last executing test programs:

28.531407736s ago: executing program 2 (id=443):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000440)="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", 0x287}], 0x1}, 0x0)
sendmsg$key(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="02"], 0x33fe0}, 0x1, 0x300000000000000}, 0x40010)

28.446884254s ago: executing program 2 (id=445):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720a00fef8ffffff71a4f1ff0000000071302000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00ff040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48)

28.354206814s ago: executing program 2 (id=449):
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x201, 0x2, @local, 0x3, 0x1}, 0x1b, &(0x7f00000029c0)=[{&(0x7f00000016c0)="83", 0x1}], 0x65}, 0x41)

28.353046912s ago: executing program 2 (id=450):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000008000c3a00000e100000095"], &(0x7f0000000580)='syzkaller\x00', 0x8, 0x8f, &(0x7f0000000600)=""/143, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)

28.278349632s ago: executing program 2 (id=452):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800"/12], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r3, 0xa)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x5, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000180001000000005955ee0e", @ANYRES64=r5], 0x24}}, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0xb3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0x17, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
close(r1)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb5d070811"], 0x16)
r7 = socket$kcm(0x2, 0x3, 0x84)
ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f00000000c0)={r7})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})

27.831875758s ago: executing program 1 (id=453):
r0 = socket$kcm(0x2, 0x1, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002, 0x0, 0x0, 0x2}]}, 0x94)
close(0x3)
r1 = socket$kcm(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x85, &(0x7f0000000ac0), 0x90)

27.280251292s ago: executing program 2 (id=457):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
syz_clone(0x4005000, &(0x7f00000000c0), 0x0, &(0x7f0000000140), 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x6, 0x6}, 0x0, 0x4, 0xfffffffd, 0x2, 0x2, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94)
write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12)

27.061164318s ago: executing program 0 (id=463):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
close(r0)

27.014464011s ago: executing program 1 (id=464):
r0 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)=""/174, 0xae}], 0x1}, 0x2)

26.942979472s ago: executing program 0 (id=465):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x54}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

26.942507617s ago: executing program 1 (id=466):
r0 = syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x9c7c, 0x4, 0x98, 0x9, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x24, 0xf, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20018890)

26.840697747s ago: executing program 0 (id=467):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000000fc800c00018008000600ac1414bb0800028004001580080009000c"], 0x34}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040)

26.780959348s ago: executing program 0 (id=468):
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x480, 0x0, 0x0)

26.701552648s ago: executing program 0 (id=469):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000000100)={0x14, 0x3a, 0x725, 0x2070bd23, 0x25dfdbfe, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x800)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x60)

26.701317075s ago: executing program 1 (id=470):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
close(0x3)

