last executing test programs:

16.524039096s ago: executing program 2 (id=193):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)="5c00000012006bb09a3fe3d86e17aa0a046b876c1d0048007ea60864160af3650400330038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a57aec408218841f080c9f4440c8037e70e0000c5bbfbffa849", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48000)

16.519728502s ago: executing program 2 (id=195):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x9}, 0x0, 0x3, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)

16.364939151s ago: executing program 2 (id=200):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
recvmsg(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000000c0)=""/18, 0x5}], 0x1}, 0x112)

16.244765815s ago: executing program 0 (id=205):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x9, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040a8002b000a0003", 0x37}], 0x1}, 0x20000880)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33)

16.229861943s ago: executing program 0 (id=206):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840)

16.229609087s ago: executing program 1 (id=207):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8942, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'})

16.155314804s ago: executing program 1 (id=208):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002080)={r1, &(0x7f0000001000), 0x0}, 0x20)

16.155155049s ago: executing program 1 (id=209):
socket$kcm(0x10, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4020940d, &(0x7f00000005c0)=0x80000000000004)

16.15459332s ago: executing program 2 (id=210):
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ad000000660000000000000016000000000000009500000000010000"], &(0x7f0000000140)='GPL\x00', 0x8, 0xb, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x23)

16.067074309s ago: executing program 2 (id=211):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000400)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]})

16.066527724s ago: executing program 0 (id=212):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x48}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48)

16.066347247s ago: executing program 1 (id=213):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x5, 0x2, 0x4, 0x0, 0x1}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a40)={{r0}, &(0x7f00000009c0), &(0x7f0000000a00)='%-5lx  \x00'}, 0x20)
sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

3.340111ms ago: executing program 0 (id=214):
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x6, 0x8, 0x0, 0x0)

3.122066ms ago: executing program 2 (id=215):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x20000000be}, 0x0, 0x0, 0x4082c5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x0)

2.984561ms ago: executing program 1 (id=216):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x52, 0x1, 0x0, 0x2, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x10101, 0x8000000002e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50)

2.740363ms ago: executing program 1 (id=217):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0x2, 0x922000000001, 0x106)
socket$kcm(0x10, 0x2, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x29, 0x5, 0x0)
write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5a, 0x5a, 0x4, [@func={0x9, 0x0, 0x0, 0xc, 0x3}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x2f, 0x0, 0x63, 0x1}, @datasec={0x2, 0x2, 0x0, 0xf, 0x2, [{0x3, 0xfffffff7, 0x2}, {0x3, 0x4, 0x7b4}], "ddc6"}, @ptr={0x2, 0x0, 0x0, 0x2, 0x4}, @volatile={0xa, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x61, 0x30]}}, &(0x7f0000000640)=""/89, 0x78, 0x59, 0x1, 0x4, 0x10000}, 0x28)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x1b, 0x0, 0x4, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000340)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe, 0x0, &(0x7f0000000800)="0000000000000000606b53cc7273", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4)

2.665204ms ago: executing program 0 (id=218):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x16, 0x5, 0x7f}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c00)={r0}, 0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000cc0)={{r0}, 0x0, 0x0}, 0x20)

2.385331ms ago: executing program 0 (id=219):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='rxrpc_resend\x00', r1, 0x0, 0xffffffffffffff7f}, 0x18)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x2}, 0x104141, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200})
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x8040, 0x18, 0x6, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x2ff}, 0x0, 0x2, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080))
r5 = socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r5, 0x84, 0x14, 0x0, 0x0)
r6 = socket$kcm(0x29, 0x5, 0x0)
r7 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0xfffffffffffff801)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000630a00ff0000000095006800000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
r8 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r8, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x3400cc00)
ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x541b, 0x0)
write$cgroup_pressure(r6, &(0x7f0000000140)={'full'}, 0xfffffdef)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, 0x0, 0x0)
r9 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001)
sendmsg(r9, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000780)="a9", 0xfffffdef}], 0x11}, 0x0)

