last executing test programs:

16.687072254s ago: executing program 2 (id=266):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008041)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
recvmsg(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000000c0)=""/18, 0x5}], 0x1}, 0x112)

16.277018631s ago: executing program 2 (id=272):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)={0x0, 0x4, [@local, @local, @broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}]})
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(r2, &(0x7f0000001900)={0x0, 0xffffffea, 0x0}, 0x20040005)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c000)

16.27453783s ago: executing program 1 (id=278):
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="2e0000003e000511d25a80698c6394090224fc602f6e3540160001", 0x1b}], 0x1, 0x0, 0x0, 0x39c}, 0x0)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="030600005600911000dd00000000004a07"], 0xfe33)

16.189298932s ago: executing program 1 (id=273):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000008061111800000000009500000000000000cd6cbcc7"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70)

16.185730215s ago: executing program 1 (id=275):
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040), 0x4)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x100ca, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000001004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x510a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, 0x0, 0x0)
close(r1)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/time\x00')
socket$kcm(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_freezer_state(r2, &(0x7f0000000180), 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[@ANYBLOB='+cpu '], 0x5)

16.13340441s ago: executing program 2 (id=276):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000003040)={&(0x7f0000002d40), 0x6e, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000040), 0x4)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000800)

16.011870073s ago: executing program 0 (id=279):
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x82, &(0x7f0000000000), 0x8)

16.011743151s ago: executing program 0 (id=280):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x6, 0x4, &(0x7f0000000600), 0x6eaace32646325cd)

15.943902242s ago: executing program 2 (id=281):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
close(r2)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000001c40))

15.943541014s ago: executing program 1 (id=282):
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4004, 0x7ff, 0xfffffffe, 0x0, 0x80, 0x80002}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005", 0x17}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="97d9deabea352018000000000000006761110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050)
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)

15.863082197s ago: executing program 1 (id=283):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0)
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0)
recvmsg$unix(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000002c0)=""/37, 0x25}], 0x1}, 0x0)

15.862727462s ago: executing program 0 (id=284):
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0xf, &(0x7f0000000040), 0x4)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x800)

15.813536753s ago: executing program 0 (id=285):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000e40)="d8000000180081064a81f782db44b904021d080400007c09e8fe55a10a0015c0050014a603600e1208000f0000000401a00016009a00014004000000036010fab94dcf5c0461c1d6900094007134cf6ee080000190d0a2ac922353a606487ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00320db70103000040fad95667dc06dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x48084)

15.813041979s ago: executing program 2 (id=286):
r0 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x2000000, @dev, 0x39}, 0x80, 0x0}, 0xe07e872420dfefca)
setsockopt$sock_attach_bpf(r0, 0x29, 0x4e, 0x0, 0x0)

15.763760736s ago: executing program 2 (id=287):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x3500000000000000)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x22, 0x3, 0x0)
r3 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, 0x0, 0x0)
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, 0x0}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)

15.763373214s ago: executing program 0 (id=288):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50)
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x1, 0x42, &(0x7f0000000000), 0xff7b)

15.762762834s ago: executing program 0 (id=289):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x1, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="050000000000000071115e00000000008510000002"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))

0s ago: executing program 1 (id=290):
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x18, 0x1, 0x2, &(0x7f0000000000))

