last executing test programs:

1.341324358s ago: executing program 1 (id=129):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0xc0}]})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})

1.239983797s ago: executing program 1 (id=132):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000080000000950000000000000018"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33)

1.173610597s ago: executing program 1 (id=135):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x4cfb, r0}, 0x38)

1.024112394s ago: executing program 1 (id=138):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000040007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000002b703000000000001850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000180)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x24)

802.712475ms ago: executing program 0 (id=142):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x31)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a50000001801000020206405000000000004000f7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

704.052687ms ago: executing program 0 (id=143):
r0 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={<r1=>r0})
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0)
r2 = socket$kcm(0xa, 0x5, 0x0)
close(r1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
setsockopt$sock_attach_bpf(r2, 0x29, 0x22, &(0x7f0000000100)=r3, 0x120)

703.752014ms ago: executing program 0 (id=144):
syz_clone(0x10c000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000380), 0x12)

631.667667ms ago: executing program 1 (id=146):
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x18)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='c *:23'], 0xa)

565.388413ms ago: executing program 2 (id=147):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x2c, 0x0, 0x0)

564.810578ms ago: executing program 1 (id=148):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)
r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @generic={0x66}, @initr0, @exit, @printk={@x, {0x3, 0x3, 0x6}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0xa}, 0x94)
r5 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001040)=""/4095, 0xfff}], 0x1}, 0x0)
sendmsg$inet(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259aa673f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000f40)={0x3, 0x80, 0xfc, 0xe7, 0xfa, 0x9, 0x0, 0x4, 0x301e4, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x1}, 0x4a11, 0x200000000000007, 0x6, 0x0, 0x80a, 0x7, 0x4, 0x0, 0x8fc, 0x0, 0x3})
r6 = socket$kcm(0x10, 0x3, 0x10)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x0, 0x0})
ioctl$TUNSETFILTEREBPF(r7, 0x800454e1, &(0x7f0000000a80)=r1)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x5, [@int={0x2, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0x7, 0x2}, @int={0xc, 0x0, 0x0, 0x1, 0x0, 0x60, 0x0, 0x44, 0x4}, @volatile={0xf, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x0, 0x30, 0x2e]}}, &(0x7f0000000700)=""/183, 0x49, 0xb7, 0x0, 0x8}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=r3], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000840)={0x6, <r9=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x9, 0x20, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbf, 0x0, 0x0, 0x0, 0x6}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6921, 0x0, 0x0, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @call={0x85, 0x0, 0x0, 0x1d}, @ldst={0x3, 0x0, 0x3, 0xa, 0xf633ffa04e149eaf, 0xfffffffffffffffe, 0x4}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb3}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000200)='syzkaller\x00', 0xb, 0xdc, &(0x7f0000000500)=""/220, 0x41100, 0x58, '\x00', 0x0, @fallback=0x11, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x3, 0x9, 0x0, 0xa8d8}, 0x10, r9, 0xffffffffffffffff, 0x2, &(0x7f0000000900)=[r4, 0xffffffffffffffff, r2, r4, r4], &(0x7f0000000940)=[{0x0, 0x1, 0x9, 0x2}, {0x5, 0x3, 0xa, 0x3}], 0x10, 0x2}, 0x94)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b11d25a806f8c6394f90524fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

475.568676ms ago: executing program 2 (id=149):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

407.331701ms ago: executing program 2 (id=150):
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x4, 0x10009, 0x5}], 0x10, 0xfffffff7}, 0x94)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90324fc60100c028010000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

406.74079ms ago: executing program 0 (id=151):
r0 = socket$kcm(0x2, 0x1, 0x84)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x8, 0x92, 0x3, 0x9, 0x0, 0x80001, 0x180731, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xbe, 0x1}, 0x102000, 0x1, 0xb, 0x2, 0x5, 0x8, 0x43, 0x0, 0x7f, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000000), 0xe)

281.711829ms ago: executing program 2 (id=152):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000035000b40d25a80648c2594f90424fc60", 0x14}], 0x1}, 0x0)

281.207638ms ago: executing program 0 (id=153):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000240)=@framed={{0x18, 0x4, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x18}, [@printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f00000005c0)='GPL\x00', 0xe}, 0x90)

183.459668ms ago: executing program 2 (id=154):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000100)={'netdevsim0\x00', @broadcast})

