last executing test programs:

462.73952ms ago: executing program 2 (id=257):
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8992, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x13\xec\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d')

407.254441ms ago: executing program 1 (id=260):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000055000000850000000700000095"], &(0x7f0000000200)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x27, 0x17, 0x0, &(0x7f00000002c0)="f8ad48cc02cb29dcc8007f5b08007125415bf4c0ebdceb", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)

405.52709ms ago: executing program 2 (id=261):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x3e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)

323.47393ms ago: executing program 1 (id=262):
bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48)

323.361812ms ago: executing program 2 (id=263):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000480)={0x1, &(0x7f0000000000)=[{0xd, 0x0, 0x1, 0xfffff7ff}]})

323.102257ms ago: executing program 1 (id=264):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x6, 0x804, 0xb, 0x7}, {0x10400002, 0x2, 0x0, 0x5}], 0x10, 0xfffffffd}, 0x94)
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
r4 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
recvmsg$unix(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x40000040)
setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10)
setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10)

271.035956ms ago: executing program 2 (id=266):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001e00)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a118000600014002020a600e41b0000900ac00040211000000160012000a00ff030048035c4c61c1d67f6f94007133cf6efb8000a007a290457f01a7cee4090000001fb7d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de61fccd40dd6e4edef3d93452a9247c47870ae1d092665c07a81eaa034c5f9fbb42dd0f98a952c795c0e9703920723f9000000008af26c8b7b", 0xd8}], 0x1}, 0x0)

270.971537ms ago: executing program 2 (id=267):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000041000b05d25a806c8c6394f90324fc60100002000a000200053582c137153e", 0x23}], 0x1}, 0x0)

208.325459ms ago: executing program 1 (id=269):
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0xfffffffffffffff9)
socket$kcm(0xf, 0x3, 0x2)
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20882, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x8}, 0x0, 0x0, 0x7ffffd, 0x0, 0x0, 0xcdb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0xfdef)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8258000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/pid_for_children\x00')
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = gettid()
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0)=r1, 0x12)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8ec, 0xc}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r3 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xfdef)
recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000dc0)=[{0x0}], 0x1}, 0x4810)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu>\t\t')

208.09011ms ago: executing program 2 (id=270):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x40004020)
r1 = gettid()
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x7, 0x9, 0x7f, 0x0, 0x9, 0x5a8f8929c6d8b6e2, 0xd, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000240), 0xd}, 0x4468, 0xc, 0x1, 0x9, 0x3, 0x5, 0x1800, 0x0, 0xda91, 0x0, 0x6}, r1, 0xe, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000002c0)="ae24a21f9a824666f9acf0e0163f", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50)

207.960016ms ago: executing program 0 (id=271):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x6b, 0x0, 0xffffffffffffffff, 0x1}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

141.355419ms ago: executing program 0 (id=272):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum={0x3, 0x0, 0x0, 0xf, 0x4000000}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000002200)=""/4110, 0x29, 0x100e, 0x1}, 0x28)

141.005266ms ago: executing program 1 (id=273):
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffe00000000000}})
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
close(r0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r2 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000140), 0x4d)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r3=>0x0, <r4=>0x0})
close(r3)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r5 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
sendmsg$kcm(r5, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0)

140.885834ms ago: executing program 0 (id=274):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c00810ce00f80ecdb4cb9f207c804a010000000030006fb0a0002000a0ada1b40d80500c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)

72.370904ms ago: executing program 1 (id=275):
socket$kcm(0x10, 0x3, 0x10)
r0 = socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1, 0x2, 0x40}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000fbffffff00"/19, @ANYRES32=r1, @ANYBLOB="0000e0ffff"], 0x48)
socket$kcm(0x10, 0x400000002, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="8500000008000000760000000000000027000000000000009500000000000000d9e029f8c1652bc575bc1dc3a9fa16094393337a693d6504978ceb558b41537525a394249a1506da9ac69561c187afa3ba7ebc3af563e1e94ceec996695d1d26bbfb2feebab62478775a18852a3359fb20d4d020daf585b85d18b24cf00e3ac10552a5c9acddcb10eae4445de245fe9c7bf90262293683e504b59ef6d4568f30efe6465b5e0aeb3c6f9f5c6ad0a0891670e48b75f800"/192], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000a00)="2cbf805c88d342ee69f677", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="05"], 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0)

72.127245ms ago: executing program 0 (id=276):
r0 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="6cf17123c18de0e33ad4f06755c28b3be679aa2c90004a2be64835a550939d", 0x1f}, {&(0x7f00000002c0)="1fa76e5ffae44763f322018b1c6010bd7e4277a991a3a6a510441b46bc14d3aaf92e74d47332c203f0dc030d9a03e377c27c065fb552f03672e5312df2b060ccd5307d", 0x43}, {&(0x7f00000000c0)="16dc52", 0x3}], 0x3}, 0x8050)
r1 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9, 0x2}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000400)="3ebe", 0x2}], 0x1}, 0x8880)
sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)="96f5", 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0)

