last executing test programs:

15.745011945s ago: executing program 2 (id=3):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_config_ext={0x9, 0x2}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r3 = socket$kcm(0x10, 0x3, 0x10)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000980)=r2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="1400000017000b63d25a80648c2594f934a3c92b", 0x14}], 0x1}, 0x0)

15.675622853s ago: executing program 0 (id=1):
socket$kcm(0x2, 0x5, 0x84)
r0 = socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x2)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010)

15.517493368s ago: executing program 2 (id=7):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095000000d3031a006dd015836e4d27f5182b60bbb7c19e21eec859fe68f9428ac407630eac8eb682f5b2d86b4abf9e63ad263fec7db9338ca9eebf2218c8b9ca64bcdcdaa06fc4c7aa217fcecd9443c54143bde8ddcbc3b8ac619930206d8d0881af823d6d18c66f021c20b55013d7fb6ea7013c062d13176d71d7dad98eb976ed679fa639"], &(0x7f0000000000)='GPL\x00', 0x4, 0x29, &(0x7f0000000140)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x23, 0x0, 0x0, 0xff87}, 0x23)

15.517235005s ago: executing program 2 (id=8):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socketpair(0x1, 0x1, 0x1, &(0x7f00000002c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94)
socket$kcm(0xa, 0x2, 0x0)
socket$kcm(0x2, 0x1000000000000002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x2, 0x4, 0x7, 0x80, 0x0, 0x1}, 0x50)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfff9, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161)
sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0)

15.405731988s ago: executing program 0 (id=9):
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu\t&-&&\t')

15.357436481s ago: executing program 1 (id=11):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r3, 0x0, 0x18, 0x0, 0x0)

15.357117132s ago: executing program 0 (id=12):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

15.267761732s ago: executing program 0 (id=13):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080)}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x2)

15.267473758s ago: executing program 1 (id=14):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r2=>0x0}, 0x8)
r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x10)

15.267384167s ago: executing program 1 (id=15):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44e8fe55a11800150006", 0x17}], 0x1}, 0x0)
r0 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r0})

15.217860888s ago: executing program 1 (id=16):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f00000001c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4002, &(0x7f0000000000)=@framed={{}, [@ldst]}, &(0x7f0000000100)='GPL\x00', 0x4, 0xd2, &(0x7f00000002c0)=""/210}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}, 0x38)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'netpci0\x00', @random="000100161800"})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33)
write$cgroup_subtree(r1, 0x0, 0xfe33)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff05140100000e1208000f0100810401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r4 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0)
r5 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, 0x0)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x0)

15.147551934s ago: executing program 2 (id=17):
sendmsg(0xffffffffffffffff, 0x0, 0x4)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45", 0xc}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0278", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x52, 0x1, 0x0, 0xd, 0x0, 0x2, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x100, 0x2e, 0xfffffbfb, 0x4, 0x9, 0x2, 0x6}, 0x0, 0xa, 0xffffffffffffffff, 0x9)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r3, 0x0, 0x275a, 0x0)
openat$cgroup_type(r3, &(0x7f0000000000), 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x6, 0x1, 0x0, 0x4, 0x0, 0x5, [{0xa, 0x3, 0x6}]}]}}, 0x0, 0x32}, 0x28)
r4 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r4, 0x84, 0x9, &(0x7f0000000380), 0x98)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff2, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407ffd, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000005d31, 0x23407, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x2, 0x3, 0x84)
ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000180)={r5})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)

15.147429956s ago: executing program 0 (id=18):
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x2, 0x8, 0x4}, 0x20)
r0 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x85, &(0x7f0000000000), 0x90)

15.147285327s ago: executing program 0 (id=19):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x5}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={0x1, 0x0}, 0x20)
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0), 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=@framed={{0xd5, 0xa, 0x0, 0x0, 0x1, 0x63, 0x11, 0x14}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x2, 0x80, 0xc2, 0xc}})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), 0x0, 0xfffffffb}, 0x38)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc851, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x8, 0x7f}, 0x4000, 0x0, 0xea0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xc, 0xffffffffffffffff, 0x1)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)}, 0x0)

15.097766865s ago: executing program 1 (id=20):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfffffd00, 0x62, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb, 0x1}, @datasec={0x3, 0x5, 0x0, 0xf, 0x2, [{0x3, 0xfffffff2, 0x112186da}, {0x2, 0x80000000, 0x80000001}, {0x4, 0x10000, 0xd}, {0x2, 0x9, 0x1df2351b}, {0x2, 0x2, 0x12000}], "b621"}]}}, 0x0, 0x7e}, 0x28)

