last executing test programs:

19.501233956s ago: executing program 0 (id=385):
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x6, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000580), 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x922000000001, 0x106)
socket$kcm(0xa, 0x2, 0x88)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x100e64, 0xc78, 0x200000, 0x0, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x5, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x69}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socket$kcm(0x2a, 0x2, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}, 0x14140)
socket$kcm(0x10, 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x8)

19.222582241s ago: executing program 0 (id=386):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911034d70000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07000000040000002000000000f0ffff00", @ANYBLOB="60c6cf4f5aca6654a1da123dd9620deac8537a6af22e0b79c84afbcfc4a6c09da90a104cf7b911fe84f68d9ad09a4425ec680634ed647f8cf7eaafa01125cde88c073ee514796e997d5063306c5ed0860f2ecb2c1e529996c09932c8c135066425fa132e0e2b91fd1675db9319a1b7631f1299bb73e10857ff159a16cbf104090b6694bee86048b805aea773484dd38d18602357d08b9be5c2e502bd54c98bc37406a698fbb56f20c1ac0c4402934965bb301cad336ce8756a805ffebfe15c3939c3c8662bd42672c953535059239c", @ANYRES64=r0], 0x50)
socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0x1e, 0x0, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/43, 0xfdef}], 0x1}, 0x80)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x4)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$tipc(r3, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000042c0)="86", 0x1}, {&(0x7f00000002c0)="794ab6f05259d1b3bd29a47757ca01b92304ad7ac7dece9d204c4b1eea2feb32c12013dc3fdf2ae40958dc", 0x2b}, {&(0x7f0000000340)="d94469a91874fde3d54cf0261ed019a1743de9ea6aeb3a48c84fe243355bc50d49c475f6d7a83e162ee4ce52ba34872f5e0b62e54f0a669d25e869930f3f5858fc7ac5b45884996460645187518e98e83d588712c97a64a4806cdc8053118fbd297dd87bfb7675df60e9c6bb3ad691f5e2448ab0f83f31ebcbffcefdc4a23f8d01de480e6fccdb9923918a967f67c55799ecf0f6aaccbbeba00809f8977a0a5bac392f96e2fb4f3a3af937834bc1c1e610a8", 0xb2}], 0x3}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f00000000c0), 0x4)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x4, @perf_bp={&(0x7f0000000540), 0x4}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x90000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x100c40, 0x0, 0xffffffff, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r3)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.sectors\x00', 0x0, 0x0)
recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0)
socket$kcm(0x2, 0x5, 0x84)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfdef)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002a00)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x2a, &(0x7f0000000100)=r6, 0x4)
sendmsg$unix(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000440)="248e", 0x2}], 0x1, 0x0, 0x0, 0x40805}, 0x0)
recvmsg$unix(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002)
close(0x4)
r7 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r7, 0x29, 0x17, 0x0, 0x1300)
sendmsg$kcm(r7, &(0x7f0000007140)={&(0x7f0000000180)=@in6={0xa, 0x4e27, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x80, 0x0}, 0x40000)

18.410052907s ago: executing program 1 (id=388):
perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x2b, 0x3, 0x1000000, &(0x7f0000000000))
socket$kcm(0x10, 0x400000002, 0x0)
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x4202, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0xa, 0x1, 0x106)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000100)="020027000000a21f90dcacf4d21bf62cbc694c8310e29ad92b30087f5d582d26116642c47a5f87867cfee3c88e61e526d8", 0x31}], 0x1}, 0x4008001)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_type(r4, &(0x7f0000000300), 0x2, 0x0)
openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
sendmsg$kcm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="1000000069aa3f5d64010061f78d57ad220001018000d8e96efbe406b0594bb0063a31e861430e14a19cd953c8a76cf185dcdf7e3f4f788e30ff58d106c41faa4d843e3f1a4589e1f0884f14be3f5e7580e4117fce00acb76a236072f857550bfc988b6e1ca56fcd7f404494f34439427a49b56e7bcc6aac560000"], 0x10}, 0xc040)
write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12)

18.334097309s ago: executing program 0 (id=391):
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x9, 0x0, 0x0, 0x1}, 0x0, 0x0, r0, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0xc884}, 0x0, 0x0, r0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x9, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x16, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8, @ANYBLOB="3eca", @ANYRES8], 0x9a)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r4, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], <r5=>0x0, 0xd9, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x2c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r6}, 0x10)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0xfdef)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000880), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=@framed={{0xbe, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f0000000480)='syzkaller\x00'}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x10, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2824}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x480}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8000, 0x5c, &(0x7f0000000280)=""/92, 0x41000, 0x2, '\x00', 0x0, @fallback=0x33, r4, 0x8, &(0x7f00000000c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x5, 0x8}, 0x10, r5, r6, 0x0, &(0x7f0000000780)=[r7, r8], 0x0, 0x10, 0x4}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x8183, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext, 0x40, 0x0, 0x0, 0x0, 0xc360, 0xfffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
r10 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="e5ffffffffffffff71114600000000008510000002000000850000002a00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x3)

18.160414355s ago: executing program 1 (id=394):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000000c0), &(0x7f0000000140)=r1}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x15, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x8}, @jmp={0x5, 0x0, 0x9, 0x0, 0x0, 0x30}], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4110000000000006111480000000000850000008b000000950a030000000000b88166989a2144c4935cd0a0ac5b95d50e314f5291c01024194fa3573d7c84920d37af3d720892ebc02aa51b49"], &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21)
r2 = socket$kcm(0x29, 0x6, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000011c0)="b9ffddc1ddc8cdde75537d07007e0d0000bf2dfe443b1b5e2a088137", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
recvmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f00000000c0)=@isdn, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)=""/197, 0xc5}, {&(0x7f0000000040)=""/60, 0x3c}, {&(0x7f0000000240)=""/6, 0x6}], 0x3, &(0x7f0000000340)=""/71, 0x47}, 0x2000)

17.892276412s ago: executing program 1 (id=395):
r0 = socket$kcm(0x11, 0x2, 0x0)
syz_clone(0x8102500, &(0x7f00000006c0)="d9b8957753", 0x5, 0x0, 0x0, 0x0) (async)
sendmsg$kcm(r0, &(0x7f0000001580)={&(0x7f0000001340)=@hci={0x1f, 0xd00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x48}], 0x1}, 0x20005) (async)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, <r2=>0x0})
setsockopt$sock_attach_bpf(r2, 0x10f, 0x82, 0x0, 0x27)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18f1ff000000000000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r3, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r4, 0x4) (async)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000400), 0x8)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r0, @ANYBLOB="f00929a849000000000000000000000011eb5d4320b16c80f865f8608bab384da3d31165039280dbebc68f11573860d244e4c7c6e9f1c02ca294475aba6deaeb04607dba2c63c0e27a9ebb482f1847b0654507cb31fcdaf20d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x5, &(0x7f0000000240)=@raw=[@map_idx={0x18, 0xc, 0x5, 0x0, 0xf}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @exit, @alu={0x7, 0x1, 0xd, 0x6, 0x4, 0x20, 0xfffffffffffffff8}], &(0x7f0000000280)='GPL\x00', 0x9, 0xa8, &(0x7f00000002c0)=""/168, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x4, 0x6, 0x8fd}, 0x10, r4, r5, 0x7, &(0x7f0000000580)=[r6, 0x1], &(0x7f00000005c0)=[{0x5, 0x3, 0xa, 0x8}, {0x4, 0x1, 0x2, 0x2}, {0x4, 0x4, 0x2, 0xa}, {0x3, 0x5, 0x1, 0x3}, {0x0, 0x5, 0x1, 0x9}, {0x1, 0x4, 0xf, 0x7}, {0x3, 0x5, 0x5, 0x8}], 0x10, 0x100}, 0x94) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={&(0x7f0000000040)=""/12, 0xc, <r7=>0x0, &(0x7f00000000c0)=""/203, 0xcb}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071119d00000000008510000002000000850000004800000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc0, &(0x7f000000cf3d)=""/192, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r7}, 0x94)

17.804744596s ago: executing program 1 (id=396):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000004cc0)={0x1, 0x44, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0xbbd0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x4, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r1, 0x0, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1804000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000003000000850000000f00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r2, 0x0, 0xfe33)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket$kcm(0x21, 0x2, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000046b085eaf51d8b86957150533e7b4f4869332c0d1c9f803bba3340452106f3eb9ea5ef077eeceba3143e4602b36f0e86893809595645eba91409bfbe69df7dab1b8b0aeee8c56db98b5155d08b2e9fd968bcab677a4bc94c1d4c603abc292039722cf8ef00c54393355f04598d7917b97ee46c2432d2410e7cae336264a6e55dfdf090b3", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r4 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161)
sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xb80b}], 0x1}, 0xd000000)

17.713189909s ago: executing program 1 (id=398):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffc01, 0x3, 0x2, 0x200000, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180))
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x8, 0x0, r1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x50)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r3, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900), 0x0, 0xcc, &(0x7f0000000940)=[{}], 0x8, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0xb4, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0xf, 0xf, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe2c, 0x0, 0x0, 0x0, 0x8ba}, [@exit, @tail_call, @generic={0xc8, 0x4, 0x0, 0xc, 0xff}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x2}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @alu={0x4, 0x0, 0x6, 0x2, 0x6, 0xfffffffffffffff8}]}, &(0x7f00000004c0)='GPL\x00', 0x7, 0xa1, &(0x7f0000000800)=""/161, 0x40f00, 0x1c, '\x00', r4, @cgroup_device=0x6, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a80)={0x0, 0x9, 0x7, 0x4}, 0x10, 0x0, r3, 0x4, &(0x7f0000000d40)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000d80)=[{0x2, 0x4, 0x4, 0xc}, {0x3, 0x1, 0x7, 0x2}, {0x0, 0x5, 0x7, 0x8}, {0x4, 0x3, 0xa}], 0x10, 0x100}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r5)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x801, 0x2, 0x10, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x0)
r6 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r6, 0x84, 0x6e, &(0x7f0000000000)=r9, 0x10)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8808, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x4108, 0x3, 0x0, 0x6, 0x7, 0xffffffff, 0x802, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x19)
r10 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
close(r12)
recvmsg$unix(r11, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r13=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r10, 0x84, 0x23, &(0x7f0000000000)=r13, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x7, 0x1b5, 0x5639, 0x410, 0xffffffffffffffff, 0x200, '\x00', 0x0, r5, 0x3, 0x5, 0x5}, 0x50)

17.712629285s ago: executing program 0 (id=399):
bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x1000000000000002, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x4, &(0x7f0000001fd8)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1}, 0x94)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10)
sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)="4530d62045", 0x5}], 0x1}, 0x80d1)
bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) (async)
socket$kcm(0x2, 0x5, 0x84) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socket$kcm(0x2, 0x1000000000000002, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async)
close(r2) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x4, &(0x7f0000001fd8)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1}, 0x94) (async)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async)
setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) (async)
sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)="4530d62045", 0x5}], 0x1}, 0x80d1) (async)

17.615757581s ago: executing program 2 (id=400):
socket$kcm(0x2a, 0x2, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async, rerun: 32)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="6127e29a10", 0x5}], 0x1}, 0x0) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707cc1ca850a22aeb73b2315e5efbe72d15bd"], 0xfdef) (async, rerun: 32)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) (rerun: 32)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r3) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES64=r1, @ANYRES32, @ANYBLOB="00000000fd2717194b5ac712ffee85353e30214eeac1dd64d395a8f500644a41eb9831c1a75c8929411e5aa6c175e47613a3f17b490a2ac447da6844401bc7f31369ce948d101dad035db774689459ba31b323207f68763acdca37df5ad4c28a8eb4e6596c168b6deb4723b15bf2e279f0771317c7f7e6bf413f91e67a46ba85cc8fbeafa1e7efb3f877d0e3c5b188b5d9d4d94894a46879a595f6ee0e057d5c6c4feff75c4d6dd9abf1f70a14ff12e476d504e515681d9cf46b36576e72e9b95fdd3f4272110af9cdfc382ee4ecba4f309a8f75eaf47356da0d43235d4d7cce000000000000"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000340), &(0x7f0000000300)=r0}, 0xfffffe97) (async, rerun: 64)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') (async, rerun: 64)
recvmsg(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/164, 0xa4}], 0x1}, 0x0)
sendmsg$unix(r6, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="f085", 0x2}], 0x1}, 0x200c8061) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64)
ioctl$TUNSETLINK(r7, 0x400454cd, 0x20) (rerun: 64)

