last executing test programs:

18.500826777s ago: executing program 0 (id=410):
r0 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r0, &(0x7f0000003c40)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xfe}, 0x6, 0x3}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000040)="817f00", 0x3}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001b00)=""/189, 0xbd}], 0x1}, 0x22)

17.621331542s ago: executing program 0 (id=435):
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfeecb53ce05c84c4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='(pu&\"&\t&&')

17.063416008s ago: executing program 1 (id=441):
socket$kcm(0x2, 0xa, 0x73)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socket$kcm(0x11, 0x200000000000002, 0x300)

16.308420773s ago: executing program 1 (id=446):
r0 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3c, &(0x7f0000000640), 0x4)

16.282495928s ago: executing program 1 (id=447):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001ac0)=""/4081, 0xff1}, {&(0x7f0000000580)=""/110, 0x6e}], 0x2}, 0x40000020)

16.209669959s ago: executing program 0 (id=448):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000001c0)="d7f2", &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f00000001c0), 0x0}, 0x20)

16.209123156s ago: executing program 0 (id=450):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4, 0x9}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @restrict={0x0, 0x0, 0x0, 0xb, 0x3}]}}, 0x0, 0x62}, 0x28)

16.143818223s ago: executing program 1 (id=451):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='task_newtask\x00', r0}, 0x18)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x5421, &(0x7f0000000000)={'wlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}})

16.143678386s ago: executing program 0 (id=452):
r0 = socket$kcm(0x10, 0x3, 0x0)
write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef"], 0xfe33)
recvmsg$kcm(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)=""/20, 0x14}, {&(0x7f0000001f00)=""/4100, 0xa83}, {&(0x7f0000000400)=""/199, 0xc7}, {&(0x7f0000000900)=""/204, 0xcc}, {&(0x7f0000000340)=""/108, 0x6c}, {&(0x7f0000000600)=""/239, 0xef}, {&(0x7f00000001c0)=""/170, 0xaa}, {&(0x7f0000001c40)=""/219, 0xdb}, {&(0x7f0000000700)=""/171}, {&(0x7f0000000800)=""/206}, {&(0x7f0000000280)=""/124}], 0x8}, 0x102)

16.083712013s ago: executing program 2 (id=453):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0)
close(r0)
r1 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x2000000, @dev, 0x35}, 0x80, 0x0}, 0xe07e872420dfefca)
ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})

16.083516977s ago: executing program 1 (id=454):
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xbf}, [@ldst={0x5, 0x3, 0x3, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a)

16.08305566s ago: executing program 0 (id=455):
perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xc, 0x32, 0x0, 0xe, 0x0, 0x7, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x200000000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x9, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = socket$kcm(0x2, 0x5, 0x84)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0x78, &(0x7f0000000040)=r2, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x8183, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext, 0x40, 0x0, 0x0, 0x0, 0xc360, 0xfffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000))
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)
unlink(&(0x7f0000000140)='./cgroup\x00')

15.640857974s ago: executing program 1 (id=456):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000140)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX\xf73\xa1\xa2\'\x00\x00\x00\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d')

15.640564851s ago: executing program 2 (id=457):
r0 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x75, &(0x7f0000000000), 0x8)

15.640362588s ago: executing program 2 (id=458):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000540)="1400000024000b47564cb6288200eb1405000000", 0x14}], 0x1}, 0x4000)

15.640138912s ago: executing program 2 (id=459):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r1, r0, 0x7}, 0x10)

15.513884393s ago: executing program 2 (id=460):
r0 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3c, &(0x7f0000000500), 0x4)

15.511484463s ago: executing program 2 (id=461):
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext={0x1, 0x4}, 0xa0, 0x58, 0x0, 0x4, 0x2, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c085)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086602, &(0x7f0000000100)=0x50)

1.027014453s ago: executing program 32 (id=455):
perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xc, 0x32, 0x0, 0xe, 0x0, 0x7, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x200000000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x9, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = socket$kcm(0x2, 0x5, 0x84)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0x78, &(0x7f0000000040)=r2, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x8183, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext, 0x40, 0x0, 0x0, 0x0, 0xc360, 0xfffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000))
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)
unlink(&(0x7f0000000140)='./cgroup\x00')

