last executing test programs:

2.016824651s ago: executing program 1 (id=4):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x339)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r1)
ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000140)={'wlan1\x00', @local})
socketpair(0x27, 0x80000, 0x1800, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r2})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x7, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4, &(0x7f0000000040)}, 0x20)
close(r0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340), <r5=>0x0, 0x7a, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xb1, 0x8, 0x8, &(0x7f0000000440)}}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)={@fallback=r6, r6, 0x2f}, 0x20)
r7 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x110345, 0x4, 0x800000, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r9=>0x0}, 0x8)
r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r9, 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r10, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1d, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff}, [@exit]}, &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x27, &(0x7f0000000200)=""/39, 0x41000, 0x41, '\x00', 0x0, @lsm=0x1b, r1, 0x8, &(0x7f0000000240)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x1, 0x6b, 0x200}, 0x10, r5, r1, 0x1, &(0x7f00000005c0)=[r1, r4, 0xffffffffffffffff], &(0x7f0000000600)=[{0x0, 0xfffffffb, 0x10, 0x1}], 0x10, 0x8000}, 0x94)

1.835479796s ago: executing program 2 (id=3):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38)

1.739220245s ago: executing program 0 (id=1):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff7)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="bc"], 0x50)
ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180))
close(0x3)

1.668924938s ago: executing program 1 (id=5):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg(r0, &(0x7f00000015c0)={&(0x7f00000010c0)=@generic={0x1e, "c4be1b95bc8cc9d64e06180bcd9ef6b5ea84e50d05fc0462579b47b8acc37d689a0bef6f0329df66645b93b40a83c8a35fb44a47687beca69546eb152af9151936a45755a17dc913b30acf9f874b0d4160af5c2f940371911e044da7f368c4f91102b272fd2dc18f34c69eab48ff82c6dac28c73a779c05f80fc808afc8b"}, 0x80, 0x0}, 0x8000)

1.668610242s ago: executing program 1 (id=6):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xce, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x7, 0x80}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008804)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c616ab9f064d063d8940b743b20cdefb0a165dcfec"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_subtree(r3, 0x0, 0x32600)
socket$kcm(0xa, 0x1, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700))
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x600, &(0x7f0000000040)=[{&(0x7f0000000080)="1400000034000b45d30000000000000001d25a80", 0x14}], 0x1}, 0x0)

1.518767777s ago: executing program 0 (id=7):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = gettid()
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0xa0, 0xa, 0x2, 0xfd, 0x0, 0x1, 0x200, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x1, @perf_config_ext={0x2, 0xfffffffffffffffa}, 0xc10, 0x8, 0x65f5, 0x4, 0x101, 0x100, 0x7ff, 0x0, 0xae4b, 0x0, 0x2}, r1, 0xe, 0xffffffffffffffff, 0x3)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r3, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040))
ioctl$SIOCSIFHWADDR(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @link_local})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x10, 0x2, 0x7a737b71, 0x0)
r5 = socket$kcm(0x11, 0xa, 0x300)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000000)=r6, 0x4)
r7 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r7, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042700920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0)

1.45804349s ago: executing program 1 (id=8):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='(pu\t>0&&\t')

80.118953ms ago: executing program 2 (id=9):
socket$kcm(0xa, 0x922000000003, 0x11)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x100000001, 0x5}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000a00)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0xc)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcd9e3fe3d46e48aa31086b8703130000001f00000000000000080004000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c902d1938037e73f07d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

144.106µs ago: executing program 1 (id=10):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb010818"], &(0x7f0000000600)=""/217, 0x3a, 0xd9, 0x1, 0x2}, 0x28)

