last executing test programs:

16.696288986s ago: executing program 1 (id=165):
socket$kcm(0x10, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20)

16.696123128s ago: executing program 1 (id=166):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x19, 0x4, 0x8, 0xb}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

16.695938941s ago: executing program 2 (id=167):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

16.645773911s ago: executing program 1 (id=168):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
socket$kcm(0x2, 0x2, 0x84)

16.645284095s ago: executing program 2 (id=170):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0x80}, 0x14105, 0x2e, 0xfffffbff, 0x2, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0xa, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10)
socket$kcm(0x2, 0x1000000000000002, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x183241, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x2, 0x4, 0x7, 0x80, 0x0, 0x1}, 0x50)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfff9, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40))
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r4 = socket$kcm(0x2, 0x1000000000000005, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161)
sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0)

16.494683606s ago: executing program 1 (id=173):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x54}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x90)

16.415223125s ago: executing program 1 (id=175):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000009c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
recvmsg$unix(r1, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x12}, 0x0)
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0)

16.335960173s ago: executing program 1 (id=178):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
r3 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x2b, &(0x7f0000002640), 0x42)

16.135790997s ago: executing program 0 (id=182):
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@map, 0xffffffffffffffff, 0x1d, 0x8}, 0x20)

16.065551557s ago: executing program 0 (id=183):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffa0}, 0x48)

16.065342004s ago: executing program 0 (id=184):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000a020011000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x20000000)

15.97503773s ago: executing program 0 (id=185):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)

15.694932673s ago: executing program 2 (id=186):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@fwd={0x4}]}, {0x0, [0x61, 0x0, 0x2e, 0x5f, 0x5f]}}, 0x0, 0x2b, 0x0, 0x1, 0x89}, 0x28)

15.694612674s ago: executing program 2 (id=187):
r0 = socket$kcm(0x23, 0x5, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
sendmsg(r0, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x40c0)

15.613685762s ago: executing program 2 (id=188):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x6, 0x5004, 0x7, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x18)

15.613346942s ago: executing program 0 (id=189):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='signal_generate\x00', r2}, 0x18)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

15.613120101s ago: executing program 2 (id=190):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x182, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x2e, 0xfffffbff, 0x2, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r1}, 0x8)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x8183, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x101, 0x1}, 0x40, 0x0, 0x4, 0x0, 0xc360, 0xfffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$kcm(0x10, 0x6, 0x10)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1400000017000b63d25a80648c2594f945a3cb0b", 0x14}], 0x1}, 0x0)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r4, 0x0, 0x0}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
r8 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[@ANYRES8=r6, @ANYRES8=r8], 0x12)
r9 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r9, 0x0, 0x800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="03000000040003030000", @ANYBLOB="00030000", @ANYRES32, @ANYBLOB="04000000030000000200"/20], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000ec0)=@generic={&(0x7f0000000e80)='./file0\x00', 0x0, 0x18}, 0x18)

15.445739124s ago: executing program 0 (id=191):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001000ff05142603600e1204000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee500"/108, 0x6c}, {&(0x7f0000000500)="25108a32c7d4bdc542b8c9df6ceb70b094f1e124718e5504a6e20a2895b019f167c9c90e183174336e9df0dec10458f6dae623de224d1419522327262183f661e5c8531eac5b457ac2259030eb2539a1bb2b826d8818253b001e679d26b392fe43082e83d84c3f8755b2d34a", 0x6c}], 0x2}, 0x0)

1.086029799s ago: executing program 32 (id=178):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
r3 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x2b, &(0x7f0000002640), 0x42)

62.989689ms ago: executing program 33 (id=191):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001000ff05142603600e1204000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee500"/108, 0x6c}, {&(0x7f0000000500)="25108a32c7d4bdc542b8c9df6ceb70b094f1e124718e5504a6e20a2895b019f167c9c90e183174336e9df0dec10458f6dae623de224d1419522327262183f661e5c8531eac5b457ac2259030eb2539a1bb2b826d8818253b001e679d26b392fe43082e83d84c3f8755b2d34a", 0x6c}], 0x2}, 0x0)

