last executing test programs:

1m21.828248846s ago: executing program 2 (id=124):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002000000085000000b200000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m21.767943078s ago: executing program 2 (id=126):
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x2000000}, 0xc)

1m21.665365724s ago: executing program 2 (id=130):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x10005, [{0x2, 0x5, 0xa}]}, @var={0x4, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x30, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f00000001c0)=""/257, 0x4a, 0x101, 0x6}, 0x28)

1m21.608626027s ago: executing program 2 (id=133):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xfff}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0)

1m21.608368606s ago: executing program 1 (id=134):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)

1m21.535187639s ago: executing program 1 (id=135):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r1, 0x6, 0xd, 0x0, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x24, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002c000b35d25a806f8c6394f90124fc60", 0x14}], 0x1}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x8982, 0x20000000)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbfb, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r5 = openat$cgroup(r4, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0)
mkdirat$cgroup(r5, &(0x7f0000000300)='syz0\x00', 0x1ff)
r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000004000000040000000c0000000000000043", @ANYRES32, @ANYRES32=r6, @ANYRES32, @ANYBLOB="0200000016bca5b601a6a041005907df2d01"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a00100000000280000012", 0x2d}], 0x1}, 0x0)

1m21.440746142s ago: executing program 0 (id=138):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2a, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x891b, 0x0)

1m21.360919111s ago: executing program 2 (id=139):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)

1m21.36038338s ago: executing program 0 (id=140):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000f1fffffffffffff50000"], 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f0000001040)={0x0, r0}, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000001000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r1}, 0xc)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000005feffff720af0fff8ffffff71a4f0ff0000000071100000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe040026ca7203000000000000b500f8ffff9000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350844ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d"], 0x0, 0x7}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_query={{}, {}, {0x85, 0x0, 0x0, 0x9d}}]}, &(0x7f0000000100)='GPL\x00'}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8932, &(0x7f0000000000)={'netdevsim0\x00'})
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000001000000010000002200"], 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f9, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x0, 0x0}, 0x10)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

1m21.358648513s ago: executing program 2 (id=141):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x100002e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x2b, 0x1, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r4, 0x400454ce, 0xa)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
sendmsg$inet(r3, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818)
close(r1)
close(r3)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000000000000850000007b00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000014000000140000000a00000000000000010000060400000006000000000000000000000000005f"], 0x0, 0x36}, 0x28)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r7}, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
perf_event_open(&(0x7f0000004600)={0x2, 0x80, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x100000005, 0x82c0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x3}, 0xecf5, 0x3, 0x10000000, 0x0, 0xd6ae, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xffdfffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r8, &(0x7f00000001c0)={'b', ' *:* ', 'm\x00'}, 0x8)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0xfe33)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)

1m21.280243055s ago: executing program 1 (id=142):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10)

1m21.27986685s ago: executing program 0 (id=143):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
setsockopt$sock_attach_bpf(r0, 0x1, 0xe, &(0x7f0000000000), 0x4)

1m21.279707788s ago: executing program 1 (id=144):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
syz_open_procfs$namespace(0x0, &(0x7f0000000000))

1m21.204572414s ago: executing program 0 (id=145):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff2, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407ffd, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x6, 0x19, &(0x7f0000000ec0), 0x4)

1m21.204230501s ago: executing program 1 (id=146):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10)

1m21.150815476s ago: executing program 0 (id=147):
bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@base={0x12, 0x2, 0x7, 0x6, 0x4000, 0xffffffffffffffff, 0xed65, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50)

1m21.15058476s ago: executing program 0 (id=148):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_config_ext={0x9, 0x2}, 0x3000, 0x4, 0x0, 0x8, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0)

535.088µs ago: executing program 1 (id=149):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x894b, &(0x7f0000000200)={r0})

400.968µs ago: executing program 32 (id=148):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_config_ext={0x9, 0x2}, 0x3000, 0x4, 0x0, 0x8, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0)