181.121214ms ago: executing program 0 (id=155):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, 0xfffffffffffffffe, 0x0}, 0x20)

0s ago: executing program 2 (id=156):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:6957' (ED25519) to the list of known hosts.
syzkaller login: [   48.458566][ T5753] cgroup: Unknown subsys name 'net'
[   48.580843][ T5753] cgroup: Unknown subsys name 'cpuset'
[   48.588254][ T5753] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.380551][ T5753] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   59.240859][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   60.876863][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   60.880674][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   60.884385][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   60.890255][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   60.893982][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   61.006770][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   61.011479][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   61.016007][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   61.019496][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   61.022313][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   61.025034][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   61.029638][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   61.032662][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   61.050973][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   61.053985][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   61.104688][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   61.241537][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.244702][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.247830][ T5837] bridge_slave_0: entered allmulticast mode
[   61.250819][ T5837] bridge_slave_0: entered promiscuous mode
[   61.255236][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.258360][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.261080][ T5837] bridge_slave_1: entered allmulticast mode
[   61.264560][ T5837] bridge_slave_1: entered promiscuous mode
[   61.332146][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.338197][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.370662][ T5837] team0: Port device team_slave_0 added
[   61.388483][ T5837] team0: Port device team_slave_1 added
[   61.452425][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.455129][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.464598][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.498840][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.501540][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.511873][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.567594][ T5837] hsr_slave_0: entered promiscuous mode
[   61.570176][ T5837] hsr_slave_1: entered promiscuous mode
[   61.574004][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   61.615352][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   61.714901][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.718082][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.720721][ T5841] bridge_slave_0: entered allmulticast mode
[   61.723696][ T5841] bridge_slave_0: entered promiscuous mode
[   61.758154][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.761363][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.764697][ T5841] bridge_slave_1: entered allmulticast mode
[   61.769672][ T5841] bridge_slave_1: entered promiscuous mode
[   61.781806][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.784231][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.787205][ T5842] bridge_slave_0: entered allmulticast mode
[   61.790155][ T5842] bridge_slave_0: entered promiscuous mode
[   61.794611][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.797448][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.799866][ T5842] bridge_slave_1: entered allmulticast mode
[   61.803234][ T5842] bridge_slave_1: entered promiscuous mode
[   61.880535][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.886584][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.898702][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.904842][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.953841][ T5842] team0: Port device team_slave_0 added
[   61.978555][ T5841] team0: Port device team_slave_0 added
[   61.982741][ T5842] team0: Port device team_slave_1 added
[   61.987690][ T5841] team0: Port device team_slave_1 added
[   62.071360][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.074311][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.085215][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.110879][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.113392][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.123670][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.128417][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.130799][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.140369][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.144951][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.149295][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.161764][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.207822][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   62.237831][ T5842] hsr_slave_0: entered promiscuous mode