17.496432572s ago: executing program 0 (id=401):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x10, &(0x7f0000000180)=@raw=[@alu={0x7, 0x1, 0x8, 0x3, 0xa, 0xffffffffffffff58}, @alu={0x7, 0x1, 0x4, 0x9, 0x9, 0xb05ae97c74b9545c, 0x8}, @jmp={0x5, 0x0, 0x8, 0x9, 0xa, 0xfffffffffffffff4, 0x1}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], &(0x7f00000003c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x0, 0x6, 0x3ff}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000540)=[{0x2, 0x2, 0xc, 0x4}, {0x2, 0x5, 0x2, 0x9}], 0x10, 0x4}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000580)=r0, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d)
write$cgroup_subtree(r1, 0x0, 0xfe33)
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4)
r3 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0x0, 0x0}, 0x10)
r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0xa, 0x2, 0x3a)
recvmsg$kcm(r5, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x2020)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '})
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac0090000008684e08b04000200000000000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000)
socket$kcm(0xa, 0x2, 0x0)

17.495503968s ago: executing program 2 (id=402):
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x73)
recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000f01000000648c2594f91c24fc60", 0x14}], 0x1, 0x0, 0x0, 0x1400}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={0x1, 0x58, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

17.256684942s ago: executing program 2 (id=403):
r0 = syz_clone(0x20800000, 0x0, 0x700, 0x0, 0x0, 0x0) (async)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) (async)
r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000040)=0x1, 0x12) (async)
close(0xffffffffffffffff) (async)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000) (async)
syz_clone(0x1802000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
socket$kcm(0xa, 0x1, 0x106) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[], 0x0, 0x36, 0x0, 0x80001}, 0x28)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, 0x0)
r4 = socket$kcm(0xa, 0x2, 0x3a) (async)
r5 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$kcm(r5, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000240)="0ea415"}, {&(0x7f0000000740)="8b0a751c7aead06880515a5d", 0x3}, {&(0x7f0000000800)="c8ea972e8fbc5218c56e7b9c7ef9c62f186d531c8a26c50e09e4267c68eedb106c2f9d33ca75", 0xffc9}], 0x3}, 0x200ce0c0) (async)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000080)="6922bbb19d7a6b793d0b82462339fffee577289c83d2", 0x16}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x40801) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a595c779f10ce0630fc60", 0x14}], 0x1}, 0x0) (async)
setsockopt$sock_attach_bpf(r4, 0x29, 0x21, &(0x7f0000000100), 0x4)
recvmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0xffffffff, @empty, 0xfffffffc}, 0x80, 0x0}, 0x640ce0c0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80, 0x0}, 0x891) (async)
sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0)
socket$kcm(0x10, 0x3, 0x10)

17.166949268s ago: executing program 2 (id=404):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000004cc0)={0x1, 0x44, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0xbbd0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x4, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r1, 0x0, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1804000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000003000000850000000f00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r2, 0x0, 0xfe33)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket$kcm(0x21, 0x2, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000046b085eaf51d8b86957150533e7b4f4869332c0d1c9f803bba3340452106f3eb9ea5ef077eeceba3143e4602b36f0e86893809595645eba91409bfbe69df7dab1b8b0aeee8c56db98b5155d08b2e9fd968bcab677a4bc94c1d4c603abc292039722cf8ef00c54393355f04598d7917b97ee46c2432d2410e7cae336264a6e55dfdf090b3", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r4 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161)
sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xb80b}], 0x1}, 0xd000000)

17.066192963s ago: executing program 2 (id=405):
r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
r1 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x6, 0x1d, &(0x7f0000000200), 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x6, &(0x7f00000005c0)=ANY=[@ANYRES8=r0], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x16, &(0x7f0000000380)=""/22, 0x41100, 0x20, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x3, 0x7f, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000440)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000480)=[{0x0, 0x3, 0x7, 0x5}], 0x10, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000001c0)='afs_cb_break\x00', r3, 0x0, 0x3b}, 0x18)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x4, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={0x0, 0x2}, 0x14105, 0x2e, 0xfffffbff, 0x2, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="00002d1500000040c4f07e9a0000f080c57b0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0)
r4 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10)
sendmsg$inet(r4, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1)
r8 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
close(r10)
recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r11=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r8, 0x84, 0x64, &(0x7f0000000000)=r11, 0x10)
sendmsg$inet(r8, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0xa, 0x2, 0x11)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0)

17.065848072s ago: executing program 0 (id=406):
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1}, 0x3e8)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x8183, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext, 0x40, 0x0, 0x0, 0x0, 0xc360, 0xfffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112})
ioctl$TUNSETVNETBE(r6, 0x400454de, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{}], 0x1}, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba}, 0x50)
sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x40000)
sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="49637e6367373bf3cbcc24", 0xb}, {&(0x7f0000000280)="5e3c3813b67299631e38c08b13e7a25f41bdd0f3cfba5aa2893bc559728e506250e811295de560cd10ab675cd7afb3dab75eb01953b3672912b005905bb3f5c2f26240a036c87961052e2928aa25dd2d11a00a80eb533933577819de80090aa497ba4f713f8fe395b6082866f2f8", 0x6e}, {&(0x7f0000000340)="fe544f95b01cbd8d863239457d4362c51a8888ec8aaebf7f963861918ba213827ae1d71535c842b652b77b0f892afc82b99ec6b55da771be64ea696500dde8572d6bccb0a950e7f6bdbb1e04e1a17870e183d85f9a3378685d5e5a90a5c78b326284d98e55fabd295af83329e3f952b6b085b5b8c9de92a20751aae78190e7b572f415be99b76c51214486dcab79f6945e5c7ee2b3f2d577579ccd17e8d651b68db1", 0xa2}, {&(0x7f0000000400)="ece53454a643c59edde6ab070f5b32ac2797a48393f6403d111a4bbd82093bc787a4f04c49ab2b58bf06642809508efbb9a3a68913fb268d2097a583eefbe02893cc0e2c30f3435f6ec58003c1b58fef8db62e7d0c13fd618911d5fc44df6f9757c65b0dd57ae090996f284860831700aeb56a847a2996e825aec46b290065014a6acecb19e4dd6364e06206af6d3207c3d5199f44c435ff1bf6ac76e22886f647cd87b27f421c11d559c3b45c7afb7393f2f00b9fe30ad8af9eb52b64ed6c8f145d651d411671d2a9dadd2895", 0xcd}, {&(0x7f0000000500)="b5fd9e007e971afd3c705fdada44d0", 0xf}], 0x5, &(0x7f00000005c0)=[@ip_retopts={{0xa8, 0x0, 0x7, {[@ra={0x94, 0x4}, @generic={0x44, 0xd, "3e4c4f28776fcc8484f974"}, @timestamp_prespec={0x44, 0x54, 0xf5, 0x3, 0xb, [{@local, 0x80000000}, {@broadcast, 0x9b}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x5}, {@broadcast, 0x3}, {@broadcast, 0xb722}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x6}, {@dev={0xac, 0x14, 0x14, 0xa}}, {@local, 0x9}, {@private=0xa010102}, {@rand_addr=0x64010100, 0x5}]}, @rr={0x7, 0x13, 0xc5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @empty]}, @lsrr={0x83, 0x1f, 0x78, [@rand_addr=0x64010101, @rand_addr=0x64010100, @multicast1, @dev={0xac, 0x14, 0x14, 0x26}, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}], 0xa8}, 0x0)

16.617147567s ago: executing program 1 (id=407):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8000}, 0x0, 0x2e, 0xfffffbff, 0x8, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x11589, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x4, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x19, &(0x7f0000000000)=r3, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000040)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
r5 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r6 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x76}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)
write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0x101d0)
sendmsg$kcm(r6, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800)
close(0x3)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

15.895586712s ago: executing program 2 (id=408):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x454002, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1900000004009b20b55b000002000000000000001f164bd4", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, 0x0, 0x0, 0x68746576}, 0x20)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x2, 0x4)
socketpair(0x1e, 0x1, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"], 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000100000000000000001000084060000000000000001"], 0x0, 0x42}, 0x20)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x4, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x7, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8b20, &(0x7f0000000000)={'wlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@struct={0x0, 0x2, 0x0, 0x13, 0x0, 0x2, [{0x1}, {0x1}]}]}, {0x0, [0x61]}}, &(0x7f0000000080)=""/233, 0x3f, 0xe9, 0x9}, 0x28)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001780)={r0, 0xe0, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000001500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001540)=[0x0, 0x0, 0x0], 0x0, 0x7d, &(0x7f0000001580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000015c0), &(0x7f0000001600), 0x8, 0xb8, 0x8, 0x8, &(0x7f0000001640)}}, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000240)=""/279, 0x117}, {&(0x7f0000003100)=""/4056, 0xfd8}], 0x2}, 0x0)

1.335008371s ago: executing program 32 (id=406):
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1}, 0x3e8)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x8183, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext, 0x40, 0x0, 0x0, 0x0, 0xc360, 0xfffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112})
ioctl$TUNSETVNETBE(r6, 0x400454de, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{}], 0x1}, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba}, 0x50)
sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x40000)
sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="49637e6367373bf3cbcc24", 0xb}, {&(0x7f0000000280)="5e3c3813b67299631e38c08b13e7a25f41bdd0f3cfba5aa2893bc559728e506250e811295de560cd10ab675cd7afb3dab75eb01953b3672912b005905bb3f5c2f26240a036c87961052e2928aa25dd2d11a00a80eb533933577819de80090aa497ba4f713f8fe395b6082866f2f8", 0x6e}, {&(0x7f0000000340)="fe544f95b01cbd8d863239457d4362c51a8888ec8aaebf7f963861918ba213827ae1d71535c842b652b77b0f892afc82b99ec6b55da771be64ea696500dde8572d6bccb0a950e7f6bdbb1e04e1a17870e183d85f9a3378685d5e5a90a5c78b326284d98e55fabd295af83329e3f952b6b085b5b8c9de92a20751aae78190e7b572f415be99b76c51214486dcab79f6945e5c7ee2b3f2d577579ccd17e8d651b68db1", 0xa2}, {&(0x7f0000000400)="ece53454a643c59edde6ab070f5b32ac2797a48393f6403d111a4bbd82093bc787a4f04c49ab2b58bf06642809508efbb9a3a68913fb268d2097a583eefbe02893cc0e2c30f3435f6ec58003c1b58fef8db62e7d0c13fd618911d5fc44df6f9757c65b0dd57ae090996f284860831700aeb56a847a2996e825aec46b290065014a6acecb19e4dd6364e06206af6d3207c3d5199f44c435ff1bf6ac76e22886f647cd87b27f421c11d559c3b45c7afb7393f2f00b9fe30ad8af9eb52b64ed6c8f145d651d411671d2a9dadd2895", 0xcd}, {&(0x7f0000000500)="b5fd9e007e971afd3c705fdada44d0", 0xf}], 0x5, &(0x7f00000005c0)=[@ip_retopts={{0xa8, 0x0, 0x7, {[@ra={0x94, 0x4}, @generic={0x44, 0xd, "3e4c4f28776fcc8484f974"}, @timestamp_prespec={0x44, 0x54, 0xf5, 0x3, 0xb, [{@local, 0x80000000}, {@broadcast, 0x9b}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x5}, {@broadcast, 0x3}, {@broadcast, 0xb722}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x6}, {@dev={0xac, 0x14, 0x14, 0xa}}, {@local, 0x9}, {@private=0xa010102}, {@rand_addr=0x64010100, 0x5}]}, @rr={0x7, 0x13, 0xc5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @empty]}, @lsrr={0x83, 0x1f, 0x78, [@rand_addr=0x64010101, @rand_addr=0x64010100, @multicast1, @dev={0xac, 0x14, 0x14, 0x26}, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}], 0xa8}, 0x0)