26.700954389s ago: executing program 0 (id=471):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003900070125bd7000fcdbdf25027c0000100001801505e5f28fbac48e0c"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4010)
sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000017c0)="93", 0x1}], 0x1}, 0x40)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYBLOB="ffff00"/12, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f00000007c0)}, 0x20)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x1, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000440)=ANY=[@ANYRES16], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x6}, 0x94)
socket$kcm(0x10, 0x400000002, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000013006bec9e3be35c6e17aa31076b876c3d0000007ea60864160af36507000cc00400020208001a000300010004000000eab556a705251e618294ff0051f60a84c9", 0x45}, {&(0x7f0000000780)="3928f4f6f63eb13bf43a2e479743014af9bb5412881e10f9436580150fd9b3136201cf7c8de242753e86c1618401efeb6bbfc0734afa0b4875592613a3e5bb83bb5364f554b58007dbb0b11d84876e98357e63a37457e93bbfcc89f0bbe56c070e32ced49615b11983723cbf27834f71fae3979dc6dcd25e876ea203d49258f71b8cdd1d550f6f1317eb98f2b3c958223c53467f0192ead7ec2c0cdb44e7fed4d375f0eda4e9b7012df9c889d55b404f2fe5163764e47a5673355224ee2d862013eba9a079e70137fc46a9e03cc420095db2cdea35de3ab41c776afa24a90fbb21cc17ada8b4b18d1212bc7a3504c5da61bafb2615f6728e6ba6bc443d87fa4b05670c0c37340f2f4b8e8e8d0d2a140e67e968e4913750a3e15678a6687af44198e6190b6a5bbf6f43b07dc2e7e2682a37cc7afca87c562af06f7b30fa1acefdd15d9be51555e4682138fa68e1c17bc35887d86bc8feb31705f8d9bd4b82f46eedef62c61f71dc99a3505203eb5a216a080fb191f1158158d5c9a6d8c9119cefe2719a5903dfb0eb75fd153ab2916dad8d377aa8cd6cca3af58d108a70ac9ba253fcb4c7db368b202bab6b1ac156709b71ef7573d61cbb3c937a43d5cb48ad882cf99974eef690dc94bdea991e90dffe575a3b0d0577103835b3f37e6bd04c0c420324b1a4367e4b7222066a0eb7a18bf4efdf5db6460b4d5b4df60bb6708748eabb8ca4cc6b6c2fdf59be6cd118151cb09fd39877b63ff7c586e0ef508c1ecfab9404428d5e4fd9aaad962fd50552d9a4db98e26d1f8e21d01ea3172003852b13d2bb4837c01d293dfdf566074f04d43a62eb6b87a53c19a7997d7b0e4e9eb5ec4d7dceaa7939a751333f70004ccdee294202eae5306a20ff246661dc9e6e846cd78b3e73338ac0df972b2bd9b9fc07afa2e4e5530e2725459b10b8206e142801f12cce5d4e74a6eaa6ab9511df45d120b69f291fc5714bedb59c26ff2d5d7ece3fc40b8887363faecf396b581bbaa76bc4965f50c055174b36c0be2b7687fb8a3577901c758b2824cea5a748c4f2885f888226438e0e6b777efd4a520d8b7400e5dd84466d48384623d6cb67f6bfb62e01f2f08947c1df65327dad99573829085a404c7f78ed3b3d6e671cb470957b82787e3921c7136c5014a8bad8e5c074a6bc8941961fada1348d99d91be5dde6e60ef8d03eaa4e88d0f94132ee029a093b466e239f97d488a836268aa6225c059e54320f05fa1d1bfecadaa8ebf58e66d4424d6c46a49faed07ce74d4344c8a651e6d434bbc95e7a2f5bc72545a8b7ce644a88fa3b3776485e3f04f17a9b326dafd95df5cd1066799ec364f617054d32c0837dbf9bfb5f159c40b887812197658e7fd1b52009e00c0855a7037cf40a9c19061d9a3f00acca146071734f9824143205dd45fce7af80b534581654e366468414505e5ccfaf3917e298bfa0c3a9fd647558b3a002aadbb28af9a213147fecb0c775e1e71923559d4fcb9b3d79569083436745c490b122ee31edd3ed007cd87ea7292370a013858e577fb7717a70b56385193f87a16c08ee2a995049a32ec8a272b3c53cabda2ee18e66124a031e4ba80fdfe5d9de8e990e89267616c4f2079aa296bf6d55d4c7c994f9afad3ecf32416d25bb8cd5c670cd73930850c970dc780c2f0cf5d8f39b7725c1ce75497df13050b60f9f77511ee1dcbb123f18511ebb2da7086e06b8b7adde346443e4f47774c26d62ef051b5e3902a19426f0a5033d1abe44e9abcabfa3338181bc79fcba3ffdeb71a86726f166251991e164c125065fd43b93718d9a2761c96af599b487fd243e6f24ce1a9deeb30997ecfe42773d2881e13ad74159aaecf551bdcdbcebb04727c6a13c316e8c5e0df712c475e1c5fbd384ba4fb9d5f194d83597e089dc6101cd6db17e0b8b038ca1d2c4fdee719b410960adcfdab32cc5f5004609595cc995633c0cfd8b3f615e3c006a832d27a5e85b5f5ec61acc0876a6dae7ac40757f19dcb88780c125db724ed2946eb275efcbaebbdb3a76fafd674cafee2eaf56eb71dd6eb64460c494b957afd00f53b8389f7355a674fffa54086761359c1eef73ed3cad038c22b68187861f5ad14bc8bac22fb4068fb4ebdb214fe5d9ef96f6ea114e790e4726f91a6a59c72a73476105c8f826a91eaf85316a17932d14d170ff6454a14bf9eb2b5d8b58e17043cc750b7ae4d96b83e3b6dda73b8bb88463d0f60edea1eb1be349af52ef7246c86ad5f1cee167c74e0646cffdd15c9036d8a8e6a240d06b6ad06f0a4aab2c18fe260ef1b15f2a3c61b8236e9c4b42956dfa52e7f3f4aa6257aa8d3d25670915c5f50a243f764a563053298e2cfa7979c014b16a0d2e1fef0fe909fdf54993da6485bf1ca93c4c589b06507c5b29c04c052416fb080a355d4742652496b796521cf652c89f36191991734253fbcca2b3ef5bfcc717844d34350e0e837a7f7e2628a3b99209adaa03d753eb4a7a37345d29048d36df7ebc89ccff815f6e29a0ae49cc0f03191d445202e29e1fdb39ce10a76578b1bbd7989efa3d9161ec7d57ac7e338d9da66cc3a703b1980a92f09bc664ba413779dcd4df86e11db87f3b627b5e88a0eab553c74db5da877d30d3aceb4382aad3dd3f89ceed3f6c6be88fb3c0515cdf07baddd442f904f8d0d4b4a0c6cd8623332f2184f957ffa7d677333841d8e5377b68d52f82a4b15579337725d7d2b0a6514c051886879ee0879c230d3eefa1d9ac3e92e96fa9e5db9ed62ae1736440e6c0ea17eecb63260add1e2deebe3a77bf570569b70538fb6f2b1997fe9fac79c0e72bdc4317a5d1d4a18ffb3626e01700e42376e2144f0117852a54662b669d23d26ec1352ac5fd2f5e994ccca2109ff358e49b59f600c7fde9ac1e17ce5e9fb781e188d488b2c67757768b0ade645f9d1725117e0d9ef5919ac94eb2f3ca6da67bda54704fcab9332090b14b6d112c7404672de3639372bc3f08641452125572b2392f610e73aff5f1d7f7fd1f33a48772cc03e8a87d7371d7837cbcc892c25b435b5c29ce2d25628428b524e49242919d17088c07dd0ddc4e1203ecbca4a9dc45590ac04a65ed60a769a5bdee41a8a27433b3cd668ccd6edd59f8b4431797877cec0efd543f18ef25490343df9a72329820155350848695a62961c35cb88d5eb34cafcc0eb0c539949223adc395b69d005d7532736bce60009b0975f63a92810e134366f2fd58ff0ccebd2fcbb026b9cd0fbb1ad03116798a875a99d1c7269afc621af8a13965eb94a0427033c5b06857b7faa166fcf4197223193efa396027b59c7246b31bac790b1a4774da978300b028845848a2b604ae57c50f74719e63538223b7b06315d12b68a8135e1e21588cd07e8164f011ced12ba508a485ab56434a64a2e3e50fd55d54da283bfb1f6002b01f042d7fc62ff475c47c889ed47a0a7aece813e9fbc65b8a757e4a444593919920577525ec6b907b15900070ec7b7fb4bd81bba6f939566d0db905a0f69e4259c151f75838e8c3d9eaca1065bda561b9a40eaa4f2b5d0dda61a29b41f008c7887b3170c0063f6c0bb8fa7f743c08ea0675fcb9124b56fc24a8476498133ec0a0fcb20fd7d8f7d537b031930c96e6a3e4fd877df73bf397b77618d349877d9f66191f319ca890052c9ee21dac85979333fb114737d095a86d5a401e113a454b2c7f8795b43231a35f8173db77bb566e725eaf1d45d2149dfb23681f1365f647eedb1ab77761fe7d497f7771fdd6a23914a506332a6869455c36846c0423c27c54c97240d877aa9eab07cdf3a9a19b3a57206ecee6b3e6c0a6c0318eb512d8e1385e507b86a63acec09fc7909fb7f8cdc0fa2eca241bde42887935c4a5f85f48839c65ff2e17d1bcd329d54cc8fc3afa9f838f7e1cbbbc1079fdce5c53f75bbd6a46acebb82b7a7010c61e47441d3661d148c6975e20ada911c9a63c2817b13b9dd3dc89878029aff5d8ec5efb20902bcf9e50f227c7fe40d97b8fcb053e2e07b8384d0b048de11cf87ad2d160a73ac94f3228d0f7d63c2328d96278d44a86f509656f7d1597d131b2e3507ab19349588e927184eeb43f00618f4c23013188652a8c2fe033be5c9cf794f52f46ae615962e77d531d62f59fc0bab33c22652d5a34b60b032844da8d5e9a30becc2cd85eef9b7c8ded5282c4e61fe16477a952c3bfaf691184eb623e85b635a22c18665a05ef0eb39157d1a277d3fde5b2f843c84b415e1fdcf2ec0ae8901eba6ffb3caaad25804b0e03742596fc64d06c28feea19a3b00f454bb031d4f5866c31cd02d6a9525995e77f8704e58e11628dd8afcf8228bdec84c9b129bea2c91728a39665f81e8e8282c0d796bcaede8d559a62e9ec2095a92a108ad72ba38cf589aba0e8acc7e39c36629abb7e9b1614c1696fc34581a2e8d6374248dc2259d7b4dc348c6a061f81c86b94f5daf947e88eef53e95541a2495de58a77b0932258b9e8d46d63b10a261b2656141210683eb6c44dc87281181afbae68213da3d760c2baf9605646fd43d3beed48e79fb942f8127704dd763031c01ff6e24559fa591fce17c4216eccaee399895d62edd64908235f55361fa7861490d51b22ee45fbbc5531576d52758987453749406cfd22dd327791731f6659c2b9a2202c64f00d710763550b887197c22c0b56f206833b7f09af3a34f9cedf3b214d48a4ac1fb01985a56fcab1f3e207630b39a2f4666f1088eb19025e1ebc99547daac091faa7898f94016d7b9fb165e72104d5f900dfede4690a2e58b29cc8b1d2aa829ce25a32f7cb400b0c19000884e05411825f81ee6518d25f478fa702f11b89cec75843091e1b2388a533ca105c2663f3405e2896e8ef8da6b0bc0eb4fd434f8ee5e1c9e6f18d9dfa9b5210f038d190fba01babaa48af03c6c5c313dba4f09f2b381a6ad5416a06974ffa1fe500205771927dfb8aa8334250514eff6d403581f2571d1cf76a7cc23db372c4e90a2f96d5d52a6860e9b0650e79559ecd62d296e4712aca4fb690662cf0ad53ab457d89400ec967b6c3ca22047499f682246a910c27a9b054e664b42a43ad60370dc4c41ca292d1a85d4df1b129d0cfd4f46df3c9c0aed66a4c32983f82aa2dc00e7913a6256166cf887aaea51d8be4fd1519f6fa5c6631acefba135d88ee991b50b6b73893ff6f32e1c64d68c9f89dcab9ad9ff7db9a872584cb10f0edc91267d988d838ad54aedd6b0807431e4f5eda9b3351077f36e8d436d09c54894df3704eb8c2eaa4f9a23255b4d31e9d8328473380aeb35577d088dfd41a09e6478b7f6f9aca997221a95a292bbf473a9958046f78d1eb94ea37e35f1696f35a776a26c45448915a96d3e04532ef4456ce6e72512b6c39ac36ed225a4a06ab0bbd295cbaaaba359eb323dcc7bb6edc5d216d73a128c3e33b68e936ce88ec90d1237d8f0b82cc7ee270b1d4b43c9ad4d1cac2f00d28e6b3629d4f26dab4bb4427b258150c3eae60c7e38c08e2dda6b8a5db6ce6632fa6789733d36e32dd863616b44e10086b0bfc7e97e63a5b2aef0d2c672abb69985a64584419f4d85190ff5cabff01d6f350935e4aaa10119ecd6f0eaa6366e58448693354de3e726d7683e2cfb446fba0094a075e23cc3d41fff5072515a442f83b5ecdff2b9afd95bfdf379e8cac2787913012d66535a0b13461988d497d9af96992f2b62ac8754db4657a04a9b42ad36b114abc811fd3ecbc47b0692c676a13e32d72237cc46ee22c8a9666bea644e2270c5458e035d15d", 0x1000}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x8880)
socket$kcm(0x2b, 0x1, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x7f7c2739efff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@ld}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94)
sendmsg$inet(r0, 0x0, 0x4004800)
sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x2004c841)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

26.605344232s ago: executing program 1 (id=472):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000dc0)={{}, &(0x7f0000000080), &(0x7f0000000500)=r0, 0x8}, 0x20)
r1 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0}, 0x0)
perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x4)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x80044943, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c80)={@ifindex, r0, 0x16, 0x4, 0xffffffffffffffff, @void, @value=r1}, 0x20)
socket$kcm(0xa, 0x2, 0x88)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@ifindex, 0xffffffffffffffff, 0x9, 0x4}, 0x20)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10)
ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000180)={0x1, 0x3, [@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @empty]})
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2405, 0x0, 0x0, 0x20000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0x0, 0xffffffffffffffff, 0xd)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