[   62.240970][ T5842] hsr_slave_1: entered promiscuous mode
[   62.243852][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.247775][ T5842] Cannot create hsr debugfs directory
[   62.250229][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   62.257499][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   62.265187][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   62.323479][ T5841] hsr_slave_0: entered promiscuous mode
[   62.328272][ T5841] hsr_slave_1: entered promiscuous mode
[   62.331208][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.334331][ T5841] Cannot create hsr debugfs directory
[   62.592078][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   62.601648][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   62.607603][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   62.614689][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   62.687173][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   62.699849][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.704916][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   62.716758][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   62.724198][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   62.763062][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   62.793372][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.796926][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.823579][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.826015][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.901558][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.923068][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   62.946465][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.949596][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.959414][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.962673][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.977019][ T5219] Bluetooth: hci0: command tx timeout
[   62.998151][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.019271][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   63.036829][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.039935][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.046288][ T5219] Bluetooth: hci2: command tx timeout
[   63.052734][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.055905][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.137387][ T5219] Bluetooth: hci1: command tx timeout
[   63.157035][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.231798][ T5837] veth0_vlan: entered promiscuous mode
[   63.243468][ T5837] veth1_vlan: entered promiscuous mode
[   63.283903][ T5837] veth0_macvtap: entered promiscuous mode
[   63.301127][ T5837] veth1_macvtap: entered promiscuous mode
[   63.331447][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.344594][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.351581][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.358222][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.362295][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.368632][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.372458][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.397118][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.481883][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.490396][ T5841] veth0_vlan: entered promiscuous mode
[   63.496835][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.502499][ T5842] veth0_vlan: entered promiscuous mode
[   63.514607][ T5841] veth1_vlan: entered promiscuous mode
[   63.537815][ T5842] veth1_vlan: entered promiscuous mode
[   63.559730][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.566959][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.570144][ T5841] veth0_macvtap: entered promiscuous mode
[   63.585205][ T5841] veth1_macvtap: entered promiscuous mode
[   63.600136][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.614576][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.627338][ T5841] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.631215][ T5841] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.634850][ T5841] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.641223][ T5841] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.661077][ T5842] veth0_macvtap: entered promiscuous mode
[   63.695223][ T5842] veth1_macvtap: entered promiscuous mode
[   63.699137][ T5900] Illegal XDP return value 4294967274 on prog  (id 2) dev N/A, expect packet loss!
