last executing test programs:

1.722273756s ago: executing program 2 (id=283):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0)

1.597420316s ago: executing program 2 (id=289):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x1, 0x21, 0x0, 0x0)

1.492455923s ago: executing program 2 (id=290):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x3}, 0x11efa, 0x4, 0x7, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x1100, 0x0, @mcast1, 0x1a}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)="f4f20800062b2f25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0)

1.382185318s ago: executing program 0 (id=294):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="d8000000100081414e81f782db010000001d080b01008100e8fe55a1010115000600142603600e120800040000001101a80012000500054006000d30514d3afab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef6aa98516277ce06bbace8017cbec040000000000000000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e5dbf66f282ac027812cfbd3f1aeb4edbb57a7025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0xc000)

1.309499526s ago: executing program 0 (id=295):
perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x2, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')

1.307160939s ago: executing program 0 (id=297):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x1}, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x3, 0x8442a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
socket$kcm(0x10, 0x400000002, 0x0)
socket$kcm(0x1e, 0x4, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x6, 0x4}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x20000, 0x4, 0x3, 0x141, r1}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0))
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

1.302246978s ago: executing program 2 (id=299):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r0, 0x20, &(0x7f0000000140)={0xfffffffffffffffd, 0x0, 0x0, &(0x7f00000000c0)=""/26, 0x1a}}, 0x10)

1.222036758s ago: executing program 2 (id=300):
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100))
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1}, {0x0, 0x3, 0x8}, {0x0, 0x4, 0x10004}]}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000640)=r1, 0x4)
r3 = socket$kcm(0x10, 0x3, 0x10)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x2c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e", 0x23}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, 0x0, 0x0)
sendmsg$kcm(r0, 0x0, 0x800)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x1ff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000f000000070000000600000005"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x4af, r4}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, 0x0, &(0x7f0000000680), 0x2, r4}, 0x38)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)="140000002d000b35f8ffffffffffffff0424ff0f", 0x14}], 0x1, 0x0, 0x0, 0x2000000}, 0x8840)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000440), 0x12)

1.15354269s ago: executing program 1 (id=303):
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x2, 0x5, 0x84)
r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext={0x1}, 0x20a0, 0x58, 0x80000000, 0x4, 0x2, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x6e8}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES8], 0x9a)

1.115398122s ago: executing program 0 (id=304):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0xa, 0x1, 0x106)
recvmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40010160)

967.942878ms ago: executing program 0 (id=305):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x8, &(0x7f0000000640), 0x4)

966.922952ms ago: executing program 1 (id=306):
r0 = socket$kcm(0x28, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x28, 0x8, 0x0, 0x44)

919.257285ms ago: executing program 0 (id=307):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0xc0802, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a00)={'nr0\x00', 0x20})
socket$kcm(0x29, 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc98, 0x0, @perf_config_ext={0x3, 0x8001}, 0x28e4dcf2182c8c55, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x9)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x0)
write$cgroup_subtree(r3, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33)
recvmsg$kcm(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000039c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/233, 0xe9}, {0x0}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000b00)=""/157, 0x9d}, {&(0x7f00000008c0)=""/210, 0xd2}], 0x6}, 0x0)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f00000000c0)=0xb7)
recvmsg$kcm(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x142)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x10, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="850000008900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r5 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r5, 0x29, 0x6, &(0x7f0000000240), 0x67)

919.099298ms ago: executing program 1 (id=308):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000640)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc)

918.952464ms ago: executing program 1 (id=309):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x8183, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext, 0x40, 0x0, 0x0, 0x0, 0xc360, 0xfffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{}], 0x1}, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

899.344051ms ago: executing program 2 (id=310):
r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x110345, 0x4, 0x800000, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e0025001000000002800000121f", 0x2e}], 0x1}, 0x0)

812.699917ms ago: executing program 1 (id=311):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x16}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2, <r3=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000080)=r0}, 0x20)
recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000a00)=""/129, 0x81}], 0x1}, 0x2)
close(r3)