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:58469' (ED25519) to the list of known hosts.
syzkaller login: [   47.913992][ T5788] cgroup: Unknown subsys name 'net'
[   48.042792][ T5788] cgroup: Unknown subsys name 'cpuset'
[   48.047106][ T5788] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.525484][ T5788] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.043729][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.046218][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.052032][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.052073][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.059724][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.063349][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.067970][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.072977][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.073063][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.076540][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.132767][   T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.137389][   T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.142026][   T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.146664][   T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.151757][   T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.371839][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   54.540041][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   54.557902][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.561781][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.564607][ T5827] bridge_slave_0: entered allmulticast mode
[   54.569495][ T5827] bridge_slave_0: entered promiscuous mode
[   54.579400][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.582342][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.585270][ T5827] bridge_slave_1: entered allmulticast mode
[   54.589669][ T5827] bridge_slave_1: entered promiscuous mode
[   54.596302][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   54.683106][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.698040][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.764031][ T5827] team0: Port device team_slave_0 added
[   54.767260][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.771212][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.774347][ T5826] bridge_slave_0: entered allmulticast mode
[   54.777891][ T5826] bridge_slave_0: entered promiscuous mode
[   54.793562][ T5827] team0: Port device team_slave_1 added
[   54.796475][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.799741][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.802594][ T5837] bridge_slave_0: entered allmulticast mode
[   54.805655][ T5837] bridge_slave_0: entered promiscuous mode
[   54.810084][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.813156][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.816222][ T5826] bridge_slave_1: entered allmulticast mode
[   54.819847][ T5826] bridge_slave_1: entered promiscuous mode
[   54.857438][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.860673][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.863851][ T5837] bridge_slave_1: entered allmulticast mode
[   54.867525][ T5837] bridge_slave_1: entered promiscuous mode
[   54.885123][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.887618][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.897701][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.914031][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.927082][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.932483][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.943084][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.950314][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.970597][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.996548][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.012832][ T5826] team0: Port device team_slave_0 added
[   55.037238][ T5826] team0: Port device team_slave_1 added
[   55.055676][ T5837] team0: Port device team_slave_0 added
[   55.092622][ T5827] hsr_slave_0: entered promiscuous mode
[   55.096127][ T5827] hsr_slave_1: entered promiscuous mode
[   55.102862][ T5837] team0: Port device team_slave_1 added
[   55.106237][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.110419][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.120942][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.170549][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.173296][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.184309][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.188748][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.191748][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.205163][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.236588][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.240219][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.250689][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.317485][ T5837] hsr_slave_0: entered promiscuous mode