15.556502955s ago: executing program 1 (id=473):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a863726558"], 0x12)

11.99212505s ago: executing program 32 (id=457):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
syz_clone(0x4005000, &(0x7f00000000c0), 0x0, &(0x7f0000000140), 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x6, 0x6}, 0x0, 0x4, 0xfffffffd, 0x2, 0x2, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94)
write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12)

10.989572226s ago: executing program 33 (id=471):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003900070125bd7000fcdbdf25027c0000100001801505e5f28fbac48e0c"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4010)
sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000017c0)="93", 0x1}], 0x1}, 0x40)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYBLOB="ffff00"/12, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f00000007c0)}, 0x20)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x1, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000440)=ANY=[@ANYRES16], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x6}, 0x94)
socket$kcm(0x10, 0x400000002, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000013006bec9e3be35c6e17aa31076b876c3d0000007ea60864160af36507000cc00400020208001a000300010004000000eab556a705251e618294ff0051f60a84c9", 0x45}, {&(0x7f0000000780)="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", 0x1000}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x8880)
socket$kcm(0x2b, 0x1, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x7f7c2739efff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@ld}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94)
sendmsg$inet(r0, 0x0, 0x4004800)
sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x2004c841)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

0s ago: executing program 34 (id=473):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a863726558"], 0x12)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:55545' (ED25519) to the list of known hosts.
syzkaller login: [   58.776825][ T5834] cgroup: Unknown subsys name 'net'
[   58.867975][ T5834] cgroup: Unknown subsys name 'cpuset'
[   58.873893][ T5834] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   60.813529][ T5834] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   67.271097][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   67.274173][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   67.282321][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   67.286846][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   67.290764][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   67.295039][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   67.298738][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   67.302068][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   67.304961][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   67.307261][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   67.310700][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   67.313610][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   67.329996][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   67.335330][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   67.342704][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   67.663116][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   67.692750][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   67.761440][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   67.836517][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.839423][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.843090][ T5850] bridge_slave_0: entered allmulticast mode
[   67.845969][ T5850] bridge_slave_0: entered promiscuous mode
[   67.854701][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.857400][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.860247][ T5846] bridge_slave_0: entered allmulticast mode
[   67.863291][ T5846] bridge_slave_0: entered promiscuous mode
[   67.866423][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.868740][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.872049][ T5850] bridge_slave_1: entered allmulticast mode
[   67.874763][ T5850] bridge_slave_1: entered promiscuous mode
[   67.887634][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.890448][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.892704][ T5846] bridge_slave_1: entered allmulticast mode
[   67.895367][ T5846] bridge_slave_1: entered promiscuous mode
[   67.945377][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.950939][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.955881][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.976328][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.978689][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.981612][ T5853] bridge_slave_0: entered allmulticast mode
[   67.984162][ T5853] bridge_slave_0: entered promiscuous mode
[   67.988500][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.010533][ T5846] team0: Port device team_slave_0 added
[   68.025373][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.028531][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.033010][ T5853] bridge_slave_1: entered allmulticast mode
[   68.036956][ T5853] bridge_slave_1: entered promiscuous mode
[   68.041529][ T5846] team0: Port device team_slave_1 added
[   68.045053][ T5850] team0: Port device team_slave_0 added
[   68.091839][ T5850] team0: Port device team_slave_1 added
[   68.096674][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.102888][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.105238][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   68.113939][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.128591][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.133151][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.136222][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   68.144942][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.188265][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.191039][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   68.201057][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.207036][ T5853] team0: Port device team_slave_0 added
[   68.211206][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.213960][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   68.225305][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.253449][ T5853] team0: Port device team_slave_1 added
[   68.301656][ T5846] hsr_slave_0: entered promiscuous mode
[   68.305277][ T5846] hsr_slave_1: entered promiscuous mode
[   68.331862][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.334217][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   68.342562][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.350142][ T5850] hsr_slave_0: entered promiscuous mode
[   68.352462][ T5850] hsr_slave_1: entered promiscuous mode
[   68.354581][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   68.356418][ T5850] Cannot create hsr debugfs directory
[   68.359339][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.362316][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   68.373566][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.465413][ T5853] hsr_slave_0: entered promiscuous mode
[   68.467745][ T5853] hsr_slave_1: entered promiscuous mode
[   68.470305][ T5853] debugfs: 'hsr0' already exists in 'hsr'
[   68.472099][ T5853] Cannot create hsr debugfs directory
[   68.677480][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   68.689404][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   68.696608][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   68.711644][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   68.752897][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   68.758344][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   68.779638][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   68.786804][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   68.831454][ T5853] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   68.838665][ T5853] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   68.846091][ T5853] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   68.857787][ T5853] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   68.980799][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.992223][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.017589][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   69.031756][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   69.045426][ T3072] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.048130][ T3072] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.053645][ T3072] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.056240][ T3072] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.064720][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.067592][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.074356][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.093055][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.095246][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.108517][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   69.133273][ T3072] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.136325][ T3072] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.157871][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.161056][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.364310][ T5235] Bluetooth: hci0: command tx timeout
