last executing test programs:

379.978926ms ago: executing program 1 (id=2):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000140), 0x0}, 0x20)

285.575091ms ago: executing program 1 (id=4):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa6e}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000e80)='syzkaller\x00', 0x7, 0x96, &(0x7f00000001c0)=""/150, 0x83f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)

206.251043ms ago: executing program 1 (id=5):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)

146.525636ms ago: executing program 1 (id=6):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="1f000000190081054e81f782db4cb904021d080000000000000000070a000a", 0x1f}], 0x1}, 0x14)

124.506368ms ago: executing program 2 (id=3):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x54}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)

66.127053ms ago: executing program 2 (id=7):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffae, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x13, &(0x7f0000000c40)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

65.933851ms ago: executing program 1 (id=8):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x48)

61.672302ms ago: executing program 0 (id=1):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x63a, 0x0, 0x0, 0x0, 0x3ff}, [@call={0x85, 0x0, 0x0, 0xa8}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

321.36µs ago: executing program 2 (id=9):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000c63f1de100000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7ff3, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x0, @perf_bp={0x0, 0x3}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

129.733µs ago: executing program 0 (id=10):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x208}, 0x48)

0s ago: executing program 1 (id=11):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffe89, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:17233' (ED25519) to the list of known hosts.
syzkaller login: [   40.940228][ T5759] cgroup: Unknown subsys name 'net'
[   41.046978][ T5759] cgroup: Unknown subsys name 'cpuset'
[   41.052455][ T5759] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.483456][ T5759] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.785207][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.788226][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.791164][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.794462][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.797239][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.868471][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.871111][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.874012][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.877401][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.881883][ T5223] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.906789][   T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.910048][   T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.914774][   T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.918284][   T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.921075][   T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.021943][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   46.095325][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.098712][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.101860][ T5831] bridge_slave_0: entered allmulticast mode
[   46.105162][ T5831] bridge_slave_0: entered promiscuous mode
[   46.111046][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.114137][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.116812][ T5831] bridge_slave_1: entered allmulticast mode
[   46.119487][ T5831] bridge_slave_1: entered promiscuous mode
[   46.174600][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.180685][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.271742][ T5831] team0: Port device team_slave_0 added
[   46.285820][ T5831] team0: Port device team_slave_1 added
[   46.327485][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.330317][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.343318][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.348380][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   46.360391][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.363289][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.373886][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.395032][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   46.500448][ T5831] hsr_slave_0: entered promiscuous mode
