-executor/6863:
[  226.607729][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  226.610789][   T34] 4 locks held by kworker/u11:5/6864:
[  226.612567][   T34]  #0: ffff888044699948 ((wq_completion)hci9#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  226.623714][   T34]  #1: ffffc9000487fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  226.628106][   T34]  #2: ffff8880317e40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0
[  226.631426][   T34]  #3: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0
[  226.634853][   T34] 5 locks held by kworker/u11:6/6866:
[  226.652255][   T34]  #0: ffff888038698948 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  226.656033][   T34]  #1: ffffc90004857bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  226.660138][   T34]  #2: ffff888039390dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  226.663389][   T34]  #3: ffff8880393900b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  226.673899][   T34]  #4: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  226.677714][   T34] 1 lock held by syz-executor/6869:
[  226.679462][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  226.682589][   T34] 4 locks held by kworker/u11:8/6872:
[  226.684390][   T34]  #0: ffff88801f8b3948 ((wq_completion)hci10#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  226.695313][   T34]  #1: ffffc90004797bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  226.699713][   T34]  #2: ffff8881283480b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0
[  226.702964][   T34]  #3: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0
[  226.714692][   T34] 1 lock held by dhcpcd/6874:
[  226.716704][   T34]  #0: ffff88804899c258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  226.719869][   T34] 1 lock held by dhcpcd/6876:
[  226.721451][   T34]  #0: ffff888045b3a258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  226.724762][   T34] 1 lock held by dhcpcd/6877:
[  226.733832][   T34]  #0: ffff888048e3a258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  226.737722][   T34] 
[  226.738575][   T34] =============================================
[  226.738575][   T34] 
[  226.741541][   T34] NMI backtrace for cpu 0
[  226.741552][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  226.741561][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  226.741566][   T34] Call Trace:
[  226.741573][   T34]  <TASK>
[  226.741578][   T34]  dump_stack_lvl+0x189/0x250
[  226.741594][   T34]  ? __wake_up_klogd+0xd9/0x110
[  226.741614][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  226.741625][   T34]  ? __pfx__printk+0x10/0x10
[  226.741660][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  226.741679][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  226.741685][   T34]  ? _printk+0xcf/0x120
[  226.741706][   T34]  ? __pfx__printk+0x10/0x10
[  226.741723][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  226.741737][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  226.741752][   T34]  watchdog+0xfee/0x1030
[  226.741766][   T34]  ? watchdog+0x1de/0x1030
[  226.741789][   T34]  kthread+0x711/0x8a0
[  226.741809][   T34]  ? __pfx_watchdog+0x10/0x10
[  226.741817][   T34]  ? __pfx_kthread+0x10/0x10
[  226.741833][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  226.741846][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  226.741855][   T34]  ? __pfx_kthread+0x10/0x10
[  226.741869][   T34]  ret_from_fork+0x3fc/0x770