955.753702ms ago: executing program 33 (id=456):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000140)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX\xf73\xa1\xa2\'\x00\x00\x00\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d')

0s ago: executing program 34 (id=461):
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext={0x1, 0x4}, 0xa0, 0x58, 0x0, 0x4, 0x2, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c085)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086602, &(0x7f0000000100)=0x50)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:21733' (ED25519) to the list of known hosts.
syzkaller login: [   56.757827][ T5825] cgroup: Unknown subsys name 'net'
[   56.866643][ T5825] cgroup: Unknown subsys name 'cpuset'
[   56.872913][ T5825] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.409194][ T5825] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   62.514008][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.517279][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.520725][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.524580][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.527646][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   62.583814][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.587881][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.591150][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.594521][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.598153][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.645816][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.657257][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.660283][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.663874][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.667204][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.906560][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   62.947116][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   63.083596][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.087102][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.090452][ T5839] bridge_slave_0: entered allmulticast mode
[   63.094846][ T5839] bridge_slave_0: entered promiscuous mode
[   63.113040][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.116029][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.119263][ T5839] bridge_slave_1: entered allmulticast mode
[   63.124849][ T5839] bridge_slave_1: entered promiscuous mode
[   63.221391][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.233291][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.237585][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.241521][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.246532][ T5843] bridge_slave_0: entered allmulticast mode
[   63.250492][ T5843] bridge_slave_0: entered promiscuous mode
[   63.255053][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   63.282795][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.285753][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.288775][ T5843] bridge_slave_1: entered allmulticast mode
[   63.294548][ T5843] bridge_slave_1: entered promiscuous mode
[   63.365838][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.373696][ T5839] team0: Port device team_slave_0 added
[   63.381747][ T5839] team0: Port device team_slave_1 added
[   63.386335][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.452147][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.455256][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.466513][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.485424][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.488526][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.492102][ T5846] bridge_slave_0: entered allmulticast mode
[   63.498568][ T5846] bridge_slave_0: entered promiscuous mode
[   63.512872][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.515780][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.527659][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.533479][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.537325][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.540606][ T5846] bridge_slave_1: entered allmulticast mode
[   63.544800][ T5846] bridge_slave_1: entered promiscuous mode
[   63.565659][ T5843] team0: Port device team_slave_0 added
[   63.588822][ T5843] team0: Port device team_slave_1 added
[   63.595593][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.625001][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.675704][ T5839] hsr_slave_0: entered promiscuous mode
[   63.679175][ T5839] hsr_slave_1: entered promiscuous mode
[   63.699085][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.702987][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.715078][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.741862][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.746885][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.756559][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.763024][ T5846] team0: Port device team_slave_0 added
[   63.768505][ T5846] team0: Port device team_slave_1 added
[   63.830382][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.834216][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.845550][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.866068][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.869437][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.881099][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.936165][ T5843] hsr_slave_0: entered promiscuous mode