[   46.503971][ T5831] hsr_slave_1: entered promiscuous mode
[   46.514309][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.516699][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.519391][ T5836] bridge_slave_0: entered allmulticast mode
[   46.522107][ T5836] bridge_slave_0: entered promiscuous mode
[   46.525727][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.528055][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.530566][ T5837] bridge_slave_0: entered allmulticast mode
[   46.534656][ T5837] bridge_slave_0: entered promiscuous mode
[   46.537653][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.539939][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.542300][ T5837] bridge_slave_1: entered allmulticast mode
[   46.545249][ T5837] bridge_slave_1: entered promiscuous mode
[   46.554927][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.557280][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.559641][ T5836] bridge_slave_1: entered allmulticast mode
[   46.562303][ T5836] bridge_slave_1: entered promiscuous mode
[   46.597126][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.607836][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.612030][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.620455][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.649468][ T5837] team0: Port device team_slave_0 added
[   46.665309][ T5837] team0: Port device team_slave_1 added
[   46.668636][ T5836] team0: Port device team_slave_0 added
[   46.679264][ T5836] team0: Port device team_slave_1 added
[   46.699593][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.701798][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.710322][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.725463][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.727789][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.736274][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.746779][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.749063][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.758018][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.765176][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.767450][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.776679][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.817431][ T5837] hsr_slave_0: entered promiscuous mode
[   46.819817][ T5837] hsr_slave_1: entered promiscuous mode
[   46.822117][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.825081][ T5837] Cannot create hsr debugfs directory
[   46.842661][ T5836] hsr_slave_0: entered promiscuous mode
[   46.845728][ T5836] hsr_slave_1: entered promiscuous mode
[   46.847771][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.850200][ T5836] Cannot create hsr debugfs directory
[   46.972466][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.991907][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.005778][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.018533][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   47.100302][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   47.110806][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   47.115846][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   47.134798][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   47.164907][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   47.170248][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   47.176442][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   47.186169][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.215233][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.259158][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   47.277103][ T3611] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.279404][ T3611] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.288355][ T3611] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.290761][ T3611] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.309696][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.315764][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.328530][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   47.343610][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   47.358233][ T3611] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.360570][ T3611] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.367099][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   47.373920][ T3611] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.376245][ T3611] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.384652][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.386944][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.395773][ T3611] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.398155][ T3611] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.447329][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   47.458620][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.519287][ T5831] veth0_vlan: entered promiscuous mode
