last executing test programs:

618.054837ms ago: executing program 0 (id=39):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000001300)=r2, 0x4)
r3 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x33fe0)

616.354787ms ago: executing program 1 (id=41):
r0 = socket$kcm(0x25, 0x1, 0x0)
recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x1)

538.49013ms ago: executing program 0 (id=43):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x2000000000000, 0x30084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x20000000000002}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4f34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x3}, 0x42, 0xc8, 0x0, 0x6, 0x65, 0x0, 0x211, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc00000000db5b686158bbcfe8875a060300001123000000000000000000000000ac1414aa89"], 0xfdef)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x8144, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0xb45, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$kcm(0x2, 0x3, 0x2)
socket$kcm(0x29, 0x2, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)

538.186285ms ago: executing program 1 (id=44):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x800000000000003, 0x2505, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f0000, 0x7f}, 0x80, 0x4, 0x0, 0x1, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x9)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000f5ff000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r2}, 0x10)
r3 = socket$kcm(0x2, 0x1, 0x106)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001)

429.758256ms ago: executing program 2 (id=46):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x39}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48)

429.552838ms ago: executing program 2 (id=47):
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000000007000000071c"], 0x30}, 0x0)

348.486796ms ago: executing program 2 (id=48):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f001600060004d6dede1b00200003400734cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d12a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94100"/216, 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0)

348.03026ms ago: executing program 0 (id=49):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r1 = perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x10, 0x0, 0x80000003, 0x6, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
syz_clone(0x4080000, 0x0, 0x0, 0x0, 0x0, 0x0)

264.113843ms ago: executing program 0 (id=50):
r0 = socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x5, 0x0, 0x5, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f00000015c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8009}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x5, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x30044889)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$kcm(0x1e, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$kcm(0x1e, 0x1, 0x0)
recvmsg(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000080)=""/248, 0xf8}], 0x1, 0x0, 0x18}, 0x10100)
sendmsg(r4, 0x0, 0x40040)
recvmsg$unix(r3, 0x0, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x8a, &(0x7f0000000040), 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a0, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7)
sendmsg$kcm(r0, 0x0, 0x0)

263.699699ms ago: executing program 2 (id=51):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
socket$kcm(0x2b, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
socket$kcm(0x10, 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0xfffffdcb, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xb8}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080))

244.44641ms ago: executing program 1 (id=52):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x7, 0x6, 0x8c}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r2, r1}, 0xc)

153.272294ms ago: executing program 1 (id=53):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000022020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r0}, 0x18)
perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007f"], 0xfdef)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfdef)

152.841016ms ago: executing program 2 (id=54):
socket$kcm(0x2, 0x1000000000000002, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
close(0xffffffffffffffff)
close(0x3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0xa, 0x3, 0x3a)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d000a117ea6e070d6065e220003000000002500020f0f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r4 = socket$kcm(0x11, 0x2, 0x300)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x900}, 0x60)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x11, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x78, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=[{0x1, 0x2, 0xd, 0x5}], 0x10, 0xfff}, 0x94)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000400)={r2, r5})

152.064353ms ago: executing program 1 (id=55):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f00000002c0), 0x161)
sendmsg$kcm(r1, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x20000800)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r2, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20)
close(0x4)

55.095363ms ago: executing program 0 (id=56):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x15a}], 0x1, 0x0, 0xd8}, 0x0)
r0 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8b0b, &(0x7f0000000180)={'virt_wifi0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}})

