last executing test programs:

2.799820762s ago: executing program 2 (id=144):
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.798848535s ago: executing program 2 (id=145):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0, 0x4}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x8, r2, 0x2000}, 0x38)

2.698553221s ago: executing program 2 (id=147):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020206b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000fcffff850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x18)

2.580267002s ago: executing program 2 (id=150):
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1, 0x0, {0xa, 0x4e23, 0x9, @loopback, 0x97}}}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x2000f765)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

2.331385032s ago: executing program 2 (id=156):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r0 = socket$kcm(0x10, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="020000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="010000000300"/27], 0x50)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x8, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x3}]}, @func={0x8}, @restrict={0x0, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x50}, 0x28)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000210081044e81f782db44b90402000000008000000000000009000d2000000401a80016000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8db52b49816277cf4090000001fb791643a101ecec9456d6845dfe1d9db22f3d233de7929623df5c74ffe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40deee4edef3d939acd92954b43370e", 0xd8}], 0x1}, 0x0)

1.893462008s ago: executing program 1 (id=163):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.800835862s ago: executing program 1 (id=165):
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000013c0)={@fallback, 0xffffffffffffffff, 0xf, 0x20}, 0x20)

1.676614655s ago: executing program 0 (id=166):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffd}, 0x0, 0x1, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x29a12cb2b8e2de3c, 0x0, &(0x7f00000010c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000e000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
socketpair(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x91ff, 0x0, 0x6, 0x1ff, 0x3, 0x200, 0x0, 0x0, 0x0, 0x100000004}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuacct.usage_all\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))

1.67603687s ago: executing program 1 (id=167):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x2}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbfb, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x1010, 0x0, 0x0, 0xd, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000440)='GPL\x00', 0x4}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r5, &(0x7f0000000180), 0x40001)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r7}, 0x10)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000004000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10)
r9 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffffffffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="180000003c000bab95000000020600f90324fc000000cda0", 0x69}], 0x1}, 0x40)
r10 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x0, 0x10003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000040))
ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000380)={'macvtap0\x00', @link_local})
r11 = socket$kcm(0x10, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r10, 0x2405, r0)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000180), 0x0}, 0x20)
r12 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100002000a000200053582c137153e3704020180fc5409000c00", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r11, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000000)=[{&(0x7f0000004500)="d800000016008111e00212ba0d8105040a601100ff0f040b067c55a1bc0009001e0006990300000015000500fe808178a8021500030001400200000901ac04000bd67f6f9400710016277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad85667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b440431629b0b5aa14c3d21e2fa353905e2a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0)

1.339372529s ago: executing program 0 (id=168):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="1400000034000b43d300fff5e700000003d25a80", 0x14}], 0x1}, 0x0)

1.338289961s ago: executing program 2 (id=169):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e48847"], 0x66)

1.337821044s ago: executing program 0 (id=170):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x80181, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110c230041)

1.245635926s ago: executing program 0 (id=171):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_lsm={0x10, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000fcffffff7910000000000000c3704c000000000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x21}, 0x94)

1.166805256s ago: executing program 1 (id=172):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0x4}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = openat$cgroup_devices(r2, 0x0, 0x2, 0x0)
write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[], 0xa)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000011c0)="b9ffddc1ddc8cdde75537d07007e0d0000bf2dfe443b1b5e2a088137", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

1.166578385s ago: executing program 0 (id=173):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001b003a05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0)

1.070776537s ago: executing program 0 (id=174):
r0 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x80)

50.759277ms ago: executing program 1 (id=175):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b000000016007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9afcd9d522ac78876a4595146add31b35355848794ca3f8b38aef1e114ab9fb0200000000000000a3b0c81c6f8144e74fe13b80ca46c1a6c04ad73c9d44b605f900"/158, 0x9e}, {&(0x7f00000000c0)="68c32a7de6a2395800"/18, 0x12}], 0x2}, 0x4000000)