[   47.529664][ T5831] veth1_vlan: entered promiscuous mode
[   47.558296][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.583327][ T5831] veth0_macvtap: entered promiscuous mode
[   47.587209][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.591952][ T5831] veth1_macvtap: entered promiscuous mode
[   47.611349][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.621667][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.630729][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.634659][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.637410][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.640047][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.649365][ T5836] veth0_vlan: entered promiscuous mode
[   47.669997][ T5836] veth1_vlan: entered promiscuous mode
[   47.693310][ T3611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.695930][ T3611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.695944][ T5837] veth0_vlan: entered promiscuous mode
[   47.716220][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.718800][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.721454][ T5837] veth1_vlan: entered promiscuous mode
[   47.740631][ T5836] veth0_macvtap: entered promiscuous mode
[   47.752378][ T5836] veth1_macvtap: entered promiscuous mode
[   47.755548][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.762140][ T5837] veth0_macvtap: entered promiscuous mode
[   47.774372][ T5837] veth1_macvtap: entered promiscuous mode
[   47.780995][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.802390][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.815107][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.820770][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.824880][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.827723][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.830534][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.833784][ T5834] Bluetooth: hci0: command tx timeout
[   47.839353][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.868276][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.871319][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.876301][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.879352][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.913167][ T5834] Bluetooth: hci1: command tx timeout
[   47.932224][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.938109][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.964945][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.970073][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.993010][ T5834] Bluetooth: hci2: command tx timeout
[   47.999114][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.001752][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.034791][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.046576][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.051576][ T5902] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6'.
[  153.192709][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  153.194954][    C0] rcu: 	1-...!: (1 GPs behind) idle=384c/1/0x4000000000000000 softirq=13185/13194 fqs=1
[  153.199379][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P5915 P5913/1:b..l
[  153.201996][    C0] rcu: 	(detected by 0, t=10502 jiffies, g=5785, q=269 ncpus=2)
[  153.204376][    C0] Sending NMI from CPU 0 to CPUs 1:
[  153.204426][    C1] NMI backtrace for cpu 1
[  153.204437][    C1] CPU: 1 UID: 0 PID: 5915 Comm: syz.0.10 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  153.204446][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  153.204451][    C1] RIP: 0010:native_apic_msr_write+0x39/0x50
[  153.204465][    C1] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 cc cc cc cc cc f3 0f 1e fa 89 f6 31 d2 e9 e2 d0 86 03 66
[  153.204470][    C1] RSP: 0018:ffffc900001e08c8 EFLAGS: 00000046
[  153.204477][    C1] RAX: 00000000000000f6 RBX: 0000000000000200 RCX: 000000000000083f
[  153.204482][    C1] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f
[  153.204486][    C1] RBP: ffffc900001e0998 R08: ffffc900001e0927 R09: 1ffff9200003c124
[  153.204490][    C1] R10: dffffc0000000000 R11: fffff5200003c125 R12: ffff88813663af01