0s ago: executing program 1 (id=11):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r1, 0x9e, &(0x7f0000000140)}, 0x10)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:40997' (ED25519) to the list of known hosts.
syzkaller login: [   48.575614][ T5816] cgroup: Unknown subsys name 'net'
[   48.647493][ T5816] cgroup: Unknown subsys name 'cpuset'
[   48.651239][ T5816] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.359991][ T5816] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.797691][ T5220] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.800704][ T5220] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.803815][ T5220] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.806738][ T5220] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.809597][ T5220] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.849077][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.851822][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.854666][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.857595][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.860481][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.877869][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.904456][ T5220] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.910259][ T5220] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.914613][ T5220] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.918209][ T5220] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.094015][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   55.178342][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.181220][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.183786][ T5827] bridge_slave_0: entered allmulticast mode
[   55.186654][ T5827] bridge_slave_0: entered promiscuous mode
[   55.190209][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   55.207550][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.210052][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.212487][ T5827] bridge_slave_1: entered allmulticast mode
[   55.215907][ T5827] bridge_slave_1: entered promiscuous mode
[   55.252459][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.256250][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   55.263144][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.328274][ T5827] team0: Port device team_slave_0 added
[   55.344199][ T5827] team0: Port device team_slave_1 added
[   55.375668][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.378259][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.380826][ T5832] bridge_slave_0: entered allmulticast mode
[   55.384416][ T5832] bridge_slave_0: entered promiscuous mode
[   55.387656][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.390058][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.392531][ T5832] bridge_slave_1: entered allmulticast mode
[   55.395692][ T5832] bridge_slave_1: entered promiscuous mode
[   55.446806][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.449760][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.462355][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.469066][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.472004][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.484459][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.491340][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.500444][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.505248][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.508370][ T5833] bridge_slave_0: entered allmulticast mode
[   55.512276][ T5833] bridge_slave_0: entered promiscuous mode
[   55.517816][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.520870][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.524270][ T5833] bridge_slave_1: entered allmulticast mode
[   55.528200][ T5833] bridge_slave_1: entered promiscuous mode
[   55.533534][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.583002][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.605674][ T5827] hsr_slave_0: entered promiscuous mode
[   55.608970][ T5827] hsr_slave_1: entered promiscuous mode
[   55.627387][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.634452][ T5832] team0: Port device team_slave_0 added
[   55.664720][ T5832] team0: Port device team_slave_1 added
[   55.715438][ T5833] team0: Port device team_slave_0 added
[   55.732132][ T5833] team0: Port device team_slave_1 added
[   55.751371][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.754861][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.766075][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.793591][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.796045][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.806349][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.822254][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.826133][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.834905][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.839427][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.841697][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.850597][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.915163][ T5833] hsr_slave_0: entered promiscuous mode
[   55.917424][ T5833] hsr_slave_1: entered promiscuous mode
[   55.919571][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.922112][ T5833] Cannot create hsr debugfs directory
[   55.931540][ T5832] hsr_slave_0: entered promiscuous mode
[   55.936848][ T5832] hsr_slave_1: entered promiscuous mode
[   55.939714][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.943160][ T5832] Cannot create hsr debugfs directory
