last executing test programs:

8.5341449s ago: executing program 0 (id=153):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100580, 0x0, 0x0, 0x0, 0x201, 0x9}, 0xffffffffffffffff, 0x4000000000000020, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003f64ecb21ed7d74b542e43ae9f57f61af1c5b6016901992307df92d7c26b05a7da0582d208fd1f57c41cee38c7023e71dc864ab49f7894dd5ee29721d0625ee50c8aeca9b5090d85ff1c5df40229f0981507171aec7dc97abd981893d51a27e8a1033fa344fa3c6c27705648a66a47e0a1bc8fcede095704453c77f6c5370191ab55c423aae05729e69c987cf5f9aa2fd88c9e2114f53b9f82157c197397e43647b083db79f1f2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9}, 0x80)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x100400, 0x0, 0x0, 0x0, 0x0, 0x4, 0xf, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0xc, 0x100020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.sched_load_balance\x00', 0x2, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)=ANY=[], 0x20)
write$cgroup_int(r1, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x76, 0x95, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2b, 0x80000, 0xa4, &(0x7f00000000c0))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xef, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0xb)
ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))

8.250840128s ago: executing program 3 (id=156):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], 0x0, 0x2, 0xff6, &(0x7f0000001e00)=""/4086}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18050000000000000000000000000000851000000600000018290000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b70300000000000085000000190000009500000000000022"], &(0x7f0000000000)='GPL\x00', 0x5, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5c}, 0x4a)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
recvmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r3}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffa}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x64, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x2, 0x101, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0xffffffffffffffff], &(0x7f0000000540)=[{0x0, 0x4, 0x1, 0x4}, {0x0, 0x4, 0x2, 0xb}, {0x1, 0x1, 0xf, 0x2}], 0x10, 0x8}, 0x94)
r4 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)='<', 0x1}], 0x1}, 0x51)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
sendmsg$kcm(r4, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000080), 0x1}, 0x0)

8.101369913s ago: executing program 0 (id=158):
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x5}, {}, {0xffff, 0x0, 0x6}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x420008}]})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x60, 0x4, 0xfd}, {0x6, 0x3}]})
ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f00000016c0)=0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000a000000040000000100"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r2, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0xc, [@const={0x3, 0x0, 0x0, 0xa, 0x1}, @volatile={0x4}, @float={0x3, 0x0, 0x0, 0x10, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0x800000}}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x2e, 0x30, 0x61, 0x2e, 0x5f, 0x2e, 0x5f, 0x0, 0x30, 0x61]}}, &(0x7f00000001c0)=""/175, 0x6c, 0xaf, 0x1, 0x0, 0x10000}, 0x28)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000014c0)=@bpf_ext={0x1c, 0x1, &(0x7f0000000340)=@raw=[@call={0x85, 0x0, 0x0, 0x9b}], &(0x7f0000000380)='GPL\x00', 0xa77, 0x1000, &(0x7f00000003c0)=""/4096, 0x41000, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000013c0)={0x2, 0xc, 0x10, 0x8}, 0x10, 0x1e041, 0xffffffffffffffff, 0x8, &(0x7f0000001400)=[r1, r1, r1, r1], &(0x7f0000001440)=[{0x1, 0x2, 0x0, 0x6}, {0x4, 0x2, 0x5, 0x9}, {0x4, 0x2, 0x1, 0x5}, {0x5, 0x5, 0x7, 0x2}, {0x2, 0x3, 0x0, 0x9}, {0x4, 0x1, 0x8}, {0x5, 0x5, 0xd, 0x3}, {0x0, 0x2, 0x8, 0x7}], 0x10, 0x2}, 0x94)
r6 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff})
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x62)
setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x10, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="180000009d00000000000000080000009500000000000000185300000800620085200000040000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0xc, &(0x7f0000000100)=""/12, 0x40f00, 0x71, '\x00', r3, @fallback=0x7, r4, 0x8, &(0x7f00000002c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0xd, 0x8000, 0x4}, 0x10, 0x0, r5, 0x3, &(0x7f0000001580)=[r8, r1, r1, r1, r1, r1, r1, r1, r1], &(0x7f00000015c0)=[{0x3, 0x3, 0x10, 0x5}, {0x4, 0x3, 0xa, 0x8}, {0x3, 0x5, 0x3, 0x7}], 0x10, 0x7}, 0x94)
r9 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x890b, &(0x7f0000000000))

8.077807036s ago: executing program 2 (id=159):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000010000008500000086000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
socketpair(0x1d, 0x2, 0x6, &(0x7f0000000300)={0x0, 0x0})
write$cgroup_pid(r2, &(0x7f0000000880), 0x12)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l')
r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x0, {0xa, 0x4e23, 0x996, @remote, 0x8}}, 0x80, 0x0, 0x3f, 0x0, 0x0, 0x68000000}, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0), 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r5}, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x17}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r7 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r7, 0x84, 0x1f, &(0x7f0000000100), 0x120)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x79}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x90)
write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[], 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1700000000000000000000000000000092efda8575ca7d60a139d8e44638", @ANYBLOB="0097442285"], 0x48)

7.652781807s ago: executing program 1 (id=160):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000010000008500000086000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
socketpair(0x1d, 0x2, 0x6, &(0x7f0000000300)={0x0, 0x0})
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000008c0)={0xffffffffffffffff, 0x0, 0x14a, 0x0, &(0x7f0000000680)="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", 0x0, 0xc, 0x0, 0x8, 0x0, &(0x7f0000000180)="5d8a8441d7b8778a", 0x0, 0x2, 0x0, 0x7c}, 0x50)
write$cgroup_pid(r2, &(0x7f0000000880), 0x12)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l')
r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x0, {0xa, 0x4e23, 0x996, @remote, 0x8}}, 0x80, 0x0, 0x3f, 0x0, 0x0, 0x68000000}, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0), 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r5}, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x17}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r7 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r7, 0x84, 0x1f, &(0x7f0000000100), 0x120)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x79}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x90)
write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[], 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1700000000000000000000000000000092efda8575ca7d60a139d8e44638", @ANYBLOB="0097442285"], 0x48)

