last executing test programs:

17.604334836s ago: executing program 1 (id=735):
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r2 = gettid()
perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x1}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x10000003, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xb)
socketpair$tipc(0x1e, 0x4, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
syz_open_procfs$namespace(r2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000800)=ANY=[])
socket$kcm(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xe, 0xb, 0x0, &(0x7f0000000180)='GPL\x00'}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0)=r1, 0x4)
sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)="00446916ab", 0x5}], 0x1, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x12}, @multicast2}}}], 0x20}, 0x0)

17.604028815s ago: executing program 0 (id=736):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x2, 0x0, 0x8, 0x0, 0x0, 0x802}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

17.395114115s ago: executing program 0 (id=740):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x6, 0xd, &(0x7f0000000040), 0x3)
sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20000014)

17.394757198s ago: executing program 1 (id=741):
unlink(&(0x7f0000000000)='./cgroup/cgroup.procs/file0\x00')

17.314287536s ago: executing program 0 (id=742):
socket$kcm(0x25, 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x10)
socket$kcm(0x2b, 0x1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0xd, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xfffffff8}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @exit, @map_val={0x18, 0x2, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x69}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000540)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0xc6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000680)=[{0x2, 0x3, 0xd}, {0x1, 0x1, 0xd, 0xa}], 0x10, 0x8c}, 0x94)
r6 = socket$kcm(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000), 0x10)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@cgroup, r3, 0x2d, 0x2011, r5}, 0x20)
sendmsg$inet(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xd)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r7, 0x20, &(0x7f0000000380)={&(0x7f0000000240)=""/5, 0x5, <r8=>0x0, &(0x7f0000000280)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/21], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r7, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, r8}, 0x94)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2)

17.313995801s ago: executing program 1 (id=743):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, <r1=>0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r1, 0x0, &(0x7f0000001780)=""/4096}, 0x20)

17.309615706s ago: executing program 2 (id=744):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbfd, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x8002009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x1, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xa4}, {0x6}]})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20)

17.240211241s ago: executing program 1 (id=745):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001180)={0x6, 0x4, &(0x7f0000001040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xb4}]}, &(0x7f0000001080)='GPL\x00', 0x6, 0x2a, &(0x7f00000010c0)=""/42, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)

17.125265782s ago: executing program 1 (id=746):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810)
recvmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

17.125064938s ago: executing program 2 (id=747):
r0 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="02", 0x33fe0}], 0x1}, 0x0)

17.054955013s ago: executing program 2 (id=748):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x1c, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @alu={0x7}, @initr0, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x2}}, @jmp]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0xe2, &(0x7f00000001c0)=""/226}, 0x23)

17.054477885s ago: executing program 2 (id=749):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e000000040000000400", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/28], 0x50)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc)
r0 = socket$kcm(0x10, 0x2, 0x0)
recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000980)=""/229, 0xe5}, {&(0x7f00000003c0)=""/224, 0xe0}, {&(0x7f0000000140)=""/225, 0xe1}, {&(0x7f00000004c0)=""/198, 0xc6}, {&(0x7f0000000d00)=""/4160, 0x1040}], 0x5}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x800, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x4, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b704000000000000850000006c00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007b06400010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x1, 0x1, 0xf, 0x0, 0x0, 0x7fff, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x16307, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x4, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, r4, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xf, &(0x7f00000015c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0xce}}}, &(0x7f0000000080)='GPL\x00'}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="33fe0000660091"], 0xfe33)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000000c0)="14000000350094fb0100fc6022f388", 0xf}], 0x1}, 0x24000040)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080303000000e8fe03a1180015000600142603600e1208000f0000810401a80016040400014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

16.985067658s ago: executing program 0 (id=750):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000580)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffef}, [@call={0x85, 0x0, 0x0, 0x23}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x44, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

16.919869436s ago: executing program 1 (id=751):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0xa, 0x5, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, 0x0, 0x30044889)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0xd, 0x7, 0x7, 0x6, 0x0, 0x2, 0x80, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f00000000c0), 0xa}, 0x10c0a1, 0xfffffffffffffc00, 0x8, 0x9, 0x0, 0xf, 0xc426, 0x0, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0x10, r1, 0x1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x2, 0x1000000000000002, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
r4 = perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x408002, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x100000001, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
r6 = socket$kcm(0x29, 0x5, 0x0)
write$cgroup_pressure(r6, &(0x7f0000000140)={'full'}, 0xfffffdef)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf, 0x1a500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x6, @perf_bp={0x0, 0xb}, 0x105c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x600, &(0x7f0000000040)=[{&(0x7f0000000080)="1400000034000b45d30000000000000001d25a80", 0x14}], 0x1}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
setsockopt$sock_attach_bpf(r3, 0x88, 0x67, &(0x7f00000002c0)=r8, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x20200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
close(r9)

16.919629804s ago: executing program 0 (id=752):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000320081024e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

15.710486459s ago: executing program 0 (id=753):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e48906"], 0xfdef)

15.710049845s ago: executing program 2 (id=754):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xffffebff, 0x3, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='qdisc_enqueue\x00', r0, 0x0, 0x4}, 0x18)
r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
close(r1)
bpf$BPF_GET_PROG_INFO(0x1c, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000d40)=[{0x10, 0xfc34c428e8c2215a, 0x1}, {0x388, 0x110, 0x7fffffff, "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"}, {0x10, 0x116, 0x6}], 0x3a8}, 0x4c840)
socket$kcm(0x1e, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

