last executing test programs:

18.588390911s ago: executing program 0 (id=259):
r0 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x6, 0xe, &(0x7f0000000100), 0x4)

18.529712029s ago: executing program 0 (id=260):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x3}]}, @ptr]}}, 0x0, 0x3e}, 0x28)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66)

17.769572908s ago: executing program 0 (id=275):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x5}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={0x1, 0x0}, 0x20)
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0), 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=@framed={{0xd5, 0xa, 0x0, 0x0, 0x1, 0x63, 0x11, 0x14}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x2, 0x80, 0xc2, 0xc}})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), 0x0, 0xfffffffb}, 0x38)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc851, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x8, 0x7f}, 0x4000, 0x0, 0xea0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xc, 0xffffffffffffffff, 0x1)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)}, 0x0)

17.769319813s ago: executing program 2 (id=276):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0xb, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x8, 0xaea}, 0x11d05, 0x9, 0xfffffbff, 0x3, 0x2, 0x7fff, 0x6, 0x0, 0x9, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
r0 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
perf_event_open$cgroup(0x0, r0, 0xd, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), 0x0, 0xfffffffb}, 0x38)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="000000e4ffffffffffff"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000030c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe0c, 0xffe0, &(0x7f0000000640)="b9ff03076844268cb89e14f086dd47fe884700121100632f77fbac14141dac1414", 0x0, 0x71, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48)

17.255861945s ago: executing program 0 (id=277):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x13240, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000)
ioctl$TUNSETOFFLOAD(r2, 0x40047459, 0xf0ff1f00000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
r3 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
r4 = socket$kcm(0x11, 0x2, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000900000000000000213f0000c5"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r5}, 0x10)
r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_config_ext={0x9, 0x5e}, 0x3000, 0x8000, 0x0, 0x8, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071101b000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
setsockopt$sock_attach_bpf(r4, 0x107, 0xe, &(0x7f0000000000), 0x4)

17.25562829s ago: executing program 1 (id=278):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='c ', @ANYRESOCT=r1], 0xc)

17.255399999s ago: executing program 1 (id=279):
r0 = socket$kcm(0x23, 0x2, 0x0)
recvmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40)

17.255180785s ago: executing program 2 (id=280):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

17.25505197s ago: executing program 2 (id=281):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="18000000", 0x4}], 0x1}, 0x0)
r0 = socket$kcm(0xa, 0x3, 0x3a)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
sendmsg$kcm(r0, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000080), 0x1}, 0x0)

17.254818177s ago: executing program 2 (id=282):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xbd3a, 0x51}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20)
close(r0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48000)

17.075964336s ago: executing program 1 (id=283):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
r0 = socket$kcm(0x10, 0x2, 0x2)
sendmsg$kcm(r0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x4, @perf_config_ext={0x10000407fff, 0xae6}, 0x14505, 0x2e, 0xfffffbff, 0x3, 0x7fffffff, 0x100, 0x6, 0x0, 0xfffffffd, 0x0, 0xa9eb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x80)
r2 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x31, &(0x7f0000000640), 0x4)
setsockopt$sock_attach_bpf(r2, 0x1, 0x31, &(0x7f0000000180), 0x4)
bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0xd, 0x5d, 0x1, 0x0, 0x0, 0x3, 0xc3e32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x5020, 0x2, 0x2, 0x0, 0x0, 0xffffffff}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x1e, 0x4, 0x0)
r3 = socket$kcm(0x1e, 0x4, 0x0)
sendmsg$kcm(r3, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001f40)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5)
r6 = openat$cgroup_int(r1, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5)
close(r6)
close(r0)
socket$kcm(0x10, 0x3, 0x10)

16.919493213s ago: executing program 2 (id=284):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

16.071627349s ago: executing program 1 (id=285):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x7, 0xe80, 0x0, &(0x7f0000000040)="24c2afc3a2e0527bea33d6541650", 0x0, 0xffb0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

16.009841818s ago: executing program 1 (id=286):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000000000000003000000850000002700000095000000000000006650d65109bab3fc4efacd86aac484ae6c15fcc6d402157d7df28a6637828485031d8fd79554fc1a906c56a1e22f7e46f6774c9ae7478d3cb65863be2293ddb2b5523fc0de"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