50.456541ms ago: executing program 0 (id=57):
r0 = socket$kcm(0x2, 0x5, 0x84)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x9, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8183, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext, 0x40, 0x0, 0x0, 0x0, 0xc360, 0xfffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000))
r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, <r4=>0xffffffffffffffff}, 0x4)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x40100, 0x0)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f92aa3c92b", 0x14}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x5a}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="b7", 0x1}], 0x1}, 0x20008050)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2, 0x0, 0xfffffffc, 0x8}]}, 0x94)
r6 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r6, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="020a000302000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r7 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r8=>0xffffffffffffffff})
recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r10, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840)
sendmsg(r10, &(0x7f0000000300)={&(0x7f0000000180)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0xd, @mcast2}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000200)="69680de549521cbd98b210c4253f6e885f66c0cd13c1183754c1e5d0cbd292e0cb25d45328454e8195a178b32990e12e94170f32dcfeaa7fe57ef7048ce7a0d79f5a780fbd37b82072dcfe4d9fb08a4a1beef4adc1d8566bc9acd87fe356925f6729c6870ecaa2118d14a7c161dadeae96bf5ce425a9414abb0a04725557ed3f5a55d65b712522fe3b06", 0x8a}, {&(0x7f0000000040)="ed89a663ea027d6292087eafbeeed090e5fdb05526912fee7b530862d85061b8190b44ce4d913f06101597e261b48671bbc2", 0x32}, {&(0x7f0000000440)="742a81f390c0da98edcf019836b25ad4a5a6b62d5453c804907851882f165071627fafd371b981393ae11206d767e1f1328714d5d68d065a4dfeddb9300932e241ae6bbc2ecd7533f09ae43f2ab1a77e0b463a007c89c9f29c1a8468d7101dda01caa318c85fc907ea289ed9d31033a86dc0956dc2d21169986e9931ec880f404fe9e98f30ff7bd66ba8969f6082a94dc2bf163450ee606bba", 0x99}, {&(0x7f0000000600)="0825ecebc14fad9900e53f0fe43e2b317c87fabf2ebeb03e066c3fb232cb838425d2e1413534d6a67a52bdcc75d3fc12382d442fe9c70a34044c64de40fa9c11d59250596aef7c891fbc8d99263aa059a5ce05999afa93ecd6247eabd23aef8e8e717f693fdaf376623467fdf247870cf137f64aec2e01f6d992d5d05273ac63a0a6c4bc1111af04ee2026a03f09ce20c748d934dcfceee7947b792fc899046c7b85d2b7765fd665fe7a1a17d41bf36b4961dbdda42c118c445d2daed7087bdcff2595b9c444e18b784dbef81f307a85340f38b436add9aa84a7e17ea76eed03401662dbe6358b7494d0b433", 0xec}, {&(0x7f0000000500)="a8eac18777cb713f37e2bb69e3e450f2e8bb1d1a5b5e86e455a3d84ec62c8868f1044079aed0921b7f2be1b064e338677180fe1c9b38e2e7401f340157c264a8822fa4b75f393ac0bd4652f21845849033cb59a0212e3666babe4f6753d3eebb7567405cfc32e9d3d21c7f24b660ad486afcb65b1a405c5c6dcb85ba3d08b76099d0d92c8a", 0x85}, {&(0x7f00000002c0)="4b64a28ebdd34eb8ad2eef72fc3d1567ef7f80f5c0d2cfd53f6c1e5683aae2a194019f764d316ff84a73d0abb1853db5", 0x30}, {&(0x7f0000000740)="49c6c108a015821268336bfdd092273391e00be897235008fb4f072520a24d1ff61a7ed9a0b18e5af93b607a7135de41524e7170b8aa9b84809b34e6804b6406e11b60ba74c56a22079462fa0b62029b2a0132f8fdb6b11ca4c826362d6e0458ef5a7dc8901c9a639b25a1988660df6dcbeae0b0f14002221b7b7974abe3def5e89a8c81123b82b3a78a5ccd50aa13309e9ac55b96940b3ee4074922c9f1bdc1295dc0db24f0b574a663e0456bb7a91fbb22a803dac49b542c1d4bdf83d4b75c8e09f58cdec5f1f6758ad8f09a62da0b38ed098c3c856bb1", 