last executing test programs:

1.166949856s ago: executing program 1 (id=151):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

999.723976ms ago: executing program 2 (id=155):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000281c0040000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b6090000002000a80700000050000058bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056000000a80000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x11, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

338.773428ms ago: executing program 0 (id=156):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

337.396062ms ago: executing program 1 (id=157):
r0 = socket$kcm(0x15, 0x5, 0x0)
sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x4e22, @broadcast}, 0x10, 0x0}, 0x0)

331.992221ms ago: executing program 0 (id=158):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="020000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="010000000300"/27], 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x3}]}, @func={0x8}, @restrict={0x0, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0x40086602, 0x110e22fff2)

331.910309ms ago: executing program 1 (id=159):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)

313.610386ms ago: executing program 2 (id=160):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xc, 0x4, 0x2}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000240)}, 0x20)

260.433837ms ago: executing program 2 (id=161):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000000)=@in6={0xa, 0xce24, 0x1, @mcast2, 0x42}, 0x80, 0x0}, 0x0)
r2 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r2, 0x29, 0x11, &(0x7f0000000000)=r0, 0x4)

260.025329ms ago: executing program 1 (id=162):
r0 = socket$kcm(0xa, 0x5, 0x0)
close(0xffffffffffffffff)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x1ff, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x3, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0x10, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8202, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x5392f5b1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f00000004000000060000000700000080130000", @ANYRES32, @ANYBLOB="0000000000000000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a8", 0x31}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r4 = socket$kcm(0x10, 0x400000002, 0x0)
setsockopt$sock_attach_bpf(r4, 0x10e, 0xb, &(0x7f0000000080), 0x4)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x4880)
socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[], 0xfe33)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000400)={&(0x7f0000000300)="f71eae484bad05dbbcb6faf3801ac39ba4ce5bf2423a8490c89a429dc9dd30769d25b4af20f693f448daceae65e31b0f02ec2dec731b83b8500fad055bce95489570b0d03a4caeb584d50fbe2241d74bc337ec41c14e38f39986396a3cfcd93df4c4dff6c3fa35af3f2ac3cbc52148ae4a121de9edda571fd57c7876681e4a9e70287e7b445c27a4ac62166eb38bcf4cf4637f37ecd0e6696a69e0fafd321006389129e251eb25e7811c20d8d827989280835760cc8338a00dcc0a8869f3239280c0c435852ce05b1fab85723d3b7ec79691f0e9", &(0x7f00000000c0)=""/35, &(0x7f0000000640)="979a042a4d59469f6bec75f4671c0bfe073a93266249a0486fe60cfa82d18f7daf6bbd4ea0bf28cd97aaafc838f1bcb8572c302cb2afe35b725366e89d7411203550f0d6882c686c0904746ec7a5eef4a68b1566baa4a43b19618e63808c758ee40c6895b6260cf60341805d8a4bd2b63b83fab20ea0894a7c75461c684306d35e7cc3e2ae68f1cd9d3a7c3ac3ff165a7bf7465fdf3d880975936d390ce90c4168b3c0e6530f", &(0x7f0000000280), 0x235, r2, 0x4}, 0x38)
r5 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000580)=ANY=[], 0xfe33)
r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x9}, 0x302, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRES64=r6, @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES64=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r8 = socket$kcm(0x2, 0x1000000000000002, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000500)={0x1, 0x80, 0xd, 0x6, 0x2, 0x6, 0x0, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1b17, 0x0, @perf_config_ext={0xffffffffffff96f7, 0x5}, 0x4, 0x9, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3})
setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f00000002c0)=r7, 0x161)

148.46224ms ago: executing program 2 (id=163):
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000000000003"], 0x50)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000280)="39000000140081ae0000dc676f97daf01effffff0521018701546fabca1b4e8a06a6580e88370200c5090000009c40ebb3734b49bbc51245e7", 0x39}], 0x1}, 0x0)

