last executing test programs:

16.447943913s ago: executing program 1 (id=47):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000c63f1de100000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7ff3, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x0, @perf_bp={0x0, 0x3}, 0x14105, 0x2e, 0xfffffbff, 0x7, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)

16.309515142s ago: executing program 0 (id=51):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='p'], 0x8)

16.309347195s ago: executing program 1 (id=52):
r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)

16.235566036s ago: executing program 1 (id=53):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="000000000000e1991d00"/19, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000000), &(0x7f00000000c0)=r1}, 0x20)

16.235279758s ago: executing program 0 (id=55):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0xf}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc)

16.168661471s ago: executing program 1 (id=56):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x8000000}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0x110}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

16.168519156s ago: executing program 0 (id=57):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181000a000000000100000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0)

16.082876422s ago: executing program 2 (id=58):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0xffff0000, 0xe80, 0x0, &(0x7f00000007c0)="2b206d0748010097737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50)

16.082187084s ago: executing program 2 (id=59):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4)
sendmsg$inet(r2, &(0x7f0000001c40)={0x0, 0x0, 0x0}, 0x40090)

16.008718142s ago: executing program 2 (id=60):
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000040100000800000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r2, &(0x7f0000000340), 0x0}, 0x20)

16.008453638s ago: executing program 0 (id=61):
perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0xf3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='/..\x00')
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

15.939045882s ago: executing program 2 (id=62):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="140000002b000b6c69000000000000000a000000", 0x14}], 0x1}, 0x0)

15.938825526s ago: executing program 2 (id=63):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @typedef={0x3}, @func_proto]}, {0x0, [0x0, 0x0, 0x61, 0x61]}}, 0x0, 0x46}, 0x28)

15.848141903s ago: executing program 2 (id=64):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001180)={&(0x7f00000011c0)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000008000000000000000100000f"], 0x0, 0x40}, 0x28)
r0 = socket$kcm(0x18, 0x0, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r1, 0x0, 0x30044889)
perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x52, 0xfd, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000000), 0x4)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x4, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(0x0, 0xffffffffffffffff, 0x7, r2, 0x1)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x5, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000005d31, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x1fb}, 0x8580, 0x0, 0x0, 0x5, 0x0, 0xfffffffc, 0x2}, 0xffffffffffffffff, 0x200000004, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x45, 0xff, 0x0, 0x80, 0x0, 0xee6, 0x14a0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b7b, 0x2, @perf_config_ext={0x7fff, 0xaec}, 0x110104, 0x32, 0x0, 0x3, 0x2, 0x3, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x12, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080))
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640), 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000001000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)

15.848002395s ago: executing program 0 (id=65):
r0 = socket$kcm(0x25, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x20004040)
sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="129d65f3e722c66cbd3e2cd180928c06ee3c0b02a9bc5c002286fa79fd18aa87669e255b98a4ccbdd01f18f7dbe2054ba8e9f04026b333c2ced48afca3f4a8c6a48469f07aaf8b8866a0f697a74c3f5df25ee34e0ac3230b80d5146a28fe9a2ec673a28c7a8ad42c479eff847e4968b855c75ec8744e37dbfcd4b9268f8d2514bc3c8180e17b004d167690c9c5d1420ff51f0c341cb5a1734af3b0c4734ce3438a1aa83fd82c057ac219dcc55fd272968f0fe42b990c", 0xb6}], 0x1, &(0x7f0000000600)=[{0x40, 0x1, 0x3ff, "51ad7f756cc58c4f79b9d3a2b31163b21a3919d2867539725fbfbc49bde07b36d0012525d46ec5a8956215"}, {0x98, 0x11, 0x15, "d816f775cc3a7b13d7643820f1a8ec733137b71bd56eb3887834e1e9e1921453ff9e439ebdca4af76123e4f031b3a6d400ef3d026b1e19ca253919adb84737dd03b334f19208d9d75d2dceaf1a833f442ae419175d3112cc512dd3775bed3531a2183fce790197041b3cfabd5527207aef040a03595a838fcfd2068c236d109207c51e36"}], 0xd8}, 0x4)