71.690794ms ago: executing program 0 (id=277):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x18, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x5d}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x94)

0s ago: executing program 0 (id=278):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x800000000000003, 0x2505, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f0000, 0x7f}, 0x80, 0x4, 0x0, 0x1, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x9)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000f5ff000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r2}, 0x10)
r3 = socket$kcm(0x2, 0x1, 0x106)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:23907' (ED25519) to the list of known hosts.
syzkaller login: [   40.801876][ T5755] cgroup: Unknown subsys name 'net'
[   40.959644][ T5755] cgroup: Unknown subsys name 'cpuset'
[   40.963976][ T5755] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.583355][ T5755] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   46.464835][ T5218] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   46.467941][ T5218] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   46.470548][ T5218] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   46.473500][ T5218] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   46.476630][ T5218] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   46.480759][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   46.483436][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   46.487078][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   46.496865][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   46.510226][   T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   46.532400][   T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   46.537487][   T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   46.540258][   T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   46.543205][   T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   46.545918][   T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.704136][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   46.759495][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   46.783451][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   46.843506][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.846066][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.849081][ T5831] bridge_slave_0: entered allmulticast mode
[   46.851884][ T5831] bridge_slave_0: entered promiscuous mode
[   46.868269][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.870504][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.872822][ T5831] bridge_slave_1: entered allmulticast mode
[   46.875431][ T5831] bridge_slave_1: entered promiscuous mode
[   46.915278][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.919650][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.922458][ T5827] bridge_slave_0: entered allmulticast mode
[   46.925742][ T5827] bridge_slave_0: entered promiscuous mode
[   46.930326][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.933143][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.936007][ T5827] bridge_slave_1: entered allmulticast mode
[   46.941022][ T5827] bridge_slave_1: entered promiscuous mode
[   46.951550][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.953837][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.956197][ T5836] bridge_slave_0: entered allmulticast mode
[   46.958951][ T5836] bridge_slave_0: entered promiscuous mode
[   46.963143][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.966427][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.969153][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.971618][ T5836] bridge_slave_1: entered allmulticast mode
[   46.974510][ T5836] bridge_slave_1: entered promiscuous mode
[   46.989082][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.022017][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.033924][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.039049][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.043207][ T5831] team0: Port device team_slave_0 added
[   47.052662][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.056359][ T5831] team0: Port device team_slave_1 added
[   47.067684][ T5827] team0: Port device team_slave_0 added
[   47.087987][ T5827] team0: Port device team_slave_1 added
[   47.104394][ T5836] team0: Port device team_slave_0 added
[   47.113740][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.116011][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.125395][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.130609][ T5836] team0: Port device team_slave_1 added
[   47.140627][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.142834][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.150852][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.168289][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.170891][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.180133][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.184568][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.186904][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.194707][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.202284][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.204723][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.214491][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.222186][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.224371][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.232454][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.267388][ T5831] hsr_slave_0: entered promiscuous mode
[   47.269662][ T5831] hsr_slave_1: entered promiscuous mode
[   47.288655][ T5827] hsr_slave_0: entered promiscuous mode
[   47.291118][ T5827] hsr_slave_1: entered promiscuous mode
[   47.293174][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.295619][ T5827] Cannot create hsr debugfs directory
[   47.308059][ T5836] hsr_slave_0: entered promiscuous mode
[   47.310286][ T5836] hsr_slave_1: entered promiscuous mode
