last executing test programs:

17.380477647s ago: executing program 0 (id=88):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="1400000024000b94f0184528828c3d153136af46", 0x14}], 0x1}, 0x0)

17.236427639s ago: executing program 0 (id=93):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x20)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x104)

16.447456224s ago: executing program 0 (id=100):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x4f}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

16.380710377s ago: executing program 0 (id=104):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x2, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000020100000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000bf09000000000000550901000074f696e500000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

16.30233653s ago: executing program 2 (id=108):
r0 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001740)=""/4110, 0x100e}, {&(0x7f0000000100)=""/235, 0xeb}], 0x2}, 0x10020)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33)

16.239145487s ago: executing program 1 (id=110):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000440)={<r2=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x18, 0x1, 0x1, [r2, r1]}}], 0x18, 0x4040844}, 0x0)

16.238660119s ago: executing program 1 (id=111):
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
close(r0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r2 = socket$kcm(0x1e, 0x4, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r3=>0x0, <r4=>0x0})
close(r3)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r5 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
close(r0)

16.188547786s ago: executing program 1 (id=112):
r0 = socket$kcm(0xa, 0x2, 0x3a)
setsockopt$sock_attach_bpf(r0, 0x29, 0x17, 0x0, 0x0)

16.132893769s ago: executing program 2 (id=113):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)

16.132587459s ago: executing program 2 (id=114):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94)

16.122004148s ago: executing program 1 (id=115):
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8982, &(0x7f0000000080))

16.051952427s ago: executing program 2 (id=116):
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x32}, 0x20)
setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x10)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x180bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x23fd6b854b20bbab, 0x0, 0x4, 0x9, 0x0, 0x4, 0x4000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff800000003, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x84, 0x25, &(0x7f0000000000)=r7, 0x20000010)

15.990972612s ago: executing program 1 (id=117):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100})
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0xd, 0x7, 0x0, 0x4, 0x78d39, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0xffffffffffffffff, 0x10}, 0x2, 0x3, 0x207, 0x0, 0x3ff, 0x5, 0x6, 0x0, 0x6, 0x0, 0x2}, 0xffffffffffffffff, 0x100000000000d, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080))

15.900181167s ago: executing program 1 (id=118):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11100, 0x0, 0xfffffffc, 0x0, 0x0, 0x81}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0)
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x2, &(0x7f0000000000), 0x1, 0x10, &(0x7f0000000000), 0xa}, 0x70)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r5, 0x0, 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r5}, 0x48)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x8}, 0x512b, 0x5, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xa, 0x8, 0x1, 0x40, 0x42}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r6}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000240)={r6, &(0x7f0000000100), &(0x7f0000002240)=""/99}, 0x20)

14.937193079s ago: executing program 0 (id=119):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r1, 0x9e, &(0x7f0000000140)}, 0x10)

14.936650826s ago: executing program 0 (id=120):
openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000001780)='cpu.pressure\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x4, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[], 0x230}, 0x0)
socket$kcm(0x10, 0x3, 0x10)
r0 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="0213020902000000e4a17c4e2ca18baa", 0x10}], 0x1}, 0x0)
gettid()
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0xe43986f95b0e4309})
r2 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x6, 0x13, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x200100, 0x0)

14.927499065s ago: executing program 2 (id=121):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="d8000000210081044e810382db44b9040a00007ffefe0500002015000600142603600e1209000600fe7f00007f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ae5abb3dbe08141a90bffece0b42a9ecbee5de6ccd40dd6e4edef3d93c42a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xcb}, {&(0x7f0000000080)="2947ccfbab120bb6a8b56c98e1", 0xd}], 0x2}, 0x0)

14.92715812s ago: executing program 2 (id=122):
getpid()
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x9, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x8183, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext, 0x40, 0x0, 0x0, 0x0, 0xc360, 0xfffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socketpair(0x29, 0x4, 0x6, &(0x7f0000000600))
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01ffffff7f0000000000000000000200000000002214ef007e17c8353abd497cb824cd17f4a54413a7908314c4ac5a2c632077eb3bca79a8b3e4bd11232f294564dcddba2587d0f838a1d9208d2548e145b247d6ef7c5d1ba9f635"], 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x8000000}, 0x28)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x401}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x770a, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000009c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007fc5f603ff65ec5deb000071673fa79d93014b8e7781c2"], 0xfdef)