15.69610481s ago: executing program 0 (id=66):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x7}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xc, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x400})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080))

15.12941022s ago: executing program 1 (id=67):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20)

15.129120009s ago: executing program 1 (id=68):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f00000000c0)={'wlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

66.588536ms ago: executing program 32 (id=66):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x7}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xc, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x400})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080))

311.082µs ago: executing program 33 (id=68):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f00000000c0)={'wlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

0s ago: executing program 34 (id=64):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001180)={&(0x7f00000011c0)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000008000000000000000100000f"], 0x0, 0x40}, 0x28)
r0 = socket$kcm(0x18, 0x0, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r1, 0x0, 0x30044889)
perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x52, 0xfd, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000000), 0x4)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x4, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(0x0, 0xffffffffffffffff, 0x7, r2, 0x1)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x5, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000005d31, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x1fb}, 0x8580, 0x0, 0x0, 0x5, 0x0, 0xfffffffc, 0x2}, 0xffffffffffffffff, 0x200000004, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x45, 0xff, 0x0, 0x80, 0x0, 0xee6, 0x14a0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b7b, 0x2, @perf_config_ext={0x7fff, 0xaec}, 0x110104, 0x32, 0x0, 0x3, 0x2, 0x3, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x12, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080))
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640), 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000001000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:4320' (ED25519) to the list of known hosts.
syzkaller login: [   48.997152][ T5758] cgroup: Unknown subsys name 'net'
[   49.132388][ T5758] cgroup: Unknown subsys name 'cpuset'
[   49.139227][ T5758] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.831441][ T5758] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.360010][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.363271][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.366750][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.369599][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.371918][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.383462][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.404481][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.406468][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.408036][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.416004][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.416352][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.422303][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.427358][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.431857][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.432309][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.666586][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   55.829682][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   55.844520][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.849439][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.852393][ T5826] bridge_slave_0: entered allmulticast mode
[   55.856771][ T5826] bridge_slave_0: entered promiscuous mode
[   55.866675][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   55.895324][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.898280][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.901277][ T5826] bridge_slave_1: entered allmulticast mode
[   55.906020][ T5826] bridge_slave_1: entered promiscuous mode
[   55.985771][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.026086][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.030046][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.032467][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.035436][ T5835] bridge_slave_0: entered allmulticast mode
[   56.039302][ T5835] bridge_slave_0: entered promiscuous mode
[   56.044324][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.047999][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.050947][ T5835] bridge_slave_1: entered allmulticast mode
[   56.054940][ T5835] bridge_slave_1: entered promiscuous mode
[   56.120863][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.123777][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.128266][ T5827] bridge_slave_0: entered allmulticast mode
[   56.130983][ T5827] bridge_slave_0: entered promiscuous mode
[   56.137075][ T5826] team0: Port device team_slave_0 added
[   56.139279][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.141635][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.144221][ T5827] bridge_slave_1: entered allmulticast mode
[   56.148048][ T5827] bridge_slave_1: entered promiscuous mode
[   56.152824][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.158446][ T5826] team0: Port device team_slave_1 added
