last executing test programs:

16.46478708s ago: executing program 0 (id=1):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_config_ext={0x9, 0x2}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="0f02000039000511d25a80648c63940d0224fc600b003540280009000200002037153e37eb010280060410000a00", 0x33fe0}], 0x1}, 0x0)

16.464622376s ago: executing program 1 (id=2):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20242, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
write$cgroup_devices(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="1e0301003c05000128876b60864668f82ffdeefa000000000000ffd2acb165fe580cd568020031b87b548cb74136f366da0abe01"], 0xffdd)

16.364844169s ago: executing program 0 (id=6):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x54}, [@ldst={0x6, 0x0, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48)

16.304490188s ago: executing program 0 (id=7):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_pressure(r1, 0x0, 0x2, 0x0)
write$cgroup_pressure(r2, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x42)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff)
r6 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x110, r4, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000180)={0x1, 0x80, 0x4, 0xac, 0x5, 0x57, 0x0, 0x9, 0x10826, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x200, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x2204, 0x5, 0x6, 0x7, 0x800, 0x8001, 0xfffc, 0x0, 0x2, 0x0, 0xffffffffffffffff}, r1, 0xffffffffffffffff, r3, 0x1)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x100904, 0x401, 0x25, 0x0, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket$kcm(0x28, 0x5, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x1f, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
socketpair(0x1d, 0x3, 0x1, &(0x7f00000014c0))

16.234703037s ago: executing program 2 (id=8):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="17010000a4fc8a000500feff"], &(0x7f0000000040)='GPL\x00', 0x3, 0x7d, &(0x7f0000003300)=""/125, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x11}, 0x90)

16.174634837s ago: executing program 2 (id=9):
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0xc8, 0x2, 0x8, 0x0, 0xfc, 0xa}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xa)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde9089060000004e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xd00, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8641200a8", 0x0, 0xf6d}, 0x28)

16.112648236s ago: executing program 2 (id=10):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x3f}, 0x80, &(0x7f0000000140)=[{&(0x7f0000001d80)="e4", 0x1}], 0x1}, 0x44050)

16.020977994s ago: executing program 2 (id=11):
r0 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x1, 0x27}, 0x80, 0x0}, 0x4080)

15.951389256s ago: executing program 2 (id=12):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4020000000000006111640000000000850000001c0000009500000005007586285866cbd92f204f00000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x6, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x30)

15.950952553s ago: executing program 2 (id=13):
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{}, &(0x7f0000000000), 0x0}, 0x20)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x100002e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x7, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2}, [], {0x95, 0x0, 0x0, 0x1a03d3}}, &(0x7f0000000100)='GPL\x00', 0x5}, 0x94)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x34004811)
r3 = socket$kcm(0x23, 0x5, 0x0)
ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f00000001c0)={'gretap0\x00'})
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89ed, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1100adca5c52000000000003", @ANYRES32, @ANYRES32], 0x50)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socketpair(0x1, 0x5, 0x7, &(0x7f0000000040))
bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080))

990.588742ms ago: executing program 32 (id=7):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_pressure(r1, 0x0, 0x2, 0x0)
write$cgroup_pressure(r2, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x42)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff)
r6 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x110, r4, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000180)={0x1, 0x80, 0x4, 0xac, 0x5, 0x57, 0x0, 0x9, 0x10826, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x200, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x2204, 0x5, 0x6, 0x7, 0x800, 0x8001, 0xfffc, 0x0, 0x2, 0x0, 0xffffffffffffffff}, r1, 0xffffffffffffffff, r3, 0x1)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x100904, 0x401, 0x25, 0x0, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket$kcm(0x28, 0x5, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x1f, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
socketpair(0x1d, 0x3, 0x1, &(0x7f00000014c0))

914.037667ms ago: executing program 33 (id=2):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20242, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
write$cgroup_devices(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="1e0301003c05000128876b60864668f82ffdeefa000000000000ffd2acb165fe580cd568020031b87b548cb74136f366da0abe01"], 0xffdd)