[   55.321166][ T5837] hsr_slave_1: entered promiscuous mode
[   55.323887][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.326921][ T5837] Cannot create hsr debugfs directory
[   55.355991][ T5826] hsr_slave_0: entered promiscuous mode
[   55.359655][ T5826] hsr_slave_1: entered promiscuous mode
[   55.362855][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.366008][ T5826] Cannot create hsr debugfs directory
[   55.620483][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.636670][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.653316][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.659317][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.713613][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.730234][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.736033][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.755829][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.811625][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.822335][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.834989][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.850879][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.936109][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.981576][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   55.998331][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.000993][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.012967][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.015866][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.033550][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.074045][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.083246][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   56.091199][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.116647][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.119261][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.146845][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.149747][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.161736][   T53] Bluetooth: hci1: command tx timeout
[   56.163837][   T53] Bluetooth: hci0: command tx timeout
[   56.173220][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   56.193679][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.197428][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.215491][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.218817][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.239804][   T53] Bluetooth: hci2: command tx timeout
[   56.322141][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.384799][ T5827] veth0_vlan: entered promiscuous mode
[   56.401961][ T5827] veth1_vlan: entered promiscuous mode
[   56.442876][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.447434][ T5827] veth0_macvtap: entered promiscuous mode
[   56.457858][ T5827] veth1_macvtap: entered promiscuous mode
[   56.484891][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.493245][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.512138][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.523628][ T5827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.527407][ T5827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.532862][ T5827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.536009][ T5827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.549434][ T5837] veth0_vlan: entered promiscuous mode
[   56.571778][ T5837] veth1_vlan: entered promiscuous mode
[   56.620038][ T5826] veth0_vlan: entered promiscuous mode
[   56.636749][ T5837] veth0_macvtap: entered promiscuous mode
[   56.665143][ T5837] veth1_macvtap: entered promiscuous mode
[   56.671095][ T5826] veth1_vlan: entered promiscuous mode
[   56.683873][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.687213][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.711700][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.725464][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.750541][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.753517][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.756582][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.760654][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.767799][ T5826] veth0_macvtap: entered promiscuous mode
[   56.779850][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.782527][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.784036][ T5826] veth1_macvtap: entered promiscuous mode