[   63.939181][ T5843] hsr_slave_1: entered promiscuous mode
[   63.941712][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.945969][ T5843] Cannot create hsr debugfs directory
[   64.011018][ T5846] hsr_slave_0: entered promiscuous mode
[   64.013782][ T5846] hsr_slave_1: entered promiscuous mode
[   64.016472][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.019534][ T5846] Cannot create hsr debugfs directory
[   64.243493][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.253280][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.260408][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.279002][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.325257][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.349414][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.369266][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.377654][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.428321][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.437012][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.451077][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.459074][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.573225][   T54] Bluetooth: hci0: command tx timeout
[   64.586949][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.627030][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   64.634723][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.645227][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.653169][   T54] Bluetooth: hci1: command tx timeout
[   64.661766][ T3944] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.665226][ T3944] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.683010][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.685359][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.690838][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   64.719411][ T3944] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.722881][ T3944] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.732670][   T54] Bluetooth: hci2: command tx timeout
[   64.746197][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   64.755302][ T3944] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.758361][ T3944] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.782174][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.785638][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.795578][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.798978][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.887623][ T5846] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   64.891766][ T5846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.011090][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.065069][ T5839] veth0_vlan: entered promiscuous mode
[   65.081532][ T5839] veth1_vlan: entered promiscuous mode
[   65.108739][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.129992][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.170143][ T5839] veth0_macvtap: entered promiscuous mode
[   65.185767][ T5839] veth1_macvtap: entered promiscuous mode
[   65.203958][ T5846] veth0_vlan: entered promiscuous mode
[   65.217727][ T5843] veth0_vlan: entered promiscuous mode
[   65.222887][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.231209][ T5846] veth1_vlan: entered promiscuous mode
[   65.245516][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.260732][ T5839] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.265748][ T5839] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.269635][ T5839] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.274520][ T5839] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.280565][ T5843] veth1_vlan: entered promiscuous mode
[   65.328493][ T5846] veth0_macvtap: entered promiscuous mode
[   65.345808][ T5843] veth0_macvtap: entered promiscuous mode
[   65.365290][ T5843] veth1_macvtap: entered promiscuous mode
[   65.368271][ T5846] veth1_macvtap: entered promiscuous mode
[   65.386664][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.389432][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.396946][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.411569][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.418352][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.434180][ T5846] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.437490][ T5846] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.440814][ T5846] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.444782][ T5846] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.461209][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.461830][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.467455][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.478967][ T5843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.486778][ T5843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.490505][ T5843] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.495838][ T5843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.542823][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.552657][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.555678][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.601580][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.611611][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.676514][ T2079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.679157][ T2079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.724086][ T2079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.733534][ T2079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.311379][ T5936] : port 1(vlan0) entered blocking state