[   56.196408][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.201269][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.220005][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.222830][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.234090][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.255049][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.259430][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.261774][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.271266][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.303002][ T5835] team0: Port device team_slave_0 added
[   56.306889][ T5835] team0: Port device team_slave_1 added
[   56.346459][ T5827] team0: Port device team_slave_0 added
[   56.376850][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.379890][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.391715][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.397509][ T5827] team0: Port device team_slave_1 added
[   56.405483][ T5826] hsr_slave_0: entered promiscuous mode
[   56.408793][ T5826] hsr_slave_1: entered promiscuous mode
[   56.420875][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.423461][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.433397][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.449223][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.451459][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.459816][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.485313][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.488327][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.499796][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.553201][ T5835] hsr_slave_0: entered promiscuous mode
[   56.556646][ T5835] hsr_slave_1: entered promiscuous mode
[   56.559636][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.562962][ T5835] Cannot create hsr debugfs directory
[   56.617441][ T5827] hsr_slave_0: entered promiscuous mode
[   56.621080][ T5827] hsr_slave_1: entered promiscuous mode
[   56.624247][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.629364][ T5827] Cannot create hsr debugfs directory
[   56.902670][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.911960][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.919763][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.931678][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.979648][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.988885][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.006597][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.022212][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.056355][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.067046][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.074374][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.088669][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.213204][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.220516][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.252200][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   57.257345][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   57.273228][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.279515][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.281974][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.287308][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.289583][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.292810][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.295336][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.311898][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.314242][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.349741][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   57.363882][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.366424][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.382099][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.385278][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.424409][ T5835] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   57.433282][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.483521][ T5834] Bluetooth: hci1: command tx timeout
[   57.485171][ T5837] Bluetooth: hci0: command tx timeout
[   57.486892][ T5834] Bluetooth: hci2: command tx timeout
[   57.531662][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.567638][ T5835] veth0_vlan: entered promiscuous mode
[   57.573777][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.587451][ T5835] veth1_vlan: entered promiscuous mode
[   57.592341][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.632996][ T5827] veth0_vlan: entered promiscuous mode
[   57.639838][ T5835] veth0_macvtap: entered promiscuous mode
[   57.646147][ T5835] veth1_macvtap: entered promiscuous mode
[   57.658725][ T5827] veth1_vlan: entered promiscuous mode
[   57.666502][ T5826] veth0_vlan: entered promiscuous mode
[   57.674256][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.680714][ T5826] veth1_vlan: entered promiscuous mode
[   57.687524][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.696075][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.699004][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.702177][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.706108][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.732238][ T5826] veth0_macvtap: entered promiscuous mode
[   57.750189][ T5827] veth0_macvtap: entered promiscuous mode