16.009555393s ago: executing program 2 (id=287):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0xb, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407eff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x5}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x3ff)
r3 = socket$kcm(0x2a, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8919, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={0x1, &(0x7f0000000440)="3a6107ce05dc35c982bb75d4635674d3ff033048eb0194337b1693f770806ca7f9a6831ea80c501011c0850332bfabfb1b26f27b5f26bd91da76523cd1088335efe5a6d426dc2d159c300517071d5b7d2dfc2c356238eea3c6a89e21ae587c02a5ae427f7dad3b0113d70403e0705f590fcaf38f352bff31679396efcd672f8596998aa92606d907fed83b90f2a6418fd9ac99988a3123eccb9305a7b76d8c1647"}, 0x20)
socketpair(0x18, 0x800, 0x2, &(0x7f00000002c0))
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0), 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="d50a000001000000630000050000009500"/40], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x2, 0x80, 0xc2, 0xc}})
bpf$ITER_CREATE(0x21, &(0x7f0000001a40)={r4}, 0x8)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
socket$kcm(0x29, 0x7, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
socket$kcm(0xa, 0x2, 0x88)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc851, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x8, 0x7f}, 0x4000, 0x0, 0xea0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xc, 0xffffffffffffffff, 0x1)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})

16.002905447s ago: executing program 0 (id=288):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast2}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001040)="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", 0x595}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x4)

15.950042062s ago: executing program 1 (id=289):
r0 = socket$kcm(0x25, 0x1, 0x0)
recvmsg(r0, 0x0, 0x10160)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r2, 0x0, 0x20000001)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x3, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x29, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94)
r4 = syz_clone(0x1120000, 0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580))
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r5)
perf_event_open(0x0, r4, 0xb, r5, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r6 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r6, 0x0, 0x20000015)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)}, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0)

15.949771226s ago: executing program 0 (id=290):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200052f00fe80000000008847875a65059ff57b00000000000000000000000000ac1414aa00006558"], 0xcfa4)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)

226.792172ms ago: executing program 32 (id=290):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200052f00fe80000000008847875a65059ff57b00000000000000000000000000ac1414aa00006558"], 0xcfa4)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)

72.829514ms ago: executing program 33 (id=289):
r0 = socket$kcm(0x25, 0x1, 0x0)
recvmsg(r0, 0x0, 0x10160)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r2, 0x0, 0x20000001)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x3, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x29, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94)
r4 = syz_clone(0x1120000, 0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580))
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r5)
perf_event_open(0x0, r4, 0xb, r5, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r6 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r6, 0x0, 0x20000015)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)}, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0)