0s ago: executing program 1 (id=312):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2381, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1020, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:38233' (ED25519) to the list of known hosts.
syzkaller login: [   56.688607][ T5814] cgroup: Unknown subsys name 'net'
[   56.812278][ T5814] cgroup: Unknown subsys name 'cpuset'
[   56.817711][ T5814] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.242335][ T5814] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   62.467590][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.471642][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.475159][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.478514][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.481657][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   62.486903][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.491294][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.495706][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.499521][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.502995][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.602038][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.606072][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.609788][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.613444][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.616158][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.775298][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   62.907359][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.910873][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.913600][ T5831] bridge_slave_0: entered allmulticast mode
[   62.917488][ T5831] bridge_slave_0: entered promiscuous mode
[   62.927920][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   62.942486][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.945511][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.958598][ T5831] bridge_slave_1: entered allmulticast mode
[   62.962608][ T5831] bridge_slave_1: entered promiscuous mode
[   63.009169][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.026939][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   63.037042][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.101007][ T5831] team0: Port device team_slave_0 added
[   63.153660][ T5831] team0: Port device team_slave_1 added
[   63.203575][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.206872][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.210325][ T5828] bridge_slave_0: entered allmulticast mode
[   63.214236][ T5828] bridge_slave_0: entered promiscuous mode
[   63.221081][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.223426][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.233156][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.238762][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.241179][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.251547][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.268184][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.271699][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.274958][ T5828] bridge_slave_1: entered allmulticast mode
[   63.279429][ T5828] bridge_slave_1: entered promiscuous mode
[   63.287927][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.290875][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.294065][ T5839] bridge_slave_0: entered allmulticast mode
[   63.297454][ T5839] bridge_slave_0: entered promiscuous mode
[   63.329549][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.332758][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.335205][ T5839] bridge_slave_1: entered allmulticast mode
[   63.338137][ T5839] bridge_slave_1: entered promiscuous mode
[   63.370996][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.380335][ T5831] hsr_slave_0: entered promiscuous mode
[   63.383797][ T5831] hsr_slave_1: entered promiscuous mode
[   63.399211][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.411896][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.437007][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.473808][ T5839] team0: Port device team_slave_0 added
[   63.477677][ T5839] team0: Port device team_slave_1 added
[   63.482135][ T5828] team0: Port device team_slave_0 added
[   63.512226][ T5828] team0: Port device team_slave_1 added
[   63.543462][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.545847][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.555827][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.564990][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.567579][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.579323][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.584398][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.586773][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.596142][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.616388][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.620279][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.631891][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.702697][ T5839] hsr_slave_0: entered promiscuous mode
[   63.705136][ T5839] hsr_slave_1: entered promiscuous mode
[   63.707373][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.712134][ T5839] Cannot create hsr debugfs directory
[   63.752474][ T5828] hsr_slave_0: entered promiscuous mode
[   63.755153][ T5828] hsr_slave_1: entered promiscuous mode
[   63.757382][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.761168][ T5828] Cannot create hsr debugfs directory