[   63.752473][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.771853][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.817141][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.825704][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.830838][ T5842] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.834553][ T5842] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.843953][ T5842] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.848874][ T5842] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.882811][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.888208][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.980269][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.983712][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.035711][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.039518][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.079141][ T5907] netlink: 'syz.1.4': attribute type 3 has an invalid length.
[   64.082539][ T5907] netlink: 'syz.1.4': attribute type 1 has an invalid length.
[   64.091523][ T5907] netlink: 191152 bytes leftover after parsing attributes in process `syz.1.4'.
[   64.180377][ T5914] netlink: 'syz.1.9': attribute type 22 has an invalid length.
[   64.182996][ T5914] netlink: 14380 bytes leftover after parsing attributes in process `syz.1.9'.
[   64.404635][ T5924] tap0: tun_chr_ioctl cmd 1074025677
[   64.414043][ T5924] tap0: linktype set to 825
[   64.541847][ T5932] netlink: 'syz.2.17': attribute type 1 has an invalid length.
[   64.561031][ T5932] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.17'.
[   64.833360][ T5951] netlink: 'syz.2.26': attribute type 21 has an invalid length.
[   64.848331][ T5951] netlink: 152 bytes leftover after parsing attributes in process `syz.2.26'.
[   65.055725][ T5219] Bluetooth: hci0: command tx timeout
[   65.117913][ T5968] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.34'.
[   65.126147][ T5219] Bluetooth: hci2: command tx timeout
[   65.206713][ T5219] Bluetooth: hci1: command tx timeout
[   65.455116][    C1] hrtimer: interrupt took 34288 ns
[   66.545378][ T6011] syzkaller0: entered promiscuous mode
[   66.550068][ T6011] syzkaller0: entered allmulticast mode
[   67.126591][ T5219] Bluetooth: hci0: command tx timeout
[   67.167330][ T6030] netlink: 'syz.2.61': attribute type 10 has an invalid length.
[   67.216415][ T5219] Bluetooth: hci2: command tx timeout
[   67.288215][ T5219] Bluetooth: hci1: command tx timeout
[   67.763330][ T6030] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.789648][ T6030] batman_adv: batadv0: Removing interface: batadv_slave_0
[   67.809003][ T6030] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[   67.968522][ T6030] syz.2.61 (6030) used greatest stack depth: 20800 bytes left
[   68.061171][ T6054] netlink: 'syz.2.71': attribute type 10 has an invalid length.
[   68.062797][ T6057] netlink: 'syz.1.72': attribute type 39 has an invalid length.
[   68.065209][ T6054] netlink: 55 bytes leftover after parsing attributes in process `syz.2.71'.
[   68.398528][ T6058] warning: `syz.0.70' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   68.831585][ T6073] Zero length message leads to an empty skb
[   69.101700][ T6086] netlink: 'syz.1.83': attribute type 25 has an invalid length.
[   69.104851][ T6086] netlink: 'syz.1.83': attribute type 28 has an invalid length.
[   69.206271][ T5219] Bluetooth: hci0: command tx timeout
[   69.286753][ T5219] Bluetooth: hci2: command tx timeout
[   69.366053][ T5219] Bluetooth: hci1: command tx timeout
[   70.083213][ T5219] Bluetooth: hci0: unexpected event 0x0f length: 151 > 4
[   70.310168][ T5219] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[   70.557186][ T6126] syzkaller0: entered promiscuous mode
[   70.559243][ T6126] syzkaller0: entered allmulticast mode
[   71.153797][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.160814][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.721334][ T6146] netlink: 60 bytes leftover after parsing attributes in process `syz.1.110'.
[   72.138249][ T6156] syz.2.115: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   72.158292][ T6156] CPU: 1 UID: 0 PID: 6156 Comm: syz.2.115 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[   72.158321][ T6156] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   72.158330][ T6156] Call Trace:
[   72.158339][ T6156]  <TASK>
[   72.158347][ T6156]  dump_stack_lvl+0x189/0x250
[   72.158377][ T6156]  ? __pfx_dump_stack_lvl+0x10/0x10
[   72.158398][ T6156]  ? __pfx__printk+0x10/0x10
[   72.158421][ T6156]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   72.158444][ T6156]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   72.158466][ T6156]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   72.158486][ T6156]  warn_alloc+0x214/0x310
[   72.158504][ T6156]  ? stack_depot_save_flags+0x429/0x900
[   72.158527][ T6156]  ? __pfx_warn_alloc+0x10/0x10
[   72.158546][ T6156]  ? kasan_save_track+0x4f/0x80
[   72.158568][ T6156]  ? xskq_create+0x56/0x170
[   72.158588][ T6156]  ? xsk_init_queue+0xb0/0x110