[   47.312296][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.314668][ T5836] Cannot create hsr debugfs directory
[   47.512834][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   47.518627][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   47.527406][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   47.531909][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   47.547611][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   47.555515][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.570242][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.574519][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   47.600806][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.603254][ T5831] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.606021][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.608666][ T5831] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.614485][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   47.622080][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   47.627498][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   47.639814][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.644936][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.647300][ T5827] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.649643][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.651917][ T5827] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.691879][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.694153][ T5836] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.696521][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.698831][ T5836] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.704106][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.708673][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.711700][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.715036][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.718567][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.721583][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.738711][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.760452][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   47.769141][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.771378][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.778893][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.786153][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.788738][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.806150][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   47.819257][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.821511][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.826311][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.835109][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.837407][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.854024][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   47.881616][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.884244][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.894453][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.896922][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.002264][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.015430][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.044221][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.063608][ T5831] veth0_vlan: entered promiscuous mode
[   48.072248][ T5836] veth0_vlan: entered promiscuous mode
[   48.076586][ T5831] veth1_vlan: entered promiscuous mode
[   48.087845][ T5836] veth1_vlan: entered promiscuous mode
[   48.106503][ T5831] veth0_macvtap: entered promiscuous mode
[   48.114915][ T5827] veth0_vlan: entered promiscuous mode
[   48.119768][ T5831] veth1_macvtap: entered promiscuous mode
[   48.125830][ T5836] veth0_macvtap: entered promiscuous mode
[   48.135061][ T5836] veth1_macvtap: entered promiscuous mode
[   48.141463][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.144414][ T5827] veth1_vlan: entered promiscuous mode
[   48.153746][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.160423][ T5831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.163233][ T5831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.165969][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.170057][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.175578][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.189627][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.199138][ T5827] veth0_macvtap: entered promiscuous mode
[   48.201841][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.204600][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.208871][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.211640][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.223178][ T5827] veth1_macvtap: entered promiscuous mode
[   48.266376][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.281646][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.294835][ T5827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.301824][ T5827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.304551][ T5827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.308459][ T5827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.325842][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.329611][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.349291][   T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.351759][   T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.374639][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.378387][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.385634][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.391112][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.412657][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   48.413342][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.427200][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.462976][   T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.465899][   T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.577814][   T53] Bluetooth: hci1: command tx timeout