[   63.859475][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.881550][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.896664][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.916219][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.002761][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.009695][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.025602][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.036921][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.080329][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.086902][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.096472][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.102137][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.143579][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.182077][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   64.197849][  T181] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.200979][  T181] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.228029][  T181] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.231108][  T181] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.287548][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.303895][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.322065][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   64.336029][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.338913][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.362680][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.365681][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.374278][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   64.396681][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.399582][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.413621][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.417061][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.482241][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.545421][ T5831] veth0_vlan: entered promiscuous mode
[   64.549851][ T5832] Bluetooth: hci0: command tx timeout
[   64.551824][ T5836] Bluetooth: hci1: command tx timeout
[   64.561485][ T5831] veth1_vlan: entered promiscuous mode
[   64.583861][ T5831] veth0_macvtap: entered promiscuous mode
[   64.589938][ T5831] veth1_macvtap: entered promiscuous mode
[   64.618125][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.627132][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.630307][ T5836] Bluetooth: hci2: command tx timeout
[   64.644307][ T5831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.647791][ T5831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.651788][ T5831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.655092][ T5831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.748176][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.752232][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.777019][ T4461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.782511][ T4461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.783248][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.820537][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.830118][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   64.934977][ T5839] veth0_vlan: entered promiscuous mode
[   64.943945][ T5828] veth0_vlan: entered promiscuous mode
[   64.966473][ T5839] veth1_vlan: entered promiscuous mode
[   64.989597][ T5828] veth1_vlan: entered promiscuous mode
[   65.027883][ T5839] veth0_macvtap: entered promiscuous mode
[   65.034603][ T5828] veth0_macvtap: entered promiscuous mode
[   65.037998][ T5839] veth1_macvtap: entered promiscuous mode
[   65.049005][ T5828] veth1_macvtap: entered promiscuous mode
[   65.062948][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.075570][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.083204][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.093304][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.107031][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.112209][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.115230][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.118069][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.131762][ T5839] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.135564][ T5839] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.160095][ T5839] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.163915][ T5839] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.304992][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.311700][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.342118][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.345908][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.376418][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.382644][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.402899][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.405948][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.489754][ T5909] Zero length message leads to an empty skb
[   65.540558][ T5909] netlink: 'syz.0.8': attribute type 12 has an invalid length.
[   65.552278][ T5914] netlink: 'syz.2.10': attribute type 39 has an invalid length.
[   65.555008][ T5909] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8'.
[   65.626990][ T5921] netlink: 56 bytes leftover after parsing attributes in process `syz.1.12'.
[   65.634380][ T5919] netlink: 830 bytes leftover after parsing attributes in process `syz.0.11'.
[   65.638770][ T5919] team0: default FDB implementation only supports local addresses
[   65.642507][ T5921] netlink: 56 bytes leftover after parsing attributes in process `syz.1.12'.
[   65.646172][ T5921] netlink: 56 bytes leftover after parsing attributes in process `syz.1.12'.