7.652362967s ago: executing program 3 (id=161):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x10, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="838df074641a39684101b48bfa8458d3dd02d2c617c02be00093a97220c791442a10b3720df3ba5f1e59f7f0f98522979a165775c0e41d556d17c015d497331cca811ec1c1113f902a1d76f7fc91271b67d0cbe3e921fc942691a65900ba2cb38eedc7eeb0ba2357752d6e1d913293a5507802055ff6d978431f330a5f7545c3a83eb1d386d3590fa62be7d33071ee23fcb92a497777fb6c48976d4542ecda5419b8612f8499103655be2b3bda86ed91c82623caf24f92acc7e0a2af77de07519b38449a8c1a35549dacd9de1f9fd8e54f5a153a2c4e6af343ab4e23d5cdedf8767ad02465826c2d02333bdabe32fb5d2a8a7ae9f7fd7b55db1dc3d7f7753adbb64671c07785a2f7289aa735a878495fc16a274732bc39dff28538f672210991ab25a541419ed18d9d46c4ec1629364af360f94ec98530ce21c7850c53ec2a9e0bf8b06abd147058880ef50d56794b25e2ca51901d8527d8c5f6baabd80f21efa5e134d4c431acdb4dc74cc2d1467cce91970840441af54e0f6d17540c698d258e1abe8c4d013baa133fe2071d3a0b8a7e9d822e6c72f713ea8e5397f64ea41326b1f9376e2009889b3b7c725ac0dc1413c383b389b0a698c82ddd8131ee851acd79b8ca23ead30bb79e8284e2521eaaee0752fcf2c730cb241052daade40083596174ce1c44f9bf02d80644182c8dad62aad15369ee2ff281f51e19d417f62d881f71c2315684871f818f63b66c2ae47b8a17ce2a02d684d392ebe153ecd77fba8d2fe9e752e2a6d10612d58069e94b21079e2eba15d09ffc764c45d4c01614f7f6210dadfe758cd0b387b5dfd224a69c5ebe42b407277076e4bb1ca485e5ceb2d23fb6aa56ed69d97a81b43031e2fff277a74c94ef12ad6ff6396c8a638ba7de440a1634fe7a13a7065e10da2f00283be6907f706a57a8c2d455b79f5056d50c9c5e4340ab02223160854f281e690be4f295e3586bb52f1a42947c2d87746a01dab1346eac081bc6374a6fb4c594d692cf7f17c1fd63172beba8e2f92816c6e8a0dbd9d04cd7d7f70be4824b9c07fd3c84aaec4517b14257701d4830f381a666c4d956ed7a2485b1ac31f9a0c1a9be53ace96311c4034c67c2300742bebdc51cc025a4e960567430ac700b802cd127dad0c85c37524625511f29e7a26d6260c6f22c03b02642d3d238510a78d01e419e71e0190b295450aa938a7e2a1aaddbec0e1f36c857fe500b1e196394ede4a739da1a7172e436dfee1171f3d63ac38e2597b9e9eb657caff333e34f96c1ae7e07d793d49b64cd9bdb2d12b1fd05cd0c20ec514e93e1c2dfb7b7e1ab30ea7539a05d2d7cc86783c718eb0b5e5f4a0d0eed19c65914044602f6660465c3aa5505020a1bf64f63fb1888dd8c56d942ea23f1515ccc19fca776560df3c51d04b294636ace474bc860c1654aa2dbd0f0af2eaf36bb190c4ea04d7dd3e278090c089469e97863079313edb28f2e62e726db76380c770d4de5d0baebea4613596068abcd6fbd186b1a2c7a8582861def81b02b884e9ee4a0311248fe586342132f1bc50b974695f1e019c3c8f15125226efda6611033126f90b073d13af741ea55fe296604dc49389fdbd1e2f7ff6d4f6c6d9f3569c302c4558b07e600e6f15dbf85e595c3c574febb0479263f78b810add5a57529e541d210f19e4e62e2f18322ab696bdf2e0655bb5139c472d3863116b9280ce013d8d3b5d05d429aa03c8f424a008695665a4826b1b5f930d38fc94f51344a0c204ff5c976a31fe6ed6786da6b250981d0cd3670a5694aacc5921574dabf31c2ae0ef34deb9121eb9acbf93afb942144191384c17eba8f125010ff7d770a6f1b1ee6100faed924fcfee3287cfc6d46b723380ab0fcfba593cd3f3b7026514ba8488d6442f123866905d1b9f77eecaf333ae3fc527469b81ca1943594d68189e5ee33101565ca70faeaf2e7cb2d51534a7344d672dd1836024139ffa81a1be98ba9c6aa8f140b7e5302809a21934770fdc5fb550a7add2710e8895fbf204bd7c1c7769b418ed7b17749f1882eee74165643f16a26619c31d9e00d0c30fd98788a16f75d540c5c58ded5687316bdf302275286bc0995be6fb38e767652d06f973f7e51c0c5d6a5e8dc80695077ce590cdee0bcb4c26452d13298eb6c53e68b115bcf64aef9505c212c58f57d8aad7b1d5e3e76767715047d2d49fa150648e9ade79d2d18cbc37521947814ba558279148a126d490b2837b6b153d825129fedbfa2833d35b22753099858ea43ee048abc1af09456c403566e2844d6c169252d236b4c47329c9ff23c9b95aaa13d293f6b0248f5c62303185a9f5dd218c341655dca58c12aa62dc8027c159b9a6854e88aa6a314e1d60a998e0471f1024a4c1c960ee1662c675379358a52fbb87a842ce31e57b957b40557c8029d6c5f86d54f854968b2811a9a33d6291acb620a59639d54d44f963826ef53584c25d4e1b6f25cc62916db47117bbf55a5eb36fc3766335db37d0dc43efde461949016251c4382f11fb3cda561b3b4b3231b0d18bd516b4061251fff3314cff5b2890b36b2b95b3036122b46d4579e1d69d83c5f06ce7e1342e554ca81bda5f42441630c89cd8535d90737c0ae471ea418d9b29038a96f8f6fb9aedb1c72ffce2b6e5f1ead354d6a29e3e24156254108f33d10bdfd46723c7ed108b0562f048dab94271847985b8ae8580575fc27145882854e1430881c8102637126a2d35bd0bb510bc0b9a091d3340857d2fa900294d62be88137fc4fd1f2ddb8a1d00c95d61e87908efc0e11d25168cfbd7f7651b3f485378dd7289af88e3e255e32d03518631a737d2543ef461b7edeab44a44355d8e647682826ef21c17f215624388ba7df04ab57480f"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000440), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x9}, 0x10}, 0x94)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6e8c0000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0)
socket$kcm(0x10, 0x5, 0x10)
r2 = socket$kcm(0x10, 0x0, 0x4)
sendmsg$kcm(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f00000013c0)}, 0x0)
perf_event_open(0x0, 0x0, 0xc, r1, 0x0)
r3 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)=r3, 0x8)
close(r3)
socket$kcm(0x11, 0x2, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x2)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc000b2c00db5b686158bbcfe8875a060300001123000000000000000000000000ac1414aa3b200007"], 0xfdef)

7.414352981s ago: executing program 0 (id=162):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f0000001f00), &(0x7f0000000540), 0x8, 0x15, 0x8, 0x0, 0x0}}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18010000001158000000000000800000850000006d00000095", @ANYRESOCT=0x0, @ANYRES8=r1, @ANYBLOB="f0812638935695cd6ab90439982f9e898d1ffeb3a842c077b70fe116e1a2b25a0df7b7c630b4c6737142aec9d1eb54c58cb6840430cd173ca920cc2c8f3b87936d6ade6ccd6dcec4de492ab74901ed7b914a28d0ffafb88bae1383b9e565eeb464c51141756386cc06058833b111e1aab883b6e08ef6533d90fe14af0658710953f8c38100d73d3a90e2168592cfd7649f3f333380bd8c03ef6beb94200115e1360ca4fec85c4e"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r2, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
r4 = socket$kcm(0x10, 0x2, 0x4)
close(r4)
r5 = socket$kcm(0x2, 0x922000000001, 0x106)
r6 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$kcm(r6, &(0x7f0000000340)={&(0x7f0000000040)=@x25, 0x80, 0x0}, 0x400c4)
setsockopt$sock_attach_bpf(r5, 0x29, 0x2, 0x0, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)
r9 = socket$kcm(0x23, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet={0x23, 0x0, 0xfc}, 0x80, 0x0}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, 0x0, 0x0)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x118)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast})
write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0xffdd)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x18, &(0x7f0000000dc0)=ANY=[@ANYBLOB="180000008f000000000000000900000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf090000000000005509010000000000a60000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa10000000000000701000000feffffb702000008000000b7030000080000008500000006000000bd0af4ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x60}, 0x94)