151.73µs ago: executing program 32 (id=219):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='rxrpc_resend\x00', r1, 0x0, 0xffffffffffffff7f}, 0x18)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x2}, 0x104141, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200})
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x8040, 0x18, 0x6, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x2ff}, 0x0, 0x2, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080))
r5 = socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r5, 0x84, 0x14, 0x0, 0x0)
r6 = socket$kcm(0x29, 0x5, 0x0)
r7 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0xfffffffffffff801)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000630a00ff0000000095006800000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
r8 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r8, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x3400cc00)
ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x541b, 0x0)
write$cgroup_pressure(r6, &(0x7f0000000140)={'full'}, 0xfffffdef)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, 0x0, 0x0)
r9 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001)
sendmsg(r9, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000780)="a9", 0xfffffdef}], 0x11}, 0x0)

34.357µs ago: executing program 33 (id=217):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0x2, 0x922000000001, 0x106)
socket$kcm(0x10, 0x2, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x29, 0x5, 0x0)
write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5a, 0x5a, 0x4, [@func={0x9, 0x0, 0x0, 0xc, 0x3}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x2f, 0x0, 0x63, 0x1}, @datasec={0x2, 0x2, 0x0, 0xf, 0x2, [{0x3, 0xfffffff7, 0x2}, {0x3, 0x4, 0x7b4}], "ddc6"}, @ptr={0x2, 0x0, 0x0, 0x2, 0x4}, @volatile={0xa, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x61, 0x30]}}, &(0x7f0000000640)=""/89, 0x78, 0x59, 0x1, 0x4, 0x10000}, 0x28)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x1b, 0x0, 0x4, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000340)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe, 0x0, &(0x7f0000000800)="0000000000000000606b53cc7273", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4)