[   65.764007][ T5925] syzkaller0: entered promiscuous mode
[   65.766055][ T5925] syzkaller0: entered allmulticast mode
[   66.463221][ T5930] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.16'.
[   66.630140][ T5836] Bluetooth: hci1: command tx timeout
[   66.632034][ T5836] Bluetooth: hci0: command tx timeout
[   66.698110][ T5944] netlink: 60 bytes leftover after parsing attributes in process `syz.0.22'.
[   66.703981][ T5942] netlink: 60 bytes leftover after parsing attributes in process `syz.0.22'.
[   66.708460][ T5832] Bluetooth: hci2: command tx timeout
[   66.715082][ T5942] netlink: 60 bytes leftover after parsing attributes in process `syz.0.22'.
[   66.868257][    C0] hrtimer: interrupt took 75448 ns
[   66.880793][ T5832] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10
[   66.880937][ T5832] Bluetooth: hci1: connection err: -111
[   67.345363][ T5957] warning: `syz.0.27' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   68.709377][ T5832] Bluetooth: hci0: command tx timeout
[   68.712357][ T5832] Bluetooth: hci1: command tx timeout
[   68.849021][ T5836] Bluetooth: hci2: command tx timeout
[   69.629046][ T5989] netlink: 'syz.1.41': attribute type 2 has an invalid length.
[   69.638592][ T5989] netlink: 130532 bytes leftover after parsing attributes in process `syz.1.41'.
[   69.735395][ T5998] netlink: 'syz.1.45': attribute type 13 has an invalid length.
[   69.754926][ T6000] netlink: 'syz.0.46': attribute type 11 has an invalid length.
[   69.992717][ T5999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   70.791977][ T5836] Bluetooth: hci1: command tx timeout
[   70.793978][ T5836] Bluetooth: hci0: command tx timeout
[   70.866828][ T6048] netlink: 'syz.0.68': attribute type 2 has an invalid length.
[   70.869923][ T6048] netlink: 'syz.0.68': attribute type 8 has an invalid length.
[   70.872436][ T6048] __nla_validate_parse: 3 callbacks suppressed
[   70.872443][ T6048] netlink: 132 bytes leftover after parsing attributes in process `syz.0.68'.
[   70.888751][ T5832] Bluetooth: hci2: command tx timeout
[   70.963133][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   70.965409][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.987974][ T6081] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.84'.
[   73.184120][ T6093] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   73.257200][ T6100] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.91'.
[   73.792897][ T6119] C: renamed from team_slave_0 (while UP)
[   73.805280][ T6119] netlink: 'syz.1.99': attribute type 3 has an invalid length.
[   73.811354][ T6119] netlink: 'syz.1.99': attribute type 1 has an invalid length.
[   73.814705][ T6119] netlink: 116 bytes leftover after parsing attributes in process `syz.1.99'.
[   73.822398][ T6119] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   74.335614][ T6126] bridge0: port 3(syz_tun) entered blocking state
[   74.342515][ T6126] bridge0: port 3(syz_tun) entered disabled state
[   74.355225][ T6126] syz_tun: entered allmulticast mode
[   74.361597][ T6126] syz_tun: entered promiscuous mode
[   74.364478][ T6126] bridge0: port 3(syz_tun) entered blocking state
[   74.366672][ T6126] bridge0: port 3(syz_tun) entered forwarding state
[   74.433084][ T6130] netlink: 14 bytes leftover after parsing attributes in process `syz.0.103'.
[   74.437125][ T6130] hsr0: entered promiscuous mode
[   74.439816][ T6130] hsr0: entered allmulticast mode
[   74.442114][ T6130] hsr_slave_0: entered allmulticast mode
[   74.444692][ T6130] hsr_slave_1: entered allmulticast mode
[   74.841902][ T6149] netlink: 'syz.1.111': attribute type 11 has an invalid length.
[   74.845052][ T6149] netlink: 168 bytes leftover after parsing attributes in process `syz.1.111'.
[   74.933764][ T6157] netlink: 201660 bytes leftover after parsing attributes in process `syz.2.116'.
[   75.022709][ T6163] lo: entered allmulticast mode
[   75.031508][ T6163] lo: entered promiscuous mode
[   75.033109][ T6163] lo: left allmulticast mode
[   75.052324][ T6161] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.118'.
[   75.103730][ T6167] netlink: 'syz.1.121': attribute type 10 has an invalid length.
[   75.119672][ T6167] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   75.395426][ T6182] syzkaller0: entered promiscuous mode
[   75.402737][ T6182] syzkaller0: entered allmulticast mode
[   75.485703][ T6187] syz.1.129 uses obsolete (PF_INET,SOCK_PACKET)
[   76.202743][ T6192] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   76.243968][ T6194] netlink: 'syz.2.131': attribute type 10 has an invalid length.
[   76.457679][ T6204] netlink: 'syz.1.135': attribute type 6 has an invalid length.
[   77.651086][ T6268] netlink: 'syz.2.165': attribute type 2 has an invalid length.
[   77.653787][ T6268] netlink: 132 bytes leftover after parsing attributes in process `syz.2.165'.
[   77.752088][ T5832] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5
[   78.498389][ T5279] udevd[5279]: worker [5829] terminated by signal 33 (Unknown signal 33)
[   78.502638][ T5279] udevd[5279]: worker [5829] failed while handling '/devices/virtual/block/loop0'
[   78.543928][ T5279] udevd[5279]: worker [5837] terminated by signal 33 (Unknown signal 33)
[   78.546725][ T5279] udevd[5279]: worker [5837] failed while handling '/devices/virtual/block/loop1'
[   78.980560][ T6317] netlink: 48 bytes leftover after parsing attributes in process `syz.2.185'.
[   79.481346][ T6338] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.195'.
[   79.641875][ T6349] netlink: 'syz.2.199': attribute type 10 has an invalid length.