135.542575ms ago: executing program 32 (id=120):
openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000001780)='cpu.pressure\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x4, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[], 0x230}, 0x0)
socket$kcm(0x10, 0x3, 0x10)
r0 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="0213020902000000e4a17c4e2ca18baa", 0x10}], 0x1}, 0x0)
gettid()
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0xe43986f95b0e4309})
r2 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x6, 0x13, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x200100, 0x0)

50.996349ms ago: executing program 33 (id=118):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11100, 0x0, 0xfffffffc, 0x0, 0x0, 0x81}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0)
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x2, &(0x7f0000000000), 0x1, 0x10, &(0x7f0000000000), 0xa}, 0x70)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r5, 0x0, 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r5}, 0x48)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x8}, 0x512b, 0x5, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xa, 0x8, 0x1, 0x40, 0x42}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r6}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000240)={r6, &(0x7f0000000100), &(0x7f0000002240)=""/99}, 0x20)

0s ago: executing program 34 (id=122):
getpid()
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x9, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x8183, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext, 0x40, 0x0, 0x0, 0x0, 0xc360, 0xfffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socketpair(0x29, 0x4, 0x6, &(0x7f0000000600))
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01ffffff7f0000000000000000000200000000002214ef007e17c8353abd497cb824cd17f4a54413a7908314c4ac5a2c632077eb3bca79a8b3e4bd11232f294564dcddba2587d0f838a1d9208d2548e145b247d6ef7c5d1ba9f635"], 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x8000000}, 0x28)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x401}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x770a, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000009c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007fc5f603ff65ec5deb000071673fa79d93014b8e7781c2"], 0xfdef)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:41324' (ED25519) to the list of known hosts.
syzkaller login: [   56.051359][ T5779] cgroup: Unknown subsys name 'net'
[   56.154093][ T5779] cgroup: Unknown subsys name 'cpuset'
[   56.159249][ T5779] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.267060][ T5779] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.660116][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.663929][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.667159][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.670763][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.674291][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.706910][ T5218] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.710626][ T5218] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.714161][ T5218] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.718164][ T5218] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.721631][ T5218] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.767281][ T5218] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.772222][ T5218] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.777162][ T5218] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.780622][ T5218] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.783773][ T5218] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.104877][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   64.141785][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   64.196865][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   64.262196][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.265069][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.268709][ T5838] bridge_slave_0: entered allmulticast mode
[   64.272552][ T5838] bridge_slave_0: entered promiscuous mode
[   64.324515][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.327639][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.330019][ T5838] bridge_slave_1: entered allmulticast mode
[   64.333592][ T5838] bridge_slave_1: entered promiscuous mode
[   64.352776][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.355091][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.357850][ T5842] bridge_slave_0: entered allmulticast mode
[   64.360734][ T5842] bridge_slave_0: entered promiscuous mode
[   64.364063][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.366582][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.368886][ T5842] bridge_slave_1: entered allmulticast mode
[   64.371637][ T5842] bridge_slave_1: entered promiscuous mode
[   64.439088][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.442842][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.446649][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.449484][ T5848] bridge_slave_0: entered allmulticast mode
[   64.453208][ T5848] bridge_slave_0: entered promiscuous mode
[   64.471727][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.477798][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.481046][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.483931][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.487472][ T5848] bridge_slave_1: entered allmulticast mode
[   64.491238][ T5848] bridge_slave_1: entered promiscuous mode
[   64.536059][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.565330][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.573219][ T5838] team0: Port device team_slave_0 added
