last executing test programs:

702.336564ms ago: executing program 1 (id=264):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b904020000000080000000001500100014000000000009000d2000000401a80016000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92954b43370e970100", 0xd8}], 0x1}, 0x0)

678.280223ms ago: executing program 1 (id=265):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@func_proto={0x2, 0x1, 0x0, 0xc, 0x2, [{0x9, 0x3}]}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x30}, 0x28)

611.85011ms ago: executing program 1 (id=267):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b4050000000000006100ca00000000c5922e4eeb0063010800000000009500090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52)
r0 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0)
sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr, 0x62, 0x0}, 0x0)
perf_event_open(0x0, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b7040000800000008500000001000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00'}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0x1, <r4=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f00000002c0)}, 0x20)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='memory.swap.events\x00', 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x58, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x13, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000580)='syzkaller\x00', 0xd, 0x77, &(0x7f0000000700)=""/119, 0x41000, 0x48, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000880)={0x7, 0xb, 0xc, 0x5}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f00000008c0)=[{0x1, 0x5, 0xe, 0x3}, {0x2, 0x5, 0x6, 0x11}, {0x1, 0x1, 0x8, 0xa}, {0x0, 0x2, 0xe, 0x9}, {0x2, 0x4, 0xf}], 0x10, 0x4f2}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x0, 0x7ffbd, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r7, 0x0, &(0x7f0000000200)=""/76}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f00000000c0)=[{0xe3, 0xb, 0x2, 0xf2}, {0x8001, 0x7f, 0x5, 0x4}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r9, &(0x7f0000000040), 0x0}, 0xd)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000b40)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="110000000000070000000000", @ANYRES32, @ANYRES64=0x0], 0x20)

611.673875ms ago: executing program 0 (id=268):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000020000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c56f0979bd10b97163c1d6d0e196bf02f46e8953ab1abda45cbe8d0d26b5069f8a98f7dc8f76b74635fc9f9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d35c32aac1c7d5b5be399f6609876b5887437a172fbc02a74067529194e533583412dff048f0000000000000000b2728a04816cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad30000000000000003626165866c154e2514890000b515a1000000000000000eb2e9c15b6c8f6198282d0086fa0000c2ccf3f6d69cfcf1e15ea7a9e57aee78e12ace55736fa42811654e19a7e9b531636794a718b4766d744263b6681da2b2204d848619a3eb62e77460c048df8e72bfe31438163ec4270439b350274e5aa941bfc32ce08e3790dfb0c59bbe45cd27264669c187eed6d67b3be191137814bcb226b2078a1bc45502705d538d8723113445b08b0ac8dc2dfa17fd79ed5fd33b14b0adabf72df024dcde1ef330b927ce1a80474ce4f99a292c71456ec1abbfbb61dc9f0f71395a1751d35fa1"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0xffff0000, 0xe, 0x0, &(0x7f00000007c0)="2b206d0748010097737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50)

501.765034ms ago: executing program 0 (id=270):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

442.378282ms ago: executing program 0 (id=273):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x6, 0x22, 0x0, 0x700)

430.766534ms ago: executing program 1 (id=276):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1810039000000000bf0ffffff00000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x800)

428.464754ms ago: executing program 0 (id=277):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x75, &(0x7f0000000000), 0x8)
sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f00000001c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000580)='|', 0x1}], 0x1}, 0x8c0)

365.051675ms ago: executing program 2 (id=278):
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002140)={@map, 0xffffffffffffffff, 0x15, 0x10}, 0x20)

364.62019ms ago: executing program 0 (id=279):
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="1808000c6e8f00000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = socket$kcm(0x2, 0x1, 0x84)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0x2, 0x922000000001, 0x106)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x85, &(0x7f0000000ac0), 0x90)
sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000300)=[{&(0x7f00000000c0)="83", 0x1}], 0x1}, 0xe0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)

360.895731ms ago: executing program 1 (id=280):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x8, 0xa8, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20)