0s ago: executing program 34 (id=13):
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{}, &(0x7f0000000000), 0x0}, 0x20)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x100002e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x7, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2}, [], {0x95, 0x0, 0x0, 0x1a03d3}}, &(0x7f0000000100)='GPL\x00', 0x5}, 0x94)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x34004811)
r3 = socket$kcm(0x23, 0x5, 0x0)
ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f00000001c0)={'gretap0\x00'})
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89ed, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1100adca5c52000000000003", @ANYRES32, @ANYRES32], 0x50)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socketpair(0x1, 0x5, 0x7, &(0x7f0000000040))
bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080))

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:15825' (ED25519) to the list of known hosts.
syzkaller login: [   56.359362][ T5817] cgroup: Unknown subsys name 'net'
[   56.441756][ T5817] cgroup: Unknown subsys name 'cpuset'
[   56.445904][ T5817] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.245070][ T5817] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.123464][ T5223] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.136710][ T5223] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.140184][ T5223] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.145058][ T5223] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.148935][ T5223] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.152610][ T5223] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.156356][ T5223] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.168011][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.177297][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.180773][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.183981][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.217248][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.224094][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.227833][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.231573][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.554144][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   63.668570][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   63.714280][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.718295][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.721458][ T5840] bridge_slave_0: entered allmulticast mode
[   63.725411][ T5840] bridge_slave_0: entered promiscuous mode
[   63.738187][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   63.751462][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.754477][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.757845][ T5840] bridge_slave_1: entered allmulticast mode
[   63.761679][ T5840] bridge_slave_1: entered promiscuous mode
[   63.891892][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.901872][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.904889][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.908839][ T5836] bridge_slave_0: entered allmulticast mode
[   63.912772][ T5836] bridge_slave_0: entered promiscuous mode
[   63.919116][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.922106][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.925104][ T5836] bridge_slave_1: entered allmulticast mode
[   63.929314][ T5836] bridge_slave_1: entered promiscuous mode
[   63.954631][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.029489][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.035697][ T5840] team0: Port device team_slave_0 added
[   64.039367][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.042170][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.044981][ T5832] bridge_slave_0: entered allmulticast mode
[   64.049982][ T5832] bridge_slave_0: entered promiscuous mode
[   64.054736][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.058103][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.061091][ T5832] bridge_slave_1: entered allmulticast mode
[   64.064956][ T5832] bridge_slave_1: entered promiscuous mode
[   64.071391][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.091698][ T5840] team0: Port device team_slave_1 added
[   64.126578][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.158790][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.178423][ T5836] team0: Port device team_slave_0 added
[   64.208956][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.211658][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.220893][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.228333][ T5836] team0: Port device team_slave_1 added
[   64.232579][ T5832] team0: Port device team_slave_0 added
[   64.249830][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.251978][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.260759][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.266086][ T5832] team0: Port device team_slave_1 added
[   64.302791][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.305702][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.316869][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.322972][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.325825][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.337735][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.372320][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.374586][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.383235][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.389363][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.392181][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.400238][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.426251][ T5840] hsr_slave_0: entered promiscuous mode
[   64.430347][ T5840] hsr_slave_1: entered promiscuous mode
[   64.498673][ T5836] hsr_slave_0: entered promiscuous mode