1.103467385s ago: executing program 33 (id=407):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8000}, 0x0, 0x2e, 0xfffffbff, 0x8, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x11589, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x4, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x19, &(0x7f0000000000)=r3, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000040)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
r5 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r6 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x76}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)
write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0x101d0)
sendmsg$kcm(r6, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800)
close(0x3)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

0s ago: executing program 34 (id=408):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x454002, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1900000004009b20b55b000002000000000000001f164bd4", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, 0x0, 0x0, 0x68746576}, 0x20)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x2, 0x4)
socketpair(0x1e, 0x1, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"], 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000100000000000000001000084060000000000000001"], 0x0, 0x42}, 0x20)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x4, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x7, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8b20, &(0x7f0000000000)={'wlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@struct={0x0, 0x2, 0x0, 0x13, 0x0, 0x2, [{0x1}, {0x1}]}]}, {0x0, [0x61]}}, &(0x7f0000000080)=""/233, 0x3f, 0xe9, 0x9}, 0x28)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001780)={r0, 0xe0, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000001500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001540)=[0x0, 0x0, 0x0], 0x0, 0x7d, &(0x7f0000001580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000015c0), &(0x7f0000001600), 0x8, 0xb8, 0x8, 0x8, &(0x7f0000001640)}}, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000240)=""/279, 0x117}, {&(0x7f0000003100)=""/4056, 0xfd8}], 0x2}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:44146' (ED25519) to the list of known hosts.
syzkaller login: [   50.503191][ T5814] cgroup: Unknown subsys name 'net'
[   50.644008][ T5814] cgroup: Unknown subsys name 'cpuset'
[   50.648526][ T5814] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   52.068264][ T5814] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.602153][ T5220] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.605966][ T5220] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.608630][ T5220] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.611752][ T5220] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.614346][ T5220] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.690428][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.693097][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.695943][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.698418][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.711128][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.735351][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.738809][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.743391][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.747091][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.751695][ T5220] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.834859][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   55.936458][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.939313][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.941921][ T5827] bridge_slave_0: entered allmulticast mode
[   55.944620][ T5827] bridge_slave_0: entered promiscuous mode
[   55.962312][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.964964][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.967408][ T5827] bridge_slave_1: entered allmulticast mode
[   55.970478][ T5827] bridge_slave_1: entered promiscuous mode
[   56.022607][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.048149][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.101861][ T5827] team0: Port device team_slave_0 added
[   56.112420][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   56.122100][ T5827] team0: Port device team_slave_1 added
[   56.199385][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.202865][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.214574][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.219941][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   56.233536][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.236109][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.244537][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.298815][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.301181][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.303974][ T5833] bridge_slave_0: entered allmulticast mode
[   56.307360][ T5833] bridge_slave_0: entered promiscuous mode
[   56.318984][ T5827] hsr_slave_0: entered promiscuous mode
[   56.322604][ T5827] hsr_slave_1: entered promiscuous mode
[   56.326610][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.329049][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.332433][ T5833] bridge_slave_1: entered allmulticast mode
[   56.335220][ T5833] bridge_slave_1: entered promiscuous mode
[   56.372049][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.409832][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.425617][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.428799][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.432683][ T5832] bridge_slave_0: entered allmulticast mode
[   56.437195][ T5832] bridge_slave_0: entered promiscuous mode
[   56.466199][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.469228][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.472838][ T5832] bridge_slave_1: entered allmulticast mode
[   56.476745][ T5832] bridge_slave_1: entered promiscuous mode
[   56.485355][ T5833] team0: Port device team_slave_0 added
[   56.514937][ T5833] team0: Port device team_slave_1 added
[   56.552983][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.561546][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.563865][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.572530][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.578183][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.601348][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.603577][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.612236][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.633334][ T5832] team0: Port device team_slave_0 added
[   56.647744][ T5832] team0: Port device team_slave_1 added
[   56.689868][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.693311][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.702642][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.718108][ T5833] hsr_slave_0: entered promiscuous mode
[   56.720459][ T5833] hsr_slave_1: entered promiscuous mode
[   56.723201][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.726120][ T5833] Cannot create hsr debugfs directory
[   56.728332][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.730565][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.739388][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.836704][ T5832] hsr_slave_0: entered promiscuous mode
[   56.839363][ T5832] hsr_slave_1: entered promiscuous mode
[   56.842524][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.845081][ T5832] Cannot create hsr debugfs directory
[   56.857387][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.873570][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.891514][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.904814][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.025289][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.033138][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.037802][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.043174][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.090677][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.098512][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.109081][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.122538][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.126054][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.155598][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   57.167523][  T141] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.170032][  T141] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.186833][  T141] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.189277][  T141] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.195255][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.222869][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   57.239294][  T141] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.241680][  T141] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.254397][ T3622] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.256862][ T3622] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.315933][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.333679][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   57.346114][  T141] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.348582][  T141] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.363087][  T141] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.365766][  T141] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.396957][ T5832] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   57.400656][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.413573][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.435996][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.468993][ T5827] veth0_vlan: entered promiscuous mode
[   57.483740][ T5827] veth1_vlan: entered promiscuous mode
[   57.489767][ T5833] veth0_vlan: entered promiscuous mode
[   57.501019][ T5833] veth1_vlan: entered promiscuous mode
[   57.528547][ T5827] veth0_macvtap: entered promiscuous mode
[   57.542987][ T5827] veth1_macvtap: entered promiscuous mode
[   57.557528][ T5833] veth0_macvtap: entered promiscuous mode
[   57.564183][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.567322][ T5833] veth1_macvtap: entered promiscuous mode
[   57.579839][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.586358][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.597111][ T5827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.599909][ T5827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.603779][ T5827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.607041][ T5827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.617174][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.631654][ T5220] Bluetooth: hci0: command tx timeout
[   57.634467][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.646135][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.648985][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.653390][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.656417][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.703499][ T5832] veth0_vlan: entered promiscuous mode
[   57.726832][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.730427][ T5832] veth1_vlan: entered promiscuous mode
[   57.732237][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.766092][   T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.771005][   T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.776786][ T3622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.784034][ T3622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.791609][ T5220] Bluetooth: hci1: command tx timeout
[   57.792288][   T54] Bluetooth: hci2: command tx timeout
[   57.797582][ T5832] veth0_macvtap: entered promiscuous mode
[   57.808211][ T5832] veth1_macvtap: entered promiscuous mode
[   57.827198][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.839494][ T3622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.842700][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.848446][ T3622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.854338][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.874262][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.877475][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.880546][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.897346][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.919279][ T5894] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2'.
[   57.992398][ T5894] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   57.997920][ T5894] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   58.001779][ T5894] bond0 (unregistering): Released all slaves