0s ago: executing program 34 (id=287):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0xb, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407eff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x5}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x3ff)
r3 = socket$kcm(0x2a, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8919, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={0x1, &(0x7f0000000440)="3a6107ce05dc35c982bb75d4635674d3ff033048eb0194337b1693f770806ca7f9a6831ea80c501011c0850332bfabfb1b26f27b5f26bd91da76523cd1088335efe5a6d426dc2d159c300517071d5b7d2dfc2c356238eea3c6a89e21ae587c02a5ae427f7dad3b0113d70403e0705f590fcaf38f352bff31679396efcd672f8596998aa92606d907fed83b90f2a6418fd9ac99988a3123eccb9305a7b76d8c1647"}, 0x20)
socketpair(0x18, 0x800, 0x2, &(0x7f00000002c0))
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0), 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="d50a000001000000630000050000009500"/40], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x2, 0x80, 0xc2, 0xc}})
bpf$ITER_CREATE(0x21, &(0x7f0000001a40)={r4}, 0x8)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
socket$kcm(0x29, 0x7, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
socket$kcm(0xa, 0x2, 0x88)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc851, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x8, 0x7f}, 0x4000, 0x0, 0xea0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xc, 0xffffffffffffffff, 0x1)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:3458' (ED25519) to the list of known hosts.
syzkaller login: [   41.313359][ T5772] cgroup: Unknown subsys name 'net'
[   41.424591][ T5772] cgroup: Unknown subsys name 'cpuset'
[   41.428244][ T5772] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.671406][ T5772] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.869210][   T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.873804][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.876492][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.878950][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.881661][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.884484][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.887157][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.890074][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.893054][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.899800][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.934270][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.936930][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.942865][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.947589][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.950252][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.111557][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   46.129080][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   46.198277][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   46.230901][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.233768][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.236309][ T5830] bridge_slave_0: entered allmulticast mode
[   46.239005][ T5830] bridge_slave_0: entered promiscuous mode
[   46.259889][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.262553][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.264896][ T5830] bridge_slave_1: entered allmulticast mode
[   46.267581][ T5830] bridge_slave_1: entered promiscuous mode
[   46.270217][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.273202][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.275600][ T5826] bridge_slave_0: entered allmulticast mode
[   46.278393][ T5826] bridge_slave_0: entered promiscuous mode
[   46.293574][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.296215][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.298772][ T5826] bridge_slave_1: entered allmulticast mode
[   46.301492][ T5826] bridge_slave_1: entered promiscuous mode
[   46.339980][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.348030][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.352348][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.370425][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.380383][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.382962][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.385315][ T5837] bridge_slave_0: entered allmulticast mode
[   46.388193][ T5837] bridge_slave_0: entered promiscuous mode
[   46.391189][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.394532][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.396788][ T5837] bridge_slave_1: entered allmulticast mode
[   46.399409][ T5837] bridge_slave_1: entered promiscuous mode
[   46.431029][ T5830] team0: Port device team_slave_0 added
[   46.435137][ T5830] team0: Port device team_slave_1 added
[   46.445392][ T5826] team0: Port device team_slave_0 added
[   46.455899][ T5826] team0: Port device team_slave_1 added
[   46.465697][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.469095][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.471396][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.479878][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.491785][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.497808][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.500048][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.508808][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.524655][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.526922][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.535419][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.554226][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.556502][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.565711][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.571198][ T5837] team0: Port device team_slave_0 added