0s ago: executing program 34 (id=190):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x182, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x2e, 0xfffffbff, 0x2, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r1}, 0x8)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x8183, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x101, 0x1}, 0x40, 0x0, 0x4, 0x0, 0xc360, 0xfffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$kcm(0x10, 0x6, 0x10)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1400000017000b63d25a80648c2594f945a3cb0b", 0x14}], 0x1}, 0x0)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r4, 0x0, 0x0}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
r8 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[@ANYRES8=r6, @ANYRES8=r8], 0x12)
r9 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r9, 0x0, 0x800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="03000000040003030000", @ANYBLOB="00030000", @ANYRES32, @ANYBLOB="04000000030000000200"/20], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000ec0)=@generic={&(0x7f0000000e80)='./file0\x00', 0x0, 0x18}, 0x18)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:49830' (ED25519) to the list of known hosts.
syzkaller login: [   41.061311][ T5764] cgroup: Unknown subsys name 'net'
[   41.174975][ T5764] cgroup: Unknown subsys name 'cpuset'
[   41.179097][ T5764] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.531846][ T5764] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   46.185790][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   46.189157][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   46.191806][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   46.194500][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   46.197044][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   46.227901][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   46.230604][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   46.233619][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   46.236413][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   46.238853][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   46.323802][ T5221] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   46.327711][ T5221] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   46.331990][ T5221] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   46.334676][ T5221] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   46.337313][ T5221] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.394876][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   46.516844][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   46.548165][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.551342][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.554502][ T5836] bridge_slave_0: entered allmulticast mode
[   46.558288][ T5836] bridge_slave_0: entered promiscuous mode
[   46.567868][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.570734][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.573770][ T5836] bridge_slave_1: entered allmulticast mode
[   46.578073][ T5836] bridge_slave_1: entered promiscuous mode
[   46.627428][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.641105][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.702672][ T5836] team0: Port device team_slave_0 added
[   46.722920][ T5836] team0: Port device team_slave_1 added
[   46.725531][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.728333][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.731142][ T5840] bridge_slave_0: entered allmulticast mode
[   46.735209][ T5840] bridge_slave_0: entered promiscuous mode
[   46.761143][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.765174][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.767896][ T5840] bridge_slave_1: entered allmulticast mode
[   46.771232][ T5840] bridge_slave_1: entered promiscuous mode
[   46.798081][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.800832][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.812310][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.817594][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   46.834275][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.838661][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.841450][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.852151][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.879012][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.948114][ T5840] team0: Port device team_slave_0 added
[   46.955184][ T5836] hsr_slave_0: entered promiscuous mode
[   46.957699][ T5836] hsr_slave_1: entered promiscuous mode
[   46.975810][ T5840] team0: Port device team_slave_1 added
[   46.993659][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.996052][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.998806][ T5843] bridge_slave_0: entered allmulticast mode
[   47.002614][ T5843] bridge_slave_0: entered promiscuous mode