[  153.204495][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8881366314f0
[  153.204499][    C1] FS:  00005555811e4500(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
[  153.204504][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  153.204509][    C1] CR2: 0000001b3041fffc CR3: 000000011ab98000 CR4: 00000000000006f0
[  153.204534][    C1] Call Trace:
[  153.204539][    C1]  <IRQ>
[  153.204546][    C1]  arch_irq_work_raise+0x6d/0x80
[  153.204555][    C1]  __irq_work_queue_local+0x1d7/0x550
[  153.204564][    C1]  ? __pfx___irq_work_queue_local+0x10/0x10
[  153.204570][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  153.204578][    C1]  ? __phys_addr+0xd3/0x180
[  153.204587][    C1]  irq_work_queue_on+0x122/0x230
[  153.204593][    C1]  rcu_read_unlock_special+0x3ab/0x4c0
[  153.204603][    C1]  ? __lock_acquire+0xab9/0xd20
[  153.204610][    C1]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  153.204619][    C1]  ? trace_call_bpf+0xb7/0x850
[  153.204628][    C1]  __rcu_read_unlock+0x84/0xe0
[  153.204637][    C1]  ? trace_call_bpf+0xb7/0x850
[  153.204643][    C1]  trace_call_bpf+0x5ae/0x850
[  153.204649][    C1]  ? trace_call_bpf+0xb7/0x850
[  153.204656][    C1]  ? __pfx_trace_call_bpf+0x10/0x10
[  153.204661][    C1]  ? kvm_sched_clock_read+0x11/0x20
[  153.204671][    C1]  ? sched_clock_cpu+0x74/0x430
[  153.204678][    C1]  ? _raw_spin_unlock+0x28/0x50
[  153.204686][    C1]  perf_trace_run_bpf_submit+0x78/0x170
[  153.204696][    C1]  perf_trace_preemptirq_template+0x280/0x340
[  153.204706][    C1]  ? irqentry_exit+0x74/0x90
[  153.204714][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  153.204723][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  153.204730][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  153.204738][    C1]  ? irqentry_exit+0x74/0x90
[  153.204746][    C1]  trace_irq_enable+0xee/0x110
[  153.204754][    C1]  trace_hardirqs_on+0x18/0x40
[  153.204763][    C1]  irqentry_exit+0x74/0x90
[  153.204771][    C1]  asm_sysvec_irq_work+0x1a/0x20
[  153.204778][    C1] RIP: 0010:handle_softirqs+0x1b0/0x870
[  153.204785][    C1] Code: 89 64 24 30 0f b7 db 48 c7 c7 00 ad 89 8b e8 17 ef e8 09 65 66 c7 05 f5 5b 1a 11 00 00 e8 98 f5 41 00 fb 49 c7 c7 c0 c0 e0 8d <b8> ff ff ff ff 0f bc c3 41 89 c5 41 ff c5 0f 84 c2 03 00 00 89 5c
[  153.204790][    C1] RSP: 0018:ffffc900001e0e40 EFLAGS: 00000286
[  153.204796][    C1] RAX: 82d4b37041bb9600 RBX: 0000000000000200 RCX: 82d4b37041bb9600
[  153.204800][    C1] RDX: 0000000000000002 RSI: ffffffff8d998701 RDI: ffffffff8be29f80
[  153.204804][    C1] RBP: ffffc900001e0f50 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  153.204809][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 000000000000000a
[  153.204813][    C1] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8de0c0c0
[  153.204822][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  153.204829][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  153.204836][    C1]  ? irq_work_single+0x1ac/0x240
[  153.204842][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  153.204852][    C1]  __irq_exit_rcu+0xca/0x1f0
[  153.204859][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  153.204866][    C1]  ? rcu_is_watching+0x15/0xb0
[  153.204874][    C1]  irq_exit_rcu+0x9/0x30
[  153.204880][    C1]  sysvec_irq_work+0xa3/0xc0
[  153.204887][    C1]  </IRQ>
[  153.204889][    C1]  <TASK>
[  153.204892][    C1]  asm_sysvec_irq_work+0x1a/0x20
[  153.204898][    C1] RIP: 0010:rcu_read_unlock_special+0x87/0x4c0
[  153.204907][    C1] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 92 37 f8 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
[  153.204911][    C1] RSP: 0018:ffffc9000450fc20 EFLAGS: 00000206
[  153.204917][    C1] RAX: 82d4b37041bb9600 RBX: 1ffff920008a1f8c RCX: 82d4b37041bb9600
[  153.204921][    C1] RDX: 0000000000000006 RSI: ffffffff8d998701 RDI: ffffffff8be29f80
[  153.204925][    C1] RBP: ffffc9000450fd10 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  153.204929][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 0000000000000000
[  153.204933][    C1] R13: dffffc0000000000 R14: 0000000000000246 R15: ffffffff8e144520
[  153.204942][    C1]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  153.204950][    C1]  ? lock_for_kill+0x84/0x210
[  153.204961][    C1]  __rcu_read_unlock+0x84/0xe0
[  153.204969][    C1]  ? dput+0x37/0x2b0
[  153.204976][    C1]  dput+0x197/0x2b0
[  153.204983][    C1]  __fput+0x68e/0xa70
[  153.204993][    C1]  task_work_run+0x1d4/0x260