[   46.574753][ T5837] team0: Port device team_slave_1 added
[   46.600221][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.602636][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.610853][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.628381][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.630633][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.639352][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.646197][ T5830] hsr_slave_0: entered promiscuous mode
[   46.648520][ T5830] hsr_slave_1: entered promiscuous mode
[   46.679006][ T5826] hsr_slave_0: entered promiscuous mode
[   46.681428][ T5826] hsr_slave_1: entered promiscuous mode
[   46.684505][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.687056][ T5826] Cannot create hsr debugfs directory
[   46.701826][ T5837] hsr_slave_0: entered promiscuous mode
[   46.704705][ T5837] hsr_slave_1: entered promiscuous mode
[   46.706834][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.709296][ T5837] Cannot create hsr debugfs directory
[   46.889267][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.895749][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.911271][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.915549][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.937631][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.954843][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.959142][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.964418][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.980479][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.982862][ T5830] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.985414][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.987768][ T5830] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.998478][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   47.011397][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   47.015986][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   47.024518][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.026887][ T5826] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.029359][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.031748][ T5826] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.038414][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.072562][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.075082][ T5837] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.077583][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.079890][ T5837] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.099594][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.117052][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.119983][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.124638][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.127639][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.134808][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.137705][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.148342][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.153768][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   47.161722][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.164221][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.175667][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.178015][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.181797][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   47.192371][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.194823][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.203987][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.206334][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.236762][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.259450][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   47.295962][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.298325][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.301544][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.303978][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.350159][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.385904][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.409418][ T5830] veth0_vlan: entered promiscuous mode
[   47.420993][ T5826] veth0_vlan: entered promiscuous mode
[   47.425471][ T5830] veth1_vlan: entered promiscuous mode
[   47.433451][ T5826] veth1_vlan: entered promiscuous mode
[   47.439832][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.451433][ T5830] veth0_macvtap: entered promiscuous mode
[   47.460772][ T5830] veth1_macvtap: entered promiscuous mode
[   47.473290][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.480888][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.487536][ T5826] veth0_macvtap: entered promiscuous mode
[   47.501489][ T5830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.505434][ T5830] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.508290][ T5830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.511118][ T5830] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.518864][ T5826] veth1_macvtap: entered promiscuous mode
[   47.523515][ T5837] veth0_vlan: entered promiscuous mode
[   47.535700][ T5837] veth1_vlan: entered promiscuous mode
[   47.547676][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.560462][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.586866][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.589642][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.593583][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.596418][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.601575][ T5837] veth0_macvtap: entered promiscuous mode