232.576µs ago: executing program 2 (id=755):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x940, 0x80000001, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x9)
socketpair(0xa, 0x6, 0x3, &(0x7f0000000240))
r2 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r2, 0x1, 0x19, &(0x7f0000000180), 0x4)

0s ago: executing program 32 (id=753):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e48906"], 0xfdef)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:16000' (ED25519) to the list of known hosts.
syzkaller login: [   48.934984][ T5758] cgroup: Unknown subsys name 'net'
[   49.045268][ T5758] cgroup: Unknown subsys name 'cpuset'
[   49.049775][ T5758] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.820996][ T5758] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.049315][ T5220] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.053906][ T5220] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.057332][ T5220] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.061008][ T5220] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.064501][ T5220] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.118685][ T5220] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.123329][ T5220] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.126643][ T5220] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.130863][ T5220] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.134622][ T5220] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.199673][ T5220] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.213409][ T5220] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.216774][ T5220] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.221065][ T5220] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.225350][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.448449][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   55.462983][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   55.617978][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.621123][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.625612][ T5831] bridge_slave_0: entered allmulticast mode
[   55.629243][ T5831] bridge_slave_0: entered promiscuous mode
[   55.634974][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.637626][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.640343][ T5831] bridge_slave_1: entered allmulticast mode
[   55.644689][ T5831] bridge_slave_1: entered promiscuous mode
[   55.689790][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.692604][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.695353][ T5826] bridge_slave_0: entered allmulticast mode
[   55.699105][ T5826] bridge_slave_0: entered promiscuous mode
[   55.715949][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   55.723966][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.726696][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.729282][ T5826] bridge_slave_1: entered allmulticast mode
[   55.732967][ T5826] bridge_slave_1: entered promiscuous mode
[   55.751171][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.777915][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.783936][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.812701][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.871705][ T5831] team0: Port device team_slave_0 added
[   55.890840][ T5826] team0: Port device team_slave_0 added
[   55.903518][ T5831] team0: Port device team_slave_1 added
[   55.908273][ T5826] team0: Port device team_slave_1 added
[   55.991672][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.994665][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.005862][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.010931][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.014067][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.016932][ T5833] bridge_slave_0: entered allmulticast mode
[   56.020796][ T5833] bridge_slave_0: entered promiscuous mode
[   56.025677][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.028290][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.038074][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.043958][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.046626][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.056366][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.061044][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.064531][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.074669][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.079266][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.083396][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.086260][ T5833] bridge_slave_1: entered allmulticast mode
[   56.090038][ T5833] bridge_slave_1: entered promiscuous mode
[   56.138949][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.166069][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.173076][ T5826] hsr_slave_0: entered promiscuous mode
[   56.175590][ T5826] hsr_slave_1: entered promiscuous mode
[   56.223611][ T5831] hsr_slave_0: entered promiscuous mode
[   56.226674][ T5831] hsr_slave_1: entered promiscuous mode
[   56.229505][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.234790][ T5831] Cannot create hsr debugfs directory
[   56.246599][ T5833] team0: Port device team_slave_0 added
[   56.250775][ T5833] team0: Port device team_slave_1 added
[   56.307066][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.309367][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.317867][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.348645][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.351453][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.364198][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.489478][ T5833] hsr_slave_0: entered promiscuous mode
[   56.494138][ T5833] hsr_slave_1: entered promiscuous mode
[   56.496985][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.499995][ T5833] Cannot create hsr debugfs directory
[   56.674256][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.680307][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.698565][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.708526][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.761221][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.769349][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.778790][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.788025][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.859109][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.869316][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.885649][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.891196][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.922820][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.949905][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   56.954096][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.962367][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.964831][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.982716][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   56.986495][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.988734][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.017050][ T5831] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   57.020268][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.026820][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.029059][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.032958][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.035204][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.094670][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.103164][ T5836] Bluetooth: hci0: command tx timeout