0s ago: executing program 34 (id=215):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x20000000be}, 0x0, 0x0, 0x4082c5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:17561' (ED25519) to the list of known hosts.
syzkaller login: [   48.512756][ T5828] cgroup: Unknown subsys name 'net'
[   48.597356][ T5828] cgroup: Unknown subsys name 'cpuset'
[   48.601177][ T5828] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.270046][ T5828] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.055086][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.059215][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.061899][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.065244][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.067905][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.085751][ T5221] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.089905][ T5221] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.092537][ T5221] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.096059][ T5221] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.098679][ T5221] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.155057][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.157888][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.160404][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.162964][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.166116][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.307851][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   54.330592][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   54.437115][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.439972][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.442369][ T5840] bridge_slave_0: entered allmulticast mode
[   54.445621][ T5840] bridge_slave_0: entered promiscuous mode
[   54.449716][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.451984][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.454951][ T5840] bridge_slave_1: entered allmulticast mode
[   54.457659][ T5840] bridge_slave_1: entered promiscuous mode
[   54.497069][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.499326][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.501475][ T5836] bridge_slave_0: entered allmulticast mode
[   54.504339][ T5836] bridge_slave_0: entered promiscuous mode
[   54.507944][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.510193][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.512438][ T5836] bridge_slave_1: entered allmulticast mode
[   54.515571][ T5836] bridge_slave_1: entered promiscuous mode
[   54.527830][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.541995][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.545162][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   54.551988][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.576907][ T5840] team0: Port device team_slave_0 added
[   54.580644][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.597765][ T5840] team0: Port device team_slave_1 added
[   54.617960][ T5836] team0: Port device team_slave_0 added
[   54.634913][ T5836] team0: Port device team_slave_1 added
[   54.650417][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.652681][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.661402][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.679723][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.682065][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.690641][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.707754][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.709880][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.717581][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.738647][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.740762][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.748929][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.769496][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.771758][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.774018][ T5843] bridge_slave_0: entered allmulticast mode
[   54.776850][ T5843] bridge_slave_0: entered promiscuous mode
[   54.806266][ T5840] hsr_slave_0: entered promiscuous mode
[   54.808609][ T5840] hsr_slave_1: entered promiscuous mode
[   54.811171][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.813671][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.816014][ T5843] bridge_slave_1: entered allmulticast mode
[   54.818681][ T5843] bridge_slave_1: entered promiscuous mode
[   54.832033][ T5836] hsr_slave_0: entered promiscuous mode
[   54.834463][ T5836] hsr_slave_1: entered promiscuous mode
[   54.836562][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.839019][ T5836] Cannot create hsr debugfs directory
[   54.860789][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.870093][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.915612][ T5843] team0: Port device team_slave_0 added
[   54.930713][ T5843] team0: Port device team_slave_1 added
[   54.980917][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.983047][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.991039][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.996457][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.998649][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.006698][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.087265][ T5843] hsr_slave_0: entered promiscuous mode
[   55.089588][ T5843] hsr_slave_1: entered promiscuous mode
[   55.091764][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.094288][ T5843] Cannot create hsr debugfs directory
[   55.149438][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.162479][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.179957][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.197550][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.235634][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.246653][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.252601][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.259966][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.262193][ T5840] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.264754][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.266945][ T5840] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.277884][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.317644][ T2916] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.320720][ T2916] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.331781][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.342094][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.351268][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.357949][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.402019][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.426829][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   55.437895][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.440115][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.447158][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.465219][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.467451][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.478278][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   55.496277][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.498637][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.516789][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.518953][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.552819][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.587507][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   55.599684][ T2916] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.601884][ T2916] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.626135][ T2916] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.628302][ T2916] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.679868][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.710490][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.721537][ T5840] veth0_vlan: entered promiscuous mode