[   56.856917][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.861982][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.890846][ T4918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.894964][ T4918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.900067][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.921982][ T5826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.926061][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.935216][ T5826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.938308][ T5826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.987985][ T4918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.999088][ T4918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.137293][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.143227][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.188239][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.194731][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.391265][ T5906] netlink: 'syz.2.3': attribute type 2 has an invalid length.
[   57.400149][ T5906] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3'.
[   57.438473][    C1] hrtimer: interrupt took 24939 ns
[   57.561341][ T5911] netlink: 'syz.2.8': attribute type 21 has an invalid length.
[   57.566861][ T5911] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8'.
[   58.100119][ T5931] netlink: 26 bytes leftover after parsing attributes in process `syz.2.17'.
[   58.184419][ T5934] netlink: 'syz.0.18': attribute type 15 has an invalid length.
[   58.188323][ T5934] netlink: 11206 bytes leftover after parsing attributes in process `syz.0.18'.
[   58.214827][   T96] cfg80211: failed to load regulatory.db
[   58.240600][   T53] Bluetooth: hci0: command tx timeout
[   58.243700][ T5220] Bluetooth: hci1: command tx timeout
[   58.319880][   T53] Bluetooth: hci2: command tx timeout
[   58.519805][ T5942] syz.2.24 (5942) used greatest stack depth: 19776 bytes left
[   58.770552][ T5965] netlink: 'syz.1.33': attribute type 21 has an invalid length.
[   58.774252][ T5965] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.33'.
[   58.885492][ T5973] netlink: 132 bytes leftover after parsing attributes in process `syz.2.34'.
[   58.901083][ T5970] warning: `syz.0.35' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   59.143113][ T5991] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.45'.
[   59.146829][ T5991] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   59.167483][ T5991] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   59.276524][ T6001] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.50'.
[   60.319288][   T53] Bluetooth: hci0: command tx timeout
[   60.322105][   T53] Bluetooth: hci1: command tx timeout
[   60.402081][ T5220] Bluetooth: hci2: command tx timeout
[   60.574741][ T6041] delete_channel: no stack
[   60.577143][ T6041] delete_channel: no stack
[   60.664077][ T6046] netlink: 'syz.2.71': attribute type 2 has an invalid length.
[   60.667412][ T6046] netlink: 'syz.2.71': attribute type 8 has an invalid length.
[   60.673119][ T6046] netlink: 132 bytes leftover after parsing attributes in process `syz.2.71'.
[   60.698165][ T6048] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.830945][ T6064] Zero length message leads to an empty skb
[   61.831337][ T6062] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   61.957415][ T6071] netlink: 'syz.2.83': attribute type 21 has an invalid length.
[   62.398770][ T5220] Bluetooth: hci1: command tx timeout
[   62.401223][ T5220] Bluetooth: hci0: command tx timeout
[   62.479014][   T53] Bluetooth: hci2: command tx timeout
[   63.554248][ T6099] netlink: 176 bytes leftover after parsing attributes in process `syz.2.93'.
[   63.702876][ T6111] syz.1.99 uses obsolete (PF_INET,SOCK_PACKET)
[   63.880171][ T6121] netlink: 'syz.0.104': attribute type 21 has an invalid length.
[   63.913556][ T6117] netlink: 'syz.1.102': attribute type 39 has an invalid length.
[   64.418812][   T61] wlan1: Trigger new scan to find an IBSS to join
[   64.663557][ T6127] C: renamed from team_slave_0 (while UP)
[   64.667332][ T6127] netlink: 'syz.0.106': attribute type 2 has an invalid length.
[   64.670145][ T6127] netlink: 116 bytes leftover after parsing attributes in process `syz.0.106'.
[   64.673172][ T6127] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   64.863460][ T6144] netlink: 'syz.0.114': attribute type 27 has an invalid length.
[   64.867600][ T6144] netlink: 'syz.0.114': attribute type 3 has an invalid length.
[   64.871671][ T6144] netlink: 132 bytes leftover after parsing attributes in process `syz.0.114'.
[   64.978442][ T6151] sctp: [Deprecated]: syz.0.117 (pid 6151) Use of struct sctp_assoc_value in delayed_ack socket option.
[   64.978442][ T6151] Use struct sctp_sack_info instead
[   65.164789][ T6159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.120'.