0s ago: executing program 1 (id=176):
r0 = socket$kcm(0x29, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040), 0x4)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000001cb, 0x22, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xc}, 0x8000, 0x0, 0x80000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$kcm(0xa, 0x2, 0x88)
r6 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r6, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="020a000202000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x41, &(0x7f0000000040), 0x4)
sendmsg$kcm(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x4000080)
recvmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2042)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:25496' (ED25519) to the list of known hosts.
syzkaller login: [   48.534420][ T5754] cgroup: Unknown subsys name 'net'
[   48.641258][ T5754] cgroup: Unknown subsys name 'cpuset'
[   48.648508][ T5754] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.894273][ T5754] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   58.070674][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.073345][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.122202][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.135950][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.139226][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.327838][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   59.337660][ T5858] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   59.340980][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   59.343309][ T5858] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   59.347323][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   59.347385][ T5858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   59.354082][ T5858] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   59.358331][ T5858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   59.358492][ T5863] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   59.361908][ T5858] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   59.364839][ T5863] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   59.368530][ T5858] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   59.369645][ T5863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   59.378452][ T5863] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   59.385420][ T5863] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   59.717481][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   59.765296][ T5862] chnl_net:caif_netlink_parms(): no params data found
[   59.818232][ T5856] chnl_net:caif_netlink_parms(): no params data found
[   59.921353][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.923981][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.926770][ T5855] bridge_slave_0: entered allmulticast mode
[   59.931373][ T5855] bridge_slave_0: entered promiscuous mode
[   59.936208][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.939349][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.942032][ T5855] bridge_slave_1: entered allmulticast mode
[   59.945292][ T5855] bridge_slave_1: entered promiscuous mode
[   60.025459][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.028455][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.031699][ T5862] bridge_slave_0: entered allmulticast mode
[   60.034475][ T5862] bridge_slave_0: entered promiscuous mode
[   60.048995][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.069630][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.072371][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.074623][ T5862] bridge_slave_1: entered allmulticast mode
[   60.077292][ T5862] bridge_slave_1: entered promiscuous mode
[   60.088265][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.129285][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.132290][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.135310][ T5856] bridge_slave_0: entered allmulticast mode
[   60.140610][ T5856] bridge_slave_0: entered promiscuous mode
[   60.146079][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.153201][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.182417][ T5855] team0: Port device team_slave_0 added
[   60.188092][ T5855] team0: Port device team_slave_1 added
[   60.190550][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.193229][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.196136][ T5856] bridge_slave_1: entered allmulticast mode
[   60.200367][ T5856] bridge_slave_1: entered promiscuous mode
[   60.213041][ T5862] team0: Port device team_slave_0 added
[   60.216280][ T5862] team0: Port device team_slave_1 added