15.097607349s ago: executing program 1 (id=21):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="6fb355bb7c1e85390de40d0df22a", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

65.247934ms ago: executing program 32 (id=19):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x5}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={0x1, 0x0}, 0x20)
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0), 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=@framed={{0xd5, 0xa, 0x0, 0x0, 0x1, 0x63, 0x11, 0x14}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x2, 0x80, 0xc2, 0xc}})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), 0x0, 0xfffffffb}, 0x38)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc851, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x8, 0x7f}, 0x4000, 0x0, 0xea0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xc, 0xffffffffffffffff, 0x1)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)}, 0x0)

163.44µs ago: executing program 33 (id=21):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="6fb355bb7c1e85390de40d0df22a", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

0s ago: executing program 34 (id=17):
sendmsg(0xffffffffffffffff, 0x0, 0x4)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45", 0xc}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0278", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x52, 0x1, 0x0, 0xd, 0x0, 0x2, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x100, 0x2e, 0xfffffbfb, 0x4, 0x9, 0x2, 0x6}, 0x0, 0xa, 0xffffffffffffffff, 0x9)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r3, 0x0, 0x275a, 0x0)
openat$cgroup_type(r3, &(0x7f0000000000), 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x6, 0x1, 0x0, 0x4, 0x0, 0x5, [{0xa, 0x3, 0x6}]}]}}, 0x0, 0x32}, 0x28)
r4 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r4, 0x84, 0x9, &(0x7f0000000380), 0x98)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff2, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407ffd, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000005d31, 0x23407, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x2, 0x3, 0x84)
ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000180)={r5})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:40963' (ED25519) to the list of known hosts.
syzkaller login: [   40.779939][ T5757] cgroup: Unknown subsys name 'net'
[   40.917565][ T5757] cgroup: Unknown subsys name 'cpuset'
[   40.923216][ T5757] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.257868][ T5757] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.412696][ T5228] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.416259][ T5228] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.418904][ T5228] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.421902][ T5228] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.424818][ T5228] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.438543][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.441453][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.444585][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.451074][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.453838][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.485816][ T5228] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.488910][ T5228] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.491528][ T5228] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.494329][ T5228] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.497296][ T5228] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.647002][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   45.716484][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   45.747709][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   45.765747][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.768198][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.770671][ T5833] bridge_slave_0: entered allmulticast mode
[   45.773374][ T5833] bridge_slave_0: entered promiscuous mode
[   45.777023][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.779308][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.781553][ T5833] bridge_slave_1: entered allmulticast mode
[   45.784147][ T5833] bridge_slave_1: entered promiscuous mode
[   45.827818][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.841424][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.847899][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.850267][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.852739][ T5829] bridge_slave_0: entered allmulticast mode
[   45.855938][ T5829] bridge_slave_0: entered promiscuous mode
[   45.886360][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.888752][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.891105][ T5829] bridge_slave_1: entered allmulticast mode
[   45.893788][ T5829] bridge_slave_1: entered promiscuous mode
[   45.897829][ T5833] team0: Port device team_slave_0 added
[   45.906415][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.908705][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.911035][ T5837] bridge_slave_0: entered allmulticast mode
[   45.913664][ T5837] bridge_slave_0: entered promiscuous mode
[   45.917756][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.920148][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.922511][ T5837] bridge_slave_1: entered allmulticast mode
[   45.925669][ T5837] bridge_slave_1: entered promiscuous mode
[   45.929331][ T5833] team0: Port device team_slave_1 added
[   45.960145][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.964493][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.969861][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.981683][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.998819][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.001045][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.009604][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.021634][ T5837] team0: Port device team_slave_0 added
