last executing test programs:

19.570419056s ago: executing program 2 (id=243):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800020, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x6, 0x4, &(0x7f0000000040), 0x19)

19.457464137s ago: executing program 2 (id=247):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0xfffffffb}, 0x48)

19.368005671s ago: executing program 2 (id=249):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x301c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)

19.366284585s ago: executing program 0 (id=252):
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0xffffffffffffffff, 0x2f4}, 0xc)

19.28476741s ago: executing program 2 (id=253):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="b4000000800000001c10000000000000a500ffffff1dd6e69500000000000000e33ffe49fb92182c3b5b8c9db21f920abbda78cc57dea9dc8050492b3af1d6a2d083a0e6400dc2a94e32c310e9c0b3956f3cd3cbd5593df617314dcebc690d833f3007e7bac43d7319bfa8f7bbe408d291c5779802b0ffd32b4a9cec00bb8b9cd88cc9977c73fac7a050502464af257d3739ed9b1743775ab4cc1b6a628d3da7a75b3a5123565b2c15643dc19992b4a186ecdafd025d1bc148a732968f1f47831e2525646aff0a07317a1385bcb7afb9000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x18d, &(0x7f000000cf3d)=""/195}, 0x48)

19.284597622s ago: executing program 0 (id=254):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/14, 0xe}, 0x2)

19.284181655s ago: executing program 2 (id=256):
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000100)={0xa}, 0x8)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000280), 0x9)
r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000c40), 0x12)
socketpair(0x0, 0x0, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x6, 0x4, 0x4, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r4], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_subtree(r6, &(0x7f0000000140), 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_procs(r7, 0x0, 0x2, 0x0)
write$cgroup_pid(r8, &(0x7f00000001c0), 0x12)

19.022018446s ago: executing program 1 (id=260):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, @perf_config_ext={0x3}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x11, 0x2, 0x300)
socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4)

18.919082554s ago: executing program 1 (id=261):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r1, 0x0, 0x0}, 0x20)

18.918952839s ago: executing program 1 (id=262):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x6, 0xffff, 0x1000}, 0x48)

18.859034124s ago: executing program 0 (id=263):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)
close(0x3)
close(0x4)

18.858875266s ago: executing program 1 (id=264):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8a06, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x4108, 0x3, 0x0, 0x3, 0x7, 0xffffffff, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x18)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000850000002300000095"], &(0x7f0000000040)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96')
sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='k', 0xffffffe2}, {&(0x7f0000000140)="ce15fc9dc237ed5b37773a15b2f2615b0230a382c5bd51f04ff7e6c1f67c42c528244c3436e3d42cd667901a878ce7a4ebb5c55bd9c6f14079c1afebfbd8107a4a469b59ae1543bdc3085d6a10876755db8093b364"}, {&(0x7f0000000040)="fe07e4ad9a397dadc913c79649675cd17df8bf86309a"}, {&(0x7f00000001c0)}], 0x1, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x4000081)

18.245658847s ago: executing program 2 (id=265):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f0000000880)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x01\x00\x00\x00k\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\a\x00\x00\x00\x00\x00\x00\x00V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xc3\xd0\x00\x9f\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc8<s,\xb023Z{\x9f\xc2\x94+e?\x87\x95\x8e\r\t\x0er\x92\xe2\t\xc4S\xd4\xd2\x87.&`\x95\'=0\r\xd2n\xf5\xcd\x9b\x15Oo\xd8Nj0\xe2\xe5A\xb2\xc3\xf7\xc8\xe7 \"+\xd6\x9e\x18\xec\xb7H\xf9\vd\xebE\x9dtI\xe5\xb5\x8e3\x19<\xdeS\xf4\xe6\xba\x0er\xfc]\xcbd@\xe8R#(u\xe1\x9b\xb7\xd5\x82\xab;\xdb\xa2\x9e\xe8W;\x86\x89\x99\xa1\x99\x1b\xbd\xaf\x11\xcf\x1d\xb5n\xe3&\x1b Z|\x18\n/\xe4\x83\xb5\xdd\xed\xd8\xba\xe8\x8d{@\xd1\x00\x00\x00\x00\x00\xff\\\x89\xc4\xbe\xb7\xc3\xe4K|\xeaV\f\xc6\x95\xf0\xe9\xfd\xdb\xd1 \v\xf3\xa2\x0f\x0e\xdb\x9b\x00\xda\x826\xc8/v.0\xa1w\xbb%\x88\xee\x80\x15M\xae\x10f\xc5`\xa1\xb3\"\xdf.\xab')
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00')
write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x10)
r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa4706, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c, 0x2, @perf_config_ext={0x3, 0x98fa}, 0x320, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4)
openat$cgroup_devices(r2, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x5, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x48840)
r4 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x6f, 0x1, 0xfc, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x13, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x4)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00@\x00'/28], 0x50)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r6 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r6, 0x29, 0x38, &(0x7f0000000100), 0x120)