[   69.367461][ T5855] Bluetooth: hci1: command tx timeout
[   69.367745][ T5855] Bluetooth: hci2: command tx timeout
[   69.405934][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.457715][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.477326][ T5846] veth0_vlan: entered promiscuous mode
[   69.505118][ T5846] veth1_vlan: entered promiscuous mode
[   69.525720][ T5850] veth0_vlan: entered promiscuous mode
[   69.534505][ T5850] veth1_vlan: entered promiscuous mode
[   69.542235][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.572820][ T5846] veth0_macvtap: entered promiscuous mode
[   69.592690][ T5846] veth1_macvtap: entered promiscuous mode
[   69.604075][ T5850] veth0_macvtap: entered promiscuous mode
[   69.614866][ T5850] veth1_macvtap: entered promiscuous mode
[   69.622590][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.643488][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.647132][ T5853] veth0_vlan: entered promiscuous mode
[   69.661127][ T5707] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.665510][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.670569][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.675803][ T5707] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.682884][ T5853] veth1_vlan: entered promiscuous mode
[   69.692471][ T5707] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.695243][ T5707] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.705644][ T5707] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.714930][ T5707] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.731498][ T5707] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.735229][ T5707] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.770745][ T5853] veth0_macvtap: entered promiscuous mode
[   69.775276][ T5853] veth1_macvtap: entered promiscuous mode
[   69.816071][ T3072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.818902][ T3072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.828259][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.832675][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.846027][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.870260][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.874163][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.876630][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.916605][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.922982][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.926579][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.941117][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.942025][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   69.954435][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.961825][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.040097][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.042548][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.099661][    C0] hrtimer: interrupt took 20796 ns
[   70.129688][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.132944][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.386141][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8'.
[   70.389613][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8'.
[   71.440256][   T54] Bluetooth: hci0: command tx timeout
[   71.442659][   T54] Bluetooth: hci1: command tx timeout
[   71.555195][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1414432028 wd_nsec: 1414432000
[   72.353527][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   72.356313][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   72.454282][ T5855] Bluetooth: hci2: command tx timeout
[   73.521610][   T54] Bluetooth: hci0: command tx timeout
[   73.524144][ T5855] Bluetooth: hci1: command tx timeout
[   74.481835][ T5855] Bluetooth: hci2: command tx timeout
[   75.601233][   T54] Bluetooth: hci0: command tx timeout
[   75.603764][ T5855] Bluetooth: hci1: command tx timeout
[   76.560132][ T5855] Bluetooth: hci2: command tx timeout
[   77.485329][ T5970] netlink: 'syz.2.22': attribute type 13 has an invalid length.
[   77.488018][ T5970] netlink: 'syz.2.22': attribute type 17 has an invalid length.
[   77.637055][ T5970] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   77.748875][ T5974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24'.
[   77.753084][ T5974] netlink: 44 bytes leftover after parsing attributes in process `syz.2.24'.
[   78.599290][ T6000] netlink: 14 bytes leftover after parsing attributes in process `syz.0.36'.
[   78.841661][ T6006] netlink: 32 bytes leftover after parsing attributes in process `syz.1.39'.
[   78.845580][ T6006] openvswitch: netlink: Missing key (keys=40, expected=100)
[   79.058312][ T6016] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[   80.522893][ T6069] netlink: 'syz.2.65': attribute type 21 has an invalid length.
[   80.525698][ T6069] netlink: 'syz.2.65': attribute type 20 has an invalid length.
[   80.644505][ T6074] netlink: 'syz.2.68': attribute type 23 has an invalid length.
[   82.348570][ T6125] netlink: 'syz.0.85': attribute type 10 has an invalid length.
[   82.358451][ T6124] netlink: 'syz.2.88': attribute type 21 has an invalid length.
[   82.367722][ T6125] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   82.379691][ T6124] netlink: 164 bytes leftover after parsing attributes in process `syz.2.88'.
[   82.585518][ T6127] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   83.175491][ T6160] Zero length message leads to an empty skb
[   83.195475][ T6160] openvswitch: netlink: Missing key (keys=c0, expected=200000)
[   83.206636][ T6158] netlink: 'syz.2.104': attribute type 4 has an invalid length.
[   83.212811][ T6158] netlink: 209028 bytes leftover after parsing attributes in process `syz.2.104'.
[   83.532566][ T6183] netlink: 'syz.1.114': attribute type 1 has an invalid length.
[   83.726009][ T6187] nftables ruleset with unbound chain
[   86.324135][ T6196] netlink: 84 bytes leftover after parsing attributes in process `syz.2.121'.
[   86.363803][ T6199] netlink: 24 bytes leftover after parsing attributes in process `syz.1.122'.
[   86.545813][ T6205] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.124'.
[   86.562370][ T1270] cfg80211: failed to load regulatory.db
[   87.221140][ T6234] netlink: 'syz.0.139': attribute type 21 has an invalid length.
[   87.224266][ T6234] IPv6: NLM_F_CREATE should be specified when creating new route
[   87.233246][ T6234] IPv6: Can't replace route, no match found
[   87.992305][ T6251] netlink: 196 bytes leftover after parsing attributes in process `syz.1.146'.
[   88.107481][ T6263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.152'.
[   88.111378][ T6263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.152'.
[   88.182992][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.157'.
[   88.312868][ T5855] Bluetooth: hci2: ISO packet too small
[   88.534532][ T6294] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.167'.
[   88.920569][ T6334] netlink: 20 bytes leftover after parsing attributes in process `syz.2.185'.
[   89.006072][ T6342] netlink: 'syz.1.190': attribute type 29 has an invalid length.
[   89.011966][ T6342] netlink: 'syz.1.190': attribute type 29 has an invalid length.
[   89.017252][ T6342] netlink: 'syz.1.190': attribute type 29 has an invalid length.
[   89.370990][ T6348] netlink: 188 bytes leftover after parsing attributes in process `syz.1.191'.
[   90.016033][ T6371] netlink: 40 bytes leftover after parsing attributes in process `syz.0.196'.
[   90.089636][ T6379] netlink: 68 bytes leftover after parsing attributes in process `syz.0.200'.
[   90.114854][ T6379] netlink: 'syz.0.200': attribute type 21 has an invalid length.
[   90.133589][ T6379] netlink: 'syz.0.200': attribute type 10 has an invalid length.
[   91.089658][ T6398] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.207'.
[   91.160857][ T6404] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   91.645829][ T6421] =======================================================
[   91.645829][ T6421] WARNING: The mand mount option has been deprecated and
[   91.645829][ T6421]          and is ignored by this kernel. Remove the mand
[   91.645829][ T6421]          option from the mount to silence this warning.
[   91.645829][ T6421] =======================================================
[   91.785753][ T6430] netlink: 'syz.0.221': attribute type 2 has an invalid length.
[   92.272262][ T6454] netlink: 763 bytes leftover after parsing attributes in process `syz.0.233'.
[   93.492657][ T6471] netlink: 1 bytes leftover after parsing attributes in process `syz.2.236'.
[   93.496791][ T6470] netlink: 'syz.1.239': attribute type 3 has an invalid length.
[   94.845471][ T6499] netlink: 'syz.0.249': attribute type 22 has an invalid length.
[   94.926648][ T6503] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.253'.
[   94.928174][ T6504] netlink: 14 bytes leftover after parsing attributes in process `syz.0.252'.
[   94.933083][ T6503] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.253'.
[   94.940005][ T6503] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.253'.
[   95.021991][ T6495] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   95.026654][ T6495] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   97.942343][ T6495] syz.2.250 (6495) used greatest stack depth: 18640 bytes left
[   98.422398][ T6524] Driver unsupported XDP return value 0 on prog  (id 108) dev N/A, expect packet loss!
[   98.727650][ T6536] netlink: 'syz.1.266': attribute type 1 has an invalid length.
[   98.910300][ T6548] netlink: 'syz.0.271': attribute type 1 has an invalid length.