[  153.205004][    C1]  ? __pfx_task_work_run+0x10/0x10
[  153.205014][    C1]  ? exit_to_user_mode_loop+0x40/0x110
[  153.205021][    C1]  exit_to_user_mode_loop+0xec/0x110
[  153.205028][    C1]  do_syscall_64+0x2bd/0x3b0
[  153.205036][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  153.205043][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.205049][    C1]  ? exc_page_fault+0x9f/0xf0
[  153.205057][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.205063][    C1] RIP: 0033:0x7fbb7058e9a9
[  153.205073][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  153.205079][    C1] RSP: 002b:00007ffde34dfd48 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  153.205089][    C1] RAX: 0000000000000000 RBX: 000000000000bbb6 RCX: 00007fbb7058e9a9
[  153.205095][    C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  153.205100][    C1] RBP: 00007fbb707b7ba0 R08: 0000000000000001 R09: 00000003e34e003f
[  153.205103][    C1] R10: 00007fbb70400000 R11: 0000000000000246 R12: 00007fbb707b5fac
[  153.205107][    C1] R13: 00007fbb707b5fa0 R14: ffffffffffffffff R15: 00007ffde34dfe60
[  153.205115][    C1]  </TASK>
[  153.205419][    C0] task:syz.2.9         state:R  running task     stack:25896 pid:5913  tgid:5912  ppid:5836   task_flags:0x400140 flags:0x00004000
[  153.407047][    C0] Call Trace:
[  153.408102][    C0]  <TASK>
[  153.409014][    C0]  __schedule+0x16f5/0x4d00
[  153.410455][    C0]  ? preempt_schedule_irq+0xb5/0x150
[  153.412093][    C0]  ? __pfx___schedule+0x10/0x10
[  153.413621][    C0]  ? preempt_schedule_irq+0xaa/0x150
[  153.415328][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  153.417431][    C0]  ? preempt_schedule_irq+0xaa/0x150
[  153.419100][    C0]  preempt_schedule_irq+0xb5/0x150
[  153.420784][    C0]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  153.422543][    C0]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  153.424428][    C0]  irqentry_exit+0x6f/0x90
[  153.425827][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  153.427666][    C0] RIP: 0010:__local_bh_enable_ip+0x135/0x1c0
[  153.429675][    C0] Code: 8b e8 ff f2 e8 09 65 66 8b 05 df 5f 1a 11 66 85 c0 75 5a bf 01 00 00 00 e8 e8 27 0b 00 e8 73 f9 41 00 fb 65 8b 05 bb 5f 1a 11 <85> c0 75 05 e8 f2 f5 ad ff 48 c7 04 24 0e 36 e0 45 4b c7 04 37 00
[  153.435826][    C0] RSP: 0018:ffffc9000464f920 EFLAGS: 00000282
[  153.437743][    C0] RAX: 0000000080000000 RBX: 0000000000000200 RCX: b9673143b4a9d600
[  153.440217][    C0] RDX: 0000000000000000 RSI: ffffffff8d998701 RDI: ffffffff8be29f80
[  153.442733][    C0] RBP: ffffc9000464f9b0 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  153.445341][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffffffff89966127
[  153.447845][    C0] R13: ffffc900028d6030 R14: dffffc0000000000 R15: 1ffff920008c9f24
[  153.450241][    C0]  ? bpf_test_run+0x197/0x7b0
[  153.451730][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  153.453508][    C0]  ? bpf_test_run+0x197/0x7b0
[  153.454983][    C0]  bpf_test_run+0x376/0x7b0
[  153.456440][    C0]  ? __pfx_bpf_test_run+0x10/0x10
[  153.457998][    C0]  ? slab_build_skb+0x273/0x3e0
[  153.459511][    C0]  ? convert___skb_to_skb+0x3d/0x590
[  153.461127][    C0]  bpf_prog_test_run_skb+0xb30/0x1560
[  153.462771][    C0]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  153.464613][    C0]  bpf_prog_test_run+0x2c7/0x340
[  153.466158][    C0]  __sys_bpf+0x581/0x870
[  153.467467][    C0]  ? __pfx___sys_bpf+0x10/0x10
[  153.468951][    C0]  ? __fget_files+0x2a/0x420
[  153.470389][    C0]  ? rcu_is_watching+0x15/0xb0
[  153.471908][    C0]  __x64_sys_bpf+0x7c/0x90
[  153.473327][    C0]  do_syscall_64+0xfa/0x3b0
[  153.474781][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  153.476384][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.478254][    C0]  ? exc_page_fault+0x9f/0xf0
[  153.479751][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.481558][    C0] RIP: 0033:0x7f0e3d38e9a9
[  153.482958][    C0] RSP: 002b:00007f0e3e22f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  153.485561][    C0] RAX: ffffffffffffffda RBX: 00007f0e3d5b5fa0 RCX: 00007f0e3d38e9a9
[  153.487982][    C0] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a
[  153.490380][    C0] RBP: 00007f0e3d410d69 R08: 0000000000000000 R09: 0000000000000000
[  153.492763][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  153.495557][    C0] R13: 0000000000000000 R14: 00007f0e3d5b5fa0 R15: 00007ffc94541738
[  153.498579][    C0]  </TASK>
[  153.499581][    C0] task:syz.0.10        state:R  running task     stack:26920 pid:5915  tgid:5915  ppid:5837   task_flags:0x400040 flags:0x00004008