17.976742526s ago: executing program 0 (id=266):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xcb}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)

16.679697706s ago: executing program 0 (id=267):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000069000010000000004000050018010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100fef7ffffffb702000008000000b703000064000000850000001000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0xfcc, &(0x7f0000001e00)=""/4044, 0x100, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbd}, 0x94)

16.679378147s ago: executing program 0 (id=268):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x4, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20)

16.664047731s ago: executing program 1 (id=269):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38)

15.740239238s ago: executing program 1 (id=270):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r0, 0x0, 0x9}, 0x18)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000800000000000003000000850000002c00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x300, 0x4b, 0x0, &(0x7f0000000340), 0x0, 0x1108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

3.00824653s ago: executing program 32 (id=265):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f0000000880)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x01\x00\x00\x00k\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\a\x00\x00\x00\x00\x00\x00\x00V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xc3\xd0\x00\x9f\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc8<s,\xb023Z{\x9f\xc2\x94+e?\x87\x95\x8e\r\t\x0er\x92\xe2\t\xc4S\xd4\xd2\x87.&`\x95\'=0\r\xd2n\xf5\xcd\x9b\x15Oo\xd8Nj0\xe2\xe5A\xb2\xc3\xf7\xc8\xe7 \"+\xd6\x9e\x18\xec\xb7H\xf9\vd\xebE\x9dtI\xe5\xb5\x8e3\x19<\xdeS\xf4\xe6\xba\x0er\xfc]\xcbd@\xe8R#(u\xe1\x9b\xb7\xd5\x82\xab;\xdb\xa2\x9e\xe8W;\x86\x89\x99\xa1\x99\x1b\xbd\xaf\x11\xcf\x1d\xb5n\xe3&\x1b Z|\x18\n/\xe4\x83\xb5\xdd\xed\xd8\xba\xe8\x8d{@\xd1\x00\x00\x00\x00\x00\xff\\\x89\xc4\xbe\xb7\xc3\xe4K|\xeaV\f\xc6\x95\xf0\xe9\xfd\xdb\xd1 \v\xf3\xa2\x0f\x0e\xdb\x9b\x00\xda\x826\xc8/v.0\xa1w\xbb%\x88\xee\x80\x15M\xae\x10f\xc5`\xa1\xb3\"\xdf.\xab')
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00')
write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x10)
r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa4706, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c, 0x2, @perf_config_ext={0x3, 0x98fa}, 0x320, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4)
openat$cgroup_devices(r2, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x5, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x48840)
r4 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x6f, 0x1, 0xfc, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x13, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x4)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00@\x00'/28], 0x50)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r6 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r6, 0x29, 0x38, &(0x7f0000000100), 0x120)

984.525603ms ago: executing program 33 (id=268):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x4, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20)