316.227318ms ago: executing program 2 (id=281):
r0 = socket$kcm(0x11, 0x200000000000003, 0x300)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000003c0), 0x4)
recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/150, 0xffffffffffffff03}, {&(0x7f00000000c0)=""/119, 0x77}, {&(0x7f0000000140)=""/1, 0x1}], 0x3}, 0x11100)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x5, [@var={0xf, 0x0, 0x0, 0xe, 0x2, 0x2}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x2, 0x6}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xd, 0x4}, {0xb, 0x3}, {0x0, 0x3}, {0x1, 0x1}, {0x10, 0x3}]}, @func={0x6, 0x0, 0x0, 0xc, 0x1}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x0, 0x2e, 0x0]}}, &(0x7f0000000500)=""/230, 0x89, 0xe6, 0x0, 0x401, 0x10000}, 0x28)
r2 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0xf, &(0x7f00000002c0), 0x161)
sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000001c0)=r3, 0x4)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0xd, 0x10, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffc0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x18e}}}, 0x0, 0x6, 0xf8, &(0x7f00000008c0)=""/248}, 0x94)
r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000006c0)={0x0, 0x4, 0x18}, 0xc)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7}, &(0x7f0000000200), &(0x7f0000000240)=r6}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00'}, 0x18)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_subtree(r10, 0x0, 0x32600)
ioctl$PERF_EVENT_IOC_PERIOD(r10, 0x40305829, &(0x7f0000000040))
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1e, 0x9, 0x3, 0x9, 0x480a0, 0xffffffffffffffff, 0xe9c5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0x1, <r12=>0xffffffffffffffff}, &(0x7f0000000800), 0x0}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="85100000031c0100cf738000f0ffffffe6f866c07291a9dabab45d90f58bccb6180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f89c9d959bd4525fffffffb702000008000000b703000006", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000008510000002000000"], &(0x7f0000000300)='syzkaller\x00', 0x81, 0x48, &(0x7f0000000340)=""/72, 0x40f00, 0x4, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000640)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000008c0)=[r3, r4, r5, r7, r8, r9, r10, r11, r12], &(0x7f0000000900)=[{0x0, 0x2, 0xe, 0xc}, {0x0, 0x4, 0x0, 0x6}, {0x3, 0x5, 0x0, 0x4}, {0x3, 0x3, 0x0, 0xb}, {0x0, 0x3, 0x10, 0xb}, {0x5, 0x5, 0xb, 0xb}], 0x10, 0x1}, 0x94)
r13 = socket$kcm(0x10, 0x2, 0x4)
close(r13)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)

316.021536ms ago: executing program 1 (id=282):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x9, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x4, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = gettid()
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5d2d, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x89}, 0x4000, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
close(r1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa4706, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x320, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069003e000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21)

301.566286ms ago: executing program 2 (id=283):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32, @ANYRESDEC], 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu&\t\t')

299.326644ms ago: executing program 0 (id=284):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
socket$kcm(0x11, 0x2, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRESDEC], 0x8)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8258000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu>\t\t')

192.642222ms ago: executing program 2 (id=285):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x2, 0x73)
recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2a, 0x8000000}, 0x0)

125.688µs ago: executing program 2 (id=286):
syz_clone(0xc01400, 0x0, 0x0, 0x0, 0x0, 0x0)