[   48.588425][   T53] Bluetooth: hci2: command tx timeout
[   48.588461][ T5218] Bluetooth: hci0: command tx timeout
[   48.656067][ T5908] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   48.670556][ T5908] batman_adv: batadv0: Removing interface: batadv_slave_0
[   48.688382][ T5908] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   48.691014][ T5908] batman_adv: batadv0: Removing interface: batadv_slave_1
[   48.812958][    C0] hrtimer: interrupt took 31553 ns
[   49.449627][ T5923] syz.1.16 (5923) used greatest stack depth: 19968 bytes left
[   49.580347][ T5933] team0: Port device team_slave_0 removed
[   49.582533][ T5933] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[   49.815196][ T5947] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.26'.
[   50.137517][ T5959] pim6reg1: entered allmulticast mode
[   50.260511][ T5969] netlink: 'syz.1.37': attribute type 13 has an invalid length.
[   50.656889][ T5218] Bluetooth: hci0: command tx timeout
[   50.667002][ T5218] Bluetooth: hci2: command tx timeout
[   50.667090][   T53] Bluetooth: hci1: command tx timeout
[   52.737010][ T5218] Bluetooth: hci2: command tx timeout
[   52.737134][   T53] Bluetooth: hci0: command tx timeout
[   52.747086][ T5218] Bluetooth: hci1: command tx timeout
[   52.782846][ T6073] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.86'.
[   52.812369][ T6075] netlink: 10 bytes leftover after parsing attributes in process `syz.2.87'.
[   53.020763][ T6099] netlink: 'syz.1.99': attribute type 10 has an invalid length.
[   53.024003][ T6099] netlink: 'syz.1.99': attribute type 16 has an invalid length.
[   53.030426][ T6099] netlink: 156 bytes leftover after parsing attributes in process `syz.1.99'.
[   53.113843][ T6109] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.105'.
[   53.550019][ T6145] Illegal XDP return value 4294967274 on prog  (id 59) dev N/A, expect packet loss!
[   54.600194][ T6179] netlink: 20 bytes leftover after parsing attributes in process `syz.0.135'.
[   54.816934][ T5218] Bluetooth: hci1: command tx timeout
[   54.817357][   T53] Bluetooth: hci2: command tx timeout
[   54.819549][ T5218] Bluetooth: hci0: command tx timeout
[   56.572864][ T6326] netlink: 'syz.0.202': attribute type 39 has an invalid length.
[   56.579349][ T6326] veth0_macvtap: left promiscuous mode
[   56.903826][ T6351] netlink: 'syz.0.216': attribute type 11 has an invalid length.
[   56.906336][ T6351] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.216'.
[   56.911904][ T6351] netlink: 'syz.0.216': attribute type 11 has an invalid length.
[   56.914380][ T6351] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.216'.
[   56.927935][ T6350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   57.189966][ T6369] warning: `syz.0.224' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   57.267802][ T6380] netlink: 56 bytes leftover after parsing attributes in process `syz.2.229'.
[   58.726881][ T6422] netlink: 495 bytes leftover after parsing attributes in process `syz.1.247'.
[   59.272539][ T6424] Zero length message leads to an empty skb
[   59.279869][ T6427] netlink: 'syz.2.249': attribute type 10 has an invalid length.
[   59.284563][ T6427] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.288351][ T6427] bridge_slave_1: left allmulticast mode
[   59.290194][ T6427] bridge_slave_1: left promiscuous mode
[   59.292131][ T6427] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.305385][ T6427] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[   59.305743][ T6424] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.317045][ T6424] netlink: 'syz.0.248': attribute type 21 has an invalid length.
[   59.641537][ T6460] netlink: 'syz.2.266': attribute type 6 has an invalid length.
[   59.644111][ T6460] netlink: 140 bytes leftover after parsing attributes in process `syz.2.266'.
[   59.793908][ T6478] netlink: 830 bytes leftover after parsing attributes in process `syz.0.274'.
[   59.798771][ T6478] team0: default FDB implementation only supports local addresses
[   59.844152][ T6480] netlink: 'syz.1.275': attribute type 10 has an invalid length.
[   59.859098][ T6480] netlink: 55 bytes leftover after parsing attributes in process `syz.1.275'.
[  164.936731][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
[  164.938987][    C0] rcu: 	0-...!: (10499 ticks this GP) idle=3004/1/0x4000000000000000 softirq=16913/16913 fqs=31
[  164.943674][    C0] rcu: 	(t=10500 jiffies g=7277 q=149 ncpus=2)
[  164.945747][    C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10437 jiffies! g7277 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
[  164.949725][    C0] rcu: 	Possible timer handling issue on cpu=1 timer-softirq=3103
[  164.952285][    C0] rcu: rcu_preempt kthread starved for 10439 jiffies! g7277 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1
[  164.955951][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  164.959217][    C0] rcu: RCU grace-period kthread stack dump:
[  164.961185][    C0] task:rcu_preempt     state:I stack:27184 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
[  164.965084][    C0] Call Trace:
[  164.966231][    C0]  <TASK>
[  164.967241][    C0]  __schedule+0x16f5/0x4d00
[  164.968797][    C0]  ? perf_trace_lock+0xec/0x3b0
[  164.970436][    C0]  ? schedule+0x165/0x360
[  164.971882][    C0]  ? __pfx___schedule+0x10/0x10
[  164.973497][    C0]  ? schedule+0x91/0x360
[  164.974929][    C0]  ? schedule+0x91/0x360
[  164.976347][    C0]  schedule+0x165/0x360
[  164.977741][    C0]  schedule_timeout+0x12b/0x270
[  164.979364][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[  164.981168][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  164.983153][    C0]  ? __pfx_process_timeout+0x10/0x10
[  164.984930][    C0]  ? prepare_to_swait_event+0x341/0x380
[  164.986806][    C0]  rcu_gp_fqs_loop+0x301/0x1540
[  164.988472][    C0]  ? __pfx_rcu_watching_snap_recheck+0x10/0x10
[  164.990527][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  164.992287][    C0]  ? _raw_spin_unlock_irq+0x2e/0x50
[  164.994026][    C0]  ? finish_swait+0xcd/0x1f0
[  164.995576][    C0]  rcu_gp_kthread+0x99/0x390