0s ago: executing program 34 (id=270):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r0, 0x0, 0x9}, 0x18)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000800000000000003000000850000002c00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x300, 0x4b, 0x0, &(0x7f0000000340), 0x0, 0x1108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:63642' (ED25519) to the list of known hosts.
syzkaller login: [   41.419404][ T5764] cgroup: Unknown subsys name 'net'
[   41.543792][ T5764] cgroup: Unknown subsys name 'cpuset'
[   41.547868][ T5764] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.857143][ T5764] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   50.666184][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   50.669287][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   50.674794][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   50.675281][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   50.680200][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   50.681336][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   50.682824][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   50.685325][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   50.687377][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   50.696278][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   50.732881][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   50.738326][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   50.744811][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   50.753790][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   50.756754][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   50.958556][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   50.999326][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   51.044266][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   51.093984][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.096768][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.099142][ T5844] bridge_slave_0: entered allmulticast mode
[   51.103340][ T5844] bridge_slave_0: entered promiscuous mode
[   51.118945][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.122294][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.124653][ T5844] bridge_slave_1: entered allmulticast mode
[   51.127306][ T5844] bridge_slave_1: entered promiscuous mode
[   51.152778][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.155019][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.157261][ T5841] bridge_slave_0: entered allmulticast mode
[   51.159883][ T5841] bridge_slave_0: entered promiscuous mode
[   51.163853][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.168363][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.170667][ T5841] bridge_slave_1: entered allmulticast mode
[   51.173625][ T5841] bridge_slave_1: entered promiscuous mode
[   51.191849][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   51.206454][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.208670][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.210883][ T5849] bridge_slave_0: entered allmulticast mode
[   51.214793][ T5849] bridge_slave_0: entered promiscuous mode
[   51.217764][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.220024][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.222326][ T5849] bridge_slave_1: entered allmulticast mode
[   51.224938][ T5849] bridge_slave_1: entered promiscuous mode
[   51.228353][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   51.233586][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   51.238072][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   51.275420][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   51.279709][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   51.290772][ T5841] team0: Port device team_slave_0 added
[   51.294931][ T5841] team0: Port device team_slave_1 added
[   51.311912][ T5844] team0: Port device team_slave_0 added
[   51.315488][ T5849] team0: Port device team_slave_0 added
[   51.326830][ T5844] team0: Port device team_slave_1 added
[   51.336616][ T5849] team0: Port device team_slave_1 added
[   51.366163][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   51.368351][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   51.377774][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   51.382405][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   51.384650][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   51.393850][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   51.404770][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   51.406958][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   51.415285][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   51.423974][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   51.426197][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   51.434501][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   51.438700][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   51.440898][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   51.449310][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   51.459051][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   51.461497][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   51.469857][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   51.509818][ T5841] hsr_slave_0: entered promiscuous mode
[   51.512272][ T5841] hsr_slave_1: entered promiscuous mode
[   51.523978][ T5844] hsr_slave_0: entered promiscuous mode
[   51.526303][ T5844] hsr_slave_1: entered promiscuous mode
[   51.528416][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   51.531040][ T5844] Cannot create hsr debugfs directory
[   51.553650][ T5849] hsr_slave_0: entered promiscuous mode
[   51.555876][ T5849] hsr_slave_1: entered promiscuous mode
[   51.557919][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   51.560260][ T5849] Cannot create hsr debugfs directory