7.348234187s ago: executing program 2 (id=163):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe800000"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x838, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d00)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000001c80), &(0x7f0000001cc0)=r3}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001dc0)=@bpf_lsm={0x1d, 0x21, &(0x7f00000011c0)=ANY=[@ANYBLOB="cdbb060000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000008500"/27], &(0x7f0000001300)='syzkaller\x00', 0xfffffffe, 0xb8, &(0x7f0000001340)=""/184, 0x40f00, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001580)={0x4, 0x7}, 0x8, 0x10, &(0x7f0000001600)={0x0, 0x0, 0xffffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4], &(0x7f0000001d80), 0x10, 0xffff15d3}, 0x94)
socket$kcm(0x2c, 0x3, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000200)}, 0x20)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x5, 0x8}, 0xc)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000"], 0x48)
socket$kcm(0x2a, 0x2, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r5, 0x58, &(0x7f0000000580)}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0600000000000000800000000400000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000050000000400"/28], 0x50)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181004000000002000000000000000e000a000d00000002800200121f", 0x2e}], 0x1}, 0x0)

7.265605825s ago: executing program 3 (id=164):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100580, 0x0, 0x0, 0x0, 0x201, 0x9}, 0xffffffffffffffff, 0x4000000000000020, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.sched_load_balance\x00', 0x2, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)=ANY=[], 0x20)
write$cgroup_int(r1, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x76, 0x95, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2b, 0x80000, 0xa4, &(0x7f00000000c0))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xef, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0xb)
ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))

6.873288074s ago: executing program 1 (id=165):
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002e000b0fd25a806c8c6f94", 0xf}], 0x1}, 0x0)

6.19993673s ago: executing program 3 (id=166):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100580, 0x0, 0x0, 0x0, 0x201, 0x9}, 0xffffffffffffffff, 0x4000000000000020, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003f64ecb21ed7d74b542e43ae9f57f61af1c5b6016901992307df92d7c26b05a7da0582d208fd1f57c41cee38c7023e71dc864ab49f7894dd5ee29721d0625ee50c8aeca9b5090d85ff1c5df40229f0981507171aec7dc97abd981893d51a27e8a1033fa344fa3c6c27705648a66a47e0a1bc8fcede095704453c77f6c5370191ab55c423aae05729e69c987cf5f9aa2fd88c9e2114f53b9f82157c197397e43647b083db79f1f2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9}, 0x80)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x100400, 0x0, 0x0, 0x0, 0x0, 0x4, 0xf, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0xc, 0x100020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.sched_load_balance\x00', 0x2, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)=ANY=[], 0x20)
write$cgroup_int(r1, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x76, 0x95, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2b, 0x80000, 0xa4, &(0x7f00000000c0))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xef, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0xb)
ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))

6.198145861s ago: executing program 1 (id=174):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe800000"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x838, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d00)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000001c80), &(0x7f0000001cc0)=r3}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001dc0)=@bpf_lsm={0x1d, 0x21, &(0x7f00000011c0)=ANY=[@ANYBLOB="cdbb060000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000008500"/27], &(0x7f0000001300)='syzkaller\x00', 0xfffffffe, 0xb8, &(0x7f0000001340)=""/184, 0x40f00, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001580)={0x4, 0x7}, 0x8, 0x10, &(0x7f0000001600)={0x0, 0x0, 0xffffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4], &(0x7f0000001d80), 0x10, 0xffff15d3}, 0x94)
socket$kcm(0x2c, 0x3, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000200)}, 0x20)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x5, 0x8}, 0xc)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000"], 0x48)
socket$kcm(0x2a, 0x2, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r5, 0x58, &(0x7f0000000580)}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0600000000000000800000000400000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000050000000400"/28], 0x50)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181004000000002000000000000000e000a000d00000002800200121f", 0x2e}], 0x1}, 0x0)

6.197334161s ago: executing program 2 (id=167):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000006c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x700, 0x12)

6.073607493s ago: executing program 0 (id=168):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x2}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18050000000000000000000000000000851000000600000018290000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b70300000000000085000000190000009500000000000022"], &(0x7f0000000000)='GPL\x00', 0x5, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5c}, 0x4a)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
recvmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r3}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffa}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x64, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x2, 0x101, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0xffffffffffffffff], &(0x7f0000000540)=[{0x0, 0x4, 0x1, 0x4}, {0x0, 0x4, 0x2, 0xb}, {0x1, 0x1, 0xf, 0x2}], 0x10, 0x8}, 0x94)
r4 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)='<', 0x1}], 0x1}, 0x51)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
sendmsg$kcm(r4, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000080), 0x1}, 0x0)

6.00428719s ago: executing program 2 (id=169):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000010000008500000086000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
socketpair(0x1d, 0x2, 0x6, &(0x7f0000000300)={0x0, 0x0})
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000008c0)={0xffffffffffffffff, 0x0, 0x14a, 0x0, &(0x7f0000000680)="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", 0x0, 0xc, 0x0, 0x8, 0x0, &(0x7f0000000180)="5d8a8441d7b8778a", 0x0, 0x2, 0x0, 0x7c}, 0x50)
write$cgroup_pid(r2, &(0x7f0000000880), 0x12)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l')
r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x0, {0xa, 0x4e23, 0x996, @remote, 0x8}}, 0x80, 0x0, 0x3f, 0x0, 0x0, 0x68000000}, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0), 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r5}, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x17}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r7 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r7, 0x84, 0x1f, &(0x7f0000000100), 0x120)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x79}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x90)
write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[], 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1700000000000000000000000000000092efda8575ca7d60a139d8e44638", @ANYBLOB="0097442285"], 0x48)