[   72.158602][ T6156]  ? xsk_setsockopt+0x4de/0x710
[   72.158616][ T6156]  ? do_sock_setsockopt+0x17c/0x1b0
[   72.158629][ T6156]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   72.158641][ T6156]  ? do_syscall_64+0xfa/0x3b0
[   72.158661][ T6156]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.158682][ T6156]  __vmalloc_node_range_noprof+0x125/0x12f0
[   72.158722][ T6156]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   72.158744][ T6156]  ? __kasan_kmalloc+0x93/0xb0
[   72.158762][ T6156]  vmalloc_user_noprof+0xad/0xf0
[   72.158778][ T6156]  ? xskq_create+0xbf/0x170
[   72.158797][ T6156]  xskq_create+0xbf/0x170
[   72.158818][ T6156]  xsk_init_queue+0xb0/0x110
[   72.158837][ T6156]  xsk_setsockopt+0x4de/0x710
[   72.158857][ T6156]  ? __pfx_xsk_setsockopt+0x10/0x10
[   72.158875][ T6156]  ? __fget_files+0x2a/0x420
[   72.158891][ T6156]  ? aa_sock_opt_perm+0x74/0x110
[   72.158913][ T6156]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   72.158932][ T6156]  ? __pfx_xsk_setsockopt+0x10/0x10
[   72.158948][ T6156]  do_sock_setsockopt+0x17c/0x1b0
[   72.158968][ T6156]  __x64_sys_setsockopt+0x13f/0x1b0
[   72.158987][ T6156]  do_syscall_64+0xfa/0x3b0
[   72.159004][ T6156]  ? lockdep_hardirqs_on+0x9c/0x150
[   72.159022][ T6156]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.159035][ T6156]  ? exc_page_fault+0x9f/0xf0
[   72.159055][ T6156]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.159068][ T6156] RIP: 0033:0x7fcfae18eb69
[   72.159117][ T6156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   72.159133][ T6156] RSP: 002b:00007fcfaef26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   72.159151][ T6156] RAX: ffffffffffffffda RBX: 00007fcfae3b5fa0 RCX: 00007fcfae18eb69
[   72.159171][ T6156] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005
[   72.159181][ T6156] RBP: 00007fcfae211df1 R08: 0000000000000004 R09: 0000000000000000
[   72.159189][ T6156] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[   72.159200][ T6156] R13: 0000000000000000 R14: 00007fcfae3b5fa0 R15: 00007ffff3d2d338
[   72.159223][ T6156]  </TASK>
[   72.159232][ T6156] Mem-Info:
[   72.310618][ T6156] active_anon:5212 inactive_anon:0 isolated_anon:0
[   72.310618][ T6156]  active_file:909 inactive_file:38211 isolated_file:0
[   72.310618][ T6156]  unevictable:1768 dirty:1429 writeback:0
[   72.310618][ T6156]  slab_reclaimable:9076 slab_unreclaimable:51441
[   72.310618][ T6156]  mapped:18102 shmem:2435 pagetables:1054
[   72.310618][ T6156]  sec_pagetables:0 bounce:0
[   72.310618][ T6156]  kernel_misc_reclaimable:0
[   72.310618][ T6156]  free:301441 free_pcp:19069 free_cma:0
[   72.335916][ T6156] Node 0 active_anon:12764kB inactive_anon:0kB active_file:1788kB inactive_file:90960kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30540kB dirty:4756kB writeback:0kB shmem:4924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6820kB pagetables:2304kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   72.351152][ T6156] Node 1 active_anon:8084kB inactive_anon:0kB active_file:1848kB inactive_file:61884kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:41868kB dirty:960kB writeback:0kB shmem:4816kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4456kB pagetables:1436kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   72.369454][ T6156] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   72.370826][ T5219] Bluetooth: hci2: command tx timeout
[   72.381493][ T6156] lowmem_reserve[]: 0 812 812 812 812
[   72.391480][ T6156] Node 0 DMA32 free:363932kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12764kB inactive_anon:0kB active_file:1788kB inactive_file:90960kB unevictable:3536kB writepending:4756kB present:1556484kB managed:831912kB mlocked:0kB bounce:0kB free_pcp:28016kB local_pcp:9248kB free_cma:0kB
[   72.401574][ T6166] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.120'.
[   72.403945][ T6156] lowmem_reserve[]: 0 0 0 0 0
[   72.409547][ T6156] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[   72.423212][ T6156] lowmem_reserve[]: 0 0 854 854 854
[   72.425607][ T6156] Node 1 Normal free:367852kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8084kB inactive_anon:0kB active_file:1848kB inactive_file:61884kB unevictable:3536kB writepending:960kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:49032kB local_pcp:18200kB free_cma:0kB
[   72.445629][ T6156] lowmem_reserve[]: 0 0 0 0 0
[   72.447622][ T6156] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   72.485781][ T6156] Node 0 DMA32: 825*4kB (UME) 138*8kB (UM) 83*16kB (U) 2*32kB (UE) 3*64kB (UE) 2*128kB (U) 11*256kB (UM) 9*512kB (ME) 6*1024kB (UME) 4*2048kB (UME) 82*4096kB (M) = 363876kB
[   72.494158][ T6156] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   72.517428][ T6156] Node 1 Normal: 3679*4kB (UME) 110*8kB (ME) 264*16kB (UME) 176*32kB (UME) 37*64kB (UME) 11*128kB (UM) 7*256kB (UME) 4*512kB (UM) 5*1024kB (UME) 3*2048kB (ME) 79*4096kB (M) = 367916kB