0xd8}, {&(0x7f0000000840)="4458aa9d226e0490cf61f1db731f5bc348496c3be45f36bb6fe1abd2bd78c073266bc1508e389c87d1c89d18786946ac182a8b2c71841c01b0962e86017ba70e5f7333c68f31842893f4895a4652e77e091bf93423ef488e2b3d405852160b4c0f7f605505e19258409080f375b95d9722cd14c7dd36a9b56526ef4a3cda7df3395f09dd1db2ff1d256347178df948f538c372cb3207c762f9a48f422f1d60698224ffae9d66ea1b5b3625503ad75128521e2f8abf7390097a855251e48f", 0xbe}], 0x8, &(0x7f0000000980)=[{0xa8, 0x103, 0xfff, "b5b079895aabad27a50daeb2c4e00ed0d004eac49b0f90f8e6e8ab11f5de051502fcb0665faeb668c072415cfd5fc30e92ae6dbf31b997dc62fa51b10e6b2a2211549c7f029ffc903ab48821022c4a7c944e922a0308bca337322476e549eb2ebaaaaa47f9884075459849cf3bc4537492aaa20986f610e7af8dd361496707b38be9593eaad8d5554c04d2e1402379cd4390"}, {0x78, 0x109, 0x2, "6aaa5eaed5c1edeea381ffcb521201508a04509f263f9b4d2ac1ed11a3f7b2557aa801b270467bc4cb873d6efdbee7b549b44f13dc016e15da1191c24c85a103aa32ea3b6b7ddbdbb7034001ebd75ad305d1aad1d50b38a89e82366bdbd44a7d3ff07558"}, {0xb0, 0x388, 0x8, "71257a7c5be2c6999c52f70120907c715b4a3da49e034cf353977f136a98ee7bbd6a45ea35772756e7451aaa0e2a5a766570c06125edfa90ad12b8a1f1df7593fee2ac2877c6e035fe3b809d184c058a2d1bb1e4cf7e3a2528942dbbc9ff6a9b3c6b610148d4b81910e6b41922154a2eb1e948fa445addd333d21c97982906d84651347fd9609f32fa0f3d67d76e48e759b0f4103867d9e4caeda37dba"}, {0x90, 0x1, 0x4, "597ea5eff892176ef22651dc3ea4fba2fa5b0a8a0f0e34810bdbb0de4302850047b88c5a3c0d0821934417eb54f946642e6d2d06bd655f6c159139716d8a2c4fd66d2be7d4286132a5e6bc1422194396435014aa19c3910b64e41c7acd118e600a5ff4c170d417e246fd21cfc2a232d972b8cf908bd4fd172f0cc779a6"}, {0x78, 0x19e, 0x3, "9bac60bea3e3d1111de706339bad548d208971f5c9392e0e73a40e6071f22bdd4096a014fc6ce9dbd219a541c0972288573b4d776c2accf6033e63432569287b10d72a76b2c93150e6d834f9e3ffd6601d982ce7bb31db4f0ed8b70b84151843fb6c2182188fe1e2"}, {0x78, 0x117, 0x9b, "88dcdebce93de1ff0105f1b08bb53567b3bd50c7cde86473c5089200b7713e33f74003258a381744243f1b88a2b15ac134a630dc3bd85b349494a1f0a4986da3cabb57c7ab760364c7e7b41a6f3c9d955131f66f12965ff18c9b05c9722c2097b266eebb"}, {0xf8, 0x103, 0x741, "3aacc4b0d603baa0d127a16c7308e4aa616d12c13fd9ec798a06691b41dc9380222202228bd5e69e3074100596083ca54ada3115ba692a08d97db3d1c97fe3933a5fa98acf87d4f90d4422de60261c8658b7277f711df135132ea29bc2d33bf32a9412e138b58b990daf42261f0284ed173af1b20cc52f8990118f010e77a17bba138877859e9741825099e113b8270c45ab92c7c0e890f6da3e4d4a09177a00c54840be32129a1811eca6c9adcb7f9564a698c212424146f8dbae98509a440c3e9237a56398b6771e4f58f07920a3a98e5725ec744035185e81456d5f7e41fb9094aef91d"}, {0x50, 0x116, 0x100, "2a89868189864268d9a9c415277ba13d76fcef2c90ba41e42bca32b895b16b4076bacdd26948d18c2521e8d0a27512b01fd2722e556b25eaf790966b184abe68"}, {0x10, 0x111, 0x7ff}, {0x80, 0x119, 0x9, "488f4245f2de38edc25c7dc4071dda4d7decdb1ca5aefec1f66bf95449d98b08f772eaf44e8ed569911b02481fbba56300350771b5fa5d6dcd7b8d7aca589c1cb2932806fedc737ccaba55736d306a77ca4876931c52da0467cd3300697bb5d70ae1c346bc57a87bc6b973338cbf3f0c"}], 0x528}, 0x10000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
close(r11)