[   46.024014][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.026741][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.035248][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.047281][ T5829] team0: Port device team_slave_0 added
[   46.050303][ T5837] team0: Port device team_slave_1 added
[   46.056595][ T5829] team0: Port device team_slave_1 added
[   46.095049][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.097352][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.106142][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.119454][ T5833] hsr_slave_0: entered promiscuous mode
[   46.121822][ T5833] hsr_slave_1: entered promiscuous mode
[   46.125288][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.127676][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.136374][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.140326][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.142660][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.151224][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.166093][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.168409][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.177541][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.216275][ T5829] hsr_slave_0: entered promiscuous mode
[   46.218653][ T5829] hsr_slave_1: entered promiscuous mode
[   46.220809][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.223374][ T5829] Cannot create hsr debugfs directory
[   46.248586][ T5837] hsr_slave_0: entered promiscuous mode
[   46.250914][ T5837] hsr_slave_1: entered promiscuous mode
[   46.253073][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.255730][ T5837] Cannot create hsr debugfs directory
[   46.416608][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.428683][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.438450][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.447788][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.462505][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.476249][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.478562][ T5833] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.481130][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.483455][ T5833] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.487363][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.499309][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.511320][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.543584][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.558585][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.563924][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.566231][ T5829] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.568579][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.570903][ T5829] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.576255][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.580564][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.607705][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.609979][ T5837] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.612347][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.614572][ T5837] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.626740][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.647150][ T1087] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.649884][ T1087] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.653693][ T1087] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.657539][ T1087] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.661037][ T1087] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.663547][ T1087] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.677497][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   46.689544][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.691892][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.699111][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.712678][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   46.716291][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.718680][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.731629][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.737635][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.739947][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.749820][ T5833] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   46.753141][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   46.776194][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.778586][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.785835][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   46.805953][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.808702][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.823986][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.826433][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.879605][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.898515][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   46.928625][ T5833] veth0_vlan: entered promiscuous mode
[   46.933744][ T5833] veth1_vlan: entered promiscuous mode
[   46.966125][ T5833] veth0_macvtap: entered promiscuous mode
[   46.970850][ T5833] veth1_macvtap: entered promiscuous mode
[   46.989322][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.998623][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.009078][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.017613][ T5833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.020500][ T5833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.023290][ T5833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.026726][ T5833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.052733][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.073360][ T5829] veth0_vlan: entered promiscuous mode