147.944211ms ago: executing program 2 (id=164):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x2111, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x408003, 0xaea}, 0x14105, 0x1ff, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000600)='cpu&-0E\xc2\x94\xfc\xb4\x97\xc1T\x8f\t||\x18\xe2\x03yW\x06\x01\x14\x14TGmC\x03\x97\xcfn}\xf4\x89\x93\x17T\xcc[o\x12\xb6\x96\xbe<8f\x1c\xb8\xbaTf\x9c\xd8\xd9\xfe\x1b')

147.591088ms ago: executing program 0 (id=165):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r0, r1}, 0xc)

109.403922ms ago: executing program 0 (id=166):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="040000000400000004000000050001000008"], 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000340)={0x0, <r1=>0x0}}, 0x10)
r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1}, 0xc)
close(r2)

97.991105ms ago: executing program 1 (id=167):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x7, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

50.04495ms ago: executing program 0 (id=168):
r0 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)="e5974f3cf1b1c515931eb6d33f46d4e47db5612a623182df6791c7c81d92c14d1230a34367", 0x25}], 0x1, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @multicast1}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x44, 0xd, "3eae4831ba477f3c75f2fa"}]}}}], 0x40}, 0x0)

49.77301ms ago: executing program 1 (id=169):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d39, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x2fc, 0x6, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f00000001c0)="b9e403c6631e39495aa05dc7cf8db7", 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xb, 0x6}, 0x100904, 0x401, 0x25, 0x0, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0xff09, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r4, &(0x7f0000000000), 0x2a979d)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xd56}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)

49.614566ms ago: executing program 0 (id=170):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x1d, 0x0, 0x2}, {0x6, 0x3, 0xfe}]})