[   58.035721][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.038178][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.080499][   T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.084284][   T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.163941][ T5906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5'.
[   58.261824][ T5913] warning: `syz.0.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   58.319922][ T5915] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.660972][ T5931] netlink: 'syz.0.11': attribute type 1 has an invalid length.
[   58.664524][ T5931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11'.
[   59.284953][ T5942] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.15'.
[   59.726733][   T54] Bluetooth: hci0: command tx timeout
[   59.872061][   T54] Bluetooth: hci2: command tx timeout
[   59.882168][   T54] Bluetooth: hci1: command tx timeout
[   60.221229][    C1] hrtimer: interrupt took 41843 ns
[   60.476621][ T5955] Zero length message leads to an empty skb
[   60.856938][   T54] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10
[   60.857025][   T54] Bluetooth: hci1: connection err: -111
[   60.867345][ T5974] @: renamed from bond_slave_0 (while UP)
[   61.058384][ T5990] netlink: 'syz.2.29': attribute type 16 has an invalid length.
[   61.060933][ T5990] netlink: 168 bytes leftover after parsing attributes in process `syz.2.29'.
[   61.103268][ T5988] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.27'.
[   61.801943][   T54] Bluetooth: hci0: command tx timeout
[   61.954638][   T54] Bluetooth: hci1: command tx timeout
[   61.956480][   T54] Bluetooth: hci2: command tx timeout
[   62.178869][ T6004] lo: entered allmulticast mode
[   62.258063][ T6004] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   62.316547][ T6004] syz.0.32 (6004) used greatest stack depth: 19920 bytes left
[   62.437089][ T6029] netlink: 'syz.0.41': attribute type 10 has an invalid length.
[   62.440757][ T6029] veth0_vlan: entered allmulticast mode
[   62.447131][ T6031] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.40'.
[   62.456195][ T6029] veth0_vlan: left promiscuous mode
[   62.463921][ T6029] veth0_vlan: entered promiscuous mode
[   62.473808][ T6029] team0: Device veth0_vlan failed to register rx_handler
[   62.492812][ T6032] IPv6: NLM_F_CREATE should be specified when creating new route
[   62.543792][ T6036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.42'.
[   62.662354][ T6042] netlink: 60 bytes leftover after parsing attributes in process `syz.0.44'.
[   62.665783][ T6039] netlink: 60 bytes leftover after parsing attributes in process `syz.0.44'.
[   63.357977][ T6059] netlink: 'syz.0.46': attribute type 10 has an invalid length.
[   63.393342][ T6058] netlink: 'syz.0.46': attribute type 21 has an invalid length.
[   63.397095][ T6058] __nla_validate_parse: 1 callbacks suppressed
[   63.397104][ T6058] netlink: 168 bytes leftover after parsing attributes in process `syz.0.46'.
[   63.872613][   T54] Bluetooth: hci0: command tx timeout
[   64.055625][   T54] Bluetooth: hci2: command tx timeout
[   64.055645][ T5220] Bluetooth: hci1: command tx timeout
[   64.270160][ T6147] netlink: 703 bytes leftover after parsing attributes in process `syz.1.53'.
[   64.595759][ T6154] netlink: 60 bytes leftover after parsing attributes in process `syz.2.56'.
[   64.601100][ T6154] netlink: 60 bytes leftover after parsing attributes in process `syz.2.56'.
[   64.621436][ T6154] netlink: 60 bytes leftover after parsing attributes in process `syz.2.56'.
[   64.757548][ T6159] netlink: 'syz.0.57': attribute type 2 has an invalid length.
[   64.759969][ T6159] netlink: 'syz.0.57': attribute type 4 has an invalid length.
[   64.771415][ T6159] netlink: 132 bytes leftover after parsing attributes in process `syz.0.57'.
[   64.934421][ T6171] netlink: 'syz.1.62': attribute type 10 has an invalid length.
[   64.942875][ T6171] lo: entered promiscuous mode
[   65.407128][ T6198] openvswitch: netlink: Flow actions attr not present in new flow.
[   65.417212][ T6198] syzkaller0: entered promiscuous mode
[   65.478725][ T6207] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   65.711789][ T6218] netlink: 'syz.2.75': attribute type 39 has an invalid length.
[   65.812212][ T6219] netlink: 'syz.0.76': attribute type 10 has an invalid length.
[   65.837381][ T6219] bond0: (slave bond_slave_0): Releasing backup interface
[   67.077794][ T6233] netlink: 'syz.0.80': attribute type 3 has an invalid length.
[   67.080738][ T6233] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.80'.
[   67.205873][ T6249] netlink: 'syz.1.86': attribute type 3 has an invalid length.
[   67.209898][ T6249] netlink: 'syz.1.86': attribute type 1 has an invalid length.
[   67.266836][ T6250] netlink: 'syz.2.85': attribute type 10 has an invalid length.
[   67.278407][ T6250] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.285868][ T6250] team0: Port device bond0 added
[   67.397437][ T6255] netlink: 'syz.0.87': attribute type 10 has an invalid length.
[   67.400789][ T6255] netlink: 40 bytes leftover after parsing attributes in process `syz.0.87'.
[   67.406263][ T6255] dummy0: entered promiscuous mode
[   67.409643][ T6255] bridge0: port 3(dummy0) entered blocking state
[   67.414931][ T6255] bridge0: port 3(dummy0) entered disabled state
[   67.417285][ T6255] dummy0: entered allmulticast mode
[   67.421958][ T6255] bridge0: port 3(dummy0) entered blocking state
[   67.424645][ T6255] bridge0: port 3(dummy0) entered forwarding state
[   67.946730][ T6266] team0: Port device team_slave_0 removed
[   67.973539][ T6266] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[   68.082173][ T6266] syz.0.90 (6266) used greatest stack depth: 19576 bytes left
[   69.370601][ T6292] syzkaller0: entered promiscuous mode
[   69.374043][ T6292] syzkaller0: entered allmulticast mode
[   70.065576][ T6305] netlink: 14 bytes leftover after parsing attributes in process `syz.2.101'.
[   70.072343][ T6307] netlink: 'syz.0.102': attribute type 16 has an invalid length.
[   70.074998][ T6307] netlink: 48 bytes leftover after parsing attributes in process `syz.0.102'.
[   70.075061][ T6305] hsr_slave_0: left promiscuous mode
[   70.084855][ T6305] hsr_slave_1: left promiscuous mode
[   70.105366][ T6307] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.208217][ T6316] netlink: 26 bytes leftover after parsing attributes in process `syz.0.104'.
[   70.310708][ T6319] netlink: 'syz.0.106': attribute type 10 has an invalid length.
[   70.945357][ T6334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.110'.
[   70.952242][ T6336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.110'.
[   70.994084][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   70.997073][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.040587][ T6341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.111'.
[   71.170691][ T6342] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[   71.390852][ T6353] netlink: 'syz.0.115': attribute type 21 has an invalid length.
[   71.412011][ T6353] netlink: 164 bytes leftover after parsing attributes in process `syz.0.115'.
[   71.418290][ T6353] netlink: 164 bytes leftover after parsing attributes in process `syz.0.115'.
[   71.630599][ T6355] netlink: 'syz.1.116': attribute type 29 has an invalid length.
[   71.669954][ T6355] netlink: 'syz.1.116': attribute type 10 has an invalid length.
[   71.679123][ T6365] netlink: 'syz.0.119': attribute type 3 has an invalid length.
[   71.908607][ T6383] netlink: 'syz.2.123': attribute type 29 has an invalid length.
[   71.914151][ T6381] netlink: 'syz.2.123': attribute type 29 has an invalid length.
[   72.641819][ T6389] netlink: 'syz.1.125': attribute type 37 has an invalid length.
[   72.805758][ T6394] netlink: 201660 bytes leftover after parsing attributes in process `syz.0.127'.
[   73.129271][ T6410] netlink: 'syz.0.133': attribute type 1 has an invalid length.
[   73.389519][ T6428] netlink: 14 bytes leftover after parsing attributes in process `syz.2.138'.
[   74.745249][ T6466] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.751729][ T6466] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.754017][ T6466] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.849721][ T6473] syz.2.152: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   74.878808][ T6473] CPU: 0 UID: 0 PID: 6473 Comm: syz.2.152 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[   74.878823][ T6473] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   74.878829][ T6473] Call Trace:
[   74.878833][ T6473]  <TASK>
[   74.878838][ T6473]  dump_stack_lvl+0x189/0x250
[   74.878857][ T6473]  ? __pfx_dump_stack_lvl+0x10/0x10
[   74.878868][ T6473]  ? __pfx__printk+0x10/0x10
[   74.878882][ T6473]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   74.878894][ T6473]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   74.878908][ T6473]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   74.878923][ T6473]  warn_alloc+0x214/0x310
[   74.878934][ T6473]  ? stack_depot_save_flags+0x429/0x900
[   74.878949][ T6473]  ? __pfx_warn_alloc+0x10/0x10
[   74.878962][ T6473]  ? kasan_save_track+0x4f/0x80
[   74.878979][ T6473]  ? xskq_create+0x56/0x170
[   74.878989][ T6473]  ? xsk_init_queue+0xb0/0x110
[   74.878997][ T6473]  ? xsk_setsockopt+0x4de/0x710
[   74.879005][ T6473]  ? do_sock_setsockopt+0x17c/0x1b0
[   74.879013][ T6473]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   74.879021][ T6473]  ? do_syscall_64+0xfa/0x3b0
[   74.879031][ T6473]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.879049][ T6473]  __vmalloc_node_range_noprof+0x125/0x12f0
[   74.879095][ T6473]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   74.879112][ T6473]  ? __kasan_kmalloc+0x93/0xb0
[   74.879126][ T6473]  vmalloc_user_noprof+0xad/0xf0
[   74.879136][ T6473]  ? xskq_create+0xbf/0x170
[   74.879148][ T6473]  xskq_create+0xbf/0x170
[   74.879162][ T6473]  xsk_init_queue+0xb0/0x110
[   74.879175][ T6473]  xsk_setsockopt+0x4de/0x710
[   74.879189][ T6473]  ? __pfx_xsk_setsockopt+0x10/0x10
[   74.879203][ T6473]  ? __fget_files+0x2a/0x420
[   74.879213][ T6473]  ? aa_sock_opt_perm+0x74/0x110
[   74.879228][ T6473]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   74.879237][ T6473]  ? __pfx_xsk_setsockopt+0x10/0x10
[   74.879249][ T6473]  do_sock_setsockopt+0x17c/0x1b0
[   74.879264][ T6473]  __x64_sys_setsockopt+0x13f/0x1b0
[   74.879280][ T6473]  do_syscall_64+0xfa/0x3b0
[   74.879289][ T6473]  ? lockdep_hardirqs_on+0x9c/0x150
[   74.879299][ T6473]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.879307][ T6473]  ? exc_page_fault+0x9f/0xf0
[   74.879320][ T6473]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.879328][ T6473] RIP: 0033:0x7f52e5d8e9a9
[   74.879337][ T6473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   74.879344][ T6473] RSP: 002b:00007f52e6bcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   74.879354][ T6473] RAX: ffffffffffffffda RBX: 00007f52e5fb5fa0 RCX: 00007f52e5d8e9a9
[   74.879360][ T6473] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006
[   74.879364][ T6473] RBP: 00007f52e5e10d69 R08: 0000000000000004 R09: 0000000000000000
[   74.879369][ T6473] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[   74.879373][ T6473] R13: 0000000000000000 R14: 00007f52e5fb5fa0 R15: 00007ffcd0c97a48
[   74.879397][ T6473]  </TASK>
[   74.879428][ T6473] Mem-Info:
[   75.014378][ T6473] active_anon:21166 inactive_anon:0 isolated_anon:0
[   75.014378][ T6473]  active_file:14562 inactive_file:38210 isolated_file:0
[   75.014378][ T6473]  unevictable:1768 dirty:1429 writeback:0
[   75.014378][ T6473]  slab_reclaimable:9163 slab_unreclaimable:52852
[   75.014378][ T6473]  mapped:18062 shmem:18251 pagetables:982
[   75.014378][ T6473]  sec_pagetables:0 bounce:0
[   75.014378][ T6473]  kernel_misc_reclaimable:0
[   75.014378][ T6473]  free:277404 free_pcp:14114 free_cma:0
[   75.093446][ T6473] Node 0 active_anon:60188kB inactive_anon:0kB active_file:28568kB inactive_file:142696kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:43108kB dirty:1264kB writeback:0kB shmem:52440kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7104kB pagetables:2456kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   75.108587][ T6473] Node 1 active_anon:18220kB inactive_anon:0kB active_file:29680kB inactive_file:10144kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:29140kB dirty:4452kB writeback:0kB shmem:14104kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5080kB pagetables:1336kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   75.151751][ T6473] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   75.174234][ T6473] lowmem_reserve[]: 0 812 812 812 812
[   75.176716][ T6473] Node 0 DMA32 free:190452kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:58760kB inactive_anon:0kB active_file:28568kB inactive_file:142696kB unevictable:3536kB writepending:1264kB present:1556484kB managed:831908kB mlocked:0kB bounce:0kB free_pcp:24584kB local_pcp:20996kB free_cma:0kB
[   75.222695][ T6473] lowmem_reserve[]: 0 0 0 0 0
[   75.225829][ T6473] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[   75.252002][ T6473] lowmem_reserve[]: 0 0 854 854 854