50.132664ms ago: executing program 1 (id=58):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffd13, 0x0, 0x1b}, 0x4000004)

0s ago: executing program 2 (id=59):
r0 = socket$kcm(0x23, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89ef, &(0x7f0000000000))

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:2071' (ED25519) to the list of known hosts.
syzkaller login: [   49.065099][ T5817] cgroup: Unknown subsys name 'net'
[   49.229945][ T5817] cgroup: Unknown subsys name 'cpuset'
[   49.234065][ T5817] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.942422][ T5817] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   59.745356][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   59.748901][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   59.751469][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   59.754505][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   59.757095][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   59.797968][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   59.800815][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   59.803304][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   59.809293][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   59.811901][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   59.836808][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   59.840154][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   59.843602][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   59.846909][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   59.851681][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   60.115933][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   60.145391][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   60.246572][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.249949][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.252682][ T5848] bridge_slave_0: entered allmulticast mode
[   60.255573][ T5848] bridge_slave_0: entered promiscuous mode
[   60.269462][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.271872][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.274112][ T5845] bridge_slave_0: entered allmulticast mode
[   60.276944][ T5845] bridge_slave_0: entered promiscuous mode
[   60.284144][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.286737][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.289380][ T5848] bridge_slave_1: entered allmulticast mode
[   60.291961][ T5848] bridge_slave_1: entered promiscuous mode
[   60.302964][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.305138][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.307824][ T5845] bridge_slave_1: entered allmulticast mode
[   60.310458][ T5845] bridge_slave_1: entered promiscuous mode
[   60.333854][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.349782][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.354017][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.356822][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   60.363723][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.411668][ T5845] team0: Port device team_slave_0 added
[   60.422942][ T5848] team0: Port device team_slave_0 added
[   60.426170][ T5845] team0: Port device team_slave_1 added
[   60.440675][ T5848] team0: Port device team_slave_1 added
[   60.453703][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.456007][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.463927][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.476044][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.478479][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.485819][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.508734][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.510829][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.518383][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.542093][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.544463][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.552624][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.568065][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.570268][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.572414][ T5850] bridge_slave_0: entered allmulticast mode
[   60.575027][ T5850] bridge_slave_0: entered promiscuous mode
[   60.588447][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.590581][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.592784][ T5850] bridge_slave_1: entered allmulticast mode
[   60.595422][ T5850] bridge_slave_1: entered promiscuous mode
[   60.610580][ T5845] hsr_slave_0: entered promiscuous mode
[   60.612900][ T5845] hsr_slave_1: entered promiscuous mode
[   60.658466][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.666753][ T5848] hsr_slave_0: entered promiscuous mode
[   60.670374][ T5848] hsr_slave_1: entered promiscuous mode
[   60.672985][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   60.675878][ T5848] Cannot create hsr debugfs directory