[   57.117710][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   57.128420][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.130665][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.138236][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.140494][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.182517][ T5836] Bluetooth: hci1: command tx timeout
[   57.188030][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.241689][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.248492][ T5831] veth0_vlan: entered promiscuous mode
[   57.262632][ T5836] Bluetooth: hci2: command tx timeout
[   57.272868][ T5831] veth1_vlan: entered promiscuous mode
[   57.296823][ T5826] veth0_vlan: entered promiscuous mode
[   57.311804][ T5826] veth1_vlan: entered promiscuous mode
[   57.318276][ T5831] veth0_macvtap: entered promiscuous mode
[   57.325280][ T5831] veth1_macvtap: entered promiscuous mode
[   57.346985][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.351565][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.361598][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.365396][ T5826] veth0_macvtap: entered promiscuous mode
[   57.374151][ T5826] veth1_macvtap: entered promiscuous mode
[   57.379023][ T5831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.383182][ T5831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.385823][ T5831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.388605][ T5831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.419613][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.431778][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.440507][ T5833] veth0_vlan: entered promiscuous mode
[   57.445101][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.448112][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.450723][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.455954][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.468611][ T5833] veth1_vlan: entered promiscuous mode
[   57.525626][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.528787][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.536644][ T5833] veth0_macvtap: entered promiscuous mode
[   57.550283][ T5833] veth1_macvtap: entered promiscuous mode
[   57.569136][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.578161][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.587291][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.593744][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.600656][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.609283][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.610710][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.616340][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.620898][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.623722][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.627025][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.630365][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.691900][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.708194][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.711342][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.764391][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.767410][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.814243][ T5900] netlink: 'syz.0.4': attribute type 39 has an invalid length.
[   57.945568][    C0] hrtimer: interrupt took 49765 ns
[   59.016657][ T5924] netlink: 'syz.2.13': attribute type 11 has an invalid length.
[   59.020091][ T5924] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.13'.
[   59.037606][ T5924] netlink: 'syz.2.13': attribute type 11 has an invalid length.
[   59.040700][ T5924] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.13'.
[   59.064310][ T5923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   59.095911][ T5928] netlink: 'syz.1.15': attribute type 6 has an invalid length.
[   59.099667][ T5928] netlink: 164 bytes leftover after parsing attributes in process `syz.1.15'.
[   59.183526][ T5836] Bluetooth: hci0: command tx timeout
[   59.205096][ T5932] syzkaller0: entered promiscuous mode
[   59.206948][ T5932] syzkaller0: entered allmulticast mode
[   59.262998][ T5836] Bluetooth: hci1: command tx timeout
[   59.352509][ T5836] Bluetooth: hci2: command tx timeout
[   59.450298][ T5937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19'.
[   60.389605][ T5836] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8
[   60.517940][ T5974] netlink: 176 bytes leftover after parsing attributes in process `syz.0.37'.
[   60.614913][ T5976] Zero length message leads to an empty skb
[   60.818657][ T5990] syzkaller0: entered promiscuous mode
[   60.928406][ T5994] netlink: 'syz.1.46': attribute type 13 has an invalid length.
[   61.529809][ T5836] Bluetooth: hci1: command tx timeout
[   61.531485][ T5836] Bluetooth: hci0: command tx timeout
[   61.533677][ T5836] Bluetooth: hci2: command tx timeout
[   62.643169][ T6038] warning: `syz.1.65' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   62.915608][ T6043] netlink: 'syz.2.67': attribute type 39 has an invalid length.
[   63.583604][ T5836] Bluetooth: hci0: command tx timeout
[   63.585960][ T5836] Bluetooth: hci1: command tx timeout
[   63.588229][   T55] Bluetooth: hci2: command tx timeout
[   63.635560][ T6053] syzkaller0: entered promiscuous mode
[   63.637928][ T6053] syzkaller0: entered allmulticast mode
[   64.420727][ T6054] Driver unsupported XDP return value 0 on prog  (id 39) dev N/A, expect packet loss!
[   64.771801][ T6078] netlink: 'syz.0.83': attribute type 39 has an invalid length.
[   65.424501][ T6105] delete_channel: no stack
[   65.431002][ T6105] delete_channel: no stack
[   65.440592][ T6105] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.061212][ T6118] netlink: 'syz.0.99': attribute type 6 has an invalid length.
[   66.064368][ T6118] netlink: 'syz.0.99': attribute type 7 has an invalid length.
[   66.069708][ T6118] netlink: 'syz.0.99': attribute type 15 has an invalid length.
[   66.072134][ T6118] netlink: 'syz.0.99': attribute type 16 has an invalid length.
[   66.079855][ T6118] netlink: 'syz.0.99': attribute type 21 has an invalid length.