[   60.257555][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.260359][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.268916][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.282971][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.285232][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.294673][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.299976][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.302157][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.311165][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.316243][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.319995][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.322184][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.331436][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.345806][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.431700][ T5856] team0: Port device team_slave_0 added
[   60.438213][ T5862] hsr_slave_0: entered promiscuous mode
[   60.441334][ T5862] hsr_slave_1: entered promiscuous mode
[   60.447245][ T5855] hsr_slave_0: entered promiscuous mode
[   60.450175][ T5855] hsr_slave_1: entered promiscuous mode
[   60.452811][ T5855] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   60.455600][ T5855] Cannot create hsr debugfs directory
[   60.460448][ T5856] team0: Port device team_slave_1 added
[   60.503285][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.505850][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.514529][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.543021][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.546052][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.557684][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.673085][ T5856] hsr_slave_0: entered promiscuous mode
[   60.676340][ T5856] hsr_slave_1: entered promiscuous mode
[   60.680155][ T5856] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   60.683393][ T5856] Cannot create hsr debugfs directory
[   60.837660][ T5855] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   60.855428][ T5855] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   60.867378][ T5855] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   60.886948][ T5855] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   60.933096][ T5862] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   60.945013][ T5862] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   60.952316][ T5862] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   60.957026][ T5862] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   61.025780][ T5856] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   61.033708][ T5856] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   61.042641][ T5856] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   61.056244][ T5856] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   61.152076][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.157935][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.193488][ T5862] 8021q: adding VLAN 0 to HW filter on device team0
[   61.197948][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   61.214558][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.217623][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.229268][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.231945][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.249454][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.254215][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.256862][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.264095][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.266743][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.291993][ T5856] 8021q: adding VLAN 0 to HW filter on device team0
[   61.322185][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.325195][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.348547][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.351366][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.400087][ T5857] Bluetooth: hci2: command tx timeout
[   61.402702][ T5857] Bluetooth: hci0: command tx timeout
[   61.479546][ T5863] Bluetooth: hci1: command tx timeout
[   61.562966][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.574659][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.582665][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.654645][ T5856] veth0_vlan: entered promiscuous mode
[   61.661026][ T5855] veth0_vlan: entered promiscuous mode
[   61.665644][ T5862] veth0_vlan: entered promiscuous mode
[   61.668071][ T5856] veth1_vlan: entered promiscuous mode
[   61.684901][ T5855] veth1_vlan: entered promiscuous mode
[   61.688454][ T5862] veth1_vlan: entered promiscuous mode
[   61.723153][ T5856] veth0_macvtap: entered promiscuous mode
[   61.728139][ T5855] veth0_macvtap: entered promiscuous mode
[   61.740477][ T5862] veth0_macvtap: entered promiscuous mode
[   61.744529][ T5855] veth1_macvtap: entered promiscuous mode
[   61.748521][ T5856] veth1_macvtap: entered promiscuous mode
[   61.762693][ T5862] veth1_macvtap: entered promiscuous mode