[   57.766339][ T5826] veth1_macvtap: entered promiscuous mode
[   57.776275][ T5827] veth1_macvtap: entered promiscuous mode
[   57.811181][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.822726][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.839401][  T660] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.841236][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.842111][  T660] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.848181][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.852909][ T5826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.859352][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.862354][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.866030][ T5826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.891251][ T5827] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.896073][ T5827] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.899805][ T5827] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.903231][ T5827] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.926456][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.934448][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.989713][  T724] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.992308][  T724] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.996407][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.022136][  T724] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.030677][  T724] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.101429][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.108319][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.136037][  T724] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.141245][  T724] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.311033][ T5908] Zero length message leads to an empty skb
[   58.665048][    C0] hrtimer: interrupt took 32381 ns
[   59.554777][ T5218] Bluetooth: hci2: command tx timeout
[   59.597686][ T5218] Bluetooth: hci0: command tx timeout
[   59.599850][ T5834] Bluetooth: hci1: command tx timeout
[   61.386143][ T5957] netlink: 'syz.0.26': attribute type 10 has an invalid length.
[   61.389339][ T5957] netlink: 'syz.0.26': attribute type 16 has an invalid length.
[   61.392674][ T5957] netlink: 156 bytes leftover after parsing attributes in process `syz.0.26'.
[   61.634903][ T5218] Bluetooth: hci0: command tx timeout
[   61.637269][ T5218] Bluetooth: hci1: command tx timeout
[   61.639638][ T5218] Bluetooth: hci2: command tx timeout
[   61.721831][ T5981] netlink: 'syz.2.39': attribute type 10 has an invalid length.
[   61.742766][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.746968][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.785740][ T5981] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.788785][ T5981] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.792944][ T5981] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.796434][ T5981] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.860172][ T5990] netlink: 6955 bytes leftover after parsing attributes in process `syz.1.43'.
[   61.867432][ T5990] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.43'.
[   61.872696][ T5981] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   61.901067][ T5985] warning: `syz.2.39' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   62.333635][ T6020] netlink: 'syz.0.57': attribute type 39 has an invalid length.
[   63.718535][ T5834] Bluetooth: hci2: command tx timeout
[   63.720907][ T5218] Bluetooth: hci1: command tx timeout
[   63.723312][ T5834] Bluetooth: hci0: command tx timeout
[   71.253791][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.257590][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   78.996167][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   79.005594][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   79.009921][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   79.013973][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   79.024152][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   79.169765][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   79.176069][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   79.179841][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   79.183850][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   79.191804][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   79.251098][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   79.255804][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   79.259454][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   79.263387][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   79.269800][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   81.074895][ T5837] Bluetooth: hci3: command tx timeout
[   81.236836][ T5837] Bluetooth: hci4: command tx timeout
[   81.314935][ T5837] Bluetooth: hci5: command tx timeout
[   81.478507][    T9] cfg80211: failed to load regulatory.db
[   83.154888][ T5837] Bluetooth: hci3: command tx timeout
[   83.314888][ T5837] Bluetooth: hci4: command tx timeout
[   83.396007][ T5837] Bluetooth: hci5: command tx timeout
[   85.236772][ T5837] Bluetooth: hci3: command tx timeout
[   85.394772][ T5837] Bluetooth: hci4: command tx timeout
[   85.474741][ T5837] Bluetooth: hci5: command tx timeout
[   87.314795][ T5837] Bluetooth: hci3: command tx timeout
[   87.474848][ T5837] Bluetooth: hci4: command tx timeout
[   87.554786][ T5837] Bluetooth: hci5: command tx timeout