[   60.682368][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.732271][ T5850] team0: Port device team_slave_0 added
[   60.772835][ T5850] team0: Port device team_slave_1 added
[   60.840746][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.843410][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.853302][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.870136][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.872234][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.882347][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.964765][ T5850] hsr_slave_0: entered promiscuous mode
[   60.967034][ T5850] hsr_slave_1: entered promiscuous mode
[   60.969891][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   60.972209][ T5850] Cannot create hsr debugfs directory
[   61.043242][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   61.061395][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   61.086140][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   61.105789][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   61.140545][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   61.158900][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   61.171094][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   61.182921][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   61.255008][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   61.269030][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   61.276259][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   61.288942][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   61.299711][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.344088][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   61.356952][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.366257][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.368651][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.382860][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.385060][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.414392][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   61.433758][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.436294][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.444732][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.453991][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.456250][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.492712][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   61.523674][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.525868][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.538640][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.540935][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.580814][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.643463][ T5845] veth0_vlan: entered promiscuous mode
[   61.649685][ T5845] veth1_vlan: entered promiscuous mode
[   61.675416][ T5845] veth0_macvtap: entered promiscuous mode
[   61.681446][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.692977][ T5845] veth1_macvtap: entered promiscuous mode
[   61.719221][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.743138][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.756008][ T5845] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.761608][ T5845] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.764903][ T5845] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.768470][ T5845] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.788366][   T54] Bluetooth: hci0: command tx timeout
[   61.791350][ T5848] veth0_vlan: entered promiscuous mode
[   61.818763][ T5848] veth1_vlan: entered promiscuous mode
[   61.822286][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.860700][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.863191][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.868202][   T54] Bluetooth: hci2: command tx timeout
[   61.869065][ T5847] Bluetooth: hci1: command tx timeout
[   61.901175][ T5848] veth0_macvtap: entered promiscuous mode
[   61.909422][ T5850] veth0_vlan: entered promiscuous mode
[   61.923217][ T5848] veth1_macvtap: entered promiscuous mode
[   61.947367][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.951404][ T5850] veth1_vlan: entered promiscuous mode
[   61.956662][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.987034][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.993620][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.006630][ T5848] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.010794][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   62.018159][ T5848] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.021100][ T5848] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.023648][ T5848] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.044684][ T5850] veth0_macvtap: entered promiscuous mode
[   62.065028][ T5850] veth1_macvtap: entered promiscuous mode
[   62.149008][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.157869][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.160228][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.164293][ T5907] Zero length message leads to an empty skb