[   47.024748][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.027562][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.039055][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.043903][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.046352][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.048653][ T5843] bridge_slave_1: entered allmulticast mode
[   47.051343][ T5843] bridge_slave_1: entered promiscuous mode
[   47.061461][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.064866][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.075267][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.121986][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.130001][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.178286][ T5840] hsr_slave_0: entered promiscuous mode
[   47.181401][ T5840] hsr_slave_1: entered promiscuous mode
[   47.185505][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.188754][ T5840] Cannot create hsr debugfs directory
[   47.204104][ T5843] team0: Port device team_slave_0 added
[   47.209172][ T5843] team0: Port device team_slave_1 added
[   47.281535][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.284712][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.294785][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.310723][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.313219][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.321997][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.357310][ T5843] hsr_slave_0: entered promiscuous mode
[   47.360266][ T5843] hsr_slave_1: entered promiscuous mode
[   47.364085][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.366691][ T5843] Cannot create hsr debugfs directory
[   47.466380][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   47.474544][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   47.490942][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   47.500866][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.557689][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   47.568765][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.576084][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.590912][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   47.625143][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   47.630103][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   47.635880][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   47.640210][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   47.758228][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.775317][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.794192][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   47.805412][ T3001] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.808357][ T3001] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.820416][ T3001] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.823409][ T3001] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.834893][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.841174][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   47.860932][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.863873][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.887787][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.890836][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.899896][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   47.922602][ T3602] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.925650][ T3602] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.944378][ T3602] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.947357][ T3602] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.070391][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.140561][ T5836] veth0_vlan: entered promiscuous mode
[   48.151072][ T5836] veth1_vlan: entered promiscuous mode
[   48.176694][ T5836] veth0_macvtap: entered promiscuous mode
[   48.183079][ T5836] veth1_macvtap: entered promiscuous mode
[   48.208359][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.217981][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.228541][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.237814][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.250730][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.255726][ T5839] Bluetooth: hci1: command tx timeout
[   48.258164][ T5839] Bluetooth: hci0: command tx timeout
[   48.260783][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.265775][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.269304][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.348029][ T5840] veth0_vlan: entered promiscuous mode
[   48.353220][ T5843] veth0_vlan: entered promiscuous mode
[   48.372276][ T5840] veth1_vlan: entered promiscuous mode
[   48.377430][ T5843] veth1_vlan: entered promiscuous mode
[   48.421841][ T5221] Bluetooth: hci2: command tx timeout
[   48.439773][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.444366][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.461324][ T5843] veth0_macvtap: entered promiscuous mode
[   48.471168][ T5840] veth0_macvtap: entered promiscuous mode