354.15µs ago: executing program 33 (id=149):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x894b, &(0x7f0000000200)={r0})

0s ago: executing program 34 (id=141):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x100002e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x2b, 0x1, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r4, 0x400454ce, 0xa)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
sendmsg$inet(r3, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818)
close(r1)
close(r3)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000000000000850000007b00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000014000000140000000a00000000000000010000060400000006000000000000000000000000005f"], 0x0, 0x36}, 0x28)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r7}, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
perf_event_open(&(0x7f0000004600)={0x2, 0x80, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x100000005, 0x82c0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x3}, 0xecf5, 0x3, 0x10000000, 0x0, 0xd6ae, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xffdfffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r8, &(0x7f00000001c0)={'b', ' *:* ', 'm\x00'}, 0x8)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0xfe33)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:8376' (ED25519) to the list of known hosts.
syzkaller login: [   50.062687][ T5807] cgroup: Unknown subsys name 'net'
[   50.208780][ T5807] cgroup: Unknown subsys name 'cpuset'
[   50.213558][ T5807] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   52.431235][ T5807] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   57.233061][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   57.241392][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   57.244064][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   57.247606][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   57.256120][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   57.274952][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   57.281431][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   57.284347][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   57.285661][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   57.291617][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   57.295125][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   57.298056][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   57.301704][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   57.304988][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   57.309893][ T5219] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   57.614363][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   57.651826][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   57.734431][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   57.840581][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.844273][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.848345][ T5827] bridge_slave_0: entered allmulticast mode
[   57.852293][ T5827] bridge_slave_0: entered promiscuous mode
[   57.859983][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.862483][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.865814][ T5827] bridge_slave_1: entered allmulticast mode
[   57.869626][ T5827] bridge_slave_1: entered promiscuous mode
[   57.952236][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.954601][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.958362][ T5835] bridge_slave_0: entered allmulticast mode
[   57.962189][ T5835] bridge_slave_0: entered promiscuous mode
[   57.967345][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.970115][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.973171][ T5835] bridge_slave_1: entered allmulticast mode
[   57.978627][ T5835] bridge_slave_1: entered promiscuous mode
[   57.984772][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.041841][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.048477][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.052111][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.055025][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.058189][ T5831] bridge_slave_0: entered allmulticast mode
[   58.061930][ T5831] bridge_slave_0: entered promiscuous mode
[   58.096596][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.103743][ T5827] team0: Port device team_slave_0 added
[   58.107834][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.110652][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.113542][ T5831] bridge_slave_1: entered allmulticast mode