[   98.913859][ T6548] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.271'.
[   98.970365][ T6551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.272'.
[   99.568606][ T6577] netlink: 'syz.1.285': attribute type 2 has an invalid length.
[   99.573308][ T6577] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.285'.
[   99.576218][ T6577] nbd: must specify a device to reconfigure
[   99.806841][ T6596] pim6reg1: entered promiscuous mode
[   99.808594][ T6596] pim6reg1: entered allmulticast mode
[   99.921732][ T6606] netlink: 'syz.2.299': attribute type 46 has an invalid length.
[   99.926452][ T6606] netlink: 55 bytes leftover after parsing attributes in process `syz.2.299'.
[   99.981621][ T6610] warning: `syz.2.301' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  100.028625][ T6609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.300'.
[  100.093063][ T6615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.303'.
[  100.099550][ T6612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.302'.
[  100.243763][ T6619] netlink: 'syz.0.305': attribute type 1 has an invalid length.
[  100.246926][ T6619] netlink: 'syz.0.305': attribute type 4 has an invalid length.
[  100.387141][ T6623] : renamed from vlan0 (while UP)
[  101.789186][ T6675] netlink: 'syz.1.328': attribute type 21 has an invalid length.
[  101.893839][ T6677] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.329'.
[  101.900213][ T6681] netlink: 830 bytes leftover after parsing attributes in process `syz.1.331'.
[  102.203557][ T6699] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.339'.
[  102.585490][ T6723] netlink: 'syz.0.350': attribute type 2 has an invalid length.
[  102.595276][ T6723] netlink: 'syz.0.350': attribute type 8 has an invalid length.
[  102.601812][ T6723] netlink: 132 bytes leftover after parsing attributes in process `syz.0.350'.
[  102.684884][ T6728] tap0: tun_chr_ioctl cmd 35108
[  103.227712][ T6753] netlink: 60 bytes leftover after parsing attributes in process `syz.0.361'.
[  103.251458][ T6747] netlink: 60 bytes leftover after parsing attributes in process `syz.0.361'.
[  103.255315][ T6753] netlink: 60 bytes leftover after parsing attributes in process `syz.0.361'.
[  103.329699][ T6765] syz.1.368 uses obsolete (PF_INET,SOCK_PACKET)
[  103.468007][ T6771] @0: renamed from bond_slave_1 (while UP)
[  103.756075][ T6788] netlink: 'syz.2.380': attribute type 3 has an invalid length.
[  104.121430][ T5855] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4
[  104.445989][ T6805] netlink: 'syz.0.387': attribute type 1 has an invalid length.
[  104.557164][ T6811] netlink: 'syz.1.390': attribute type 21 has an invalid length.
[  104.797042][ T6824] netlink: del zone limit has 4 unknown bytes
[  104.801060][ T6818] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.985825][ T5855] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5
[  105.096714][ T6841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.401'.
[  105.493185][ T6861] netlink: 'syz.0.411': attribute type 11 has an invalid length.
[  105.493329][ T6863] netlink: 'syz.2.413': attribute type 1 has an invalid length.
[  105.496508][ T6861] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.411'.
[  105.541546][ T6860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.163674][ T5855] Bluetooth: hci0: command 0x0406 tx timeout
[  106.185654][ T6887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.424'.
[  106.188635][ T6887] netlink: 32 bytes leftover after parsing attributes in process `syz.1.424'.
[  106.291070][ T6892] netlink: 132 bytes leftover after parsing attributes in process `syz.2.426'.
[  106.459541][ T6899] delete_channel: no stack
[  106.536313][ T6908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.434'.
[  106.685400][ T6912] netlink: 'syz.1.436': attribute type 15 has an invalid length.
[  106.824190][ T6924] netlink: 'syz.0.441': attribute type 13 has an invalid length.
[  106.827906][ T6924] netlink: 160 bytes leftover after parsing attributes in process `syz.0.441'.
[  106.890267][ T6924] erspan0: refused to change device tx_queue_len
[  106.892954][ T6924] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  107.913817][ T6955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.455'.
[  107.917462][ T6955] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  107.970526][ T6957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.456'.
[  108.175977][   T54] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3
[  108.257243][ T6968] netlink: 'syz.0.460': attribute type 21 has an invalid length.
[  123.654920][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  123.661247][ T5855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  123.665701][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  123.671096][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  123.674840][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  124.657445][   T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  124.661845][   T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  124.665181][   T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  124.669217][   T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  124.673618][   T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  125.760328][   T54] Bluetooth: hci3: command tx timeout
[  126.720031][   T54] Bluetooth: hci4: command tx timeout
[  127.840055][   T54] Bluetooth: hci3: command tx timeout
[  128.805617][   T54] Bluetooth: hci4: command tx timeout
[  129.921038][   T54] Bluetooth: hci3: command tx timeout
[  130.880003][   T54] Bluetooth: hci4: command tx timeout
[  132.008579][   T54] Bluetooth: hci3: command tx timeout
[  132.960023][   T54] Bluetooth: hci4: command tx timeout
[  134.151626][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  134.154428][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  135.631735][ T5855] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  135.636383][ T5855] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  135.643416][ T5855] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  135.647314][ T5855] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  135.653499][ T5855] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  137.680251][   T54] Bluetooth: hci5: command tx timeout
[  139.759916][   T54] Bluetooth: hci5: command tx timeout
[  141.839944][   T54] Bluetooth: hci5: command tx timeout
[  143.920707][   T54] Bluetooth: hci5: command tx timeout
[  183.596659][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  183.603931][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  183.607304][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  183.611716][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  183.614896][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  184.604806][ T5855] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  184.608118][ T5855] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  184.611975][ T5855] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  184.615786][ T5855] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  184.619199][ T5855] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  185.679953][ T5855] Bluetooth: hci0: command tx timeout
[  186.640132][ T5855] Bluetooth: hci6: command tx timeout
[  187.759964][ T5855] Bluetooth: hci0: command tx timeout
[  188.719956][ T5855] Bluetooth: hci6: command tx timeout
[  189.840005][ T5855] Bluetooth: hci0: command tx timeout
[  190.800004][ T5855] Bluetooth: hci6: command tx timeout
[  191.043290][ T5851] Bluetooth: hci2: command 0x0406 tx timeout
[  191.045732][ T5855] Bluetooth: hci1: command 0x0406 tx timeout
[  191.999936][   T54] Bluetooth: hci0: command tx timeout
[  192.935895][   T54] Bluetooth: hci6: command tx timeout
[  194.954777][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  194.957356][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  195.582706][   T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  195.586632][   T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  195.589990][   T54] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  195.593421][   T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  195.596303][   T54] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  197.679986][ T5235] Bluetooth: hci7: command tx timeout
[  199.760109][ T5235] Bluetooth: hci7: command tx timeout
[  201.840132][ T5235] Bluetooth: hci7: command tx timeout
[  204.039927][ T5235] Bluetooth: hci7: command tx timeout
[  243.811324][   T54] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  243.815961][   T54] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  243.819222][   T54] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  243.823170][   T54] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  243.826382][   T54] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  244.836628][ T5235] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  244.841365][ T5235] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  244.844803][ T5235] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  244.848718][ T5235] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  244.853012][ T5235] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  245.840202][ T5855] Bluetooth: hci8: command tx timeout
[  246.879933][ T5855] Bluetooth: hci9: command tx timeout
[  247.443297][ T5855] Bluetooth: hci4: command 0x0406 tx timeout
[  247.445742][ T5855] Bluetooth: hci3: command 0x0406 tx timeout
[  247.919996][ T5851] Bluetooth: hci8: command tx timeout
[  248.960112][ T5851] Bluetooth: hci9: command tx timeout