[   47.090916][ T5829] veth1_vlan: entered promiscuous mode
[   47.094332][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.103027][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.129706][ T5837] veth0_vlan: entered promiscuous mode
[   47.132254][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.135226][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.142074][ T5837] veth1_vlan: entered promiscuous mode
[   47.151243][ T5829] veth0_macvtap: entered promiscuous mode
[   47.158824][ T5829] veth1_macvtap: entered promiscuous mode
[   47.169547][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.172628][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.187184][ T5837] veth0_macvtap: entered promiscuous mode
[   47.196541][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.201858][ T5837] veth1_macvtap: entered promiscuous mode
[   47.213181][ T5829] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.218755][ T5829] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.221796][ T5829] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.224661][ T5829] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.233568][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.244826][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.254586][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.257854][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.260443][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.263032][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.317836][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.320405][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.343827][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.347015][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.358268][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.360841][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.366727][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.369651][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.485555][   T54] Bluetooth: hci1: command tx timeout
[   47.485819][ T5228] Bluetooth: hci0: command tx timeout
[   47.575202][ T5228] Bluetooth: hci2: command tx timeout
[   47.668096][    C0] hrtimer: interrupt took 24825 ns
[   47.925797][ T5928] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16'.
[   48.087260][ T5939] Zero length message leads to an empty skb
[   49.565342][ T5228] Bluetooth: hci0: command tx timeout
[   49.645031][ T5228] Bluetooth: hci2: command tx timeout
[   51.648345][ T5228] Bluetooth: hci0: command tx timeout
[   51.725824][ T5228] Bluetooth: hci2: command tx timeout
[   53.725539][ T5228] Bluetooth: hci0: command tx timeout
[   53.805029][ T5228] Bluetooth: hci2: command tx timeout
[   70.850603][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   70.853431][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.288338][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.290321][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  153.054921][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  153.057002][    C1] rcu: 	1-....: (1 GPs behind) idle=910c/1/0x4000000000000000 softirq=13732/13733 fqs=5250
[  153.061034][    C1] rcu: 	         hardirqs   softirqs   csw/system
[  153.063006][    C1] rcu: 	 number:  1055463          0            0
[  153.064972][    C1] rcu: 	cputime:    24091      28408           77   ==> 52510(ms)
[  153.067343][    C1] rcu: 	(t=10502 jiffies g=5513 q=1465 ncpus=2)
[  153.069274][    C1] CPU: 1 UID: 0 PID: 5936 Comm: syz.0.19 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  153.069283][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  153.069288][    C1] RIP: 0010:e1000_clean+0xe1f/0x2b00
[  153.069300][    C1] Code: 38 4c 8d 70 88 4c 89 f0 48 c1 e8 03 48 89 44 24 48 42 0f b6 04 20 84 c0 0f 85 14 1a 00 00 4c 89 b4 24 98 00 00 00 45 0f b7 3e <42> 0f b6 04 23 84 c0 4c 89 e3 0f 85 15 1a 00 00 44 89 6c 24 10 48
[  153.069306][    C1] RSP: 0018:ffffc900001e09e0 EFLAGS: 00000246
[  153.069312][    C1] RAX: 0000000000000000 RBX: 1ffff1100437f1fc RCX: 0000000000000100
[  153.069317][    C1] RDX: ffff888022121cc0 RSI: 00000000000003e8 RDI: 00000000000003e8
[  153.069322][    C1] RBP: ffffc900001e0b88 R08: ffffc900001e0967 R09: 1ffff9200003c12c
[  153.069326][    C1] R10: dffffc0000000000 R11: fffff5200003c12d R12: dffffc0000000000
[  153.069331][    C1] R13: 0000000000004e20 R14: ffff888021bf8ff8 R15: 0000000000000001
[  153.069335][    C1] FS:  00007f5f38aaf6c0(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
[  153.069340][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  153.069345][    C1] CR2: 0000000000000000 CR3: 000000010fd26000 CR4: 00000000000006f0
[  153.069370][    C1] Call Trace:
[  153.069375][    C1]  <IRQ>
[  153.069388][    C1]  ? perf_trace_preemptirq_template+0x280/0x340
[  153.069400][    C1]  ? net_rx_action+0x382/0xe30
[  153.069408][    C1]  ? __pfx_e1000_clean+0x10/0x10
[  153.069419][    C1]  __napi_poll+0xc7/0x480
[  153.069429][    C1]  ? net_rx_action+0x46d/0xe30
[  153.069437][    C1]  net_rx_action+0x707/0xe30
[  153.069452][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  153.069460][    C1]  ? kvm_sched_clock_read+0x11/0x20
[  153.069474][    C1]  ? __pfx_sched_clock_cpu+0x10/0x10
[  153.069489][    C1]  handle_softirqs+0x286/0x870
[  153.069500][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  153.069510][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  153.069520][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  153.069531][    C1]  __irq_exit_rcu+0xca/0x1f0
[  153.069538][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  153.069550][    C1]  irq_exit_rcu+0x9/0x30