[   79.680836][    C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   79.949788][ T6361] netlink: 132 bytes leftover after parsing attributes in process `syz.0.203'.
[   80.589469][ T6364] netlink: 'syz.1.205': attribute type 11 has an invalid length.
[   80.592860][ T6364] netlink: 149476 bytes leftover after parsing attributes in process `syz.1.205'.
[   80.657984][ T6364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   80.996630][ T6389] netlink: 'syz.1.217': attribute type 2 has an invalid length.
[   81.003904][ T6389] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.217'.
[   81.008676][ T6389] nbd: must specify a device to reconfigure
[   81.190707][ T6393] netlink: 196 bytes leftover after parsing attributes in process `syz.1.219'.
[   81.196884][  T792] cfg80211: failed to load regulatory.db
[   81.697284][ T6413] netlink: 60 bytes leftover after parsing attributes in process `syz.2.229'.
[   81.703271][ T6413] netlink: 60 bytes leftover after parsing attributes in process `syz.2.229'.
[   81.906672][ T6429] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   81.917955][ T6429] batman_adv: batadv0: Removing interface: batadv_slave_0
[   81.922810][ T6431] netlink: 132 bytes leftover after parsing attributes in process `syz.2.237'.
[   81.935115][ T6429] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.944964][ T6429] batman_adv: batadv0: Removing interface: batadv_slave_1
[   82.235694][ T6440] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[   83.121873][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1233613862 wd_nsec: 1233613907
[   83.353938][ T6459] netlink: 'syz.0.247': attribute type 27 has an invalid length.
[   83.357181][ T6459] __nla_validate_parse: 1 callbacks suppressed
[   83.357191][ T6459] netlink: 152 bytes leftover after parsing attributes in process `syz.0.247'.
[   83.363743][ T6459] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   84.169531][ T6474] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.254'.
[   84.173341][ T6474] netlink: 6328 bytes leftover after parsing attributes in process `syz.2.254'.
[   84.331468][ T6485] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.259'.
[   84.403837][ T6481] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.256'.
[   84.407019][ T6481] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   84.435150][ T6488] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.260'.
[   84.453315][ T6481] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   84.773156][ T6516] netlink: 132 bytes leftover after parsing attributes in process `syz.0.270'.
[   85.762737][ T6537] netlink: 3 bytes leftover after parsing attributes in process `syz.0.280'.
[   86.313052][ T6582] netlink: 60 bytes leftover after parsing attributes in process `syz.1.302'.
[   86.375180][ T5832] Bluetooth: hci0: ISO packet for unknown connection handle 2815
[   86.616571][ T6597] netlink: 'syz.2.310': attribute type 37 has an invalid length.
[  103.227754][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  103.231853][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  103.234761][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  103.237777][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  103.240893][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  103.382045][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  103.385510][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  103.390342][   T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  103.394005][   T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  103.398355][   T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  103.579786][ T6615] chnl_net:caif_netlink_parms(): no params data found
[  103.611323][   T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  103.614966][   T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  103.617867][   T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  103.623044][   T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  103.625976][   T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  105.269215][   T55] Bluetooth: hci3: command tx timeout
[  105.430833][   T55] Bluetooth: hci4: command tx timeout
[  105.668515][   T55] Bluetooth: hci5: command tx timeout
[  107.350096][   T55] Bluetooth: hci3: command tx timeout
[  107.518607][   T55] Bluetooth: hci4: command tx timeout
[  107.748591][   T55] Bluetooth: hci5: command tx timeout
[  109.428725][   T55] Bluetooth: hci3: command tx timeout
[  109.588463][   T55] Bluetooth: hci4: command tx timeout
[  109.828582][   T55] Bluetooth: hci5: command tx timeout
[  111.508451][   T55] Bluetooth: hci3: command tx timeout
[  111.669413][   T55] Bluetooth: hci4: command tx timeout
[  111.918606][   T55] Bluetooth: hci5: command tx timeout
[  163.524222][ T5836] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  163.531409][ T5836] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  163.534299][ T5836] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  163.537309][ T5836] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  163.542604][ T5836] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  163.601233][ T5832] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  163.604327][ T5832] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  163.607064][ T5832] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  163.612197][ T5832] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  163.615348][ T5832] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  163.649449][ T5832] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  163.652723][ T5832] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  163.656100][ T5832] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  163.662040][ T5832] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  163.665281][ T5832] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  165.588487][ T5836] Bluetooth: hci6: command tx timeout