[  132.678696][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.681436][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  160.381053][ T5834] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  160.383840][ T5834] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  160.387883][ T5834] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  160.391275][ T5834] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  160.394175][ T5834] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  160.448652][ T5218] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  160.451986][ T5218] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  160.454705][ T5218] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  160.458039][ T5218] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  160.460996][ T5218] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  160.489126][ T5218] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  160.492678][ T5218] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  160.495636][ T5218] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  160.499249][ T5218] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  160.501872][ T5218] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  162.434815][   T55] Bluetooth: hci6: command tx timeout
[  162.515807][ T5834] Bluetooth: hci7: command tx timeout
[  162.518696][   T55] Bluetooth: hci8: command tx timeout
[  164.514924][   T55] Bluetooth: hci6: command tx timeout
[  164.594811][ T5834] Bluetooth: hci7: command tx timeout
[  164.597862][   T55] Bluetooth: hci8: command tx timeout
[  166.594922][   T55] Bluetooth: hci6: command tx timeout
[  166.674880][ T5834] Bluetooth: hci7: command tx timeout
[  166.677374][   T55] Bluetooth: hci8: command tx timeout
[  168.514628][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  168.516913][    C1] rcu: 	1-....: (10500 ticks this GP) idle=e8ec/1/0x4000000000000000 softirq=14218/14218 fqs=5247
[  168.521822][    C1] rcu: 	         hardirqs   softirqs   csw/system
[  168.524170][    C1] rcu: 	 number:   961547          0            0
[  168.526517][    C1] rcu: 	cputime:    24221      28268           96   ==> 52500(ms)
[  168.529210][    C1] rcu: 	(t=10502 jiffies g=7265 q=3522 ncpus=2)
[  168.531357][    C1] CPU: 1 UID: 0 PID: 6034 Comm: syz.2.64 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  168.531366][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  168.531371][    C1] RIP: 0010:rcu_read_unlock_special+0x87/0x4c0
[  168.531385][    C1] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 62 2c f8 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
[  168.531391][    C1] RSP: 0018:ffffc900001e05e0 EFLAGS: 00000206
[  168.531398][    C1] RAX: be92ca7f5ad36a00 RBX: 1ffff9200003c0c4 RCX: be92ca7f5ad36a00
[  168.531402][    C1] RDX: 0000000000000003 RSI: ffffffff8d998940 RDI: ffffffff8be29f40
[  168.531407][    C1] RBP: ffffc900001e06d8 R08: ffffffff8fa1e9f7 R09: 1ffffffff1f43d3e
[  168.531411][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d3f R12: ffffffff8e144400
[  168.531416][    C1] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000002
[  168.531420][    C1] FS:  00007fd9931bd6c0(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
[  168.531425][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  168.531429][    C1] CR2: 00007fd99317afc8 CR3: 000000010d8d4000 CR4: 00000000000006f0
[  168.531454][    C1] Call Trace:
[  168.531460][    C1]  <IRQ>
[  168.531463][    C1]  ? __lock_acquire+0xab9/0xd20
[  168.531475][    C1]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  168.531486][    C1]  ? unwind_next_frame+0xa5/0x2390
[  168.531497][    C1]  __rcu_read_unlock+0x84/0xe0
[  168.531507][    C1]  ? unwind_next_frame+0xa5/0x2390
[  168.531513][    C1]  unwind_next_frame+0x19ae/0x2390
[  168.531523][    C1]  ? unwind_next_frame+0xa5/0x2390
[  168.531531][    C1]  ? kasan_quarantine_reduce+0x148/0x160
[  168.531543][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  168.531552][    C1]  arch_stack_walk+0x11c/0x150
[  168.531562][    C1]  ? __kasan_slab_alloc+0x22/0x80
[  168.531571][    C1]  stack_trace_save+0x9c/0xe0
[  168.531579][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  168.531589][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  168.531597][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  168.531606][    C1]  kasan_save_track+0x3e/0x80
[  168.531611][    C1]  ? kasan_save_track+0x3e/0x80
[  168.531616][    C1]  ? kasan_save_free_info+0x46/0x50
[  168.531623][    C1]  ? __kasan_slab_free+0x62/0x70
[  168.531628][    C1]  ? kmem_cache_free+0x18f/0x400
[  168.531634][    C1]  ? rcu_core+0xca8/0x1710
[  168.531642][    C1]  ? handle_softirqs+0x286/0x870
[  168.531651][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  168.531661][    C1]  ? irq_exit_rcu+0x9/0x30
[  168.531669][    C1]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  168.531682][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  168.531710][    C1]  ? __sanitizer_cov_trace_const_cmp1+0x83/0x90
[  168.531724][    C1]  ? __phys_addr+0xa3/0x180
[  168.531737][    C1]  ? ___cache_free+0x23/0xf0
[  168.531746][    C1]  ? qlist_free_all+0x97/0x140
[  168.531759][    C1]  ? kasan_quarantine_reduce+0x148/0x160
[  168.531798][    C1]  ? rcu_core+0xca8/0x1710
[  168.531804][    C1]  kasan_save_free_info+0x46/0x50
[  168.531812][    C1]  __kasan_slab_free+0x62/0x70
[  168.531819][    C1]  kmem_cache_free+0x18f/0x400
[  168.531826][    C1]  ? __pfx_inode_free_by_rcu+0x10/0x10
[  168.531835][    C1]  ? rcu_core+0xc34/0x1710
[  168.531842][    C1]  rcu_core+0xca8/0x1710
[  168.531857][    C1]  ? __pfx_rcu_core+0x10/0x10