[   62.169434][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.182739][ T5850] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.186220][ T5850] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.190818][ T5850] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.193962][ T5850] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.222563][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.225330][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.260729][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.263184][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.308499][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.311016][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.449974][ T5921] netlink: 'syz.1.13': attribute type 21 has an invalid length.
[   62.660687][ T5940] netlink: 'syz.1.21': attribute type 27 has an invalid length.
[   62.663588][ T5940] netlink: 'syz.1.21': attribute type 3 has an invalid length.
[   62.666020][ T5940] netlink: 132 bytes leftover after parsing attributes in process `syz.1.21'.
[   62.672033][ T5935] netlink: 'syz.0.20': attribute type 9 has an invalid length.
[   62.675231][ T5935] netlink: 44 bytes leftover after parsing attributes in process `syz.0.20'.
[   62.909121][ T5949] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.26'.
[   62.983305][ T5951] netlink: 'syz.0.27': attribute type 10 has an invalid length.
[   63.013534][ T5951] team0: Cannot enslave team device to itself
[   63.092442][ T5959] warning: `syz.1.31' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   63.202358][ T5957] netlink: 209588 bytes leftover after parsing attributes in process `syz.2.30'.
[   63.211186][ T5278] udevd[5278]: worker [5829] terminated by signal 33 (Unknown signal 33)
[   63.218395][ T5278] udevd[5278]: worker [5829] failed while handling '/devices/virtual/block/loop0'
[   63.663249][ T5996] netlink: 'syz.2.48': attribute type 21 has an invalid length.
[   63.666121][ T5996] netlink: 128 bytes leftover after parsing attributes in process `syz.2.48'.
[   63.673623][ T5996] netlink: 'syz.2.48': attribute type 3 has an invalid length.
[   63.676229][ T5996] netlink: 3 bytes leftover after parsing attributes in process `syz.2.48'.
[   63.868995][ T5847] Bluetooth: hci0: command tx timeout
[   63.947296][ T5847] Bluetooth: hci2: command tx timeout
[   63.963596][ T5847] Bluetooth: hci1: command tx timeout
[   64.245638][ T6021] netlink: 'syz.0.57': attribute type 10 has an invalid length.
[   64.254483][ T6021] netlink: 40 bytes leftover after parsing attributes in process `syz.0.57'.
[   64.261333][ T6021] batadv0: entered promiscuous mode
[   64.265878][ T6021] batadv0: entered allmulticast mode
[   64.286694][ T6021] bridge0: port 3(batadv0) entered blocking state
[   64.296081][ T6021] bridge0: port 3(batadv0) entered disabled state
[   64.362143][ T6021] bridge0: port 3(batadv0) entered blocking state
[   64.365050][ T6021] bridge0: port 3(batadv0) entered forwarding state
[   64.607132][    C1] hrtimer: interrupt took 19790 ns
[   65.168730][ T6026] mac80211_hwsim hwsim5 .3c: renamed from wlan1 (while UP)
[   71.072906][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.075639][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   79.515035][ T5223] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   79.518393][ T5223] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   79.521550][ T5223] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   79.524946][ T5223] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   79.528552][ T5223] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   79.531176][ T5223] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   79.536315][ T5223] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   79.539080][ T5223] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   79.542412][ T5223] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   79.545466][ T5223] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   80.510771][ T6033] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   80.513937][ T6033] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   80.516471][ T6033] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   80.521725][ T6033] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   80.524353][ T6033] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   81.627847][ T6036] Bluetooth: hci3: command tx timeout
[   81.630586][ T6033] Bluetooth: hci4: command tx timeout
[   82.587572][ T6033] Bluetooth: hci5: command tx timeout
[   83.708245][ T6036] Bluetooth: hci3: command tx timeout
[   83.711807][ T6033] Bluetooth: hci4: command tx timeout
[   84.667313][ T6033] Bluetooth: hci5: command tx timeout
[   85.787746][ T6033] Bluetooth: hci4: command tx timeout
[   85.789455][ T6033] Bluetooth: hci3: command tx timeout
[   86.747282][ T6036] Bluetooth: hci5: command tx timeout
[   87.867292][ T6036] Bluetooth: hci3: command tx timeout