3.431127663s ago: executing program 0 (id=170):
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x5}, {}, {0xffff, 0x0, 0x6}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x420008}]})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x60, 0x4, 0xfd}, {0x6, 0x3}]})
ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f00000016c0)=0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000a000000040000000100"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r2, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0xc, [@const={0x3, 0x0, 0x0, 0xa, 0x1}, @volatile={0x4}, @float={0x3, 0x0, 0x0, 0x10, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0x800000}}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x2e, 0x30, 0x61, 0x2e, 0x5f, 0x2e, 0x5f, 0x0, 0x30, 0x61]}}, &(0x7f00000001c0)=""/175, 0x6c, 0xaf, 0x1, 0x0, 0x10000}, 0x28)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000014c0)=@bpf_ext={0x1c, 0x1, &(0x7f0000000340)=@raw=[@call={0x85, 0x0, 0x0, 0x9b}], &(0x7f0000000380)='GPL\x00', 0xa77, 0x1000, &(0x7f00000003c0)=""/4096, 0x41000, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000013c0)={0x2, 0xc, 0x10, 0x8}, 0x10, 0x1e041, 0xffffffffffffffff, 0x8, &(0x7f0000001400)=[r1, r1, r1, r1], &(0x7f0000001440)=[{0x1, 0x2, 0x0, 0x6}, {0x4, 0x2, 0x5, 0x9}, {0x4, 0x2, 0x1, 0x5}, {0x5, 0x5, 0x7, 0x2}, {0x2, 0x3, 0x0, 0x9}, {0x4, 0x1, 0x8}, {0x5, 0x5, 0xd, 0x3}, {0x0, 0x2, 0x8, 0x7}], 0x10, 0x2}, 0x94)
r6 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff})
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x62)
setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x10, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="180000009d00000000000000080000009500000000000000185300000800620085200000040000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0xc, &(0x7f0000000100)=""/12, 0x40f00, 0x71, '\x00', r3, @fallback=0x7, r4, 0x8, &(0x7f00000002c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0xd, 0x8000, 0x4}, 0x10, 0x0, r5, 0x3, &(0x7f0000001580)=[r8, r1, r1, r1, r1, r1, r1, r1, r1], &(0x7f00000015c0)=[{0x3, 0x3, 0x10, 0x5}, {0x4, 0x3, 0xa, 0x8}, {0x3, 0x5, 0x3, 0x7}], 0x10, 0x7}, 0x94)
r9 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x890b, &(0x7f0000000000))

3.35779413s ago: executing program 2 (id=171):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100580, 0x0, 0x0, 0x0, 0x201, 0x9}, 0xffffffffffffffff, 0x4000000000000020, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003f64ecb21ed7d74b542e43ae9f57f61af1c5b6016901992307df92d7c26b05a7da0582d208fd1f57c41cee38c7023e71dc864ab49f7894dd5ee29721d0625ee50c8aeca9b5090d85ff1c5df40229f0981507171aec7dc97abd981893d51a27e8a1033fa344fa3c6c27705648a66a47e0a1bc8fcede095704453c77f6c5370191ab55c423aae05729e69c987cf5f9aa2fd88c9e2114f53b9f82157c197397e43647b083db79f1f2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9}, 0x80)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x100400, 0x0, 0x0, 0x0, 0x0, 0x4, 0xf, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0xc, 0x100020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.sched_load_balance\x00', 0x2, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)=ANY=[], 0x20)
write$cgroup_int(r1, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x76, 0x95, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2b, 0x80000, 0xa4, &(0x7f00000000c0))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xef, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0xb)
ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))

3.35631216s ago: executing program 1 (id=180):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe800000"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x838, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d00)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000001c80), &(0x7f0000001cc0)=r3}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001dc0)=@bpf_lsm={0x1d, 0x21, &(0x7f00000011c0)=ANY=[@ANYBLOB="cdbb060000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000008500"/27], &(0x7f0000001300)='syzkaller\x00', 0xfffffffe, 0xb8, &(0x7f0000001340)=""/184, 0x40f00, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001580)={0x4, 0x7}, 0x8, 0x10, &(0x7f0000001600)={0x0, 0x0, 0xffffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4], &(0x7f0000001d80), 0x10, 0xffff15d3}, 0x94)
socket$kcm(0x2c, 0x3, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000200)}, 0x20)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x5, 0x8}, 0xc)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000"], 0x48)
socket$kcm(0x2a, 0x2, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r5, 0x58, &(0x7f0000000580)}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0600000000000000800000000400000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000050000000400"/28], 0x50)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181004000000002000000000000000e000a000d00000002800200121f", 0x2e}], 0x1}, 0x0)

3.304557765s ago: executing program 3 (id=172):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x10, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000440), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x9}, 0x10}, 0x94)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6e8c0000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0)
socket$kcm(0x10, 0x5, 0x10)
r2 = socket$kcm(0x10, 0x0, 0x4)
sendmsg$kcm(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f00000013c0)}, 0x0)
perf_event_open(0x0, 0x0, 0xc, r1, 0x0)
r3 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)=r3, 0x8)
close(r3)
socket$kcm(0x11, 0x2, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x2)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc000b2c00db5b686158bbcfe8875a060300001123000000000000000000000000ac1414aa3b200007"], 0xfdef)

281.555623ms ago: executing program 0 (id=173):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000010000008500000086000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
socketpair(0x1d, 0x2, 0x6, &(0x7f0000000300)={0x0, 0x0})
write$cgroup_pid(r2, &(0x7f0000000880), 0x12)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l')
r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x0, {0xa, 0x4e23, 0x996, @remote, 0x8}}, 0x80, 0x0, 0x3f, 0x0, 0x0, 0x68000000}, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0), 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r5}, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x17}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r7 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r7, 0x84, 0x1f, &(0x7f0000000100), 0x120)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x79}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x90)
write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[], 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1700000000000000000000000000000092efda8575ca7d60a139d8e44638", @ANYBLOB="0097442285"], 0x48)

281.106453ms ago: executing program 3 (id=175):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100580, 0x0, 0x0, 0x0, 0x201, 0x9}, 0xffffffffffffffff, 0x4000000000000020, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.sched_load_balance\x00', 0x2, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)=ANY=[], 0x20)
write$cgroup_int(r1, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x76, 0x95, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2b, 0x80000, 0xa4, &(0x7f00000000c0))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xef, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0xb)
ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))

267.821404ms ago: executing program 1 (id=176):
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002e000b0fd25a806c8c6f94", 0xf}], 0x1}, 0x0)

161.413685ms ago: executing program 2 (id=177):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f0000001f00), &(0x7f0000000540), 0x8, 0x15, 0x8, 0x0, 0x0}}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18010000001158000000000000800000850000006d00000095", @ANYRESOCT=0x0, @ANYRES8=r1, @ANYBLOB="f0812638935695cd6ab90439982f9e898d1ffeb3a842c077b70fe116e1a2b25a0df7b7c630b4c6737142aec9d1eb54c58cb6840430cd173ca920cc2c8f3b87936d6ade6ccd6dcec4de492ab74901ed7b914a28d0ffafb88bae1383b9e565eeb464c51141756386cc06058833b111e1aab883b6e08ef6533d90fe14af0658710953f8c38100d73d3a90e2168592cfd7649f3f333380bd8c03ef6beb94200115e1360ca4fec85c4e"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r2, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
r4 = socket$kcm(0x10, 0x2, 0x4)
close(r4)
r5 = socket$kcm(0x2, 0x922000000001, 0x106)
r6 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$kcm(r6, &(0x7f0000000340)={&(0x7f0000000040)=@x25, 0x80, 0x0}, 0x400c4)
setsockopt$sock_attach_bpf(r5, 0x29, 0x2, 0x0, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)
r9 = socket$kcm(0x23, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet={0x23, 0x0, 0xfc}, 0x80, 0x0}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, 0x0, 0x0)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x118)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast})
write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0xffdd)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x18, &(0x7f0000000dc0)=ANY=[@ANYBLOB="180000008f000000000000000900000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf090000000000005509010000000000a60000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa10000000000000701000000feffffb702000008000000b7030000080000008500000006000000bd0af4ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x60}, 0x94)