[   56.092080][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.111219][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.116903][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.136084][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.210049][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.220080][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.253850][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.260606][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.292309][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.304880][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.311557][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.317468][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.374486][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.416657][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   56.434021][  T703] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.436397][  T703] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.457168][  T703] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.460207][  T703] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.501468][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.521189][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.539565][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   56.554259][ T4064] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.556828][ T4064] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.567168][ T4064] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.569554][ T4064] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.581390][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   56.625660][ T4064] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.628155][ T4064] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.632457][ T4064] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.635282][ T4064] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.679606][ T5833] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   56.683604][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.700949][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.730545][ T5827] veth0_vlan: entered promiscuous mode
[   56.746202][ T5827] veth1_vlan: entered promiscuous mode
[   56.776622][ T5827] veth0_macvtap: entered promiscuous mode
[   56.780806][ T5827] veth1_macvtap: entered promiscuous mode
[   56.792027][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.801063][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.815175][ T5827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.818304][ T5827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.821066][ T5827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.826183][ T5827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.836074][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.844133][ T5220] Bluetooth: hci0: command tx timeout
[   56.861275][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.913422][ T5220] Bluetooth: hci1: command tx timeout
[   56.951658][ T4064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.952373][ T5833] veth0_vlan: entered promiscuous mode
[   56.958329][ T4064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.972549][ T5832] veth0_vlan: entered promiscuous mode
[   56.992838][ T5220] Bluetooth: hci2: command tx timeout
[   56.998785][ T5833] veth1_vlan: entered promiscuous mode
[   57.011108][ T5832] veth1_vlan: entered promiscuous mode
[   57.017348][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.020879][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.037379][ T5833] veth0_macvtap: entered promiscuous mode
[   57.041808][ T5833] veth1_macvtap: entered promiscuous mode
[   57.056951][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.077643][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.080525][ T5832] veth0_macvtap: entered promiscuous mode
[   57.090603][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.104700][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.107995][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.111210][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.116017][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.120205][ T5832] veth1_macvtap: entered promiscuous mode
[   57.137190][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.166123][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.180180][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.199061][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.202443][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.212662][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.252255][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.260771][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.318405][  T703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.323968][  T703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.397241][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.409452][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.453418][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.456457][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.590966][ T5903] netlink: 'syz.1.6': attribute type 10 has an invalid length.
[   57.608515][ T5903] 8021q: adding VLAN 0 to HW filter on device team0
[   57.612278][ T5903] bond0: (slave team0): Enslaving as an active interface with an up link
[   57.646121][ T5903] Zero length message leads to an empty skb
[   57.782488][ T5905] warning: `syz.0.7' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   58.802597][    C1] hrtimer: interrupt took 29742 ns
[   70.997783][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.000609][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   73.839731][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   73.843491][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   73.846249][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   73.849268][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   73.852029][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   75.873525][ T5220] Bluetooth: hci3: command tx timeout
[   77.955182][ T5220] Bluetooth: hci3: command tx timeout
[   80.032970][ T5220] Bluetooth: hci3: command tx timeout