[   51.753923][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   51.763845][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   51.775121][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   51.784393][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   51.814433][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   51.831923][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   51.836291][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   51.841722][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.844125][ T5844] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.846767][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.849053][ T5844] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.858365][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   51.888736][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   51.899221][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   51.905319][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   51.917778][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.920078][ T5841] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.922673][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.924868][ T5841] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.932213][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   51.964891][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   51.969004][  T707] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.972424][  T707] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.975430][  T707] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.977978][  T707] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.009873][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   52.025766][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.028446][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.044018][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.046295][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.087060][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.108511][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.118094][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   52.123705][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.125988][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.140766][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   52.149743][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.152377][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.184178][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.187062][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.190616][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.193291][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.233284][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   52.270180][ T5844] veth0_vlan: entered promiscuous mode
[   52.294545][ T5844] veth1_vlan: entered promiscuous mode
[   52.315032][ T5844] veth0_macvtap: entered promiscuous mode
[   52.319160][ T5844] veth1_macvtap: entered promiscuous mode
[   52.330313][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   52.343442][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   52.353147][ T5844] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   52.356044][ T5844] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   52.359068][ T5844] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   52.362056][ T5844] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   52.370739][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   52.385758][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   52.437723][ T5849] veth0_vlan: entered promiscuous mode
[   52.455661][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   52.463346][ T5841] veth0_vlan: entered promiscuous mode
[   52.465686][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   52.471666][ T5849] veth1_vlan: entered promiscuous mode
[   52.484696][ T5841] veth1_vlan: entered promiscuous mode
[   52.492973][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   52.496994][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   52.509121][ T5841] veth0_macvtap: entered promiscuous mode
[   52.522325][ T5841] veth1_macvtap: entered promiscuous mode
[   52.536320][ T5849] veth0_macvtap: entered promiscuous mode
[   52.537343][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   52.540120][ T5849] veth1_macvtap: entered promiscuous mode
[   52.553009][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   52.564002][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   52.567942][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   52.582250][ T5841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   52.584992][ T5841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   52.587709][ T5841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   52.590406][ T5841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   52.605151][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   52.619364][ T5849] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   52.623935][ T5849] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   52.627519][ T5906] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7'.
[   52.632770][ T5849] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   52.635447][ T5849] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   52.688277][  T707] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   52.696626][  T707] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   52.725149][  T707] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   52.728675][  T707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   52.752945][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   52.762467][ T5846] Bluetooth: hci0: command tx timeout
[   52.763045][   T55] Bluetooth: hci1: command tx timeout
[   52.769798][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   52.785014][ T5912] bond_slave_1: entered promiscuous mode
[   52.786924][ T5912] bond_slave_1: entered allmulticast mode