[   55.734927][ T5840] veth1_vlan: entered promiscuous mode
[   55.759128][ T5836] veth0_vlan: entered promiscuous mode
[   55.777694][ T5836] veth1_vlan: entered promiscuous mode
[   55.789701][ T5840] veth0_macvtap: entered promiscuous mode
[   55.796468][ T5840] veth1_macvtap: entered promiscuous mode
[   55.801835][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.822730][ T5836] veth0_macvtap: entered promiscuous mode
[   55.829958][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.832919][ T5836] veth1_macvtap: entered promiscuous mode
[   55.841130][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.851523][ T5840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.855092][ T5840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.857887][ T5840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.860447][ T5840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.888372][ T5843] veth0_vlan: entered promiscuous mode
[   55.897936][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.909900][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.921671][ T5843] veth1_vlan: entered promiscuous mode
[   55.931680][ T5836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.935764][ T5836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.938401][ T5836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.941029][ T5836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.968708][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.971192][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.008748][ T5843] veth0_macvtap: entered promiscuous mode
[   56.017459][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.019883][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.024745][ T5843] veth1_macvtap: entered promiscuous mode
[   56.037513][ T4696] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.039922][ T4696] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.051829][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.077777][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.080447][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.083964][ T2916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.089534][ T5843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.092249][ T5843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.096294][ T2916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.098836][ T5843] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.101585][ T5843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.113906][   T54] Bluetooth: hci0: command tx timeout
[   56.193418][   T54] Bluetooth: hci2: command tx timeout
[   56.195304][   T54] Bluetooth: hci1: command tx timeout
[   56.213350][ T2916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.215797][ T2916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.219993][ T5902] Illegal XDP return value 4294967274 on prog  (id 2) dev N/A, expect packet loss!
[   56.255218][ T5903] netlink: 'syz.0.4': attribute type 29 has an invalid length.
[   56.258810][ T4696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.261196][ T4696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.283037][ T5903] netlink: 'syz.0.4': attribute type 29 has an invalid length.
[   56.724764][ T5940] C: renamed from team_slave_0 (while UP)
[   56.742712][ T5940] netlink: 'syz.0.20': attribute type 3 has an invalid length.
[   56.746657][ T5940] netlink: 152 bytes leftover after parsing attributes in process `syz.0.20'.
[   56.749399][ T5940] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   56.952432][ T5949] warning: `syz.1.23' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   57.061854][ T5951] netlink: 152 bytes leftover after parsing attributes in process `syz.0.25'.
[   57.503073][    C0] hrtimer: interrupt took 19566 ns
[   58.021460][ T5963] netlink: 'syz.0.28': attribute type 1 has an invalid length.
[   58.026110][ T5963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.28'.
[   58.175580][ T5971] netlink: 'syz.0.33': attribute type 10 has an invalid length.
[   58.180565][ T5971] netlink: 152 bytes leftover after parsing attributes in process `syz.0.33'.
[   58.193589][ T5221] Bluetooth: hci0: command tx timeout
[   58.273221][ T5221] Bluetooth: hci1: command tx timeout
[   58.274900][ T5221] Bluetooth: hci2: command tx timeout
[   58.326208][ T5978] netlink: 'syz.1.35': attribute type 39 has an invalid length.
[   58.359897][ T5978] veth0_macvtap: left promiscuous mode
[   58.537502][ T5989] netlink: 'syz.2.42': attribute type 25 has an invalid length.
[   60.434977][   T54] Bluetooth: hci0: command tx timeout
[   60.435226][ T5221] Bluetooth: hci2: command tx timeout
[   60.437271][   T54] Bluetooth: hci1: command tx timeout
[   60.708609][ T6049] netlink: 6955 bytes leftover after parsing attributes in process `syz.1.67'.
[   60.711678][ T6049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.67'.
[   60.715835][ T6049] netlink: 83780 bytes leftover after parsing attributes in process `syz.1.67'.
[   62.270181][ T6099] netlink: 'syz.1.87': attribute type 21 has an invalid length.
[   62.274141][ T6099] netlink: 132 bytes leftover after parsing attributes in process `syz.1.87'.
[   62.276562][ T6098] netlink: 'syz.2.88': attribute type 10 has an invalid length.
[   62.320489][ T6099] netlink: 'syz.1.87': attribute type 5 has an invalid length.
[   62.354452][ T6098] veth0_vlan: left promiscuous mode
[   62.369145][ T6098] veth0_vlan: entered promiscuous mode
[   62.411983][ T6098] team0: Device veth0_vlan failed to register rx_handler
[   62.513834][ T5838] Bluetooth: hci2: command tx timeout
[   62.514367][ T6098] syz.2.88 (6098) used greatest stack depth: 17000 bytes left
[   62.516266][ T5838] Bluetooth: hci0: command tx timeout
[   62.520157][   T54] Bluetooth: hci1: command tx timeout
[   62.668533][ T6111] netlink: 'syz.2.93': attribute type 10 has an invalid length.
[   62.671554][ T6111] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.676015][ T6111] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.698305][ T6111] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.700824][ T6111] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.703703][ T6111] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.706168][ T6111] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.717208][ T6111] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   62.796344][ T6117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.97'.