[   75.253784][ T6473] Node 1 Normal free:453404kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17608kB inactive_anon:0kB active_file:29680kB inactive_file:10144kB unevictable:3536kB writepending:4452kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:32328kB local_pcp:15648kB free_cma:0kB
[   75.270536][ T6450] hsr_slave_0 (unregistering): left promiscuous mode
[   75.281443][ T6473] lowmem_reserve[]: 0 0 0 0 0
[   75.291387][ T6473] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   75.295622][ T6473] Node 0 DMA32: 287*4kB (UE) 102*8kB (UE) 6*16kB (UM) 214*32kB (UE) 95*64kB (UME) 58*128kB (UM) 14*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 4*2048kB (UM) 39*4096kB (M) = 198540kB
[   75.301932][ T6473] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   75.308058][ T6473] Node 1 Normal: 587*4kB (M) 914*8kB (UME) 670*16kB (UME) 262*32kB (UME) 179*64kB (UM) 42*128kB (UME) 13*256kB (UM) 10*512kB (UM) 4*1024kB (ME) 3*2048kB (UM) 95*4096kB (M) = 453404kB
[   75.316084][ T6473] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   75.331870][ T6473] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   75.335614][ T6473] 66263 total pagecache pages
[   75.341505][ T6473] 0 pages in swap cache
[   75.343201][ T6473] Free swap  = 124996kB
[   75.351345][ T6473] Total swap = 124996kB
[   75.352880][ T6473] 786301 pages RAM
[   75.354259][ T6473] 0 pages HighMem/MovableOnly
[   75.356007][ T6473] 241076 pages reserved
[   75.357526][ T6473] 0 pages cma reserved
[   75.548439][ T6488] __nla_validate_parse: 1 callbacks suppressed
[   75.548449][ T6488] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.154'.
[   75.564775][ T6488] netlink: 176 bytes leftover after parsing attributes in process `syz.1.154'.
[   75.610333][ T6485] validate_nla: 3 callbacks suppressed
[   75.610345][ T6485] netlink: 'syz.1.154': attribute type 2 has an invalid length.
[   75.616483][ T6485] netlink: 'syz.1.154': attribute type 1 has an invalid length.
[   75.630320][ T6485] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.154'.
[   75.659213][ T6485] nbd: couldn't find a device at index 149
[   75.690149][ T6492] netlink: 'syz.2.156': attribute type 29 has an invalid length.
[   75.699558][ T6492] netlink: 'syz.2.156': attribute type 29 has an invalid length.
[   75.705223][ T6493] netlink: 'syz.2.156': attribute type 29 has an invalid length.
[   75.708767][ T6492] netlink: 'syz.2.156': attribute type 29 has an invalid length.
[   75.712751][ T6493] netlink: 'syz.2.156': attribute type 29 has an invalid length.
[   75.848818][ T6503] netlink: 'syz.1.159': attribute type 2 has an invalid length.
[   76.112107][ T6504] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   76.117090][ T6504] IPv6: NLM_F_CREATE should be set when creating new route
[   76.122063][ T6504] IPv6: NLM_F_CREATE should be set when creating new route
[   76.679295][ T6508] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.160'.
[   76.732652][ T6511] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.736088][ T6511] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.740240][ T6511] bridge0: entered allmulticast mode
[   76.813214][ T6513] netlink: 'syz.2.162': attribute type 29 has an invalid length.
[   76.841003][ T6513] netlink: 'syz.2.162': attribute type 29 has an invalid length.
[   77.446032][ T6547] syzkaller0: entered promiscuous mode
[   77.448784][ T6547] syzkaller0: entered allmulticast mode
[   77.757713][ T6553] blkio.reset_stats is deprecated
[   78.315384][ T5220] Bluetooth: hci0: ISO packet for unknown connection handle 33
[   78.384497][ T6566] netlink: 40 bytes leftover after parsing attributes in process `syz.1.177'.
[   78.715875][ T6587] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   79.122101][ T6613] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.190'.
[   79.126143][ T6613] netlink: 60 bytes leftover after parsing attributes in process `syz.1.190'.
[   79.130540][ T6613] netlink: 60 bytes leftover after parsing attributes in process `syz.1.190'.
[   79.298024][ T6618] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.192'.
[   80.338963][ T6640] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.198'.
[   80.590442][ T6656] __nla_validate_parse: 3 callbacks suppressed
[   80.590459][ T6656] netlink: 174280 bytes leftover after parsing attributes in process `syz.0.204'.
[   81.069709][ T6661] netlink: 60 bytes leftover after parsing attributes in process `syz.0.206'.
[   81.254839][   T10] cfg80211: failed to load regulatory.db
[   81.505113][ T6679] validate_nla: 8 callbacks suppressed
[   81.505123][ T6679] netlink: 'syz.2.212': attribute type 10 has an invalid length.
[   81.509507][ T6679] netlink: 156 bytes leftover after parsing attributes in process `syz.2.212'.
[   81.629575][ T6689] syz.1.214 uses obsolete (PF_INET,SOCK_PACKET)
[   81.846215][ T6700] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   81.936260][ T6706] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.220'.
[   82.070670][ T6707] netlink: 'syz.2.220': attribute type 21 has an invalid length.
[   82.082828][ T6707] netlink: 'syz.2.220': attribute type 15 has an invalid length.
[   82.087284][ T6707] netlink: 156 bytes leftover after parsing attributes in process `syz.2.220'.
[   82.091150][ T6707] IPv6: NLM_F_CREATE should be specified when creating new route
[   82.094691][ T6707] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   82.097914][ T6707] IPv6: NLM_F_CREATE should be set when creating new route
[   82.101070][ T6707] IPv6: NLM_F_CREATE should be set when creating new route
[   82.104442][ T6707] IPv6: NLM_F_CREATE should be set when creating new route
[   82.302749][ T6718] netlink: 'syz.2.222': attribute type 16 has an invalid length.
[   82.309209][ T6718] netlink: 'syz.2.222': attribute type 3 has an invalid length.
[   82.315032][ T6718] netlink: 132 bytes leftover after parsing attributes in process `syz.2.222'.
[   82.847676][ T6740] netlink: 'syz.0.229': attribute type 29 has an invalid length.
[   82.852856][ T6740] netlink: 'syz.0.229': attribute type 29 has an invalid length.
[   82.856330][ T6740] netlink: 'syz.0.229': attribute type 29 has an invalid length.
[   82.859708][ T6740] netlink: 'syz.0.229': attribute type 29 has an invalid length.
[   82.927719][ T6743] netlink: 'syz.0.230': attribute type 29 has an invalid length.
[   83.173326][ T6753] netlink: 256 bytes leftover after parsing attributes in process `syz.1.233'.
[   83.395182][ T6750] syz.2.231 (6750) used greatest stack depth: 19456 bytes left
[   84.010387][ T5220] Bluetooth: hci2: ISO packet for unknown connection handle 3902
[   84.980663][ T6793] netlink: 17 bytes leftover after parsing attributes in process `syz.2.243'.
[   85.475189][ T6827] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[   85.515167][ T6829] netlink: 14 bytes leftover after parsing attributes in process `syz.1.253'.
[   85.826381][ T6849] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.833158][ T6849] ipvlan0: entered promiscuous mode
[   85.835152][ T6849] ipvlan0: entered allmulticast mode
[   85.837193][ T6849] veth0_vlan: entered allmulticast mode
[   86.265916][ T6869] netlink: 132 bytes leftover after parsing attributes in process `syz.2.265'.
[   86.274125][ T6869] veth1_vlan: entered allmulticast mode
[   86.282698][ T6869] team0: Device veth1_vlan failed to register rx_handler
[   86.466131][ T6873] netlink: 132 bytes leftover after parsing attributes in process `syz.2.267'.
[   86.639498][ T6881] netlink: 40 bytes leftover after parsing attributes in process `syz.2.271'.
[   86.664666][ T6881] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.723605][ T6881] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.976353][ T6897] Driver unsupported XDP return value 0 on prog  (id 302) dev N/A, expect packet loss!
[   86.983084][ T6897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.274'.
[   87.126180][ T6901] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[   87.644019][ T6922] validate_nla: 6 callbacks suppressed
[   87.644033][ T6922] netlink: 'syz.1.282': attribute type 2 has an invalid length.
[   87.649413][ T6922] netlink: 132 bytes leftover after parsing attributes in process `syz.1.282'.
[   87.787421][ T6929] netlink: 'syz.0.285': attribute type 29 has an invalid length.
[   87.791825][ T6929] netlink: 'syz.0.285': attribute type 29 has an invalid length.
[   87.934629][ T6941] dummy0: left allmulticast mode
[   87.937047][ T6941] bridge0: port 3(dummy0) entered disabled state
[   87.989708][ T6934] netlink: 60 bytes leftover after parsing attributes in process `syz.1.287'.
[   88.015072][ T6941] bridge_slave_1: left allmulticast mode
[   88.018051][ T6941] bridge_slave_1: left promiscuous mode
[   88.021329][ T6941] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.026844][ T6941] bridge_slave_0: left promiscuous mode
[   88.029801][ T6941] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.116552][ T6945] netlink: 'syz.2.290': attribute type 2 has an invalid length.
[   88.119168][ T6945] netlink: 'syz.2.290': attribute type 1 has an invalid length.
[   88.122594][ T6945] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.290'.
[   88.125903][ T6945] nbd: must specify at least one socket
[   89.141995][ T6971] netlink: 'syz.0.299': attribute type 1 has an invalid length.
[   89.150747][ T6971] netlink: 'syz.0.299': attribute type 4 has an invalid length.
[   89.158448][ T6971] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.299'.
[   90.044823][ T7007] netlink: 763 bytes leftover after parsing attributes in process `syz.0.310'.
[   90.076159][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.311'.
[   90.080661][ T7014] netlink: 'syz.2.311': attribute type 4 has an invalid length.
[   90.086245][ T7014] netlink: 'syz.2.311': attribute type 1 has an invalid length.
[   90.089668][ T7014] netlink: 'syz.2.311': attribute type 2 has an invalid length.
[   92.033662][ T7017] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.037720][ T7017] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   92.765839][ T7044] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[   92.803422][ T7032] syz.2.317 (7032) used greatest stack depth: 19448 bytes left
[   92.841096][ T7058] sctp: [Deprecated]: syz.1.323 (pid 7058) Use of struct sctp_assoc_value in delayed_ack socket option.
[   92.841096][ T7058] Use struct sctp_sack_info instead
[   92.885836][ T7059] syzkaller0: entered promiscuous mode
[   92.887911][ T7059] syzkaller0: entered allmulticast mode
[   93.625234][ T7066] validate_nla: 1 callbacks suppressed
[   93.625244][ T7066] netlink: 'syz.1.326': attribute type 10 has an invalid length.
[   93.629663][ T7066] __nla_validate_parse: 2 callbacks suppressed
[   93.629670][ T7066] netlink: 55 bytes leftover after parsing attributes in process `syz.1.326'.
[   93.985002][ T7069] netlink: 'syz.0.327': attribute type 29 has an invalid length.
[   93.989241][ T7069] netlink: 'syz.0.327': attribute type 29 has an invalid length.
[   93.994560][ T7069] netlink: 'syz.0.327': attribute type 29 has an invalid length.
[   94.003716][ T7069] netlink: 'syz.0.327': attribute type 6 has an invalid length.
[   94.007024][ T7069] netlink: 'syz.0.327': attribute type 7 has an invalid length.
[   94.010291][ T7069] netlink: 'syz.0.327': attribute type 7 has an invalid length.
[   94.019534][ T7069] netlink: 12902 bytes leftover after parsing attributes in process `syz.0.327'.
[   94.140137][ T7071] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.328'.
[   94.285823][ T7084] netlink: 'syz.0.332': attribute type 29 has an invalid length.
[   94.383252][ T7088] netlink: 1042 bytes leftover after parsing attributes in process `syz.0.334'.
[   94.883102][ T7118] netlink: 'syz.2.341': attribute type 29 has an invalid length.
[   95.235571][ T7132] netlink: 184920 bytes leftover after parsing attributes in process `syz.2.344'.
[   95.297707][ T7137] netlink: 'syz.1.347': attribute type 21 has an invalid length.
[   95.404114][ T7147] netlink: 763 bytes leftover after parsing attributes in process `syz.1.350'.
[   95.665773][ T7169] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.358'.
[   95.670087][ T7170] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.358'.
[   95.716254][ T7172] nbd: must specify an index to disconnect
[   96.006837][ T7189] veth1_macvtap: left promiscuous mode
[   96.110895][ T7196] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.365'.
[   96.251600][ T7207] dummy0: entered promiscuous mode
[   96.258011][ T7207] dummy0: entered allmulticast mode
[   96.418878][ T7217] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.371'.
[   96.428119][ T7217] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   96.435750][ T7217] openvswitch: netlink: Message has 6332 unknown bytes.
[   96.440677][ T7217] netlink: 'syz.0.371': attribute type 11 has an invalid length.
[   96.485115][ T7217] netlink: 'syz.0.371': attribute type 11 has an invalid length.
[   97.436797][ T7243] team0: entered promiscuous mode