[   66.082124][ T6118] netlink: 'syz.0.99': attribute type 25 has an invalid length.
[   66.088773][ T6118] netlink: 'syz.0.99': attribute type 27 has an invalid length.
[   66.091285][ T6118] netlink: 'syz.0.99': attribute type 28 has an invalid length.
[   66.094113][ T6118] netlink: 15446 bytes leftover after parsing attributes in process `syz.0.99'.
[   66.437458][ T6138] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   67.415712][ T6160] netlink: 40 bytes leftover after parsing attributes in process `syz.0.117'.
[   67.418451][ T6160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.117'.
[   67.486364][ T6165] netlink: 42496 bytes leftover after parsing attributes in process `syz.1.119'.
[   67.735796][ T6177] netlink: 132 bytes leftover after parsing attributes in process `syz.0.125'.
[   68.343870][ T6207] validate_nla: 3 callbacks suppressed
[   68.343904][ T6207] netlink: 'syz.2.138': attribute type 2 has an invalid length.
[   68.348338][ T6207] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.138'.
[   68.806342][ T6231] netlink: 'syz.2.145': attribute type 3 has an invalid length.
[   68.809181][ T6231] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.145'.
[   68.870624][ T6234] netlink: 'syz.0.150': attribute type 2 has an invalid length.
[   68.873392][ T6234] netlink: 'syz.0.150': attribute type 4 has an invalid length.
[   68.876549][ T6234] netlink: 132 bytes leftover after parsing attributes in process `syz.0.150'.
[   69.264593][ T6256] netlink: 'syz.1.160': attribute type 39 has an invalid length.
[   69.677292][ T6267] netlink: 10 bytes leftover after parsing attributes in process `syz.2.163'.
[   70.811113][ T6284] netlink: 'syz.0.170': attribute type 2 has an invalid length.
[   70.816077][ T6284] netlink: 'syz.0.170': attribute type 8 has an invalid length.
[   70.819208][ T6284] netlink: 132 bytes leftover after parsing attributes in process `syz.0.170'.
[   70.868389][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   70.870441][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   70.958989][ T6293] netlink: 'syz.0.174': attribute type 4 has an invalid length.
[   70.993489][ T6293] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   71.022618][ T6297] netlink: 'syz.1.175': attribute type 30 has an invalid length.
[   71.261101][   T55] Bluetooth: hci0: Malformed Event: 0x2f
[   71.508997][ T6328] netlink: 'syz.2.190': attribute type 29 has an invalid length.
[   72.898703][ T6352] __nla_validate_parse: 1 callbacks suppressed
[   72.898715][ T6352] netlink: 60 bytes leftover after parsing attributes in process `syz.2.196'.
[   73.196681][ T6352] caif0: entered promiscuous mode
[   73.198611][ T6352] caif0: entered allmulticast mode
[   73.967206][ T6395] validate_nla: 1 callbacks suppressed
[   73.967218][ T6395] netlink: 'syz.2.218': attribute type 21 has an invalid length.
[   73.971481][ T6395] netlink: 132 bytes leftover after parsing attributes in process `syz.2.218'.
[   74.581512][ T6414] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.227'.
[   77.675964][ T6527] netlink: 60 bytes leftover after parsing attributes in process `syz.1.278'.
[   77.936122][ T6541] netlink: 132 bytes leftover after parsing attributes in process `syz.1.285'.
[   78.389243][ T6569] netlink: 'syz.2.298': attribute type 29 has an invalid length.
[   78.395118][ T6569] netlink: 'syz.2.298': attribute type 29 has an invalid length.
[   79.165844][ T6575] netlink: 128 bytes leftover after parsing attributes in process `syz.0.301'.
[   79.170232][ T6575] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   79.238780][ T6592] netlink: 'syz.2.308': attribute type 21 has an invalid length.
[   79.278109][ T6592] netlink: 144 bytes leftover after parsing attributes in process `syz.2.308'.
[   79.366167][ T6575] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   79.659221][   T55] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3
[   81.105590][    T9] cfg80211: failed to load regulatory.db
[   82.179984][ T6662] veth1_macvtap: left promiscuous mode
[   82.226259][ T6662] veth1_macvtap: entered promiscuous mode
[   82.236268][ T6662] macsec0: entered promiscuous mode
[   82.238684][ T6662] macsec0: entered allmulticast mode
[   82.240919][ T6662] veth1_macvtap: entered allmulticast mode
[   84.069542][ T6713] netlink: 'syz.1.362': attribute type 3 has an invalid length.
[   84.079050][ T6713] netlink: 'syz.1.362': attribute type 2 has an invalid length.
[   84.082501][ T6713] netlink: 130532 bytes leftover after parsing attributes in process `syz.1.362'.
[   84.525560][ T6732] netlink: 'syz.2.371': attribute type 33 has an invalid length.
[   84.529046][ T6732] netlink: 164 bytes leftover after parsing attributes in process `syz.2.371'.
[   84.684937][ T6741] netlink: 18187 bytes leftover after parsing attributes in process `syz.1.375'.
[   84.938609][ T6747] raw_sendmsg: syz.1.377 forgot to set AF_INET. Fix it!
[   85.460016][ T6758] netlink: 'syz.2.383': attribute type 2 has an invalid length.
[   85.463059][ T6758] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.383'.
[   85.725720][ T6762] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.733847][ T6762] batman_adv: batadv0: Removing interface: batadv_slave_0
[   85.750997][ T6762] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.775966][ T6762] batman_adv: batadv0: Removing interface: batadv_slave_1
[   86.235550][ T6777] netlink: 156 bytes leftover after parsing attributes in process `syz.0.391'.
[   86.424937][ T6782] netlink: 'syz.1.393': attribute type 10 has an invalid length.
[   86.427343][ T6782] netlink: 40 bytes leftover after parsing attributes in process `syz.1.393'.
[   86.439275][ T6782] batman_adv: batadv0: Adding interface: virt_wifi0
[   86.441338][ T6782] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.455111][ T6782] batman_adv: batadv0: Interface activated: virt_wifi0
[   87.362081][ T6815] netlink: 'syz.2.407': attribute type 13 has an invalid length.
[   87.457978][ T6818] netlink: 830 bytes leftover after parsing attributes in process `syz.0.409'.
[   87.495811][ T6819] C: renamed from team_slave_0 (while UP)
[   87.581819][ T6824] sock: sock_timestamping_bind_phc: sock not bind to device
[   87.614520][ T6819] netlink: 'syz.2.410': attribute type 3 has an invalid length.
[   87.617449][ T6819] netlink: 144 bytes leftover after parsing attributes in process `syz.2.410'.
[   87.728641][ T6836] netlink: 'syz.1.418': attribute type 21 has an invalid length.
[   87.801126][ T6842] netlink: 180 bytes leftover after parsing attributes in process `syz.0.421'.
[   87.814532][ T6839] syz.2.419: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   87.833990][ T6839] CPU: 1 UID: 0 PID: 6839 Comm: syz.2.419 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[   87.834007][ T6839] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   87.834013][ T6839] Call Trace:
[   87.834018][ T6839]  <TASK>
[   87.834023][ T6839]  dump_stack_lvl+0x189/0x250