[   47.603852][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.606451][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.626134][ T5837] veth1_macvtap: entered promiscuous mode
[   47.639205][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.641006][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.641728][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.647061][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.663599][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.666440][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.669268][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.673856][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.696736][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.705624][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.708216][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.745320][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.747898][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.758520][ T5895] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   47.792823][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.795384][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.826802][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.833692][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.876301][ T5901] netlink: 'syz.1.5': attribute type 6 has an invalid length.
[   47.878852][ T5901] netlink: 'syz.1.5': attribute type 22 has an invalid length.
[   47.881365][ T5901] netlink: 'syz.1.5': attribute type 23 has an invalid length.
[   47.884831][ T5901] netlink: 'syz.1.5': attribute type 26 has an invalid length.
[   47.887325][ T5901] netlink: 'syz.1.5': attribute type 28 has an invalid length.
[   47.889694][ T5901] netlink: 'syz.1.5': attribute type 29 has an invalid length.
[   47.896402][ T5901] netlink: 'syz.1.5': attribute type 31 has an invalid length.
[   47.933659][ T5834] Bluetooth: hci1: command tx timeout
[   47.933922][   T52] Bluetooth: hci0: command tx timeout
[   47.941911][ T5907] netlink: 1042 bytes leftover after parsing attributes in process `syz.0.6'.
[   48.012647][   T52] Bluetooth: hci2: command tx timeout
[   48.051231][ T5913] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   48.060074][ T5916] netlink: 'syz.1.11': attribute type 1 has an invalid length.
[   48.076293][ T5913] netlink: 'syz.2.10': attribute type 10 has an invalid length.
[   48.129774][ T5913] team0: Port device wlan1 added
[   48.146052][ T5922] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11'.
[   48.154778][ T5921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14'.
[   48.305285][ T5932] netlink: 14 bytes leftover after parsing attributes in process `syz.0.19'.
[   48.525460][    C1] hrtimer: interrupt took 38238 ns
[   48.679879][ T5947] netlink: 'syz.2.26': attribute type 10 has an invalid length.
[   48.683208][ T5947] netlink: 2 bytes leftover after parsing attributes in process `syz.2.26'.
[   48.686973][ T5947] team0: entered promiscuous mode
[   48.688853][ T5947] team_slave_0: entered promiscuous mode
[   48.694549][ T5947] team_slave_1: entered promiscuous mode
[   48.697178][ T5947] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[   48.701482][ T5947] bridge0: port 3(team0) entered blocking state
[   48.711416][ T5947] bridge0: port 3(team0) entered disabled state
[   48.716755][ T5947] team0: entered allmulticast mode
[   48.718863][ T5947] team_slave_0: entered allmulticast mode
[   48.721035][ T5947] team_slave_1: entered allmulticast mode
[   48.724318][ T5947] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   48.744811][ T5947] bridge0: port 3(team0) entered blocking state
[   48.748046][ T5947] bridge0: port 3(team0) entered forwarding state
[   48.818180][ T5951] veth0_vlan: entered allmulticast mode
[   49.149811][ T5956] veth0_vlan: left promiscuous mode
[   49.159236][ T5956] veth0_vlan: entered promiscuous mode
[   49.586970][ T5973] Zero length message leads to an empty skb
[   50.014947][   T52] Bluetooth: hci0: command tx timeout
[   50.014982][ T5834] Bluetooth: hci1: command tx timeout
[   50.046880][ T6019] 8021q: adding VLAN 0 to HW filter on device team0
[   50.050275][ T6019] bond0: (slave team0): Enslaving as an active interface with an up link
[   50.092224][ T5834] Bluetooth: hci2: command tx timeout
[   50.145924][ T5834] Bluetooth: hci0: unexpected event 0x03 length: 151 > 11
[   50.343977][ T6050] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   50.348704][ T6050] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   50.540918][ T6058] netlink: 60 bytes leftover after parsing attributes in process `syz.2.79'.
[   50.591233][ T6066] netlink: 15446 bytes leftover after parsing attributes in process `syz.0.81'.
[   50.671040][ T6074] syzkaller0: entered promiscuous mode
[   50.684299][ T6076] syz.2.86 uses obsolete (PF_INET,SOCK_PACKET)
[   50.933710][ T6077] team0: Device ipvlan1 failed to register rx_handler
[   51.027282][ T6086] netlink: 164 bytes leftover after parsing attributes in process `syz.1.89'.
[   51.046745][ T5834] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[   51.120909][ T6096] netlink: 2 bytes leftover after parsing attributes in process `syz.2.95'.
[   51.239348][ T6112] netlink: 60 bytes leftover after parsing attributes in process `syz.2.103'.
[   52.102461][   T52] Bluetooth: hci0: command tx timeout
[   52.172494][   T52] Bluetooth: hci2: command tx timeout
[   52.689642][   T52] Bluetooth: hci0: unexpected event 0x03 length: 15 > 11