[   52.820225][  T707] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   52.824150][  T707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   52.843477][   T55] Bluetooth: hci2: command tx timeout
[   52.859711][ T5917] syz.0.13 uses obsolete (PF_INET,SOCK_PACKET)
[   52.870054][ T5919] netlink: 830 bytes leftover after parsing attributes in process `syz.2.14'.
[   52.895807][ T5921] netlink: 'syz.1.8': attribute type 39 has an invalid length.
[   53.118251][ T5929] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.19'.
[   53.556755][ T5952] warning: `syz.0.28' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   54.004519][ T5978] netlink: 'syz.0.40': attribute type 1 has an invalid length.
[   54.007289][ T5978] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.40'.
[   54.622322][ T6008] netlink: 128 bytes leftover after parsing attributes in process `syz.2.55'.
[   54.627427][ T6008] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   54.720062][ T6014] netlink: 60 bytes leftover after parsing attributes in process `syz.1.57'.
[   54.780955][    C0] hrtimer: interrupt took 23387 ns
[   54.841657][   T55] Bluetooth: hci0: command tx timeout
[   54.843459][   T55] Bluetooth: hci1: command tx timeout
[   54.901293][ T6023] netlink: 'syz.1.62': attribute type 1 has an invalid length.
[   54.904482][ T6023] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.62'.
[   54.915066][ T6023] netlink: 132 bytes leftover after parsing attributes in process `syz.1.62'.
[   54.924088][ T5846] Bluetooth: hci2: command tx timeout
[   55.081161][ T6030] netlink: 'syz.2.65': attribute type 10 has an invalid length.
[   55.118398][ T6030] team0: Port device wlan1 added
[   55.216405][ T6030] syz.2.65 (6030) used greatest stack depth: 19408 bytes left
[   55.242319][ T6040] netlink: 'syz.2.70': attribute type 4 has an invalid length.
[   55.244851][ T6040] netlink: 152 bytes leftover after parsing attributes in process `syz.2.70'.
[   55.254076][ T6040] netlink: 6 bytes leftover after parsing attributes in process `syz.2.70'.
[   55.257103][ T6040] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   55.315977][ T6044] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[   55.393609][ T6050] netlink: 'syz.1.75': attribute type 46 has an invalid length.
[   55.596845][ T6072] netlink: 'syz.0.86': attribute type 1 has an invalid length.
[   55.836074][ T6093] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.150453][ T6122] netlink: 'syz.2.108': attribute type 2 has an invalid length.
[   56.154729][ T6122] netlink: 'syz.2.108': attribute type 8 has an invalid length.
[   56.430245][ T6142] netlink: 'syz.2.118': attribute type 22 has an invalid length.
[   56.695588][ T6154] Zero length message leads to an empty skb
[   56.795105][ T6160] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[   56.797949][ T6160] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[   56.921202][ T5846] Bluetooth: hci1: command tx timeout
[   56.922989][   T55] Bluetooth: hci0: command tx timeout
[   57.001441][   T55] Bluetooth: hci2: command tx timeout
[   58.589168][ T6260] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.964954][   T55] Bluetooth: hci2: unexpected subevent 0x03 length: 150 > 9
[   59.002219][   T55] Bluetooth: hci0: command tx timeout
[   59.011760][   T55] Bluetooth: hci1: command tx timeout
[   59.081193][   T55] Bluetooth: hci2: command tx timeout
[   59.232648][ T6302] validate_nla: 1 callbacks suppressed
[   59.232657][ T6302] netlink: 'syz.0.193': attribute type 10 has an invalid length.
[   59.254929][ T6302] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   59.406001][ T6311] netlink: 'syz.1.197': attribute type 21 has an invalid length.
[   59.499656][ T6317] netlink: 'syz.0.200': attribute type 10 has an invalid length.
[   59.527810][ T6317] __nla_validate_parse: 6 callbacks suppressed
[   59.527820][ T6317] netlink: 55 bytes leftover after parsing attributes in process `syz.0.200'.
[   60.413466][ T6352] netlink: 'syz.1.215': attribute type 10 has an invalid length.
[   60.470754][ T6352] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   60.499625][ T6352] syz.1.215 (6352) used greatest stack depth: 19360 bytes left
[   60.847199][ T6361] IPv6: Can't replace route, no match found
[   64.763053][ T6407] netlink: 'syz.1.239': attribute type 10 has an invalid length.
[   64.765778][ T6407] team0: Device ip6_vti0 is of different type
[   64.923565][ T6416] netlink: 60 bytes leftover after parsing attributes in process `syz.0.242'.
[   64.926769][ T6414] netlink: 60 bytes leftover after parsing attributes in process `syz.0.242'.
[   64.930154][ T6414] netlink: 60 bytes leftover after parsing attributes in process `syz.0.242'.
[   64.993346][ T6421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.244'.
[   65.615214][ T5695] syzkaller0: tun_net_xmit 76
[   65.617002][ T5695] syzkaller0: tun_net_xmit 48
[   65.629926][ T6460] syzkaller0: create flow: hash 1546843929 index 1
[   65.641178][  T791] syzkaller0: tun_net_xmit 76
[   65.646250][ T6460] syzkaller0: delete flow: hash 1546843929 index 1
[   68.600565][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 2069559583 wd_nsec: 2069559594
[   71.083874][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.086036][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   81.347193][   T95] cfg80211: failed to load regulatory.db
[   81.611675][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   81.614908][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   81.617627][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   81.620453][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   81.626989][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   81.787345][ T6482] chnl_net:caif_netlink_parms(): no params data found
[   83.642416][ T5846] Bluetooth: hci3: command tx timeout