[  250.000393][ T5851] Bluetooth: hci8: command tx timeout
[  251.040105][ T5851] Bluetooth: hci9: command tx timeout
[  252.080008][ T5851] Bluetooth: hci8: command tx timeout
[  253.119955][ T5851] Bluetooth: hci9: command tx timeout
[  255.524048][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  255.526881][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  256.024806][ T5855] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  256.028783][ T5855] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  256.032544][ T5855] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  256.041508][ T5855] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  256.045264][ T5855] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  262.722641][ T5851] Bluetooth: hci5: command 0x0406 tx timeout
[  271.659815][    C0] sched: DL replenish lagged too much
[  272.678319][ T5849] Bluetooth: hci10: command tx timeout
[  274.720082][ T5849] Bluetooth: hci10: command tx timeout
[  276.800025][ T5849] Bluetooth: hci10: command tx timeout
[  278.880056][ T5849] Bluetooth: hci10: command tx timeout
[  283.683576][   T34] INFO: task syz-executor:7001 blocked for more than 143 seconds.
[  283.686712][   T34]       Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  283.713841][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  283.717370][   T34] task:syz-executor    state:D stack:26920 pid:7001  tgid:7001  ppid:1      task_flags:0x400140 flags:0x00004004
[  283.733334][   T34] Call Trace:
[  283.734863][   T34]  <TASK>
[  283.736143][   T34]  __schedule+0x1798/0x4cc0
[  283.738122][   T34]  ? __lock_acquire+0xab9/0xd20
[  283.750128][   T34]  ? __lock_acquire+0xab9/0xd20
[  283.751757][   T34]  ? __pfx___schedule+0x10/0x10
[  283.753334][   T34]  ? schedule+0x91/0x360
[  283.754770][   T34]  schedule+0x165/0x360
[  283.756132][   T34]  schedule_preempt_disabled+0x13/0x30
[  283.757967][   T34]  __mutex_lock+0x7e6/0x1350
[  283.759563][   T34]  ? __mutex_lock+0x5bb/0x1350
[  283.799909][   T34]  ? inet_rtm_newaddr+0x3b0/0x18b0
[  283.801715][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  283.803847][   T34]  ? __nla_parse+0x40/0x60
[  283.805747][   T34]  inet_rtm_newaddr+0x3b0/0x18b0
[  283.807842][   T34]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  283.829906][   T34]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  283.831961][   T34]  rtnetlink_rcv_msg+0x7cf/0xb70
[  283.834037][   T34]  ? __lock_acquire+0xab9/0xd20
[  283.840440][   T34]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  283.842590][   T34]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  283.844784][   T34]  netlink_rcv_skb+0x208/0x470
[  283.846693][   T34]  ? __lock_acquire+0xab9/0xd20
[  283.848641][   T34]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  283.860648][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  283.862861][   T34]  ? netlink_deliver_tap+0x2e/0x1b0
[  283.864594][   T34]  netlink_unicast+0x82f/0x9e0
[  283.866278][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  283.868407][   T34]  ? netlink_sendmsg+0x642/0xb30
[  283.888986][   T34]  ? skb_put+0x11b/0x210
[  283.891410][   T34]  netlink_sendmsg+0x805/0xb30
[  283.893395][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  283.895491][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  283.897483][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  283.899603][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  283.909831][   T34]  __sock_sendmsg+0x21c/0x270
[  283.911384][   T34]  __sys_sendto+0x3bd/0x520
[  283.912925][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  283.914727][   T34]  ? count_memcg_event_mm+0x21/0x260
[  283.916663][   T34]  ? exc_page_fault+0x76/0xf0
[  283.918275][   T34]  ? do_user_addr_fault+0xc8a/0x1390
[  283.934448][   T34]  __x64_sys_sendto+0xde/0x100
[  283.936130][   T34]  do_syscall_64+0xfa/0x3b0
[  283.938532][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  283.940784][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.942744][   T34]  ? exc_page_fault+0x9f/0xf0
[  283.944505][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.946387][   T34] RIP: 0033:0x7f0102790a3c
[  283.947884][   T34] RSP: 002b:00007ffecb3f1640 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  283.952542][   T34] RAX: ffffffffffffffda RBX: 00007f0103504620 RCX: 00007f0102790a3c
[  283.955475][   T34] RDX: 0000000000000028 RSI: 00007f0103504670 RDI: 0000000000000003
[  283.958001][   T34] RBP: 0000000000000000 R08: 00007ffecb3f1694 R09: 000000000000000c
[  283.961262][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  283.963869][   T34] R13: 0000000000000000 R14: 00007f0103504670 R15: 0000000000000000
[  283.966516][   T34]  </TASK>
[  283.967688][   T34] INFO: task syz-executor:7007 blocked for more than 143 seconds.
[  283.971091][   T34]       Not tainted syzkaller #0
[  283.972707][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  283.975437][   T34] task:syz-executor    state:D stack:26920 pid:7007  tgid:7007  ppid:1      task_flags:0x400140 flags:0x00004004
[  283.979054][   T34] Call Trace:
[  283.980952][   T34]  <TASK>
[  283.982160][   T34]  __schedule+0x1798/0x4cc0
[  283.983897][   T34]  ? __lock_acquire+0xab9/0xd20
[  283.985672][   T34]  ? __lock_acquire+0xab9/0xd20
[  283.987498][   T34]  ? __pfx___schedule+0x10/0x10
[  283.989328][   T34]  ? schedule+0x91/0x360
[  283.992048][   T34]  schedule+0x165/0x360
[  283.993724][   T34]  schedule_preempt_disabled+0x13/0x30
[  283.995867][   T34]  __mutex_lock+0x7e6/0x1350
[  283.997755][   T34]  ? __mutex_lock+0x5bb/0x1350
[  283.999708][   T34]  ? inet_rtm_newaddr+0x3b0/0x18b0
[  284.003091][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  284.005148][   T34]  ? __nla_parse+0x40/0x60
[  284.006903][   T34]  inet_rtm_newaddr+0x3b0/0x18b0
[  284.008876][   T34]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  284.011785][   T34]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  284.013997][   T34]  rtnetlink_rcv_msg+0x7cf/0xb70
[  284.016000][   T34]  ? __lock_acquire+0xab9/0xd20
[  284.018020][   T34]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  284.020776][   T34]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  284.022790][   T34]  netlink_rcv_skb+0x208/0x470
[  284.024511][   T34]  ? __lock_acquire+0xab9/0xd20
[  284.026507][   T34]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  284.028686][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  284.031797][   T34]  ? netlink_deliver_tap+0x2e/0x1b0
[  284.033919][   T34]  netlink_unicast+0x82f/0x9e0
[  284.035822][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  284.037956][   T34]  ? netlink_sendmsg+0x642/0xb30
[  284.044493][   T34]  ? skb_put+0x11b/0x210
[  284.046234][   T34]  netlink_sendmsg+0x805/0xb30
[  284.048142][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  284.050934][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  284.052819][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  284.054643][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  284.056380][   T34]  __sock_sendmsg+0x21c/0x270
[  284.058221][   T34]  __sys_sendto+0x3bd/0x520
[  284.060766][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  284.062403][   T34]  ? count_memcg_event_mm+0x21/0x260
[  284.064016][   T34]  ? exc_page_fault+0x76/0xf0
[  284.065500][   T34]  ? do_user_addr_fault+0xc8a/0x1390
[  284.067178][   T34]  __x64_sys_sendto+0xde/0x100
[  284.068725][   T34]  do_syscall_64+0xfa/0x3b0
[  284.071191][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  284.072903][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.074815][   T34]  ? exc_page_fault+0x9f/0xf0
[  284.076303][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.078338][   T34] RIP: 0033:0x7fc68bd90a3c
[  284.081132][   T34] RSP: 002b:00007ffc19a56f30 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  284.083794][   T34] RAX: ffffffffffffffda RBX: 00007fc68cb04620 RCX: 00007fc68bd90a3c
[  284.086288][   T34] RDX: 0000000000000028 RSI: 00007fc68cb04670 RDI: 0000000000000003
[  284.088920][   T34] RBP: 0000000000000000 R08: 00007ffc19a56f84 R09: 000000000000000c
[  284.092588][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  284.095529][   T34] R13: 0000000000000000 R14: 00007fc68cb04670 R15: 0000000000000000
[  284.098697][   T34]  </TASK>
[  284.101070][   T34] INFO: task syz-executor:7010 blocked for more than 143 seconds.
[  284.103632][   T34]       Not tainted syzkaller #0
[  284.105152][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  284.108008][   T34] task:syz-executor    state:D stack:26920 pid:7010  tgid:7010  ppid:1      task_flags:0x400140 flags:0x00004004
[  284.112168][   T34] Call Trace:
[  284.113292][   T34]  <TASK>
[  284.114324][   T34]  __schedule+0x1798/0x4cc0
[  284.115843][   T34]  ? __lock_acquire+0xab9/0xd20
[  284.117447][   T34]  ? __lock_acquire+0xab9/0xd20
[  284.119007][   T34]  ? __pfx___schedule+0x10/0x10
[  284.121326][   T34]  ? schedule+0x91/0x360
[  284.122781][   T34]  schedule+0x165/0x360
[  284.124289][   T34]  schedule_preempt_disabled+0x13/0x30
[  284.125889][   T34]  __mutex_lock+0x7e6/0x1350
[  284.127736][   T34]  ? __mutex_lock+0x5bb/0x1350
[  284.131122][   T34]  ? inet_rtm_newaddr+0x3b0/0x18b0
[  284.133185][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  284.135225][   T34]  ? __nla_parse+0x40/0x60
[  284.137034][   T34]  inet_rtm_newaddr+0x3b0/0x18b0
[  284.139060][   T34]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  284.144520][   T34]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  284.146695][   T34]  rtnetlink_rcv_msg+0x7cf/0xb70