[   97.440357][ T7243] team_slave_1: entered promiscuous mode
[   97.443760][ T7243] team0: entered allmulticast mode
[   97.446209][ T7243] team_slave_1: entered allmulticast mode
[   97.449524][ T7243] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   97.860163][ T5220] Bluetooth: hci2: unexpected event 0x0f length: 151 > 4
[  100.891268][ T7337] validate_nla: 13 callbacks suppressed
[  100.892374][ T7337] netlink: 'syz.0.406': attribute type 39 has an invalid length.
[  103.797959][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1866667864 wd_nsec: 1866667859
[  117.227089][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  117.231108][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  117.234861][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  117.244944][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  117.248502][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  117.396793][ T5220] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  117.401856][ T5220] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  117.405274][ T5220] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  117.424312][ T5220] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  117.428791][ T5220] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  117.952299][   T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  117.955727][   T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  117.958968][   T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  117.966552][   T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  117.970251][   T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  119.311437][   T54] Bluetooth: hci3: command tx timeout
[  119.471896][   T54] Bluetooth: hci4: command tx timeout
[  120.031970][   T54] Bluetooth: hci5: command tx timeout
[  121.392369][   T54] Bluetooth: hci3: command tx timeout
[  121.553659][   T54] Bluetooth: hci4: command tx timeout
[  122.111584][   T54] Bluetooth: hci5: command tx timeout
[  123.471672][   T54] Bluetooth: hci3: command tx timeout
[  123.665894][   T54] Bluetooth: hci4: command tx timeout
[  124.191747][   T54] Bluetooth: hci5: command tx timeout
[  125.551541][   T54] Bluetooth: hci3: command tx timeout
[  125.711627][   T54] Bluetooth: hci4: command tx timeout
[  126.271713][   T54] Bluetooth: hci5: command tx timeout
[  132.441946][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.444671][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  147.869145][   T15] sched: DL replenish lagged too much
[  178.624405][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  178.629335][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  178.641005][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  178.735554][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  178.739520][ T5837] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  178.744005][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  178.764176][   T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  178.770174][   T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  178.774568][   T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  178.777763][   T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  179.229231][ T5838] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  179.238634][ T5838] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  179.246288][ T5838] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  179.250853][ T5838] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  179.299533][ T5838] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  180.681018][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  180.683288][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  180.835484][   T54] Bluetooth: hci0: command tx timeout
[  180.838345][ T5838] Bluetooth: hci6: command tx timeout
[  181.510265][ T5838] Bluetooth: hci7: command tx timeout
[  182.911679][ T5838] Bluetooth: hci6: command tx timeout
[  182.914283][ T5838] Bluetooth: hci0: command tx timeout
[  183.551659][   T54] Bluetooth: hci7: command tx timeout
[  184.992517][   T54] Bluetooth: hci0: command tx timeout
[  184.994987][   T54] Bluetooth: hci6: command tx timeout
[  185.631559][ T5838] Bluetooth: hci7: command tx timeout
[  187.071594][ T5838] Bluetooth: hci6: command tx timeout
[  187.074083][ T5838] Bluetooth: hci0: command tx timeout
[  187.711696][   T54] Bluetooth: hci7: command tx timeout
[  193.890448][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  193.893339][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  258.537229][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  258.539959][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  258.636364][   T34] INFO: task syz.0.406:7335 blocked for more than 146 seconds.
[  258.639699][   T34]       Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0
[  258.645315][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  258.649446][   T34] task:syz.0.406       state:D stack:24264 pid:7335  tgid:7335  ppid:5833   task_flags:0x400040 flags:0x00004006
[  258.655803][   T34] Call Trace:
[  258.657270][   T34]  <TASK>
[  258.658624][   T34]  __schedule+0x16f5/0x4d00
[  258.660742][   T34]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  258.663652][   T34]  ? schedule+0x165/0x360
[  258.665550][   T34]  ? __pfx___schedule+0x10/0x10
[  258.667720][   T34]  ? schedule+0x91/0x360
[  258.669528][   T34]  schedule+0x165/0x360
[  258.671645][   T34]  schedule_preempt_disabled+0x13/0x30
[  258.674151][   T34]  __mutex_lock+0x724/0xe80
[  258.676324][   T34]  ? __mutex_lock+0x51b/0xe80
[  258.678419][   T34]  ? tun_chr_close+0x3e/0x1c0
[  258.680473][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  258.682908][   T34]  ? __pfx_tun_chr_close+0x10/0x10
[  258.685218][   T34]  tun_chr_close+0x3e/0x1c0
[  258.687418][   T34]  __fput+0x44c/0xa70
[  258.689338][   T34]  task_work_run+0x1d4/0x260
[  258.691683][   T34]  ? __pfx_task_work_run+0x10/0x10
[  258.693946][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  258.696283][   T34]  exit_to_user_mode_loop+0xec/0x110
[  258.698555][   T34]  do_syscall_64+0x2bd/0x3b0
[  258.700562][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  258.708697][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.711675][   T34]  ? exc_page_fault+0x9f/0xf0
[  258.713744][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.716377][   T34] RIP: 0033:0x7f899918e9a9
[  258.718535][   T34] RSP: 002b:00007ffed6cd58f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  258.725128][   T34] RAX: 0000000000000000 RBX: 00007f89993b7ba0 RCX: 00007f899918e9a9
[  258.728809][   T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  258.732487][   T34] RBP: 00007f89993b7ba0 R08: 000000000000016c R09: 00000014d6cd5bef
[  258.735791][   T34] R10: 00007f89993b7ac0 R11: 0000000000000246 R12: 0000000000018acb
[  258.739151][   T34] R13: 00007f89993b6080 R14: ffffffffffffffff R15: 00007ffed6cd5a10
[  258.743084][   T34]  </TASK>
[  258.744024][ T7372] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  258.744555][   T34] INFO: task syz.2.408:7346 blocked for more than 146 seconds.
[  258.751112][   T34]       Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  258.761925][ T7373] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  258.766804][ T7373] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  258.773411][ T7392] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  258.805643][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  258.809402][   T34] task:syz.2.408       state:D stack:25768 pid:7346  tgid:7344  ppid:5832   task_flags:0x400140 flags:0x00004004
[  258.871504][   T34] Call Trace:
[  258.873040][   T34]  <TASK>
[  258.874373][   T34]  __schedule+0x16f5/0x4d00
[  258.876389][   T34]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  258.878850][   T34]  ? schedule+0x165/0x360
[  258.880627][   T34]  ? __pfx___schedule+0x10/0x10
[  258.888789][ T7392] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  258.892044][ T5837] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  258.929696][   T34]  ? schedule+0x91/0x360
[  258.948025][   T34]  schedule+0x165/0x360
[  258.949524][   T34]  schedule_preempt_disabled+0x13/0x30
[  258.958106][   T34]  __mutex_lock+0x724/0xe80
[  258.959906][   T34]  ? __mutex_lock+0x51b/0xe80
[  258.962024][   T34]  ? wext_ioctl_dispatch+0xa2/0x410
[  258.963699][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  258.965709][   T34]  ? dev_load+0x21/0x1f0
[  258.967414][   T34]  ? dev_load+0x21/0x1f0
[  258.969336][   T34]  ? __pfx_ioctl_standard_call+0x10/0x10
[  259.041347][   T34]  wext_ioctl_dispatch+0xa2/0x410
[  259.043511][   T34]  wext_handle_ioctl+0x100/0x1c0
[  259.045552][   T34]  ? __pfx_wext_handle_ioctl+0x10/0x10
[  259.048037][   T34]  sock_ioctl+0x15f/0x790
[  259.049961][   T34]  ? __pfx_sock_ioctl+0x10/0x10
[  259.071854][   T34]  ? __fget_files+0x2a/0x420
[  259.073846][   T34]  ? __fget_files+0x3a0/0x420
[  259.075867][   T34]  ? __fget_files+0x2a/0x420
[  259.078229][   T34]  ? bpf_lsm_file_ioctl+0x9/0x20
[  259.080557][   T34]  ? __pfx_sock_ioctl+0x10/0x10
[  259.084370][   T34]  __se_sys_ioctl+0xfc/0x170
[  259.086310][   T34]  do_syscall_64+0xfa/0x3b0
[  259.088131][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.090835][   T34]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  259.101556][ T7392] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  259.106556][ T7392] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  259.114096][ T7392] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  259.118206][ T7392] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  259.151374][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.153705][   T34] RIP: 0033:0x7f52e5d8e9a9
[  259.155528][   T34] RSP: 002b:00007f52e6bac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  259.158948][   T34] RAX: ffffffffffffffda RBX: 00007f52e5fb6080 RCX: 00007f52e5d8e9a9
[  259.189349][   T34] RDX: 0000200000000000 RSI: 0000000000008b20 RDI: 0000000000000008
[  259.201675][   T34] RBP: 00007f52e5e10d69 R08: 0000000000000000 R09: 0000000000000000
[  259.205196][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  259.208445][   T34] R13: 0000000000000000 R14: 00007f52e5fb6080 R15: 00007ffcd0c97a48
[  259.233674][   T34]  </TASK>
[  259.240970][   T34] INFO: task syz.2.408:7347 blocked for more than 147 seconds.
[  259.247108][   T34]       Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0
[  259.250392][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  259.283370][   T34] task:syz.2.408       state:D stack:26760 pid:7347  tgid:7344  ppid:5832   task_flags:0x400140 flags:0x00004004
[  259.288518][   T34] Call Trace:
[  259.290040][   T34]  <TASK>
[  259.315497][   T34]  __schedule+0x16f5/0x4d00
[  259.317725][   T34]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  259.320409][   T34]  ? schedule+0x165/0x360
[  259.331571][   T34]  ? __pfx___schedule+0x10/0x10
[  259.341881][   T34]  ? schedule+0x91/0x360
[  259.343725][   T34]  schedule+0x165/0x360
[  259.345455][   T34]  schedule_preempt_disabled+0x13/0x30
[  259.347773][   T34]  __mutex_lock+0x724/0xe80
[  259.349710][   T34]  ? __mutex_lock+0x51b/0xe80
[  259.371329][   T34]  ? rtnl_dumpit+0x92/0x200
[  259.373472][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  259.375563][   T34]  ? __build_skb_around+0x257/0x3e0
[  259.377757][   T34]  ? __pfx_rtnl_dump_ifinfo+0x10/0x10
[  259.379524][   T34]  rtnl_dumpit+0x92/0x200
[  259.380996][   T34]  netlink_dump+0x6de/0xe60
[  259.396477][   T34]  ? perf_trace_lock+0x2f8/0x3b0
[  259.398717][   T34]  ? __pfx_netlink_dump+0x10/0x10
[  259.400964][   T34]  ? netlink_lookup+0x30/0x200
[  259.408526][   T34]  ? netlink_lookup+0x30/0x200
[  259.410639][   T34]  ? netlink_lookup+0x30/0x200
[  259.421143][   T34]  __netlink_dump_start+0x5cb/0x7e0
[  259.423683][   T34]  rtnetlink_rcv_msg+0x9eb/0xb70
[  259.425861][   T34]  ? __pfx_rtnl_dump_ifinfo+0x10/0x10
[  259.428211][   T34]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  259.430430][   T34]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  259.442578][   T34]  ? ref_tracker_free+0x63a/0x7d0
[  259.444688][   T34]  ? __pfx_rtnl_dumpit+0x10/0x10
[  259.446762][   T34]  ? __pfx_rtnl_dump_ifinfo+0x10/0x10
[  259.449217][   T34]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  259.457002][   T34]  netlink_rcv_skb+0x208/0x470
[  259.459125][   T34]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  259.464287][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  259.466796][   T34]  ? netlink_deliver_tap+0x2e/0x1b0
[  259.469114][   T34]  ? netlink_deliver_tap+0x2e/0x1b0
[  259.487992][   T34]  netlink_unicast+0x75c/0x8e0
[  259.490305][   T34]  netlink_sendmsg+0x805/0xb30
[  259.499356][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  259.510993][   T34]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  259.515642][   T34]  ? aa_sock_msg_perm+0x94/0x160