0s ago: executing program 1 (id=178):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000006c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x700, 0x12)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.30' (ED25519) to the list of known hosts.
[  327.323890][ T5817] cgroup: Unknown subsys name 'net'
[  327.487881][ T5817] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[  329.263783][ T5817] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  330.924462][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  330.928734][   T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  330.934662][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  330.942864][   T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  330.954062][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  330.954855][   T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  330.962252][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  330.970301][   T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  330.976750][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  330.988273][   T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  330.991360][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  330.998168][   T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  331.004343][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  331.011844][   T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  331.017796][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  331.026183][   T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  331.034362][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  331.046246][ T5840] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  331.054018][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  331.058830][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  331.061845][ T5840] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  331.083478][ T5840] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  331.091743][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  331.100094][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  331.585683][ T5827] chnl_net:caif_netlink_parms(): no params data found
[  331.726994][ T5828] chnl_net:caif_netlink_parms(): no params data found
[  331.786367][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[  331.795597][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[  331.804663][ T5827] bridge_slave_0: entered allmulticast mode
[  331.813403][ T5827] bridge_slave_0: entered promiscuous mode
[  331.878297][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[  331.886226][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[  331.893474][ T5827] bridge_slave_1: entered allmulticast mode
[  331.901293][ T5827] bridge_slave_1: entered promiscuous mode
[  331.961608][ T5830] chnl_net:caif_netlink_parms(): no params data found
[  332.003961][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  332.039255][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[  332.048721][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[  332.056162][ T5828] bridge_slave_0: entered allmulticast mode
[  332.063762][ T5828] bridge_slave_0: entered promiscuous mode
[  332.076340][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[  332.084155][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[  332.091561][ T5828] bridge_slave_1: entered allmulticast mode
[  332.098857][ T5828] bridge_slave_1: entered promiscuous mode
[  332.107431][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  332.142020][ T5829] chnl_net:caif_netlink_parms(): no params data found
[  332.237380][ T5827] team0: Port device team_slave_0 added
[  332.270786][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  332.284035][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  332.295313][ T5827] team0: Port device team_slave_1 added
[  332.333207][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[  332.342391][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[  332.349656][ T5830] bridge_slave_0: entered allmulticast mode
[  332.356707][ T5830] bridge_slave_0: entered promiscuous mode
[  332.396444][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[  332.404197][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[  332.411611][ T5830] bridge_slave_1: entered allmulticast mode
[  332.420298][ T5830] bridge_slave_1: entered promiscuous mode
[  332.442478][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[  332.449798][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  332.476659][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  332.490816][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[  332.498093][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  332.525014][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  332.562244][ T5828] team0: Port device team_slave_0 added
[  332.610034][ T5828] team0: Port device team_slave_1 added
[  332.647208][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  332.684578][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[  332.692215][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[  332.699673][ T5829] bridge_slave_0: entered allmulticast mode
[  332.706871][ T5829] bridge_slave_0: entered promiscuous mode
[  332.717096][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  332.771311][ T5827] hsr_slave_0: entered promiscuous mode
[  332.780446][ T5827] hsr_slave_1: entered promiscuous mode
[  332.787838][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[  332.796062][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[  332.803709][ T5829] bridge_slave_1: entered allmulticast mode
[  332.811520][ T5829] bridge_slave_1: entered promiscuous mode
[  332.832609][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[  332.839713][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  332.865949][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  332.881932][ T5830] team0: Port device team_slave_0 added
[  332.935589][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  332.948164][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[  332.955309][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  332.987392][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  333.007950][ T5830] team0: Port device team_slave_1 added
[  333.044390][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  333.139624][ T5832] Bluetooth: hci1: command tx timeout
[  333.144663][ T5829] team0: Port device team_slave_0 added
[  333.145509][ T5838] Bluetooth: hci0: command tx timeout
[  333.171496][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[  333.179588][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  333.209750][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  333.231485][ T5829] team0: Port device team_slave_1 added
[  333.233325][ T5832] Bluetooth: hci2: command tx timeout
[  333.240020][ T5838] Bluetooth: hci3: command tx timeout
[  333.254003][ T5828] hsr_slave_0: entered promiscuous mode
[  333.262909][ T5828] hsr_slave_1: entered promiscuous mode
[  333.269458][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  333.277370][ T5828] Cannot create hsr debugfs directory
[  333.283986][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[  333.291845][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  333.319374][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  333.466793][ T5830] hsr_slave_0: entered promiscuous mode
[  333.474026][ T5830] hsr_slave_1: entered promiscuous mode
[  333.480577][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  333.488242][ T5830] Cannot create hsr debugfs directory
[  333.495415][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[  333.503498][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  333.530953][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  333.544718][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[  333.552158][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  333.578818][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  333.756947][ T5829] hsr_slave_0: entered promiscuous mode
[  333.764104][ T5829] hsr_slave_1: entered promiscuous mode
[  333.770852][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  333.778465][ T5829] Cannot create hsr debugfs directory