[   62.869736][ T6121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.98'.
[   63.124186][ T1269] cfg80211: failed to load regulatory.db
[   63.147870][ T6139] netlink: 'syz.2.107': attribute type 1 has an invalid length.
[   63.150351][ T6139] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.107'.
[   63.176399][ T6143] sctp: [Deprecated]: syz.1.108 (pid 6143) Use of int in maxseg socket option.
[   63.176399][ T6143] Use struct sctp_assoc_value instead
[   64.412167][ T6180] netlink: 'syz.2.127': attribute type 7 has an invalid length.
[   64.414841][ T6180] netlink: 85 bytes leftover after parsing attributes in process `syz.2.127'.
[   64.417732][ T6180] netlink: 130160 bytes leftover after parsing attributes in process `syz.2.127'.
[   64.420634][ T6180] netlink: 'syz.2.127': attribute type 7 has an invalid length.
[   64.422890][ T6180] netlink: 85 bytes leftover after parsing attributes in process `syz.2.127'.
[   66.541213][ T6214] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.144'.
[   66.692242][ T6218] netlink: 'syz.0.145': attribute type 1 has an invalid length.
[   66.696776][ T6218] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.145'.
[   67.661403][ T6248] veth0_vlan: entered allmulticast mode
[   67.723906][ T6248] : renamed from vlan0
[   67.861978][ T6252] netdevsim netdevsim1: Direct firmware load for  failed with error -2
[   67.864847][ T6252] netdevsim netdevsim1: Falling back to sysfs fallback for: 
[   67.910480][ T6265] netlink: 'syz.2.167': attribute type 1 has an invalid length.
[   69.001085][ T6296] netlink: 104 bytes leftover after parsing attributes in process `syz.0.181'.
[   69.026782][ T6284] netlink: 'syz.2.175': attribute type 1 has an invalid length.
[   69.029816][ T6284] netlink: 17 bytes leftover after parsing attributes in process `syz.2.175'.
[   69.239734][ T6298] syzkaller0: entered promiscuous mode
[   69.241662][ T6298] syzkaller0: entered allmulticast mode
[   69.706856][ T6320] netlink: 'syz.0.189': attribute type 10 has an invalid length.
[   69.711654][ T6320] netlink: 40 bytes leftover after parsing attributes in process `syz.0.189'.
[   70.180785][ T6320] ipvlan1: entered promiscuous mode
[   70.182515][ T6320] ipvlan1: entered allmulticast mode
[   70.185981][ T6320] bridge0: port 3(ipvlan1) entered blocking state
[   70.188167][ T6320] bridge0: port 3(ipvlan1) entered disabled state
[   70.191841][ T6320] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[   70.240399][ T6324] netlink: 'syz.2.193': attribute type 51 has an invalid length.
[   70.523029][ T6348] netlink: 'syz.0.205': attribute type 3 has an invalid length.
[   70.566159][ T6352] netlink: 'syz.0.206': attribute type 10 has an invalid length.
[   70.578912][ T6352] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.583433][ T6352] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   70.598212][ T6352] netlink: 'syz.0.206': attribute type 10 has an invalid length.
[   70.600683][ T6352] netlink: 40 bytes leftover after parsing attributes in process `syz.0.206'.
[   70.606307][ T6352] batadv0: entered promiscuous mode
[   70.607974][ T6352] batadv0: entered allmulticast mode
[   70.623282][ T6352] bond0: (slave batadv0): Releasing backup interface
[   70.649332][ T6352] bridge0: port 3(batadv0) entered blocking state
[   70.651333][ T6352] bridge0: port 3(batadv0) entered disabled state
[   70.949589][ T6373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.217'.
[   71.148164][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.150249][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.309337][   T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   71.312250][   T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   87.236784][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   87.240586][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   87.246782][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   87.249993][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   87.252629][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   87.255737][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   87.259689][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   87.262140][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   87.265131][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   87.268549][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   87.271005][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   87.273734][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   87.276986][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   87.279457][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   87.282403][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   87.600645][ T6383] chnl_net:caif_netlink_parms(): no params data found
[   89.313361][ T6390] Bluetooth: hci3: command tx timeout
[   89.316223][ T6391] Bluetooth: hci4: command tx timeout
[   89.394180][ T6391] Bluetooth: hci5: command tx timeout
[   91.393237][ T6390] Bluetooth: hci3: command tx timeout
[   91.395579][ T6391] Bluetooth: hci4: command tx timeout
[   91.473680][ T6391] Bluetooth: hci5: command tx timeout
[   93.473282][ T6391] Bluetooth: hci4: command tx timeout
[   93.475154][ T6391] Bluetooth: hci3: command tx timeout
[   93.553572][ T6390] Bluetooth: hci5: command tx timeout
[   95.553457][ T6390] Bluetooth: hci3: command tx timeout
[   95.556281][ T6391] Bluetooth: hci4: command tx timeout
[   95.633424][ T6390] Bluetooth: hci5: command tx timeout
[  148.138967][ T6391] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  148.142124][ T6391] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  148.145399][ T6391] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  148.155662][ T6391] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  148.158303][ T6391] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  148.172782][ T6390] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  148.175907][ T6390] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  148.178502][ T6390] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  148.181463][ T6390] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  148.184463][ T6390] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  148.219357][ T6390] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  148.222336][ T6390] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  148.228834][ T6390] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  148.233443][ T6390] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  148.236251][ T6390] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  150.193397][   T54] Bluetooth: hci6: command tx timeout
[  150.196362][ T6391] Bluetooth: hci7: command tx timeout
[  150.274200][ T6390] Bluetooth: hci8: command tx timeout
[  152.273380][ T6391] Bluetooth: hci6: command tx timeout
[  152.276240][ T6390] Bluetooth: hci7: command tx timeout