[  259.517863][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  259.520122][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  259.531438][   T34]  __sock_sendmsg+0x21c/0x270
[  259.533646][   T34]  ____sys_sendmsg+0x505/0x830
[  259.535758][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  259.537990][   T34]  ? import_iovec+0x74/0xa0
[  259.547518][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  259.549573][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  259.552745][   T34]  ? __fget_files+0x2a/0x420
[  259.554814][   T34]  ? __fget_files+0x2a/0x420
[  259.556989][   T34]  ? __fget_files+0x3a0/0x420
[  259.559344][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  259.567734][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  259.570174][   T34]  ? rcu_is_watching+0x15/0xb0
[  259.573122][   T34]  ? do_syscall_64+0xbe/0x3b0
[  259.575311][   T34]  do_syscall_64+0xfa/0x3b0
[  259.577465][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  259.579924][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.589505][   T34]  ? exc_page_fault+0x9f/0xf0
[  259.591334][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.593297][   T34] RIP: 0033:0x7f52e5d8e9a9
[  259.594879][   T34] RSP: 002b:00007f52e6b8b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  259.598755][   T34] RAX: ffffffffffffffda RBX: 00007f52e5fb6160 RCX: 00007f52e5d8e9a9
[  259.613445][   T34] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000c
[  259.616850][   T34] RBP: 00007f52e5e10d69 R08: 0000000000000000 R09: 0000000000000000
[  259.620175][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  259.634214][   T34] R13: 0000000000000000 R14: 00007f52e5fb6160 R15: 00007ffcd0c97a48
[  259.637662][   T34]  </TASK>
[  259.639044][   T34] 
[  259.639044][   T34] Showing all locks held in the system:
[  259.654328][   T34] 3 locks held by kworker/0:1/10:
[  259.656595][   T34]  #0: ffff88801a481d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  259.671882][   T34]  #1: ffffc900000d7bc0 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  259.676729][   T34]  #2: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: crda_timeout_work+0x15/0x50
[  259.680714][   T34] 1 lock held by khungtaskd/34:
[  259.689637][   T34]  #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  259.694944][   T34] 3 locks held by kworker/u11:0/54:
[  259.697207][   T34]  #0: ffff88810e712948 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  259.708880][   T34]  #1: ffffc900007cfbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  259.716938][   T34]  #2: ffff88803dcecdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  259.730449][   T34] 3 locks held by kworker/u11:1/5220:
[  259.733442][   T34]  #0: ffff88803d3ce148 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  259.737991][   T34]  #1: ffffc90008307bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  259.756356][   T34]  #2: ffff888110bccdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  259.760609][   T34] 1 lock held by dhcpcd/5576:
[  259.764432][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x5b7/0xd20
[  259.768757][   T34] 2 locks held by getty/5657:
[  259.770721][   T34]  #0: ffff8881091610a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  259.781330][   T34]  #1: ffffc900029032f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  259.785678][   T34] 3 locks held by kworker/u11:2/5829:
[  259.788006][   T34]  #0: ffff8881172c3948 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  259.799406][   T34]  #1: ffffc9000385fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  259.806230][   T34]  #2: ffff8881073a8dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  259.810629][   T34] 4 locks held by kworker/u11:4/5838:
[  259.819795][   T34]  #0: ffff888116f47148 ((wq_completion)hci8#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  259.827002][   T34]  #1: ffffc9000394fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  259.839116][   T34]  #2: ffff88810d9280b8 (&hdev->lock){+.+.}-{4:4}, at: hci_conn_complete_evt+0xc3/0x1040
[  259.843911][   T34]  #3: ffff88801b2f7988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x520
[  259.850435][   T34] 3 locks held by kworker/u8:2/5847:
[  259.861340][   T34]  #0: ffff88802956a948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  259.866330][   T34]  #1: ffffc900038bfbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  259.879445][   T34]  #2: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  259.884087][   T34] 3 locks held by kworker/0:4/5879:
[  259.886359][   T34]  #0: ffff88801a481d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  259.898640][   T34]  #1: ffffc90003cdfbc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  259.903784][   T34]  #2: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf00
[  259.907877][   T34] 1 lock held by syz.0.406/7335:
[  259.910227][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  259.920705][   T34] 3 locks held by syz.0.406/7337:
[  259.923786][   T34] 1 lock held by syz.1.407/7340:
[  259.926012][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  259.929697][   T34] 1 lock held by syz.2.408/7346:
[  259.940731][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: wext_ioctl_dispatch+0xa2/0x410
[  259.947528][   T34] 2 locks held by syz.2.408/7347:
[  259.959309][   T34]  #0: ffff888022fb66d0 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0
[  259.966808][   T34]  #1: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200
[  259.970939][   T34] 1 lock held by syz-executor/7351:
[  259.980900][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  259.985983][   T34] 1 lock held by syz-executor/7356:
[  259.988377][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  259.999387][   T34] 1 lock held by syz-executor/7359:
[  260.002354][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  260.006619][   T34] 1 lock held by syz-executor/7366:
[  260.008882][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  260.020130][   T34] 1 lock held by syz-executor/7369:
[  260.022945][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  260.026920][   T34] 4 locks held by kworker/u11:6/7373:
[  260.029297][   T34]  #0: ffff88801fef3948 ((wq_completion)hci9#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  260.043399][   T34]  #1: ffffc90006b4fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  260.048723][   T34]  #2: ffff88802ae300b8 (&hdev->lock){+.+.}-{4:4}, at: hci_conn_complete_evt+0xc3/0x1040
[  260.062373][   T34]  #3: ffff88801b2f7988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x520
[  260.065587][   T34] 1 lock held by syz-executor/7375:
[  260.067469][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  260.070396][   T34] 2 locks held by dhcpcd/7384:
[  260.079835][   T34]  #0: ffff888111d7c408 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  260.083414][   T34]  #1: ffffffff8e144bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  260.087238][   T34] 1 lock held by syz-executor/7387:
[  260.089110][   T34]  #0: ffff88801b2f7988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_dop_revalidate+0x9e/0x5d0
[  260.096600][   T34] 1 lock held by syz-executor/7388:
[  260.098722][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  260.102607][   T34] 1 lock held by udevd/7390:
[  260.104411][   T34]  #0: ffff88801b2f7988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_dop_revalidate+0x9e/0x5d0
[  260.108422][   T34] 1 lock held by syz-executor/7391:
[  260.110594][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  260.121351][   T34] 
[  260.122403][   T34] =============================================
[  260.122403][   T34] 
[  260.125194][   T34] NMI backtrace for cpu 0
[  260.125205][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  260.125215][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  260.125219][   T34] Call Trace:
[  260.125225][   T34]  <TASK>
[  260.125231][   T34]  dump_stack_lvl+0x189/0x250
[  260.125252][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  260.125264][   T34]  ? __pfx__printk+0x10/0x10
[  260.125299][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  260.125316][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  260.125323][   T34]  ? _printk+0xcf/0x120
[  260.125344][   T34]  ? __pfx__printk+0x10/0x10
[  260.125361][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  260.125374][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  260.125389][   T34]  watchdog+0xfee/0x1030
[  260.125404][   T34]  ? watchdog+0x1de/0x1030
[  260.125427][   T34]  kthread+0x711/0x8a0
[  260.125447][   T34]  ? __pfx_watchdog+0x10/0x10
[  260.125455][   T34]  ? __pfx_kthread+0x10/0x10
[  260.125471][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  260.125482][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  260.125491][   T34]  ? __pfx_kthread+0x10/0x10
[  260.125505][   T34]  ret_from_fork+0x3fc/0x770
[  260.125521][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  260.125542][   T34]  ? __switch_to_asm+0x39/0x70
[  260.125550][   T34]  ? __switch_to_asm+0x33/0x70
[  260.125558][   T34]  ? __pfx_kthread+0x10/0x10
[  260.125573][   T34]  ret_from_fork_asm+0x1a/0x30
[  260.125610][   T34]  </TASK>
[  260.125613][   T34] Sending NMI from CPU 0 to CPUs 1:
[  260.184588][    C1] NMI backtrace for cpu 1
[  260.184604][    C1] CPU: 1 UID: 0 PID: 7337 Comm: syz.0.406 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  260.184620][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  260.184626][    C1] RIP: 0010:check_preemption_disabled+0x6/0x120
[  260.184647][    C1] Code: c7 c6 20 9f e2 8b eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 53 <48> 83 ec 10 65 48 8b 05 ee 5d 31 07 48 89 44 24 08 65 8b 05 f6 5d
[  260.184657][    C1] RSP: 0018:ffffc900001df958 EFLAGS: 00000007
[  260.184668][    C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000002
[  260.184675][    C1] RDX: 0000000000000000 RSI: ffffffff8be29f20 RDI: ffffffff8be29ee0
[  260.184683][    C1] RBP: ffffffff81cb5957 R08: 0000000000000000 R09: 0000000000000000
[  260.184689][    C1] R10: 3e2d735f5f5f5f26 R11: 746e756f63716573 R12: 0000000000000002
[  260.184697][    C1] R13: ffffffff8e13f0e0 R14: 0000000000000000 R15: 0000000000000000
[  260.184703][    C1] FS:  00007f8999fa96c0(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
[  260.184713][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  260.184720][    C1] CR2: 00007ffc3eb03c98 CR3: 000000002afc6000 CR4: 00000000000006f0
[  260.184753][    C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
[  260.184761][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  260.184767][    C1] Call Trace:
[  260.184774][    C1]  <IRQ>
[  260.184784][    C1]  ? trace_call_bpf+0xb7/0x850
[  260.184798][    C1]  rcu_is_watching+0x15/0xb0
[  260.184816][    C1]  lock_acquire+0x5f/0x360
[  260.184847][    C1]  ? trace_call_bpf+0xb7/0x850
[  260.184866][    C1]  trace_call_bpf+0xd4/0x850
[  260.184878][    C1]  ? trace_call_bpf+0xb7/0x850
[  260.184888][    C1]  ? perf_trace_lock+0x2f8/0x3b0
[  260.184917][    C1]  ? __pfx_trace_call_bpf+0x10/0x10
[  260.184933][    C1]  ? __pfx_perf_output_begin_forward+0x10/0x10
[  260.184961][    C1]  perf_trace_run_bpf_submit+0x78/0x170
[  260.184986][    C1]  perf_trace_lock+0x2f8/0x3b0
[  260.185021][    C1]  ? __pfx_perf_trace_lock+0x10/0x10
[  260.185042][    C1]  ? ktime_get+0x3e/0x1f0
[  260.185061][    C1]  ? ktime_get+0x3e/0x1f0
[  260.185075][    C1]  ? ktime_get+0x3e/0x1f0
[  260.185089][    C1]  ? ktime_get+0x3e/0x1f0
[  260.185104][    C1]  lock_release+0x3b2/0x3e0
[  260.185117][    C1]  ? __perf_event_account_interrupt+0x179/0x250
[  260.185135][    C1]  ? ktime_get+0x3e/0x1f0
[  260.185194][    C1]  seqcount_lockdep_reader_access+0xdc/0x1c0
[  260.185211][    C1]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  260.185235][    C1]  ? __pfx___perf_event_overflow+0x10/0x10
[  260.185252][    C1]  ? __pfx_cpu_clock_event_update+0x10/0x10
[  260.185273][    C1]  ktime_get+0x3e/0x1f0
[  260.185295][    C1]  perf_swevent_hrtimer+0x442/0x550
[  260.185319][    C1]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  260.185348][    C1]  ? unwind_next_frame+0xa60/0x2390
[  260.185394][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  260.185411][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  260.185435][    C1]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  260.185449][    C1]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  260.185461][    C1]  __hrtimer_run_queues+0x4e0/0xc60
[  260.185509][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  260.185520][    C1]  ? ktime_get_update_offsets_now+0x3ab/0x3d0
[  260.185554][    C1]  hrtimer_interrupt+0x45b/0xaa0
[  260.185615][    C1]  __sysvec_apic_timer_interrupt+0x10b/0x410
[  260.185635][    C1]  sysvec_apic_timer_interrupt+0x52/0xc0
[  260.185653][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  260.185666][    C1] RIP: 0010:unwind_next_frame+0xa60/0x2390