[  164.997130][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  164.998872][    C0]  ? __kthread_parkme+0x7b/0x200
[  165.000540][    C0]  ? __kthread_parkme+0x1a1/0x200
[  165.002244][    C0]  kthread+0x711/0x8a0
[  165.003663][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  165.005419][    C0]  ? __pfx_kthread+0x10/0x10
[  165.006977][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  165.008717][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  165.010463][    C0]  ? __pfx_kthread+0x10/0x10
[  165.012026][    C0]  ret_from_fork+0x3fc/0x770
[  165.013590][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  165.015293][    C0]  ? __switch_to_asm+0x39/0x70
[  165.016925][    C0]  ? __switch_to_asm+0x33/0x70
[  165.018541][    C0]  ? __pfx_kthread+0x10/0x10
[  165.020100][    C0]  ret_from_fork_asm+0x1a/0x30
[  165.021751][    C0]  </TASK>
[  165.022792][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  165.024892][    C0] Sending NMI from CPU 0 to CPUs 1:
[  165.026672][    C1] NMI backtrace for cpu 1
[  165.026683][    C1] CPU: 1 UID: 0 PID: 5831 Comm: syz-executor Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  165.026707][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  165.026711][    C1] RIP: 0010:queued_write_lock_slowpath+0x13d/0x260
[  165.026724][    C1] Code: 29 48 89 df e8 14 04 b2 f6 eb 1f f3 90 43 0f b6 04 27 84 c0 74 14 89 d9 80 e1 07 80 c1 03 38 c1 7c 08 48 89 df e8 f3 03 b2 f6 <8b> 03 3d 00 01 00 00 75 d8 c7 44 24 50 00 01 00 00 48 89 df be 04
[  165.026729][    C1] RSP: 0018:ffffc900001e0520 EFLAGS: 00000246
[  165.026737][    C1] RAX: 0000000000000000 RBX: ffffffff8f62ede0 RCX: ffffffff8b713f78
[  165.026742][    C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8f62ede0
[  165.026746][    C1] RBP: ffffc900001e05d0 R08: ffffffff8f62ede3 R09: 1ffffffff1ec5dbc
[  165.026750][    C1] R10: dffffc0000000000 R11: fffffbfff1ec5dbd R12: dffffc0000000000
[  165.026755][    C1] R13: 1ffff9200003c0a8 R14: ffffc900001e0570 R15: 1ffffffff1ec5dbc
[  165.026759][    C1] FS:  000055557664e500(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
[  165.026764][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  165.026769][    C1] CR2: 00007f4f96f83178 CR3: 0000000022f58000 CR4: 00000000000006f0
[  165.026795][    C1] Call Trace:
[  165.026800][    C1]  <IRQ>
[  165.026806][    C1]  ? __pfx_queued_write_lock_slowpath+0x10/0x10
[  165.026818][    C1]  do_raw_write_lock+0x1f2/0x260
[  165.026828][    C1]  ? __pfx_do_raw_write_lock+0x10/0x10
[  165.026838][    C1]  ? ___neigh_create+0xe81/0x2260
[  165.026849][    C1]  ___neigh_create+0xe81/0x2260
[  165.026864][    C1]  ip6_finish_output2+0xb4d/0x16a0
[  165.026873][    C1]  ? ip6_finish_output2+0x701/0x16a0
[  165.026880][    C1]  ? ip6_mtu+0x7d/0x3f0
[  165.026886][    C1]  ? __pfx_ip6_finish_output2+0x10/0x10
[  165.026893][    C1]  ? ip6_mtu+0x7d/0x3f0
[  165.026898][    C1]  ? ip6_mtu+0x321/0x3f0
[  165.026904][    C1]  ? ip6_finish_output+0x2ef/0x4e0
[  165.026911][    C1]  ndisc_send_skb+0xb47/0x1400
[  165.026920][    C1]  ? ndisc_send_skb+0x208/0x1400
[  165.026928][    C1]  ? trace_event_raw_event_lock+0x181/0x250
[  165.026937][    C1]  ? __pfx_ndisc_send_skb+0x10/0x10
[  165.026946][    C1]  ? __pfx_dst_output+0x10/0x10
[  165.026957][    C1]  ? __asan_memset+0x22/0x50
[  165.026968][    C1]  addrconf_rs_timer+0x369/0x670
[  165.026977][    C1]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  165.026984][    C1]  ? perf_trace_lock+0xec/0x3b0
[  165.026993][    C1]  call_timer_fn+0x17e/0x5f0
[  165.026999][    C1]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  165.027006][    C1]  ? call_timer_fn+0xbe/0x5f0
[  165.027011][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  165.027019][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  165.027027][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  165.027034][    C1]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  165.027041][    C1]  __run_timer_base+0x61a/0x860
[  165.027051][    C1]  ? ktime_get+0x3e/0x1f0
[  165.027061][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  165.027070][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  165.027082][    C1]  run_timer_softirq+0xb7/0x180
[  165.027092][    C1]  handle_softirqs+0x286/0x870
[  165.027101][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  165.027109][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  165.027119][    C1]  __irq_exit_rcu+0xca/0x1f0
[  165.027126][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  165.027135][    C1]  irq_exit_rcu+0x9/0x30
[  165.027141][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  165.027150][    C1]  </IRQ>
[  165.027152][    C1]  <TASK>
[  165.027154][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  165.027162][    C1] RIP: 0010:lock_acquire+0x175/0x360
[  165.027168][    C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 cb de 01 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e
[  165.027173][    C1] RSP: 0018:ffffc9000372eab8 EFLAGS: 00000206
[  165.027178][    C1] RAX: 875e90bebd976500 RBX: 0000000000000000 RCX: 875e90bebd976500
[  165.027183][    C1] RDX: 0000000000000000 RSI: ffffffff8db864db RDI: ffffffff8be29f80
[  165.027187][    C1] RBP: ffffffff8172aae5 R08: 0000000000000000 R09: ffffffff8172aae5
[  165.027191][    C1] R10: ffffc9000372ec78 R11: ffffffff81acf520 R12: 0000000000000002
[  165.027195][    C1] R13: ffffffff8e13f0a0 R14: 0000000000000000 R15: 0000000000000246
[  165.027200][    C1]  ? unwind_next_frame+0xa5/0x2390
[  165.027207][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  165.027215][    C1]  ? unwind_next_frame+0xa5/0x2390
[  165.027227][    C1]  ? unwind_next_frame+0xa5/0x2390
[  165.027234][    C1]  ? __alloc_frozen_pages_noprof+0x181/0x370
[  165.027242][    C1]  ? unwind_next_frame+0xa5/0x2390
[  165.027249][    C1]  unwind_next_frame+0xc2/0x2390
[  165.027256][    C1]  ? unwind_next_frame+0xa5/0x2390
[  165.027264][    C1]  ? unwind_next_frame+0xa5/0x2390
[  165.027271][    C1]  ? get_page_from_freelist+0x21e4/0x22c0
[  165.027280][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  165.027288][    C1]  arch_stack_walk+0x11c/0x150