[   66.315820][ T5936] : port 1(vlan0) entered disabled state
[   66.318665][ T5936] vlan0: entered allmulticast mode
[   66.320738][ T5936] veth0_vlan: entered allmulticast mode
[   66.325469][ T5936] vlan0: entered promiscuous mode
[   66.440204][ T5944] netlink: 'syz.0.22': attribute type 21 has an invalid length.
[   66.664827][   T54] Bluetooth: hci0: command tx timeout
[   66.732419][   T54] Bluetooth: hci1: command tx timeout
[   66.782245][    C0] hrtimer: interrupt took 37100 ns
[   66.815223][   T54] Bluetooth: hci2: command tx timeout
[   67.498220][ T5971] netlink: 'syz.1.32': attribute type 40 has an invalid length.
[   67.510809][ T5971] netlink: 40 bytes leftover after parsing attributes in process `syz.1.32'.
[   67.983275][ T5995] netlink: 60 bytes leftover after parsing attributes in process `syz.2.43'.
[   68.682474][ T6014] netlink: 'syz.2.52': attribute type 10 has an invalid length.
[   68.685364][ T6014] netlink: 3819 bytes leftover after parsing attributes in process `syz.2.52'.
[   68.732542][   T54] Bluetooth: hci0: command tx timeout
[   68.827124][   T54] Bluetooth: hci1: command tx timeout
[   68.897642][   T54] Bluetooth: hci2: command tx timeout
[   68.915598][ T6023] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   69.126806][ T6034] syzkaller1: tun_chr_ioctl cmd 1074025676
[   69.130907][ T6034] syzkaller1: owner set to 778
[   69.159594][ T6038] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.61'.
[   69.218892][ T6040] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.64'.
[   69.227355][ T6040] netlink: zone id is out of range
[   69.229567][ T6040] netlink: get zone limit has 8 unknown bytes
[   69.303589][ T6050] netlink: 'syz.0.69': attribute type 7 has an invalid length.
[   70.452129][ T6091] netlink: 'syz.1.86': attribute type 10 has an invalid length.
[   70.514797][ T6091] bond0: (slave bond_slave_0): Releasing backup interface
[   70.667434][ T6101] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.93'.
[   70.675903][ T6102] netlink: 'syz.1.94': attribute type 10 has an invalid length.
[   70.691163][ T6102] netlink: 152 bytes leftover after parsing attributes in process `syz.1.94'.
[   70.849483][   T54] Bluetooth: hci0: command tx timeout
[   70.899157][   T54] Bluetooth: hci1: command tx timeout
[   70.973689][   T54] Bluetooth: hci2: command tx timeout
[   71.133355][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.136414][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.711476][ T6120] Zero length message leads to an empty skb
[   71.757388][ T6122] netlink: 'syz.0.103': attribute type 29 has an invalid length.
[   71.759860][ T6122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.103'.
[   71.816296][ T6129] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.107'.
[   71.852416][ T6132] netlink: 60 bytes leftover after parsing attributes in process `syz.2.108'.
[   71.903044][ T6138] delete_channel: no stack
[   71.904682][ T6138] delete_channel: no stack
[   72.392074][   T54] Bluetooth: hci2: unexpected event 0x33 length: 15 > 10
[   72.587519][   T54] Bluetooth: hci0: unexpected cc 0x1004 length: 12 > 11
[   73.084910][ T6213] netlink: 'syz.1.146': attribute type 1 has an invalid length.
[   73.087874][ T6213] __nla_validate_parse: 2 callbacks suppressed
[   73.087933][ T6213] netlink: 17 bytes leftover after parsing attributes in process `syz.1.146'.
[   73.303578][ T6232] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   74.820284][ T6286] netlink: 'syz.0.181': attribute type 29 has an invalid length.
[   74.825426][ T6286] netlink: 'syz.0.181': attribute type 29 has an invalid length.
[   74.829501][ T6286] netlink: 'syz.0.181': attribute type 29 has an invalid length.
[   74.836396][ T6286] netlink: 'syz.0.181': attribute type 29 has an invalid length.
[   74.980227][ T6293] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.184'.
[   75.124726][ T6305] netlink: 'syz.2.190': attribute type 21 has an invalid length.
[   75.143995][ T6305] netlink: 'syz.2.190': attribute type 22 has an invalid length.
[   75.147139][ T6305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.190'.
[   75.392699][ T6323] netlink: 'syz.0.199': attribute type 12 has an invalid length.
[   75.395453][ T6323] netlink: 120 bytes leftover after parsing attributes in process `syz.0.199'.
[   76.672658][   T54] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[   76.676065][   T54] Bluetooth: hci0: Injecting HCI hardware error event
[   76.678997][   T54] Bluetooth: hci0: hardware error 0x00
[   76.764966][    C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   76.765971][ T6357] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.209'.
[   76.913445][ T5840] Bluetooth: hci0: Unknown advertising packet type: 0x20
[   77.364961][ T6385] netlink: 132 bytes leftover after parsing attributes in process `syz.0.224'.
[   77.404002][ T6387] netlink: 'syz.0.225': attribute type 22 has an invalid length.
[   77.407087][ T6387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.225'.
[   78.382061][ T6432] netlink: 'syz.2.246': attribute type 10 has an invalid length.
[   78.440976][ T6432] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.455408][ T6432] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   78.465016][ T6446] bond0: entered promiscuous mode
[   78.467451][ T6446] bond_slave_0: entered promiscuous mode
[   78.469995][ T6446] bond_slave_1: entered promiscuous mode
[   78.473435][ T6446] batadv0: entered promiscuous mode