[   83.659159][   T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   83.663384][   T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   83.666061][   T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   83.668801][   T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   83.672496][   T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   84.678564][   T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   84.684992][   T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   84.687944][   T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   84.690818][   T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   84.695134][   T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   85.721166][ T5846] Bluetooth: hci3: command tx timeout
[   85.723656][   T55] Bluetooth: hci4: command tx timeout
[   86.771128][   T55] Bluetooth: hci5: command tx timeout
[   87.801045][   T55] Bluetooth: hci4: command tx timeout
[   87.803296][   T55] Bluetooth: hci3: command tx timeout
[   88.854025][ T5846] Bluetooth: hci5: command tx timeout
[   89.881241][ T5846] Bluetooth: hci3: command tx timeout
[   89.883703][ T5846] Bluetooth: hci4: command tx timeout
[   90.926886][   T55] Bluetooth: hci5: command tx timeout
[   91.961252][   T55] Bluetooth: hci4: command tx timeout
[   93.001275][   T55] Bluetooth: hci5: command tx timeout
[  132.537817][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  132.540507][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  141.633851][ T5846] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  141.636990][ T5846] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  141.639570][ T5846] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  141.642468][ T5846] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  141.645019][ T5846] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  143.721106][ T5846] Bluetooth: hci6: command tx timeout
[  144.619304][   T55] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  144.623466][   T55] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  144.626029][   T55] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  144.628693][   T55] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  144.632108][   T55] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  145.686168][   T55] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  145.690256][   T55] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  145.692997][   T55] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  145.696531][   T55] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  145.699123][   T55] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  145.801186][ T5846] Bluetooth: hci6: command tx timeout
[  146.682354][ T5846] Bluetooth: hci7: command tx timeout
[  147.721054][ T5846] Bluetooth: hci8: command tx timeout
[  147.881212][ T5846] Bluetooth: hci6: command tx timeout
[  148.762256][ T5846] Bluetooth: hci7: command tx timeout
[  149.801037][ T5846] Bluetooth: hci8: command tx timeout
[  149.971245][ T5846] Bluetooth: hci6: command tx timeout
[  150.843047][ T5846] Bluetooth: hci7: command tx timeout
[  151.891170][ T5846] Bluetooth: hci8: command tx timeout
[  152.931130][ T5846] Bluetooth: hci7: command tx timeout
[  153.972244][ T5846] Bluetooth: hci8: command tx timeout
[  171.340986][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
[  171.343183][    C0] rcu: 	0-....: (10480 ticks this GP) idle=18fc/1/0x4000000000000000 softirq=16835/16836 fqs=4389
[  171.347885][    C0] rcu: 	         hardirqs   softirqs   csw/system
[  171.349972][    C0] rcu: 	 number:  1019762          0            0
[  171.352087][    C0] rcu: 	cputime:    37621      14858          112   ==> 52480(ms)
[  171.354650][    C0] rcu: 	(t=10500 jiffies g=8057 q=4053 ncpus=2)
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  171.356708][    C0] CPU: 0 UID: 0 PID: 6467 Comm: syz.2.265 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  171.356722][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  171.356726][    C0] RIP: 0010:stack_depot_save_flags+0x168/0x900
[  171.356742][    C0] Code: c8 31 c5 c1 c0 18 29 c5 48 8b 05 33 89 e7 14 8b 0d 25 89 e7 14 21 e9 48 c1 e1 04 4c 8d 3c 08 65 ff 05 dc b1 a9 0d 4c 8b 24 08 <4d> 39 fc 0f 84 88 00 00 00 45 89 d5 eb 2d 90 0f 0b 90 31 c0 e9 ce
[  171.356747][    C0] RSP: 0018:ffffc900000075f8 EFLAGS: 00000202
[  171.356754][    C0] RAX: ffff888135400000 RBX: 0000000000000000 RCX: 0000000000628bb0
[  171.356759][    C0] RDX: 00000000fae73474 RSI: 0000000000000001 RDI: 000000004b0bc5ff
[  171.356763][    C0] RBP: 000000000d3628bb R08: 0000000069e0f6ea R09: 000000007cc4e77c
[  171.356767][    C0] R10: 0000000000000012 R11: fffff52000000db1 R12: ffff8880226c2670
[  171.356771][    C0] R13: 0000000000000000 R14: ffffc90000007670 R15: ffff888135a28bb0
[  171.356776][    C0] FS:  00007f28f09f66c0(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
[  171.356781][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  171.356785][    C0] CR2: 0000001b30ffcff8 CR3: 00000001143b6000 CR4: 00000000000006f0
[  171.356810][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  171.356815][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  171.356819][    C0] Call Trace:
[  171.356825][    C0]  <IRQ>
[  171.356838][    C0]  ? __irq_exit_rcu+0xd8/0x1f0
[  171.356871][    C0]  kasan_save_track+0x4f/0x80
[  171.356883][    C0]  ? kasan_save_track+0x3e/0x80
[  171.356891][    C0]  ? kasan_save_free_info+0x46/0x50
[  171.356899][    C0]  ? __kasan_slab_free+0x62/0x70
[  171.356904][    C0]  ? kmem_cache_free+0x18f/0x400
[  171.356910][    C0]  ? skb_release_data+0x62d/0x7c0
[  171.356918][    C0]  ? consume_skb+0x9e/0xf0
[  171.356924][    C0]  ? netlink_broadcast_filtered+0x103e/0x1140
[  171.356934][    C0]  ? nlmsg_notify+0xf0/0x1a0
[  171.356939][    C0]  ? __neigh_notify+0x1ae/0x310
[  171.356945][    C0]  ? neigh_timer_handler+0xb03/0x1030
[  171.356951][    C0]  ? call_timer_fn+0x17e/0x5f0
[  171.356958][    C0]  ? __run_timer_base+0x61a/0x860
[  171.356966][    C0]  ? run_timer_softirq+0xb7/0x180
[  171.356975][    C0]  ? handle_softirqs+0x286/0x870
[  171.356981][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  171.356988][    C0]  ? irq_exit_rcu+0x9/0x30