[  165.027298][    C1]  ? __alloc_frozen_pages_noprof+0x181/0x370
[  165.027307][    C1]  stack_trace_save+0x9c/0xe0
[  165.027315][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  165.027326][    C1]  save_stack+0xf5/0x1f0
[  165.027333][    C1]  ? __pfx_perf_trace_lock+0x10/0x10
[  165.027340][    C1]  ? __pfx_save_stack+0x10/0x10
[  165.027345][    C1]  ? post_alloc_hook+0x240/0x2a0
[  165.027351][    C1]  ? get_page_from_freelist+0x21e4/0x22c0
[  165.027359][    C1]  ? __alloc_frozen_pages_noprof+0x181/0x370
[  165.027400][    C1]  ? seqcount_lockdep_reader_access+0x102/0x180
[  165.027419][    C1]  __set_page_owner+0x8d/0x4a0
[  165.027426][    C1]  ? __pfx___set_page_owner+0x10/0x10
[  165.027434][    C1]  post_alloc_hook+0x240/0x2a0
[  165.027442][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  165.027451][    C1]  ? __pfx_perf_trace_lock+0x10/0x10
[  165.027468][    C1]  ? __pfx_get_page_from_freelist+0x10/0x10
[  165.027476][    C1]  ? prepare_alloc_pages+0x213/0x610
[  165.027486][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  165.027495][    C1]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  165.027504][    C1]  ? perf_trace_lock+0xec/0x3b0
[  165.027511][    C1]  ? policy_nodemask+0x27c/0x720
[  165.027518][    C1]  ? __pfx_perf_trace_lock+0x10/0x10
[  165.027526][    C1]  alloc_pages_mpol+0x232/0x4a0
[  165.027534][    C1]  alloc_pages_noprof+0xa9/0x190
[  165.027541][    C1]  get_free_pages_noprof+0xf/0x80
[  165.027549][    C1]  kasan_populate_vmalloc+0x33/0x1a0
[  165.027558][    C1]  ? do_raw_spin_unlock+0x4d/0x240
[  165.027568][    C1]  alloc_vmap_area+0xd51/0x1490
[  165.027578][    C1]  ? __pfx_alloc_vmap_area+0x10/0x10
[  165.027584][    C1]  ? __kasan_kmalloc+0x93/0xb0
[  165.027590][    C1]  ? __kmalloc_cache_node_noprof+0x234/0x3d0
[  165.027597][    C1]  ? __get_vm_area_node+0x13f/0x300
[  165.027603][    C1]  ? alloc_counters+0xd3/0x6d0
[  165.027610][    C1]  __get_vm_area_node+0x1f8/0x300
[  165.027619][    C1]  __vmalloc_node_range_noprof+0x301/0x12f0
[  165.027626][    C1]  ? alloc_counters+0xd3/0x6d0
[  165.027632][    C1]  ? __lock_acquire+0xab9/0xd20
[  165.027640][    C1]  ? __mutex_trylock_common+0x153/0x260
[  165.027649][    C1]  ? perf_trace_lock+0xec/0x3b0
[  165.027656][    C1]  ? rcu_is_watching+0x15/0xb0
[  165.027665][    C1]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  165.027671][    C1]  ? __mutex_lock+0x330/0xe80
[  165.027680][    C1]  ? perf_trace_lock+0xec/0x3b0
[  165.027687][    C1]  ? alloc_counters+0xd3/0x6d0
[  165.027693][    C1]  vzalloc_noprof+0xb2/0xf0
[  165.027700][    C1]  ? alloc_counters+0xd3/0x6d0
[  165.027707][    C1]  alloc_counters+0xd3/0x6d0
[  165.027713][    C1]  ? net_generic+0x1e/0x240
[  165.027723][    C1]  ? net_generic+0x1e/0x240
[  165.027730][    C1]  ? __pfx_alloc_counters+0x10/0x10
[  165.027738][    C1]  ? xt_find_table_lock+0x35e/0x3e0
[  165.027747][    C1]  do_ip6t_get_ctl+0xa94/0x1180
[  165.027756][    C1]  ? __pfx_do_ip6t_get_ctl+0x10/0x10
[  165.027765][    C1]  ? perf_trace_lock+0xec/0x3b0
[  165.027771][    C1]  ? __mutex_trylock_common+0x153/0x260
[  165.027780][    C1]  ? __pfx_perf_trace_lock+0x10/0x10
[  165.027788][    C1]  ? rcu_is_watching+0x15/0xb0
[  165.027795][    C1]  ? nf_getsockopt+0x224/0x290
[  165.027804][    C1]  ? nf_getsockopt+0x224/0x290
[  165.027812][    C1]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  165.027821][    C1]  ? __pfx___mutex_lock+0x10/0x10
[  165.027829][    C1]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  165.027839][    C1]  ? __might_fault+0xb0/0x130
[  165.027846][    C1]  ? __might_fault+0xb0/0x130
[  165.027853][    C1]  nf_getsockopt+0x26e/0x290
[  165.027862][    C1]  ipv6_getsockopt+0x1ed/0x290
[  165.027870][    C1]  ? __pfx_ipv6_getsockopt+0x10/0x10
[  165.027879][    C1]  ? sock_common_getsockopt+0x2d/0xb0
[  165.027888][    C1]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  165.027897][    C1]  do_sock_getsockopt+0x372/0x450
[  165.027904][    C1]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  165.027913][    C1]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  165.027919][    C1]  ? do_syscall_64+0x20/0x3b0
[  165.027928][    C1]  ? do_syscall_64+0xb7/0x3b0
[  165.027938][    C1]  __x64_sys_getsockopt+0x1a5/0x250
[  165.027945][    C1]  ? do_syscall_64+0x20/0x3b0
[  165.027954][    C1]  ? do_syscall_64+0x20/0x3b0
[  165.027963][    C1]  do_syscall_64+0xfa/0x3b0
[  165.027971][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  165.027978][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.027984][    C1]  ? exc_page_fault+0x9f/0xf0
[  165.027992][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.027999][    C1] RIP: 0033:0x7f4f96d906ea
[  165.028005][    C1] Code: ff c3 66 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb b8 0f 1f 44 00 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7
[  165.028010][    C1] RSP: 002b:00007ffcf41b4d28 EFLAGS: 00000212 ORIG_RAX: 0000000000000037
[  165.028017][    C1] RAX: ffffffffffffffda RBX: 00007ffcf41b4db0 RCX: 00007f4f96d906ea
[  165.028021][    C1] RDX: 0000000000000041 RSI: 0000000000000029 RDI: 0000000000000003
[  165.028025][    C1] RBP: 0000000000000003 R08: 00007ffcf41b4d4c R09: ffff000000000000
[  165.028029][    C1] R10: 00007ffcf41b4db0 R11: 0000000000000212 R12: 00007f4f96f83780
[  165.028033][    C1] R13: 00007ffcf41b4d4c R14: 0000000000000000 R15: 00007f4f96f83e40
[  165.028041][    C1]  </TASK>
[  165.028679][    C0] CPU: 0 UID: 0 PID: 6480 Comm: syz.1.275 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  165.028688][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  165.028692][    C0] RIP: 0010:rcu_read_unlock_special+0x87/0x4c0
[  165.028703][    C0] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 92 37 f8 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
[  165.028708][    C0] RSP: 0000:ffffc900085765e0 EFLAGS: 00000206
[  165.028715][    C0] RAX: 1fe74023d2e21900 RBX: 1ffff920010aecc4 RCX: 1fe74023d2e21900
[  165.028719][    C0] RDX: 0000000000000002 RSI: ffffffff8d9987c6 RDI: ffffffff8be29f80