[   64.579516][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.608429][ T5838] team0: Port device team_slave_1 added
[   64.613913][ T5842] team0: Port device team_slave_0 added
[   64.643971][ T5842] team0: Port device team_slave_1 added
[   64.650801][ T5848] team0: Port device team_slave_0 added
[   64.683411][ T5848] team0: Port device team_slave_1 added
[   64.687608][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.690313][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.700722][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.747627][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.750346][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.760322][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.765426][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.768607][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.778923][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.784079][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.786980][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.797576][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.809687][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.812389][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.822567][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.828050][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.830821][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.842083][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.937921][ T5842] hsr_slave_0: entered promiscuous mode
[   64.942066][ T5842] hsr_slave_1: entered promiscuous mode
[   64.964657][ T5848] hsr_slave_0: entered promiscuous mode
[   64.968587][ T5848] hsr_slave_1: entered promiscuous mode
[   64.971388][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.974434][ T5848] Cannot create hsr debugfs directory
[   64.981481][ T5838] hsr_slave_0: entered promiscuous mode
[   64.984470][ T5838] hsr_slave_1: entered promiscuous mode
[   64.988270][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.991084][ T5838] Cannot create hsr debugfs directory
[   65.357749][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.367552][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.381609][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.395213][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.428703][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.436667][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.444403][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.455627][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.499215][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.504172][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.514228][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.531257][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.620792][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.642179][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.662065][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   65.676179][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.679070][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.691676][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   65.699125][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.701906][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.712093][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.715002][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.735765][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.738720][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.749569][   T55] Bluetooth: hci1: command tx timeout
[   65.751293][ T5218] Bluetooth: hci0: command tx timeout
[   65.774641][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.795427][ T5842] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   65.799155][ T5842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.816895][ T5218] Bluetooth: hci2: command tx timeout
[   65.824779][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   65.853445][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.856235][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.865028][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.867943][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.938806][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.975099][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.040570][ T5848] veth0_vlan: entered promiscuous mode
[   66.057448][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.061068][ T5848] veth1_vlan: entered promiscuous mode
[   66.129378][ T5842] veth0_vlan: entered promiscuous mode
[   66.154076][ T5848] veth0_macvtap: entered promiscuous mode
[   66.161823][ T5848] veth1_macvtap: entered promiscuous mode
[   66.168487][ T5842] veth1_vlan: entered promiscuous mode
[   66.184438][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.209679][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.224671][ T5842] veth0_macvtap: entered promiscuous mode
[   66.233001][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.243714][ T5842] veth1_macvtap: entered promiscuous mode
[   66.252180][ T5848] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.255614][ T5848] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.263027][ T5848] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.267777][ T5848] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.313425][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.334953][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.345031][ T5838] veth0_vlan: entered promiscuous mode
[   66.375353][ T5842] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.379167][ T5842] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.381743][ T5842] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.384288][ T5842] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.392300][   T86] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.392730][ T5838] veth1_vlan: entered promiscuous mode