[   48.490785][ T5840] veth1_macvtap: entered promiscuous mode
[   48.505173][ T5843] veth1_macvtap: entered promiscuous mode
[   48.517612][ T3602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.521433][ T3602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.528235][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.541157][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.557707][ T5840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.565405][ T5840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.569072][ T5840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.575699][ T5840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.587728][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.606956][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.617048][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   48.620861][ T5843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.627093][ T5843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.630727][ T5843] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.635389][ T5843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.730159][ T5221] Bluetooth: hci0: Malformed HCI Event
[   48.777987][ T3017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.781188][ T3017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.821550][ T3001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.830023][ T3001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.850238][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.861724][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.876945][ T3001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.880828][ T3001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.993659][ T5906] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5'.
[   48.997581][ T5904] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5'.
[   49.007674][ T5906] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5'.
[   49.080548][ T5909] netlink: 'syz.1.2': attribute type 2 has an invalid length.
[   49.091023][ T5909] netlink: 126524 bytes leftover after parsing attributes in process `syz.1.2'.
[   49.151674][    C1] hrtimer: interrupt took 49473 ns
[   49.942561][ T5921] netlink: 'syz.1.10': attribute type 10 has an invalid length.
[   50.006243][ T5924] sit0: entered allmulticast mode
[   50.065034][ T5924] sit0: entered promiscuous mode
[   50.276868][ T5936] Zero length message leads to an empty skb
[   50.331961][ T5221] Bluetooth: hci0: command tx timeout
[   50.334210][ T5221] Bluetooth: hci1: command tx timeout
[   50.493346][ T5839] Bluetooth: hci2: command tx timeout
[   50.914401][ T5948] netlink: 10 bytes leftover after parsing attributes in process `syz.0.21'.
[   52.306968][ T5987] netlink: 132 bytes leftover after parsing attributes in process `syz.0.37'.
[   52.317996][ T5985] syz.2.36 uses obsolete (PF_INET,SOCK_PACKET)
[   52.379045][ T5985] netlink: 'syz.2.36': attribute type 10 has an invalid length.
[   52.389964][ T5991] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.39'.
[   52.408004][ T5996] netlink: 'syz.0.41': attribute type 5 has an invalid length.
[   52.413312][ T5839] Bluetooth: hci1: command tx timeout
[   52.415213][ T5839] Bluetooth: hci0: command tx timeout
[   52.416998][ T5985] team0: Device ipvlan1 failed to register rx_handler
[   52.508750][ T6002] Driver unsupported XDP return value 0 on prog  (id 25) dev N/A, expect packet loss!
[   52.513689][ T5985] syz.2.36 (5985) used greatest stack depth: 19264 bytes left
[   52.572441][ T5221] Bluetooth: hci2: command tx timeout
[   52.841069][ T6017] netlink: 40 bytes leftover after parsing attributes in process `syz.0.50'.
[   52.855987][ T6017] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.903910][ T6017] bridge_slave_0 (unregistering): left allmulticast mode
[   52.906702][ T6017] bridge_slave_0 (unregistering): left promiscuous mode
[   52.909035][ T6017] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.548005][ T6061] bridge_slave_1: left allmulticast mode
[   53.549817][ T6061] bridge_slave_1: left promiscuous mode
[   53.567191][ T6061] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.573098][ T6061] bridge_slave_0: left allmulticast mode
[   53.574895][ T6061] bridge_slave_0: left promiscuous mode
[   53.576831][ T6061] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.491791][ T5221] Bluetooth: hci0: command tx timeout
[   54.493975][ T5221] Bluetooth: hci1: command tx timeout
[   54.566333][ T6087] netlink: 830 bytes leftover after parsing attributes in process `syz.1.83'.
[   54.652600][ T5839] Bluetooth: hci2: command tx timeout
[   54.678090][ T6097] netlink: 'syz.1.88': attribute type 10 has an invalid length.
[   54.680654][ T6097] netlink: 40 bytes leftover after parsing attributes in process `syz.1.88'.
[   54.687948][ T6097] dummy0: entered promiscuous mode
[   54.691108][ T6097] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   55.694567][ T6133] warning: `syz.1.105' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   55.973564][ T6152] netlink: 'syz.0.113': attribute type 10 has an invalid length.