[  171.356994][    C0]  ? sysvec_irq_work+0xa3/0xc0
[  171.357000][    C0]  ? asm_sysvec_irq_work+0x1a/0x20
[  171.357007][    C0]  ? finish_task_switch+0x26b/0x950
[  171.357017][    C0]  ? __schedule+0x16fd/0x4d00
[  171.357024][    C0]  ? preempt_schedule_common+0x83/0xd0
[  171.357031][    C0]  ? preempt_schedule+0xae/0xc0
[  171.357038][    C0]  ? preempt_schedule_thunk+0x16/0x30
[  171.357048][    C0]  ? smp_call_function_single+0x470/0x590
[  171.357055][    C0]  ? perf_install_in_context+0x593/0x8f0
[  171.357064][    C0]  ? __se_sys_perf_event_open+0x193a/0x1d70
[  171.357071][    C0]  ? do_syscall_64+0xfa/0x3b0
[  171.357080][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.357189][    C0]  ? skb_release_data+0x62d/0x7c0
[  171.357199][    C0]  kasan_save_free_info+0x46/0x50
[  171.357211][    C0]  __kasan_slab_free+0x62/0x70
[  171.357223][    C0]  kmem_cache_free+0x18f/0x400
[  171.357253][    C0]  skb_release_data+0x62d/0x7c0
[  171.357299][    C0]  consume_skb+0x9e/0xf0
[  171.357314][    C0]  netlink_broadcast_filtered+0x103e/0x1140
[  171.357370][    C0]  ? __build_skb_around+0x257/0x3e0
[  171.357396][    C0]  nlmsg_notify+0xf0/0x1a0
[  171.357408][    C0]  ? __neigh_notify+0x29/0x310
[  171.357426][    C0]  __neigh_notify+0x1ae/0x310
[  171.357451][    C0]  neigh_timer_handler+0xb03/0x1030
[  171.357491][    C0]  call_timer_fn+0x17e/0x5f0
[  171.357501][    C0]  ? __pfx_neigh_timer_handler+0x10/0x10
[  171.357507][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  171.357515][    C0]  ? call_timer_fn+0xbe/0x5f0
[  171.357557][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  171.357609][    C0]  ? __pfx_neigh_timer_handler+0x10/0x10
[  171.357628][    C0]  __run_timer_base+0x61a/0x860
[  171.357694][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  171.357768][    C0]  run_timer_softirq+0xb7/0x180
[  171.357786][    C0]  handle_softirqs+0x286/0x870
[  171.357812][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  171.357844][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  171.357854][    C0]  ? irq_work_single+0x1ac/0x240
[  171.357878][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  171.357903][    C0]  __irq_exit_rcu+0xca/0x1f0
[  171.357916][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  171.357943][    C0]  ? rcu_is_watching+0x15/0xb0
[  171.357964][    C0]  irq_exit_rcu+0x9/0x30
[  171.357971][    C0]  sysvec_irq_work+0xa3/0xc0
[  171.357981][    C0]  </IRQ>
[  171.357984][    C0]  <TASK>
[  171.357991][    C0]  asm_sysvec_irq_work+0x1a/0x20
[  171.357999][    C0] RIP: 0010:finish_task_switch+0x26b/0x950
[  171.358008][    C0] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 3f 25 df 09 e8 ba b9 35 00 fb 4c 8b 65 c0 <49> 8d bc 24 18 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0
[  171.358013][    C0] RSP: 0018:ffffc90007d57718 EFLAGS: 00000286
[  171.358019][    C0] RAX: 09509cc85c529900 RBX: 0000000000000000 RCX: 09509cc85c529900
[  171.358023][    C0] RDX: 0000000000000006 RSI: ffffffff8d998701 RDI: ffffffff8be29f80
[  171.358027][    C0] RBP: ffffc90007d57770 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  171.358032][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffff88812852d640
[  171.358036][    C0] R13: dffffc0000000000 R14: ffff88801f69d640 R15: ffff88804b03ab98
[  171.358093][    C0]  ? finish_task_switch+0x266/0x950
[  171.358133][    C0]  __schedule+0x16fd/0x4d00
[  171.358202][    C0]  ? preempt_schedule_common+0x83/0xd0
[  171.358232][    C0]  ? __pfx___schedule+0x10/0x10
[  171.358254][    C0]  ? irqentry_exit+0x74/0x90
[  171.358267][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  171.358315][    C0]  ? preempt_schedule+0xae/0xc0
[  171.358335][    C0]  preempt_schedule_common+0x83/0xd0
[  171.358351][    C0]  preempt_schedule+0xae/0xc0
[  171.358365][    C0]  ? __pfx_preempt_schedule+0x10/0x10
[  171.358371][    C0]  ? __pfx_remote_function+0x10/0x10
[  171.358386][    C0]  ? __pfx_generic_exec_single+0x10/0x10
[  171.358415][    C0]  preempt_schedule_thunk+0x16/0x30
[  171.358436][    C0]  ? smp_call_function_single+0x46b/0x590
[  171.358455][    C0]  smp_call_function_single+0x470/0x590
[  171.358468][    C0]  ? __pfx_remote_function+0x10/0x10
[  171.358485][    C0]  ? __pfx_smp_call_function_single+0x10/0x10
[  171.358499][    C0]  ? __pfx_remote_function+0x10/0x10
[  171.358578][    C0]  perf_install_in_context+0x593/0x8f0
[  171.358625][    C0]  ? __pfx_perf_install_in_context+0x10/0x10
[  171.358633][    C0]  ? find_get_pmu_context+0x7cd/0x890
[  171.358643][    C0]  ? __pfx___perf_install_in_context+0x10/0x10
[  171.358695][    C0]  ? anon_inode_getfile+0x106/0x1a0
[  171.358703][    C0]  ? perf_event__header_size+0x168/0x230
[  171.358728][    C0]  __se_sys_perf_event_open+0x193a/0x1d70
[  171.358784][    C0]  ? __pfx___se_sys_perf_event_open+0x10/0x10
[  171.358853][    C0]  ? rcu_is_watching+0x15/0xb0
[  171.358882][    C0]  ? do_syscall_64+0xbe/0x3b0
[  171.358890][    C0]  ? __x64_sys_perf_event_open+0x20/0xc0
[  171.358913][    C0]  do_syscall_64+0xfa/0x3b0
[  171.358922][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  171.358935][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.358944][    C0]  ? exc_page_fault+0x9f/0xf0
[  171.358966][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.358974][    C0] RIP: 0033:0x7f28f2b8eb69
[  171.358986][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  171.358991][    C0] RSP: 002b:00007f28f09f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  171.358997][    C0] RAX: ffffffffffffffda RBX: 00007f28f2db5fa0 RCX: 00007f28f2b8eb69
[  171.359002][    C0] RDX: ffefffffffffffff RSI: 0000000000000000 RDI: 0000200000000180
[  171.359006][    C0] RBP: 00007f28f2c11df1 R08: 0000000000000000 R09: 0000000000000000
[  171.359010][    C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  171.359013][    C0] R13: 0000000000000000 R14: 00007f28f2db5fa0 R15: 00007ffded7eeff8
[  171.359071][    C0]  </TASK>
[  171.612587][    C0] sched: DL replenish lagged too much