[  226.741886][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  226.741907][   T34]  ? __switch_to_asm+0x39/0x70
[  226.741915][   T34]  ? __switch_to_asm+0x33/0x70
[  226.741923][   T34]  ? __pfx_kthread+0x10/0x10
[  226.741938][   T34]  ret_from_fork_asm+0x1a/0x30
[  226.741974][   T34]  </TASK>
[  226.741977][   T34] Sending NMI from CPU 0 to CPUs 1:
[  226.795194][    C1] NMI backtrace for cpu 1
[  226.795208][    C1] CPU: 1 UID: 0 PID: 6796 Comm: syz.0.300 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  226.795222][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  226.795227][    C1] RIP: 0010:native_apic_msr_write+0x39/0x50
[  226.795245][    C1] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 cc cc cc cc cc f3 0f 1e fa 89 f6 31 d2 e9 a2 dc 86 03 66
[  226.795251][    C1] RSP: 0018:ffffc900001df3b8 EFLAGS: 00000046
[  226.795259][    C1] RAX: 00000000000000e5 RBX: ffff888136623900 RCX: 0000000000000838
[  226.795264][    C1] RDX: 0000000000000000 RSI: 00000000000000e5 RDI: 0000000000000838
[  226.795268][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff81cb5957
[  226.795272][    C1] R10: 3e2d735f5f5f5f26 R11: ffffffff81702490 R12: 0000000010000000
[  226.795276][    C1] R13: dffffc0000000000 R14: 00000000000000e5 R15: 0000000000000020
[  226.795281][    C1] FS:  00007f62296a76c0(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
[  226.795286][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  226.795290][    C1] CR2: 00007ffe9356f968 CR3: 00000001113dc000 CR4: 00000000000006f0
[  226.795316][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  226.795321][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  226.795325][    C1] Call Trace:
[  226.795331][    C1]  <IRQ>
[  226.795334][    C1]  lapic_next_event+0x11/0x20
[  226.795344][    C1]  clockevents_program_event+0x1cf/0x360
[  226.795362][    C1]  hrtimer_interrupt+0x620/0xaa0
[  226.795396][    C1]  __sysvec_apic_timer_interrupt+0x10b/0x410
[  226.795407][    C1]  sysvec_apic_timer_interrupt+0x52/0xc0
[  226.795418][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  226.795426][    C1] RIP: 0010:__cant_migrate+0x84/0x2e0
[  226.795434][    C1] Code: 48 b8 f1 f1 f1 f1 00 f2 f2 f2 4b 89 04 2f 66 43 c7 44 2f 09 f3 f3 43 c6 44 2f 0b f3 48 c7 44 24 60 00 00 00 00 9c 8f 44 24 60 <f6> 44 24 61 02 0f 84 86 00 00 00 65 48 8b 1c 25 08 10 a0 92 4c 8d
[  226.795439][    C1] RSP: 0018:ffffc900001df620 EFLAGS: 00000a02
[  226.795444][    C1] RAX: f2f2f200f1f1f1f1 RBX: ffffc900072ad000 RCX: dffffc0000000000
[  226.795448][    C1] RDX: 0000000000000100 RSI: 00000000000002bf RDI: ffffffff8d9ea532
[  226.795452][    C1] RBP: ffffc900001df6f0 R08: ffffc900001df78f R09: 0000000000000000
[  226.795456][    C1] R10: ffffc900001df780 R11: fffff5200003bef2 R12: 0000000000000001
[  226.795460][    C1] R13: dffffc0000000000 R14: ffff888032f38d28 R15: 1ffff9200003bec8
[  226.795481][    C1]  ? trace_call_bpf+0xb7/0x850
[  226.795523][    C1]  ? __pfx___cant_migrate+0x10/0x10
[  226.795545][    C1]  trace_call_bpf+0x2e6/0x850
[  226.795553][    C1]  ? irqentry_exit+0x74/0x90
[  226.795561][    C1]  ? trace_call_bpf+0xb7/0x850
[  226.795574][    C1]  ? __pfx_trace_call_bpf+0x10/0x10
[  226.795592][    C1]  perf_trace_run_bpf_submit+0x78/0x170
[  226.795607][    C1]  perf_trace_lock+0x2f8/0x3b0
[  226.795625][    C1]  ? __pfx_perf_trace_lock+0x10/0x10
[  226.795641][    C1]  ? unwind_next_frame+0xa5/0x2390
[  226.795650][    C1]  ? unwind_next_frame+0xa5/0x2390
[  226.795657][    C1]  ? unwind_next_frame+0xa5/0x2390
[  226.795665][    C1]  lock_release+0x3b2/0x3e0