[   64.501553][ T5836] hsr_slave_1: entered promiscuous mode
[   64.504091][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.507309][ T5836] Cannot create hsr debugfs directory
[   64.526182][ T5832] hsr_slave_0: entered promiscuous mode
[   64.529571][ T5832] hsr_slave_1: entered promiscuous mode
[   64.532568][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.535739][ T5832] Cannot create hsr debugfs directory
[   64.823081][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.845420][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.857922][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.869566][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.897201][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.903776][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.912517][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.939096][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.976693][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.982958][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.991785][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.002129][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.115796][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.123567][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.153058][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   65.160072][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   65.181091][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.183938][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.189528][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.192426][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.209731][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.212627][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.217575][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.220454][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.227240][ T5833] Bluetooth: hci0: command tx timeout
[   65.231292][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.265288][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   65.287601][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.290423][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.307363][ T5833] Bluetooth: hci1: command tx timeout
[   65.307450][ T5842] Bluetooth: hci2: command tx timeout
[   65.313436][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.315999][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.340948][ T5840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.490877][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.528662][ T5832] veth0_vlan: entered promiscuous mode
[   65.535383][ T5832] veth1_vlan: entered promiscuous mode
[   65.554628][ T5832] veth0_macvtap: entered promiscuous mode
[   65.562399][ T5832] veth1_macvtap: entered promiscuous mode
[   65.582619][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.590824][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.596685][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.599450][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.602158][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.604818][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.622815][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.647834][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.696329][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.700557][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.701869][ T5836] veth0_vlan: entered promiscuous mode
[   65.734276][ T5836] veth1_vlan: entered promiscuous mode
[   65.741155][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.741535][ T5840] veth0_vlan: entered promiscuous mode
[   65.743573][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.755894][ T5840] veth1_vlan: entered promiscuous mode
[   65.792922][ T5836] veth0_macvtap: entered promiscuous mode
[   65.809067][ T5836] veth1_macvtap: entered promiscuous mode
[   65.816112][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.828417][ T5840] veth0_macvtap: entered promiscuous mode
[   65.840698][ T5840] veth1_macvtap: entered promiscuous mode
[   65.844644][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.855013][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.874084][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.887985][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.900194][ T5836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.904032][ T5836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.908812][ T5836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.912276][ T5836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.925671][ T5840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.932470][ T5840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.935707][ T5840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.938874][ T5840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.039630][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.042091][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.070575][ T3524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.073084][ T3524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.099660][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.102144][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.113345][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.121454][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.224657][ T5906] netlink: 495 bytes leftover after parsing attributes in process `syz.0.1'.
[   66.414740][ T5915] netlink: 'syz.0.7': attribute type 39 has an invalid length.
[   66.424296][ T5910] syzkaller0: entered promiscuous mode
[   66.426338][ T5910] syzkaller0: entered allmulticast mode
[   67.320396][ T5842] Bluetooth: hci0: command tx timeout
[   67.387198][ T5842] Bluetooth: hci2: command tx timeout
[   67.431519][ T5842] Bluetooth: hci1: command tx timeout
[   69.396899][ T5842] Bluetooth: hci0: command tx timeout