0s ago: executing program 2 (id=287):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="c50a0000000000007910480000000000610444000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:30009' (ED25519) to the list of known hosts.
syzkaller login: [   47.446942][ T5821] cgroup: Unknown subsys name 'net'
[   47.569926][ T5821] cgroup: Unknown subsys name 'cpuset'
[   47.575751][ T5821] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.277376][ T5821] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.795016][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.798911][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.801565][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.804262][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.806819][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.809867][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.812212][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.814915][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.818659][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.821314][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.857299][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.860950][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.863595][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.875574][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.879323][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.171876][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   54.226049][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   54.292927][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   54.340490][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.343374][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.346868][ T5831] bridge_slave_0: entered allmulticast mode
[   54.349882][ T5831] bridge_slave_0: entered promiscuous mode
[   54.353951][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.358126][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.360747][ T5831] bridge_slave_1: entered allmulticast mode
[   54.363509][ T5831] bridge_slave_1: entered promiscuous mode
[   54.419955][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.423152][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.426718][ T5835] bridge_slave_0: entered allmulticast mode
[   54.430591][ T5835] bridge_slave_0: entered promiscuous mode
[   54.444768][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.448726][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.451824][ T5835] bridge_slave_1: entered allmulticast mode
[   54.457081][ T5835] bridge_slave_1: entered promiscuous mode
[   54.473047][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.496711][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.499345][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.502156][ T5839] bridge_slave_0: entered allmulticast mode
[   54.505022][ T5839] bridge_slave_0: entered promiscuous mode
[   54.510982][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.514141][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.517646][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.520771][ T5839] bridge_slave_1: entered allmulticast mode
[   54.524564][ T5839] bridge_slave_1: entered promiscuous mode
[   54.587819][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.594889][ T5831] team0: Port device team_slave_0 added
[   54.602096][ T5831] team0: Port device team_slave_1 added
[   54.607096][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.612741][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.644487][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.672653][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.675856][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.687161][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.725819][ T5835] team0: Port device team_slave_0 added
[   54.731001][ T5839] team0: Port device team_slave_0 added
[   54.734460][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.738178][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.749595][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.757577][ T5835] team0: Port device team_slave_1 added
[   54.768494][ T5839] team0: Port device team_slave_1 added
[   54.826532][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.829527][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.840519][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.845883][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.848751][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.859909][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.866992][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.869881][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.880568][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.898676][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.901546][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.911316][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.948537][ T5831] hsr_slave_0: entered promiscuous mode
[   54.950989][ T5831] hsr_slave_1: entered promiscuous mode
[   54.963798][ T5835] hsr_slave_0: entered promiscuous mode
[   54.966794][ T5835] hsr_slave_1: entered promiscuous mode
[   54.968967][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.971608][ T5835] Cannot create hsr debugfs directory
[   54.993289][ T5839] hsr_slave_0: entered promiscuous mode
[   54.997169][ T5839] hsr_slave_1: entered promiscuous mode
[   54.999335][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.001770][ T5839] Cannot create hsr debugfs directory