[   72.529134][ T6156] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   72.536435][ T6156] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   72.716891][ T6156] 41556 total pagecache pages
[   72.718981][ T6156] 0 pages in swap cache
[   72.720848][ T6156] Free swap  = 124996kB
[   72.722657][ T6156] Total swap = 124996kB
[   72.724349][ T6156] 786301 pages RAM
[   72.727623][ T6156] 0 pages HighMem/MovableOnly
[   72.729483][ T6156] 241075 pages reserved
[   72.731738][ T6156] 0 pages cma reserved
[   73.933059][ T6232] netlink: 'syz.2.150': attribute type 2 has an invalid length.
[   73.952032][ T6232] netlink: 'syz.2.150': attribute type 1 has an invalid length.
[   73.956265][ T6232] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.150'.
[   73.960557][ T6232] block nbd5: not configured, cannot reconfigure
[   74.003774][ T6235] netlink: 60 bytes leftover after parsing attributes in process `syz.1.148'.
[   74.022054][ T6228] netlink: 60 bytes leftover after parsing attributes in process `syz.1.148'.
[   74.096698][ T6241] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   74.115368][ T6241] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   74.290290][ T6247] netlink: 'syz.2.157': attribute type 27 has an invalid length.
[   89.867142][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   89.874020][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   89.878756][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   89.883646][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   89.889353][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   90.233575][   T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   90.239441][   T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   90.243990][   T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   90.249525][   T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   90.253587][   T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   90.277674][ T5219] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   90.283878][ T5219] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   90.289791][ T5219] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   90.294128][ T5219] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   90.298587][ T5219] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   91.925804][ T5219] Bluetooth: hci3: command tx timeout
[   92.325788][ T5848] Bluetooth: hci4: command tx timeout
[   92.329169][ T5219] Bluetooth: hci5: command tx timeout
[   94.005813][ T5219] Bluetooth: hci3: command tx timeout
[   94.405715][ T5848] Bluetooth: hci4: command tx timeout
[   94.408199][ T5219] Bluetooth: hci5: command tx timeout
[   96.086147][ T5219] Bluetooth: hci3: command tx timeout
[   96.486852][ T5219] Bluetooth: hci5: command tx timeout
[   96.488906][ T5219] Bluetooth: hci4: command tx timeout
[   98.175825][ T5848] Bluetooth: hci3: command tx timeout
[   98.565766][ T5848] Bluetooth: hci4: command tx timeout
[   98.568296][ T5848] Bluetooth: hci5: command tx timeout
[  112.265520][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 36090004440 wd_nsec: 36090005220
[  150.926158][   T55] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  150.936419][   T55] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  150.940785][   T55] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  150.945260][   T55] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  150.949580][   T55] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  151.002348][ T5848] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  151.008815][ T5848] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  151.012932][ T5848] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  151.018299][ T5848] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  151.022195][ T5848] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  151.044131][ T5848] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  151.050207][ T5848] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  151.054079][ T5848] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  151.058648][ T5848] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  151.062426][ T5848] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  152.965820][ T5848] Bluetooth: hci7: command tx timeout
[  153.046242][ T5848] Bluetooth: hci6: command tx timeout
[  153.125957][ T5848] Bluetooth: hci8: command tx timeout
[  155.057037][ T5848] Bluetooth: hci7: command tx timeout
[  155.135823][ T5848] Bluetooth: hci6: command tx timeout
[  155.205754][ T5848] Bluetooth: hci8: command tx timeout
[  157.125700][ T5848] Bluetooth: hci7: command tx timeout
[  157.205963][ T5848] Bluetooth: hci6: command tx timeout
[  157.285684][ T5848] Bluetooth: hci8: command tx timeout
[  159.216861][ T5848] Bluetooth: hci7: command tx timeout
[  159.285697][ T5848] Bluetooth: hci6: command tx timeout
[  159.365696][ T5848] Bluetooth: hci8: command tx timeout
[  179.195462][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  179.198389][    C1] rcu: 	1-....: (10500 ticks this GP) idle=a4d4/1/0x4000000000000000 softirq=15629/15629 fqs=331