[  284.148704][   T34]  ? __lock_acquire+0xab9/0xd20
[  284.155176][   T34]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  284.157244][   T34]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  284.159417][   T34]  netlink_rcv_skb+0x208/0x470
[  284.162085][   T34]  ? __lock_acquire+0xab9/0xd20
[  284.164092][   T34]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  284.166249][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  284.168463][   T34]  ? netlink_deliver_tap+0x2e/0x1b0
[  284.171063][   T34]  netlink_unicast+0x82f/0x9e0
[  284.172982][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  284.175034][   T34]  ? netlink_sendmsg+0x642/0xb30
[  284.177025][   T34]  ? skb_put+0x11b/0x210
[  284.178740][   T34]  netlink_sendmsg+0x805/0xb30
[  284.181696][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  284.183455][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  284.184947][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  284.186568][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  284.188109][   T34]  __sock_sendmsg+0x21c/0x270
[  284.190614][   T34]  __sys_sendto+0x3bd/0x520
[  284.192103][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  284.193662][   T34]  ? count_memcg_event_mm+0x21/0x260
[  284.195179][   T34]  ? exc_page_fault+0x76/0xf0
[  284.196833][   T34]  ? do_user_addr_fault+0xc8a/0x1390
[  284.198754][   T34]  __x64_sys_sendto+0xde/0x100
[  284.201233][   T34]  do_syscall_64+0xfa/0x3b0
[  284.202655][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  284.204179][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.206015][   T34]  ? exc_page_fault+0x9f/0xf0
[  284.207567][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.209615][   T34] RIP: 0033:0x7fdcc9790a3c
[  284.211789][   T34] RSP: 002b:00007fff08a7cba0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  284.214757][   T34] RAX: ffffffffffffffda RBX: 00007fdcca504620 RCX: 00007fdcc9790a3c
[  284.217303][   T34] RDX: 0000000000000028 RSI: 00007fdcca504670 RDI: 0000000000000003
[  284.220729][   T34] RBP: 0000000000000000 R08: 00007fff08a7cbf4 R09: 000000000000000c
[  284.223081][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  284.225389][   T34] R13: 0000000000000000 R14: 00007fdcca504670 R15: 0000000000000000
[  284.227644][   T34]  </TASK>
[  284.228827][   T34] 
[  284.228827][   T34] Showing all locks held in the system:
[  284.232539][   T34] 1 lock held by khungtaskd/34:
[  284.234054][   T34]  #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  284.237435][   T34] 3 locks held by kworker/0:2/1270:
[  284.239530][   T34]  #0: ffff88801a482148 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  284.244133][   T34]  #1: ffffc90007847bc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  284.248825][   T34]  #2: ffffffff8f53a148 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf30
[  284.253152][   T34] 2 locks held by getty/5673:
[  284.254684][   T34]  #0: ffff888026f280a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  284.257661][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  284.263840][   T34] 3 locks held by kworker/0:3/5775:
[  284.265525][   T34]  #0: ffff88801a482148 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  284.270676][   T34]  #1: ffffc9000312fbc0 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  284.274507][   T34]  #2: ffffffff8f53a148 (rtnl_mutex){+.+.}-{4:4}, at: crda_timeout_work+0x15/0x50
[  284.277455][   T34] 1 lock held by syz-executor/5846:
[  284.279106][   T34]  #0: ffffffff8f53a148 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  284.283249][   T34] 3 locks held by kworker/u8:3/5877:
[  284.285441][   T34]  #0: ffff888027118948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  284.290455][   T34]  #1: ffffc900034efbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  284.295022][   T34]  #2: ffffffff8f53a148 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  284.298022][   T34] 5 locks held by syz.0.471/6992:
[  284.299583][   T34] 2 locks held by syz.1.473/6998:
[  284.301816][   T34]  #0: ffffffff8f53a148 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  284.304693][   T34]  #1: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  284.308196][   T34] 1 lock held by syz-executor/7001:
[  284.310816][   T34]  #0: ffffffff8f53a148 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  284.314079][   T34] 1 lock held by syz-executor/7007:
[  284.315961][   T34]  #0: ffffffff8f53a148 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  284.318911][   T34] 1 lock held by syz-executor/7010:
[  284.321365][   T34]  #0: ffffffff8f53a148 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  284.324299][   T34] 1 lock held by syz-executor/7017:
[  284.325913][   T34]  #0: ffffffff8f53a148 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  284.328747][   T34] 1 lock held by syz-executor/7021:
[  284.330941][   T34]  #0: ffffffff8f53a148 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  284.334586][   T34] 2 locks held by kworker/0:6/7023:
[  284.336609][   T34] 1 lock held by syz-executor/7026:
[  284.338371][   T34]  #0: ffffffff8f53a148 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  284.341858][   T34] 1 lock held by syz-executor/7036:
[  284.343526][   T34]  #0: ffffffff8f53a148 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  284.346568][   T34] 1 lock held by syz-executor/7042:
[  284.348853][   T34]  #0: ffffffff8f53a148 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  284.352398][   T34] 1 lock held by syz-executor/7045:
[  284.354010][   T34]  #0: ffffffff8f53a148 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  284.357669][   T34] 
[  284.358650][   T34] =============================================
[  284.358650][   T34] 
[  284.362488][   T34] NMI backtrace for cpu 1
[  284.362518][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  284.362535][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  284.362541][   T34] Call Trace:
[  284.362545][   T34]  <TASK>
[  284.362549][   T34]  dump_stack_lvl+0x189/0x250
[  284.362565][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  284.362575][   T34]  ? __pfx__printk+0x10/0x10
[  284.362593][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  284.362607][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  284.362620][   T34]  ? __pfx__printk+0x10/0x10
[  284.362632][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  284.362648][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  284.362661][   T34]  watchdog+0xf93/0xfe0
[  284.362677][   T34]  ? watchdog+0x1de/0xfe0
[  284.362691][   T34]  kthread+0x711/0x8a0
[  284.362703][   T34]  ? __pfx_watchdog+0x10/0x10
[  284.362714][   T34]  ? __pfx_kthread+0x10/0x10
[  284.362724][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  284.362738][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  284.362746][   T34]  ? __pfx_kthread+0x10/0x10
[  284.362757][   T34]  ret_from_fork+0x439/0x7d0
[  284.362771][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  284.362783][   T34]  ? __switch_to_asm+0x39/0x70
[  284.362794][   T34]  ? __switch_to_asm+0x33/0x70
[  284.362803][   T34]  ? __pfx_kthread+0x10/0x10
[  284.362814][   T34]  ret_from_fork_asm+0x1a/0x30
[  284.362831][   T34]  </TASK>
[  284.362835][   T34] Sending NMI from CPU 1 to CPUs 0:
[  284.411975][    C0] NMI backtrace for cpu 0
[  284.411992][    C0] CPU: 0 UID: 0 PID: 6992 Comm: syz.0.471 Not tainted syzkaller #0 PREEMPT(full) 
[  284.412009][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  284.412015][    C0] RIP: 0010:native_apic_msr_write+0x39/0x50
[  284.412033][    C0] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 cc cc cc cc cc f3 0f 1e fa 89 f6 31 d2 e9 52 ef 8e 03 66
[  284.412040][    C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00000046
[  284.412048][    C0] RAX: 000000000000004a RBX: ffff88804b023900 RCX: 0000000000000838
[  284.412054][    C0] RDX: 0000000000000000 RSI: 000000000000004a RDI: 0000000000000838
[  284.412059][    C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff81ae150e
[  284.412063][    C0] R10: 0000000000000003 R11: ffffffff81704490 R12: 00000000100069b2
[  284.412068][    C0] R13: dffffc0000000000 R14: 000000000000004a R15: 0000000000000020
[  284.412073][    C0] FS:  00007f0c46ff66c0(0000) GS:ffff8880b8613000(0000) knlGS:0000000000000000
[  284.412080][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  284.412085][    C0] CR2: 00005622d6958680 CR3: 0000000118542000 CR4: 00000000000006f0
[  284.412111][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  284.412117][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  284.412121][    C0] Call Trace:
[  284.412125][    C0]  <IRQ>
[  284.412129][    C0]  lapic_next_event+0x11/0x20
[  284.412140][    C0]  clockevents_program_event+0x1cf/0x360
[  284.412156][    C0]  hrtimer_interrupt+0x620/0xaa0
[  284.412170][    C0]  __sysvec_apic_timer_interrupt+0x10b/0x410
[  284.412180][    C0]  sysvec_apic_timer_interrupt+0x52/0xc0
[  284.412189][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  284.412199][    C0] RIP: 0010:wake_up_bit+0xc7/0x130
[  284.412210][    C0] Code: 24 30 00 00 00 00 4b 8d 1c a4 48 81 c3 c0 c1 e0 8d 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 ac 8d 88 00 48 8b 03 <48> 39 d8 74 21 4c 8d 44 24 20 4b 8d 3c a4 48 81 c7 80 c1 e0 8d be
[  284.412216][    C0] RSP: 0018:ffffc90000007c80 EFLAGS: 00000246
[  284.412223][    C0] RAX: ffffffff8de0f8c0 RBX: ffffffff8de0f8c0 RCX: ffffffff81851916
[  284.412228][    C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffe2200e1ec58200