[   55.241332][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.250796][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.268119][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.278552][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.300567][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.313871][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.329535][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.348628][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.356760][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.367585][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.374368][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.382876][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.449546][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.473155][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   55.487315][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.489774][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.504952][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.507959][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.534572][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.545080][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.575166][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   55.585016][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   55.592007][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.594420][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.603143][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.605626][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.630557][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.633485][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.639360][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.641629][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.671810][ T5839] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   55.675217][ T5839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.701535][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.710365][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.762648][ T5831] veth0_vlan: entered promiscuous mode
[   55.769758][ T5831] veth1_vlan: entered promiscuous mode
[   55.794132][ T5831] veth0_macvtap: entered promiscuous mode
[   55.798847][ T5831] veth1_macvtap: entered promiscuous mode
[   55.828401][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.834300][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.839216][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.852033][ T5831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.854995][ T5831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.858215][ T5831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.861003][ T5831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.872962][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.903748][ T5839] veth0_vlan: entered promiscuous mode
[   55.906433][ T5833] Bluetooth: hci0: command tx timeout
[   55.908605][   T54] Bluetooth: hci1: command tx timeout
[   55.916164][   T54] Bluetooth: hci2: command tx timeout
[   55.928416][ T5839] veth1_vlan: entered promiscuous mode
[   55.953873][ T5835] veth0_vlan: entered promiscuous mode
[   55.972700][ T5835] veth1_vlan: entered promiscuous mode
[   55.977796][ T5839] veth0_macvtap: entered promiscuous mode
[   55.977892][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.982176][ T5839] veth1_macvtap: entered promiscuous mode
[   55.983992][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.018873][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.024885][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.026886][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.035806][ T5835] veth0_macvtap: entered promiscuous mode
[   56.041216][ T5835] veth1_macvtap: entered promiscuous mode
[   56.049349][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.059610][ T5839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.062842][ T5839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.073855][ T5839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.078515][ T5839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.089602][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.089950][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.104849][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.122714][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.131040][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.140643][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.143835][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.211854][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.214503][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.242278][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.244835][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.271606][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.274220][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.299199][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.303301][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.559020][ T5919] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[   56.629818][ T5919] syzkaller0: entered promiscuous mode
[   56.633176][ T5919] syzkaller0: entered allmulticast mode
[   56.695282][    C0] hrtimer: interrupt took 43017 ns
[   57.988374][ T5833] Bluetooth: hci1: command tx timeout
[   57.990173][ T5833] Bluetooth: hci0: command tx timeout
[   57.991938][   T54] Bluetooth: hci2: command tx timeout