[   81.242993][  T789] cfg80211: failed to load regulatory.db
[   82.113017][ T5220] Bluetooth: hci3: command tx timeout
[  132.443174][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.445843][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  133.956489][   T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  133.960430][   T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  133.964850][   T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  133.968921][   T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  133.972437][   T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  136.032855][ T5220] Bluetooth: hci4: command tx timeout
[  138.112785][ T5220] Bluetooth: hci4: command tx timeout
[  140.192952][ T5220] Bluetooth: hci4: command tx timeout
[  142.272877][ T5220] Bluetooth: hci4: command tx timeout
[  162.812653][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  162.814837][    C1] rcu: 	1-....: (10499 ticks this GP) idle=6194/1/0x4000000000000000 softirq=14234/14235 fqs=5214
[  162.819632][    C1] rcu: 	         hardirqs   softirqs   csw/system
[  162.821693][    C1] rcu: 	 number:   981120          0            0
[  162.823742][    C1] rcu: 	cputime:    24285      28194           95   ==> 52490(ms)
[  162.826252][    C1] rcu: 	(t=10501 jiffies g=6493 q=2485 ncpus=2)
[  162.828247][    C1] CPU: 1 UID: 0 PID: 5905 Comm: syz.0.7 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  162.828256][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  162.828261][    C1] RIP: 0010:rcu_read_unlock_special+0x87/0x4c0
[  162.828310][    C1] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 d2 2c f8 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
[  162.828316][    C1] RSP: 0018:ffffc900001e05c0 EFLAGS: 00000206
[  162.828323][    C1] RAX: fcacfca02731e600 RBX: 1ffff9200003c0c0 RCX: fcacfca02731e600
[  162.828328][    C1] RDX: 0000000000000003 RSI: ffffffff8d998874 RDI: ffffffff8be29f40
[  162.828333][    C1] RBP: ffffc900001e06b8 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  162.828337][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffffffff8e144400
[  162.828342][    C1] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000002
[  162.828346][    C1] FS:  00007f81c2ab46c0(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
[  162.828351][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  162.828356][    C1] CR2: 00007fce28ce56c0 CR3: 000000010f832000 CR4: 00000000000006f0
[  162.828381][    C1] Call Trace:
[  162.828386][    C1]  <IRQ>
[  162.828392][    C1]  ? irqentry_exit+0x74/0x90
[  162.828404][    C1]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  162.828416][    C1]  ? unwind_next_frame+0xa5/0x2390
[  162.828428][    C1]  __rcu_read_unlock+0x84/0xe0
[  162.828439][    C1]  ? unwind_next_frame+0xa5/0x2390
[  162.828445][    C1]  unwind_next_frame+0x19ae/0x2390
[  162.828456][    C1]  ? unwind_next_frame+0xa5/0x2390
[  162.828464][    C1]  ? irq_exit_rcu+0x9/0x30
[  162.828474][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  162.828484][    C1]  arch_stack_walk+0x11c/0x150
[  162.828496][    C1]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  162.828507][    C1]  stack_trace_save+0x9c/0xe0
[  162.828516][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  162.828525][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  162.828532][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  162.828542][    C1]  kasan_save_track+0x3e/0x80
[  162.828549][    C1]  ? kasan_save_track+0x3e/0x80
[  162.828553][    C1]  ? kasan_save_free_info+0x46/0x50
[  162.828562][    C1]  ? __kasan_slab_free+0x62/0x70
[  162.828567][    C1]  ? kfree+0x18e/0x440
[  162.828573][    C1]  ? shmem_free_in_core_inode+0x73/0xb0
[  162.828580][    C1]  ? rcu_core+0xca8/0x1710
[  162.828587][    C1]  ? handle_softirqs+0x286/0x870
[  162.828593][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  162.828599][    C1]  ? irq_exit_rcu+0x9/0x30
[  162.828626][    C1]  kasan_save_free_info+0x46/0x50
[  162.828634][    C1]  __kasan_slab_free+0x62/0x70
[  162.828641][    C1]  ? shmem_free_in_core_inode+0x73/0xb0
[  162.828647][    C1]  kfree+0x18e/0x440
[  162.828653][    C1]  ? debug_object_deactivate+0x9a/0x250
[  162.828662][    C1]  ? __pfx_i_callback+0x10/0x10
[  162.828669][    C1]  ? rcu_core+0xc34/0x1710
[  162.828676][    C1]  shmem_free_in_core_inode+0x73/0xb0
[  162.828684][    C1]  rcu_core+0xca8/0x1710
[  162.828690][    C1]  ? clockevents_program_event+0x24d/0x360
[  162.828709][    C1]  ? __pfx_rcu_core+0x10/0x10
[  162.828716][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  162.828723][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  162.828734][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  162.828750][    C1]  handle_softirqs+0x286/0x870
[  162.828760][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  162.828769][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  162.828779][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  162.828791][    C1]  __irq_exit_rcu+0xca/0x1f0
[  162.828798][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  162.828809][    C1]  irq_exit_rcu+0x9/0x30
[  162.828815][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  162.828824][    C1]  </IRQ>
[  162.828826][    C1]  <TASK>
[  162.828829][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  162.828837][    C1] RIP: 0010:preempt_schedule_irq+0xb0/0x150
[  162.828847][    C1] Code: 24 20 f6 44 24 21 02 74 0c 90 0f 0b 48 f7 03 08 00 00 00 74 64 bf 01 00 00 00 e8 1b 2d 21 f6 e8 56 00 58 f6 fb bf 01 00 00 00 <e8> 1b ab ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24
[  162.828852][    C1] RSP: 0018:ffffc900037cf400 EFLAGS: 00000286
[  162.828858][    C1] RAX: fcacfca02731e600 RBX: 0000000000000000 RCX: fcacfca02731e600
[  162.828862][    C1] RDX: 0000000000000007 RSI: ffffffff8d998874 RDI: 0000000000000001