[   87.869020][ T6036] Bluetooth: hci4: command tx timeout
[   88.827415][ T6033] Bluetooth: hci5: command tx timeout
[  132.510242][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.512224][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  160.541018][ T5847] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  160.543928][ T5847] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  160.546490][ T5847] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  160.549706][ T5847] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  160.552178][ T5847] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  160.569863][ T6033] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  160.572848][ T6033] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  160.575416][ T6033] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  160.579978][ T6033] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  160.582575][ T6033] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  160.599981][ T6036] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  160.602944][ T6036] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  160.605546][ T6036] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  160.608696][ T6036] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  160.611548][ T6036] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  162.587465][ T6036] Bluetooth: hci6: command tx timeout
[  162.667433][   T54] Bluetooth: hci7: command tx timeout
[  162.670210][ T6036] Bluetooth: hci8: command tx timeout
[  164.668303][ T6036] Bluetooth: hci6: command tx timeout
[  164.747710][   T54] Bluetooth: hci7: command tx timeout
[  164.749550][ T6036] Bluetooth: hci8: command tx timeout
[  166.747284][ T6036] Bluetooth: hci6: command tx timeout
[  166.827740][   T54] Bluetooth: hci7: command tx timeout
[  166.829556][ T6036] Bluetooth: hci8: command tx timeout
[  168.827301][ T6036] Bluetooth: hci6: command tx timeout
[  168.907732][ T6036] Bluetooth: hci8: command tx timeout
[  168.909493][ T6036] Bluetooth: hci7: command tx timeout
[  169.057139][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  169.059219][    C1] rcu: 	1-....: (10500 ticks this GP) idle=e484/1/0x4000000000000000 softirq=15228/15228 fqs=5247
[  169.064219][    C1] rcu: 	         hardirqs   softirqs   csw/system
[  169.066221][    C1] rcu: 	 number:  1199293          0            0
[  169.068336][    C1] rcu: 	cputime:    25466      27033           75   ==> 52510(ms)
[  169.070820][    C1] rcu: 	(t=10502 jiffies g=6577 q=2975 ncpus=2)
[  169.072798][    C1] CPU: 1 UID: 0 PID: 6017 Comm: syz.0.57 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  169.072809][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  169.072817][    C1] RIP: 0010:rcu_read_unlock_special+0x87/0x4c0
[  169.072838][    C1] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 92 37 f8 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
[  169.072845][    C1] RSP: 0018:ffffc900001e0b40 EFLAGS: 00000206
[  169.072854][    C1] RAX: cadd5345cf8c4700 RBX: 1ffff9200003c170 RCX: cadd5345cf8c4700
[  169.072860][    C1] RDX: 0000000000000000 RSI: ffffffff8d998701 RDI: ffffffff8be29f80
[  169.072865][    C1] RBP: ffffc900001e0c28 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  169.072870][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffffffff8e144400
[  169.072876][    C1] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000002
[  169.072881][    C1] FS:  00007f5fba8756c0(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
[  169.072887][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  169.072892][    C1] CR2: 00002000000018c0 CR3: 0000000026020000 CR4: 00000000000006f0
[  169.072914][    C1] Call Trace:
[  169.072921][    C1]  <IRQ>
[  169.072931][    C1]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  169.072949][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  169.072962][    C1]  __rcu_read_unlock+0x84/0xe0
[  169.072974][    C1]  mac80211_hwsim_beacon+0xbb/0x1c0
[  169.072986][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  169.072995][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  169.073017][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  169.073032][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  169.073044][    C1]  handle_softirqs+0x286/0x870
[  169.073059][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  169.073071][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  169.073082][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  169.073097][    C1]  __irq_exit_rcu+0xca/0x1f0
[  169.073105][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  169.073119][    C1]  irq_exit_rcu+0x9/0x30
[  169.073127][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  169.073139][    C1]  </IRQ>
[  169.073142][    C1]  <TASK>
[  169.073145][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  169.073155][    C1] RIP: 0010:preempt_schedule_irq+0xb0/0x150