[  153.503664][    C0] Call Trace:
[  153.504759][    C0]  <TASK>
[  153.505723][    C0]  ? __rcu_read_unlock+0x84/0xe0
[  153.507284][    C0]  ? trace_call_bpf+0xb7/0x850
[  153.508773][    C0]  ? trace_call_bpf+0x5ba/0x850
[  153.510295][    C0]  ? psi_group_change+0xbc7/0x1210
[  153.511896][    C0]  ? trace_call_bpf+0xb7/0x850
[  153.513600][    C0]  ? __pfx_rcu_read_lock_sched_held+0x10/0x10
[  153.515662][    C0]  ? perf_trace_preemptirq_template+0xa3/0x340
[  153.517936][    C0]  ? irqentry_enter+0x3d/0x60
[  153.519562][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  153.521903][    C0]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  153.523946][    C0]  ? rcu_is_watching+0x15/0xb0
[  153.525644][    C0]  ? sysvec_irq_work+0x83/0xc0
[  153.527438][    C0]  ? asm_sysvec_irq_work+0x1a/0x20
[  153.529377][    C0]  ? rcu_read_unlock_special+0x87/0x4c0
[  153.531356][    C0]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  153.533609][    C0]  ? lock_for_kill+0x84/0x210
[  153.535341][    C0]  ? __rcu_read_unlock+0x84/0xe0
[  153.537097][    C0]  ? dput+0x37/0x2b0
[  153.538486][    C0]  ? dput+0x197/0x2b0
[  153.539923][    C0]  ? __fput+0x68e/0xa70
[  153.541452][    C0]  ? task_work_run+0x1d4/0x260
[  153.543127][    C0]  ? __pfx_task_work_run+0x10/0x10
[  153.544995][    C0]  ? exit_to_user_mode_loop+0x40/0x110
[  153.546866][    C0]  ? exit_to_user_mode_loop+0xec/0x110
[  153.548718][    C0]  ? do_syscall_64+0x2bd/0x3b0
[  153.550212][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  153.551906][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.554054][    C0]  ? exc_page_fault+0x9f/0xf0
[  153.555739][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.557842][    C0]  </TASK>
[  153.558860][    C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g5785 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  153.562279][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  153.565366][    C0] rcu: RCU grace-period kthread stack dump:
[  153.567233][    C0] task:rcu_preempt     state:R  running task     stack:27184 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
[  153.571324][    C0] Call Trace:
[  153.572648][    C0]  <TASK>
[  153.573783][    C0]  __schedule+0x16f5/0x4d00
[  153.575458][    C0]  ? schedule+0x165/0x360
[  153.576955][    C0]  ? __lock_acquire+0xab9/0xd20
[  153.578634][    C0]  ? __pfx___schedule+0x10/0x10
[  153.580389][    C0]  ? schedule+0x91/0x360
[  153.581952][    C0]  schedule+0x165/0x360
[  153.583425][    C0]  schedule_timeout+0x12b/0x270
[  153.585178][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[  153.587087][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  153.589306][    C0]  ? __pfx_process_timeout+0x10/0x10
[  153.591015][    C0]  ? prepare_to_swait_event+0x341/0x380
[  153.592785][    C0]  rcu_gp_fqs_loop+0x301/0x1540
[  153.594373][    C0]  ? __pfx_rcu_watching_snap_save+0x10/0x10
[  153.596278][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  153.597960][    C0]  ? _raw_spin_unlock_irq+0x2e/0x50
[  153.599643][    C0]  ? finish_swait+0xcd/0x1f0
[  153.601134][    C0]  rcu_gp_kthread+0x99/0x390
[  153.602638][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  153.604303][    C0]  ? __kthread_parkme+0x7b/0x200
[  153.605844][    C0]  ? __kthread_parkme+0x1a1/0x200
[  153.607429][    C0]  kthread+0x711/0x8a0
[  153.608736][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  153.610472][    C0]  ? __pfx_kthread+0x10/0x10
[  153.611988][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  153.613672][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  153.615335][    C0]  ? __pfx_kthread+0x10/0x10
[  153.617018][    C0]  ret_from_fork+0x3fc/0x770
[  153.618636][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  153.620241][    C0]  ? __switch_to_asm+0x39/0x70
[  153.621753][    C0]  ? __switch_to_asm+0x33/0x70
[  153.623294][    C0]  ? __pfx_kthread+0x10/0x10
[  153.624799][    C0]  ret_from_fork_asm+0x1a/0x30
[  153.626284][    C0]  </TASK>
[  153.627303][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  153.629249][    C0] CPU: 0 UID: 0 PID: 5919 Comm: syz.1.12 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  153.632948][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  153.636056][    C0] RIP: 0010:native_queued_spin_lock_slowpath+0xaf/0x8e0
[  153.638151][    C0] Code: 00 00 00 c7 44 24 60 00 00 00 00 0f 1f 44 00 00 4c 8d 74 24 60 49 89 df 49 c1 ef 03 41 bd 01 00 00 00 eb 06 89 44 24 60 f3 90 <48> 89 df be 04 00 00 00 e8 c4 1d b2 f6 48 b8 00 00 00 00 00 fc ff