0s ago: executing program 2 (id=171):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
recvmsg(0xffffffffffffffff, 0x0, 0x2002)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x8310}, 0x100, 0x6, 0xfffffffe, 0x0, 0x9, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
syz_clone(0x8c180500, &(0x7f00000000c0)="1558c95e4966efbff184835ea0d2af3acd443d7af3c71bd4d8f346f347c5340342b17d38ca", 0x25, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000001c80)={0x0, 0x0, 0x0}, 0x2000)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r2}, &(0x7f0000000a80), &(0x7f0000000ac0)}, 0x20)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc)
write$cgroup_pressure(r0, &(0x7f0000000240)={'some', 0x20, 0x40, 0x20, 0xffffffffffffffff}, 0x2f)
r4 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161)
r5 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081084e81f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020081000401a8000100fcc0ffff000000fd035c0461c1d67f6f94007134cf6efb803fa007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0)
sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c0503e020000100000000ac1414"], 0x30}, 0x7e8166965e22236a)
socket$kcm(0x2, 0x922000000001, 0x106)
r6 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x3000c085)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000100)=r7, 0x4)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:37856' (ED25519) to the list of known hosts.
syzkaller login: [   40.627393][ T5759] cgroup: Unknown subsys name 'net'
[   40.713131][ T5759] cgroup: Unknown subsys name 'cpuset'
[   40.717306][ T5759] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   41.949812][ T5759] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   49.242310][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   51.127373][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   51.130351][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   51.134498][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   51.141090][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   51.143956][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   51.184485][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   51.187428][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   51.190426][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   51.194189][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   51.197248][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   51.261978][ T5218] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   51.265011][ T5218] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   51.267644][ T5218] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   51.271629][ T5218] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   51.274348][ T5218] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   51.437151][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   51.498109][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   51.552111][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   51.556834][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.559679][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.562447][ T5845] bridge_slave_0: entered allmulticast mode
[   51.565477][ T5845] bridge_slave_0: entered promiscuous mode
[   51.579882][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.582491][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.584699][ T5845] bridge_slave_1: entered allmulticast mode
[   51.587403][ T5845] bridge_slave_1: entered promiscuous mode
[   51.628948][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.632128][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.634316][ T5848] bridge_slave_0: entered allmulticast mode
[   51.636877][ T5848] bridge_slave_0: entered promiscuous mode
[   51.641220][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   51.650802][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.653545][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.655908][ T5848] bridge_slave_1: entered allmulticast mode
[   51.659296][ T5848] bridge_slave_1: entered promiscuous mode
[   51.664206][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   51.702911][ T5845] team0: Port device team_slave_0 added
[   51.707110][ T5845] team0: Port device team_slave_1 added
[   51.724819][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   51.742892][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   51.745786][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.748052][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.750282][ T5850] bridge_slave_0: entered allmulticast mode
[   51.753151][ T5850] bridge_slave_0: entered promiscuous mode