[   87.834041][ T6839]  ? __pfx_dump_stack_lvl+0x10/0x10
[   87.834051][ T6839]  ? __pfx__printk+0x10/0x10
[   87.834065][ T6839]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   87.834077][ T6839]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   87.834092][ T6839]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   87.834104][ T6839]  warn_alloc+0x214/0x310
[   87.834113][ T6839]  ? stack_depot_save_flags+0x429/0x900
[   87.834128][ T6839]  ? __pfx_warn_alloc+0x10/0x10
[   87.834138][ T6839]  ? kasan_save_track+0x4f/0x80
[   87.834146][ T6839]  ? xskq_create+0x56/0x170
[   87.834156][ T6839]  ? xsk_init_queue+0xb0/0x110
[   87.834166][ T6839]  ? xsk_setsockopt+0x4de/0x710
[   87.834175][ T6839]  ? do_sock_setsockopt+0x17c/0x1b0
[   87.834184][ T6839]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   87.834191][ T6839]  ? do_syscall_64+0xfa/0x3b0
[   87.834202][ T6839]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.834214][ T6839]  __vmalloc_node_range_noprof+0x125/0x12f0
[   87.834237][ T6839]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   87.834249][ T6839]  ? __kasan_kmalloc+0x93/0xb0
[   87.834259][ T6839]  vmalloc_user_noprof+0xad/0xf0
[   87.834267][ T6839]  ? xskq_create+0xbf/0x170
[   87.834277][ T6839]  xskq_create+0xbf/0x170
[   87.834288][ T6839]  xsk_init_queue+0xb0/0x110
[   87.834299][ T6839]  xsk_setsockopt+0x4de/0x710
[   87.834309][ T6839]  ? __pfx_xsk_setsockopt+0x10/0x10
[   87.834319][ T6839]  ? do_sock_setsockopt+0x33/0x1b0
[   87.834327][ T6839]  ? aa_sock_opt_perm+0x74/0x110
[   87.834339][ T6839]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   87.834350][ T6839]  ? __pfx_xsk_setsockopt+0x10/0x10
[   87.834359][ T6839]  do_sock_setsockopt+0x17c/0x1b0
[   87.834370][ T6839]  __x64_sys_setsockopt+0x13f/0x1b0
[   87.834381][ T6839]  do_syscall_64+0xfa/0x3b0
[   87.834392][ T6839]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.834399][ T6839]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   87.834414][ T6839]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.834423][ T6839] RIP: 0033:0x7fd487d8e9a9
[   87.834431][ T6839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   87.834439][ T6839] RSP: 002b:00007fd488c89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   87.834448][ T6839] RAX: ffffffffffffffda RBX: 00007fd487fb5fa0 RCX: 00007fd487d8e9a9
[   87.834454][ T6839] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006
[   87.834459][ T6839] RBP: 00007fd487e10d69 R08: 0000000000000004 R09: 0000000000000000
[   87.834463][ T6839] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[   87.834468][ T6839] R13: 0000000000000000 R14: 00007fd487fb5fa0 R15: 00007ffc3cda4048
[   87.834481][ T6839]  </TASK>
[   87.834521][ T6839] Mem-Info:
[   87.958000][ T6839] active_anon:5492 inactive_anon:0 isolated_anon:0
[   87.958000][ T6839]  active_file:863 inactive_file:38217 isolated_file:0
[   87.958000][ T6839]  unevictable:1768 dirty:66 writeback:0
[   87.958000][ T6839]  slab_reclaimable:9072 slab_unreclaimable:53183
[   87.958000][ T6839]  mapped:18064 shmem:2437 pagetables:929
[   87.958000][ T6839]  sec_pagetables:0 bounce:0
[   87.958000][ T6839]  kernel_misc_reclaimable:0
[   87.958000][ T6839]  free:301090 free_pcp:20642 free_cma:0
[   87.977493][ T6839] Node 0 active_anon:12476kB inactive_anon:0kB active_file:2684kB inactive_file:133316kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:41692kB dirty:128kB writeback:0kB shmem:4888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5644kB pagetables:2196kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   87.999553][ T6839] Node 1 active_anon:9492kB inactive_anon:0kB active_file:768kB inactive_file:19552kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30564kB dirty:136kB writeback:0kB shmem:4860kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5752kB pagetables:1588kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   88.010480][ T6839] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   88.034597][ T6839] lowmem_reserve[]: 0 812 812 812 812
[   88.037337][ T6839] Node 0 DMA32 free:256052kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12476kB inactive_anon:0kB active_file:2684kB inactive_file:133316kB unevictable:3536kB writepending:128kB present:1556484kB managed:831912kB mlocked:0kB bounce:0kB free_pcp:37496kB local_pcp:16776kB free_cma:0kB
[   88.063979][ T6839] lowmem_reserve[]: 0 0 0 0 0
[   88.066458][ T6839] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[   88.082739][ T6839] lowmem_reserve[]: 0 0 854 854 854
[   88.089130][ T6839] Node 1 Normal free:478092kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9628kB inactive_anon:0kB active_file:768kB inactive_file:19552kB unevictable:3536kB writepending:136kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:45380kB local_pcp:22732kB free_cma:0kB
[   88.124595][ T6839] lowmem_reserve[]: 0 0 0 0 0
[   88.131996][ T6839] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   88.160516][ T6839] Node 0 DMA32: 549*4kB (UM) 246*8kB (UM) 99*16kB (M) 238*32kB (UM) 102*64kB (UME) 44*128kB (UME) 11*256kB (UME) 11*512kB (UME) 5*1024kB (UM) 3*2048kB (M) 53*4096kB (M) = 262324kB
[   88.168542][ T6839] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   88.184123][ T6839] Node 1 Normal: 191*4kB (UME) 507*8kB (UME) 117*16kB (UM) 148*32kB (UME) 27*64kB (UME) 18*128kB (UME) 7*256kB (UME) 6*512kB (UME) 3*1024kB (UME) 0*2048kB 111*4096kB (M) = 478052kB
[   88.200843][ T6839] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   88.204384][ T6839] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   88.209108][ T6839] 41517 total pagecache pages
[   88.211819][ T6839] 0 pages in swap cache
[   88.213389][ T6839] Free swap  = 124996kB
[   88.222953][ T6839] Total swap = 124996kB
[   88.224450][ T6839] 786301 pages RAM
[   88.226350][ T6839] 0 pages HighMem/MovableOnly
[   88.228170][ T6839] 241075 pages reserved
[   88.231351][ T6839] 0 pages cma reserved
[   88.309536][   T55] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4
[   88.899529][ T6904] syz.2.448 uses obsolete (PF_INET,SOCK_PACKET)
[   88.930360][ T6904] netlink: 'syz.2.448': attribute type 10 has an invalid length.
[   88.982771][ T6904] team0: Device ipvlan1 failed to register rx_handler
[   89.646106][ T6948] C: renamed from team_slave_0 (while UP)
[   89.651357][ T6948] netlink: 'syz.0.470': attribute type 3 has an invalid length.
[   89.668408][ T6950] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.471'.
[   90.525762][ T6994] netlink: 'syz.2.490': attribute type 2 has an invalid length.
[   90.528834][ T6994] netlink: 'syz.2.490': attribute type 1 has an invalid length.
[   90.532144][ T6994] netlink: 152 bytes leftover after parsing attributes in process `syz.2.490'.
[   90.587251][ T6997] netlink: 'syz.0.492': attribute type 39 has an invalid length.
[   91.972610][   T55] Bluetooth: hci2: ACL packet for unknown connection handle 0
[   92.231838][ T7028] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.505'.