[   65.462127][ T6173] syzkaller0: entered promiscuous mode
[   65.464724][ T6173] syzkaller0: entered allmulticast mode
[   66.379354][ T6184] netlink: 'syz.0.132': attribute type 1 has an invalid length.
[   66.384957][ T6184] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.132'.
[   66.393525][ T6186] netlink: 'syz.1.133': attribute type 4 has an invalid length.
[   66.754802][ T6211] netlink: 'syz.0.146': attribute type 29 has an invalid length.
[   66.863271][ T6214] syzkaller0: entered promiscuous mode
[   66.865149][ T6214] syzkaller0: entered allmulticast mode
[   66.933358][ T6215] netlink: 809 bytes leftover after parsing attributes in process `syz.2.144'.
[   66.937261][ T6215] netlink: 130160 bytes leftover after parsing attributes in process `syz.2.144'.
[   66.944083][ T6215] netlink: 809 bytes leftover after parsing attributes in process `syz.2.144'.
[   67.439729][   T61] wlan1: Trigger new scan to find an IBSS to join
[   67.874289][ T6220] syz.1.149 (6220) used obsolete PPPIOCDETACH ioctl
[   67.962975][ T6222] netlink: 132 bytes leftover after parsing attributes in process `syz.0.150'.
[   68.087174][ T6226] C: renamed from team_slave_0 (while UP)
[   68.112566][ T6226] netlink: 'syz.1.151': attribute type 3 has an invalid length.
[   68.115179][ T6226] netlink: 152 bytes leftover after parsing attributes in process `syz.1.151'.
[   68.123923][ T6226] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   68.151381][   T53] Bluetooth: hci2: unexpected event 0x23 length: 15 > 13
[   68.867640][ T6262] __nla_validate_parse: 2 callbacks suppressed
[   68.867660][ T6262] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.169'.
[   68.934592][ T6267] netlink: 'syz.0.171': attribute type 39 has an invalid length.
[   69.997245][ T6278] netlink: 'syz.2.176': attribute type 4 has an invalid length.
[   70.001923][ T6278] netlink: 152 bytes leftover after parsing attributes in process `syz.2.176'.
[   70.010663][ T6278] .`: renamed from bond0 (while UP)
[   70.412773][ T4918] wlan1: Trigger new scan to find an IBSS to join
[   70.518900][ T6294] netlink: 'syz.2.184': attribute type 22 has an invalid length.
[   70.521771][ T6294] netlink: 'syz.2.184': attribute type 1 has an invalid length.
[   70.524372][ T6294] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.184'.
[   70.781477][ T6302] netlink: 'syz.2.187': attribute type 29 has an invalid length.
[   70.962565][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   70.964776][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   70.979771][ T6317] netlink: 60 bytes leftover after parsing attributes in process `syz.1.191'.
[   70.986980][ T6312] netlink: 60 bytes leftover after parsing attributes in process `syz.1.191'.
[   70.993189][ T6317] netlink: 60 bytes leftover after parsing attributes in process `syz.1.191'.
[   71.377879][   T27] wlan1: Creating new IBSS network, BSSID 32:fb:57:5b:32:cb
[   71.391735][ T6357] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   71.416273][ T6356] netlink: 'syz.1.213': attribute type 21 has an invalid length.
[   71.419460][ T6356] netlink: 176 bytes leftover after parsing attributes in process `syz.1.213'.
[   71.537069][ T6366] syzkaller0: entered promiscuous mode
[   71.547012][ T6366] syzkaller0: entered allmulticast mode
[   73.126665][ T6401] netlink: 'syz.1.233': attribute type 2 has an invalid length.
[   73.134758][ T6401] netlink: 130532 bytes leftover after parsing attributes in process `syz.1.233'.
[   73.315847][ T6415] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.240'.
[   73.388753][ T6423] netlink: 10 bytes leftover after parsing attributes in process `syz.2.244'.
[   74.089548][   T53] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[   74.092902][   T53] Bluetooth: hci2: Injecting HCI hardware error event
[   74.095629][   T53] Bluetooth: hci2: hardware error 0x00
[   74.672394][ T6503] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.282'.
[   74.768304][ T6509] netlink: 'syz.0.285': attribute type 21 has an invalid length.
[   74.777654][ T6509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.285'.
[  101.383465][   T26] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  131.123440][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  131.127705][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  131.133003][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  131.138249][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  131.142690][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  131.147120][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  131.152192][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  131.155937][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  131.159410][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  131.165309][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  131.170363][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  131.174573][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  131.179139][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  131.183275][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  131.189181][ T5220] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  131.556805][ T6535] chnl_net:caif_netlink_parms(): no params data found