[  152.355293][ T6390] Bluetooth: hci8: command tx timeout
[  154.355021][ T6390] Bluetooth: hci7: command tx timeout
[  154.356764][ T6390] Bluetooth: hci6: command tx timeout
[  154.443278][ T6391] Bluetooth: hci8: command tx timeout
[  156.433315][ T6391] Bluetooth: hci6: command tx timeout
[  156.435071][ T6391] Bluetooth: hci7: command tx timeout
[  156.513281][ T6390] Bluetooth: hci8: command tx timeout
[  175.773066][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
[  175.775132][    C0] rcu: 	0-....: (10498 ticks this GP) idle=e4e4/1/0x4000000000000000 softirq=15784/15785 fqs=4736
[  175.779782][    C0] rcu: 	         hardirqs   softirqs   csw/system
[  175.781765][    C0] rcu: 	 number:  1157364          1            0
[  175.783743][    C0] rcu: 	cputime:    24519      27970           81   ==> 52490(ms)
[  175.786167][    C0] rcu: 	(t=10500 jiffies g=8109 q=3948 ncpus=2)
SYZFAIL: failed to recv rpc
[  175.788107][    C0] CPU: 0 UID: 0 PID: 6368 Comm: syz.2.215 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  175.788127][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  175.788138][    C0] RIP: 0010:rcu_core+0x126/0x1710
[  175.788157][    C0] Code: f0 e8 a1 8f be 08 00 00 00 e8 d6 97 7a 00 4c 0f a3 35 ee 3c f9 0d 0f 83 1e 12 00 00 4c 8d b3 c0 bf a1 92 48 8b 3d ca f1 f8 0d <e8> 45 88 fe ff 49 8d 5e 13 48 89 d8 48 c1 e8 03 42 0f b6 04 20 84
[  175.788165][    C0] RSP: 0018:ffffc90000007be0 EFLAGS: 00000257
[  175.788176][    C0] RAX: 0000000000000001 RBX: ffff8880b861f000 RCX: ffffffff81a8abfa
[  175.788182][    C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8b8c3aa0
[  175.788188][    C0] RBP: ffffc90000007e30 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  175.788194][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: dffffc0000000000
[  175.788200][    C0] R13: ffff88804b03afe0 R14: ffff88804b03afc0 R15: ffffffff8e144440
[  175.788206][    C0] FS:  00007fa74c3f66c0(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
[  175.788213][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  175.788219][    C0] CR2: 00007fccaef802d8 CR3: 0000000024c1e000 CR4: 00000000000006f0
[  175.788242][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000082
[  175.788249][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  175.788254][    C0] Call Trace:
[  175.788259][    C0]  <IRQ>
[  175.788265][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  175.788283][    C0]  ? __irq_exit_rcu+0xd8/0x1f0
[  175.788294][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  175.788308][    C0]  ? __pfx_rcu_core+0x10/0x10
[  175.788316][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  175.788337][    C0]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  175.788350][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  175.788359][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  175.788375][    C0]  handle_softirqs+0x286/0x870
[  175.788387][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  175.788400][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  175.788412][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  175.788425][    C0]  __irq_exit_rcu+0xca/0x1f0
[  175.788434][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  175.788449][    C0]  irq_exit_rcu+0x9/0x30
[  175.788457][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  175.788467][    C0]  </IRQ>
[  175.788470][    C0]  <TASK>
[  175.788475][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  175.788485][    C0] RIP: 0010:generic_exec_single+0x481/0x500
[  175.788495][    C0] Code: 75 11 e8 62 7f 0b 00 48 85 db 75 16 e8 58 7f 0b 00 eb 15 e8 51 7f 0b 00 e8 ac ea b9 09 48 85 db 74 ea e8 42 7f 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 66 43 c7 44 2c
[  175.788503][    C0] RSP: 0018:ffffc90006e07800 EFLAGS: 00000246
[  175.788511][    C0] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000080000
[  175.788516][    C0] RDX: ffffc9000ab59000 RSI: 0000000000000584 RDI: 0000000000000585
[  175.788522][    C0] RBP: ffffc90006e078d0 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  175.788528][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 1ffff92000dc0f04
[  175.788534][    C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000dc0f25
[  175.788550][    C0]  ? __pfx_remote_function+0x10/0x10
[  175.788563][    C0]  ? __pfx_generic_exec_single+0x10/0x10
[  175.788575][    C0]  ? smp_call_function_single+0xa0/0x590
[  175.788587][    C0]  smp_call_function_single+0x351/0x590
[  175.788596][    C0]  ? __pfx_remote_function+0x10/0x10
[  175.788637][    C0]  ? __pfx_smp_call_function_single+0x10/0x10
[  175.788647][    C0]  ? __pfx_remote_function+0x10/0x10
[  175.788666][    C0]  event_function_call+0x326/0x970
[  175.788683][    C0]  ? __pfx___perf_event_enable+0x10/0x10
[  175.788694][    C0]  ? __pfx_event_function_call+0x10/0x10
[  175.788705][    C0]  ? do_raw_spin_lock+0x121/0x290
[  175.788717][    C0]  ? __pfx_event_function+0x10/0x10
[  175.788730][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  175.788746][    C0]  ? __pfx___perf_event_enable+0x10/0x10
[  175.788756][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  175.788766][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  175.788778][    C0]  _perf_event_refresh+0x1d2/0x250
[  175.788794][    C0]  perf_ioctl+0x5e5/0x1ec0
[  175.788806][    C0]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  175.788817][    C0]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  175.788832][    C0]  ? __pfx_perf_ioctl+0x10/0x10
[  175.788845][    C0]  ? __lock_acquire+0xab9/0xd20
[  175.788864][    C0]  ? __fget_files+0x2a/0x420
[  175.788876][    C0]  ? __fget_files+0x2a/0x420
[  175.788885][    C0]  ? __fget_files+0x3a0/0x420
[  175.788893][    C0]  ? __fget_files+0x2a/0x420
[  175.788904][    C0]  ? bpf_lsm_file_ioctl+0x9/0x20
[  175.788921][    C0]  ? __pfx_perf_ioctl+0x10/0x10
[  175.788933][    C0]  __se_sys_ioctl+0xfc/0x170
[  175.788948][    C0]  do_syscall_64+0xfa/0x3b0
[  175.788960][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  175.788970][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.788978][    C0]  ? exc_page_fault+0x9f/0xf0
[  175.788990][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.788997][    C0] RIP: 0033:0x7fa74e58e9a9
[  175.789007][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  175.789014][    C0] RSP: 002b:00007fa74c3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  175.789023][    C0] RAX: ffffffffffffffda RBX: 00007fa74e7b5fa0 RCX: 00007fa74e58e9a9
[  175.789029][    C0] RDX: 0000000000000000 RSI: 0000000000002402 RDI: 0000000000000004
[  175.789034][    C0] RBP: 00007fa74e610d69 R08: 0000000000000000 R09: 0000000000000000
[  175.789040][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  175.789045][    C0] R13: 0000000000000000 R14: 00007fa74e7b5fa0 R15: 00007fffca31b088
[  175.789059][    C0]  </TASK>
[  175.956548][    C0] sched: DL replenish lagged too much
[  180.437179][ T6104] Bluetooth: hci1: command 0x0406 tx timeout
[  180.439718][ T6104] Bluetooth: hci0: command 0x0406 tx timeout
[  180.442168][ T6104] Bluetooth: hci2: command 0x0406 tx timeout