[   93.158616][ T7077] netlink: 'syz.1.528': attribute type 1 has an invalid length.
[   93.161047][ T7077] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.528'.
[   93.386247][ T7098] netlink: 'syz.0.538': attribute type 21 has an invalid length.
[   93.393601][ T7098] netlink: 156 bytes leftover after parsing attributes in process `syz.0.538'.
[   93.408803][ T7093] netlink: 'syz.2.536': attribute type 2 has an invalid length.
[   93.412402][ T7093] netlink: 137592 bytes leftover after parsing attributes in process `syz.2.536'.
[   93.548367][ T7100] sctp: [Deprecated]: syz.2.539 (pid 7100) Use of struct sctp_assoc_value in delayed_ack socket option.
[   93.548367][ T7100] Use struct sctp_sack_info instead
[   96.403137][ T7176] netlink: 'syz.2.575': attribute type 10 has an invalid length.
[   96.406025][ T7176] netlink: 2 bytes leftover after parsing attributes in process `syz.2.575'.
[   96.410158][ T7176] bond0: entered promiscuous mode
[   96.413073][ T7176] bond_slave_0: entered promiscuous mode
[   96.416626][ T7176] bond_slave_1: entered promiscuous mode
[   96.421571][ T7176] bridge0: port 3(bond0) entered blocking state
[   96.426402][ T7176] bridge0: port 3(bond0) entered disabled state
[   96.430519][ T7176] bond0: entered allmulticast mode
[   96.432995][ T7176] bond_slave_0: entered allmulticast mode
[   96.434947][ T7176] bond_slave_1: entered allmulticast mode
[   96.447879][ T7176] bridge0: port 3(bond0) entered blocking state
[   96.450779][ T7176] bridge0: port 3(bond0) entered forwarding state
[   97.390890][ T7198] netlink: 'syz.1.582': attribute type 4 has an invalid length.
[   97.393831][ T7198] netlink: 152 bytes leftover after parsing attributes in process `syz.1.582'.
[   97.429661][ T7198] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   97.686802][ T7212] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.591'.
[   98.741875][ T7230] netlink: 132 bytes leftover after parsing attributes in process `syz.1.597'.
[   99.031375][ T7253] netlink: 132 bytes leftover after parsing attributes in process `syz.2.608'.
[   99.363994][ T7271] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.615'.
[   99.584029][ T7282] netlink: 156 bytes leftover after parsing attributes in process `syz.1.620'.
[  101.013130][ T7315] netlink: 'syz.0.634': attribute type 7 has an invalid length.
[  101.510774][ T7338] netlink: 26 bytes leftover after parsing attributes in process `syz.2.645'.
[  102.219450][ T7364] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.657'.
[  102.523895][ T7377] nr0: tun_chr_ioctl cmd 1074025677
[  102.526578][ T7377] nr0: linktype set to 825
[  104.263302][ T7420] sock: sock_timestamping_bind_phc: sock not bind to device
[  107.272786][ T7444] netlink: 132 bytes leftover after parsing attributes in process `syz.1.693'.
[  107.369407][ T7444] netlink: 'syz.1.693': attribute type 49 has an invalid length.
[  108.311557][ T7479] syzkaller0: entered promiscuous mode
[  108.321801][ T7479] syzkaller0: entered allmulticast mode
[  110.199336][ T7567] netlink: 'syz.1.746': attribute type 3 has an invalid length.
[  110.201901][ T7567] netlink: 'syz.1.746': attribute type 2 has an invalid length.
[  110.210471][ T7567] netlink: 198000 bytes leftover after parsing attributes in process `syz.1.746'.
[  110.370352][ T7577] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.749'.
[  110.378944][ T7577] netlink: 160 bytes leftover after parsing attributes in process `syz.2.749'.
[  110.418858][ T7581] netlink: 152 bytes leftover after parsing attributes in process `syz.0.752'.
[  110.422171][ T7581] tc_dump_action: action bad kind
[  111.722771][ T7587] cgroup: fork rejected by pids controller in /syz2
[  126.703754][ T5220] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  126.707915][ T5220] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  126.711288][ T5220] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  126.716527][ T5220] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  126.721258][ T5220] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  126.762926][ T5220] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  126.766626][ T5220] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  126.769636][ T5220] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  126.775863][ T5220] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  126.779389][ T5220] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  127.576152][   T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  127.580049][   T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  127.587529][   T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  127.592190][   T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  127.596262][   T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  128.783310][   T55] Bluetooth: hci3: command tx timeout
[  128.862513][   T55] Bluetooth: hci4: command tx timeout
[  129.662418][   T55] Bluetooth: hci5: command tx timeout
[  130.865880][   T55] Bluetooth: hci3: command tx timeout
[  130.943094][   T55] Bluetooth: hci4: command tx timeout
[  131.756815][   T55] Bluetooth: hci5: command tx timeout
[  132.942508][   T55] Bluetooth: hci3: command tx timeout
[  133.023604][   T55] Bluetooth: hci4: command tx timeout
[  133.822475][   T55] Bluetooth: hci5: command tx timeout
[  135.022923][   T55] Bluetooth: hci3: command tx timeout
[  135.102463][   T55] Bluetooth: hci4: command tx timeout
[  135.902595][   T55] Bluetooth: hci5: command tx timeout
[  180.472469][ T5829] Bluetooth: hci2: command 0x0406 tx timeout
[  180.474960][ T5829] Bluetooth: hci0: command 0x0406 tx timeout
[  180.477279][ T5829] Bluetooth: hci1: command 0x0406 tx timeout
[  186.858486][ T7609] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  186.861905][ T7609] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  186.865159][ T7609] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  186.867937][ T7609] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  186.870690][ T7609] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  186.924080][ T7611] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  186.928412][ T7611] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  186.931246][ T7611] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  186.938247][ T7611] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  186.940822][ T7611] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  187.728056][ T7615] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  187.731200][ T7615] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  187.737128][ T7615] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  187.739994][ T7615] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  187.743923][ T7615] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  215.602236][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  215.604528][    C1] rcu: 	1-....: (10430 ticks this GP) idle=0da4/1/0x4000000000000000 softirq=20645/20646 fqs=4908