[   52.991370][ T6209] openvswitch: netlink: Flow actions attr not present in new flow.
[   53.000018][ T6209] syzkaller0: entered promiscuous mode
[   53.169523][ T6230] validate_nla: 21 callbacks suppressed
[   53.169532][ T6230] netlink: 'syz.0.159': attribute type 3 has an invalid length.
[   53.174071][ T6230] __nla_validate_parse: 11 callbacks suppressed
[   53.174078][ T6230] netlink: 199752 bytes leftover after parsing attributes in process `syz.0.159'.
[   53.231163][   T52] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4
[   53.320181][ T6238] : port 1(erspan0) entered blocking state
[   53.331500][ T6238] : port 1(erspan0) entered disabled state
[   53.341532][ T6238] erspan0: entered allmulticast mode
[   53.344832][ T6238] erspan0: entered promiscuous mode
[   53.418762][ T6246] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   53.608524][ T6264] netlink: 'syz.1.176': attribute type 10 has an invalid length.
[   53.611302][ T6264] netlink: 40 bytes leftover after parsing attributes in process `syz.1.176'.
[   53.618059][ T6264] veth0_vlan: entered allmulticast mode
[   53.620255][ T6264] bridge0: port 3(veth0_vlan) entered blocking state
[   53.622660][ T6264] bridge0: port 3(veth0_vlan) entered disabled state
[   53.644144][ T6264] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[   53.797292][ T6275] netlink: 'syz.2.181': attribute type 29 has an invalid length.
[   53.804614][ T6275] netlink: 'syz.2.181': attribute type 29 has an invalid length.
[   53.814243][ T6275] netlink: 'syz.2.181': attribute type 29 has an invalid length.
[   53.853258][ T6279] netlink: 'syz.1.183': attribute type 29 has an invalid length.
[   54.100583][ T6303] netlink: 'syz.0.193': attribute type 14 has an invalid length.
[   54.107221][ T6303] netlink: 164 bytes leftover after parsing attributes in process `syz.0.193'.
[   54.172228][   T52] Bluetooth: hci0: command tx timeout
[   54.450374][   T52] Bluetooth: hci2: command tx timeout
[   54.871675][ T6345] netlink: 'syz.0.212': attribute type 1 has an invalid length.
[   54.875301][ T6345] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.212'.
[   55.232450][ T6390] netlink: 'syz.1.235': attribute type 3 has an invalid length.
[   55.235015][ T6390] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.235'.
[   55.302574][   T52] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[   55.306579][   T52] Bluetooth: hci1: Injecting HCI hardware error event
[   55.309815][ T5834] Bluetooth: hci1: hardware error 0x00
[   55.427708][ T6414] netlink: 132 bytes leftover after parsing attributes in process `syz.0.247'.
[   56.014095][ T6464] netlink: 132 bytes leftover after parsing attributes in process `syz.1.270'.
[   56.690920][ T6492] netlink: 'syz.0.277': attribute type 1 has an invalid length.
[   56.693525][ T6492] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.277'.
[   57.438642][ T5834] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[   70.826699][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.829479][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   74.138728][   T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   74.141499][   T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   74.145593][   T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   74.148259][   T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   74.151487][   T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   74.488982][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   74.493731][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   74.496403][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   74.499251][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   74.501861][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   74.515167][   T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   74.518149][   T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   74.520746][   T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   74.524049][   T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   74.526665][   T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   76.172673][ T5834] Bluetooth: hci3: command tx timeout
[   76.584349][   T52] Bluetooth: hci4: command tx timeout
[   76.586443][ T5834] Bluetooth: hci5: command tx timeout
[   78.262178][ T5834] Bluetooth: hci3: command tx timeout
[   78.662201][ T5834] Bluetooth: hci5: command tx timeout
[   78.664006][ T5834] Bluetooth: hci4: command tx timeout
[   80.332223][   T52] Bluetooth: hci3: command tx timeout
[   80.732222][   T52] Bluetooth: hci4: command tx timeout
[   80.734343][   T52] Bluetooth: hci5: command tx timeout
[   81.059083][   T24] cfg80211: failed to load regulatory.db
[   82.422219][ T5834] Bluetooth: hci3: command tx timeout
[   82.812134][ T5834] Bluetooth: hci5: command tx timeout
[   82.813899][ T5834] Bluetooth: hci4: command tx timeout
[  132.264821][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.266857][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  135.186767][ T5834] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  135.189557][ T5834] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  135.192205][ T5834] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  135.194987][ T5834] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  135.197614][ T5834] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  135.518265][ T5829] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  135.521151][ T5829] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  135.525285][ T5829] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  135.528097][ T5829] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  135.530589][ T5829] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  135.541734][ T5829] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  135.545849][ T5829] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  135.548722][ T5829] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  135.551467][ T5829] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  135.554782][ T5829] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  137.222303][ T5829] Bluetooth: hci6: command tx timeout