[   61.773026][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.786635][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.794013][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.797235][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.805313][ T5855] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.808165][ T5855] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.812363][ T5855] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.815144][ T5855] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.824185][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.842830][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.848234][ T5856] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.855154][ T5856] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.858356][ T5856] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.862810][ T5856] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.871681][ T5862] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.875416][ T5862] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.879954][ T5862] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.883640][ T5862] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.008736][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.018545][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.033257][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.036216][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.067245][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.077896][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.088461][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.092519][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.131633][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.142634][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.164393][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.167941][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.026483][ T5968] netlink: 'syz.0.28': attribute type 21 has an invalid length.
[   63.038036][ T5968] netlink: 'syz.0.28': attribute type 15 has an invalid length.
[   63.056508][ T5968] netlink: 156 bytes leftover after parsing attributes in process `syz.0.28'.
[   63.072396][ T5968] IPv6: NLM_F_CREATE should be specified when creating new route
[   63.110212][ T5968] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.114075][ T5968] IPv6: NLM_F_CREATE should be set when creating new route
[   63.118253][ T5968] IPv6: NLM_F_CREATE should be set when creating new route
[   63.121953][ T5968] IPv6: NLM_F_CREATE should be set when creating new route
[   63.307077][ T5983] netlink: 'syz.1.35': attribute type 6 has an invalid length.
[   63.312174][ T5983] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.35'.
[   63.346619][ T5985] netlink: 'syz.2.36': attribute type 30 has an invalid length.
[   63.418425][ T5989] netlink: 60 bytes leftover after parsing attributes in process `syz.2.38'.
[   63.426969][ T5989] netlink: 60 bytes leftover after parsing attributes in process `syz.2.38'.
[   63.482771][ T5863] Bluetooth: hci0: command tx timeout
[   63.484735][ T5863] Bluetooth: hci2: command tx timeout
[   63.509783][ T5995] netlink: 10 bytes leftover after parsing attributes in process `syz.1.42'.
[   63.559195][ T5857] Bluetooth: hci1: command tx timeout
[   63.660154][ T6008] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.959801][ T6022] syzkaller0: entered promiscuous mode
[   63.962140][ T6022] syzkaller0: entered allmulticast mode
[   63.966905][ T6022] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487
[   64.265091][ T6038] netlink: 56 bytes leftover after parsing attributes in process `syz.0.61'.
[   65.558842][ T5857] Bluetooth: hci2: command tx timeout
[   65.559191][ T5863] Bluetooth: hci0: command tx timeout
[   65.592721][ T6062] netlink: 'syz.1.73': attribute type 16 has an invalid length.
[   65.608241][ T6062] netlink: 'syz.1.73': attribute type 3 has an invalid length.
[   65.611644][ T6062] netlink: 132 bytes leftover after parsing attributes in process `syz.1.73'.
[   65.640250][ T5863] Bluetooth: hci1: command tx timeout
[   65.722643][ T6071] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.77'.
[   66.347302][ T6100] bridge_slave_1: left allmulticast mode
[   66.354693][ T6100] bridge_slave_1: left promiscuous mode
[   66.365380][ T6100] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.435392][ T6100] bridge_slave_0: left allmulticast mode
[   66.438355][ T6100] bridge_slave_0: left promiscuous mode
[   66.463719][ T6100] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.733601][    C0] hrtimer: interrupt took 58641 ns
[   67.184160][ T6104] warning: `syz.0.89' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   67.191313][ T6110] sit0: entered allmulticast mode
[   67.204900][ T6108] sit0: entered promiscuous mode
[   67.523437][ T6119] Driver unsupported XDP return value 0 on prog  (id 38) dev N/A, expect packet loss!
[   67.636822][ T6124] netlink: 'syz.2.98': attribute type 25 has an invalid length.
[   67.640370][ T5863] Bluetooth: hci0: command tx timeout
[   67.646460][ T6124] netlink: 'syz.2.98': attribute type 27 has an invalid length.
[   67.650030][ T5863] Bluetooth: hci2: command tx timeout
[   67.653003][ T6124] netlink: 'syz.2.98': attribute type 28 has an invalid length.