[  165.668699][ T5836] Bluetooth: hci8: command tx timeout
[  165.748612][ T5836] Bluetooth: hci7: command tx timeout
[  167.669810][ T5836] Bluetooth: hci6: command tx timeout
[  167.748612][ T5836] Bluetooth: hci8: command tx timeout
[  167.828606][ T5836] Bluetooth: hci7: command tx timeout
[  169.750478][ T5836] Bluetooth: hci6: command tx timeout
[  169.838907][ T5836] Bluetooth: hci8: command tx timeout
[  169.908625][ T5836] Bluetooth: hci7: command tx timeout
[  171.830784][ T5836] Bluetooth: hci6: command tx timeout
[  171.908628][ T5836] Bluetooth: hci8: command tx timeout
[  171.988430][ T5836] Bluetooth: hci7: command tx timeout
[  185.671955][ T5836] Bluetooth: hci0: command 0x0406 tx timeout
[  191.628268][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  191.630407][    C1] rcu: 	1-....: (10499 ticks this GP) idle=b184/1/0x4000000000000000 softirq=18618/18622 fqs=4823
[  191.635038][    C1] rcu: 	         hardirqs   softirqs   csw/system
[  191.637079][    C1] rcu: 	 number:   984458          0            0
[  191.639128][    C1] rcu: 	cputime:    25495      26973           94   ==> 52470(ms)
[  191.641571][    C1] rcu: 	(t=10500 jiffies g=10929 q=3589 ncpus=2)
[  191.643566][    C1] CPU: 1 UID: 0 PID: 6593 Comm: syz.0.307 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  191.643575][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  191.643579][    C1] RIP: 0010:rcu_read_unlock_special+0x87/0x4c0
[  191.643597][    C1] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 92 37 f8 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
[  191.643602][    C1] RSP: 0018:ffffc900001e01a0 EFLAGS: 00000206
[  191.643609][    C1] RAX: 44f4dd7232900100 RBX: 1ffff9200003c03c RCX: 44f4dd7232900100
[  191.643614][    C1] RDX: 0000000000000003 RSI: ffffffff8d9987c6 RDI: ffffffff8be29f80
[  191.643618][    C1] RBP: ffffc900001e0298 R08: ffffffff8fa1eaf7 R09: 1ffffffff1f43d5e
[  191.643622][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d5f R12: ffffffff8e144400
[  191.643627][    C1] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000002
[  191.643631][    C1] FS:  00007f9b034dc6c0(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
[  191.643636][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  191.643641][    C1] CR2: 0000200000005000 CR3: 0000000025dee000 CR4: 00000000000006f0
[  191.643667][    C1] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000200000000300
[  191.643672][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  191.643676][    C1] Call Trace:
[  191.643682][    C1]  <IRQ>
[  191.643684][    C1]  ? __lock_acquire+0xab9/0xd20
[  191.643697][    C1]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  191.643709][    C1]  ? unwind_next_frame+0xa5/0x2390
[  191.643722][    C1]  __rcu_read_unlock+0x84/0xe0
[  191.643732][    C1]  ? unwind_next_frame+0xa5/0x2390
[  191.643739][    C1]  unwind_next_frame+0x19ae/0x2390
[  191.643750][    C1]  ? unwind_next_frame+0xa5/0x2390
[  191.643757][    C1]  ? kmalloc_reserve+0xbd/0x290
[  191.643768][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  191.643778][    C1]  arch_stack_walk+0x11c/0x150
[  191.643790][    C1]  ? __alloc_skb+0x142/0x2d0
[  191.643799][    C1]  stack_trace_save+0x9c/0xe0
[  191.643808][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  191.643822][    C1]  kasan_save_track+0x3e/0x80
[  191.643833][    C1]  ? kasan_save_track+0x3e/0x80
[  191.643841][    C1]  ? __kasan_slab_alloc+0x6c/0x80
[  191.643847][    C1]  ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  191.643853][    C1]  ? kmalloc_reserve+0xbd/0x290
[  191.643886][    C1]  __kasan_slab_alloc+0x6c/0x80
[  191.643893][    C1]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  191.643900][    C1]  ? kmalloc_reserve+0xbd/0x290
[  191.643909][    C1]  kmalloc_reserve+0xbd/0x290
[  191.643915][    C1]  ? napi_skb_cache_get+0x37b/0x6d0
[  191.643924][    C1]  __alloc_skb+0x142/0x2d0
[  191.643933][    C1]  napi_alloc_skb+0x84/0x7d0
[  191.643943][    C1]  e1000_clean_rx_irq+0x448/0x1170
[  191.643968][    C1]  ? __pfx_e1000_clean_rx_irq+0x10/0x10
[  191.643975][    C1]  e1000_clean+0xca4/0x2b00
[  191.644023][    C1]  ? perf_trace_preemptirq_template+0x280/0x340
[  191.644036][    C1]  ? net_rx_action+0x382/0xe30
[  191.644043][    C1]  ? __pfx_e1000_clean+0x10/0x10
[  191.644054][    C1]  __napi_poll+0xc7/0x480
[  191.644064][    C1]  ? net_rx_action+0x46d/0xe30
[  191.644072][    C1]  net_rx_action+0x707/0xe30
[  191.644088][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  191.644096][    C1]  ? kvm_sched_clock_read+0x11/0x20
[  191.644111][    C1]  ? __pfx_sched_clock_cpu+0x10/0x10
[  191.644128][    C1]  handle_softirqs+0x286/0x870
[  191.644139][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  191.644150][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  191.644160][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  191.644172][    C1]  __irq_exit_rcu+0xca/0x1f0
[  191.644180][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  191.644192][    C1]  irq_exit_rcu+0x9/0x30
[  191.644198][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  191.644207][    C1]  </IRQ>
[  191.644209][    C1]  <TASK>
[  191.644212][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  191.644220][    C1] RIP: 0010:__schedule+0x1a7/0x4d00
[  191.644229][    C1] Code: 74 08 48 89 df e8 e9 e2 b3 f6 48 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 d0 e2 b3 f6 48 81 3b 9d 6e ac 57 <0f> 85 26 18 00 00 83 7c 24 70 00 7f 42 49 8d 5e 18 48 89 d8 48 c1