[   69.467028][ T5842] Bluetooth: hci1: command tx timeout
[   69.470982][ T5842] Bluetooth: hci2: command tx timeout
[   71.466650][ T5833] Bluetooth: hci0: command tx timeout
[   71.546755][ T5842] Bluetooth: hci1: command tx timeout
[   71.548979][ T5833] Bluetooth: hci2: command tx timeout
[   72.366406][    C0] hrtimer: interrupt took 23029 ns
[   73.105833][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   73.108667][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   73.338647][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 4498819578 wd_nsec: 4498819527
[   81.167075][   T47] cfg80211: failed to load regulatory.db
[   82.371520][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   82.375734][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   82.391121][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   82.395330][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   82.399164][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   82.460050][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   82.462983][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   82.466070][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   82.469896][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   82.472667][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   82.971735][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   82.975479][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   82.979541][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   82.983248][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   82.986332][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   84.431719][ T5833] Bluetooth: hci3: command tx timeout
[   84.507064][ T5833] Bluetooth: hci4: command tx timeout
[   85.076687][ T5833] Bluetooth: hci5: command tx timeout
[   86.511590][ T5833] Bluetooth: hci3: command tx timeout
[   86.586750][ T5833] Bluetooth: hci4: command tx timeout
[   87.150071][ T5833] Bluetooth: hci5: command tx timeout
[   88.591514][ T5833] Bluetooth: hci3: command tx timeout
[   88.676964][ T5833] Bluetooth: hci4: command tx timeout
[   89.226833][ T5833] Bluetooth: hci5: command tx timeout
[   89.909331][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 9480334785 wd_nsec: 9480334694
[   90.677023][ T5833] Bluetooth: hci3: command tx timeout
[   90.746860][ T5833] Bluetooth: hci4: command tx timeout
[   91.306723][ T5833] Bluetooth: hci5: command tx timeout
[  138.155983][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  138.158482][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  143.180150][ T5842] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  143.183618][ T5842] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  143.186295][ T5842] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  143.189567][ T5842] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  143.192572][ T5842] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  143.226624][ T5833] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  143.229943][ T5833] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  143.234172][ T5833] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  143.237796][ T5833] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  143.240565][ T5833] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  143.875432][ T5833] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  143.879194][ T5833] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  143.882225][ T5833] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  143.885083][ T5833] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  143.890198][ T5833] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  145.226639][ T5842] Bluetooth: hci6: command tx timeout
[  145.306698][ T5842] Bluetooth: hci7: command tx timeout
[  145.946815][ T5842] Bluetooth: hci8: command tx timeout
[  147.309748][ T5842] Bluetooth: hci6: command tx timeout
[  147.387098][ T5842] Bluetooth: hci7: command tx timeout
[  148.026635][ T5842] Bluetooth: hci8: command tx timeout
[  149.387908][ T5842] Bluetooth: hci6: command tx timeout
[  149.466697][ T5842] Bluetooth: hci7: command tx timeout
[  150.108268][ T5842] Bluetooth: hci8: command tx timeout
[  151.466670][ T5842] Bluetooth: hci6: command tx timeout
[  151.547378][ T5842] Bluetooth: hci7: command tx timeout
[  152.186610][ T5842] Bluetooth: hci8: command tx timeout
[  171.856485][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
SYZFAIL: failed to recv rpc
[  171.859186][    C0] rcu: 	0-....: (10499 ticks this GP) idle=2a34/1/0x4000000000000000 softirq=14148/14773 fqs=4929
[  171.865244][    C0] rcu: 	         hardirqs   softirqs   csw/system
[  171.867837][    C0] rcu: 	 number:  1018839        606            0
[  171.870395][    C0] rcu: 	cputime:    24925      27561           96   ==> 52490(ms)
[  171.873501][    C0] rcu: 	(t=10500 jiffies g=7505 q=2655 ncpus=2)
[  171.875939][    C0] CPU: 0 UID: 0 PID: 5929 Comm: syz.2.13 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  171.875959][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  171.875970][    C0] RIP: 0010:lock_release+0x2b5/0x3e0
[  171.875992][    C0] Code: 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 2b c1 01 11 <48> 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e
[  171.876005][    C0] RSP: 0018:ffffc90000007b28 EFLAGS: 00000206
[  171.876019][    C0] RAX: 67f8d755e47b5500 RBX: 0000000000000206 RCX: 67f8d755e47b5500
[  171.876029][    C0] RDX: 0000000000000001 RSI: ffffffff8db8655b RDI: ffffffff8be29f40
[  171.876039][    C0] RBP: ffff88802250a7d8 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  171.876049][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 0000000000000001
[  171.876057][    C0] R13: 0000000000000001 R14: ffff888039951cc8 R15: ffff888022509cc0
[  171.876065][    C0] FS:  00007f0cde1b26c0(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