[   58.117911][ T5831] bridge_slave_1: entered promiscuous mode
[   58.138505][ T5827] team0: Port device team_slave_1 added
[   58.212440][ T5835] team0: Port device team_slave_0 added
[   58.218169][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.223657][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.227372][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.238466][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.247694][ T5835] team0: Port device team_slave_1 added
[   58.252352][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.270280][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.272986][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.284130][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.320606][ T5831] team0: Port device team_slave_0 added
[   58.325873][ T5831] team0: Port device team_slave_1 added
[   58.380058][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.382986][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.394657][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.429238][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.432187][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.443458][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.461998][ T5827] hsr_slave_0: entered promiscuous mode
[   58.466114][ T5827] hsr_slave_1: entered promiscuous mode
[   58.471732][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.474334][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.484421][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.504901][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.507549][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.518938][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.557578][ T5835] hsr_slave_0: entered promiscuous mode
[   58.560871][ T5835] hsr_slave_1: entered promiscuous mode
[   58.563967][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   58.567569][ T5835] Cannot create hsr debugfs directory
[   58.661998][ T5831] hsr_slave_0: entered promiscuous mode
[   58.664932][ T5831] hsr_slave_1: entered promiscuous mode
[   58.667927][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   58.670722][ T5831] Cannot create hsr debugfs directory
[   58.942263][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   58.955142][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   58.968818][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   58.973156][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   59.018753][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   59.026852][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   59.033578][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   59.043593][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   59.128056][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   59.135719][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   59.153713][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   59.168336][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   59.248438][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.258453][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.290511][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   59.296504][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   59.315160][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.318231][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.326450][ T5830] Bluetooth: hci0: command tx timeout
[   59.329010][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.331834][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.344179][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.347108][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.365993][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.369081][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.381809][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.395693][ T5830] Bluetooth: hci2: command tx timeout
[   59.396155][ T5219] Bluetooth: hci1: command tx timeout
[   59.440522][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   59.479573][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.481931][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.493314][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.495591][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.532862][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   59.664894][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.672651][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.718669][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.735396][ T5835] veth0_vlan: entered promiscuous mode
[   59.749950][ T5827] veth0_vlan: entered promiscuous mode