[   66.395326][   T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.453462][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.456960][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.465234][ T5838] veth0_macvtap: entered promiscuous mode
[   66.491700][ T5838] veth1_macvtap: entered promiscuous mode
[   66.518701][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.532588][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.547739][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.564151][ T5838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.569557][ T5838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.572930][ T5838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.576701][ T5838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.590280][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.593408][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.690916][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.697859][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.768209][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.771194][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.848945][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.859093][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.002590][ T5911] Zero length message leads to an empty skb
[   67.456245][ T5934] IPv6: NLM_F_CREATE should be specified when creating new route
[   67.536356][    C1] hrtimer: interrupt took 41859 ns
[   67.837614][ T5218] Bluetooth: hci1: command tx timeout
[   67.839372][ T5218] Bluetooth: hci0: command tx timeout
[   67.932907][ T5218] Bluetooth: hci2: command tx timeout
[   68.460685][ T5955] syzkaller0: tun_chr_ioctl cmd 1074025677
[   68.463919][ T5955] syzkaller0: linktype set to 805
[   68.765718][ T5973] netlink: 60 bytes leftover after parsing attributes in process `syz.1.30'.
[   68.805010][ T5970] netlink: 60 bytes leftover after parsing attributes in process `syz.1.30'.
[   68.819015][ T5973] netlink: 60 bytes leftover after parsing attributes in process `syz.1.30'.
[   68.872073][ T5977] netlink: 132 bytes leftover after parsing attributes in process `syz.2.33'.
[   69.071301][ T5218] Bluetooth: hci2: unexpected event 0x36 length: 15 > 7
[   69.100659][ T5982] delete_channel: no stack
[   69.166737][ T5218] Bluetooth: hci0: unexpected event 0x31 length: 15 > 6
[   69.321168][ T6003] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.900706][ T5218] Bluetooth: hci0: command tx timeout
[   69.902999][   T55] Bluetooth: hci1: command tx timeout
[   69.976516][ T5218] Bluetooth: hci2: command tx timeout
[   70.361786][ T6013] warning: `syz.1.50' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   71.279518][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.282000][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.906101][ T6050] netlink: 'syz.2.65': attribute type 10 has an invalid length.
[   71.912705][ T6050] netlink: 168 bytes leftover after parsing attributes in process `syz.2.65'.
[   72.003396][ T5218] Bluetooth: hci0: command tx timeout
[   72.005536][ T5218] Bluetooth: hci1: command tx timeout
[   72.075159][ T5218] Bluetooth: hci2: command tx timeout
[   72.130354][ T6061] netlink: 'syz.2.69': attribute type 21 has an invalid length.
[   72.162900][ T6059] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   72.178854][ T6061] netlink: 'syz.2.69': attribute type 10 has an invalid length.
[   72.181984][ T6061] netlink: 55 bytes leftover after parsing attributes in process `syz.2.69'.
[   74.181216][ T6089] netlink: 'syz.1.77': attribute type 29 has an invalid length.
[   74.185029][ T6089] netlink: 'syz.1.77': attribute type 29 has an invalid length.
[   74.228313][ T6086] syz.0.76 (6086) used greatest stack depth: 20464 bytes left
[   74.298979][ T6095] netlink: 'syz.1.81': attribute type 10 has an invalid length.
[   74.301600][ T6095] netlink: 'syz.1.81': attribute type 11 has an invalid length.
[   74.304293][ T6095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.81'.
[   74.943651][ T6119] syz.2.91 uses obsolete (PF_INET,SOCK_PACKET)
[   75.991351][ T6159] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.108'.
[   75.996165][ T6154] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.108'.
[   77.020083][ T6183] netlink: 'syz.2.121': attribute type 6 has an invalid length.
[   77.022684][ T6183] netlink: 168 bytes leftover after parsing attributes in process `syz.2.121'.
[   86.310716][   T52] cfg80211: failed to load regulatory.db
[   92.979254][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   92.983285][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   92.987184][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   92.991123][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   92.994711][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   93.038991][ T5218] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   93.042139][ T5218] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   93.044698][ T5218] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   93.049124][ T5218] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   93.051747][ T5218] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   93.088870][ T5218] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   93.091795][ T5218] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   93.094321][ T5218] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   93.100819][ T5218] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   93.103508][ T5218] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   93.394848][ T6192] chnl_net:caif_netlink_parms(): no params data found