[  171.876076][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  171.876085][    C0] CR2: 000000110c270918 CR3: 0000000028fc2000 CR4: 00000000000006f0
[  171.876116][    C0] Call Trace:
[  171.876126][    C0]  <IRQ>
[  171.876136][    C0]  ? call_timer_fn+0x17e/0x5f0
[  171.876158][    C0]  _raw_spin_unlock+0x16/0x50
[  171.876178][    C0]  call_timer_fn+0x17e/0x5f0
[  171.876193][    C0]  ? __pfx_mrp_join_timer+0x10/0x10
[  171.876214][    C0]  ? call_timer_fn+0xbe/0x5f0
[  171.876228][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  171.876249][    C0]  ? __pfx_mrp_join_timer+0x10/0x10
[  171.876275][    C0]  ? __pfx_mrp_join_timer+0x10/0x10
[  171.876297][    C0]  __run_timer_base+0x61a/0x860
[  171.876316][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  171.876358][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  171.876399][    C0]  run_timer_softirq+0xb7/0x180
[  171.876421][    C0]  handle_softirqs+0x286/0x870
[  171.876442][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  171.876465][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  171.876479][    C0]  ? irq_work_single+0x1ac/0x240
[  171.876498][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  171.876521][    C0]  __irq_exit_rcu+0xca/0x1f0
[  171.876537][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  171.876559][    C0]  ? rcu_is_watching+0x15/0xb0
[  171.876578][    C0]  irq_exit_rcu+0x9/0x30
[  171.876591][    C0]  sysvec_irq_work+0xa3/0xc0
[  171.876606][    C0]  </IRQ>
[  171.876611][    C0]  <TASK>
[  171.876617][    C0]  asm_sysvec_irq_work+0x1a/0x20
[  171.876631][    C0] RIP: 0010:preempt_schedule_irq+0xb0/0x150
[  171.876683][    C0] Code: 24 20 f6 44 24 21 02 74 0c 90 0f 0b 48 f7 03 08 00 00 00 74 64 bf 01 00 00 00 e8 8b 2d 21 f6 e8 c6 00 58 f6 fb bf 01 00 00 00 <e8> 1b ab ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24
[  171.876694][    C0] RSP: 0018:ffffc900061477c0 EFLAGS: 00000282
[  171.876706][    C0] RAX: 67f8d755e47b5500 RBX: 0000000000000000 RCX: 67f8d755e47b5500
[  171.876716][    C0] RDX: 0000000000000000 RSI: ffffffff8d99883e RDI: 0000000000000001
[  171.876724][    C0] RBP: ffffc90006147870 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  171.876734][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 0000000000000000
[  171.876742][    C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000c28ef8
[  171.876774][    C0]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  171.876804][    C0]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  171.876822][    C0]  irqentry_exit+0x6f/0x90
[  171.876838][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  171.876851][    C0] RIP: 0010:stack_trace_consume_entry+0xf3/0x280
[  171.876869][    C0] Code: 8b 74 24 08 48 8b 1f 45 8d 79 01 0f b6 44 15 00 84 c0 0f 85 3a 01 00 00 45 89 38 4e 8d 3c cb 4c 89 f8 48 c1 e8 03 80 3c 10 00 <74> 1a 4c 89 ff 48 89 f3 49 89 d4 4c 89 c5 e8 9a 49 76 00 49 89 e8
[  171.876879][    C0] RSP: 0018:ffffc90006147938 EFLAGS: 00000246
[  171.876889][    C0] RAX: 1ffff92000c28f61 RBX: ffffc90006147ad0 RCX: 67f8d755e47b5500
[  171.876898][    C0] RDX: dffffc0000000000 RSI: ffffffff894b3b6b RDI: ffffc90006147a40
[  171.876912][    C0] RBP: 1ffff92000c28f4a R08: ffffc90006147a50 R09: 0000000000000007
[  171.876921][    C0] R10: ffffc900061479d8 R11: ffffffff81ad0050 R12: 0000000000000000
[  171.876930][    C0] R13: 1ffff92000c28f49 R14: ffffc90006147a48 R15: ffffc90006147b08
[  171.876945][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  171.876968][    C0]  ? __x64_sys_socketpair+0x9b/0xb0
[  171.876995][    C0]  ? __x64_sys_socketpair+0x9b/0xb0
[  171.877017][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  171.877036][    C0]  arch_stack_walk+0x110/0x150
[  171.877061][    C0]  ? __x64_sys_socketpair+0x9b/0xb0
[  171.877087][    C0]  stack_trace_save+0x9c/0xe0
[  171.877105][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  171.877125][    C0]  ? trace_call_bpf+0xb7/0x850
[  171.877142][    C0]  ? __lock_acquire+0xab9/0xd20
[  171.877160][    C0]  kasan_save_track+0x3e/0x80
[  171.877173][    C0]  ? kasan_save_track+0x3e/0x80
[  171.877184][    C0]  ? __kasan_slab_alloc+0x6c/0x80
[  171.877196][    C0]  ? kmem_cache_alloc_lru_noprof+0x1c6/0x3d0
[  171.877209][    C0]  ? sock_alloc_inode+0x28/0xc0
[  171.877225][    C0]  ? alloc_inode+0x6a/0x1b0
[  171.877237][    C0]  ? __sock_create+0x12d/0x9f0
[  171.877254][    C0]  ? __sys_socketpair+0x1c5/0x560
[  171.877327][    C0]  ? sock_alloc_inode+0x28/0xc0
[  171.877347][    C0]  __kasan_slab_alloc+0x6c/0x80
[  171.877364][    C0]  kmem_cache_alloc_lru_noprof+0x1c6/0x3d0
[  171.877378][    C0]  ? sock_alloc_inode+0x28/0xc0
[  171.877401][    C0]  ? __pfx_sock_alloc_inode+0x10/0x10
[  171.877418][    C0]  sock_alloc_inode+0x28/0xc0
[  171.877436][    C0]  alloc_inode+0x6a/0x1b0
[  171.877454][    C0]  __sock_create+0x12d/0x9f0
[  171.877477][    C0]  ? __might_fault+0xb0/0x130
[  171.877497][    C0]  __sys_socketpair+0x1c5/0x560
[  171.877527][    C0]  __x64_sys_socketpair+0x9b/0xb0
[  171.877551][    C0]  do_syscall_64+0xfa/0x3b0
[  171.877572][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.877584][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  171.877604][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.877616][    C0] RIP: 0033:0x7f0cdd38e9a9
[  171.877631][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  171.877663][    C0] RSP: 002b:00007f0cde1b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[  171.877677][    C0] RAX: ffffffffffffffda RBX: 00007f0cdd5b6080 RCX: 00007f0cdd38e9a9
[  171.877686][    C0] RDX: 0000000000000007 RSI: 0000000000000005 RDI: 0000000000000001
[  171.877694][    C0] RBP: 00007f0cdd410d69 R08: 0000000000000000 R09: 0000000000000000
[  171.877702][    C0] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000
[  171.877710][    C0] R13: 0000000000000000 R14: 00007f0cdd5b6080 R15: 00007ffcdc5a8918
[  171.877739][    C0]  </TASK>
[  172.111399][    C0] sched: DL replenish lagged too much