[   58.229168][ T5928] syzkaller0: entered promiscuous mode
[   58.231806][ T5928] syzkaller0: entered allmulticast mode
[   58.243263][ T5941] C: renamed from team_slave_0 (while UP)
[   58.248601][ T5941] netlink: 'syz.0.14': attribute type 3 has an invalid length.
[   58.251999][ T5941] netlink: 152 bytes leftover after parsing attributes in process `syz.0.14'.
[   58.256988][ T5941] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   58.843706][   T54] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[   58.862287][ T5963] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.20'.
[   59.091237][ T5974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29'.
[   59.105600][ T5974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29'.
[   59.108697][ T5974] netlink: 33 bytes leftover after parsing attributes in process `syz.1.29'.
[   59.112546][ T5974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29'.
[   59.127452][ T5980] netlink: 'syz.2.33': attribute type 3 has an invalid length.
[   59.129961][ T5980] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.33'.
[   59.130389][ T5974] netlink: 33 bytes leftover after parsing attributes in process `syz.1.29'.
[   59.148308][ T5982] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.32'.
[   59.192250][ T5974] warning: `syz.1.29' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   59.764381][ T6019] netlink: 'syz.0.50': attribute type 29 has an invalid length.
[   59.777082][ T6019] netlink: 'syz.0.50': attribute type 29 has an invalid length.
[   60.065733][ T5217] Bluetooth: hci0: command tx timeout
[   60.067602][ T5217] Bluetooth: hci1: command tx timeout
[   60.069523][   T54] Bluetooth: hci2: command tx timeout
[   60.150484][ T6049] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.64'.
[   60.319722][ T6061] netlink: 'syz.0.63': attribute type 21 has an invalid length.
[   60.654433][ T6062] delete_channel: no stack
[   60.869369][ T6079] netlink: 'syz.0.77': attribute type 2 has an invalid length.
[   60.871932][ T6079] netlink: 'syz.0.77': attribute type 1 has an invalid length.
[   60.959462][   T54] Bluetooth: hci1: unexpected event 0x3c length: 15 > 7
[   61.148532][ T6106] Driver unsupported XDP return value 0 on prog  (id 28) dev N/A, expect packet loss!
[   61.643909][ T6134] veth1_macvtap: left promiscuous mode
[   61.668035][ T6134] veth1_macvtap: entered promiscuous mode
[   61.680361][ T6134] macsec0: entered promiscuous mode
[   61.682508][ T6134] macsec0: entered allmulticast mode
[   61.684492][ T6134] veth1_macvtap: entered allmulticast mode
[   61.857511][ T6136] netlink: 'syz.0.104': attribute type 4 has an invalid length.
[   61.862421][ T6136] netlink: 'syz.0.104': attribute type 6 has an invalid length.
[   62.159070][ T5833] Bluetooth: hci1: command tx timeout
[   62.161442][ T5833] Bluetooth: hci0: command tx timeout
[   62.163575][   T54] Bluetooth: hci2: command tx timeout
[   62.290441][ T6158] raw_sendmsg: syz.0.115 forgot to set AF_INET. Fix it!
[   62.402238][ T6168] netlink: 'syz.2.119': attribute type 21 has an invalid length.
[   62.648258][ T6181] pim6reg1: entered allmulticast mode
[   62.910251][ T6195] openvswitch: netlink: Message has 6 unknown bytes.
[   63.309133][ T6213] __nla_validate_parse: 10 callbacks suppressed
[   63.309203][ T6213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.141'.
[   63.513721][ T6223] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[   63.530653][ T6223] Zero length message leads to an empty skb
[   63.729506][    T9] cfg80211: failed to load regulatory.db
[   63.781270][ T6242] validate_nla: 1 callbacks suppressed
[   63.781282][ T6242] netlink: 'syz.0.152': attribute type 29 has an invalid length.
[   63.964446][ T6253] netlink: 'syz.0.155': attribute type 10 has an invalid length.
[   63.980020][ T6253] bond0: (slave bond_slave_0): Releasing backup interface
[   64.554482][ T6292] netlink: 10 bytes leftover after parsing attributes in process `syz.0.176'.
[   64.764629][ T6300] mac80211_hwsim hwsim7 O3c: renamed from wlan1 (while UP)
[   64.857598][ T6303] netlink: 132 bytes leftover after parsing attributes in process `syz.0.180'.
[   64.934771][ T6305] netlink: 'syz.0.181': attribute type 21 has an invalid length.
[   64.995148][ T6305] netlink: 132 bytes leftover after parsing attributes in process `syz.0.181'.
[   65.078957][ T6309] netlink: 'syz.2.183': attribute type 6 has an invalid length.
[   65.082536][ T6309] netlink: 'syz.2.183': attribute type 1 has an invalid length.
[   65.086878][ T6309] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.183'.
[   65.355686][   T54] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10
[   65.355708][   T54] Bluetooth: unknown link type 8
[   65.359836][   T54] Bluetooth: hci0: connection err: -111
[   65.374018][ T6331] netlink: 'syz.1.192': attribute type 2 has an invalid length.
[   65.378906][ T6331] netlink: 'syz.1.192': attribute type 1 has an invalid length.
[   65.381993][ T6331] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.192'.
[   65.387464][ T6331] block nbd5: not configured, cannot reconfigure
[   65.680845][ T6345] netlink: 'syz.0.198': attribute type 1 has an invalid length.
[   65.823188][ T6345] netlink: 132 bytes leftover after parsing attributes in process `syz.0.198'.
[   65.853025][ T6350] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.200'.
[   66.005247][ T6354] ksmbd: Unknown IPC event: 1, ignore.
[   66.324563][ T6373] netlink: 132 bytes leftover after parsing attributes in process `syz.1.211'.