[   51.771405][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   51.773537][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   51.782563][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   51.786959][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.789644][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.792347][ T5850] bridge_slave_1: entered allmulticast mode
[   51.794927][ T5850] bridge_slave_1: entered promiscuous mode
[   51.805349][ T5848] team0: Port device team_slave_0 added
[   51.814198][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   51.816331][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   51.825422][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   51.831335][ T5848] team0: Port device team_slave_1 added
[   51.835553][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   51.852932][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   51.901760][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   51.903908][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   51.912090][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   51.917557][ T5850] team0: Port device team_slave_0 added
[   51.922791][ T5845] hsr_slave_0: entered promiscuous mode
[   51.925190][ T5845] hsr_slave_1: entered promiscuous mode
[   51.929186][ T5850] team0: Port device team_slave_1 added
[   51.933455][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   51.935679][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   51.944012][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   51.973020][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   51.975292][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   51.984180][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.008919][ T5848] hsr_slave_0: entered promiscuous mode
[   52.011817][ T5848] hsr_slave_1: entered promiscuous mode
[   52.014201][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   52.017353][ T5848] Cannot create hsr debugfs directory
[   52.019964][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.022956][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.031804][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.117324][ T5850] hsr_slave_0: entered promiscuous mode
[   52.119556][ T5850] hsr_slave_1: entered promiscuous mode
[   52.121782][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   52.124154][ T5850] Cannot create hsr debugfs directory
[   52.250315][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   52.257937][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   52.265678][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   52.277482][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   52.311452][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   52.315795][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   52.322039][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   52.327375][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   52.334274][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.336582][ T5845] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.339311][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.341729][ T5845] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.389865][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.392237][ T5848] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.394632][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.396795][ T5848] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.403726][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   52.413974][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   52.423698][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   52.428028][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   52.456877][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.459700][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.464966][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.467971][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.488642][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.508180][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.512942][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   52.523680][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.525928][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.538455][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.541099][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.566853][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   52.585659][ T3400] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.588024][ T3400] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.603123][ T3400] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.605663][ T3400] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.615116][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.630278][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   52.651920][ T3400] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.654158][ T3400] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.668626][ T3400] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.671065][ T3400] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.729029][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   52.788975][ T5845] veth0_vlan: entered promiscuous mode