VM DIAGNOSIS:
09:56:27  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000006e50
R8 =ffff8881073b8237 R9 =1ffff11020e77046 R10=dffffc0000000000 R11=ffffffff85472860
R12=dffffc0000000000 R13=ffffffff99af58a7 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff854728dc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f0cde1b26c0 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c270918 CR3=0000000028fc2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f0cdd586478 00007f0cdd586450 XMM03=00007f0cdd586488 00007f0cdd586480
XMM04=00007f0cde0ed100 00007f0cdd586440 XMM05=00007f0cdd586458 00007f0cdd5864a0
XMM06=00007f0cdd586498 00007f0cdd586490 XMM07=00007f0cdd586488 00007f0cdd586480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f0cdd411ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33956ba RBX=ffffffff99cab5d0 RCX=0000000000000000 RDX=0000000000000000
RSI=ffffffff99cab5b8 RDI=ffffffff8e00e120 RBP=ffffc900032df2c0 RSP=ffffc900032df1c0
R8 =0000000000000000 R9 =0000000000000001 R10=dffffc0000000000 R11=fffffbfff1f43d1f
R12=1ffff9200065be40 R13=ffffffff99cab5b8 R14=ffffffff8e00e120 R15=dffffc0000000000
RIP=ffffffff819d8a36 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f595e3d8800 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffeed6287f0 CR3=000000002692c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