[  153.644040][    C0] RSP: 0018:ffffc9000454f840 EFLAGS: 00000202
[  153.645913][    C0] RAX: 0000000000000001 RBX: ffff888103442dc8 RCX: ffffffff8b71260c
[  153.648316][    C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888103442dc8
[  153.650746][    C0] RBP: ffffc9000454f938 R08: ffff888103442dcb R09: 1ffff110206885b9
[  153.653153][    C0] R10: dffffc0000000000 R11: ffffed10206885ba R12: 1ffff920008a9f10
[  153.655709][    C0] R13: 0000000000000001 R14: ffffc9000454f8a0 R15: 1ffff110206885b9
[  153.658211][    C0] FS:  00007f232ea396c0(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
[  153.660971][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  153.663120][    C0] CR2: 00007f232ea38fc8 CR3: 0000000029522000 CR4: 00000000000006f0
[  153.665714][    C0] Call Trace:
[  153.666769][    C0]  <TASK>
[  153.667713][    C0]  ? percpu_ref_get_many+0x19/0x140
[  153.669313][    C0]  ? __pfx_native_queued_spin_lock_slowpath+0x10/0x10
[  153.671350][    C0]  ? __lock_acquire+0xab9/0xd20
[  153.672853][    C0]  queued_spin_lock_slowpath+0x43/0x50
[  153.674586][    C0]  do_raw_spin_lock+0x21f/0x290
[  153.676079][    C0]  ? d_instantiate+0x64/0xa0
[  153.677517][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  153.679169][    C0]  d_instantiate+0x64/0xa0
[  153.680551][    C0]  alloc_file_pseudo+0xf6/0x210
[  153.682069][    C0]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  153.683761][    C0]  anon_inode_getfd+0xca/0x1b0
[  153.685275][    C0]  bpf_prog_load+0x1465/0x1930
[  153.686771][    C0]  ? __pfx_bpf_prog_load+0x10/0x10
[  153.688336][    C0]  ? bpf_lsm_bpf+0x9/0x20
[  153.689676][    C0]  ? security_bpf+0x7e/0x300
[  153.691122][    C0]  __sys_bpf+0x528/0x870
[  153.692466][    C0]  ? __pfx___sys_bpf+0x10/0x10
[  153.693978][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  153.696033][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  153.698038][    C0]  __x64_sys_bpf+0x7c/0x90
[  153.699446][    C0]  do_syscall_64+0xfa/0x3b0
[  153.700837][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  153.702440][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.704363][    C0]  ? exc_page_fault+0x9f/0xf0
[  153.705874][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.707731][    C0] RIP: 0033:0x7f232db8e9a9
[  153.709165][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  153.715297][    C0] RSP: 002b:00007f232ea39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  153.717893][    C0] RAX: ffffffffffffffda RBX: 00007f232ddb5fa0 RCX: 00007f232db8e9a9
[  153.720331][    C0] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005
[  153.722752][    C0] RBP: 00007f232dc10d69 R08: 0000000000000000 R09: 0000000000000000
[  153.725143][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  153.727586][    C0] R13: 0000000000000001 R14: 00007f232ddb5fa0 R15: 00007fff1b1136f8
[  153.730022][    C0]  </TASK>

VM DIAGNOSIS:
17:52:08  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000072b0
R8 =ffff888107678237 R9 =1ffff11020ecf046 R10=dffffc0000000000 R11=ffffffff85471fa0
R12=dffffc0000000000 R13=ffffffff99af58ac R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff8547201c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f232ea396c0 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f232ea38fc8 CR3=0000000029522000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f232dd86478 00007f232dd86450 XMM03=00007f232dd86488 00007f232dd86480
XMM04=00007f232e8ed100 00007f232dd86440 XMM05=00007f232dd86458 00007f232dd864a0
XMM06=00007f232dd86498 00007f232dd86490 XMM07=00007f232dd86488 00007f232dd86480
XMM08=7b20202000000000 0025732020000001 XMM09=0000000000000000 00007f232dc11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=82d4b37041bb9600 RBX=0000000000000200 RCX=82d4b37041bb9600 RDX=0000000000000002
RSI=ffffffff8d998701 RDI=ffffffff8be29f80 RBP=ffffc900001e0f50 RSP=ffffc900001e0e40
R8 =ffffffff8fa1e8f7 R9 =1ffffffff1f43d1e R10=dffffc0000000000 R11=fffffbfff1f43d1f
R12=000000000000000a R13=0000000000000000 R14=dffffc0000000000 R15=ffffffff8de0c0c0
RIP=ffffffff8185b450 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555811e4500 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3041fffc CR3=000000011ab98000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fbb70786478 00007fbb70786450 XMM03=00007fbb70786488 00007fbb70786480
XMM04=00007fbb712ed100 00007fbb70786440 XMM05=00007fbb70786458 00007fbb707864a0
XMM06=00007fbb70786498 00007fbb70786490 XMM07=00007fbb70786488 00007fbb70786480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fbb70611ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