[   78.671961][ T6453] sctp: [Deprecated]: syz.1.254 (pid 6453) Use of struct sctp_assoc_value in delayed_ack socket option.
[   78.671961][ T6453] Use struct sctp_sack_info instead
[   78.733794][   T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[   79.267452][ T6452] netlink: 'syz.2.253': attribute type 29 has an invalid length.
[   79.271377][ T6454] netlink: 'syz.2.253': attribute type 29 has an invalid length.
[   79.277841][ T6455] netlink: 'syz.2.253': attribute type 29 has an invalid length.
[   79.455041][ T6468] netlink: 60 bytes leftover after parsing attributes in process `syz.2.257'.
[   79.462008][ T6468] netlink: 60 bytes leftover after parsing attributes in process `syz.2.257'.
[   79.469516][ T6462] netlink: 60 bytes leftover after parsing attributes in process `syz.2.257'.
[   79.472459][   T54] Bluetooth: hci2: unexpected event 0x30 length: 151 > 3
[   79.709839][ T6486] netlink: 132 bytes leftover after parsing attributes in process `syz.2.268'.
[   80.058988][ T6500] netlink: 'syz.0.275': attribute type 10 has an invalid length.
[   80.065950][ T6500] macvlan0: entered promiscuous mode
[   80.068070][ T6500] macvlan0: entered allmulticast mode
[   80.075221][ T6500] veth1_vlan: entered allmulticast mode
[   80.078899][ T6500] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[   81.061509][ T6550] netlink: 132 bytes leftover after parsing attributes in process `syz.2.298'.
[   81.597509][ T6579] netlink: 'syz.2.306': attribute type 21 has an invalid length.
[   82.054734][ T6614] netlink: 'syz.0.326': attribute type 11 has an invalid length.
[   82.057857][ T6614] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.326'.
[   82.133910][ T6616] Driver unsupported XDP return value 0 on prog  (id 108) dev N/A, expect packet loss!
[   83.133458][ T6660] netlink: 'syz.0.348': attribute type 10 has an invalid length.
[   83.200871][   T54] Bluetooth: hci1: Malformed LE Event: 0x0d
[   83.288636][ T6647] delete_channel: no stack
[   83.592195][ T6674] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.353'.
[   83.987806][ T6685] netlink: 60 bytes leftover after parsing attributes in process `syz.1.358'.
[   83.998854][ T6685] netlink: 60 bytes leftover after parsing attributes in process `syz.1.358'.
[   84.008335][ T6685] netlink: 60 bytes leftover after parsing attributes in process `syz.1.358'.
[   84.190819][ T6688] warning: `syz.2.357' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   84.666095][ T6697] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   84.668626][ T6697] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   84.887798][ T6706] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   84.890002][ T6706] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   85.287247][ T6732] netlink: 'syz.2.376': attribute type 21 has an invalid length.
[   85.290259][ T6732] netlink: 'syz.2.376': attribute type 1 has an invalid length.
[   85.295134][ T6732] netlink: 144 bytes leftover after parsing attributes in process `syz.2.376'.
[   86.420187][   T10] cfg80211: failed to load regulatory.db
[   86.531006][ T6773] netlink: 'syz.1.394': attribute type 21 has an invalid length.
[   87.047991][ T6792] netlink: 'syz.0.402': attribute type 10 has an invalid length.
[   87.051555][ T6792] netlink: 40 bytes leftover after parsing attributes in process `syz.0.402'.
[   87.070102][ T6792] team0: entered promiscuous mode
[   87.073278][ T6792] team_slave_0: entered promiscuous mode
[   87.078617][ T6792] team_slave_1: entered promiscuous mode
[   87.081920][ T6792] team0: entered allmulticast mode
[   87.097439][ T6792] team_slave_0: entered allmulticast mode
[   87.101026][ T6792] team_slave_1: entered allmulticast mode
[   87.111783][ T6792] bridge0: port 3(team0) entered blocking state
[   87.116696][ T6792] bridge0: port 3(team0) entered disabled state
[   87.175908][ T6792] bridge0: port 3(team0) entered blocking state
[   87.178884][ T6792] bridge0: port 3(team0) entered forwarding state
[   87.495125][ T6817] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.415'.
[   87.526452][ T6821] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.417'.
[   87.697291][ T6835] delete_channel: no stack
[   87.699413][ T6835] delete_channel: no stack
[   88.011793][ T6848] netlink: 'syz.2.430': attribute type 6 has an invalid length.
[   88.016195][ T6848] netlink: 168 bytes leftover after parsing attributes in process `syz.2.430'.
[   88.271002][ T6864] netlink: 'syz.2.438': attribute type 19 has an invalid length.
[   88.592951][ T6871] syz.1.441 uses obsolete (PF_INET,SOCK_PACKET)
[   88.667707][ T6876] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.443'.
[   89.600748][ T6891] netlink: 60 bytes leftover after parsing attributes in process `syz.2.449'.
[   89.619951][ T6894] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.452'.
[   89.631870][ T6894] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.452'.
[  105.267811][ T6928] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  105.271625][ T6928] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  105.275266][ T6928] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  105.279096][ T6928] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  105.282106][ T6928] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  105.285014][ T6928] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  105.303636][   T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  105.312496][   T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  105.316416][   T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  105.319696][   T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  105.665083][ T6923] chnl_net:caif_netlink_parms(): no params data found