[   95.016594][   T55] Bluetooth: hci3: command tx timeout
[   95.096638][   T55] Bluetooth: hci4: command tx timeout
[   95.176618][   T55] Bluetooth: hci5: command tx timeout
[   97.106651][   T55] Bluetooth: hci3: command tx timeout
[   97.177439][   T55] Bluetooth: hci4: command tx timeout
[   97.266795][   T55] Bluetooth: hci5: command tx timeout
[   99.176776][   T55] Bluetooth: hci3: command tx timeout
[   99.256556][   T55] Bluetooth: hci4: command tx timeout
[   99.336591][   T55] Bluetooth: hci5: command tx timeout
[  101.256766][   T55] Bluetooth: hci3: command tx timeout
[  101.336563][   T55] Bluetooth: hci4: command tx timeout
[  101.416730][   T55] Bluetooth: hci5: command tx timeout
[  119.313476][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 37861706330 wd_nsec: 37861719601
[  153.886015][ T5218] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  153.889449][ T5218] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  153.892799][ T5218] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  153.912107][ T6220] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  153.915492][ T6220] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  153.918668][ T6220] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  153.921248][ T6220] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  153.924239][ T6220] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  153.927045][ T6220] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  153.931163][ T6220] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  153.945167][ T6224] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  153.948532][ T6224] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  153.951785][ T6224] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  153.959975][ T6223] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  153.962868][ T6223] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  155.976999][ T5841] Bluetooth: hci8: command tx timeout
[  155.979804][ T5841] Bluetooth: hci7: command tx timeout
[  155.982401][ T5841] Bluetooth: hci6: command tx timeout
[  158.056673][ T5841] Bluetooth: hci8: command tx timeout
[  158.058481][ T5841] Bluetooth: hci6: command tx timeout
[  158.060158][ T5841] Bluetooth: hci7: command tx timeout
[  160.136638][ T6224] Bluetooth: hci7: command tx timeout
[  160.138467][ T6224] Bluetooth: hci6: command tx timeout
[  160.140161][ T6224] Bluetooth: hci8: command tx timeout
[  162.226800][ T5841] Bluetooth: hci8: command tx timeout
[  162.228867][ T5841] Bluetooth: hci6: command tx timeout
[  162.230725][ T5841] Bluetooth: hci7: command tx timeout
[  182.276352][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
[  182.278418][    C0] rcu: 	0-....: (8427 ticks this GP) idle=82f4/1/0x4000000000000000 softirq=14826/14826 fqs=4697
[  182.282863][    C0] rcu: 	         hardirqs   softirqs   csw/system
[  182.284851][    C0] rcu: 	 number:  1082432          0            0
[  182.287286][    C0] rcu: 	cputime:    25466      26833           87   ==> 52300(ms)
[  182.290151][    C0] rcu: 	(t=10500 jiffies g=9417 q=2313 ncpus=2)
[  182.292036][    C0] CPU: 0 UID: 0 PID: 6185 Comm: syz.2.122 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  182.292047][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  182.292052][    C0] RIP: 0010:rcu_read_unlock_special+0x87/0x4c0
[  182.292071][    C0] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 62 2c f8 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
[  182.292078][    C0] RSP: 0018:ffffc90000007420 EFLAGS: 00000206
[  182.292086][    C0] RAX: 400aeb9216de9a00 RBX: 1ffff92000000e8c RCX: 400aeb9216de9a00
[  182.292091][    C0] RDX: 0000000000000002 RSI: ffffffff8d99883e RDI: ffffffff8be29f40
[  182.292096][    C0] RBP: ffffc90000007520 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  182.292101][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffffffff8e144400
[  182.292106][    C0] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000001
[  182.292111][    C0] FS:  00007fe6897b36c0(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
[  182.292142][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  182.292149][    C0] CR2: 0000001b30f1bff8 CR3: 0000000029cf2000 CR4: 00000000000006f0
[  182.292175][    C0] Call Trace:
[  182.292182][    C0]  <IRQ>
[  182.292188][    C0]  ? __lock_acquire+0xab9/0xd20
[  182.292206][    C0]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  182.292223][    C0]  ? is_module_text_address+0x1d/0x1e0
[  182.292235][    C0]  ? is_module_text_address+0x1d/0x1e0
[  182.292250][    C0]  __rcu_read_unlock+0x84/0xe0
[  182.292260][    C0]  ? is_module_text_address+0x1d/0x1e0
[  182.292271][    C0]  is_module_text_address+0x190/0x1e0
[  182.292283][    C0]  kernel_text_address+0x94/0xe0
[  182.292292][    C0]  __kernel_text_address+0xd/0x40
[  182.292299][    C0]  unwind_get_return_address+0x4d/0x90
[  182.292308][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  182.292318][    C0]  arch_stack_walk+0xfc/0x150
[  182.292335][    C0]  stack_trace_save+0x9c/0xe0
[  182.292345][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  182.292357][    C0]  ? __irq_exit_rcu+0xd8/0x1f0
[  182.292367][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  182.292376][    C0]  kasan_save_track+0x3e/0x80
[  182.292385][    C0]  ? kasan_save_track+0x3e/0x80
[  182.292390][    C0]  ? __kasan_slab_alloc+0x6c/0x80
[  182.292398][    C0]  ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  182.292405][    C0]  ? __alloc_skb+0x112/0x2d0
[  182.292413][    C0]  ? ndisc_alloc_skb+0x9f/0x480
[  182.292422][    C0]  ? ndisc_send_rs+0x2b5/0x630
[  182.292431][    C0]  ? addrconf_rs_timer+0x369/0x670
[  182.292439][    C0]  ? call_timer_fn+0x17e/0x5f0
[  182.292446][    C0]  ? __run_timer_base+0x61a/0x860