[   59.755060][ T5835] veth1_vlan: entered promiscuous mode
[   59.774454][ T5831] veth0_vlan: entered promiscuous mode
[   59.779004][ T5827] veth1_vlan: entered promiscuous mode
[   59.785209][ T5831] veth1_vlan: entered promiscuous mode
[   59.813261][ T5835] veth0_macvtap: entered promiscuous mode
[   59.823942][ T5835] veth1_macvtap: entered promiscuous mode
[   59.829291][ T5827] veth0_macvtap: entered promiscuous mode
[   59.838697][ T5827] veth1_macvtap: entered promiscuous mode
[   59.849658][ T5831] veth0_macvtap: entered promiscuous mode
[   59.857364][ T5831] veth1_macvtap: entered promiscuous mode
[   59.862815][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.872836][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.881270][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.892533][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.896700][ T5827] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.899379][ T5827] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.902087][ T5827] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.904730][ T5827] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.914078][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.923064][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.927723][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.931170][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.934585][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.951050][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.974088][ T5831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.978221][ T5831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.981771][ T5831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.985096][ T5831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.086396][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.089229][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.126530][ T4021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.129179][ T4021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.141908][ T4021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.146145][ T4021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.167043][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.169478][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.198389][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.208803][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.228042][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   60.244778][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.247478][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.402263][ T5900] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1'.
[   60.575334][    C1] hrtimer: interrupt took 26646 ns
[   61.430294][ T5219] Bluetooth: hci0: command tx timeout
[   61.476545][ T5219] Bluetooth: hci1: command tx timeout
[   61.554723][ T5219] Bluetooth: hci2: command tx timeout
[   63.477807][ T5219] Bluetooth: hci0: command tx timeout
[   63.556790][ T5219] Bluetooth: hci1: command tx timeout
[   63.635956][ T5219] Bluetooth: hci2: command tx timeout
[   65.202624][ T5926] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.13'.
[   65.310281][ T5219] Bluetooth: hci2: unexpected event 0x1d length: 15 > 5
[   65.346891][ T5930] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.15'.
[   65.365522][ T5930] netlink: 6200 bytes leftover after parsing attributes in process `syz.0.15'.
[   65.369044][ T5930] netlink: 126 bytes leftover after parsing attributes in process `syz.0.15'.
[   65.372515][ T5930] tc_dump_action: action bad kind
[   65.458299][ T5935] netlink: 60 bytes leftover after parsing attributes in process `syz.1.16'.
[   65.476424][ T5932] netlink: 60 bytes leftover after parsing attributes in process `syz.1.16'.
[   65.540398][ T5937] netlink: 'syz.0.18': attribute type 2 has an invalid length.
[   65.562434][ T5219] Bluetooth: hci0: command tx timeout
[   65.635729][ T5219] Bluetooth: hci1: command tx timeout
[   65.715573][ T5219] Bluetooth: hci2: command tx timeout
[   67.269775][ T5983] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.38'.
[   68.146547][ T5999] netlink: 132 bytes leftover after parsing attributes in process `syz.0.45'.
[   68.423590][ T6013] netlink: 'syz.2.52': attribute type 5 has an invalid length.
[   68.479129][ T6015] netlink: 'syz.2.53': attribute type 29 has an invalid length.
[   68.662000][ T6021] netlink: 'syz.2.56': attribute type 41 has an invalid length.
[   69.389568][ T6030] warning: `syz.1.60' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.712274][ T6042] Driver unsupported XDP return value 0 on prog  (id 26) dev N/A, expect packet loss!