VM DIAGNOSIS:
12:29:04  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000006f10
R8 =ffff8881085b0237 R9 =1ffff110210b6046 R10=dffffc0000000000 R11=ffffffff85471fa0
R12=dffffc0000000000 R13=ffffffff99af58c6 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff8547201c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa74c3f66c0 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fccaef802d8 CR3=0000000024c1e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000082 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fa74e786478 00007fa74e786450 XMM03=00007fa74e786488 00007fa74e786480
XMM04=00007fa74f2ed100 00007fa74e786440 XMM05=00007fa74e786458 00007fa74e7864a0
XMM06=00007fa74e786498 00007fa74e786490 XMM07=00007fa74e786488 00007fa74e786480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fa74e611ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=dffffc0000000001 RCX=ffffffff8b71260c RDX=0000000000000000
RSI=0000000000000004 RDI=ffffffff8e144440 RBP=ffffc9000342ef18 RSP=ffffc9000342ede8
R8 =ffffffff8e144443 R9 =1ffffffff1c28888 R10=dffffc0000000000 R11=fffffbfff1c28888
R12=0000000000000001 R13=0000000000000001 R14=fffffbfff1c28889 R15=1ffffffff1c28888
RIP=ffffffff82232962 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f3d376b2800 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000561707b027e8 CR3=0000000109b12000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