[  334.063270][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  334.077226][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  334.088206][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  334.103195][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  334.182786][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  334.195180][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  334.219461][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  334.229808][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  334.309551][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  334.343981][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  334.354620][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  334.367969][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  334.469981][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  334.481620][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  334.494453][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  334.507947][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  334.575663][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[  334.647722][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[  334.687179][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  334.694658][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  334.706053][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  334.713305][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  334.771750][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[  334.800167][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[  334.818018][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  334.825250][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  334.852465][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  334.859706][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  334.901754][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[  334.942545][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[  334.983325][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[  334.990601][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[  335.004572][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[  335.011861][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[  335.104917][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[  335.176465][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[  335.219486][ T5838] Bluetooth: hci0: command tx timeout
[  335.219499][ T5832] Bluetooth: hci1: command tx timeout
[  335.253856][ T2990] bridge0: port 1(bridge_slave_0) entered blocking state
[  335.261151][ T2990] bridge0: port 1(bridge_slave_0) entered forwarding state
[  335.298328][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  335.305795][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  335.313659][ T5832] Bluetooth: hci2: command tx timeout
[  335.320167][ T5838] Bluetooth: hci3: command tx timeout
[  335.427865][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[  335.592297][ T5827] veth0_vlan: entered promiscuous mode
[  335.616240][ T5827] veth1_vlan: entered promiscuous mode
[  335.692325][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[  335.792555][ T5827] veth0_macvtap: entered promiscuous mode
[  335.824088][ T5827] veth1_macvtap: entered promiscuous mode
[  335.874031][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[  335.905701][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[  335.940697][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[  335.950965][ T5828] veth0_vlan: entered promiscuous mode
[  335.974065][ T5827] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  335.983257][ T5827] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  335.992655][ T5827] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  336.002733][ T5827] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  336.076693][ T5830] veth0_vlan: entered promiscuous mode
[  336.090687][ T5828] veth1_vlan: entered promiscuous mode
[  336.108306][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[  336.134152][ T5830] veth1_vlan: entered promiscuous mode
[  336.204262][ T5851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  336.221655][ T5851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  336.290631][ T5828] veth0_macvtap: entered promiscuous mode
[  336.315384][ T5828] veth1_macvtap: entered promiscuous mode
[  336.317832][ T5904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  336.341819][ T5904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  336.382637][ T5830] veth0_macvtap: entered promiscuous mode
[  336.391594][ T5829] veth0_vlan: entered promiscuous mode
[  336.414014][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  336.433473][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  336.447184][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[  336.462835][ T5830] veth1_macvtap: entered promiscuous mode
[  336.483248][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  336.493883][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  336.506160][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[  336.524996][ T5829] veth1_vlan: entered promiscuous mode
[  336.555819][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  336.568442][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  336.583533][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  336.595785][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  336.642654][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  336.654062][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  336.665356][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  336.676553][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  336.693030][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[  336.708226][ T5921] Zero length message leads to an empty skb
[  336.735114][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  336.748316][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  336.763943][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  336.775060][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  336.788037][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[  336.827470][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  336.852423][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  336.861585][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  336.880566][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  336.924479][ T5829] veth0_macvtap: entered promiscuous mode
[  336.950242][ T5829] veth1_macvtap: entered promiscuous mode
[  337.081871][ T2990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  337.104386][ T2990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  337.131668][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  337.144619][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.155017][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  337.166197][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.176184][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  337.187614][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.201351][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[  337.222894][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  337.233472][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  337.238597][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  337.245176][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.262742][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  337.273567][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.283574][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  337.294165][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.304510][ T5838] Bluetooth: hci0: command tx timeout
[  337.307553][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[  337.311108][ T5838] Bluetooth: hci1: command tx timeout
[  337.353971][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  337.363112][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  337.372411][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  337.381419][ T5838] Bluetooth: hci3: command tx timeout
[  337.386718][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  337.396167][ T5838] Bluetooth: hci2: command tx timeout
[  337.423189][ T5904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  337.431976][ T5904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  337.513909][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  337.534807][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  337.619678][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  337.627668][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  337.710734][ T5930] netlink: 'syz.3.11': attribute type 7 has an invalid length.
[  337.767097][    C1] hrtimer: interrupt took 113898 ns