[  226.795673][    C1]  ? deref_stack_reg+0x19f/0x230
[  226.795685][    C1]  ? unwind_next_frame+0xa5/0x2390
[  226.795692][    C1]  unwind_next_frame+0x19a9/0x2390
[  226.795706][    C1]  ? unwind_next_frame+0xa5/0x2390
[  226.795715][    C1]  ? cgroup_apply_control+0x92/0x6e0
[  226.795727][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  226.795738][    C1]  arch_stack_walk+0x11c/0x150
[  226.795754][    C1]  ? cgroup_subtree_control_write+0xaa1/0x1090
[  226.795767][    C1]  stack_trace_save+0x9c/0xe0
[  226.795776][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  226.795788][    C1]  ? perf_trace_lock+0x2f8/0x3b0
[  226.795802][    C1]  kasan_save_track+0x3e/0x80
[  226.795809][    C1]  ? kasan_save_track+0x3e/0x80
[  226.795813][    C1]  ? __kasan_kmalloc+0x93/0xb0
[  226.795819][    C1]  ? __kmalloc_noprof+0x27a/0x4f0
[  226.795826][    C1]  ? ieee802_11_parse_elems_full+0x152/0x2aa0
[  226.795837][    C1]  ? ieee80211_inform_bss+0x10c/0x10a0
[  226.795846][    C1]  ? cfg80211_inform_single_bss_data+0xd05/0x1ac0
[  226.795854][    C1]  ? cfg80211_inform_bss_data+0x1fb/0x3b20
[  226.795861][    C1]  ? cfg80211_inform_bss_frame_data+0x3d7/0x730
[  226.795869][    C1]  ? ieee80211_bss_info_update+0x746/0x9e0
[  226.795875][    C1]  ? ieee80211_scan_rx+0x593/0xa20
[  226.795882][    C1]  ? ieee80211_rx_list+0x22fc/0x2d80
[  226.795891][    C1]  ? ieee80211_rx_napi+0x1a8/0x3d0
[  226.795897][    C1]  ? ieee80211_handle_queued_frames+0xe8/0x1f0
[  226.795905][    C1]  ? tasklet_action_common+0x36c/0x580
[  226.795913][    C1]  ? handle_softirqs+0x286/0x870
[  226.795920][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  226.795926][    C1]  ? irq_exit_rcu+0x9/0x30
[  226.795932][    C1]  ? sysvec_irq_work+0xa3/0xc0
[  226.795937][    C1]  ? asm_sysvec_irq_work+0x1a/0x20
[  226.795943][    C1]  ? finish_task_switch+0x26b/0x950
[  226.795949][    C1]  ? __schedule+0x16fd/0x4d00
[  226.795957][    C1]  ? preempt_schedule_irq+0xb5/0x150
[  226.795963][    C1]  ? irqentry_exit+0x6f/0x90
[  226.795970][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  226.795976][    C1]  ? save_stack+0xf5/0x1f0
[  226.795982][    C1]  ? __reset_page_owner+0x71/0x1f0
[  226.795988][    C1]  ? __free_frozen_pages+0xc71/0xe70
[  226.795994][    C1]  ? __put_partials+0x161/0x1c0
[  226.796001][    C1]  ? put_cpu_partial+0x17c/0x250
[  226.796008][    C1]  ? __slab_free+0x2f7/0x400
[  226.796015][    C1]  ? qlist_free_all+0x97/0x140
[  226.796023][    C1]  ? kasan_quarantine_reduce+0x148/0x160
[  226.796031][    C1]  ? __kasan_slab_alloc+0x22/0x80
[  226.796037][    C1]  ? __kmalloc_node_track_caller_noprof+0x216/0x4e0
[  226.796043][    C1]  ? kstrdup+0x42/0x100
[  226.796051][    C1]  ? __kernfs_new_node+0x9c/0x7e0
[  226.796059][    C1]  ? kernfs_new_node+0x102/0x210
[  226.796066][    C1]  ? __kernfs_create_file+0x4b/0x2e0
[  226.796071][    C1]  ? cgroup_addrm_files+0x7f2/0xb20
[  226.796080][    C1]  ? css_populate_dir+0x124/0x3d0
[  226.796085][    C1]  ? cgroup_apply_control_enable+0x58a/0xa80
[  226.796092][    C1]  ? cgroup_apply_control+0x92/0x6e0
[  226.796119][    C1]  __kasan_kmalloc+0x93/0xb0
[  226.796128][    C1]  __kmalloc_noprof+0x27a/0x4f0
[  226.796135][    C1]  ? ieee802_11_parse_elems_full+0x152/0x2aa0
[  226.796148][    C1]  ieee802_11_parse_elems_full+0x152/0x2aa0
[  226.796160][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  226.796173][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  226.796180][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  226.796192][    C1]  ? irqentry_exit+0x74/0x90