[   66.682913][ T6397] netlink: 'syz.0.223': attribute type 11 has an invalid length.
[   66.686689][ T6397] netlink: 148 bytes leftover after parsing attributes in process `syz.0.223'.
[   66.765888][ T6405] netlink: 'syz.0.227': attribute type 1 has an invalid length.
[   66.878081][ T6421] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.270937][ T6455] C: renamed from team_slave_0 (while UP)
[   67.650454][   T54] Bluetooth: hci0: unexpected event 0x10 length: 15 > 1
[   67.651449][ T5217] Bluetooth: hci0: hardware error 0x00
[   68.027021][ T6507] macvlan0: entered promiscuous mode
[   68.028900][ T6507] macvlan0: entered allmulticast mode
[   68.045595][ T6507] veth1_vlan: entered allmulticast mode
[   68.049438][ T6507] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[   69.675690][ T5217] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[   83.617360][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   83.620541][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   83.623250][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   83.626804][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   83.629957][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   83.846008][ T5217] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   83.849688][ T5217] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   83.852598][ T5217] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   83.856400][ T5217] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   83.859379][ T5217] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   84.077170][ T6537] chnl_net:caif_netlink_parms(): no params data found
[   85.666450][   T54] Bluetooth: hci3: command tx timeout
[   85.905556][   T54] Bluetooth: hci4: command tx timeout
[   87.747104][   T54] Bluetooth: hci3: command tx timeout
[   87.985543][   T54] Bluetooth: hci4: command tx timeout
[   89.825445][   T54] Bluetooth: hci3: command tx timeout
[   90.066315][   T54] Bluetooth: hci4: command tx timeout
[   91.915745][   T54] Bluetooth: hci3: command tx timeout
[   92.155727][   T54] Bluetooth: hci4: command tx timeout
[  109.441936][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 41626585331 wd_nsec: 41626586473
[  152.994058][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  152.998667][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  153.001253][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  153.004721][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  153.007864][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  153.024634][ T5833] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  153.029317][ T5833] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  153.032143][ T5833] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  153.034897][ T5833] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  153.037835][ T5833] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  155.025659][ T5833] Bluetooth: hci5: command tx timeout
[  155.105443][ T5833] Bluetooth: hci6: command tx timeout
[  157.117575][ T5833] Bluetooth: hci5: command tx timeout
[  157.187095][ T5833] Bluetooth: hci6: command tx timeout
[  159.185428][ T5833] Bluetooth: hci5: command tx timeout
[  159.277673][ T5833] Bluetooth: hci6: command tx timeout
[  161.268248][ T5833] Bluetooth: hci5: command tx timeout
[  161.345812][ T5833] Bluetooth: hci6: command tx timeout
[  173.175362][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  173.177619][    C1] rcu: 	1-....: (10499 ticks this GP) idle=c00c/1/0x4000000000000000 softirq=15897/15899 fqs=4679
[  173.182445][    C1] rcu: 	         hardirqs   softirqs   csw/system
[  173.184475][    C1] rcu: 	 number:   999075          0            0
[  173.186487][    C1] rcu: 	cputime:    26259      26210           93   ==> 52470(ms)
[  173.188921][    C1] rcu: 	(t=10500 jiffies g=8393 q=3740 ncpus=2)
[  173.190904][    C1] CPU: 1 UID: 0 PID: 6517 Comm: syz.1.282 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  173.190914][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  173.190919][    C1] RIP: 0010:mix_interrupt_randomness+0x1ac/0x2d0
[  173.190936][    C1] Code: 08 49 83 c6 f0 4c 89 f0 48 c1 e8 03 80 3c 18 00 74 08 4c 89 f7 e8 44 d8 d8 fc 4d 89 3e e8 4c 3d 7d fc fb 48 c7 c7 58 0d 9c 8e <e8> 5f a6 26 06 49 89 c6 ba 10 00 00 00 48 c7 c7 e0 0c 9c 8e 48 8d
[  173.190941][    C1] RSP: 0018:ffffc900001e0ae0 EFLAGS: 00000282
[  173.190949][    C1] RAX: ac9e081ffbd73a00 RBX: dffffc0000000000 RCX: ac9e081ffbd73a00
[  173.190954][    C1] RDX: 0000000000000002 RSI: ffffffff8d9987c6 RDI: ffffffff8e9c0d58
[  173.190959][    C1] RBP: ffffc900001e0b90 R08: ffffffff8fa1eaf7 R09: 1ffffffff1f43d5e
[  173.190963][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d5f R12: 0000000080000008
[  173.190968][    C1] R13: 1ffff9200003c15c R14: ffff888136636388 R15: 00000000ffffcda8
[  173.190973][    C1] FS:  00007f822aff66c0(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
[  173.190978][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  173.190982][    C1] CR2: 0000001b3061cff8 CR3: 0000000022824000 CR4: 00000000000006f0
[  173.191007][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  173.191013][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  173.191017][    C1] Call Trace:
[  173.191022][    C1]  <IRQ>
[  173.191027][    C1]  ? __pfx_mix_interrupt_randomness+0x10/0x10
[  173.191039][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  173.191052][    C1]  call_timer_fn+0x17e/0x5f0
[  173.191059][    C1]  ? __pfx_mix_interrupt_randomness+0x10/0x10