[  337.870003][ T5851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  337.887041][ T5851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  338.027942][ T5928] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  339.379823][ T5838] Bluetooth: hci0: command tx timeout
[  339.395664][ T5832] Bluetooth: hci1: command tx timeout
[  339.473189][ T5832] Bluetooth: hci3: command tx timeout
[  339.478856][ T5838] Bluetooth: hci2: command tx timeout
[  339.745549][ T5928] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  339.773553][ T5940] netlink: 'syz.1.6': attribute type 10 has an invalid length.
[  339.817667][ T5940] veth1_macvtap: left promiscuous mode
[  339.861571][ T5940] bridge0: port 3(macsec0) entered blocking state
[  339.868304][ T5940] bridge0: port 3(macsec0) entered disabled state
[  339.914398][ T5940] macsec0: entered allmulticast mode
[  339.923647][ T5940] macsec0: entered promiscuous mode
[  340.034861][ T5945] raw_sendmsg: syz.0.1 forgot to set AF_INET. Fix it!
[  340.080938][ T5945] syzkaller0: entered promiscuous mode
[  340.086505][ T5945] syzkaller0: entered allmulticast mode
[  340.139201][ T5945] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  340.664342][ T5961] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.10'.
[  341.776406][ T5965] netlink: 'syz.1.12': attribute type 10 has an invalid length.
[  342.116914][ T5972] netlink: 'syz.1.14': attribute type 7 has an invalid length.
[  342.274700][   T58] wlan1: Trigger new scan to find an IBSS to join
[  342.725350][ T5981] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  345.309436][   T12] wlan1: Trigger new scan to find an IBSS to join
[  346.080279][ T5993] netlink: 'syz.3.22': attribute type 10 has an invalid length.
[  346.135544][ T5993] veth1_macvtap: left promiscuous mode
[  346.201714][ T5993] bridge0: port 3(macsec0) entered blocking state
[  346.210408][ T5993] bridge0: port 3(macsec0) entered disabled state
[  346.217397][ T5993] macsec0: entered allmulticast mode
[  346.227556][ T5993] macsec0: entered promiscuous mode
[  346.244046][ T5995] netlink: 'syz.0.20': attribute type 10 has an invalid length.
[  346.254231][ T5995] veth1_macvtap: left promiscuous mode
[  346.279556][ T5995] bridge0: port 3(macsec0) entered blocking state
[  346.286175][ T5995] bridge0: port 3(macsec0) entered disabled state
[  346.318097][ T5995] macsec0: entered allmulticast mode
[  346.332552][ T5995] macsec0: entered promiscuous mode
[  346.682296][ T6010] netlink: 'syz.0.26': attribute type 7 has an invalid length.
[  346.810588][ T6009] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.25'.
[  347.430322][ T6021] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  347.651142][ T6034] netlink: 'syz.1.31': attribute type 10 has an invalid length.
[  348.294885][ T5904] wlan1: Trigger new scan to find an IBSS to join
[  348.889914][ T6046] netlink: 'syz.1.39': attribute type 7 has an invalid length.
[  349.240388][ T5926] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00
[  349.622488][ T6057] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.41'.
[  350.167349][ T6068] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  350.261824][ T2990] wlan1: Trigger new scan to find an IBSS to join
[  351.126397][ T6073] netlink: 'syz.2.46': attribute type 10 has an invalid length.
[  351.136568][ T6073] veth1_macvtap: left promiscuous mode
[  351.160067][ T6073] bridge0: port 3(macsec0) entered blocking state
[  351.198824][ T6073] bridge0: port 3(macsec0) entered disabled state
[  351.205850][ T6073] macsec0: entered allmulticast mode
[  351.215174][   T12] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00
[  351.223778][ T6073] macsec0: entered promiscuous mode
[  351.455387][ T6082] netlink: 'syz.2.50': attribute type 7 has an invalid length.
[  351.796502][ T6089] syzkaller0: entered promiscuous mode
[  351.803609][ T6089] syzkaller0: entered allmulticast mode
[  351.994224][ T6091] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.54'.
[  352.261052][   T58] wlan1: Trigger new scan to find an IBSS to join
[  352.788978][ T6100] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  352.920626][ T6106] netlink: 'syz.2.58': attribute type 10 has an invalid length.
[  354.137359][ T6116] netlink: 'syz.1.62': attribute type 7 has an invalid length.
[  354.314614][ T6122] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.65'.
[  354.340049][ T6124] syzkaller0: entered promiscuous mode
[  354.346064][ T6124] syzkaller0: entered allmulticast mode
[  354.931230][ T6134] syzkaller0: entered promiscuous mode
[  354.940536][ T6134] syzkaller0: entered allmulticast mode
[  355.062388][ T6138] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  355.309220][ T2990] wlan1: Trigger new scan to find an IBSS to join
[  356.291733][ T5926] wlan1: Trigger new scan to find an IBSS to join
[  357.219252][   T58] wlan1: Trigger new scan to find an IBSS to join
[  357.875195][   T58] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00
[  357.907379][ T6145] netlink: 'syz.1.73': attribute type 10 has an invalid length.
[  357.915461][ T6147] netlink: 'syz.3.75': attribute type 7 has an invalid length.
[  358.203613][ T6153] syzkaller0: entered promiscuous mode
[  358.246656][ T6153] syzkaller0: entered allmulticast mode
[  358.370746][ T6155] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.78'.
[  358.777507][ T6164] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  359.082057][ T6171] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.92'.
[  359.237697][ T6177] netlink: 'syz.3.85': attribute type 10 has an invalid length.
[  360.263904][ T5871] wlan1: Trigger new scan to find an IBSS to join
[  360.273876][   T12] wlan1: Trigger new scan to find an IBSS to join
[  361.309098][ T5926] wlan1: Trigger new scan to find an IBSS to join
[  361.394775][ T5904] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00
[  361.425549][ T6179] netlink: 'syz.2.86': attribute type 7 has an invalid length.
[  361.569403][ T6183] syzkaller0: entered promiscuous mode
[  361.574965][ T6183] syzkaller0: entered allmulticast mode
[  361.754789][ T6185] syzkaller0: entered promiscuous mode
[  361.771074][ T6185] syzkaller0: entered allmulticast mode
[  362.469373][ T6195] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  364.133996][ T6204] netlink: 'syz.0.97': attribute type 7 has an invalid length.
[  364.142371][ T6205] netlink: 'syz.1.96': attribute type 10 has an invalid length.
[  364.489082][ T6214] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.99'.
[  364.501809][ T6219] syzkaller0: entered promiscuous mode
[  364.507356][ T6219] syzkaller0: entered allmulticast mode
[  364.726699][ T6223] syzkaller0: entered promiscuous mode
[  364.739361][ T6223] syzkaller0: entered allmulticast mode
[  364.860505][ T6225] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  365.299177][ T5904] wlan1: Trigger new scan to find an IBSS to join
[  366.272924][ T2990] wlan1: Trigger new scan to find an IBSS to join
[  366.338072][ T6234] netlink: 'syz.3.108': attribute type 7 has an invalid length.
[  366.362813][ T6238] netlink: 'syz.1.107': attribute type 10 has an invalid length.
[  367.016827][ T6249] syzkaller0: entered promiscuous mode
[  367.022648][ T6249] syzkaller0: entered allmulticast mode
[  367.270746][ T6255] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  367.302704][ T5904] wlan1: Trigger new scan to find an IBSS to join
[  367.368109][ T5871] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00
[  367.718575][ T6260] netlink: 'syz.0.117': attribute type 7 has an invalid length.
[  369.186100][ T6267] netlink: 'syz.2.118': attribute type 10 has an invalid length.
[  369.459192][ T6269] syzkaller0: entered promiscuous mode
[  369.474536][ T6269] syzkaller0: entered allmulticast mode
[  369.873708][ T6278] syzkaller0: entered promiscuous mode
[  369.881804][ T6278] syzkaller0: entered allmulticast mode
[  369.990648][ T6281] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  370.266428][ T5926] wlan1: Trigger new scan to find an IBSS to join
[  370.433136][ T6287] netlink: 'syz.0.127': attribute type 7 has an invalid length.
[  371.229239][ T2990] wlan1: Trigger new scan to find an IBSS to join
[  371.236094][ T2990] wlan1: Trigger new scan to find an IBSS to join
[  371.418252][ T5904] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00
[  371.643811][ T6302] netlink: 'syz.2.131': attribute type 10 has an invalid length.
[  372.270895][ T5871] wlan1: Trigger new scan to find an IBSS to join