[  169.073166][    C1] Code: 24 20 f6 44 24 21 02 74 0c 90 0f 0b 48 f7 03 08 00 00 00 74 64 bf 01 00 00 00 e8 5b 22 21 f6 e8 96 f5 57 f6 fb bf 01 00 00 00 <e8> 1b ab ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24
[  169.073172][    C1] RSP: 0018:ffffc9000439f7a0 EFLAGS: 00000286
[  169.073180][    C1] RAX: cadd5345cf8c4700 RBX: 0000000000000000 RCX: cadd5345cf8c4700
[  169.073185][    C1] RDX: 0000000000000000 RSI: ffffffff8d998701 RDI: 0000000000000001
[  169.073190][    C1] RBP: ffffc9000439f850 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  169.073195][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 0000000000000000
[  169.073200][    C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000873ef4
[  169.073216][    C1]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  169.073226][    C1]  ? __pfx___might_resched+0x10/0x10
[  169.073239][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  169.073250][    C1]  irqentry_exit+0x6f/0x90
[  169.073259][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  169.073267][    C1] RIP: 0010:memset_orig+0x72/0xb0
[  169.073278][    C1] Code: 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d8 0f 1f 84 00 00 00 00 00 89 d1 83 e1 38 74 14 c1 e9 03 66 0f 1f 44 00 00 ff c9 <48> 89 07 48 8d 7f 08 75 f5 83 e2 07 74 0a ff ca 88 07 48 8d 7f 01
[  169.073283][    C1] RSP: 0018:ffffc9000439f910 EFLAGS: 00000202
[  169.073289][    C1] RAX: 0000000000000000 RBX: ffff88810d29c160 RCX: 0000000000000001
[  169.073294][    C1] RDX: 0000000000000020 RSI: 0000000000000000 RDI: ffff88810d29c058
[  169.073299][    C1] RBP: ffff88810d29c040 R08: ffff88810d29c067 R09: 0000000000000000
[  169.073304][    C1] R10: ffff88810d29c048 R11: ffffed1021a5380d R12: ffff88810d29c130
[  169.073309][    C1] R13: dffffc0000000000 R14: ffff88810d29c048 R15: 1ffff11021a53808
[  169.073324][    C1]  init_file+0x1d0/0x2f0
[  169.073338][    C1]  alloc_empty_file+0x6e/0x1d0
[  169.073349][    C1]  path_openat+0x107/0x3830
[  169.073364][    C1]  ? trace_call_bpf+0xb7/0x850
[  169.073375][    C1]  ? trace_call_bpf+0xb7/0x850
[  169.073382][    C1]  ? trace_call_bpf+0x5ba/0x850
[  169.073390][    C1]  ? trace_call_bpf+0xb7/0x850
[  169.073405][    C1]  ? kasan_save_track+0x4f/0x80
[  169.073417][    C1]  ? kasan_save_track+0x3e/0x80
[  169.073430][    C1]  ? __pfx_path_openat+0x10/0x10
[  169.073440][    C1]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  169.073454][    C1]  ? perf_trace_preemptirq_template+0x280/0x340
[  169.073473][    C1]  do_filp_open+0x1fa/0x410
[  169.073484][    C1]  ? __lock_acquire+0xab9/0xd20
[  169.073493][    C1]  ? __pfx_do_filp_open+0x10/0x10
[  169.073516][    C1]  ? _raw_spin_unlock+0x28/0x50
[  169.073554][    C1]  ? alloc_fd+0x64c/0x6c0
[  169.073570][    C1]  do_sys_openat2+0x121/0x1c0
[  169.073584][    C1]  ? __pfx_do_sys_openat2+0x10/0x10
[  169.073593][    C1]  ? irqentry_exit+0x74/0x90
[  169.073609][    C1]  __x64_sys_openat+0x138/0x170
[  169.073622][    C1]  do_syscall_64+0xfa/0x3b0
[  169.073635][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.073642][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  169.073652][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.073660][    C1] RIP: 0033:0x7f5fb998d310
[  169.073670][    C1] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44
[  169.073676][    C1] RSP: 002b:00007f5fba874f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  169.073684][    C1] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f5fb998d310
[  169.073689][    C1] RDX: 0000000000000002 RSI: 00007f5fba874fa0 RDI: 00000000ffffff9c
[  169.073694][    C1] RBP: 00007f5fba874fa0 R08: 0000000000000000 R09: 0000000000000000
[  169.073699][    C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  169.073703][    C1] R13: 0000000000000000 R14: 00007f5fb9bb5fa0 R15: 00007ffd4cf75fb8
[  169.073717][    C1]  </TASK>
[  169.253675][    C1] sched: DL replenish lagged too much

VM DIAGNOSIS:
12:22:38  Registers:
info registers vcpu 0

CPU#0
RAX=84df18ed9d371100 RBX=ffffffff81975f18 RCX=84df18ed9d371100 RDX=0000000000000001
RSI=ffffffff8d998701 RDI=ffffffff8be29f80 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa1e8f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6e84f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000056025408ae08 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 00ff000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000066 RBX=0000000000000066 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001dfe70
R8 =ffff888021020237 R9 =1ffff11004204046 R10=dffffc0000000000 R11=ffffffff85471fa0
R12=dffffc0000000000 R13=ffffffff99af58dd R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff8547201c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f5fba8756c0 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000000018c0 CR3=0000000026020000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffff00 ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffff0000 XMM03=ffffffffffffff00 ffffffffffff0000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f5fb9a11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