[  215.610117][    C1] rcu: 	         hardirqs   softirqs   csw/system
[  215.612181][    C1] rcu: 	 number:  1103394          0            0
[  215.614465][    C1] rcu: 	cputime:    25875      26613           84   ==> 52490(ms)
[  215.617134][    C1] rcu: 	(t=10500 jiffies g=13253 q=2212 ncpus=2)
[  215.619404][    C1] CPU: 1 UID: 0 PID: 7583 Comm: syz.1.751 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  215.619414][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  215.619420][    C1] RIP: 0010:rcu_read_unlock_special+0x87/0x4c0
[  215.619471][    C1] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 62 2c f8 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
[  215.619483][    C1] RSP: 0018:ffffc900001e0600 EFLAGS: 00000206
[  215.619496][    C1] RAX: af10c7e95895b300 RBX: 1ffff9200003c0c8 RCX: af10c7e95895b300
[  215.619506][    C1] RDX: 0000000000000002 RSI: ffffffff8d99883e RDI: ffffffff8be29f40
[  215.619514][    C1] RBP: ffffc900001e06f8 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  215.619521][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffffffff8e144400
[  215.619527][    C1] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000002
[  215.619534][    C1] FS:  00007fadf7e566c0(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
[  215.619543][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  215.619549][    C1] CR2: 00007fadf7e55fc8 CR3: 00000001065ea000 CR4: 00000000000006f0
[  215.619576][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  215.619583][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  215.619590][    C1] Call Trace:
[  215.619598][    C1]  <IRQ>
[  215.619607][    C1]  ? __pfx_perf_trace_lock+0x10/0x10
[  215.619633][    C1]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  215.619657][    C1]  ? unwind_next_frame+0xa5/0x2390
[  215.619686][    C1]  __rcu_read_unlock+0x84/0xe0
[  215.619707][    C1]  ? unwind_next_frame+0xa5/0x2390
[  215.619721][    C1]  unwind_next_frame+0x19ae/0x2390
[  215.619744][    C1]  ? unwind_next_frame+0xa5/0x2390
[  215.619759][    C1]  ? handle_softirqs+0x286/0x870
[  215.619783][    C1]  ? rcu_core+0xc34/0x1710
[  215.619795][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  215.619815][    C1]  arch_stack_walk+0x11c/0x150
[  215.619839][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  215.619865][    C1]  stack_trace_save+0x9c/0xe0
[  215.619884][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  215.619903][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  215.619918][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  215.619938][    C1]  kasan_save_track+0x3e/0x80
[  215.619950][    C1]  ? kasan_save_track+0x3e/0x80
[  215.619960][    C1]  ? kasan_save_free_info+0x46/0x50
[  215.619976][    C1]  ? __kasan_slab_free+0x62/0x70
[  215.619987][    C1]  ? slab_free_after_rcu_debug+0x129/0x2a0
[  215.620004][    C1]  ? rcu_core+0xca8/0x1710
[  215.620015][    C1]  ? handle_softirqs+0x286/0x870
[  215.620088][    C1]  kasan_save_free_info+0x46/0x50
[  215.620106][    C1]  __kasan_slab_free+0x62/0x70
[  215.620119][    C1]  slab_free_after_rcu_debug+0x129/0x2a0
[  215.620138][    C1]  ? __pfx_slab_free_after_rcu_debug+0x10/0x10
[  215.620155][    C1]  ? rcu_core+0xc34/0x1710
[  215.620169][    C1]  rcu_core+0xca8/0x1710
[  215.620206][    C1]  ? __pfx_rcu_core+0x10/0x10
[  215.620219][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  215.620257][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  215.620276][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  215.620292][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  215.620322][    C1]  handle_softirqs+0x286/0x870
[  215.620342][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  215.620364][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  215.620385][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  215.620411][    C1]  __irq_exit_rcu+0xca/0x1f0
[  215.620462][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  215.620490][    C1]  irq_exit_rcu+0x9/0x30
[  215.620502][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  215.620520][    C1]  </IRQ>
[  215.620524][    C1]  <TASK>
[  215.620531][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  215.620545][    C1] RIP: 0010:smp_call_function_single+0x370/0x590
[  215.620562][    C1] Code: 89 7b 0e 48 89 de e8 4f 02 00 00 41 89 c4 45 85 ff 74 44 44 89 24 24 0f 1f 44 00 00 4d 89 f7 48 83 c3 08 49 89 dc 49 c1 ec 03 <43> 0f b6 04 2c 84 c0 0f 85 46 01 00 00 44 8b 33 44 89 f6 83 e6 01
[  215.620572][    C1] RSP: 0018:ffffc90007047aa0 EFLAGS: 00000a02
[  215.620583][    C1] RAX: 0000000000000000 RBX: ffffc90007047ae8 RCX: af10c7e95895b300
[  215.620592][    C1] RDX: ffffc90007fe9000 RSI: 00000000000002e3 RDI: 00000000000002e4
[  215.620601][    C1] RBP: ffffc90007047b90 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  215.620610][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 1ffff92000e08f5d
[  215.620619][    C1] R13: dffffc0000000000 R14: 1ffff92000e08f58 R15: 1ffff92000e08f58
[  215.620651][    C1]  ? __pfx_remote_function+0x10/0x10
[  215.620665][    C1]  ? __pfx_smp_call_function_single+0x10/0x10
[  215.620681][    C1]  ? __pfx_remote_function+0x10/0x10
[  215.620710][    C1]  perf_install_in_context+0x593/0x8f0
[  215.620742][    C1]  ? __pfx_perf_install_in_context+0x10/0x10
[  215.620758][    C1]  ? find_get_pmu_context+0x7cd/0x890
[  215.620775][    C1]  ? __pfx___perf_install_in_context+0x10/0x10
[  215.620809][    C1]  ? anon_inode_getfile+0x106/0x1a0
[  215.620824][    C1]  ? perf_event__header_size+0x168/0x230
[  215.620848][    C1]  __se_sys_perf_event_open+0x193a/0x1d70
[  215.620882][    C1]  ? __pfx___se_sys_perf_event_open+0x10/0x10
[  215.620916][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  215.620941][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  215.620968][    C1]  ? do_syscall_64+0xbe/0x3b0
[  215.620985][    C1]  ? __x64_sys_perf_event_open+0x20/0xc0
[  215.621006][    C1]  do_syscall_64+0xfa/0x3b0
[  215.621023][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  215.621040][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.621053][    C1]  ? exc_page_fault+0x9f/0xf0
[  215.621072][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.621085][    C1] RIP: 0033:0x7fadf6f8e9a9
[  215.621099][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  215.621109][    C1] RSP: 002b:00007fadf7e56038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  215.621121][    C1] RAX: ffffffffffffffda RBX: 00007fadf71b6080 RCX: 00007fadf6f8e9a9
[  215.621130][    C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000180
[  215.621139][    C1] RBP: 00007fadf7010d69 R08: 0000000000000000 R09: 0000000000000000
[  215.621146][    C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  215.621154][    C1] R13: 0000000000000001 R14: 00007fadf71b6080 R15: 00007ffeda72c5b8
[  215.621182][    C1]  </TASK>
[  215.819861][    C1] sched: DL replenish lagged too much