[   55.977014][ T6152] netlink: 168 bytes leftover after parsing attributes in process `syz.0.113'.
[   57.535068][ T6231] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.150'.
[   58.011572][ T6260] netlink: 'syz.0.164': attribute type 5 has an invalid length.
[   58.313033][ T6286] netlink: 'syz.0.176': attribute type 2 has an invalid length.
[   58.315611][ T6286] netlink: 'syz.0.176': attribute type 8 has an invalid length.
[   58.318101][ T6286] netlink: 132 bytes leftover after parsing attributes in process `syz.0.176'.
[   59.286953][ T6323] netlink: 'syz.0.191': attribute type 16 has an invalid length.
[   59.289513][ T6323] netlink: 16 bytes leftover after parsing attributes in process `syz.0.191'.
[   70.815966][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.818183][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   73.879597][ T5221] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   73.885055][ T5221] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   73.891985][ T5221] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   73.896235][ T5221] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   73.899818][ T5221] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   74.050023][ T6325] chnl_net:caif_netlink_parms(): no params data found
[   75.166631][ T5221] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   75.170984][ T5221] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   75.175719][ T5221] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   75.178604][ T5221] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   75.181269][ T5221] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   75.216733][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   75.220270][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   75.223510][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   75.226402][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   75.229061][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   75.932551][ T5839] Bluetooth: hci3: command tx timeout
[   77.212778][ T5839] Bluetooth: hci4: command tx timeout
[   77.296818][ T5839] Bluetooth: hci5: command tx timeout
[   78.012414][ T5839] Bluetooth: hci3: command tx timeout
[   79.291950][ T5839] Bluetooth: hci4: command tx timeout
[   79.372379][ T5839] Bluetooth: hci5: command tx timeout
[   80.092046][ T5839] Bluetooth: hci3: command tx timeout
[   81.065854][  T969] cfg80211: failed to load regulatory.db
[   81.371962][ T5839] Bluetooth: hci4: command tx timeout
[   81.451958][ T5839] Bluetooth: hci5: command tx timeout
[   82.172010][ T5839] Bluetooth: hci3: command tx timeout
[   83.452342][ T5839] Bluetooth: hci4: command tx timeout
[   83.531994][ T5839] Bluetooth: hci5: command tx timeout
[  132.260918][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.263771][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  134.809360][ T5221] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  134.815407][ T5221] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  134.818335][ T5221] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  134.821857][ T5221] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  134.824378][ T5221] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  135.974268][ T5839] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  135.979519][ T5839] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  135.982658][ T5839] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  135.985803][ T5839] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  135.988897][ T5839] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  136.042204][ T5221] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  136.045480][ T5221] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  136.048335][ T5221] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  136.051314][ T5221] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  136.055958][ T5221] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  136.891927][ T5221] Bluetooth: hci6: command tx timeout
[  138.011866][ T5221] Bluetooth: hci7: command tx timeout
[  138.091820][ T5221] Bluetooth: hci8: command tx timeout
[  138.971944][ T5221] Bluetooth: hci6: command tx timeout
[  140.092337][ T5221] Bluetooth: hci7: command tx timeout
[  140.172534][ T5221] Bluetooth: hci8: command tx timeout
[  141.051930][ T5221] Bluetooth: hci6: command tx timeout
[  142.171903][ T5221] Bluetooth: hci7: command tx timeout
[  142.251992][ T5221] Bluetooth: hci8: command tx timeout
[  143.133561][ T5221] Bluetooth: hci6: command tx timeout
[  144.251895][ T5221] Bluetooth: hci7: command tx timeout
[  144.331925][ T5221] Bluetooth: hci8: command tx timeout
[  164.651676][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
SYZFAIL: failed to recv rpc
[  164.653860][    C0] rcu: 	0-....: (10498 ticks this GP) idle=121c/1/0x4000000000000000 softirq=16153/16153 fqs=5249
[  164.658435][    C0] rcu: 	         hardirqs   softirqs   csw/system
[  164.660538][    C0] rcu: 	 number:  1025470          0            0