[  168.531868][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  168.531879][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  168.531893][    C1]  ? irqentry_exit+0x74/0x90
[  168.531913][    C1]  ? __pfx_rcu_core_si+0x10/0x10
[  168.531933][    C1]  handle_softirqs+0x286/0x870
[  168.531947][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  168.531964][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  168.531983][    C1]  __irq_exit_rcu+0xca/0x1f0
[  168.531996][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  168.532014][    C1]  irq_exit_rcu+0x9/0x30
[  168.532029][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  168.532043][    C1]  </IRQ>
[  168.532047][    C1]  <TASK>
[  168.532051][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  168.532062][    C1] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x83/0x90
[  168.532074][    C1] Code: 8d 52 28 4d 39 ca 77 22 89 ff 89 f6 49 ff c0 4c 89 01 48 c7 44 11 08 01 00 00 00 48 89 7c 11 10 48 89 74 11 18 48 89 44 11 20 <c3> cc cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90
[  168.532079][    C1] RSP: 0018:ffffc900060c73a8 EFLAGS: 00000297
[  168.532085][    C1] RAX: ffffffff81746e93 RBX: 00000001095bd500 RCX: 0000000000000002
[  168.532089][    C1] RDX: ffff8881069b8000 RSI: 0000000000000028 RDI: 0000000000000040
[  168.532093][    C1] RBP: ffff8881084e5d00 R08: 000000000000000f R09: ffff8881084e5100
[  168.532097][    C1] R10: 0000000000000000 R11: fffffbfff1f43d3f R12: ffffea0000000000
[  168.532101][    C1] R13: 0000000000000000 R14: 0000000000000028 R15: dffffc0000000000
[  168.532109][    C1]  ? __phys_addr+0xa3/0x180
[  168.532121][    C1]  __phys_addr+0xa3/0x180
[  168.532128][    C1]  ? qlist_free_all+0x8c/0x140
[  168.532136][    C1]  ___cache_free+0x23/0xf0
[  168.532144][    C1]  qlist_free_all+0x97/0x140
[  168.532154][    C1]  kasan_quarantine_reduce+0x148/0x160
[  168.532165][    C1]  __kasan_slab_alloc+0x22/0x80
[  168.532172][    C1]  kmem_cache_alloc_lru_noprof+0x1c6/0x3d0
[  168.532178][    C1]  ? __d_alloc+0x31/0x6f0
[  168.532221][    C1]  __d_alloc+0x31/0x6f0
[  168.532234][    C1]  d_alloc_parallel+0xe0/0x14e0
[  168.532243][    C1]  ? irqentry_exit+0x74/0x90
[  168.532251][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  168.532264][    C1]  ? __lock_acquire+0xab9/0xd20
[  168.532274][    C1]  ? __pfx_d_alloc_parallel+0x10/0x10
[  168.532285][    C1]  ? __raw_spin_lock_init+0x45/0x100
[  168.532295][    C1]  ? __init_waitqueue_head+0xa9/0x150
[  168.532306][    C1]  __lookup_slow+0x116/0x3d0
[  168.532316][    C1]  ? __pfx___lookup_slow+0x10/0x10
[  168.532329][    C1]  ? d_lookup+0x8a/0xa0
[  168.532337][    C1]  ? lookup_noperm+0x112/0x220
[  168.532347][    C1]  start_creating+0x22e/0x3c0
[  168.532357][    C1]  ? __pfx_start_creating+0x10/0x10
[  168.532363][    C1]  ? __pfx_sprintf+0x10/0x10
[  168.532373][    C1]  debugfs_create_dir+0x28/0x420
[  168.532382][    C1]  ieee80211_debugfs_recreate_netdev+0x1a6/0x1460
[  168.532392][    C1]  ? ieee80211_mgd_setup_link+0x534/0x780
[  168.532401][    C1]  ? __pfx_ieee80211_debugfs_recreate_netdev+0x10/0x10
[  168.532416][    C1]  ieee80211_if_change_type+0x53a/0x990
[  168.532430][    C1]  ieee80211_change_iface+0xd5/0x510
[  168.532441][    C1]  cfg80211_change_iface+0x795/0xef0
[  168.532454][    C1]  cfg80211_wext_siwmode+0x1db/0x2a0
[  168.532465][    C1]  ? __pfx_cfg80211_wext_siwmode+0x10/0x10
[  168.532478][    C1]  ? __pfx_cfg80211_wext_siwmode+0x10/0x10
[  168.532486][    C1]  ioctl_standard_call+0xcb/0x1b0
[  168.532494][    C1]  ? __pfx_cfg80211_wext_siwmode+0x10/0x10
[  168.532501][    C1]  wext_ioctl_dispatch+0xee/0x410
[  168.532507][    C1]  ? __pfx_ioctl_standard_call+0x10/0x10
[  168.532515][    C1]  wext_handle_ioctl+0x100/0x1c0
[  168.532523][    C1]  ? __pfx_wext_handle_ioctl+0x10/0x10
[  168.532528][    C1]  ? __lock_acquire+0xab9/0xd20
[  168.532542][    C1]  sock_ioctl+0x15f/0x790
[  168.532552][    C1]  ? __pfx_sock_ioctl+0x10/0x10
[  168.532560][    C1]  ? __fget_files+0x2a/0x420
[  168.532567][    C1]  ? __fget_files+0x3a0/0x420
[  168.532574][    C1]  ? __fget_files+0x2a/0x420
[  168.532582][    C1]  ? bpf_lsm_file_ioctl+0x9/0x20
[  168.532592][    C1]  ? __pfx_sock_ioctl+0x10/0x10
[  168.532600][    C1]  __se_sys_ioctl+0xfc/0x170
[  168.532611][    C1]  do_syscall_64+0xfa/0x3b0
[  168.532620][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.532626][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  168.532635][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.532641][    C1] RIP: 0033:0x7fd99238e9a9
[  168.532649][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  168.532654][    C1] RSP: 002b:00007fd9931bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  168.532660][    C1] RAX: ffffffffffffffda RBX: 00007fd9925b5fa0 RCX: 00007fd99238e9a9
[  168.532664][    C1] RDX: 0000200000000080 RSI: 0000000000008b06 RDI: 0000000000000009
[  168.532668][    C1] RBP: 00007fd992410d69 R08: 0000000000000000 R09: 0000000000000000
[  168.532672][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  168.532676][    C1] R13: 0000000000000000 R14: 00007fd9925b5fa0 R15: 00007fff8dccad38
[  168.532687][    C1]  </TASK>
[  168.814086][    C1] sched: DL replenish lagged too much
[  168.821218][   T55] Bluetooth: hci6: command tx timeout
[  168.823345][   T55] Bluetooth: hci8: command tx timeout
[  168.825775][   T55] Bluetooth: hci7: command tx timeout
[  168.830139][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 105155427403 wd_nsec: 105155429389