[  182.292455][    C0]  ? run_timer_softirq+0xb7/0x180
[  182.292465][    C0]  ? handle_softirqs+0x286/0x870
[  182.292472][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  182.292479][    C0]  ? irq_exit_rcu+0x9/0x30
[  182.292486][    C0]  ? sysvec_irq_work+0xa3/0xc0
[  182.292494][    C0]  ? asm_sysvec_irq_work+0x1a/0x20
[  182.292501][    C0]  ? preempt_schedule_irq+0xb0/0x150
[  182.292511][    C0]  ? irqentry_exit+0x6f/0x90
[  182.292519][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  182.292526][    C0]  ? __pfx_mutex_unlock+0x10/0x10
[  182.292534][    C0]  ? __se_sys_perf_event_open+0x194c/0x1d70
[  182.292544][    C0]  ? do_syscall_64+0xfa/0x3b0
[  182.292554][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.292581][    C0]  __kasan_slab_alloc+0x6c/0x80
[  182.292590][    C0]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  182.292598][    C0]  ? __alloc_skb+0x112/0x2d0
[  182.292608][    C0]  __alloc_skb+0x112/0x2d0
[  182.292618][    C0]  ndisc_alloc_skb+0x9f/0x480
[  182.292634][    C0]  ndisc_send_rs+0x2b5/0x630
[  182.292647][    C0]  addrconf_rs_timer+0x369/0x670
[  182.292659][    C0]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  182.292668][    C0]  ? __irq_exit_rcu+0xd8/0x1f0
[  182.292680][    C0]  call_timer_fn+0x17e/0x5f0
[  182.292688][    C0]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  182.292695][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  182.292703][    C0]  ? call_timer_fn+0xbe/0x5f0
[  182.292710][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  182.292725][    C0]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  182.292734][    C0]  __run_timer_base+0x61a/0x860
[  182.292743][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  182.292763][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  182.292783][    C0]  run_timer_softirq+0xb7/0x180
[  182.292794][    C0]  handle_softirqs+0x286/0x870
[  182.292804][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  182.292816][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  182.292823][    C0]  ? irq_work_single+0x1ac/0x240
[  182.292833][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  182.292845][    C0]  __irq_exit_rcu+0xca/0x1f0
[  182.292853][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  182.292864][    C0]  ? rcu_is_watching+0x15/0xb0
[  182.292873][    C0]  irq_exit_rcu+0x9/0x30
[  182.292881][    C0]  sysvec_irq_work+0xa3/0xc0
[  182.292888][    C0]  </IRQ>
[  182.292891][    C0]  <TASK>
[  182.292894][    C0]  asm_sysvec_irq_work+0x1a/0x20
[  182.292902][    C0] RIP: 0010:preempt_schedule_irq+0xb0/0x150
[  182.292911][    C0] Code: 24 20 f6 44 24 21 02 74 0c 90 0f 0b 48 f7 03 08 00 00 00 74 64 bf 01 00 00 00 e8 8b 2d 21 f6 e8 c6 00 58 f6 fb bf 01 00 00 00 <e8> 1b ab ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24
[  182.292917][    C0] RSP: 0018:ffffc90006957b80 EFLAGS: 00000282
[  182.292924][    C0] RAX: 400aeb9216de9a00 RBX: 0000000000000000 RCX: 400aeb9216de9a00
[  182.292929][    C0] RDX: 0000000000000006 RSI: ffffffff8d99883e RDI: 0000000000000001
[  182.292934][    C0] RBP: ffffc90006957c30 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  182.292939][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 0000000000000000
[  182.292943][    C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000d2af70
[  182.292959][    C0]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  182.292974][    C0]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  182.292983][    C0]  irqentry_exit+0x6f/0x90
[  182.292992][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  182.292999][    C0] RIP: 0010:mutex_unlock+0x0/0x10
[  182.293008][    C0] Code: fa 31 ff e8 a2 f5 20 f6 e9 a9 fd ff ff cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 48 8b 34 24 eb 16 66 0f 1f 44 00 00 90 90 90 90 90 90
[  182.293014][    C0] RSP: 0018:ffffc90006957cf8 EFLAGS: 00000246
[  182.293020][    C0] RAX: 400aeb9216de9a00 RBX: ffff88803a122400 RCX: 0000000000000000
[  182.293024][    C0] RDX: 0000000000000006 RSI: ffffffff8d99883e RDI: ffff88803a122440
[  182.293029][    C0] RBP: ffffc90006957ee0 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  182.293034][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffff88803a122550
[  182.293039][    C0] R13: ffff888118c376c0 R14: ffff888021df9cc0 R15: 1ffff92000d2afb0
[  182.293054][    C0]  __se_sys_perf_event_open+0x194c/0x1d70
[  182.293071][    C0]  ? __pfx___se_sys_perf_event_open+0x10/0x10
[  182.293088][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  182.293101][    C0]  ? rcu_is_watching+0x15/0xb0
[  182.293112][    C0]  ? do_syscall_64+0xbe/0x3b0
[  182.293154][    C0]  ? __x64_sys_perf_event_open+0x20/0xc0
[  182.293165][    C0]  do_syscall_64+0xfa/0x3b0
[  182.293174][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  182.293184][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.293191][    C0]  ? exc_page_fault+0x9f/0xf0
[  182.293201][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.293208][    C0] RIP: 0033:0x7fe68898e9a9
[  182.293216][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  182.293222][    C0] RSP: 002b:00007fe6897b3038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  182.293229][    C0] RAX: ffffffffffffffda RBX: 00007fe688bb5fa0 RCX: 00007fe68898e9a9
[  182.293234][    C0] RDX: bfffffffffffffff RSI: 0000000000000000 RDI: 0000200000000180
[  182.293239][    C0] RBP: 00007fe688a10d69 R08: 0000000000000000 R09: 0000000000000000
[  182.293243][    C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  182.293248][    C0] R13: 0000000000000000 R14: 00007fe688bb5fa0 R15: 00007ffda8814448
[  182.293261][    C0]  </TASK>
[  182.544727][    C0] sched: DL replenish lagged too much
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)