[  226.796200][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  226.796230][    C1]  ? __pfx_ieee802_11_parse_elems_full+0x10/0x10
[  226.796249][    C1]  ieee80211_inform_bss+0x10c/0x10a0
[  226.796260][    C1]  ? __cfg80211_bss_update+0x101a/0x2120
[  226.796273][    C1]  ? __pfx_ieee80211_inform_bss+0x10/0x10
[  226.796279][    C1]  ? do_raw_spin_lock+0x121/0x290
[  226.796299][    C1]  ? __pfx_ieee80211_inform_bss+0x10/0x10
[  226.796310][    C1]  cfg80211_inform_single_bss_data+0xd05/0x1ac0
[  226.796328][    C1]  ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10
[  226.796369][    C1]  cfg80211_inform_bss_data+0x1fb/0x3b20
[  226.796379][    C1]  ? perf_trace_lock+0x18d/0x3b0
[  226.796392][    C1]  ? __pfx_perf_trace_lock+0x10/0x10
[  226.796398][    C1]  ? migrate_enable+0x29c/0x3c0
[  226.796409][    C1]  ? trace_call_bpf+0xb7/0x850
[  226.796418][    C1]  ? trace_call_bpf+0xb7/0x850
[  226.796431][    C1]  ? __pfx_cfg80211_inform_bss_data+0x10/0x10
[  226.796442][    C1]  ? trace_call_bpf+0xb7/0x850
[  226.796449][    C1]  ? trace_call_bpf+0x5ba/0x850
[  226.796457][    C1]  ? trace_call_bpf+0xb7/0x850
[  226.796465][    C1]  ? sched_clock_cpu+0x74/0x430
[  226.796477][    C1]  ? __pfx_trace_call_bpf+0x10/0x10
[  226.796485][    C1]  ? __pfx_sched_clock_cpu+0x10/0x10
[  226.796520][    C1]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  226.796542][    C1]  ? __pfx_perf_trace_lock+0x10/0x10
[  226.796550][    C1]  ? irqentry_exit+0x74/0x90
[  226.796564][    C1]  cfg80211_inform_bss_frame_data+0x3d7/0x730
[  226.796579][    C1]  ? ieee80211_bss_info_update+0x2dc/0x9e0
[  226.796591][    C1]  ieee80211_bss_info_update+0x746/0x9e0
[  226.796606][    C1]  ? __pfx_ieee80211_bss_info_update+0x10/0x10
[  226.796613][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  226.796621][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  226.796633][    C1]  ? irqentry_exit+0x74/0x90
[  226.796642][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  226.796654][    C1]  ? ieee80211_get_channel_khz+0x15b/0x8a0
[  226.796666][    C1]  ieee80211_scan_rx+0x593/0xa20
[  226.796682][    C1]  ieee80211_rx_list+0x22fc/0x2d80
[  226.796690][    C1]  ? hrtimer_interrupt+0x889/0xaa0
[  226.796708][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  226.796719][    C1]  ? __pfx_ieee80211_rx_list+0x10/0x10
[  226.796739][    C1]  ? ieee80211_rx_napi+0xca/0x3d0
[  226.796749][    C1]  ? ieee80211_rx_napi+0xca/0x3d0
[  226.796769][    C1]  ? ieee80211_rx_napi+0xca/0x3d0
[  226.796777][    C1]  ieee80211_rx_napi+0x1a8/0x3d0
[  226.796789][    C1]  ? __pfx_ieee80211_rx_napi+0x10/0x10
[  226.796803][    C1]  ? skb_dequeue+0x10e/0x150
[  226.796817][    C1]  ieee80211_handle_queued_frames+0xe8/0x1f0
[  226.796830][    C1]  tasklet_action_common+0x36c/0x580
[  226.796846][    C1]  ? __pfx_tasklet_action_common+0x10/0x10
[  226.796861][    C1]  ? workqueue_softirq_action+0xd4/0x150
[  226.796874][    C1]  handle_softirqs+0x286/0x870
[  226.796886][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  226.796899][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  226.796906][    C1]  ? irq_work_single+0x1ac/0x240
[  226.796917][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  226.796930][    C1]  __irq_exit_rcu+0xca/0x1f0
[  226.796938][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  226.796950][    C1]  ? rcu_is_watching+0x15/0xb0
[  226.796961][    C1]  irq_exit_rcu+0x9/0x30