[  137.613340][ T5829] Bluetooth: hci8: command tx timeout
[  137.615394][ T5829] Bluetooth: hci7: command tx timeout
[  139.292170][   T52] Bluetooth: hci6: command tx timeout
[  139.692099][   T52] Bluetooth: hci7: command tx timeout
[  139.694136][   T52] Bluetooth: hci8: command tx timeout
[  141.382287][ T5829] Bluetooth: hci6: command tx timeout
[  141.782283][ T5829] Bluetooth: hci8: command tx timeout
[  141.784581][ T5829] Bluetooth: hci7: command tx timeout
[  143.452274][   T52] Bluetooth: hci6: command tx timeout
[  143.852136][   T52] Bluetooth: hci7: command tx timeout
[  143.854061][   T52] Bluetooth: hci8: command tx timeout
[  163.422060][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
SYZFAIL: failed to recv rpc
[  163.424186][    C0] rcu: 	0-....: (1 GPs behind) idle=19cc/1/0x4000000000000000 softirq=15703/15714 fqs=4413
[  163.428442][    C0] rcu: 	         hardirqs   softirqs   csw/system
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  163.430440][    C0] rcu: 	 number:  1052444          0            0
[  163.432484][    C0] rcu: 	cputime:    23894      28585           80   ==> 52480(ms)
[  163.434924][    C0] rcu: 	(t=10500 jiffies g=7317 q=2488 ncpus=2)
[  163.437000][    C0] CPU: 0 UID: 0 PID: 6509 Comm: syz.1.289 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  163.437010][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  163.437014][    C0] RIP: 0010:__kernel_text_address+0xd/0x40
[  163.437025][    C0] Code: e8 48 ff 95 00 eb b3 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 53 48 89 fb e8 43 00 00 00 <85> c0 0f 95 c0 48 81 fb 00 d0 07 91 0f 93 c1 48 81 fb 00 7c 22 91
[  163.437031][    C0] RSP: 0018:ffffc90000007778 EFLAGS: 00000202
[  163.437038][    C0] RAX: 0000000000000001 RBX: ffffffff820e6207 RCX: 8df5357da910f601
[  163.437042][    C0] RDX: 0000000000000002 RSI: ffffffff8d998940 RDI: ffffffff820e6207
[  163.437047][    C0] RBP: ffffc90000007830 R08: ffffffff8fa1e9f7 R09: 1ffffffff1f43d3e
[  163.437051][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d3f R12: ffff888032a51cc0
[  163.437056][    C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000000efe
[  163.437060][    C0] FS:  00007fe5422086c0(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
[  163.437066][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  163.437070][    C0] CR2: 0000000000000004 CR3: 00000000296c8000 CR4: 00000000000006f0
[  163.437094][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  163.437100][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  163.437104][    C0] Call Trace:
[  163.437107][    C0]  <IRQ>
[  163.437110][    C0]  unwind_get_return_address+0x4d/0x90
[  163.437120][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  163.437130][    C0]  arch_stack_walk+0xfc/0x150
[  163.437141][    C0]  ? dup_mmap+0xf57/0x1ac0
[  163.437151][    C0]  stack_trace_save+0x9c/0xe0
[  163.437160][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  163.437171][    C0]  ? perf_trace_lock+0xec/0x3b0
[  163.437182][    C0]  kasan_save_track+0x3e/0x80
[  163.437188][    C0]  ? kasan_save_track+0x3e/0x80
[  163.437193][    C0]  ? kasan_save_free_info+0x46/0x50
[  163.437201][    C0]  ? __kasan_slab_free+0x62/0x70
[  163.437206][    C0]  ? kfree+0x18e/0x440
[  163.437216][    C0]  ? slab_free_after_rcu_debug+0x60/0x2a0
[  163.437225][    C0]  ? rcu_core+0xca8/0x1710
[  163.437231][    C0]  ? handle_softirqs+0x286/0x870
[  163.437238][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  163.437244][    C0]  ? irq_exit_rcu+0x9/0x30
[  163.437251][    C0]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  163.437260][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  163.437266][    C0]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  163.437274][    C0]  ? rcu_preempt_deferred_qs_irqrestore+0x874/0xc40
[  163.437283][    C0]  ? rcu_read_unlock_special+0x3fe/0x4c0
[  163.437291][    C0]  ? __rcu_read_unlock+0x84/0xe0
[  163.437300][    C0]  ? copy_pmd_range+0x67b9/0x7000
[  163.437306][    C0]  ? copy_page_range+0xc46/0x1270
[  163.437331][    C0]  kasan_save_free_info+0x46/0x50
[  163.437340][    C0]  __kasan_slab_free+0x62/0x70
[  163.437346][    C0]  ? slab_free_after_rcu_debug+0x60/0x2a0
[  163.437353][    C0]  kfree+0x18e/0x440
[  163.437361][    C0]  ? rcu_core+0xc34/0x1710
[  163.437367][    C0]  slab_free_after_rcu_debug+0x60/0x2a0
[  163.437376][    C0]  ? __pfx_slab_free_after_rcu_debug+0x10/0x10
[  163.437385][    C0]  ? rcu_core+0xc34/0x1710
[  163.437391][    C0]  rcu_core+0xca8/0x1710
[  163.437398][    C0]  ? clockevents_program_event+0x24d/0x360
[  163.437415][    C0]  ? __pfx_rcu_core+0x10/0x10
[  163.437422][    C0]  ? __irq_exit_rcu+0xd8/0x1f0
[  163.437430][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  163.437441][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  163.437457][    C0]  handle_softirqs+0x286/0x870
[  163.437466][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  163.437475][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  163.437485][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  163.437496][    C0]  __irq_exit_rcu+0xca/0x1f0