[  173.191067][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  173.191077][    C1]  ? call_timer_fn+0xbe/0x5f0
[  173.191082][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  173.191094][    C1]  ? __pfx_mix_interrupt_randomness+0x10/0x10
[  173.191103][    C1]  __run_timer_base+0x61a/0x860
[  173.191113][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  173.191130][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  173.191147][    C1]  run_timer_softirq+0x67/0x180
[  173.191158][    C1]  handle_softirqs+0x286/0x870
[  173.191167][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  173.191177][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  173.191187][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  173.191197][    C1]  __irq_exit_rcu+0xca/0x1f0
[  173.191205][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  173.191217][    C1]  irq_exit_rcu+0x9/0x30
[  173.191223][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  173.191232][    C1]  </IRQ>
[  173.191234][    C1]  <TASK>
[  173.191237][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  173.191244][    C1] RIP: 0010:__rcu_read_unlock+0x4e/0xe0
[  173.191255][    C1] Code: 04 00 00 49 89 dc 49 c1 ec 03 43 0f b6 04 3c 84 c0 75 4f ff 0b 75 1d 4c 8d b7 48 04 00 00 4c 89 f0 48 c1 e8 03 42 0f b6 04 38 <84> c0 75 66 41 83 3e 00 75 27 43 0f b6 04 3c 84 c0 75 41 8b 03 3d
[  173.191260][    C1] RSP: 0018:ffffc9000831e6a8 EFLAGS: 00000a02
[  173.191265][    C1] RAX: 0000000000000000 RBX: ffff88810be85a84 RCX: ac9e081ffbd73a00
[  173.191269][    C1] RDX: 0000000000000000 RSI: ffffffff8db864db RDI: ffff88810be85640
[  173.191273][    C1] RBP: dffffc0000000000 R08: ffffc9000831fd30 R09: 0000000000000000
[  173.191277][    C1] R10: ffffc9000831e7f8 R11: fffff52001063d01 R12: 1ffff110217d0b50
[  173.191282][    C1] R13: ffffc90008318000 R14: ffff88810be85a88 R15: dffffc0000000000
[  173.191295][    C1]  ? unwind_next_frame+0xa5/0x2390
[  173.191303][    C1]  unwind_next_frame+0x19ae/0x2390
[  173.191313][    C1]  ? unwind_next_frame+0xa5/0x2390
[  173.191320][    C1]  ? bpf_prog_load+0x1318/0x1930
[  173.191329][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  173.191339][    C1]  arch_stack_walk+0x11c/0x150
[  173.191351][    C1]  ? __sys_bpf+0x528/0x870
[  173.191359][    C1]  stack_trace_save+0x9c/0xe0
[  173.191368][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  173.191381][    C1]  kasan_save_track+0x3e/0x80
[  173.191392][    C1]  ? kasan_save_track+0x3e/0x80
[  173.191401][    C1]  ? kasan_save_free_info+0x46/0x50
[  173.191408][    C1]  ? __kasan_slab_free+0x62/0x70
[  173.191414][    C1]  ? kmem_cache_free+0x18f/0x400
[  173.191421][    C1]  ? finish_task_switch+0x3ee/0x950
[  173.191431][    C1]  ? __schedule+0x16fd/0x4d00
[  173.191439][    C1]  ? preempt_schedule_irq+0xb5/0x150
[  173.191446][    C1]  ? irqentry_exit+0x6f/0x90
[  173.191453][    C1]  ? asm_sysvec_call_function_single+0x1a/0x20
[  173.191459][    C1]  ? stack_depot_save_flags+0x12/0x900
[  173.191468][    C1]  ? save_stack+0x103/0x1f0
[  173.191474][    C1]  ? __reset_page_owner+0x71/0x1f0
[  173.191480][    C1]  ? __free_frozen_pages+0xc71/0xe70
[  173.191487][    C1]  ? kasan_populate_vmalloc+0x18a/0x1a0
[  173.191495][    C1]  ? alloc_vmap_area+0xd51/0x1490
[  173.191502][    C1]  ? __get_vm_area_node+0x1f8/0x300
[  173.191507][    C1]  ? __vmalloc_node_range_noprof+0x301/0x12f0
[  173.191514][    C1]  ? vzalloc_noprof+0xb2/0xf0
[  173.191520][    C1]  ? bpf_check+0x1a5/0x1d2e0
[  173.191528][    C1]  ? bpf_prog_load+0x1318/0x1930
[  173.191550][    C1]  ? finish_task_switch+0x3ee/0x950
[  173.191559][    C1]  kasan_save_free_info+0x46/0x50
[  173.191568][    C1]  __kasan_slab_free+0x62/0x70
[  173.191574][    C1]  kmem_cache_free+0x18f/0x400
[  173.191584][    C1]  finish_task_switch+0x3ee/0x950
[  173.191598][    C1]  __schedule+0x16fd/0x4d00
[  173.191609][    C1]  ? irqentry_enter+0x3d/0x60
[  173.191618][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  173.191630][    C1]  ? preempt_schedule_irq+0xb5/0x150
[  173.191640][    C1]  ? __pfx___schedule+0x10/0x10
[  173.191647][    C1]  ? irqentry_exit+0x74/0x90
[  173.191694][    C1]  preempt_schedule_irq+0xb5/0x150
[  173.191704][    C1]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  173.191711][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  173.191722][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  173.191736][    C1]  irqentry_exit+0x6f/0x90
[  173.191744][    C1]  asm_sysvec_call_function_single+0x1a/0x20
[  173.191750][    C1] RIP: 0010:stack_depot_save_flags+0x12/0x900
[  173.191759][    C1] Code: 00 eb d9 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 40 <65> 48 8b 05 96 b0 a9 0d 48 89 44 24 38 f7 c2 00 0c 00 00 41 0f 95
[  173.191763][    C1] RSP: 0018:ffffc9000831ef88 EFLAGS: 00000286
[  173.191769][    C1] RAX: 000000000000000c RBX: ffff88810be85bd0 RCX: 0000000000000001
[  173.191773][    C1] RDX: 0000000000002000 RSI: 000000000000000c RDI: ffffc9000831f040
[  173.191777][    C1] RBP: ffffc9000831f138 R08: 0000000000000000 R09: ffffffff81cf0976
[  173.191781][    C1] R10: ffffc9000831ef18 R11: ffffffff81acf520 R12: dffffc0000000000
[  173.191785][    C1] R13: 1ffff92001063e04 R14: ffffc9000831f040 R15: 1ffff110217d0b7a
[  173.191792][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  173.191800][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  173.191816][    C1]  save_stack+0x103/0x1f0
[  173.191824][    C1]  ? __pfx_save_stack+0x10/0x10
[  173.191830][    C1]  ? __free_frozen_pages+0xc71/0xe70