[  226.796967][    C1]  sysvec_irq_work+0xa3/0xc0
[  226.796974][    C1]  </IRQ>
[  226.796976][    C1]  <TASK>
[  226.796980][    C1]  asm_sysvec_irq_work+0x1a/0x20
[  226.796986][    C1] RIP: 0010:finish_task_switch+0x26b/0x950
[  226.796992][    C1] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 0f 2a df 09 e8 ba b9 35 00 fb 4c 8b 65 c0 <49> 8d bc 24 18 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0
[  226.796997][    C1] RSP: 0018:ffffc90006d66b78 EFLAGS: 00000286
[  226.797003][    C1] RAX: c4b3a6d81890c500 RBX: 0000000000000000 RCX: c4b3a6d81890c500
[  226.797007][    C1] RDX: 0000000000000007 RSI: ffffffff8d99883e RDI: ffffffff8be29f40
[  226.797011][    C1] RBP: ffffc90006d66bd0 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  226.797015][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffff88802d7bd640
[  226.797020][    C1] R13: dffffc0000000000 R14: ffff888106905640 R15: ffff88813663ab98
[  226.797039][    C1]  ? finish_task_switch+0x266/0x950
[  226.797053][    C1]  __schedule+0x16fd/0x4d00
[  226.797077][    C1]  ? preempt_schedule_irq+0xb5/0x150
[  226.797084][    C1]  ? unwind_next_frame+0xa5/0x2390
[  226.797096][    C1]  ? __pfx___schedule+0x10/0x10
[  226.797104][    C1]  ? irqentry_exit+0x74/0x90
[  226.797126][    C1]  ? preempt_schedule_irq+0xaa/0x150
[  226.797138][    C1]  preempt_schedule_irq+0xb5/0x150
[  226.797146][    C1]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  226.797162][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  226.797172][    C1]  irqentry_exit+0x6f/0x90
[  226.797179][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  226.797186][    C1] RIP: 0010:save_stack+0xf5/0x1f0
[  226.797192][    C1] Code: 08 00 00 43 0f b6 04 27 84 c0 0f 85 d1 00 00 00 44 89 33 4c 8d 74 24 40 4c 89 f7 be 10 00 00 00 ba 02 00 00 00 e8 4b 60 80 ff <4c> 89 f7 89 c6 8b 54 24 1c e8 9d d2 c9 02 41 89 c6 31 ff 89 c6 e8
[  226.797197][    C1] RSP: 0018:ffffc90006d66f60 EFLAGS: 00000246
[  226.797202][    C1] RAX: 0000000000000010 RBX: ffff88802d7bdbd0 RCX: c4b3a6d81890c500
[  226.797206][    C1] RDX: dffffc0000000000 RSI: ffffffff81b6d2c2 RDI: ffffc90006d66ee0
[  226.797211][    C1] RBP: ffffc90006d670a0 R08: ffffc90006d66ef0 R09: 000000000000000f
[  226.797215][    C1] R10: ffffc90006d66b00 R11: ffffffff81ad0050 R12: dffffc0000000000
[  226.797225][    C1] R13: 1ffff92000dacdf0 R14: ffffc90006d66fa0 R15: 1ffff11005af7b7a
[  226.797234][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  226.797247][    C1]  ? cgroup_apply_control+0x92/0x6e0
[  226.797263][    C1]  ? __pfx_save_stack+0x10/0x10
[  226.797270][    C1]  ? __free_frozen_pages+0xc71/0xe70
[  226.797276][    C1]  ? __put_partials+0x161/0x1c0
[  226.797282][    C1]  ? put_cpu_partial+0x17c/0x250
[  226.797289][    C1]  ? __slab_free+0x2f7/0x400
[  226.797296][    C1]  ? qlist_free_all+0x97/0x140
[  226.797304][    C1]  ? kasan_quarantine_reduce+0x148/0x160
[  226.797312][    C1]  ? __kasan_slab_alloc+0x22/0x80
[  226.797318][    C1]  ? __kmalloc_node_track_caller_noprof+0x216/0x4e0
[  226.797324][    C1]  ? kstrdup+0x42/0x100
[  226.797330][    C1]  ? __kernfs_new_node+0x9c/0x7e0
[  226.797337][    C1]  ? kernfs_new_node+0x102/0x210
[  226.797344][    C1]  ? __kernfs_create_file+0x4b/0x2e0
[  226.797349][    C1]  ? cgroup_addrm_files+0x7f2/0xb20
[  226.797356][    C1]  ? css_populate_dir+0x124/0x3d0
[  226.797362][    C1]  ? cgroup_apply_control_enable+0x58a/0xa80
[  226.797368][    C1]  ? cgroup_apply_control+0x92/0x6e0
[  226.797378][    C1]  ? page_ext_put+0x97/0xc0