[  165.028724][    C0] RBP: ffffc900085766d8 R08: ffffffff8fa1eaf7 R09: 1ffffffff1f43d5e
[  165.028728][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d5f R12: ffffffff8e144400
[  165.028732][    C0] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000001
[  165.028737][    C0] FS:  00007f06e1e486c0(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
[  165.028742][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  165.028746][    C0] CR2: 000000110c2fd9c4 CR3: 00000000303c4000 CR4: 00000000000006f0
[  165.028771][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  165.028777][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  165.028781][    C0] Call Trace:
[  165.028784][    C0]  <TASK>
[  165.028787][    C0]  ? __pfx_perf_trace_lock+0x10/0x10
[  165.028798][    C0]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  165.028809][    C0]  ? unwind_next_frame+0xa5/0x2390
[  165.028822][    C0]  __rcu_read_unlock+0x84/0xe0
[  165.028832][    C0]  ? unwind_next_frame+0xa5/0x2390
[  165.028838][    C0]  unwind_next_frame+0x19ae/0x2390
[  165.028849][    C0]  ? unwind_next_frame+0xa5/0x2390
[  165.028857][    C0]  ? neigh_destroy+0x34f/0x5c0
[  165.028869][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  165.028878][    C0]  arch_stack_walk+0x11c/0x150
[  165.028890][    C0]  ? neigh_flush_dev+0x823/0x950
[  165.028901][    C0]  stack_trace_save+0x9c/0xe0
[  165.028910][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  165.028924][    C0]  ref_tracker_free+0xef/0x7d0
[  165.028934][    C0]  ? neigh_destroy+0x29e/0x5c0
[  165.028943][    C0]  ? __pfx_ref_tracker_free+0x10/0x10
[  165.028951][    C0]  ? neigh_destroy+0x34f/0x5c0
[  165.028972][    C0]  neigh_destroy+0x34f/0x5c0
[  165.028986][    C0]  neigh_flush_dev+0x823/0x950
[  165.028997][    C0]  ? __neigh_ifdown+0x2c/0x400
[  165.029007][    C0]  __neigh_ifdown+0x39/0x400
[  165.029020][    C0]  neigh_ifdown+0x1f/0x30
[  165.029029][    C0]  rt6_disable_ip+0x6b3/0x720
[  165.029042][    C0]  ? __pfx_rt6_disable_ip+0x10/0x10
[  165.029055][    C0]  addrconf_ifdown+0x15d/0x1880
[  165.029065][    C0]  ? __pfx_tls_dev_event+0x10/0x10
[  165.029075][    C0]  ? tls_dev_event+0x717/0xec0
[  165.029088][    C0]  ? __pfx_addrconf_ifdown+0x10/0x10
[  165.029105][    C0]  addrconf_notify+0x1bc/0x1010
[  165.029115][    C0]  notifier_call_chain+0x1b6/0x3e0
[  165.029128][    C0]  dev_close_many+0x29c/0x410
[  165.029141][    C0]  ? __pfx_dev_close_many+0x10/0x10
[  165.029150][    C0]  ? __mutex_trylock_common+0x153/0x260
[  165.029163][    C0]  unregister_netdevice_many_notify+0x834/0x2320
[  165.029175][    C0]  ? __mutex_lock+0x330/0xe80
[  165.029184][    C0]  ? __lock_acquire+0xab9/0xd20
[  165.029191][    C0]  ? migrate_enable+0x29c/0x3c0
[  165.029200][    C0]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  165.029214][    C0]  ? unregister_netdevice_queue+0x1b3/0x380
[  165.029230][    C0]  ? __pfx_veth_dellink+0x10/0x10
[  165.029239][    C0]  rtnl_dellink+0x488/0x710
[  165.029250][    C0]  ? __pfx_trace_call_bpf+0x10/0x10
[  165.029259][    C0]  ? __pfx_rtnl_dellink+0x10/0x10
[  165.029272][    C0]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  165.029283][    C0]  ? perf_trace_preemptirq_template+0x280/0x340
[  165.029293][    C0]  ? __local_bh_enable_ip+0xce/0x1c0
[  165.029338][    C0]  ? __pfx_rtnl_dellink+0x10/0x10
[  165.029347][    C0]  rtnetlink_rcv_msg+0x7cf/0xb70
[  165.029359][    C0]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  165.029399][    C0]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  165.029409][    C0]  ? ref_tracker_free+0x63a/0x7d0
[  165.029417][    C0]  ? __copy_skb_header+0xa7/0x550
[  165.029430][    C0]  ? __pfx_ref_tracker_free+0x10/0x10
[  165.029438][    C0]  ? __skb_clone+0x63/0x7a0
[  165.029450][    C0]  netlink_rcv_skb+0x208/0x470
[  165.029458][    C0]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  165.029469][    C0]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  165.029483][    C0]  ? netlink_deliver_tap+0x2e/0x1b0
[  165.029489][    C0]  ? netlink_deliver_tap+0x2e/0x1b0
[  165.029499][    C0]  netlink_unicast+0x75c/0x8e0
[  165.029514][    C0]  netlink_sendmsg+0x805/0xb30
[  165.029526][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  165.029535][    C0]  ? aa_sock_msg_perm+0x94/0x160
[  165.029544][    C0]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  165.029553][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  165.029560][    C0]  __sock_sendmsg+0x21c/0x270
[  165.029572][    C0]  ____sys_sendmsg+0x505/0x830
[  165.029583][    C0]  ? __pfx_____sys_sendmsg+0x10/0x10
[  165.029595][    C0]  ? import_iovec+0x74/0xa0
[  165.029604][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  165.029613][    C0]  ? __pfx____sys_sendmsg+0x10/0x10
[  165.029623][    C0]  ? irqentry_enter+0x3d/0x60
[  165.029654][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  165.029660][    C0]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  165.029669][    C0]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  165.029682][    C0]  ? rcu_is_watching+0x15/0xb0
[  165.029693][    C0]  ? do_syscall_64+0xbe/0x3b0
[  165.029704][    C0]  do_syscall_64+0xfa/0x3b0
[  165.029713][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.029720][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  165.029729][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.029735][    C0] RIP: 0033:0x7f06e0f8e9a9
[  165.029743][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  165.029748][    C0] RSP: 002b:00007f06e1e48038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  165.029755][    C0] RAX: ffffffffffffffda RBX: 00007f06e11b5fa0 RCX: 00007f06e0f8e9a9
[  165.029759][    C0] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[  165.029763][    C0] RBP: 00007f06e1010d69 R08: 0000000000000000 R09: 0000000000000000
[  165.029766][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  165.029770][    C0] R13: 0000000000000000 R14: 00007f06e11b5fa0 R15: 00007fff658e6ad8
[  165.029782][    C0]  </TASK>
[  165.561408][    C1] sched: DL replenish lagged too much