VM DIAGNOSIS:
21:47:13  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000002e RBX=000000000000002e RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000006930
R8 =ffff88801f360237 R9 =1ffff11003e6c046 R10=dffffc0000000000 R11=ffffffff85471fa0
R12=dffffc0000000000 R13=ffffffff99af58a1 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff8547201c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f28f09f66c0 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b30ffcff8 CR3=00000001143b6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=9a3086bff87dd15c 674996c713c9ad7d
XMM02=a4e78c871a9067d6 2cd4e336344c2428 XMM03=7a10d8fbebafc179 40f1c6d95bc5b5eb
XMM04=64b39380db556787 106a5d08c3bd4315 XMM05=ae599b464a7a10d8 fbebafc17940f1c6
XMM06=d95bc5b5eba4e78c 871a9067d62cd4e3 XMM07=36344c2428c5427c f6c1e6f74ff051bd
XMM08=52848e8d0ba13186 162ecdcdf2eaf459 XMM09=0000000000000000 00007fb53ca12f89
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=ffffffff8e144440 RCX=ffffffff8b71260c RDX=0000000000000000
RSI=0000000000000004 RDI=ffffffff8e144440 RBP=ffffc900030fef18 RSP=ffffc900030fee18
R8 =ffffffff8e144443 R9 =1ffffffff1c28888 R10=dffffc0000000000 R11=fffffbfff1c28889
R12=1ffff9200061fdcc R13=0000000000000001 R14=ffffc900030fee80 R15=1ffffffff1c28888
RIP=ffffffff822343d0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f4d5be8e800 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffd921a1d1c CR3=000000010bb64000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