[  226.797392][    C1]  __reset_page_owner+0x71/0x1f0
[  226.797402][    C1]  __free_frozen_pages+0xc71/0xe70
[  226.797418][    C1]  __put_partials+0x161/0x1c0
[  226.797431][    C1]  put_cpu_partial+0x17c/0x250
[  226.797439][    C1]  ? put_cpu_partial+0x6d/0x250
[  226.797452][    C1]  __slab_free+0x2f7/0x400
[  226.797463][    C1]  ? __sanitizer_cov_trace_pc+0x8/0x70
[  226.797472][    C1]  ? __phys_addr+0xd3/0x180
[  226.797485][    C1]  qlist_free_all+0x97/0x140
[  226.797519][    C1]  kasan_quarantine_reduce+0x148/0x160
[  226.797532][    C1]  __kasan_slab_alloc+0x22/0x80
[  226.797541][    C1]  __kmalloc_node_track_caller_noprof+0x216/0x4e0
[  226.797548][    C1]  ? __kernfs_new_node+0x9c/0x7e0
[  226.797562][    C1]  kstrdup+0x42/0x100
[  226.797572][    C1]  __kernfs_new_node+0x9c/0x7e0
[  226.797581][    C1]  ? __pfx_perf_trace_lock+0x10/0x10
[  226.797595][    C1]  ? __pfx___kernfs_new_node+0x10/0x10
[  226.797604][    C1]  ? kernfs_root+0x1c/0x230
[  226.797618][    C1]  ? kernfs_root+0x1c/0x230
[  226.797626][    C1]  ? kernfs_root+0x1c/0x230
[  226.797640][    C1]  kernfs_new_node+0x102/0x210
[  226.797654][    C1]  __kernfs_create_file+0x4b/0x2e0
[  226.797664][    C1]  cgroup_addrm_files+0x7f2/0xb20
[  226.797675][    C1]  ? lockdep_unlock+0x89/0x120
[  226.797692][    C1]  ? __pfx_cgroup_addrm_files+0x10/0x10
[  226.797705][    C1]  ? irqentry_exit+0x74/0x90
[  226.797716][    C1]  ? perf_trace_lock+0xec/0x3b0
[  226.797736][    C1]  ? __local_bh_enable_ip+0x12d/0x1c0
[  226.797744][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  226.797762][    C1]  css_populate_dir+0x124/0x3d0
[  226.797774][    C1]  cgroup_apply_control_enable+0x58a/0xa80
[  226.797798][    C1]  cgroup_apply_control+0x92/0x6e0
[  226.797809][    C1]  ? __pfx_cgroup_apply_control+0x10/0x10
[  226.797820][    C1]  ? css_next_child+0xbd/0x220
[  226.797831][    C1]  ? css_next_descendant_pre+0x194/0x260
[  226.797842][    C1]  ? cgroup_save_control+0x2db/0x350
[  226.797853][    C1]  cgroup_subtree_control_write+0xaa1/0x1090
[  226.797873][    C1]  ? __pfx_cgroup_subtree_control_write+0x10/0x10
[  226.797880][    C1]  ? kernfs_root+0x1c/0x230
[  226.797886][    C1]  ? kernfs_root+0x1c/0x230
[  226.797895][    C1]  ? kernfs_root+0x1ea/0x230
[  226.797903][    C1]  ? __pfx_cgroup_subtree_control_write+0x10/0x10
[  226.797912][    C1]  cgroup_file_write+0x39e/0x740
[  226.797928][    C1]  ? __pfx_cgroup_file_write+0x10/0x10
[  226.797941][    C1]  ? lock_is_held_type+0x137/0x190
[  226.797956][    C1]  ? __pfx_cgroup_file_write+0x10/0x10
[  226.797964][    C1]  kernfs_fop_write_iter+0x378/0x4f0
[  226.797981][    C1]  vfs_write+0x54b/0xa90
[  226.797994][    C1]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  226.798005][    C1]  ? __pfx_vfs_write+0x10/0x10
[  226.798023][    C1]  ? __fget_files+0x2a/0x420
[  226.798042][    C1]  ksys_write+0x145/0x250
[  226.798052][    C1]  ? __pfx_ksys_write+0x10/0x10
[  226.798063][    C1]  ? __x64_sys_write+0x2d/0x90
[  226.798075][    C1]  do_syscall_64+0xfa/0x3b0
[  226.798087][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.798093][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  226.798104][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.798110][    C1] RIP: 0033:0x7f622878e9a9
[  226.798120][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  226.798125][    C1] RSP: 002b:00007f62296a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  226.798132][    C1] RAX: ffffffffffffffda RBX: 00007f62289b5fa0 RCX: 00007f622878e9a9