[  191.644234][    C1] RSP: 0018:ffffc900040ff0c0 EFLAGS: 00000246
[  191.644240][    C1] RAX: 1ffff9200081f000 RBX: ffffc900040f8000 RCX: 44f4dd7232900100
[  191.644244][    C1] RDX: 0000000000000000 RSI: ffffffff8be29f60 RDI: ffffffff8be29f20
[  191.644248][    C1] RBP: ffffc900040ff2d0 R08: ffffffff8fa1eaf7 R09: 1ffffffff1f43d5e
[  191.644252][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d5f R12: ffff88813663aac8
[  191.644257][    C1] R13: dffffc0000000000 R14: ffff888026bc3980 R15: ffff8881a3c1f000
[  191.644270][    C1]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  191.644282][    C1]  ? perf_trace_preemptirq_template+0x280/0x340
[  191.644292][    C1]  ? irqentry_enter+0x3d/0x60
[  191.644301][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  191.644309][    C1]  ? trace_call_bpf+0xb7/0x850
[  191.644317][    C1]  ? preempt_schedule_irq+0xb5/0x150
[  191.644333][    C1]  ? __pfx___schedule+0x10/0x10
[  191.644341][    C1]  ? irqentry_exit+0x74/0x90
[  191.644349][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  191.644367][    C1]  preempt_schedule_irq+0xb5/0x150
[  191.644375][    C1]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  191.644388][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  191.644397][    C1]  irqentry_exit+0x6f/0x90
[  191.644405][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  191.644411][    C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70
[  191.644420][    C1] Code: 8b 3d 74 d6 fb 0b 48 89 de 5b e9 13 5f 58 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 08 10 a0 92 65 8b 15 58 f2 df 10 81 e2 00 01 ff 00
[  191.644425][    C1] RSP: 0018:ffffc900040ff458 EFLAGS: 00000287
[  191.644430][    C1] RAX: ffffffff820b51a5 RBX: 0000000000000000 RCX: ffff888026bc3980
[  191.644434][    C1] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000040
[  191.644438][    C1] RBP: ffffc900040ff660 R08: 0000000000000000 R09: ffffffff82101ce9
[  191.644442][    C1] R10: ffffc900040ff58c R11: fffff5200081feba R12: ffff8880258073a0
[  191.644446][    C1] R13: ffff888025807380 R14: 0000000000000025 R15: 0000000000000a14
[  191.644454][    C1]  ? ___pte_offset_map+0x29/0x2c0
[  191.644460][    C1]  ? __handle_mm_fault+0x1665/0x5620
[  191.644475][    C1]  __handle_mm_fault+0x1665/0x5620
[  191.644495][    C1]  ? __pfx___handle_mm_fault+0x10/0x10
[  191.644515][    C1]  ? find_vma+0xe7/0x160
[  191.644522][    C1]  ? __pfx_find_vma+0x10/0x10
[  191.644529][    C1]  handle_mm_fault+0x40a/0x8e0
[  191.644545][    C1]  do_user_addr_fault+0x764/0x1390
[  191.644560][    C1]  exc_page_fault+0x76/0xf0
[  191.644568][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  191.644577][    C1]  asm_exc_page_fault+0x26/0x30
[  191.644583][    C1] RIP: 0010:rep_movs_alternative+0x75/0x90
[  191.644591][    C1] Code: 05 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 c7 48 01 c6 48 29 c1 48 89 c8 48 c1 e9 03 83 e0 07 <f3> 48 a5 89 c1 85 c9 75 91 e9 fd 00 04 00 48 8d 0c c8 eb 86 cc cc
[  191.644595][    C1] RSP: 0018:ffffc900040ff898 EFLAGS: 00010206
[  191.644600][    C1] RAX: 0000000000000003 RBX: ffff888124f80000 RCX: 000000000000199e
[  191.644604][    C1] RDX: 0000000000000001 RSI: 0000200000005000 RDI: ffff888124f83140
[  191.644608][    C1] RBP: ffffc900040ff9f0 R08: ffff888124f8fe32 R09: 1ffff110249f1fc6
[  191.644613][    C1] R10: dffffc0000000000 R11: ffffed10249f1fc7 R12: 1ffff9200081ff77
[  191.644617][    C1] R13: 0000200000001ec0 R14: ffffc900040ffbc8 R15: 000000000000fe33
[  191.644631][    C1]  _copy_from_iter+0x24c/0x16f0
[  191.644644][    C1]  ? irqentry_exit+0x74/0x90
[  191.644655][    C1]  ? __pfx__copy_from_iter+0x10/0x10
[  191.644667][    C1]  ? __build_skb_around+0x237/0x3e0
[  191.644674][    C1]  ? netlink_sendmsg+0x642/0xb30
[  191.644681][    C1]  ? skb_put+0x11b/0x210
[  191.644690][    C1]  netlink_sendmsg+0x6b2/0xb30
[  191.644702][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  191.644711][    C1]  ? aa_sock_msg_perm+0x94/0x160
[  191.644722][    C1]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  191.644731][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  191.644738][    C1]  __sock_sendmsg+0x21c/0x270
[  191.644750][    C1]  sock_write_iter+0x258/0x330
[  191.644761][    C1]  ? __pfx_sock_write_iter+0x10/0x10
[  191.644775][    C1]  ? bpf_lsm_file_permission+0x9/0x20
[  191.644785][    C1]  ? security_file_permission+0x75/0x290
[  191.644797][    C1]  vfs_write+0x54b/0xa90
[  191.644807][    C1]  ? __pfx_sock_write_iter+0x10/0x10
[  191.644816][    C1]  ? __pfx_vfs_write+0x10/0x10
[  191.644828][    C1]  ? __fget_files+0x2a/0x420
[  191.644840][    C1]  ksys_write+0x145/0x250
[  191.644848][    C1]  ? __pfx_ksys_write+0x10/0x10
[  191.644861][    C1]  do_syscall_64+0xfa/0x3b0
[  191.644871][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.644877][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  191.644886][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.644892][    C1] RIP: 0033:0x7f9b0258e9a9
[  191.644900][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  191.644905][    C1] RSP: 002b:00007f9b034dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  191.644911][    C1] RAX: ffffffffffffffda RBX: 00007f9b027b5fa0 RCX: 00007f9b0258e9a9
[  191.644915][    C1] RDX: 000000000000fe33 RSI: 0000200000001ec0 RDI: 0000000000000009
[  191.644919][    C1] RBP: 00007f9b02610d69 R08: 0000000000000000 R09: 0000000000000000
[  191.644923][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  191.644926][    C1] R13: 0000000000000000 R14: 00007f9b027b5fa0 R15: 00007ffd5a97a828
[  191.644939][    C1]  </TASK>
[  191.959405][    C1] sched: DL replenish lagged too much