[  131.626248][ T6537] chnl_net:caif_netlink_parms(): no params data found
[  132.403749][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.406858][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  133.279034][ T6545] Bluetooth: hci5: command tx timeout
[  133.282121][ T6545] Bluetooth: hci4: command tx timeout
[  133.285205][ T6545] Bluetooth: hci3: command tx timeout
[  135.358866][ T6544] Bluetooth: hci3: command tx timeout
[  135.361597][ T6544] Bluetooth: hci4: command tx timeout
[  135.364299][ T6544] Bluetooth: hci5: command tx timeout
[  137.438978][ T6545] Bluetooth: hci5: command tx timeout
[  137.441624][ T6545] Bluetooth: hci4: command tx timeout
[  137.444106][ T6545] Bluetooth: hci3: command tx timeout
[  139.518976][ T6544] Bluetooth: hci3: command tx timeout
[  139.521634][ T6544] Bluetooth: hci4: command tx timeout
[  139.524208][ T6544] Bluetooth: hci5: command tx timeout
[  151.390122][ T5832] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  151.394078][ T5832] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  151.397173][ T5832] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  151.400829][ T5832] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  151.403692][ T5832] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  151.426289][ T5832] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  151.430373][ T5832] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  151.433352][ T5832] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  151.436190][ T5832] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  151.440034][ T5832] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  151.453587][ T5832] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  151.457366][ T5832] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  151.460817][ T5832] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  151.463843][ T5832] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  151.466567][ T5832] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  153.438909][ T5832] Bluetooth: hci8: command tx timeout
[  153.519730][ T6544] Bluetooth: hci6: command tx timeout
[  153.522849][ T5832] Bluetooth: hci7: command tx timeout
[  155.518955][ T5832] Bluetooth: hci8: command tx timeout
[  155.598877][ T6544] Bluetooth: hci6: command tx timeout
[  155.601370][ T5832] Bluetooth: hci7: command tx timeout
[  157.598923][ T5832] Bluetooth: hci8: command tx timeout
[  157.678852][ T6544] Bluetooth: hci6: command tx timeout
[  157.681685][ T5832] Bluetooth: hci7: command tx timeout
[  159.678811][ T5832] Bluetooth: hci8: command tx timeout
[  159.758865][ T5832] Bluetooth: hci7: command tx timeout
[  159.761437][ T5832] Bluetooth: hci6: command tx timeout
[  179.878539][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  179.880923][    C1] rcu: 	1-...!: (10500 ticks this GP) idle=1c74/1/0x4000000000000000 softirq=16583/16583 fqs=0
[  179.886196][    C1] rcu: 	(t=10500 jiffies g=9521 q=3369 ncpus=2)
[  179.888430][    C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10499 jiffies! g9521 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
[  179.892670][    C1] rcu: 	Possible timer handling issue on cpu=1 timer-softirq=3195
[  179.895346][    C1] rcu: rcu_preempt kthread starved for 10501 jiffies! g9521 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1
[  179.899337][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  179.902728][    C1] rcu: RCU grace-period kthread stack dump:
[  179.904770][    C1] task:rcu_preempt     state:I stack:26792 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
[  179.908973][    C1] Call Trace:
[  179.910135][    C1]  <TASK>
[  179.911206][    C1]  __schedule+0x16f5/0x4d00
[  179.912833][    C1]  ? do_raw_spin_unlock+0x4d/0x240
[  179.914644][    C1]  ? schedule+0x165/0x360
[  179.916123][    C1]  ? __lock_acquire+0xab9/0xd20
[  179.917828][    C1]  ? __pfx___schedule+0x10/0x10
[  179.919530][    C1]  ? schedule+0x91/0x360
[  179.921005][    C1]  schedule+0x165/0x360
[  179.922430][    C1]  schedule_timeout+0x12b/0x270
[  179.924098][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  179.925889][    C1]  ? __pfx_process_timeout+0x10/0x10
[  179.927690][    C1]  ? prepare_to_swait_event+0x341/0x380
[  179.929537][    C1]  rcu_gp_fqs_loop+0x301/0x1540
[  179.931204][    C1]  ? __pfx_rcu_gp_init+0x10/0x10