VM DIAGNOSIS:
11:49:52  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff33bf460 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99dfa470 RSP=ffffc90000007390
R8 =ffff8880219b8237 R9 =1ffff11004337046 R10=dffffc0000000000 R11=ffffffff85472150
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff854721c7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f06e1e486c0 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2fd9c4 CR3=00000000303c4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000015 000000000001df8a
XMM02=ffffffff0402c003 00100002b0030fff XMM03=cc00080002e00300 100002d0030fffff
XMM04=0000000000000000 0000000000000000 XMM05=000055556f288b82 000055556f288670
XMM06=0000000000000000 0000000000000000 XMM07=030fffffffffffff 0402c00300100002
XMM08=b0030fffffffffff ff0402a003060800 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=00000000000001ff RBX=ffffffff8f62ede0 RCX=ffffffff8b713f78 RDX=0000000000000001
RSI=0000000000000004 RDI=ffffffff8f62ede0 RBP=ffffc900001e05d0 RSP=ffffc900001e0520
R8 =ffffffff8f62ede3 R9 =1ffffffff1ec5dbc R10=dffffc0000000000 R11=fffffbfff1ec5dbd
R12=dffffc0000000000 R13=1ffff9200003c0a8 R14=ffffc900001e0570 R15=1ffffffff1ec5dbc
RIP=ffffffff8b713fa0 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055557664e500 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4f96f83178 CR3=0000000022f58000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000d000000000 ffffffffffffffff XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000035800000004 ffffffff000001a0 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f4f96e11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