VM DIAGNOSIS:
09:54:45  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000006750
R8 =ffff888021950237 R9 =1ffff1100432a046 R10=dffffc0000000000 R11=ffffffff854728e0
R12=dffffc0000000000 R13=ffffffff99af58c5 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff8547295c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fe6897b36c0 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b30f1bff8 CR3=0000000029cf2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fe688b86478 00007fe688b86450 XMM03=00007fe688b86488 00007fe688b86480
XMM04=00007fe6896ed100 00007fe688b86440 XMM05=00007fe688b86458 00007fe688b864a0
XMM06=00007fe688b86498 00007fe688b86490 XMM07=00007fe688b86488 00007fe688b86480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fe688a11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=ffffffff8e144480 RCX=ffffffff8b71260c RDX=0000000000000000
RSI=0000000000000004 RDI=ffffffff8e144480 RBP=ffffc9000311ef18 RSP=ffffc9000311ee20
R8 =ffffffff8e144483 R9 =1ffffffff1c28890 R10=dffffc0000000000 R11=fffffbfff1c28891
R12=1ffff92000623dcc R13=0000000000000001 R14=ffffc9000311ee80 R15=1ffffffff1c28890
RIP=ffffffff8b7125ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa4c40ef800 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005589db055000 CR3=0000000029912000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