[   70.025469][ T6048] delete_channel: no stack
[   70.029236][ T5219] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10
[   70.440098][ T6062] netlink: 'syz.2.76': attribute type 29 has an invalid length.
[   70.460805][ T6062] netlink: 'syz.2.76': attribute type 29 has an invalid length.
[   70.909341][ T6073] netlink: 24032 bytes leftover after parsing attributes in process `syz.0.81'.
[   70.920106][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   70.922225][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   70.924371][ T6073] netlink: 104088 bytes leftover after parsing attributes in process `syz.0.81'.
[   70.934276][ T6073] netlink: 24032 bytes leftover after parsing attributes in process `syz.0.81'.
[   71.432283][ T6087] netlink: 830 bytes leftover after parsing attributes in process `syz.0.88'.
[   72.045703][ T5219] Bluetooth: hci0: command tx timeout
[   72.319749][ T6099] syz.1.93 uses obsolete (PF_INET,SOCK_PACKET)
[   72.718607][ T6116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.100'.
[   73.509005][ T6127] netlink: 'syz.0.106': attribute type 10 has an invalid length.
[   73.526823][ T6127] geneve0: entered promiscuous mode
[   73.568077][ T6127] bond0: (slave geneve0): Enslaving as an active interface with an up link
[   73.652271][ T6136] netlink: 'syz.1.110': attribute type 27 has an invalid length.
[   73.656531][ T6127] syz.0.106 (6127) used greatest stack depth: 20536 bytes left
[   73.766324][ T6144] netlink: 60 bytes leftover after parsing attributes in process `syz.1.111'.
[   73.778853][ T6139] netlink: 60 bytes leftover after parsing attributes in process `syz.1.111'.
[   73.796250][ T6139] netlink: 60 bytes leftover after parsing attributes in process `syz.1.111'.
[   73.906163][ T6151] netlink: 'syz.2.117': attribute type 29 has an invalid length.
[   73.914530][ T6151] netlink: 'syz.2.117': attribute type 29 has an invalid length.
[   73.934218][ T6152] veth1_macvtap: left promiscuous mode
[   73.960876][ T6152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.116'.
[   92.193107][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   92.198223][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   92.201493][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   92.205266][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   92.209110][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   92.238511][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   92.243377][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   92.246967][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   92.250883][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   92.254232][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   92.283787][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   92.289996][ T5830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   92.293530][ T5830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   92.297336][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   92.300790][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   94.276368][   T54] Bluetooth: hci3: command tx timeout
[   94.278515][ T5837] Bluetooth: hci4: command tx timeout
[   94.355612][ T5837] Bluetooth: hci5: command tx timeout
[   96.355542][   T54] Bluetooth: hci3: command tx timeout
[   96.357369][ T5837] Bluetooth: hci4: command tx timeout
[   96.435536][ T5837] Bluetooth: hci5: command tx timeout
[   98.436287][   T54] Bluetooth: hci3: command tx timeout
[   98.438586][ T5837] Bluetooth: hci4: command tx timeout
[   98.515562][ T5837] Bluetooth: hci5: command tx timeout
[  100.515580][ T5837] Bluetooth: hci4: command tx timeout
[  100.517732][ T5837] Bluetooth: hci3: command tx timeout
[  100.595537][   T54] Bluetooth: hci5: command tx timeout
[  113.975809][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 38618707481 wd_nsec: 38618706953
[  132.360947][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.363436][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  152.991165][ T5832] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  152.995217][ T5832] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  152.999420][ T5832] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  153.003522][ T5832] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  153.010004][ T5832] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  153.042170][   T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  153.049102][   T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  153.052622][   T54] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  153.057322][   T54] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  153.069596][   T54] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  153.073732][   T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  153.078206][   T54] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  153.082279][ T5837] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  153.092162][ T5837] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  153.100574][ T5837] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  155.085766][ T5830] Bluetooth: hci6: command tx timeout