[  374.428383][ T5871] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00
[  374.473733][   T12] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00
[  374.771946][ T6320] netlink: 'syz.3.137': attribute type 7 has an invalid length.
[  375.012926][ T6322] syzkaller0: entered promiscuous mode
[  375.020034][ T6322] syzkaller0: entered allmulticast mode
[  375.042778][ T6324] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  375.100999][ T6328] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  376.480035][ T6348] syzkaller0: entered promiscuous mode
[  376.493934][ T6348] syzkaller0: entered allmulticast mode
[  376.505405][ T6353] netlink: 'syz.1.149': attribute type 7 has an invalid length.
[  376.648673][ T6354] netlink: 'syz.2.148': attribute type 10 has an invalid length.
[  377.250529][ T5904] wlan1: Trigger new scan to find an IBSS to join
[  377.303180][   T12] wlan1: Trigger new scan to find an IBSS to join
[  379.043269][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  379.058876][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  379.848331][ T6360] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  379.888313][ T6364] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  379.945916][ T6367] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  380.744006][ T6384] netlink: 'syz.3.161': attribute type 7 has an invalid length.
[  380.935761][ T6388] syzkaller0: entered promiscuous mode
[  380.954747][ T6388] syzkaller0: entered allmulticast mode
[  381.329114][ T6395] netlink: 'syz.2.163': attribute type 10 has an invalid length.
[  382.267017][   T12] wlan1: Trigger new scan to find an IBSS to join
[  382.273759][ T5904] wlan1: Trigger new scan to find an IBSS to join
[  382.280628][ T5943] wlan1: Trigger new scan to find an IBSS to join
[  382.287225][ T5943] wlan1: Trigger new scan to find an IBSS to join
[  382.332420][ T6410] netlink: 'syz.1.174': attribute type 10 has an invalid length.
[  384.755145][   T58] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00
[  385.080769][ T6428] netlink: 'syz.3.172': attribute type 7 has an invalid length.
[  387.231118][   T58] wlan1: Trigger new scan to find an IBSS to join
[  387.237805][ T5871] wlan1: Trigger new scan to find an IBSS to join
[  387.244513][ T5851] wlan1: Trigger new scan to find an IBSS to join
[  387.794271][ T6424] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  387.879140][ T6431] netlink: 'syz.1.180': attribute type 10 has an invalid length.
[  388.179961][ T5851] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00
[  388.213562][ T5904] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00
[  388.221228][ T5871] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00
[  388.267943][ T6436] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  388.279786][ T5871] ------------[ cut here ]------------
[  388.285533][ T5871] WARNING: CPU: 0 PID: 5871 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3c2/0x430
[  388.295514][ T5871] Modules linked in:
[  388.299649][ T5871] CPU: 0 PID: 5871 Comm: kworker/u4:2 Not tainted syzkaller #0
[  388.307362][ T5871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  388.317639][ T5871] Workqueue: cfg80211 cfg80211_event_work
[  388.323500][ T5871] RIP: 0010:__cfg80211_ibss_joined+0x3c2/0x430
[  388.329815][ T5871] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 37 61 b4 f7 0f 0b eb c3 e8 2e 61 b4 f7 <0f> 0b 4c 8b 6c 24 18 eb b5 e8 20 61 b4 f7 0f 0b e9 e8 fd ff ff e8
[  388.350486][ T5871] RSP: 0018:ffffc90004aafa20 EFLAGS: 00010293
[  388.356608][ T5871] RAX: ffffffff89d129a2 RBX: dffffc0000000000 RCX: ffff88802c00da00
[  388.364951][ T5871] RDX: 0000000000000000 RSI: ffffffff8aaabce0 RDI: ffffffff8afc6400
[  388.373097][ T5871] RBP: ffffc90004aafaf8 R08: ffffffff90da756f R09: 1ffffffff21b4ead
[  388.381183][ T5871] R10: dffffc0000000000 R11: fffffbfff21b4eae R12: ffff88805eed4c90
[  388.389238][ T5871] R13: 1ffff92000955f4c R14: ffff88801df635b8 R15: 000000000000001f
[  388.397441][ T5871] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  388.406482][ T5871] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  388.413185][ T5871] CR2: 00007fa2cfbb12f8 CR3: 0000000062a62000 CR4: 00000000003506f0
[  388.421438][ T5871] Call Trace:
[  388.424770][ T5871]  <TASK>
[  388.427784][ T5871]  ? mutex_lock_nested+0x20/0x20
[  388.432964][ T5871]  ? trace_rdev_return_void+0x1c0/0x1c0
[  388.439405][ T5871]  cfg80211_process_wdev_events+0x3bc/0x550
[  388.446347][ T5871]  cfg80211_process_rdev_events+0xa1/0x110
[  388.452456][ T5871]  cfg80211_event_work+0x2f/0x40
[  388.457518][ T5871]  ? process_scheduled_works+0x957/0x15b0
[  388.463365][ T5871]  process_scheduled_works+0xa45/0x15b0
[  388.469142][ T5871]  ? assign_work+0x400/0x400
[  388.473980][ T5871]  ? assign_work+0x39e/0x400
[  388.478755][ T5871]  worker_thread+0xa55/0xfc0
[  388.483407][ T5871]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[  388.490133][ T5871]  ? _raw_spin_unlock+0x40/0x40
[  388.495040][ T5871]  ? _raw_spin_unlock_irqrestore+0x86/0x110
[  388.501059][ T5871]  kthread+0x2fa/0x390
[  388.505195][ T5871]  ? pr_cont_work+0x560/0x560
[  388.510018][ T5871]  ? kthread_blkcg+0xd0/0xd0
[  388.514662][ T5871]  ret_from_fork+0x48/0x80
[  388.519190][ T5871]  ? kthread_blkcg+0xd0/0xd0
[  388.523915][ T5871]  ret_from_fork_asm+0x11/0x20
[  388.528833][ T5871]  </TASK>
[  388.531894][ T5871] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  388.539656][ T5871] CPU: 0 PID: 5871 Comm: kworker/u4:2 Not tainted syzkaller #0
[  388.547241][ T5871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  388.557452][ T5871] Workqueue: cfg80211 cfg80211_event_work
[  388.563208][ T5871] Call Trace:
[  388.566512][ T5871]  <TASK>
[  388.569468][ T5871]  dump_stack_lvl+0x16c/0x230
[  388.574175][ T5871]  ? show_regs_print_info+0x20/0x20
[  388.579573][ T5871]  ? load_image+0x3b0/0x3b0
[  388.584118][ T5871]  panic+0x2c0/0x710
[  388.588051][ T5871]  ? bpf_jit_dump+0xd0/0xd0
[  388.592679][ T5871]  ? ret_from_fork_asm+0x11/0x20
[  388.597656][ T5871]  __warn+0x2e0/0x470
[  388.601657][ T5871]  ? __cfg80211_ibss_joined+0x3c2/0x430
[  388.607223][ T5871]  ? __cfg80211_ibss_joined+0x3c2/0x430
[  388.612783][ T5871]  report_bug+0x2be/0x4f0
[  388.617261][ T5871]  ? __cfg80211_ibss_joined+0x3c2/0x430
[  388.622933][ T5871]  ? __cfg80211_ibss_joined+0x3c2/0x430
[  388.628524][ T5871]  ? __cfg80211_ibss_joined+0x3c4/0x430
[  388.634107][ T5871]  handle_bug+0xcf/0x120
[  388.638370][ T5871]  exc_invalid_op+0x1a/0x50
[  388.642897][ T5871]  asm_exc_invalid_op+0x1a/0x20
[  388.647767][ T5871] RIP: 0010:__cfg80211_ibss_joined+0x3c2/0x430
[  388.653942][ T5871] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 37 61 b4 f7 0f 0b eb c3 e8 2e 61 b4 f7 <0f> 0b 4c 8b 6c 24 18 eb b5 e8 20 61 b4 f7 0f 0b e9 e8 fd ff ff e8
[  388.673563][ T5871] RSP: 0018:ffffc90004aafa20 EFLAGS: 00010293
[  388.679649][ T5871] RAX: ffffffff89d129a2 RBX: dffffc0000000000 RCX: ffff88802c00da00
[  388.687633][ T5871] RDX: 0000000000000000 RSI: ffffffff8aaabce0 RDI: ffffffff8afc6400
[  388.695621][ T5871] RBP: ffffc90004aafaf8 R08: ffffffff90da756f R09: 1ffffffff21b4ead
[  388.703781][ T5871] R10: dffffc0000000000 R11: fffffbfff21b4eae R12: ffff88805eed4c90
[  388.712028][ T5871] R13: 1ffff92000955f4c R14: ffff88801df635b8 R15: 000000000000001f
[  388.720026][ T5871]  ? __cfg80211_ibss_joined+0x3c2/0x430
[  388.725622][ T5871]  ? mutex_lock_nested+0x20/0x20
[  388.730672][ T5871]  ? trace_rdev_return_void+0x1c0/0x1c0
[  388.736238][ T5871]  cfg80211_process_wdev_events+0x3bc/0x550
[  388.742160][ T5871]  cfg80211_process_rdev_events+0xa1/0x110
[  388.747993][ T5871]  cfg80211_event_work+0x2f/0x40
[  388.752958][ T5871]  ? process_scheduled_works+0x957/0x15b0
[  388.758723][ T5871]  process_scheduled_works+0xa45/0x15b0
[  388.764311][ T5871]  ? assign_work+0x400/0x400
[  388.768941][ T5871]  ? assign_work+0x39e/0x400
[  388.773641][ T5871]  worker_thread+0xa55/0xfc0
[  388.778279][ T5871]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[  388.784325][ T5871]  ? _raw_spin_unlock+0x40/0x40
[  388.789191][ T5871]  ? _raw_spin_unlock_irqrestore+0x86/0x110
[  388.795312][ T5871]  kthread+0x2fa/0x390
[  388.799424][ T5871]  ? pr_cont_work+0x560/0x560
[  388.804155][ T5871]  ? kthread_blkcg+0xd0/0xd0
[  388.808770][ T5871]  ret_from_fork+0x48/0x80
[  388.813213][ T5871]  ? kthread_blkcg+0xd0/0xd0
[  388.817936][ T5871]  ret_from_fork_asm+0x11/0x20
[  388.822752][ T5871]  </TASK>
[  388.826077][ T5871] Kernel Offset: disabled
[  388.830514][ T5871] Rebooting in 86400 seconds..