[  164.662627][    C0] rcu: 	cputime:    24747      27752           89   ==> 52510(ms)
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  164.665141][    C0] rcu: 	(t=10502 jiffies g=7781 q=2739 ncpus=2)
[  164.667264][    C0] CPU: 0 UID: 0 PID: 6318 Comm: syz.2.190 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  164.667274][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  164.667278][    C0] RIP: 0010:rcu_read_unlock_special+0x87/0x4c0
[  164.667293][    C0] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 92 37 f8 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
[  164.667298][    C0] RSP: 0018:ffffc900000075e0 EFLAGS: 00000206
[  164.667305][    C0] RAX: ee8254006b775700 RBX: 1ffff92000000ec4 RCX: ee8254006b775700
[  164.667310][    C0] RDX: 0000000000000002 RSI: ffffffff8d998701 RDI: ffffffff8be29f80
[  164.667314][    C0] RBP: ffffc900000076d8 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  164.667319][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffffffff8e144400
[  164.667323][    C0] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000001
[  164.667327][    C0] FS:  00007f461f2b76c0(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
[  164.667333][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  164.667337][    C0] CR2: 000000110c261b26 CR3: 00000001095c2000 CR4: 00000000000006f0
[  164.667361][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  164.667367][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  164.667371][    C0] Call Trace:
[  164.667374][    C0]  <IRQ>
[  164.667377][    C0]  ? __lock_acquire+0xab9/0xd20
[  164.667388][    C0]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  164.667399][    C0]  ? unwind_next_frame+0xa5/0x2390
[  164.667411][    C0]  __rcu_read_unlock+0x84/0xe0
[  164.667420][    C0]  ? unwind_next_frame+0xa5/0x2390
[  164.667427][    C0]  unwind_next_frame+0x19ae/0x2390
[  164.667437][    C0]  ? unwind_next_frame+0xa5/0x2390
[  164.667444][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  164.667454][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  164.667463][    C0]  arch_stack_walk+0x11c/0x150
[  164.667474][    C0]  ? irq_exit_rcu+0x9/0x30
[  164.667483][    C0]  stack_trace_save+0x9c/0xe0
[  164.667491][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  164.667502][    C0]  ? __irq_exit_rcu+0xd8/0x1f0
[  164.667509][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  164.667517][    C0]  kasan_save_track+0x3e/0x80
[  164.667527][    C0]  ? kasan_save_track+0x3e/0x80
[  164.667536][    C0]  ? kasan_save_free_info+0x46/0x50
[  164.667543][    C0]  ? __kasan_slab_free+0x62/0x70
[  164.667549][    C0]  ? kmem_cache_free+0x18f/0x400
[  164.667555][    C0]  ? rcu_core+0xca8/0x1710
[  164.667561][    C0]  ? handle_softirqs+0x286/0x870
[  164.667567][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  164.667594][    C0]  ? rcu_core+0xca8/0x1710
[  164.667599][    C0]  kasan_save_free_info+0x46/0x50
[  164.667607][    C0]  __kasan_slab_free+0x62/0x70
[  164.667614][    C0]  kmem_cache_free+0x18f/0x400
[  164.667621][    C0]  ? __pfx_i_callback+0x10/0x10
[  164.667628][    C0]  ? rcu_core+0xc34/0x1710
[  164.667634][    C0]  rcu_core+0xca8/0x1710
[  164.667640][    C0]  ? clockevents_program_event+0x24d/0x360
[  164.667657][    C0]  ? __pfx_rcu_core+0x10/0x10
[  164.667664][    C0]  ? __irq_exit_rcu+0xd8/0x1f0
[  164.667671][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  164.667682][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  164.667695][    C0]  ? __pfx_rcu_core_si+0x10/0x10
[  164.667707][    C0]  handle_softirqs+0x286/0x870
[  164.667716][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  164.667726][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  164.667735][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  164.667746][    C0]  __irq_exit_rcu+0xca/0x1f0
[  164.667753][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  164.667764][    C0]  irq_exit_rcu+0x9/0x30
[  164.667771][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  164.667779][    C0]  </IRQ>
[  164.667781][    C0]  <TASK>
[  164.667783][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  164.667790][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110
[  164.667798][    C0] Code: 74 05 e8 9b 93 56 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> e3 c1 1f f6 65 8b 05 bc f9 2e 07 85 c0 74 40 48 c7 04 24 0e 36
[  164.667803][    C0] RSP: 0018:ffffc9000345f040 EFLAGS: 00000206
[  164.667809][    C0] RAX: ee8254006b775700 RBX: 0000000000000a02 RCX: ee8254006b775700
[  164.667813][    C0] RDX: 0000000000000006 RSI: ffffffff8d998701 RDI: 0000000000000001
[  164.667817][    C0] RBP: ffffc9000345f0c0 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  164.667821][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: dffffc0000000000
[  164.667826][    C0] R13: ffff88810e583660 R14: ffffffff99d08570 R15: 1ffff9200068be08
[  164.667838][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  164.667846][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  164.667859][    C0]  debug_check_no_obj_freed+0x451/0x470