[   67.659100][ T6124] netlink: 'syz.2.98': attribute type 29 has an invalid length.
[   67.719974][ T5863] Bluetooth: hci1: command tx timeout
[   68.789895][ T6155] validate_nla: 1 callbacks suppressed
[   68.789913][ T6155] netlink: 'syz.1.111': attribute type 21 has an invalid length.
[   68.796606][ T6155] netlink: 128 bytes leftover after parsing attributes in process `syz.1.111'.
[   68.803326][ T6155] netlink: 'syz.1.111': attribute type 4 has an invalid length.
[   68.806850][ T6155] netlink: 'syz.1.111': attribute type 5 has an invalid length.
[   68.812498][ T6155] netlink: 3 bytes leftover after parsing attributes in process `syz.1.111'.
[   69.264421][    C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   70.471124][ T6224] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.142'.
[   70.638348][ T5863] Bluetooth: hci2: unexpected event 0x03 length: 151 > 11
[   71.140530][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.146510][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.452831][ T6256] netlink: 'syz.2.156': attribute type 14 has an invalid length.
[   71.457236][ T6256] netlink: 164 bytes leftover after parsing attributes in process `syz.2.156'.
[   72.171186][ T6288] netlink: 'syz.0.173': attribute type 27 has an invalid length.
[   72.182098][ T6288] netlink: 'syz.0.173': attribute type 3 has an invalid length.
[   72.185690][ T6288] netlink: 132 bytes leftover after parsing attributes in process `syz.0.173'.
[   72.274052][ T6292] netlink: 'syz.0.174': attribute type 10 has an invalid length.
[   93.500039][ T5857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   93.503981][ T5857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   93.507527][ T5857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   93.511543][ T5857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   93.515372][ T5857] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   93.532744][ T5857] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   93.536897][ T5857] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   93.540568][ T5857] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   93.545266][ T5857] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   93.549023][ T5857] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   93.573441][   T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   93.577490][   T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   93.582474][   T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   93.586255][   T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   93.590421][   T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   95.559067][   T54] Bluetooth: hci3: command tx timeout
[   95.563217][ T5860] Bluetooth: hci4: command tx timeout
[   95.639709][ T5860] Bluetooth: hci5: command tx timeout
[   97.639752][ T5860] Bluetooth: hci4: command tx timeout
[   97.641975][ T5860] Bluetooth: hci3: command tx timeout
[   97.718924][   T54] Bluetooth: hci5: command tx timeout
[   99.718778][   T54] Bluetooth: hci3: command tx timeout
[   99.720859][   T54] Bluetooth: hci4: command tx timeout
[   99.798878][   T54] Bluetooth: hci5: command tx timeout
[  101.799095][ T5860] Bluetooth: hci3: command tx timeout
[  101.801398][   T54] Bluetooth: hci4: command tx timeout
[  101.878798][   T54] Bluetooth: hci5: command tx timeout
[  123.688669][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 49939929993 wd_nsec: 49939931138
[  148.293206][ T5865] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  148.296555][ T5865] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  148.300152][ T5865] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  148.303315][ T5865] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  148.306260][ T5865] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  148.327848][ T5865] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  148.332276][ T5865] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  148.335662][ T5865] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  148.338554][ T5865] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  148.344080][ T5865] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  150.358768][ T5860] Bluetooth: hci6: command tx timeout
[  150.361689][ T5865] Bluetooth: hci7: command tx timeout
[  152.438988][ T5860] Bluetooth: hci6: command tx timeout
[  152.442240][ T5865] Bluetooth: hci7: command tx timeout
[  154.518869][ T5860] Bluetooth: hci6: command tx timeout
[  154.522106][ T5865] Bluetooth: hci7: command tx timeout
[  156.609100][ T5865] Bluetooth: hci7: command tx timeout
[  156.611481][ T5865] Bluetooth: hci6: command tx timeout
[  165.777010][ T5865] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  165.782069][ T5865] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  165.785883][ T5865] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  165.791011][ T5865] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  165.794624][ T5865] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  167.878965][ T5865] Bluetooth: hci8: command tx timeout