VM DIAGNOSIS:
11:22:17  Registers:
info registers vcpu 0

CPU#0
RAX=8b65754da7515200 RBX=ffffffff81976a48 RCX=8b65754da7515200 RDX=0000000000000001
RSI=ffffffff8d998940 RDI=ffffffff8be29f40 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa1e9f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6e94f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000556304be6e08 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f84c7386d00
XMM02=0010001000000045 0010e80300000000 XMM03=0108000110000008 000f80040a014c80
XMM04=0000000000000000 000000000000000e XMM05=0000000000000000 000000000001df8a
XMM06=ffffff040cc00300 08000cb800000047 XMM07=0cb0030f00000000 ffff040ca0030fff
XMM08=ffffffffff040c90 0300080000000046 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000063 RBX=0000000000000063 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001df910
R8 =ffff888021438237 R9 =1ffff11004287046 R10=dffffc0000000000 R11=ffffffff85472aa0
R12=dffffc0000000000 R13=ffffffff99af58c4 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff85472b1c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd9931bd6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd99317afc8 CR3=000000010d8d4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=9500000008000000 8500000075000000 XMM03=85ec11c34b000000 0000000021000001
XMM04=00007fd9930ed100 00007fd992586440 XMM05=00007fd992586458 00007fd9925864a0
XMM06=00007fd992586498 00007fd992586490 XMM07=00007fd992586488 00007fd992586480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fd992411ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