[  179.932876][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  179.934653][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  179.936388][    C1]  ? _raw_spin_unlock_irq+0x2e/0x50
[  179.938206][    C1]  ? finish_swait+0xcd/0x1f0
[  179.939820][    C1]  rcu_gp_kthread+0x99/0x390
[  179.941394][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  179.943166][    C1]  ? __kthread_parkme+0x7b/0x200
[  179.944838][    C1]  ? __kthread_parkme+0x1a1/0x200
[  179.946602][    C1]  kthread+0x711/0x8a0
[  179.948034][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  179.949873][    C1]  ? __pfx_kthread+0x10/0x10
[  179.951453][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  179.953248][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  179.955027][    C1]  ? __pfx_kthread+0x10/0x10
[  179.956606][    C1]  ret_from_fork+0x3fc/0x770
[  179.958276][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  179.960488][    C1]  ? __switch_to_asm+0x39/0x70
[  179.962191][    C1]  ? __switch_to_asm+0x33/0x70
[  179.963782][    C1]  ? __pfx_kthread+0x10/0x10
[  179.965321][    C1]  ret_from_fork_asm+0x1a/0x30
[  179.966955][    C1]  </TASK>
[  179.968131][    C1] CPU: 1 UID: 0 PID: 6519 Comm: syz.2.287 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  179.968141][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  179.968146][    C1] RIP: 0010:rcu_read_unlock_special+0x87/0x4c0
[  179.968158][    C1] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 92 37 f8 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
[  179.968164][    C1] RSP: 0018:ffffc900001e04a0 EFLAGS: 00000206
[  179.968171][    C1] RAX: 25a03828efff2e00 RBX: 1ffff9200003c09c RCX: 25a03828efff2e00
[  179.968176][    C1] RDX: 0000000000000002 RSI: ffffffff8d9987c6 RDI: ffffffff8be29f80
[  179.968181][    C1] RBP: ffffc900001e0598 R08: ffffffff8fa1eaf7 R09: 1ffffffff1f43d5e
[  179.968185][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d5f R12: ffffffff8e144400
[  179.968190][    C1] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000002
[  179.968194][    C1] FS:  00007f36b544b6c0(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
[  179.968200][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  179.968204][    C1] CR2: 00007f36b544afc8 CR3: 00000000270f4000 CR4: 00000000000006f0
[  179.968231][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  179.968236][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  179.968240][    C1] Call Trace:
[  179.968244][    C1]  <IRQ>
[  179.968250][    C1]  ? irqentry_exit+0x74/0x90
[  179.968260][    C1]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  179.968277][    C1]  ? unwind_next_frame+0xa5/0x2390
[  179.968294][    C1]  __rcu_read_unlock+0x84/0xe0
[  179.968308][    C1]  ? unwind_next_frame+0xa5/0x2390
[  179.968316][    C1]  unwind_next_frame+0x19ae/0x2390
[  179.968332][    C1]  ? unwind_next_frame+0xa5/0x2390
[  179.968342][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  179.968354][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  179.968368][    C1]  arch_stack_walk+0x11c/0x150
[  179.968387][    C1]  ? irq_exit_rcu+0x9/0x30
[  179.968400][    C1]  stack_trace_save+0x9c/0xe0
[  179.968409][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  179.968418][    C1]  ? do_raw_spin_unlock+0x4d/0x240
[  179.968433][    C1]  kasan_save_track+0x3e/0x80
[  179.968444][    C1]  ? kasan_save_track+0x3e/0x80
[  179.968452][    C1]  ? __kasan_slab_alloc+0x6c/0x80
[  179.968457][    C1]  ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  179.968464][    C1]  ? __alloc_skb+0x112/0x2d0
[  179.968470][    C1]  ? lapb_send_control+0x38/0x3e0
[  179.968476][    C1]  ? lapb_t1timer_expiry+0x699/0xab0
[  179.968482][    C1]  ? call_timer_fn+0x17e/0x5f0
[  179.968528][    C1]  ? __run_timer_base+0x61a/0x860
[  179.968541][    C1]  ? run_timer_softirq+0xb7/0x180
[  179.968552][    C1]  ? handle_softirqs+0x286/0x870
[  179.968561][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  179.968605][    C1]  __kasan_slab_alloc+0x6c/0x80
[  179.968615][    C1]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  179.968623][    C1]  ? __alloc_skb+0x112/0x2d0
[  179.968646][    C1]  __alloc_skb+0x112/0x2d0
[  179.968655][    C1]  lapb_send_control+0x38/0x3e0
[  179.968662][    C1]  ? lapb_t1timer_expiry+0x33/0xab0
[  179.968669][    C1]  lapb_t1timer_expiry+0x699/0xab0
[  179.968680][    C1]  call_timer_fn+0x17e/0x5f0
[  179.968686][    C1]  ? __pfx_lapb_t1timer_expiry+0x10/0x10
[  179.968692][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  179.968699][    C1]  ? call_timer_fn+0xbe/0x5f0
[  179.968705][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  179.968717][    C1]  ? __pfx_lapb_t1timer_expiry+0x10/0x10
[  179.968724][    C1]  __run_timer_base+0x61a/0x860