[  106.109023][   T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  106.114015][   T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  106.118070][   T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  106.122315][   T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  106.127277][   T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  107.383382][ T5840] Bluetooth: hci3: command tx timeout
[  107.387527][   T54] Bluetooth: hci4: command tx timeout
[  108.182683][   T54] Bluetooth: hci5: command tx timeout
[  109.456584][   T54] Bluetooth: hci4: command tx timeout
[  109.458870][   T54] Bluetooth: hci3: command tx timeout
[  110.252607][ T5840] Bluetooth: hci5: command tx timeout
[  111.532551][ T5840] Bluetooth: hci3: command tx timeout
[  111.534747][ T5840] Bluetooth: hci4: command tx timeout
[  112.332512][   T54] Bluetooth: hci5: command tx timeout
[  113.624618][   T54] Bluetooth: hci4: command tx timeout
[  113.626940][   T54] Bluetooth: hci3: command tx timeout
[  114.412492][ T5840] Bluetooth: hci5: command tx timeout
[  132.506628][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  132.508641][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  166.176218][   T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  166.179664][   T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  166.186929][   T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  166.190125][   T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  166.197947][   T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  166.234470][ T5840] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  166.240002][ T5840] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  166.243254][ T5840] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  166.249014][ T5840] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  166.254045][ T5840] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  167.033058][ T5840] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  167.039850][ T5840] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  167.042942][ T5840] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  167.046870][ T5840] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  167.052111][ T5840] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  168.252618][ T5840] Bluetooth: hci6: command tx timeout
[  168.345814][ T5840] Bluetooth: hci7: command tx timeout
[  169.132551][ T5840] Bluetooth: hci8: command tx timeout
[  170.346018][ T5840] Bluetooth: hci6: command tx timeout
[  170.425243][ T5840] Bluetooth: hci7: command tx timeout
[  171.222763][ T5840] Bluetooth: hci8: command tx timeout
[  172.412548][ T5840] Bluetooth: hci6: command tx timeout
[  172.506055][ T5840] Bluetooth: hci7: command tx timeout
[  173.292652][ T5840] Bluetooth: hci8: command tx timeout
[  174.492889][ T5840] Bluetooth: hci6: command tx timeout
[  174.572526][ T5840] Bluetooth: hci7: command tx timeout
[  175.372719][ T5840] Bluetooth: hci8: command tx timeout
[  185.778896][ T5840] Bluetooth: hci2: command 0x0406 tx timeout
[  185.781541][ T5840] Bluetooth: hci1: command 0x0406 tx timeout
[  193.941261][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  193.944067][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  194.812265][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
[  194.814722][    C0] rcu: 	0-....: (10450 ticks this GP) idle=2804/1/0x4000000000000000 softirq=19352/19353 fqs=4615
[  194.820211][    C0] rcu: 	         hardirqs   softirqs   csw/system
[  194.822796][    C0] rcu: 	 number:   739463          0            0
[  194.825581][    C0] rcu: 	cputime:    28960      23509          125   ==> 52470(ms)
[  194.829131][    C0] rcu: 	(t=10500 jiffies g=11101 q=5118 ncpus=2)
[  194.832026][    C0] CPU: 0 UID: 0 PID: 6900 Comm: syz.0.455 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  194.832040][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  194.832047][    C0] RIP: 0010:rcu_read_unlock_special+0x87/0x4c0
[  194.832070][    C0] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 62 2c f8 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
[  194.832079][    C0] RSP: 0018:ffffc900000075e0 EFLAGS: 00000206
[  194.832090][    C0] RAX: 8e0b50f62f067200 RBX: 1ffff92000000ec4 RCX: 8e0b50f62f067200
[  194.832099][    C0] RDX: 0000000000000002 RSI: ffffffff8d99883e RDI: ffffffff8be29f40
[  194.832106][    C0] RBP: ffffc900000076d8 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  194.832113][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffffffff8e144400
[  194.832121][    C0] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000001
[  194.832135][    C0] FS:  00007fc0e601a6c0(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
[  194.832144][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  194.832151][    C0] CR2: 0000001b31019ff8 CR3: 000000010c540000 CR4: 00000000000006f0
[  194.832185][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  194.832192][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000090602
[  194.832199][    C0] Call Trace:
[  194.832205][    C0]  <IRQ>
[  194.832209][    C0]  ? __lock_acquire+0xab9/0xd20
[  194.832229][    C0]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  194.832251][    C0]  ? unwind_next_frame+0xa5/0x2390
[  194.832272][    C0]  __rcu_read_unlock+0x84/0xe0
[  194.832291][    C0]  ? unwind_next_frame+0xa5/0x2390
[  194.832302][    C0]  unwind_next_frame+0x19ae/0x2390