VM DIAGNOSIS:
10:43:37  Registers:
info registers vcpu 0

CPU#0
RAX=f6aee1218c495100 RBX=ffffffff81976a48 RCX=f6aee1218c495100 RDX=0000000000000001
RSI=ffffffff8d99883e RDI=ffffffff8be29f40 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa1e8f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6e84f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055faca1cbe08 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f6e3ad86d00
XMM02=0040a0800000006d 0300408000000000 XMM03=0057900300080057 8803000400578403
XMM04=0000000000000000 000000000000000e XMM05=0000000000000000 000000000001df8a
XMM06=01080057a8030004 0057a4030000006f XMM07=820057a200000000 80820057a2033002
XMM08=0057a00308080057 980300040000006e XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000036 RBX=0000000000000036 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001df930
R8 =ffff8881073d0237 R9 =1ffff11020e7a046 R10=dffffc0000000000 R11=ffffffff85472860
R12=dffffc0000000000 R13=ffffffff99af58ed R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff854728dc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fadf7e566c0 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fadf7e55fc8 CR3=00000001065ea000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fadf7186478 00007fadf7186450 XMM03=00007fadf7186488 00007fadf7186480
XMM04=00007fadf7ced100 00007fadf7186440 XMM05=00007fadf7186458 00007fadf71864a0
XMM06=00007fadf7186498 00007fadf7186490 XMM07=00007fadf7186488 00007fadf7186480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fadf7011ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