[  179.968733][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  179.968749][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  179.968766][    C1]  run_timer_softirq+0xb7/0x180
[  179.968776][    C1]  handle_softirqs+0x286/0x870
[  179.968785][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  179.968795][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  179.968807][    C1]  __irq_exit_rcu+0xca/0x1f0
[  179.968814][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  179.968826][    C1]  irq_exit_rcu+0x9/0x30
[  179.968832][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  179.968841][    C1]  </IRQ>
[  179.968843][    C1]  <TASK>
[  179.968846][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  179.968853][    C1] RIP: 0010:__futex_wait+0x1d6/0x3e0
[  179.968860][    C1] Code: 00 00 48 3b 44 24 28 0f 84 36 01 00 00 e8 a2 bd 0b 00 e8 5d 4c bb 09 eb 05 e8 96 bd 0b 00 4c 8d 2d 00 00 00 00 48 8b 44 24 50 <42> 80 3c 20 00 48 8b 44 24 18 74 0f 48 8b 7c 24 18 e8 84 e4 6e 00
[  179.968865][    C1] RSP: 0018:ffffc90002e8fa20 EFLAGS: 00000246
[  179.968871][    C1] RAX: 1ffff110055232f1 RBX: 0000000000000000 RCX: 0000000000000000
[  179.968875][    C1] RDX: 0000000000000000 RSI: ffffffff8be29f60 RDI: 00000000ffffffff
[  179.968879][    C1] RBP: ffffc90002e8fbd0 R08: ffffffff8fa1eaf7 R09: 1ffffffff1f43d5e
[  179.968883][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d5f R12: dffffc0000000000
[  179.968888][    C1] R13: ffffffff81b46031 R14: ffffc90002e8faa0 R15: ffff88802a918000
[  179.968893][    C1]  ? __futex_wait+0x1d1/0x3e0
[  179.968910][    C1]  ? __pfx___futex_wait+0x10/0x10
[  179.968917][    C1]  ? __pfx_futex_wake_mark+0x10/0x10
[  179.968932][    C1]  ? __lock_acquire+0xab9/0xd20
[  179.968943][    C1]  futex_wait+0x104/0x360
[  179.968950][    C1]  ? __pfx_futex_wait+0x10/0x10
[  179.968960][    C1]  ? trace_call_bpf+0xb7/0x850
[  179.968967][    C1]  ? trace_call_bpf+0x5ba/0x850
[  179.968974][    C1]  ? trace_call_bpf+0xb7/0x850
[  179.968982][    C1]  do_futex+0x333/0x420
[  179.968991][    C1]  ? __pfx_trace_call_bpf+0x10/0x10
[  179.968999][    C1]  ? __pfx_do_futex+0x10/0x10
[  179.969007][    C1]  ? kvm_sched_clock_read+0x11/0x20
[  179.969018][    C1]  __se_sys_futex+0x36f/0x400
[  179.969027][    C1]  ? perf_trace_preemptirq_template+0x280/0x340
[  179.969039][    C1]  ? __pfx___se_sys_futex+0x10/0x10
[  179.969051][    C1]  ? __x64_sys_futex+0x21/0xf0
[  179.969061][    C1]  do_syscall_64+0xfa/0x3b0
[  179.969071][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.969077][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  179.969086][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.969092][    C1] RIP: 0033:0x7f36b458eb69
[  179.969099][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  179.969103][    C1] RSP: 002b:00007f36b544b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  179.969110][    C1] RAX: ffffffffffffffda RBX: 00007f36b47b6088 RCX: 00007f36b458eb69
[  179.969114][    C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f36b47b6088
[  179.969118][    C1] RBP: 00007f36b47b6080 R08: 0000000000000000 R09: 0000000000000000
[  179.969122][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f36b47b608c
[  179.969126][    C1] R13: 0000000000000000 R14: 00007fffe56f4df0 R15: 00007fffe56f4ed8
[  179.969137][    C1]  </TASK>
[  180.200404][    C1] sched: DL replenish lagged too much
[  180.561397][ T5833] Bluetooth: hci1: command 0x0406 tx timeout
[  180.564204][ T5832] Bluetooth: hci0: command 0x0406 tx timeout

VM DIAGNOSIS:
14:31:52  Registers:
info registers vcpu 0

CPU#0
RAX=750961b766e02100 RBX=ffffffff81975f18 RCX=750961b766e02100 RDX=0000000000000001
RSI=ffffffff8d9987c6 RDI=ffffffff8be29f80 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa1eaf0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6e84f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055761878e130 CR3=0000000112152000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f624f587d20
XMM02=0000000500000007 02a8100000000001 XMM03=0000000000306e61 6c7701ffffffffff
XMM04=0000000000000000 000000000000000e XMM05=0000000000000000 000000000003bf12
XMM06=0606012190080888 0005088000000007 XMM07=0210000200000000 71ec0280040880a2
XMM08=d394080001080006 0128b80800000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33bf460 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99dfa470 RSP=ffffc900001df770
R8 =ffff888020ae0237 R9 =1ffff1100415c046 R10=dffffc0000000000 R11=ffffffff85472150
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff854721c7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f36b544b6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f36b544afc8 CR3=00000000270f4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007f2325612f89
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