[  226.798136][    C1] RDX: 0000000000000006 RSI: 0000200000000300 RDI: 0000000000000009
[  226.798140][    C1] RBP: 00007f6228810d69 R08: 0000000000000000 R09: 0000000000000000
[  226.798144][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  226.798148][    C1] R13: 0000000000000000 R14: 00007f62289b5fa0 R15: 00007ffe27f0bc68
[  226.798167][    C1]  </TASK>
[  227.361419][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  227.363730][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  227.367615][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  227.370800][   T34] Call Trace:
[  227.371902][   T34]  <TASK>
[  227.372866][   T34]  dump_stack_lvl+0x99/0x250
[  227.374383][   T34]  ? __asan_memcpy+0x40/0x70
[  227.375884][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  227.377554][   T34]  ? __pfx__printk+0x10/0x10
[  227.379083][   T34]  panic+0x2db/0x790
[  227.380399][   T34]  ? __pfx_panic+0x10/0x10
[  227.381861][   T34]  ? __pfx_delay_tsc+0x10/0x10
[  227.383429][   T34]  ? nmi_backtrace_stall_check+0x433/0x440
[  227.385322][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  227.387039][   T34]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  227.389034][   T34]  watchdog+0x102d/0x1030
[  227.390457][   T34]  ? watchdog+0x1de/0x1030
[  227.391933][   T34]  kthread+0x711/0x8a0
[  227.393283][   T34]  ? __pfx_watchdog+0x10/0x10
[  227.394838][   T34]  ? __pfx_kthread+0x10/0x10
[  227.396367][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  227.398075][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  227.399770][   T34]  ? __pfx_kthread+0x10/0x10
[  227.401280][   T34]  ret_from_fork+0x3fc/0x770
[  227.402772][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  227.404473][   T34]  ? __switch_to_asm+0x39/0x70
[  227.406030][   T34]  ? __switch_to_asm+0x33/0x70
[  227.407593][   T34]  ? __pfx_kthread+0x10/0x10
[  227.409089][   T34]  ret_from_fork_asm+0x1a/0x30
[  227.410691][   T34]  </TASK>
[  227.412430][   T34] Kernel Offset: disabled
[  227.413884][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
21:08:40  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000006c RBX=000000000000006c RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6d0
R8 =ffff888107668237 R9 =1ffff11020ecd046 R10=dffffc0000000000 R11=ffffffff85472b60
R12=dffffc0000000000 R13=ffffffff99af58bb R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff85472bdc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f98184821bb CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f981a786d00
XMM02=0000000500000007 0000555500000001 XMM03=000055556ed3b240 000055556ed3b190
XMM04=0000000000000000 0000000000000016 XMM05=0000000000000000 000000000001df8a
XMM06=000055556ed3f9b0 0000555500000007 XMM07=0000555500000000 000055556ed3f820
XMM08=000055556ed3f7b0 0000555500000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000010102 RDX=ffff88802d7bd640
RSI=ffffffff8be29f20 RDI=ffffffff8be29ee0 RBP=ffffc900001dfcf0 RSP=ffffc900001dfb40
R8 =0000000000000000 R9 =ffffffff81f37521 R10=ffffc900001dfd40 R11=fffff5200003bfaf
R12=ffffc900001dfd40 R13=dffffc0000000000 R14=ffff88812197a580 R15=1ffff9200003bf80
RIP=ffffffff8b6eb221 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f62296a76c0 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffe9356f968 CR3=00000001113dc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000ff0000000000 XMM03=0000000000000000 ff000000000000ff
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