[  163.437503][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  163.437514][    C0]  irq_exit_rcu+0x9/0x30
[  163.437520][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  163.437528][    C0]  </IRQ>
[  163.437531][    C0]  <TASK>
[  163.437533][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  163.437540][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110
[  163.437548][    C0] Code: 74 05 e8 cb 8e 56 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 13 bd 1f f6 65 8b 05 bc e9 2e 07 85 c0 74 40 48 c7 04 24 0e 36
[  163.437553][    C0] RSP: 0018:ffffc90007bcf080 EFLAGS: 00000206
[  163.437559][    C0] RAX: 8df5357da910f600 RBX: 0000000000000a02 RCX: 8df5357da910f600
[  163.437564][    C0] RDX: 0000000000000006 RSI: ffffffff8d998940 RDI: 0000000000000001
[  163.437568][    C0] RBP: ffffc90007bcf110 R08: ffffffff8fa1e9f7 R09: 1ffffffff1f43d3e
[  163.437572][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d3f R12: dffffc0000000000
[  163.437577][    C0] R13: ffffffff8e1444c0 R14: ffffffff8e144cc0 R15: 1ffff92000f79e10
[  163.437590][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  163.437600][    C0]  ? swake_up_one+0x78/0x140
[  163.437610][    C0]  rcu_preempt_deferred_qs_irqrestore+0x874/0xc40
[  163.437619][    C0]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  163.437635][    C0]  ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10
[  163.437645][    C0]  ? preempt_schedule_notrace_thunk+0x16/0x30
[  163.437654][    C0]  ? rcu_is_watching+0x7f/0xb0
[  163.437664][    C0]  rcu_read_unlock_special+0x3fe/0x4c0
[  163.437675][    C0]  ? __pfx_perf_trace_lock+0x10/0x10
[  163.437711][    C0]  ? preempt_schedule+0xae/0xc0
[  163.437720][    C0]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  163.437731][    C0]  ? copy_pmd_range+0x66f1/0x7000
[  163.437742][    C0]  __rcu_read_unlock+0x84/0xe0
[  163.437751][    C0]  ? copy_pmd_range+0x66f1/0x7000
[  163.437758][    C0]  copy_pmd_range+0x67b9/0x7000
[  163.437766][    C0]  ? arch_stack_walk+0xfc/0x150
[  163.437779][    C0]  ? css_rstat_updated+0x1a5/0xca0
[  163.437793][    C0]  ? __pfx_copy_pmd_range+0x10/0x10
[  163.437810][    C0]  copy_page_range+0xc46/0x1270
[  163.437829][    C0]  ? __pfx_copy_page_range+0x10/0x10
[  163.437840][    C0]  ? up_write+0x1c4/0x420
[  163.437847][    C0]  ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10
[  163.437858][    C0]  dup_mmap+0xf57/0x1ac0
[  163.437873][    C0]  ? __pfx_dup_mmap+0x10/0x10
[  163.437884][    C0]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  163.437893][    C0]  ? mm_init+0xce1/0xf10
[  163.437904][    C0]  copy_mm+0x13c/0x4b0
[  163.437913][    C0]  ? copy_process+0x978/0x3b80
[  163.437920][    C0]  copy_process+0x16d3/0x3b80
[  163.437931][    C0]  ? copy_process+0x978/0x3b80
[  163.437946][    C0]  ? __pfx_copy_process+0x10/0x10
[  163.437956][    C0]  ? kernel_clone+0x1f9/0x870
[  163.437966][    C0]  kernel_clone+0x21e/0x870
[  163.437977][    C0]  ? __pfx_kernel_clone+0x10/0x10
[  163.437994][    C0]  __x64_sys_clone+0x18b/0x1e0
[  163.438004][    C0]  ? __pfx___x64_sys_clone+0x10/0x10
[  163.438018][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  163.438028][    C0]  ? rcu_is_watching+0x15/0xb0
[  163.438038][    C0]  ? do_syscall_64+0xbe/0x3b0
[  163.438049][    C0]  do_syscall_64+0xfa/0x3b0
[  163.438057][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  163.438065][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.438071][    C0]  ? exc_page_fault+0x9f/0xf0
[  163.438080][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.438086][    C0] RIP: 0033:0x7fe54138e9a9
[  163.438093][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  163.438098][    C0] RSP: 002b:00007fe542207fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  163.438105][    C0] RAX: ffffffffffffffda RBX: 00007fe5415b5fa0 RCX: 00007fe54138e9a9
[  163.438110][    C0] RDX: 0000200000000500 RSI: 0000000000000000 RDI: 0000000001120000
[  163.438114][    C0] RBP: 00007fe541410d69 R08: 0000200000000580 R09: 0000200000000580
[  163.438118][    C0] R10: 0000200000000540 R11: 0000000000000206 R12: 0000000000000000
[  163.438122][    C0] R13: 0000000000000000 R14: 00007fe5415b5fa0 R15: 00007ffe08b5ea28
[  163.438133][    C0]  </TASK>
[  163.675057][    C0] sched: DL replenish lagged too much

VM DIAGNOSIS:
10:41:49  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000065 RBX=0000000000000065 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000006ab0
R8 =ffff888021228237 R9 =1ffff11004245046 R10=dffffc0000000000 R11=ffffffff85472aa0
R12=dffffc0000000000 R13=ffffffff99af58ae R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff85472b1c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fe5422086c0 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000004 CR3=00000000296c8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007fe541411ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=000000000000000d RCX=ffffffff82337134 RDX=0000000000000001
RSI=000000000000000d RDI=ffffc9000307fd73 RBP=0000000000000000 RSP=ffffc9000307fc48
R8 =ffffc9000307fd80 R9 =ffff800000000000 R10=ffffc9000307fd30 R11=fffff5200060ffa8
R12=dffffc0000000000 R13=ffffc9000307fd70 R14=ffffc9000307fd73 R15=1ffff9200060ffa0
RIP=ffffffff822333e3 RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558e2a2500 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fff09ae7bf8 CR3=000000010e6b8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000ff0000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 000000000001df8a
XMM06=0000000100000019 ffffffff00000001 XMM07=ffffffff8670dc03 ffffffff8a2fb17e
XMM08=ffffffff8b11bbce ffffffff895aae61 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