[  173.191836][    C1]  ? kasan_populate_vmalloc+0x18a/0x1a0
[  173.191844][    C1]  ? alloc_vmap_area+0xd51/0x1490
[  173.191850][    C1]  ? __get_vm_area_node+0x1f8/0x300
[  173.191855][    C1]  ? __vmalloc_node_range_noprof+0x301/0x12f0
[  173.191862][    C1]  ? vzalloc_noprof+0xb2/0xf0
[  173.191867][    C1]  ? bpf_check+0x1a5/0x1d2e0
[  173.191875][    C1]  ? bpf_prog_load+0x1318/0x1930
[  173.191880][    C1]  ? __sys_bpf+0x528/0x870
[  173.191885][    C1]  ? __x64_sys_bpf+0x7c/0x90
[  173.191893][    C1]  ? do_syscall_64+0xfa/0x3b0
[  173.191902][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.191911][    C1]  ? page_ext_put+0x97/0xc0
[  173.191921][    C1]  __reset_page_owner+0x71/0x1f0
[  173.191929][    C1]  __free_frozen_pages+0xc71/0xe70
[  173.191940][    C1]  kasan_populate_vmalloc+0x18a/0x1a0
[  173.191952][    C1]  alloc_vmap_area+0xd51/0x1490
[  173.191966][    C1]  ? __pfx_alloc_vmap_area+0x10/0x10
[  173.191973][    C1]  ? __kasan_kmalloc+0x93/0xb0
[  173.191979][    C1]  ? __kmalloc_cache_node_noprof+0x234/0x3d0
[  173.191986][    C1]  ? __get_vm_area_node+0x13f/0x300
[  173.191992][    C1]  ? bpf_check+0x1a5/0x1d2e0
[  173.192001][    C1]  __get_vm_area_node+0x1f8/0x300
[  173.192011][    C1]  __vmalloc_node_range_noprof+0x301/0x12f0
[  173.192018][    C1]  ? bpf_check+0x1a5/0x1d2e0
[  173.192028][    C1]  ? irqentry_exit+0x74/0x90
[  173.192036][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  173.192049][    C1]  ? __phys_addr+0xd3/0x180
[  173.192058][    C1]  ? __kasan_kmalloc_large+0x85/0xa0
[  173.192066][    C1]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  173.192072][    C1]  ? rcu_is_watching+0x15/0xb0
[  173.192080][    C1]  ? bpf_check+0xf9/0x1d2e0
[  173.192087][    C1]  ? rcu_is_watching+0x15/0xb0
[  173.192094][    C1]  ? bpf_check+0xf9/0x1d2e0
[  173.192102][    C1]  ? bpf_check+0x1a5/0x1d2e0
[  173.192110][    C1]  vzalloc_noprof+0xb2/0xf0
[  173.192117][    C1]  ? bpf_check+0x1a5/0x1d2e0
[  173.192126][    C1]  bpf_check+0x1a5/0x1d2e0
[  173.192135][    C1]  ? trace_call_bpf+0xb7/0x850
[  173.192150][    C1]  ? __lock_acquire+0xab9/0xd20
[  173.192159][    C1]  ? migrate_enable+0x29c/0x3c0
[  173.192168][    C1]  ? trace_call_bpf+0xb7/0x850
[  173.192181][    C1]  ? trace_call_bpf+0xb7/0x850
[  173.192187][    C1]  ? trace_call_bpf+0x5ba/0x850
[  173.192194][    C1]  ? trace_call_bpf+0xb7/0x850
[  173.192204][    C1]  ? __pfx_trace_call_bpf+0x10/0x10
[  173.192215][    C1]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  173.192227][    C1]  ? perf_trace_preemptirq_template+0x280/0x340
[  173.192237][    C1]  ? __pfx_bpf_check+0x10/0x10
[  173.192245][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  173.192261][    C1]  ? irqentry_exit+0x74/0x90
[  173.192269][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  173.192282][    C1]  ? bpf_prog_load+0x1292/0x1930
[  173.192288][    C1]  ? bpf_lsm_bpf_prog_load+0x9/0x20
[  173.192295][    C1]  ? security_bpf_prog_load+0x7f/0x310
[  173.192306][    C1]  bpf_prog_load+0x1318/0x1930
[  173.192318][    C1]  ? __pfx_bpf_prog_load+0x10/0x10
[  173.192334][    C1]  ? bpf_lsm_bpf+0x9/0x20
[  173.192339][    C1]  ? security_bpf+0x7e/0x300
[  173.192347][    C1]  __sys_bpf+0x528/0x870
[  173.192355][    C1]  ? __pfx___sys_bpf+0x10/0x10
[  173.192373][    C1]  __x64_sys_bpf+0x7c/0x90
[  173.192383][    C1]  do_syscall_64+0xfa/0x3b0
[  173.192393][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.192399][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  173.192407][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.192414][    C1] RIP: 0033:0x7f822d18e9a9
[  173.192422][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  173.192427][    C1] RSP: 002b:00007f822aff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  173.192433][    C1] RAX: ffffffffffffffda RBX: 00007f822d3b5fa0 RCX: 00007f822d18e9a9
[  173.192438][    C1] RDX: 0000000000000021 RSI: 000020000000e000 RDI: 0000000000000005
[  173.192442][    C1] RBP: 00007f822d210d69 R08: 0000000000000000 R09: 0000000000000000
[  173.192445][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  173.192449][    C1] R13: 0000000000000000 R14: 00007f822d3b5fa0 R15: 00007ffff93d0978
[  173.192460][    C1]  </TASK>
[  173.537887][    C1] sched: DL replenish lagged too much
[  180.471141][ T5833] Bluetooth: hci2: command 0x0406 tx timeout

VM DIAGNOSIS:
11:27:29  Registers:
info registers vcpu 0

CPU#0
RAX=9d603377e4aa2600 RBX=ffffffff81975f18 RCX=9d603377e4aa2600 RDX=0000000000000001
RSI=ffffffff8d9987c6 RDI=ffffffff8be29f80 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa1eaf0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6e84f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055e49f947e08 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007fe81b786d00
XMM02=0000000500000007 1000019000000001 XMM03=00100002d0030fff ffffffffff0402c0
XMM04=0000000000000000 0000000000000017 XMM05=0000000000000000 000000000001df8a
XMM06=f8e6100008800401 0000000800000007 XMM07=d600080000000000 8084100020100006
XMM08=00718c0010000280 0401080000000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001dfe10
R8 =ffff8880201b0237 R9 =1ffff11004036046 R10=dffffc0000000000 R11=ffffffff85472220
R12=dffffc0000000000 R13=ffffffff99af58cd R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff8547229c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f822aff66c0 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3061cff8 CR3=0000000022824000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f822d211ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