[  164.667872][    C0]  ? irqentry_exit+0x74/0x90
[  164.667882][    C0]  ? genl_done+0x1c0/0x220
[  164.667891][    C0]  kfree+0x112/0x440
[  164.667897][    C0]  ? __pfx_genl_done+0x10/0x10
[  164.667906][    C0]  genl_done+0x1c0/0x220
[  164.667914][    C0]  ? netlink_dump+0xa91/0xe60
[  164.667919][    C0]  ? __pfx_genl_done+0x10/0x10
[  164.667928][    C0]  netlink_dump+0xa9d/0xe60
[  164.667939][    C0]  ? __pfx_netlink_dump+0x10/0x10
[  164.667951][    C0]  ? genl_start+0x499/0x6c0
[  164.667962][    C0]  __netlink_dump_start+0x5cb/0x7e0
[  164.667976][    C0]  genl_family_rcv_msg_dumpit+0x1e7/0x2c0
[  164.667987][    C0]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[  164.667994][    C0]  ? genl_get_cmd+0x496/0x910
[  164.668004][    C0]  ? __pfx_genl_start+0x10/0x10
[  164.668011][    C0]  ? __pfx_genl_dumpit+0x10/0x10
[  164.668018][    C0]  ? __pfx_genl_done+0x10/0x10
[  164.668027][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  164.668041][    C0]  genl_rcv_msg+0x5da/0x790
[  164.668052][    C0]  ? __pfx_genl_rcv_msg+0x10/0x10
[  164.668060][    C0]  ? __pfx_devlink_nl_trap_policer_get_dumpit+0x10/0x10
[  164.668075][    C0]  netlink_rcv_skb+0x208/0x470
[  164.668082][    C0]  ? __pfx_genl_rcv_msg+0x10/0x10
[  164.668091][    C0]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  164.668109][    C0]  ? down_read+0x1ad/0x2e0
[  164.668120][    C0]  genl_rcv+0x28/0x40
[  164.668127][    C0]  netlink_unicast+0x75c/0x8e0
[  164.668142][    C0]  netlink_sendmsg+0x805/0xb30
[  164.668153][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  164.668158][    C0]  ? apparmor_socket_sendmsg+0x12/0x30
[  164.668167][    C0]  ? __sanitizer_cov_trace_pc+0x46/0x70
[  164.668176][    C0]  ? aa_sock_msg_perm+0x94/0x160
[  164.668186][    C0]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  164.668194][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  164.668201][    C0]  __sock_sendmsg+0x21c/0x270
[  164.668213][    C0]  ____sys_sendmsg+0x505/0x830
[  164.668223][    C0]  ? __pfx_____sys_sendmsg+0x10/0x10
[  164.668234][    C0]  ? import_iovec+0x74/0xa0
[  164.668271][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  164.668282][    C0]  ? __pfx____sys_sendmsg+0x10/0x10
[  164.668288][    C0]  ? irqentry_exit+0x74/0x90
[  164.668312][    C0]  ? __fget_files+0x2a/0x420
[  164.668318][    C0]  ? __fget_files+0x3a0/0x420
[  164.668330][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  164.668337][    C0]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  164.668346][    C0]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  164.668358][    C0]  ? rcu_is_watching+0x15/0xb0
[  164.668367][    C0]  ? do_syscall_64+0xbe/0x3b0
[  164.668378][    C0]  do_syscall_64+0xfa/0x3b0
[  164.668387][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.668393][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  164.668401][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.668407][    C0] RIP: 0033:0x7f461e38e9a9
[  164.668415][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  164.668419][    C0] RSP: 002b:00007f461f2b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  164.668426][    C0] RAX: ffffffffffffffda RBX: 00007f461e5b5fa0 RCX: 00007f461e38e9a9
[  164.668431][    C0] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[  164.668434][    C0] RBP: 00007f461e410d69 R08: 0000000000000000 R09: 0000000000000000
[  164.668438][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  164.668442][    C0] R13: 0000000000000000 R14: 00007f461e5b5fa0 R15: 00007ffc2bfd2cf8
[  164.668453][    C0]  </TASK>
[  164.921877][    C0] sched: DL replenish lagged too much
[  170.176692][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  170.179333][   T54] Bluetooth: hci0: command 0x0406 tx timeout
[  170.185663][   T54] Bluetooth: hci1: command 0x0406 tx timeout

VM DIAGNOSIS:
17:45:34  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000006910
R8 =ffff888107580237 R9 =1ffff11020eb0046 R10=dffffc0000000000 R11=ffffffff85471fa0
R12=dffffc0000000000 R13=ffffffff99af58a8 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff8547201c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f461f2b76c0 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c261b26 CR3=00000001095c2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f7efc011ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000007 RBX=0000000000000002 RCX=00000000b9e60882 RDX=000000009e60882b
RSI=ffff888022106180 RDI=ffff888022105640 RBP=0000000000000000 RSP=ffffc9000305efc8
R8 =0000000000000000 R9 =ffffffff8172aae5 R10=ffffc9000305f218 R11=ffffffff81acf520
R12=0000000000004007 R13=ffff888022106130 R14=ffff888022106180 R15=b9e6088243dacd0d
RIP=ffffffff819e3bfb RFL=00000807 [-O---PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f5b0428e800 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffce8b31e7c CR3=000000010e466000 CR4=000006f0
DR0=ffff8880b8927a20 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