[  284.412233][    C0] RBP: ffffc90000007d30 R08: ffff8880387b160f R09: 1ffff110070f62c1
[  284.412239][    C0] R10: dffffc0000000000 R11: ffffed10070f62c2 R12: 0000000000000b00
[  284.412244][    C0] R13: 0000000000000006 R14: dffffc0000000000 R15: 1ffff92000000f90
[  284.412251][    C0]  ? tasklet_action_common+0x1e6/0x580
[  284.412262][    C0]  ? __pfx_wake_up_bit+0x10/0x10
[  284.412273][    C0]  ? tasklet_action_common+0xfc/0x580
[  284.412282][    C0]  tasklet_action_common+0x2ea/0x580
[  284.412291][    C0]  ? __pfx_tasklet_action_common+0x10/0x10
[  284.412300][    C0]  ? __pfx_tasklet_action+0x10/0x10
[  284.412308][    C0]  ? workqueue_softirq_action+0xd4/0x150
[  284.412358][    C0]  handle_softirqs+0x286/0x870
[  284.412366][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  284.412374][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  284.412383][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  284.412394][    C0]  __irq_exit_rcu+0xca/0x1f0
[  284.412401][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  284.412410][    C0]  irq_exit_rcu+0x9/0x30
[  284.412416][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  284.412424][    C0]  </IRQ>
[  284.412426][    C0]  <TASK>
[  284.412429][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  284.412437][    C0] RIP: 0010:__schedule+0x2f5/0x4cc0
[  284.412445][    C0] Code: 89 7c 24 30 0f 1f 44 00 00 48 c7 c0 e0 90 a3 8f 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 0f 85 8c 17 00 00 <83> 3d 34 af 27 04 02 0f 84 b0 15 00 00 0f 1f 44 00 00 49 8d 84 24
[  284.412451][    C0] RSP: 0018:ffffc90004fbed40 EFLAGS: 00000246
[  284.412457][    C0] RAX: 0000000000000000 RBX: ffffc90004fb8000 RCX: dffffc0000000000
[  284.412463][    C0] RDX: 0000000000000000 RSI: ffffffff8dba95f5 RDI: ffffffff8be33c00
[  284.412467][    C0] RBP: ffffc90004fbef50 R08: ffffffff8fa38f37 R09: 1ffffffff1f471e6
[  284.412473][    C0] R10: dffffc0000000000 R11: fffffbfff1f471e7 R12: ffff8880b8613000
[  284.412478][    C0] R13: 0000000000000001 R14: ffff8881075c3980 R15: 1ffff11009607551
[  284.412494][    C0]  ? __pfx___schedule+0x10/0x10
[  284.412500][    C0]  ? irqentry_exit+0x74/0x90
[  284.412507][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  284.412519][    C0]  preempt_schedule_irq+0xb5/0x150
[  284.412527][    C0]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  284.412536][    C0]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  284.412545][    C0]  irqentry_exit+0x6f/0x90
[  284.412552][    C0]  asm_sysvec_call_function_single+0x1a/0x20
[  284.412560][    C0] RIP: 0010:free_tail_page_prepare+0x28b/0x4f0
[  284.412572][    C0] Code: 42 80 3c 28 00 74 08 4c 89 e7 e8 a0 e3 0d 00 49 c7 c7 c0 ad 96 8b 48 b8 00 04 00 00 00 00 ad de 49 39 04 24 75 31 4c 8d 73 08 <4d> 89 f4 49 c1 ec 03 43 80 3c 2c 00 74 08 4c 89 f7 e8 6f e3 0d 00
[  284.412577][    C0] RSP: 0018:ffffc90004fbf0c0 EFLAGS: 00000246
[  284.412583][    C0] RAX: dead000000000400 RBX: ffffea0004c0b900 RCX: dffffc0000000000
[  284.412588][    C0] RDX: 0000000000000000 RSI: ffffea0004c0b900 RDI: ffffea0004c0b800
[  284.412593][    C0] RBP: 0000000000000000 R08: ffffea0004c0b8f7 R09: 1ffffd400098171e
[  284.412598][    C0] R10: dffffc0000000000 R11: fffff9400098171f R12: ffffea0004c0b918
[  284.412603][    C0] R13: dffffc0000000000 R14: ffffea0004c0b908 R15: ffffffff8b96adc0
[  284.412614][    C0]  __free_frozen_pages+0x7b7/0xd30
[  284.412629][    C0]  __put_partials+0x156/0x1a0
[  284.412643][    C0]  put_cpu_partial+0x17c/0x250
[  284.412654][    C0]  ? put_cpu_partial+0x6d/0x250
[  284.412666][    C0]  __slab_free+0x2d5/0x3c0
[  284.412680][    C0]  ? __phys_addr+0xd3/0x180
[  284.412698][    C0]  qlist_free_all+0x97/0x140
[  284.412716][    C0]  kasan_quarantine_reduce+0x148/0x160
[  284.412735][    C0]  __kasan_slab_alloc+0x22/0x80
[  284.412753][    C0]  __kmalloc_cache_node_noprof+0x1c0/0x3d0
[  284.412773][    C0]  ? __get_vm_area_node+0x13f/0x300
[  284.412792][    C0]  __get_vm_area_node+0x13f/0x300
[  284.412804][    C0]  __vmalloc_node_range_noprof+0x301/0x12f0
[  284.412816][    C0]  ? bpf_check+0x1a5/0x1d2d0
[  284.412826][    C0]  ? irqentry_exit+0x74/0x90
[  284.412834][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  284.412846][    C0]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  284.412858][    C0]  ? bpf_check+0x1a5/0x1d2d0
[  284.412867][    C0]  vzalloc_noprof+0xb2/0xf0
[  284.412878][    C0]  ? bpf_check+0x1a5/0x1d2d0
[  284.412885][    C0]  bpf_check+0x1a5/0x1d2d0
[  284.412894][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  284.412906][    C0]  ? finish_task_switch+0x32b/0x950
[  284.412918][    C0]  ? rcu_is_watching+0x15/0xb0
[  284.412925][    C0]  ? trace_sched_exit_tp+0x36/0x110
[  284.412935][    C0]  ? __schedule+0x17ae/0x4cc0
[  284.412950][    C0]  ? __lock_acquire+0xab9/0xd20
[  284.412964][    C0]  ? __pfx_bpf_check+0x10/0x10
[  284.412971][    C0]  ? ktime_get_with_offset+0x8c/0x2a0
[  284.412984][    C0]  ? irqentry_exit+0x74/0x90
[  284.412991][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  284.413000][    C0]  ? bpf_prog_load+0x12c4/0x1930
[  284.413014][    C0]  bpf_prog_load+0x1318/0x1930
[  284.413026][    C0]  ? __pfx_bpf_prog_load+0x10/0x10
[  284.413036][    C0]  ? irqentry_exit+0x74/0x90
[  284.413047][    C0]  ? rep_movs_alternative+0x54/0x90
[  284.413057][    C0]  ? bpf_lsm_bpf+0x9/0x20
[  284.413068][    C0]  ? security_bpf+0x7e/0x300
[  284.413081][    C0]  __sys_bpf+0x528/0x870
[  284.413090][    C0]  ? __pfx___sys_bpf+0x10/0x10
[  284.413105][    C0]  ? sched_clock_cpu+0x74/0x430
[  284.413124][    C0]  __x64_sys_bpf+0x7c/0x90
[  284.413132][    C0]  do_syscall_64+0xfa/0x3b0
[  284.413142][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.413149][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  284.413158][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.413166][    C0] RIP: 0033:0x7f0c48d8eba9
[  284.413175][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  284.413182][    C0] RSP: 002b:00007f0c46ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  284.413191][    C0] RAX: ffffffffffffffda RBX: 00007f0c48fd5fa0 RCX: 00007f0c48d8eba9
[  284.413196][    C0] RDX: 0000000000000094 RSI: 0000200000000580 RDI: 0000000000000005
[  284.413201][    C0] RBP: 00007f0c48e11e19 R08: 0000000000000000 R09: 0000000000000000
[  284.413206][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  284.413210][    C0] R13: 00007f0c48fd6038 R14: 00007f0c48fd5fa0 R15: 00007fffddae3038
[  284.413219][    C0]  </TASK>
[  284.774655][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  284.776861][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  284.779775][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  284.782941][   T34] Call Trace:
[  284.784019][   T34]  <TASK>
[  284.784966][   T34]  dump_stack_lvl+0x99/0x250
[  284.786367][   T34]  ? __asan_memcpy+0x40/0x70
[  284.787766][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  284.789315][   T34]  ? __pfx__printk+0x10/0x10
[  284.790892][   T34]  vpanic+0x281/0x750
[  284.792405][   T34]  ? __pfx_vpanic+0x10/0x10
[  284.794029][   T34]  ? preempt_schedule+0xae/0xc0
[  284.795613][   T34]  ? preempt_schedule_common+0x83/0xd0
[  284.797539][   T34]  panic+0xb9/0xc0
[  284.798850][   T34]  ? __pfx_panic+0x10/0x10
[  284.800454][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  284.802358][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  284.804766][   T34]  watchdog+0xfd2/0xfe0
[  284.806447][   T34]  ? watchdog+0x1de/0xfe0
[  284.808121][   T34]  kthread+0x711/0x8a0
[  284.809577][   T34]  ? __pfx_watchdog+0x10/0x10
[  284.811435][   T34]  ? __pfx_kthread+0x10/0x10
[  284.813264][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  284.815290][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  284.817123][   T34]  ? __pfx_kthread+0x10/0x10
[  284.818620][   T34]  ret_from_fork+0x439/0x7d0
[  284.820414][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  284.822330][   T34]  ? __switch_to_asm+0x39/0x70
[  284.823909][   T34]  ? __switch_to_asm+0x33/0x70
[  284.825806][   T34]  ? __pfx_kthread+0x10/0x10
[  284.827676][   T34]  ret_from_fork_asm+0x1a/0x30
[  284.829620][   T34]  </TASK>
[  284.831339][   T34] Kernel Offset: disabled
[  284.833008][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:32:42  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000004f RBX=ffff88804b023900 RCX=0000000000000838 RDX=0000000000000000
RSI=000000000000004f RDI=0000000000000838 RBP=0000000000000000 RSP=ffffc90000006988
R8 =0000000000000000 R9 =ffffffff81ae150e R10=0000000000000003 R11=ffffffff81704490
R12=00000000100069b2 R13=dffffc0000000000 R14=000000000000004f R15=0000000000000020
RIP=ffffffff81717179 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f0c46ff66c0 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005622d6958680 CR3=0000000118542000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000ff0000000000 XMM03=0000ff0000000000 00000000000000ff
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff817495cb RBX=ffff888104a56680 RCX=ffff888022e59cc0 RDX=0000000000000007
RSI=ffffffff8d9b9fdf RDI=ffff888104a56680 RBP=ffff888104a56680 RSP=ffffc9000249f6f8
R8 =ffffffff8fa38f37 R9 =1ffffffff1f471e6 R10=dffffc0000000000 R11=fffffbfff1f471e7
R12=ffffea0000000000 R13=0000000000000000 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff81bfbf11 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc6e9536380 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc0734d075e CR3=000000010baa8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