[  153.069556][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  153.069565][    C1]  </IRQ>
[  153.069567][    C1]  <TASK>
[  153.069570][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  153.069577][    C1] RIP: 0010:preempt_schedule_irq+0xb0/0x150
[  153.069585][    C1] Code: 24 20 f6 44 24 21 02 74 0c 90 0f 0b 48 f7 03 08 00 00 00 74 64 bf 01 00 00 00 e8 8b 1d 21 f6 e8 c6 f0 57 f6 fb bf 01 00 00 00 <e8> 1b ab ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24
[  153.069590][    C1] RSP: 0018:ffffc9000366f600 EFLAGS: 00000286
[  153.069596][    C1] RAX: a675a4e53315b400 RBX: 0000000000000000 RCX: a675a4e53315b400
[  153.069601][    C1] RDX: 0000000000000000 RSI: ffffffff8d998940 RDI: 0000000000000001
[  153.069605][    C1] RBP: ffffc9000366f6b0 R08: ffffffff8fa1e9f7 R09: 1ffffffff1f43d3e
[  153.069610][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d3f R12: 0000000000000000
[  153.069614][    C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920006cdec0
[  153.069627][    C1]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  153.069640][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  153.069649][    C1]  irqentry_exit+0x6f/0x90
[  153.069656][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  153.069679][    C1] RIP: 0010:__sanitizer_cov_trace_pc+0x55/0x70
[  153.069688][    C1] Code: 16 00 00 00 74 2c 8b 91 18 16 00 00 83 fa 02 75 21 48 8b 91 20 16 00 00 48 8b 32 48 8d 7e 01 8b 89 1c 16 00 00 48 39 cf 73 08 <48> 89 3a 48 89 44 f2 08 e9 4e 4a b1 09 cc 66 66 66 66 2e 0f 1f 84
[  153.069693][    C1] RSP: 0018:ffffc9000366f778 EFLAGS: 00000287
[  153.069699][    C1] RAX: ffffffff823843f6 RBX: ffffc9000366fc20 RCX: 0000000000080000
[  153.069703][    C1] RDX: ffffc90007159000 RSI: 0000000000000369 RDI: 000000000000036a
[  153.069707][    C1] RBP: ffffc9000366f8a0 R08: 0000000000000000 R09: ffffffff825971a6
[  153.069711][    C1] R10: dffffc0000000000 R11: ffffffff82597e80 R12: 1ffff920006cdf8b
[  153.069715][    C1] R13: dffffc0000000000 R14: 0000000000000000 R15: dffffc0000000000
[  153.069721][    C1]  ? __pfx_pid_revalidate+0x10/0x10
[  153.069731][    C1]  ? task_dump_owner+0x76/0x4c0
[  153.069739][    C1]  ? step_into+0x286/0xf30
[  153.069750][    C1]  step_into+0x286/0xf30
[  153.069759][    C1]  ? pid_revalidate+0x22/0x260
[  153.069768][    C1]  ? pid_revalidate+0x22/0x260
[  153.069775][    C1]  ? pid_revalidate+0x22/0x260
[  153.069785][    C1]  ? __pfx_step_into+0x10/0x10
[  153.069793][    C1]  ? lookup_fast+0x3ec/0x5b0
[  153.069801][    C1]  ? inode_permission+0x149/0x470
[  153.069808][    C1]  ? __asan_memcpy+0x40/0x70
[  153.069819][    C1]  link_path_walk+0x77b/0xea0
[  153.069834][    C1]  path_openat+0x28c/0x3830
[  153.069843][    C1]  ? arch_stack_walk+0xfc/0x150
[  153.069865][    C1]  ? __pfx_path_openat+0x10/0x10
[  153.069873][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.069888][    C1]  do_filp_open+0x1fa/0x410
[  153.069896][    C1]  ? __lock_acquire+0xab9/0xd20
[  153.069904][    C1]  ? __pfx_do_filp_open+0x10/0x10
[  153.069917][    C1]  ? __pfx_kfree_link+0x10/0x10
[  153.069928][    C1]  ? _raw_spin_unlock+0x28/0x50
[  153.069936][    C1]  ? alloc_fd+0x64c/0x6c0
[  153.069948][    C1]  do_sys_openat2+0x121/0x1c0
[  153.069958][    C1]  ? __pfx_do_sys_openat2+0x10/0x10
[  153.069968][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  153.069981][    C1]  __x64_sys_openat+0x138/0x170
[  153.069992][    C1]  do_syscall_64+0xfa/0x3b0
[  153.070001][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.070007][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  153.070015][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.070021][    C1] RIP: 0033:0x7f5f37b8d310
[  153.070029][    C1] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44
[  153.070034][    C1] RSP: 002b:00007f5f38aaef10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  153.070040][    C1] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f5f37b8d310
[  153.070044][    C1] RDX: 0000000000000002 RSI: 00007f5f38aaefa0 RDI: 00000000ffffff9c
[  153.070048][    C1] RBP: 00007f5f38aaefa0 R08: 0000000000000000 R09: 0000000000000000
[  153.070051][    C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  153.070055][    C1] R13: 0000000000000000 R14: 00007f5f37db5fa0 R15: 00007fff4e1740c8
[  153.070066][    C1]  </TASK>
[  153.258849][    C1] sched: DL replenish lagged too much

VM DIAGNOSIS:
11:01:03  Registers:
info registers vcpu 0

CPU#0
RAX=3d8dcc8f49be7d00 RBX=ffffffff81976a48 RCX=3d8dcc8f49be7d00 RDX=0000000000000001
RSI=ffffffff8d998940 RDI=ffffffff8be29f40 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa1e9f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6e94f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffe19fdcf60 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000001f63746e 0000000000000000 XMM01=0100000000000100 0000000000000000
XMM02=65626d6520002e74 736f686c61636f6c XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffff00 0000000000000000 XMM05=1600000000000000 00000000000002ff
XMM06=1600000000000000 00000000000002ff XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001dfd10
R8 =ffff888107e88237 R9 =1ffff11020fd1046 R10=dffffc0000000000 R11=ffffffff85472aa0
R12=dffffc0000000000 R13=ffffffff99af58c9 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff85472b1c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f5f38aaf6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000010fd26000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=00007f5f37d86478 00007f5f37d86450 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=00007f5f37d86458 00007f5f37d864a0
XMM06=00007f5f37d86498 00007f5f37d86490 XMM07=00007f5f37d86488 00007f5f37d86480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f5f37c11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