[   52.802980][ T5845] veth1_vlan: entered promiscuous mode
[   52.814130][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   52.839499][ T5845] veth0_macvtap: entered promiscuous mode
[   52.853475][ T5845] veth1_macvtap: entered promiscuous mode
[   52.859903][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   52.881198][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   52.892325][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   52.902928][ T5845] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   52.905809][ T5845] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   52.908469][ T5845] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   52.912238][ T5845] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   52.926583][ T5848] veth0_vlan: entered promiscuous mode
[   52.939503][ T5848] veth1_vlan: entered promiscuous mode
[   52.976601][ T5850] veth0_vlan: entered promiscuous mode
[   52.986584][ T5848] veth0_macvtap: entered promiscuous mode
[   53.005066][ T5848] veth1_macvtap: entered promiscuous mode
[   53.013571][ T5850] veth1_vlan: entered promiscuous mode
[   53.042942][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.047070][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   53.052330][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.074574][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   53.086767][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.089247][ T5848] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   53.089761][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.095875][ T5848] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   53.099579][ T5848] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   53.105654][ T5848] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   53.121065][ T5850] veth0_macvtap: entered promiscuous mode
[   53.135166][ T5850] veth1_macvtap: entered promiscuous mode
[   53.172151][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   53.182367][ T5846] Bluetooth: hci0: command tx timeout
[   53.190159][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   53.210174][ T5850] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   53.218427][ T5850] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   53.222516][ T5850] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   53.225847][ T5850] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   53.252389][ T5846] Bluetooth: hci1: command tx timeout
[   53.277617][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.280440][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.302913][ T5912] netlink: 'syz.0.10': attribute type 29 has an invalid length.
[   53.321710][ T5912] netlink: 'syz.0.10': attribute type 29 has an invalid length.
[   53.326930][ T3400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.329441][ T3400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.332417][ T5846] Bluetooth: hci2: command tx timeout
[   53.376872][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.380352][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.402455][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.405022][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.442917][ T5918] delete_channel: no stack
[   53.528410][ T5927] : renamed from pim6reg1
[   53.652403][ T5935] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   53.900531][    C0] hrtimer: interrupt took 18625 ns
[   54.209537][ T5978] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.39'.
[   54.487262][ T6001] delete_channel: no stack
[   54.490988][ T6001] delete_channel: no stack
[   54.745756][ T6017] netlink: 'syz.0.58': attribute type 22 has an invalid length.
[   54.753004][ T6017] netlink: 148 bytes leftover after parsing attributes in process `syz.0.58'.
[   55.250937][ T5846] Bluetooth: hci0: command tx timeout
[   55.285138][ T6057] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   55.332949][ T5846] Bluetooth: hci1: command tx timeout
[   55.362178][ T6061] Driver unsupported XDP return value 0 on prog  (id 20) dev N/A, expect packet loss!
[   55.420890][ T5846] Bluetooth: hci2: command tx timeout
[   55.447105][ T6067] netlink: 'syz.0.82': attribute type 10 has an invalid length.
[   55.768350][ T6089] netlink: 'syz.1.93': attribute type 16 has an invalid length.
[   55.771372][ T6089] netlink: 156 bytes leftover after parsing attributes in process `syz.1.93'.