[  179.204513][    C1] rcu: 	         hardirqs   softirqs   csw/system
[  179.207210][    C1] rcu: 	 number:   118156          0            0
[  179.210020][    C1] rcu: 	cputime:     3364       3775           14   ==> 7140(ms)
[  179.213451][    C1] rcu: 	(t=10500 jiffies g=8997 q=2194 ncpus=2)
[  179.216137][    C1] CPU: 1 UID: 0 PID: 6228 Comm: syz.1.148 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  179.216152][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  179.216160][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110
[  179.216178][    C1] Code: 74 05 e8 9b 93 56 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> e3 c1 1f f6 65 8b 05 bc f9 2e 07 85 c0 74 40 48 c7 04 24 0e 36
[  179.216187][    C1] RSP: 0018:ffffc900001e0a60 EFLAGS: 00000206
[  179.216197][    C1] RAX: 6a39236103e28100 RBX: 0000000000000a02 RCX: 6a39236103e28100
[  179.216204][    C1] RDX: 0000000000000002 RSI: ffffffff8d9987c6 RDI: 0000000000000001
[  179.216210][    C1] RBP: ffffc900001e0af0 R08: ffffffff8fa1eaf7 R09: 1ffffffff1f43d5e
[  179.216216][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d5f R12: dffffc0000000000
[  179.216225][    C1] R13: dffffc0000000000 R14: ffff888136625940 R15: 1ffff9200003c14c
[  179.216232][    C1] FS:  00007fb8c365a6c0(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
[  179.216240][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  179.216247][    C1] CR2: 000020000001c000 CR3: 00000000296aa000 CR4: 00000000000006f0
[  179.216283][    C1] Call Trace:
[  179.216292][    C1]  <IRQ>
[  179.216300][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  179.216316][    C1]  ? rcu_is_watching+0x15/0xb0
[  179.216338][    C1]  __mod_timer+0xb37/0xf30
[  179.216355][    C1]  ? eql_timer+0x1a0/0x200
[  179.216371][    C1]  call_timer_fn+0x17e/0x5f0
[  179.216380][    C1]  ? __pfx_eql_timer+0x10/0x10
[  179.216389][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  179.216399][    C1]  ? call_timer_fn+0xbe/0x5f0
[  179.216407][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  179.216424][    C1]  ? __pfx_eql_timer+0x10/0x10
[  179.216442][    C1]  __run_timer_base+0x61a/0x860
[  179.216457][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  179.216483][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  179.216512][    C1]  run_timer_softirq+0xb7/0x180
[  179.216529][    C1]  handle_softirqs+0x286/0x870
[  179.216545][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  179.216559][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  179.216569][    C1]  ? irq_work_single+0x1ac/0x240
[  179.216585][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  179.216602][    C1]  __irq_exit_rcu+0xca/0x1f0
[  179.216615][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  179.216633][    C1]  ? rcu_is_watching+0x15/0xb0
[  179.216647][    C1]  irq_exit_rcu+0x9/0x30
[  179.216658][    C1]  sysvec_irq_work+0xa3/0xc0
[  179.216670][    C1]  </IRQ>
[  179.216674][    C1]  <TASK>
[  179.216680][    C1]  asm_sysvec_irq_work+0x1a/0x20
[  179.216692][    C1] RIP: 0010:preempt_schedule_irq+0xb0/0x150
[  179.216707][    C1] Code: 24 20 f6 44 24 21 02 74 0c 90 0f 0b 48 f7 03 08 00 00 00 74 64 bf 01 00 00 00 e8 5b 22 21 f6 e8 96 f5 57 f6 fb bf 01 00 00 00 <e8> 1b ab ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24
[  179.216714][    C1] RSP: 0018:ffffc9000352f440 EFLAGS: 00000286
[  179.216724][    C1] RAX: 6a39236103e28100 RBX: 0000000000000000 RCX: 6a39236103e28100
[  179.216731][    C1] RDX: 0000000000000000 RSI: ffffffff8d9987c6 RDI: 0000000000000001
[  179.216739][    C1] RBP: ffffc9000352f4f0 R08: ffffffff8fa1eaf7 R09: 1ffffffff1f43d5e
[  179.216747][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d5f R12: 0000000000000000
[  179.216754][    C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920006a5e88
[  179.216779][    C1]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  179.216793][    C1]  ? __pfx_trace_call_bpf+0x10/0x10
[  179.216812][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  179.216826][    C1]  irqentry_exit+0x6f/0x90
[  179.216838][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  179.216848][    C1] RIP: 0010:do_user_addr_fault+0x1ae/0x1390
[  179.216858][    C1] Code: 1b 48 89 de 48 81 e6 00 02 00 00 31 ff e8 5a 72 4c 00 48 81 e3 00 02 00 00 0f 84 79 0e 00 00 e8 88 f9 53 00 fb 4c 89 7c 24 38 <0f> 1f 44 00 00 e8 58 6d 4c 00 44 89 f6 83 e6 40 31 ff 48 89 74 24
[  179.216865][    C1] RSP: 0018:ffffc9000352f5b8 EFLAGS: 00000286
[  179.216873][    C1] RAX: 6a39236103e28100 RBX: 0000000000000200 RCX: 6a39236103e28100
[  179.216879][    C1] RDX: 0000000000000000 RSI: ffffffff8d9987c6 RDI: ffffffff8be29f80
[  179.216886][    C1] RBP: dffffc0000000000 R08: ffffffff8fa1eaf7 R09: 1ffffffff1f43d5e
[  179.216894][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d5f R12: ffffc9000352f6a8
[  179.216902][    C1] R13: 000020000001c000 R14: 0000000000000000 R15: ffff88801f690000