[  194.832321][    C0]  ? unwind_next_frame+0xa5/0x2390
[  194.832377][    C0]  ? smp_call_function_single+0x351/0x590
[  194.832396][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  194.832412][    C0]  arch_stack_walk+0x11c/0x150
[  194.832433][    C0]  ? perf_install_in_context+0x593/0x8f0
[  194.832454][    C0]  stack_trace_save+0x9c/0xe0
[  194.832469][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  194.832489][    C0]  ? __irq_exit_rcu+0xd8/0x1f0
[  194.832502][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  194.832518][    C0]  kasan_save_track+0x3e/0x80
[  194.832528][    C0]  ? kasan_save_track+0x3e/0x80
[  194.832536][    C0]  ? kasan_save_free_info+0x46/0x50
[  194.832549][    C0]  ? __kasan_slab_free+0x62/0x70
[  194.832558][    C0]  ? kmem_cache_free+0x18f/0x400
[  194.832568][    C0]  ? rcu_core+0xca8/0x1710
[  194.832578][    C0]  ? handle_softirqs+0x286/0x870
[  194.832588][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  194.832598][    C0]  ? irq_exit_rcu+0x9/0x30
[  194.832608][    C0]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  194.832621][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  194.832632][    C0]  ? generic_exec_single+0x481/0x500
[  194.832643][    C0]  ? smp_call_function_single+0x351/0x590
[  194.832702][    C0]  ? rcu_core+0xca8/0x1710
[  194.832713][    C0]  kasan_save_free_info+0x46/0x50
[  194.832727][    C0]  __kasan_slab_free+0x62/0x70
[  194.832739][    C0]  kmem_cache_free+0x18f/0x400
[  194.832753][    C0]  ? __pfx___d_free+0x10/0x10
[  194.832763][    C0]  ? rcu_core+0xc34/0x1710
[  194.832775][    C0]  rcu_core+0xca8/0x1710
[  194.832808][    C0]  ? __pfx_rcu_core+0x10/0x10
[  194.832819][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  194.832850][    C0]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  194.832866][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  194.832879][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  194.832903][    C0]  handle_softirqs+0x286/0x870
[  194.832920][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  194.832939][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  194.832958][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  194.832978][    C0]  __irq_exit_rcu+0xca/0x1f0
[  194.832991][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  194.833014][    C0]  irq_exit_rcu+0x9/0x30
[  194.833025][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  194.833040][    C0]  </IRQ>
[  194.833044][    C0]  <TASK>
[  194.833050][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  194.833061][    C0] RIP: 0010:generic_exec_single+0x481/0x500
[  194.833072][    C0] Code: 75 11 e8 62 7f 0b 00 48 85 db 75 16 e8 58 7f 0b 00 eb 15 e8 51 7f 0b 00 e8 7c df b9 09 48 85 db 74 ea e8 42 7f 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 66 43 c7 44 2c
[  194.833081][    C0] RSP: 0018:ffffc900087d79c0 EFLAGS: 00000246
[  194.833090][    C0] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000080000
[  194.833097][    C0] RDX: ffffc90003511000 RSI: 0000000000000326 RDI: 0000000000000327
[  194.833104][    C0] RBP: ffffc900087d7a90 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  194.833112][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 1ffff920010faf3c
[  194.833119][    C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff920010faf5d
[  194.833157][    C0]  ? __pfx_remote_function+0x10/0x10
[  194.833168][    C0]  ? __pfx_generic_exec_single+0x10/0x10
[  194.833184][    C0]  ? __pfx___might_resched+0x10/0x10
[  194.833198][    C0]  ? smp_call_function_single+0xa0/0x590
[  194.833216][    C0]  smp_call_function_single+0x351/0x590
[  194.833229][    C0]  ? __pfx_remote_function+0x10/0x10
[  194.833241][    C0]  ? __pfx_smp_call_function_single+0x10/0x10
[  194.833254][    C0]  ? __pfx_remote_function+0x10/0x10
[  194.833280][    C0]  perf_install_in_context+0x593/0x8f0
[  194.833306][    C0]  ? __pfx_perf_install_in_context+0x10/0x10
[  194.833319][    C0]  ? find_get_pmu_context+0x7cd/0x890
[  194.833362][    C0]  ? __pfx___perf_install_in_context+0x10/0x10
[  194.833392][    C0]  ? anon_inode_getfile+0x106/0x1a0
[  194.833403][    C0]  ? perf_event__header_size+0x168/0x230
[  194.833419][    C0]  __se_sys_perf_event_open+0x193a/0x1d70
[  194.833448][    C0]  ? __pfx___se_sys_perf_event_open+0x10/0x10
[  194.833478][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  194.833496][    C0]  ? rcu_is_watching+0x15/0xb0
[  194.833514][    C0]  ? do_syscall_64+0xbe/0x3b0
[  194.833528][    C0]  ? __x64_sys_perf_event_open+0x20/0xc0
[  194.833546][    C0]  do_syscall_64+0xfa/0x3b0
[  194.833560][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  194.833574][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  194.833585][    C0]  ? exc_page_fault+0x9f/0xf0
[  194.833602][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  194.833612][    C0] RIP: 0033:0x7fc0e518e9a9
[  194.833624][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  194.833632][    C0] RSP: 002b:00007fc0e601a038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  194.833643][    C0] RAX: ffffffffffffffda RBX: 00007fc0e53b5fa0 RCX: 00007fc0e518e9a9
[  194.833650][    C0] RDX: bfffffffffffffff RSI: 0000000000000000 RDI: 0000200000000180
[  194.833657][    C0] RBP: 00007fc0e5210d69 R08: 0000000000000000 R09: 0000000000000000
[  194.833663][    C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  194.833669][    C0] R13: 0000000000000000 R14: 00007fc0e53b5fa0 R15: 00007fffb62f3f18
[  194.833695][    C0]  </TASK>
[  195.145199][    C0] sched: DL replenish lagged too much