[  155.157238][ T5837] Bluetooth: hci7: command tx timeout
[  155.159845][ T5830] Bluetooth: hci8: command tx timeout
[  157.165664][ T5830] Bluetooth: hci6: command tx timeout
[  157.247080][ T5837] Bluetooth: hci7: command tx timeout
[  157.249028][ T5830] Bluetooth: hci8: command tx timeout
[  159.235614][ T5830] Bluetooth: hci6: command tx timeout
[  159.327639][ T5837] Bluetooth: hci7: command tx timeout
[  159.329949][ T5830] Bluetooth: hci8: command tx timeout
[  161.315597][ T5830] Bluetooth: hci6: command tx timeout
[  161.397469][ T5837] Bluetooth: hci7: command tx timeout
[  161.399626][ T5830] Bluetooth: hci8: command tx timeout
[  179.955372][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  179.957755][    C1] rcu: 	1-....: (2689 ticks this GP) idle=d224/1/0x4000000000000000 softirq=15620/15620 fqs=4959
[  179.962608][    C1] rcu: 	         hardirqs   softirqs   csw/system
[  179.964631][    C1] rcu: 	 number:   556020          1            0
[  179.966699][    C1] rcu: 	cputime:    12838      14021           44   ==> 26860(ms)
[  179.969038][    C1] rcu: 	(t=10500 jiffies g=8649 q=3051 ncpus=2)
[  179.970945][    C1] CPU: 1 UID: 0 PID: 6211 Comm: syz.2.141 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  179.970963][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  179.970970][    C1] RIP: 0010:rcu_read_unlock_special+0x87/0x4c0
[  179.970991][    C1] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 62 2c f8 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
[  179.970998][    C1] RSP: 0018:ffffc900001e01e0 EFLAGS: 00000206
[  179.971006][    C1] RAX: 034029d6cb170500 RBX: 1ffff9200003c044 RCX: 034029d6cb170500
[  179.971012][    C1] RDX: 0000000000000002 RSI: ffffffff8d99883e RDI: ffffffff8be29f40
[  179.971017][    C1] RBP: ffffc900001e02d8 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  179.971022][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffffffff8e144400
[  179.971028][    C1] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000002
[  179.971032][    C1] FS:  00007fdc7844e6c0(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
[  179.971038][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  179.971043][    C1] CR2: 000000110c3116f2 CR3: 000000010fa6c000 CR4: 00000000000006f0
[  179.971065][    C1] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000
[  179.971071][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  179.971075][    C1] Call Trace:
[  179.971081][    C1]  <IRQ>
[  179.971085][    C1]  ? __lock_acquire+0xab9/0xd20
[  179.971100][    C1]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  179.971113][    C1]  ? unwind_next_frame+0xa5/0x2390
[  179.971127][    C1]  __rcu_read_unlock+0x84/0xe0
[  179.971139][    C1]  ? unwind_next_frame+0xa5/0x2390
[  179.971146][    C1]  unwind_next_frame+0x19ae/0x2390
[  179.971158][    C1]  ? unwind_next_frame+0xa5/0x2390
[  179.971167][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  179.971205][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  179.971217][    C1]  arch_stack_walk+0x11c/0x150
[  179.971231][    C1]  ? memset_orig+0x58/0xb0
[  179.971246][    C1]  stack_trace_save+0x9c/0xe0
[  179.971256][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  179.971270][    C1]  ? sched_clock+0x3f/0x60
[  179.971283][    C1]  kasan_save_track+0x3e/0x80
[  179.971291][    C1]  ? kasan_save_track+0x3e/0x80
[  179.971297][    C1]  ? __kasan_slab_alloc+0x6c/0x80
[  179.971304][    C1]  ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  179.971312][    C1]  ? __alloc_skb+0x112/0x2d0
[  179.971320][    C1]  ? arp_create+0x189/0x990
[  179.971330][    C1]  ? arp_send_dst+0xa7/0x2d0
[  179.971338][    C1]  ? arp_solicit+0xc1d/0xe60
[  179.971346][    C1]  ? neigh_timer_handler+0xab2/0x1030
[  179.971354][    C1]  ? call_timer_fn+0x17e/0x5f0
[  179.971362][    C1]  ? __run_timer_base+0x61a/0x860
[  179.971373][    C1]  ? run_timer_softirq+0xb7/0x180
[  179.971382][    C1]  ? handle_softirqs+0x286/0x870
[  179.971392][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  179.971399][    C1]  ? irq_exit_rcu+0x9/0x30