[  260.185678][    C1] Code: 48 8d 5a 01 48 89 d0 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 82 17 00 00 48 89 d8 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 99 17 00 00 <48> 0f bf 02 49 01 c4 48 8d 5e 01 48 8b 44 24 40 0f b6 04 28 84 c0
[  260.185687][    C1] RSP: 0018:ffffc900001e03b8 EFLAGS: 00000246
[  260.185695][    C1] RAX: 0000000000000000 RBX: ffffffff903177cf RCX: ffffffff8fb5aeb8
[  260.185702][    C1] RDX: ffffffff903177ce RSI: ffffffff903177d2 RDI: ffffffff8be29ee0
[  260.185711][    C1] RBP: dffffc0000000000 R08: 0000000000000009 R09: ffffffff8172aae5
[  260.185717][    C1] R10: ffffc900001e04e8 R11: fffff5200003c0a9 R12: ffffc900001e0488
[  260.185726][    C1] R13: ffffc900001e0538 R14: ffffc900001e04e8 R15: ffffc900001e0520
[  260.185744][    C1]  ? unwind_next_frame+0xa5/0x2390
[  260.185773][    C1]  ? unwind_next_frame+0xd4/0x2390
[  260.185798][    C1]  ? unwind_next_frame+0xa5/0x2390
[  260.185813][    C1]  ? __unwind_start+0xf8/0x760
[  260.185839][    C1]  __unwind_start+0x5b9/0x760
[  260.185861][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  260.185879][    C1]  arch_stack_walk+0xe4/0x150
[  260.185905][    C1]  ? __unwind_start+0xf8/0x760
[  260.185927][    C1]  stack_trace_save+0x9c/0xe0
[  260.185944][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  260.185957][    C1]  ? sched_clock_cpu+0x74/0x430
[  260.185973][    C1]  ? lapic_next_event+0x11/0x20
[  260.185985][    C1]  ? clockevents_program_event+0x24d/0x360
[  260.186015][    C1]  ? __pfx_sched_clock_cpu+0x10/0x10
[  260.186028][    C1]  ? hrtimer_interrupt+0x889/0xaa0
[  260.186045][    C1]  kasan_save_track+0x3e/0x80
[  260.186169][    C1]  __kasan_slab_alloc+0x6c/0x80
[  260.186187][    C1]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  260.186202][    C1]  ? __alloc_skb+0x112/0x2d0
[  260.186241][    C1]  __alloc_skb+0x112/0x2d0
[  260.186263][    C1]  __netdev_alloc_skb+0x108/0x970
[  260.186283][    C1]  ? __pfx___netdev_alloc_skb+0x10/0x10
[  260.186299][    C1]  ? __ieee80211_beacon_get+0x5f1/0x17b0
[  260.186324][    C1]  __ieee80211_beacon_get+0xeeb/0x17b0
[  260.186341][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  260.186372][    C1]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  260.186396][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  260.186430][    C1]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  260.186462][    C1]  __iterate_interfaces+0x2ab/0x590
[  260.186479][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  260.186496][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  260.186512][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  260.186527][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  260.186547][    C1]  mac80211_hwsim_beacon+0xbb/0x1c0
[  260.186564][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  260.186580][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  260.186625][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  260.186673][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  260.186696][    C1]  handle_softirqs+0x286/0x870
[  260.186719][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  260.186744][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  260.186756][    C1]  ? irq_work_single+0x1ac/0x240
[  260.186776][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  260.186799][    C1]  __irq_exit_rcu+0xca/0x1f0
[  260.186814][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  260.186836][    C1]  ? rcu_is_watching+0x15/0xb0
[  260.186855][    C1]  irq_exit_rcu+0x9/0x30
[  260.186866][    C1]  sysvec_irq_work+0xa3/0xc0
[  260.186880][    C1]  </IRQ>
[  260.186884][    C1]  <TASK>
[  260.186891][    C1]  asm_sysvec_irq_work+0x1a/0x20
[  260.186903][    C1] RIP: 0010:finish_task_switch+0x26b/0x950
[  260.186914][    C1] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 0f 2a df 09 e8 ba b9 35 00 fb 4c 8b 65 c0 <49> 8d bc 24 18 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0
[  260.186922][    C1] RSP: 0018:ffffc90004e26898 EFLAGS: 00000282
[  260.186933][    C1] RAX: 85d84de2c4459300 RBX: 0000000000000000 RCX: 85d84de2c4459300
[  260.186939][    C1] RDX: 0000000000000006 RSI: ffffffff8d998940 RDI: ffffffff8be29f40
[  260.186947][    C1] RBP: ffffc90004e268f0 R08: ffffffff8fa1e9f7 R09: 1ffffffff1f43d3e
[  260.186954][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d3f R12: ffff888022908000
[  260.186961][    C1] R13: dffffc0000000000 R14: ffff888108109cc0 R15: ffff88813663ab98
[  260.187002][    C1]  ? finish_task_switch+0x266/0x950
[  260.187028][    C1]  __schedule+0x16fd/0x4d00
[  260.187058][    C1]  ? irqentry_enter+0x3d/0x60
[  260.187078][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  260.187102][    C1]  ? preempt_schedule_irq+0xb5/0x150
[  260.187116][    C1]  ? trace_call_bpf+0x5ba/0x850
[  260.187135][    C1]  ? __pfx___schedule+0x10/0x10
[  260.187176][    C1]  ? irqentry_exit+0x74/0x90
[  260.187229][    C1]  preempt_schedule_irq+0xb5/0x150
[  260.187246][    C1]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  260.187262][    C1]  ? perf_trace_lock+0x2f8/0x3b0
[  260.187290][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  260.187307][    C1]  irqentry_exit+0x6f/0x90
[  260.187322][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  260.187333][    C1] RIP: 0010:kasan_check_range+0x1da/0x2c0
[  260.187346][    C1] Code: 07 4d 85 e4 49 0f 49 dc 48 83 e3 f8 49 29 dc 74 12 41 80 3b 00 0f 85 b8 00 00 00 49 ff c3 49 ff cc 75 ee 5b 41 5c 41 5d 41 5e <41> 5f 5d c3 cc cc cc cc cc 45 84 ff 75 63 41 f7 c7 00 ff 00 00 75
[  260.187353][    C1] RSP: 0018:ffffc90004e26c98 EFLAGS: 00000256
[  260.187363][    C1] RAX: ffffffff825d0801 RBX: ffff88803b862780 RCX: ffffffff825d08a0
[  260.187370][    C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff88803b862780
[  260.187377][    C1] RBP: 0000000000000002 R08: ffff88803b862783 R09: 1ffff1100770c4f0
[  260.187384][    C1] R10: dffffc0000000000 R11: ffffed100770c4f1 R12: 1ffffffff1f44366
[  260.187391][    C1] R13: dffffc0000000000 R14: ffff88803b862780 R15: 1ffff1100770c4f0
[  260.187412][    C1]  ? kernfs_put_active+0xa1/0x100
[  260.187427][    C1]  ? kernfs_put+0x30/0x480
[  260.187455][    C1]  kernfs_put+0x30/0x480
[  260.187469][    C1]  ? up_write+0x1c4/0x420
[  260.187493][    C1]  __kernfs_remove+0x3f6/0x570
[  260.187516][    C1]  kernfs_remove_by_name_ns+0xaf/0x130
[  260.187539][    C1]  sysfs_remove_group+0xfc/0x2c0
[  260.187562][    C1]  sysfs_remove_groups+0x54/0xb0
[  260.187582][    C1]  device_remove_attrs+0x1aa/0x260
[  260.187604][    C1]  ? __pfx_device_remove_attrs+0x10/0x10
[  260.187615][    C1]  ? up_write+0x1c4/0x420
[  260.187647][    C1]  device_del+0x509/0x8e0
[  260.187679][    C1]  ? __pfx_device_del+0x10/0x10
[  260.187693][    C1]  ? netdev_unregister_kobject+0x344/0x450
[  260.187723][    C1]  unregister_netdevice_many_notify+0x1d52/0x2320
[  260.187764][    C1]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  260.187779][    C1]  ? trace_sched_exit_tp+0x38/0x120
[  260.187792][    C1]  ? rtnl_dellink+0x331/0x710
[  260.187804][    C1]  ? perf_swevent_get_recursion_context+0xa6/0x100
[  260.187828][    C1]  ? unregister_netdevice_queue+0x1b3/0x380
[  260.187859][    C1]  ? __nla_parse+0x40/0x60
[  260.187884][    C1]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  260.187899][    C1]  rtnl_dellink+0x488/0x710
[  260.187923][    C1]  ? __pfx_rtnl_dellink+0x10/0x10
[  260.187942][    C1]  ? trace_call_bpf+0xb7/0x850
[  260.187967][    C1]  ? trace_call_bpf+0xb7/0x850
[  260.188084][    C1]  ? rcu_read_unlock+0x87/0xa0
[  260.188124][    C1]  ? __pfx_rtnl_dellink+0x10/0x10
[  260.188137][    C1]  rtnetlink_rcv_msg+0x7cf/0xb70
[  260.188185][    C1]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  260.188203][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  260.188233][    C1]  ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10
[  260.188265][    C1]  netlink_rcv_skb+0x208/0x470
[  260.188278][    C1]  ? rcu_is_watching+0x15/0xb0
[  260.188293][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  260.188315][    C1]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  260.188350][    C1]  ? netlink_deliver_tap+0x2e/0x1b0
[  260.188379][    C1]  netlink_unicast+0x75c/0x8e0
[  260.188416][    C1]  netlink_sendmsg+0x805/0xb30
[  260.188447][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  260.188463][    C1]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  260.188478][    C1]  ? aa_sock_msg_perm+0x94/0x160
[  260.188498][    C1]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  260.188514][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  260.188530][    C1]  __sock_sendmsg+0x21c/0x270
[  260.188554][    C1]  ____sys_sendmsg+0x505/0x830
[  260.188579][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[  260.188611][    C1]  ? import_iovec+0x74/0xa0
[  260.188632][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  260.188653][    C1]  ? __pfx____sys_sendmsg+0x10/0x10
[  260.188701][    C1]  ? __fget_files+0x2a/0x420
[  260.188737][    C1]  ? __fget_files+0x2a/0x420
[  260.188751][    C1]  ? __fget_files+0x3a0/0x420
[  260.188783][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  260.188804][    C1]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  260.188816][    C1]  ? perf_trace_preemptirq_template+0xa3/0x340
[  260.188862][    C1]  ? do_syscall_64+0xbe/0x3b0
[  260.188886][    C1]  do_syscall_64+0xfa/0x3b0
[  260.188905][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.188915][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  260.188936][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.188948][    C1] RIP: 0033:0x7f899918e9a9
[  260.188962][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  260.188970][    C1] RSP: 002b:00007f8999fa9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  260.188981][    C1] RAX: ffffffffffffffda RBX: 00007f89993b5fa0 RCX: 00007f899918e9a9
[  260.188988][    C1] RDX: 0000000000040000 RSI: 0000200000000140 RDI: 0000000000000006
[  260.188995][    C1] RBP: 00007f8999210d69 R08: 0000000000000000 R09: 0000000000000000
[  260.189008][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  260.189013][    C1] R13: 0000000000000000 R14: 00007f89993b5fa0 R15: 00007ffed6cd5798
[  260.189050][    C1]  </TASK>
[  260.831633][ T7392] Bluetooth: hci4: command 0x0406 tx timeout
[  260.834334][ T7392] Bluetooth: hci3: command 0x0406 tx timeout
[  260.837042][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  260.840163][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  260.845361][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  260.849509][   T34] Call Trace:
[  260.850947][   T34]  <TASK>
[  260.852225][   T34]  dump_stack_lvl+0x99/0x250
[  260.854257][   T34]  ? __asan_memcpy+0x40/0x70
[  260.856445][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  260.858749][   T34]  ? __pfx__printk+0x10/0x10
[  260.860809][   T34]  panic+0x2db/0x790
[  260.862495][   T34]  ? __pfx_panic+0x10/0x10
[  260.864391][   T34]  ? nmi_backtrace_stall_check+0x433/0x440
[  260.866826][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  260.869286][   T34]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  260.872191][   T34]  watchdog+0x102d/0x1030
[  260.874353][   T34]  ? watchdog+0x1de/0x1030
[  260.876513][   T34]  kthread+0x711/0x8a0
[  260.878316][   T34]  ? __pfx_watchdog+0x10/0x10
[  260.880327][   T34]  ? __pfx_kthread+0x10/0x10
[  260.882275][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  260.884408][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  260.886612][   T34]  ? __pfx_kthread+0x10/0x10
[  260.888723][   T34]  ret_from_fork+0x3fc/0x770
[  260.890977][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  260.893449][   T34]  ? __switch_to_asm+0x39/0x70
[  260.895486][   T34]  ? __switch_to_asm+0x33/0x70
[  260.897457][   T34]  ? __pfx_kthread+0x10/0x10
[  260.899403][   T34]  ret_from_fork_asm+0x1a/0x30
[  260.901599][   T34]  </TASK>
[  260.903927][   T34] Kernel Offset: disabled
[  260.905936][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:37:01  Registers:
info registers vcpu 0

CPU#0
RAX=ffff888022908000 RBX=0000000000000000 RCX=85d84de2c4459300 RDX=0000000000000000
RSI=ffffffff81cb5974 RDI=1ffffffff1c27e1c RBP=ffffffff81cb5957 RSP=ffffc90000007000
R8 =0000000000000000 R9 =0000000000000000 R10=dffffc0000000000 R11=fffff91fe28cf405
R12=0000000000000002 R13=ffffffff8e13f0e0 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff819e3bdd RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f8999fa96c0 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f931822de1c CR3=000000002afc6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000039 RBX=0000000000000039 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6d0
R8 =ffff888021078237 R9 =1ffff1100420f046 R10=dffffc0000000000 R11=ffffffff85472aa0
R12=dffffc0000000000 R13=ffffffff99af58c9 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff85472b1c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fff40bbfdf8 CR3=000000000df38000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