[   56.573671][ T6108] syzkaller0: entered promiscuous mode
[   56.575496][ T6108] syzkaller0: entered allmulticast mode
[   56.648100][ T5846] Bluetooth: hci1: unexpected event 0x32 length: 15 > 9
[   56.707765][ T6122] netlink: 'syz.2.107': attribute type 3 has an invalid length.
[   56.710368][ T6124] netlink: 'syz.1.108': attribute type 21 has an invalid length.
[   56.716336][ T6124] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.108'.
[   56.723695][ T6122] netlink: 'syz.2.107': attribute type 1 has an invalid length.
[   56.728699][ T6122] netlink: 193404 bytes leftover after parsing attributes in process `syz.2.107'.
[   57.330767][ T5846] Bluetooth: hci0: command tx timeout
[   57.348939][ T6146] netlink: 'syz.2.119': attribute type 29 has an invalid length.
[   57.398668][ T6146] warning: `syz.2.119' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   57.410930][ T5846] Bluetooth: hci1: command tx timeout
[   57.491392][ T5846] Bluetooth: hci2: command tx timeout
[   57.815446][ T6174] netlink: 132 bytes leftover after parsing attributes in process `syz.2.131'.
[   57.821962][ T5846] Bluetooth: hci2: ISO packet for unknown connection handle 3327
[   57.824743][ T5846] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[   58.263788][ T6198] netlink: 'syz.0.142': attribute type 10 has an invalid length.
[   58.267707][ T6198] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.271282][ T6198] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.289189][ T6198] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.291655][ T6198] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.294316][ T6198] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.296898][ T6198] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.303828][ T6198] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   58.362610][ T6204] syz.2.145 uses obsolete (PF_INET,SOCK_PACKET)
[   58.503803][ T6216] netlink: 'syz.2.150': attribute type 21 has an invalid length.
[   58.607348][ T6225] netlink: 'syz.2.154': attribute type 27 has an invalid length.
[   58.610054][ T6225] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.154'.
[   59.412912][ T5846] Bluetooth: hci0: command tx timeout
[   59.462039][ T6243] netlink: 'syz.1.162': attribute type 21 has an invalid length.
[   59.465210][ T6243] netlink: 164 bytes leftover after parsing attributes in process `syz.1.162'.
[   59.473420][ T6242] netlink: 164 bytes leftover after parsing attributes in process `syz.1.162'.
[   59.490840][ T5846] Bluetooth: hci1: command tx timeout
[   59.570697][ T5846] Bluetooth: hci2: command tx timeout
[   59.695261][ T6263] ------------[ cut here ]------------
[   59.697087][ T6263] verifier bug: REG INVARIANTS VIOLATION (false_reg2): range bounds violation u64=[0x1, 0x900000000] s64=[0x1, 0x0] u32=[0x0, 0xffffffff] s32=[0x80000000, 0x7fffffff] var_off=(0x0, 0xfffffffff)(1)
[   59.704413][ T6263] WARNING: CPU: 0 PID: 6263 at kernel/bpf/verifier.c:2689 reg_bounds_sanity_check+0x6e6/0xc20
[   59.707723][ T6263] Modules linked in:
[   59.709084][ T6263] CPU: 0 UID: 0 PID: 6263 Comm: syz.0.172 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[   59.713775][ T6263] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   59.717139][ T6263] RIP: 0010:reg_bounds_sanity_check+0x6e6/0xc20
[   59.719184][ T6263] Code: 24 20 4c 8b 44 24 60 4c 8b 4c 24 58 41 ff 75 00 53 41 57 55 ff 74 24 38 ff 74 24 70 ff 74 24 40 e8 6f 8f aa ff 48 83 c4 38 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4d 89 f7 4c 8b 74 24 08
[   59.725558][ T6263] RSP: 0018:ffffc9000746ef60 EFLAGS: 00010296
[   59.727715][ T6263] RAX: 28e3f682f190d100 RBX: 0000000000000000 RCX: 0000000000080000
[   59.730300][ T6263] RDX: ffffc90009709000 RSI: 00000000000098fd RDI: 00000000000098fe
[   59.733280][ T6263] RBP: 0000000080000000 R08: 0000000000000003 R09: 0000000000000004
[   59.735867][ T6263] R10: dffffc0000000000 R11: fffffbfff1bfaa6c R12: ffff88801f8e9438
[   59.738448][ T6263] R13: ffff88801f8e9458 R14: ffff88801f8e9470 R15: 000000007fffffff
[   59.741099][ T6263] FS:  00007fb1799f56c0(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
[   59.743991][ T6263] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   59.746130][ T6263] CR2: 0000001b3121fffc CR3: 0000000022730000 CR4: 00000000000006f0
[   59.748724][ T6263] DR0: 0010000010000000 DR1: 0000000000000000 DR2: 0000000000000000
[   59.751340][ T6263] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[   59.753947][ T6263] Call Trace:
[   59.755074][ T6263]  <TASK>
[   59.756077][ T6263]  ? reg_set_min_max+0x293/0x300
[   59.757715][ T6263]  check_cond_jmp_op+0x1625/0x2910
[   59.759407][ T6263]  ? __pfx_check_cond_jmp_op+0x10/0x10
[   59.761268][ T6263]  ? bpf_vlog_reset+0x1db/0x340
[   59.762807][ T6263]  ? print_insn_state+0x106/0x170