[  169.958905][ T5865] Bluetooth: hci8: command tx timeout
[  172.038834][ T5865] Bluetooth: hci8: command tx timeout
[  174.118940][ T5860] Bluetooth: hci8: command tx timeout
[  178.488633][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  178.490885][    C1] rcu: 	1-....: (10499 ticks this GP) idle=4a84/1/0x4000000000000000 softirq=16534/16534 fqs=4721
[  178.495966][    C1] rcu: 	         hardirqs   softirqs   csw/system
[  178.498166][    C1] rcu: 	 number:   929286          0            0
[  178.500417][    C1] rcu: 	cputime:    24555      27924          107   ==> 52480(ms)
[  178.503436][    C1] rcu: 	(t=10500 jiffies g=8565 q=3710 ncpus=2)
[  178.505559][    C1] CPU: 1 UID: 0 PID: 6297 Comm: syz.1.176 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  178.505568][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  178.505573][    C1] RIP: 0010:mix_interrupt_randomness+0x1ac/0x2d0
[  178.505587][    C1] Code: 08 49 83 c6 f0 4c 89 f0 48 c1 e8 03 80 3c 18 00 74 08 4c 89 f7 e8 44 d8 d8 fc 4d 89 3e e8 4c 3d 7d fc fb 48 c7 c7 58 0d 9c 8e <e8> 5f a6 26 06 49 89 c6 ba 10 00 00 00 48 c7 c7 e0 0c 9c 8e 48 8d
[  178.505593][    C1] RSP: 0018:ffffc900001e0ae0 EFLAGS: 00000282
[  178.505600][    C1] RAX: a6ba86bebd3d0c00 RBX: dffffc0000000000 RCX: a6ba86bebd3d0c00
[  178.505605][    C1] RDX: 0000000000000002 RSI: ffffffff8d9987c6 RDI: ffffffff8e9c0d58
[  178.505609][    C1] RBP: ffffc900001e0b90 R08: ffffffff8fa1eaf7 R09: 1ffffffff1f43d5e
[  178.505614][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d5f R12: 000000008000002d
[  178.505618][    C1] R13: 1ffff9200003c15c R14: ffff888136636388 R15: 00000000ffffc552
[  178.505622][    C1] FS:  00007f2610eb36c0(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
[  178.505628][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  178.505632][    C1] CR2: 0000001b31e14ff8 CR3: 000000011362e000 CR4: 00000000000006f0
[  178.505658][    C1] Call Trace:
[  178.505664][    C1]  <IRQ>
[  178.505669][    C1]  ? __pfx_mix_interrupt_randomness+0x10/0x10
[  178.505681][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  178.505693][    C1]  call_timer_fn+0x17e/0x5f0
[  178.505699][    C1]  ? __pfx_mix_interrupt_randomness+0x10/0x10
[  178.505707][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  178.505716][    C1]  ? call_timer_fn+0xbe/0x5f0
[  178.505722][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  178.505734][    C1]  ? __pfx_mix_interrupt_randomness+0x10/0x10
[  178.505743][    C1]  __run_timer_base+0x61a/0x860
[  178.505752][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  178.505769][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  178.505786][    C1]  run_timer_softirq+0x67/0x180
[  178.505796][    C1]  handle_softirqs+0x286/0x870
[  178.505805][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  178.505815][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  178.505822][    C1]  ? irq_work_single+0x1ac/0x240
[  178.505830][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  178.505841][    C1]  __irq_exit_rcu+0xca/0x1f0
[  178.505848][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  178.505858][    C1]  ? rcu_is_watching+0x15/0xb0
[  178.505866][    C1]  irq_exit_rcu+0x9/0x30
[  178.505873][    C1]  sysvec_irq_work+0xa3/0xc0
[  178.505880][    C1]  </IRQ>
[  178.505882][    C1]  <TASK>
[  178.505885][    C1]  asm_sysvec_irq_work+0x1a/0x20
[  178.505892][    C1] RIP: 0010:preempt_schedule_irq+0xb0/0x150
[  178.505901][    C1] Code: 24 20 f6 44 24 21 02 74 0c 90 0f 0b 48 f7 03 08 00 00 00 74 64 bf 01 00 00 00 e8 5b 22 21 f6 e8 96 f5 57 f6 fb bf 01 00 00 00 <e8> 1b ab ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24
[  178.505906][    C1] RSP: 0018:ffffc90002def140 EFLAGS: 00000286
[  178.505911][    C1] RAX: a6ba86bebd3d0c00 RBX: 0000000000000000 RCX: a6ba86bebd3d0c00
[  178.505916][    C1] RDX: 0000000000000007 RSI: ffffffff8d9987c6 RDI: 0000000000000001
[  178.505919][    C1] RBP: ffffc90002def1e0 R08: ffffffff8fa1eaf7 R09: 1ffffffff1f43d5e
[  178.505924][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d5f R12: 0000000000000000
[  178.505928][    C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920005bde28
[  178.505941][    C1]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  178.505952][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  178.505961][    C1]  irqentry_exit+0x6f/0x90
[  178.505969][    C1]  asm_sysvec_irq_work+0x1a/0x20
[  178.505975][    C1] RIP: 0010:rcu_preempt_deferred_qs_irqrestore+0x874/0xc40
[  178.506021][    C1] Code: 24 20 e8 7f 30 c9 09 8b 44 24 34 44 08 e0 a8 01 75 18 4c 89 f7 e8 ac 2d c9 09 4c 89 f7 be 01 00 00 00 48 89 c2 e8 cc f6 00 00 <48> c7 84 24 a0 00 00 00 0e 36 e0 45 48 8b 84 24 98 00 00 00 4a c7
[  178.506028][    C1] RSP: 0018:ffffc90002def2a0 EFLAGS: 00000206
[  178.506035][    C1] RAX: a6ba86bebd3d0c00 RBX: 1ffff11026cc75fa RCX: a6ba86bebd3d0c00
[  178.506041][    C1] RDX: 0000000000000007 RSI: ffffffff8d9987c6 RDI: ffffffff8be29f80