[  179.971406][    C1]  ? sysvec_irq_work+0xa3/0xc0
[  179.971414][    C1]  ? asm_sysvec_irq_work+0x1a/0x20
[  179.971421][    C1]  ? finish_task_switch+0x26b/0x950
[  179.971427][    C1]  ? __schedule+0x16fd/0x4d00
[  179.971436][    C1]  ? preempt_schedule_irq+0xb5/0x150
[  179.971444][    C1]  ? irqentry_exit+0x6f/0x90
[  179.971452][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  179.971481][    C1]  __kasan_slab_alloc+0x6c/0x80
[  179.971490][    C1]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  179.971507][    C1]  ? __alloc_skb+0x112/0x2d0
[  179.971517][    C1]  __alloc_skb+0x112/0x2d0
[  179.971527][    C1]  arp_create+0x189/0x990
[  179.971542][    C1]  ? __pfx_arp_create+0x10/0x10
[  179.971557][    C1]  arp_send_dst+0xa7/0x2d0
[  179.971571][    C1]  arp_solicit+0xc1d/0xe60
[  179.971588][    C1]  ? __pfx_arp_solicit+0x10/0x10
[  179.971596][    C1]  ? irqentry_exit+0x74/0x90
[  179.971605][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  179.971624][    C1]  ? __pfx_arp_solicit+0x10/0x10
[  179.971633][    C1]  neigh_timer_handler+0xab2/0x1030
[  179.971646][    C1]  call_timer_fn+0x17e/0x5f0
[  179.971653][    C1]  ? __pfx_neigh_timer_handler+0x10/0x10
[  179.971660][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  179.971668][    C1]  ? call_timer_fn+0xbe/0x5f0
[  179.971675][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  179.971689][    C1]  ? __pfx_neigh_timer_handler+0x10/0x10
[  179.971698][    C1]  __run_timer_base+0x61a/0x860
[  179.971708][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  179.971728][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  179.971747][    C1]  run_timer_softirq+0xb7/0x180
[  179.971758][    C1]  handle_softirqs+0x286/0x870
[  179.971769][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  179.971780][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  179.971788][    C1]  ? irq_work_single+0x1ac/0x240
[  179.971798][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  179.971810][    C1]  __irq_exit_rcu+0xca/0x1f0
[  179.971818][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  179.971829][    C1]  ? rcu_is_watching+0x15/0xb0
[  179.971839][    C1]  irq_exit_rcu+0x9/0x30
[  179.971846][    C1]  sysvec_irq_work+0xa3/0xc0
[  179.971854][    C1]  </IRQ>
[  179.971856][    C1]  <TASK>
[  179.971860][    C1]  asm_sysvec_irq_work+0x1a/0x20
[  179.971867][    C1] RIP: 0010:finish_task_switch+0x26b/0x950
[  179.971874][    C1] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 0f 1a df 09 e8 ba b9 35 00 fb 4c 8b 65 c0 <49> 8d bc 24 18 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0
[  179.971880][    C1] RSP: 0018:ffffc90002f07218 EFLAGS: 00000286
[  179.971887][    C1] RAX: 034029d6cb170500 RBX: 0000000000000000 RCX: 034029d6cb170500
[  179.971892][    C1] RDX: 0000000000000006 RSI: ffffffff8d99883e RDI: ffffffff8be29f40
[  179.971896][    C1] RBP: ffffc90002f07270 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  179.971902][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffff88810e8db980
[  179.971907][    C1] R13: dffffc0000000000 R14: ffff888105e8b980 R15: ffff88813663ab98
[  179.971921][    C1]  ? finish_task_switch+0x266/0x950
[  179.971932][    C1]  __schedule+0x16fd/0x4d00
[  179.971943][    C1]  ? trace_call_bpf+0xb7/0x850
[  179.971958][    C1]  ? preempt_schedule_irq+0xb5/0x150
[  179.971970][    C1]  ? __pfx___schedule+0x10/0x10
[  179.971981][    C1]  ? perf_trace_run_bpf_submit+0x100/0x170
[  179.971996][    C1]  ? preempt_schedule_irq+0xaa/0x150
[  179.972007][    C1]  preempt_schedule_irq+0xb5/0x150
[  179.972016][    C1]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  179.972030][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  179.972039][    C1]  irqentry_exit+0x6f/0x90
[  179.972048][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  179.972056][    C1] RIP: 0010:memset_orig+0x58/0xb0
[  179.972065][    C1] Code: 00 00 48 ff c9 48 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d8 <0f> 1f 84 00 00 00 00 00 89 d1 83 e1 38 74 14 c1 e9 03 66 0f 1f 44
[  179.972071][    C1] RSP: 0018:ffffc90002f07600 EFLAGS: 00000247
[  179.972077][    C1] RAX: 0000000000000000 RBX: ffffc90002f07668 RCX: 0000000000000000
[  179.972081][    C1] RDX: 0000000000000060 RSI: 0000000000000000 RDI: ffffc90002f076a8
[  179.972086][    C1] RBP: ffffc90002f076f0 R08: ffffc90002f076c7 R09: 0000000000000000
[  179.972090][    C1] R10: ffffc90002f07668 R11: fffff520005e0ed9 R12: 0000000000000000
[  179.972095][    C1] R13: ffff88810e8db980 R14: dffffc0000000000 R15: 0000000000000000
[  179.972109][    C1]  __unwind_start+0x36/0x760