VM DIAGNOSIS:
05:30:27  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000003a RBX=000000000000003a RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000006910
R8 =ffff888108a90237 R9 =1ffff11021152046 R10=dffffc0000000000 R11=ffffffff85472aa0
R12=dffffc0000000000 R13=ffffffff99af58a4 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff85472b1c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc0e601a6c0 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b31019ff8 CR3=000000010c540000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000090602
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fc0e5386478 00007fc0e5386450 XMM03=00007fc0e5386488 00007fc0e5386480
XMM04=00007fc0e5eed100 00007fc0e5386440 XMM05=00007fc0e5386458 00007fc0e53864a0
XMM06=00007fc0e5386498 00007fc0e5386490 XMM07=00007fc0e5386488 00007fc0e5386480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fc0e5211ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=ffffffff8e144480 RCX=ffffffff8b71260c RDX=0000000000000000
RSI=0000000000000004 RDI=ffffffff8e144480 RBP=ffffc90002d0f418 RSP=ffffc90002d0f318
R8 =ffffffff8e144483 R9 =1ffffffff1c28890 R10=dffffc0000000000 R11=fffffbfff1c28891
R12=1ffff920005a1e6c R13=0000000000000001 R14=ffffc90002d0f380 R15=1ffffffff1c28890
RIP=ffffffff82234ea0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fea308e89ad CR3=0000000100098000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