[   59.764425][ T6263]  do_check+0x6751/0xe520
[   59.765875][ T6263]  ? __pfx_do_check+0x10/0x10
[   59.767420][ T6263]  ? __pfx_verbose+0x10/0x10
[   59.768940][ T6263]  ? __pfx_disasm_kfunc_name+0x10/0x10
[   59.770778][ T6263]  do_check_common+0x1918/0x2470
[   59.772414][ T6263]  bpf_check+0x1746a/0x1d2e0
[   59.773944][ T6263]  ? is_bpf_text_address+0x26/0x2b0
[   59.775665][ T6263]  ? perf_trace_lock_acquire+0xf5/0x410
[   59.777476][ T6263]  ? unwind_get_return_address+0x4d/0x90
[   59.779316][ T6263]  ? perf_trace_lock_acquire+0xf5/0x410
[   59.781211][ T6263]  ? __lock_acquire+0xab9/0xd20
[   59.782943][ T6263]  ? perf_trace_lock_acquire+0xf5/0x410
[   59.784742][ T6263]  ? __lock_acquire+0xab9/0xd20
[   59.786381][ T6263]  ? __pfx_bpf_check+0x10/0x10
[   59.788009][ T6263]  ? ktime_get_with_offset+0x8c/0x2a0
[   59.789774][ T6263]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[   59.792183][ T6263]  ? lockdep_hardirqs_on+0x9c/0x150
[   59.793926][ T6263]  ? ktime_get_with_offset+0x8c/0x2a0
[   59.795698][ T6263]  ? seqcount_lockdep_reader_access+0x175/0x1c0
[   59.797737][ T6263]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[   59.799882][ T6263]  ? __asan_memset+0x22/0x50
[   59.802272][ T6263]  ? bpf_obj_name_cpy+0x194/0x1e0
[   59.803924][ T6263]  ? bpf_lsm_bpf_prog_load+0x9/0x20
[   59.805590][ T6263]  ? security_bpf_prog_load+0x7f/0x310
[   59.807361][ T6263]  bpf_prog_load+0x1318/0x1930
[   59.808943][ T6263]  ? __pfx_bpf_prog_load+0x10/0x10
[   59.811231][ T6263]  ? bpf_lsm_bpf+0x9/0x20
[   59.812668][ T6263]  ? security_bpf+0x7e/0x300
[   59.814219][ T6263]  __sys_bpf+0x528/0x870
[   59.815620][ T6263]  ? __pfx___sys_bpf+0x10/0x10
[   59.817210][ T6263]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[   59.819353][ T6263]  ? rcu_is_watching+0x15/0xb0
[   59.821450][ T6263]  __x64_sys_bpf+0x7c/0x90
[   59.822947][ T6263]  do_syscall_64+0xfa/0x3b0
[   59.824472][ T6263]  ? lockdep_hardirqs_on+0x9c/0x150
[   59.826194][ T6263]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.828212][ T6263]  ? exc_page_fault+0x9f/0xf0
[   59.829743][ T6263]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.831793][ T6263] RIP: 0033:0x7fb178b8e9a9
[   59.833296][ T6263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   59.839529][ T6263] RSP: 002b:00007fb1799f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   59.842305][ T6263] RAX: ffffffffffffffda RBX: 00007fb178db5fa0 RCX: 00007fb178b8e9a9
[   59.844904][ T6263] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005
[   59.847513][ T6263] RBP: 00007fb178c10d69 R08: 0000000000000000 R09: 0000000000000000
[   59.850108][ T6263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   59.852832][ T6263] R13: 0000000000000000 R14: 00007fb178db5fa0 R15: 00007ffdd4ece5e8
[   59.855430][ T6263]  </TASK>
[   59.856473][ T6263] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   59.858863][ T6263] CPU: 0 UID: 0 PID: 6263 Comm: syz.0.172 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[   59.862863][ T6263] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   59.866153][ T6263] Call Trace:
[   59.867271][ T6263]  <TASK>
[   59.868275][ T6263]  dump_stack_lvl+0x99/0x250
[   59.869812][ T6263]  ? __asan_memcpy+0x40/0x70
[   59.871352][ T6263]  ? __pfx_dump_stack_lvl+0x10/0x10
[   59.873066][ T6263]  ? __pfx__printk+0x10/0x10
[   59.874611][ T6263]  panic+0x2db/0x790
[   59.875911][ T6263]  ? __pfx_panic+0x10/0x10
[   59.877405][ T6263]  ? show_trace_log_lvl+0x4fb/0x550
[   59.879132][ T6263]  __warn+0x31b/0x4b0
[   59.880458][ T6263]  ? reg_bounds_sanity_check+0x6e6/0xc20
[   59.882256][ T6263]  ? reg_bounds_sanity_check+0x6e6/0xc20
[   59.884096][ T6263]  report_bug+0x2be/0x4f0
[   59.885530][ T6263]  ? reg_bounds_sanity_check+0x6e6/0xc20
[   59.887363][ T6263]  ? reg_bounds_sanity_check+0x6e6/0xc20
[   59.889211][ T6263]  ? reg_bounds_sanity_check+0x6e8/0xc20
[   59.891053][ T6263]  handle_bug+0x84/0x160
[   59.892450][ T6263]  exc_invalid_op+0x1a/0x50
[   59.893886][ T6263]  asm_exc_invalid_op+0x1a/0x20
[   59.895481][ T6263] RIP: 0010:reg_bounds_sanity_check+0x6e6/0xc20
[   59.897526][ T6263] Code: 24 20 4c 8b 44 24 60 4c 8b 4c 24 58 41 ff 75 00 53 41 57 55 ff 74 24 38 ff 74 24 70 ff 74 24 40 e8 6f 8f aa ff 48 83 c4 38 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4d 89 f7 4c 8b 74 24 08
[   59.903770][ T6263] RSP: 0018:ffffc9000746ef60 EFLAGS: 00010296
[   59.905763][ T6263] RAX: 28e3f682f190d100 RBX: 0000000000000000 RCX: 0000000000080000
[   59.908343][ T6263] RDX: ffffc90009709000 RSI: 00000000000098fd RDI: 00000000000098fe
[   59.910911][ T6263] RBP: 0000000080000000 R08: 0000000000000003 R09: 0000000000000004
[   59.913510][ T6263] R10: dffffc0000000000 R11: fffffbfff1bfaa6c R12: ffff88801f8e9438