[  179.972117][    C1]  ? trace_call_bpf+0xb7/0x850
[  179.972126][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  179.972136][    C1]  arch_stack_walk+0xe4/0x150
[  179.972152][    C1]  stack_trace_save+0x9c/0xe0
[  179.972161][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  179.972195][    C1]  ? __lock_acquire+0xab9/0xd20
[  179.972204][    C1]  kasan_save_track+0x3e/0x80
[  179.972240][    C1]  kasan_save_free_info+0x46/0x50
[  179.972251][    C1]  __kasan_slab_free+0x62/0x70
[  179.972258][    C1]  ? ref_tracker_free+0x4dd/0x7d0
[  179.972268][    C1]  kfree+0x18e/0x440
[  179.972278][    C1]  ref_tracker_free+0x4dd/0x7d0
[  179.972290][    C1]  ? __pfx_ref_tracker_free+0x10/0x10
[  179.972299][    C1]  ? migrate_enable+0x29c/0x3c0
[  179.972308][    C1]  ? __sk_destruct+0x3c3/0x660
[  179.972316][    C1]  ? inet_release+0x144/0x190
[  179.972325][    C1]  ? sock_release+0x85/0x150
[  179.972335][    C1]  ? smc_clcsock_release+0xc9/0xf0
[  179.972346][    C1]  ? __smc_release+0x66b/0x7e0
[  179.972355][    C1]  ? smc_release+0x2ce/0x540
[  179.972361][    C1]  ? sock_close+0xc3/0x240
[  179.972370][    C1]  ? __fput+0x44c/0xa70
[  179.972379][    C1]  ? fput_close_sync+0x119/0x200
[  179.972387][    C1]  ? __x64_sys_close+0x7f/0x110
[  179.972397][    C1]  ? do_syscall_64+0xfa/0x3b0
[  179.972407][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.972417][    C1]  ? bpf_sk_storage_free+0x21/0x230
[  179.972428][    C1]  ? bpf_sk_storage_free+0x21/0x230
[  179.972437][    C1]  ? bpf_sk_storage_free+0x21/0x230
[  179.972449][    C1]  __sk_destruct+0x3c3/0x660
[  179.972460][    C1]  inet_release+0x144/0x190
[  179.972471][    C1]  sock_release+0x85/0x150
[  179.972481][    C1]  smc_clcsock_release+0xc9/0xf0
[  179.972497][    C1]  __smc_release+0x66b/0x7e0
[  179.972509][    C1]  smc_release+0x2ce/0x540
[  179.972521][    C1]  sock_close+0xc3/0x240
[  179.972531][    C1]  ? __pfx_sock_close+0x10/0x10
[  179.972540][    C1]  __fput+0x44c/0xa70
[  179.972556][    C1]  fput_close_sync+0x119/0x200
[  179.972565][    C1]  ? dnotify_flush+0x50/0x5e0
[  179.972577][    C1]  ? __pfx_fput_close_sync+0x10/0x10
[  179.972593][    C1]  __x64_sys_close+0x7f/0x110
[  179.972604][    C1]  do_syscall_64+0xfa/0x3b0
[  179.972615][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.972622][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  179.972632][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.972639][    C1] RIP: 0033:0x7fdc7758e9a9
[  179.972649][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  179.972655][    C1] RSP: 002b:00007fdc7844e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  179.972662][    C1] RAX: ffffffffffffffda RBX: 00007fdc777b6080 RCX: 00007fdc7758e9a9
[  179.972667][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008
[  179.972671][    C1] RBP: 00007fdc77610d69 R08: 0000000000000000 R09: 0000000000000000
[  179.972676][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  179.972680][    C1] R13: 0000000000000000 R14: 00007fdc777b6080 R15: 00007ffc73682528
[  179.972693][    C1]  </TASK>
[  180.313895][    C1] sched: DL replenish lagged too much
[  180.519605][ T5219] Bluetooth: hci2: command 0x0406 tx timeout
[  180.522200][ T5837] Bluetooth: hci1: command 0x0406 tx timeout
[  181.959784][ T5837] Bluetooth: hci0: command 0x0406 tx timeout
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)

VM DIAGNOSIS:
10:19:26  Registers:
info registers vcpu 0

CPU#0
RAX=e6833ef1c68dd300 RBX=ffffffff81976a48 RCX=e6833ef1c68dd300 RDX=0000000000000001
RSI=ffffffff8d99883e RDI=ffffffff8be29f40 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa1e8f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6e84f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055dbd0daf028 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f3236d86d00
XMM02=0000000500000007 0000555500000001 XMM03=0000555580e47240 0000555580e47190
XMM04=0000000000000000 000000000000000e XMM05=0000000000000000 000000000001df8a
XMM06=0000555580e4b9b0 0000555500000007 XMM07=0000555500000000 0000555580e4b820
XMM08=0000555580e4b7b0 0000555500000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001df510
R8 =ffff888107cf0237 R9 =1ffff11020f9e046 R10=dffffc0000000000 R11=ffffffff85472860
R12=dffffc0000000000 R13=ffffffff99af58cc R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff854728dc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fdc7844e6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3116f2 CR3=000000010fa6c000 CR4=000006f0
DR0=0000200000000300 DR1=0000200000000300 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fdc77611ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