[  162.828866][    C1] RBP: ffffc900037cf4b0 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  162.828870][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 0000000000000000
[  162.828874][    C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920006f9e80
[  162.828887][    C1]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  162.828896][    C1]  ? trace_call_bpf+0xb7/0x850
[  162.828907][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  162.828916][    C1]  irqentry_exit+0x6f/0x90
[  162.828923][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  162.828930][    C1] RIP: 0010:kasan_check_range+0x19/0x2c0
[  162.828936][    C1] Code: cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 55 41 57 41 56 41 55 41 54 53 b0 01 48 85 f6 0f 84 ba 01 00 00 <4c> 8d 04 37 49 39 f8 0f 82 82 02 00 00 49 b9 00 00 00 00 00 80 ff
[  162.828941][    C1] RSP: 0018:ffffc900037cf570 EFLAGS: 00000206
[  162.828946][    C1] RAX: ffff888022575601 RBX: 0000000000000060 RCX: ffffffff8172d2c6
[  162.828950][    C1] RDX: 0000000000000001 RSI: 0000000000000060 RDI: ffffc900037cf628
[  162.828954][    C1] RBP: 0000000000000000 R08: ffffc900037cf81f R09: 0000000000000000
[  162.828958][    C1] R10: ffffc900037cf7a0 R11: fffff520006f9f04 R12: 0000000000000000
[  162.828962][    C1] R13: ffff888022575640 R14: ffffc900037cf628 R15: 0000000000000000
[  162.828970][    C1]  ? __unwind_start+0x36/0x760
[  162.828982][    C1]  __asan_memset+0x22/0x50
[  162.828992][    C1]  __unwind_start+0x36/0x760
[  162.829001][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  162.829010][    C1]  arch_stack_walk+0xe4/0x150
[  162.829024][    C1]  stack_trace_save+0x9c/0xe0
[  162.829032][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  162.829045][    C1]  save_stack+0xf5/0x1f0
[  162.829055][    C1]  ? __pfx_save_stack+0x10/0x10
[  162.829068][    C1]  ? page_ext_put+0x97/0xc0
[  162.829078][    C1]  __reset_page_owner+0x71/0x1f0
[  162.829086][    C1]  __free_frozen_pages+0xc71/0xe70
[  162.829099][    C1]  __slab_free+0x326/0x400
[  162.829110][    C1]  ? __phys_addr+0xd3/0x180
[  162.829121][    C1]  qlist_free_all+0x97/0x140
[  162.829132][    C1]  kasan_quarantine_reduce+0x148/0x160
[  162.829143][    C1]  __kasan_slab_alloc+0x22/0x80
[  162.829150][    C1]  __kmalloc_noprof+0x224/0x4f0
[  162.829156][    C1]  ? ioctl_standard_iw_point+0x4d5/0xd40
[  162.829167][    C1]  ioctl_standard_iw_point+0x4d5/0xd40
[  162.829179][    C1]  ? __pfx_cfg80211_wext_siwscan+0x10/0x10
[  162.829189][    C1]  ? __pfx_ioctl_standard_iw_point+0x10/0x10
[  162.829195][    C1]  ? _printk+0xcf/0x120
[  162.829205][    C1]  ? __pfx___mutex_lock+0x10/0x10
[  162.829215][    C1]  ? __pfx__printk+0x10/0x10
[  162.829225][    C1]  ? __pfx_cfg80211_wext_siwscan+0x10/0x10
[  162.829234][    C1]  ioctl_standard_call+0xaf/0x1b0
[  162.829242][    C1]  ? __pfx_cfg80211_wext_siwscan+0x10/0x10
[  162.829249][    C1]  wext_ioctl_dispatch+0xee/0x410
[  162.829255][    C1]  ? __pfx_ioctl_standard_call+0x10/0x10
[  162.829268][    C1]  wext_handle_ioctl+0x100/0x1c0
[  162.829277][    C1]  ? __pfx_wext_handle_ioctl+0x10/0x10
[  162.829311][    C1]  ? __lock_acquire+0xab9/0xd20
[  162.829327][    C1]  sock_ioctl+0x15f/0x790
[  162.829338][    C1]  ? __pfx_sock_ioctl+0x10/0x10
[  162.829347][    C1]  ? __fget_files+0x2a/0x420
[  162.829355][    C1]  ? __fget_files+0x3a0/0x420
[  162.829362][    C1]  ? __fget_files+0x2a/0x420
[  162.829371][    C1]  ? bpf_lsm_file_ioctl+0x9/0x20
[  162.829382][    C1]  ? __pfx_sock_ioctl+0x10/0x10
[  162.829390][    C1]  __se_sys_ioctl+0xfc/0x170
[  162.829403][    C1]  do_syscall_64+0xfa/0x3b0
[  162.829414][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.829420][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  162.829429][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.829435][    C1] RIP: 0033:0x7f81c1b8e9a9
[  162.829443][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  162.829448][    C1] RSP: 002b:00007f81c2ab4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  162.829455][    C1] RAX: ffffffffffffffda RBX: 00007f81c1db5fa0 RCX: 00007f81c1b8e9a9
[  162.829459][    C1] RDX: 0000200000000000 RSI: 0000000000008b18 RDI: 0000000000000009
[  162.829463][    C1] RBP: 00007f81c1c10d69 R08: 0000000000000000 R09: 0000000000000000
[  162.829467][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  162.829471][    C1] R13: 0000000000000000 R14: 00007f81c1db5fa0 R15: 00007ffeb2c52058
[  162.829482][    C1]  </TASK>
[  163.096664][    C1] sched: DL replenish lagged too much

VM DIAGNOSIS:
10:54:31  Registers:
info registers vcpu 0

CPU#0
RAX=ba4b4052987db200 RBX=ffffffff819769d8 RCX=ba4b4052987db200 RDX=0000000000000001
RSI=ffffffff8d998874 RDI=ffffffff8be29f40 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa1e8f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6e84f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fff2d273ebc CR3=000000010a598000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007fcb65586d00
XMM02=95000000000000ad 0000000000000000 XMM03=893d064d069fab16 c600000000000000
XMM04=0000000000000000 000000000000000e XMM05=0000000000000000 000000000001df8a
XMM06=c00300080009b803 00080009000000af XMM07=656c6c6100000000 01ffffffffffffff
XMM08=ffeb080380030380 0409a003000000ae XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000002f RBX=000000000000002f RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001df8f0
R8 =ffff8880213d0237 R9 =1ffff1100427a046 R10=dffffc0000000000 R11=ffffffff85472aa0
R12=dffffc0000000000 R13=ffffffff99af58c7 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff85472b1c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f81c2ab46c0 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fce28ce56c0 CR3=000000010f832000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffff00 ffffffffffffff00
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffff00 ffffffffffffff00
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fce28011ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