[  179.216923][    C1]  ? do_user_addr_fault+0x1a8/0x1390
[  179.216940][    C1]  ? rcu_is_watching+0x15/0xb0
[  179.216951][    C1]  ? trace_page_fault_kernel+0x84/0x1e0
[  179.216966][    C1]  exc_page_fault+0x76/0xf0
[  179.216981][    C1]  asm_exc_page_fault+0x26/0x30
[  179.216990][    C1] RIP: 0010:rep_movs_alternative+0x75/0x90
[  179.216999][    C1] Code: 05 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 c7 48 01 c6 48 29 c1 48 89 c8 48 c1 e9 03 83 e0 07 <f3> 48 a5 89 c1 85 c9 75 91 e9 fd 00 04 00 48 8d 0c c8 eb 86 cc cc
[  179.217007][    C1] RSP: 0018:ffffc9000352f758 EFLAGS: 00010246
[  179.217016][    C1] RAX: 0000000000000000 RBX: ffff88811fc40000 RCX: 0000000000003004
[  179.217023][    C1] RDX: 0000000000000001 RSI: 000020000001c000 RDI: ffff88811fc5bfc0
[  179.217030][    C1] RBP: ffffc9000352f8b0 R08: ffff88811fc73fdf R09: 1ffff11023f8e7fb
[  179.217037][    C1] R10: dffffc0000000000 R11: ffffed1023f8e7fc R12: 1ffff920006a5fbf
[  179.217043][    C1] R13: 0000200000000040 R14: ffffc9000352fe08 R15: 0000000000033fe0
[  179.217061][    C1]  _copy_from_iter+0x24c/0x16f0
[  179.217127][    C1]  ? __pfx__copy_from_iter+0x10/0x10
[  179.217143][    C1]  ? __build_skb_around+0x257/0x3e0
[  179.217155][    C1]  ? netlink_sendmsg+0x642/0xb30
[  179.217167][    C1]  ? skb_put+0x11b/0x210
[  179.217179][    C1]  netlink_sendmsg+0x6b2/0xb30
[  179.217188][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  179.217206][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  179.217222][    C1]  ? __sanitizer_cov_trace_pc+0x11/0x70
[  179.217236][    C1]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  179.217251][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  179.217262][    C1]  __sock_sendmsg+0x21c/0x270
[  179.217279][    C1]  ____sys_sendmsg+0x505/0x830
[  179.217294][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[  179.217313][    C1]  ? import_iovec+0x74/0xa0
[  179.217328][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  179.217343][    C1]  ? __pfx____sys_sendmsg+0x10/0x10
[  179.217388][    C1]  ? __fget_files+0x2a/0x420
[  179.217401][    C1]  ? __fget_files+0x3a0/0x420
[  179.217422][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  179.217442][    C1]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  179.217456][    C1]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  179.217479][    C1]  ? do_syscall_64+0xbe/0x3b0
[  179.217494][    C1]  do_syscall_64+0xfa/0x3b0
[  179.217506][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.217514][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  179.217526][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.217536][    C1] RIP: 0033:0x7fb8c278eb69
[  179.217545][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  179.217552][    C1] RSP: 002b:00007fb8c365a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  179.217561][    C1] RAX: ffffffffffffffda RBX: 00007fb8c29b5fa0 RCX: 00007fb8c278eb69
[  179.217569][    C1] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b
[  179.217575][    C1] RBP: 00007fb8c2811df1 R08: 0000000000000000 R09: 0000000000000000
[  179.217581][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  179.217586][    C1] R13: 0000000000000000 R14: 00007fb8c29b5fa0 R15: 00007fffad318a98
[  179.217603][    C1]  </TASK>
[  179.534383][    C1] sched: DL replenish lagged too much
[  185.851159][ T5838] Bluetooth: hci0: command 0x0406 tx timeout
[  185.853356][ T5848] Bluetooth: hci2: command 0x0406 tx timeout

VM DIAGNOSIS:
14:26:10  Registers:
info registers vcpu 0

CPU#0
RAX=16d7758ba7456900 RBX=ffffffff81975f18 RCX=16d7758ba7456900 RDX=0000000000000001
RSI=ffffffff8d9987c6 RDI=ffffffff8be29f80 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa1eaf0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6e84f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000564cf2d78e08 CR3=000000001f6b6000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f7a16187d20
XMM02=0300100000000045 ffffffff00000000 XMM03=006ce00304d01000 6cd0037680046cc0
XMM04=0000000000000000 0000000000000015 XMM05=0000000000000000 000000000003bf12
XMM06=0417c00300100017 b0030fff00000047 XMM07=ff0417a000000000 1790030fffffffff
XMM08=ffff041780030010 006c800400000046 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000064 RBX=0000000000000064 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001dfd90
R8 =ffff888106bf8237 R9 =1ffff11020d7f046 R10=dffffc0000000000 R11=ffffffff85472220
R12=dffffc0000000000 R13=ffffffff99af58bd R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff8547229c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb8c365a6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000020000001c000 CR3=00000000296aa000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffff00 ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffff00 XMM03=ffffffffffffff00 ffffffffffffff00
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007fb8c2812f89
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