[  178.506047][    C1] RBP: ffffc90002def3f0 R08: ffffffff8fa1eaf7 R09: 1ffffffff1f43d5e
[  178.506053][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d5f R12: ffff888021e51cc0
[  178.506058][    C1] R13: 0000000000000802 R14: ffff88813663afe8 R15: dffffc0000000000
[  178.506076][    C1]  ? perf_trace_run_bpf_submit+0x100/0x170
[  178.506088][    C1]  ? __pfx_preempt_schedule_notrace+0x10/0x10
[  178.506097][    C1]  ? __pfx_preempt_schedule_notrace+0x10/0x10
[  178.506106][    C1]  ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10
[  178.506116][    C1]  ? preempt_schedule_notrace_thunk+0x16/0x30
[  178.506126][    C1]  ? rcu_is_watching+0x7f/0xb0
[  178.506135][    C1]  rcu_read_unlock_special+0x3fe/0x4c0
[  178.506144][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  178.506155][    C1]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  178.506171][    C1]  __rcu_read_unlock+0x84/0xe0
[  178.506180][    C1]  ? unwind_next_frame+0xa5/0x2390
[  178.506188][    C1]  unwind_next_frame+0x19ae/0x2390
[  178.506198][    C1]  ? unwind_next_frame+0xa5/0x2390
[  178.506211][    C1]  ? __put_partials+0x161/0x1c0
[  178.506221][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  178.506231][    C1]  arch_stack_walk+0x11c/0x150
[  178.506243][    C1]  ? put_cpu_partial+0x17c/0x250
[  178.506253][    C1]  stack_trace_save+0x9c/0xe0
[  178.506262][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  178.506275][    C1]  save_stack+0xf5/0x1f0
[  178.506284][    C1]  ? __pfx_save_stack+0x10/0x10
[  178.506290][    C1]  ? __free_frozen_pages+0xc71/0xe70
[  178.506297][    C1]  ? __put_partials+0x161/0x1c0
[  178.506313][    C1]  __reset_page_owner+0x71/0x1f0
[  178.506321][    C1]  __free_frozen_pages+0xc71/0xe70
[  178.506333][    C1]  __put_partials+0x161/0x1c0
[  178.506343][    C1]  put_cpu_partial+0x17c/0x250
[  178.506351][    C1]  ? put_cpu_partial+0x6d/0x250
[  178.506361][    C1]  __slab_free+0x2f7/0x400
[  178.506371][    C1]  ? __phys_addr+0xd3/0x180
[  178.506381][    C1]  qlist_free_all+0x97/0x140
[  178.506393][    C1]  kasan_quarantine_reduce+0x148/0x160
[  178.506404][    C1]  __kasan_slab_alloc+0x22/0x80
[  178.506411][    C1]  __kmalloc_noprof+0x224/0x4f0
[  178.506418][    C1]  ? security_sk_alloc+0x52/0x390
[  178.506427][    C1]  security_sk_alloc+0x52/0x390
[  178.506435][    C1]  sk_prot_alloc+0x101/0x220
[  178.506445][    C1]  sk_alloc+0x3a/0x370
[  178.506454][    C1]  tipc_sk_create+0x164/0x28e0
[  178.506469][    C1]  ? __lock_acquire+0xab9/0xd20
[  178.506482][    C1]  ? __pfx_tipc_sk_create+0x10/0x10
[  178.506490][    C1]  ? rcu_read_unlock+0x87/0xa0
[  178.506502][    C1]  __sock_create+0x4b3/0x9f0
[  178.506515][    C1]  __sys_socketpair+0x1c5/0x560
[  178.506528][    C1]  __x64_sys_socketpair+0x9b/0xb0
[  178.506539][    C1]  do_syscall_64+0xfa/0x3b0
[  178.506548][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.506554][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  178.506563][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.506569][    C1] RIP: 0033:0x7f260ff8e9a9
[  178.506577][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  178.506582][    C1] RSP: 002b:00007f2610eb3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[  178.506588][    C1] RAX: ffffffffffffffda RBX: 00007f26101b6080 RCX: 00007f260ff8e9a9
[  178.506592][    C1] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000001e
[  178.506596][    C1] RBP: 00007f2610010d69 R08: 0000000000000000 R09: 0000000000000000
[  178.506600][    C1] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000
[  178.506604][    C1] R13: 0000000000000000 R14: 00007f26101b6080 R15: 00007ffdd104d3c8
[  178.506615][    C1]  </TASK>
[  178.769689][    C1] sched: DL replenish lagged too much

VM DIAGNOSIS:
11:20:57  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffff88804b03b200 RCX=ffff888023615640 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90022937800 RSP=ffffc900229376a0
R8 =ffffffff8fa1eaf7 R9 =1ffffffff1f43d5e R10=dffffc0000000000 R11=fffffbfff1f43d5f
R12=1ffff11026cc7f65 R13=dffffc0000000000 R14=0000000000000001 R15=ffff88813663fb28
RIP=ffffffff81b4b37e RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055d0ecdafe08 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f2939586d00
XMM02=ffffffff00000045 ffffffff00000000 XMM03=ffffffff8668d921 ffffffff896b8c77
XMM04=0000000000000000 0000000000000015 XMM05=0000000000000000 000000000001df8a
XMM06=ffffffff8a1c829a ffffffff00000047 XMM07=ffffffff00000000 ffffffff83927681
XMM08=ffffffff81d1a4b0 ffffffff00000046 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001dfe10
R8 =ffff888021bc8237 R9 =1ffff11004379046 R10=dffffc0000000000 R11=ffffffff85472220
R12=dffffc0000000000 R13=ffffffff99af58d8 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff8547229c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f2610eb36c0 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b31e14ff8 CR3=000000011362e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f2610011ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