[   59.916075][ T6263] R13: ffff88801f8e9458 R14: ffff88801f8e9470 R15: 000000007fffffff
[   59.918669][ T6263]  ? reg_set_min_max+0x293/0x300
[   59.920300][ T6263]  check_cond_jmp_op+0x1625/0x2910
[   59.921994][ T6263]  ? __pfx_check_cond_jmp_op+0x10/0x10
[   59.923768][ T6263]  ? bpf_vlog_reset+0x1db/0x340
[   59.925370][ T6263]  ? print_insn_state+0x106/0x170
[   59.927029][ T6263]  do_check+0x6751/0xe520
[   59.928466][ T6263]  ? __pfx_do_check+0x10/0x10
[   59.930019][ T6263]  ? __pfx_verbose+0x10/0x10
[   59.931533][ T6263]  ? __pfx_disasm_kfunc_name+0x10/0x10
[   59.933331][ T6263]  do_check_common+0x1918/0x2470
[   59.934987][ T6263]  bpf_check+0x1746a/0x1d2e0
[   59.936498][ T6263]  ? is_bpf_text_address+0x26/0x2b0
[   59.938204][ T6263]  ? perf_trace_lock_acquire+0xf5/0x410
[   59.940024][ T6263]  ? unwind_get_return_address+0x4d/0x90
[   59.941841][ T6263]  ? perf_trace_lock_acquire+0xf5/0x410
[   59.943641][ T6263]  ? __lock_acquire+0xab9/0xd20
[   59.945254][ T6263]  ? perf_trace_lock_acquire+0xf5/0x410
[   59.947072][ T6263]  ? __lock_acquire+0xab9/0xd20
[   59.948616][ T6263]  ? __pfx_bpf_check+0x10/0x10
[   59.950147][ T6263]  ? ktime_get_with_offset+0x8c/0x2a0
[   59.951912][ T6263]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[   59.953985][ T6263]  ? lockdep_hardirqs_on+0x9c/0x150
[   59.955604][ T6263]  ? ktime_get_with_offset+0x8c/0x2a0
[   59.957351][ T6263]  ? seqcount_lockdep_reader_access+0x175/0x1c0
[   59.959329][ T6263]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[   59.961476][ T6263]  ? __asan_memset+0x22/0x50
[   59.963044][ T6263]  ? bpf_obj_name_cpy+0x194/0x1e0
[   59.964692][ T6263]  ? bpf_lsm_bpf_prog_load+0x9/0x20
[   59.966403][ T6263]  ? security_bpf_prog_load+0x7f/0x310
[   59.968196][ T6263]  bpf_prog_load+0x1318/0x1930
[   59.969778][ T6263]  ? __pfx_bpf_prog_load+0x10/0x10
[   59.971464][ T6263]  ? bpf_lsm_bpf+0x9/0x20
[   59.972885][ T6263]  ? security_bpf+0x7e/0x300
[   59.974413][ T6263]  __sys_bpf+0x528/0x870
[   59.975806][ T6263]  ? __pfx___sys_bpf+0x10/0x10
[   59.977402][ T6263]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[   59.979553][ T6263]  ? rcu_is_watching+0x15/0xb0
[   59.981136][ T6263]  __x64_sys_bpf+0x7c/0x90
[   59.982575][ T6263]  do_syscall_64+0xfa/0x3b0
[   59.984008][ T6263]  ? lockdep_hardirqs_on+0x9c/0x150
[   59.985695][ T6263]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.987652][ T6263]  ? exc_page_fault+0x9f/0xf0
[   59.989199][ T6263]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.991141][ T6263] RIP: 0033:0x7fb178b8e9a9
[   59.992616][ T6263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   59.998883][ T6263] RSP: 002b:00007fb1799f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   60.001606][ T6263] RAX: ffffffffffffffda RBX: 00007fb178db5fa0 RCX: 00007fb178b8e9a9
[   60.004200][ T6263] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005
[   60.006774][ T6263] RBP: 00007fb178c10d69 R08: 0000000000000000 R09: 0000000000000000
[   60.009349][ T6263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   60.011921][ T6263] R13: 0000000000000000 R14: 00007fb178db5fa0 R15: 00007ffdd4ece5e8
[   60.014535][ T6263]  </TASK>
[   60.016266][ T6263] Kernel Offset: disabled
[   60.017679][ T6263] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:32:46  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000c84e RDI=000000000000c84f RBP=00000000000003f8 RSP=ffffc9000746e710
R8 =ffff888107af0237 R9 =1ffff11020f5e046 R10=dffffc0000000000 R11=ffffffff85472aa0
R12=dffffc0000000000 R13=ffffffff99af5890 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff85472b1c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb1799f56c0 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3121fffc CR3=0000000022730000 CR4=000006f0
DR0=0010000010000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fb178c11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000003d50 RBX=ffff888136623900 RCX=0000000000000838 RDX=0000000000000000
RSI=0000000000003d50 RDI=0000000000000838 RBP=0000000000000001 RSP=ffffc90004e4e8b8
R8 =0000000000000000 R9 =ffffffff81aec9fe R10=0000000000000003 R11=ffffffff81702490
R12=0000000010000bbe R13=dffffc0000000000 R14=0000000000003d50 R15=0000000000000020
RIP=ffffffff81714f69 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f3240e576c0 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000004000 CR3=000000010f3dc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f3240186478 00007f3240186450 XMM03=00007f3240186488 00007f3240186480
XMM04=00007f3240ced100 00007f3240186440 XMM05=00007f3240186458 00007f32401864a0
XMM06=00007f3240186498 00007f3240186490 XMM07=00007f3240186488 00007f3240186480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f3240011ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