VM DIAGNOSIS:
11:24:20  Registers:
info registers vcpu 0

CPU#0
RAX=894a31634054e800 RBX=ffffffff81975f18 RCX=894a31634054e800 RDX=0000000000000001
RSI=ffffffff8d9987c6 RDI=ffffffff8be29f80 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa1eaf0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6e84f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000561b6bd98340 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007fd1ca586d00
XMM02=8090000f0000004d 000fc00300000000 XMM03=000fd00300108880 90000fd003001080
XMM04=0000000000000000 000000000000000e XMM05=0000000000000000 000000000001df8a
XMM06=8090000fd0030010 b88090000000004f XMM07=10b0809000000000 0010a88090000fd0
XMM08=030010a08090000f d00300100000004e XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000062 RBX=0000000000000062 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001df4d0
R8 =ffff888107700237 R9 =1ffff11020ee0046 R10=dffffc0000000000 R11=ffffffff85472220
R12=dffffc0000000000 R13=ffffffff99af58c1 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff8547229c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f9b034dc6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000005000 CR3=0000000025dee000 CR4=000006f0
DR0=0000000000000000 DR1=0000200000000300 DR2=0000200000000300 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f9b02786478 00007f9b02786450 XMM03=00007f9b02786488 00007f9b02786480
XMM04=00007f9b032ed100 00007f9b02786440 XMM05=00007f9b02786458 00007f9b027864a0
XMM06=00007f9b02786498 00007f9b02786490 XMM07=00007f9b02786488 00007f9b02786480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f9b02611ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
