last executing test programs:

57.555393003s ago: executing program 0 (id=357):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ec0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x3}]}, @func_proto, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3}}]}, {0x0, [0x5f, 0xe5e919b5517ad0d3]}}, 0x0, 0x54, 0x0, 0x3, 0x2}, 0x28)

57.495343039s ago: executing program 0 (id=358):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x84, 0x53, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbef, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
close(r3)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$MAP_GET_NEXT_KEY(0x22, 0x0, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r0, 0x4, r1}, 0x10)

57.304738289s ago: executing program 2 (id=360):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x4, @perf_config_ext={0xffffffffffffffff, 0x8001}, 0x106, 0xffffffff, 0x8001, 0x3, 0x40000002, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socket$kcm(0x2, 0x5, 0x84)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0x0, 0x1}, {0x2}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x24}, 0x0, 0xe, 0x0, 0x5, 0x0, 0x2, 0x5, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2)
r5 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7)
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x2040)
setsockopt$sock_attach_bpf(r5, 0x84, 0x18, &(0x7f0000000000)=r8, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r10, 0x1, 0x10, &(0x7f0000000000), 0x4)
close(r9)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r8, <r11=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)=r2}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r8, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r12=>0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x82, &(0x7f0000000340)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xb, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x29200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffff4}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffff7fe}, 0x0, 0x3fffffe, 0xffffffffffffffff, 0x8)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080304000000e8fe03a1180015000600142603600e1208000f0000810401a80016040a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x8008)
r13 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r13, &(0x7f0000000000)=ANY=[], 0xfe33)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, r11, 0xa, '\x00', r12, r8, 0x5, 0x1}, 0x50)
sendmsg$inet(r10, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x8004)
bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)

57.279391275s ago: executing program 0 (id=363):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="000000000087fb00b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000080)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x18)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

57.21565427s ago: executing program 0 (id=366):
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x17, 0x0, 0x54)
sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2}, 0x80, 0x0}, 0xb80b)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x80)

57.154628565s ago: executing program 0 (id=368):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x89fa, &(0x7f0000000900)={'sit0\x00', @random="0000230c1100"})

57.154274173s ago: executing program 2 (id=369):
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x2, 0x4)
close(r2)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00040004c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

57.104947699s ago: executing program 2 (id=372):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="850000008c0000003e000000008000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xe, 0xfc76, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x61, 0x10, &(0x7f0000000000), 0xfffffffffffffe77}, 0x48)

57.10481335s ago: executing program 0 (id=373):
socket$kcm(0xa, 0x1, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB], 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, 0x0, &(0x7f0000000240)}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080))

57.104632691s ago: executing program 1 (id=374):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000540)="1400000024000b47564cb6288200eb1405000000", 0x14}], 0x1}, 0x4000)

57.055607461s ago: executing program 2 (id=375):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0x401}, 0x50)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000f40)={r0, 0x0, 0x0}, 0x20)

57.055404244s ago: executing program 2 (id=376):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x6, 0xffff, 0x1000}, 0x48)

57.004876117s ago: executing program 2 (id=377):
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, 0xfffffffc}, 0x80, 0x0}, 0x640ce0c0)
socket$kcm(0x2, 0x200000000000001, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r1, &(0x7f0000000180), 0x40010)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r2, &(0x7f0000000180), 0x40010)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, @perf_config_ext={0x6, 0x5}, 0x49651e38e90d59e2, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
write$cgroup_type(r3, &(0x7f0000000180), 0x40010)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c085)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b9090000000b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c06000200036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d95322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcffff951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x20004080)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

57.004766643s ago: executing program 1 (id=378):
syz_open_procfs$namespace(0x0, 0x0)

56.925102185s ago: executing program 1 (id=379):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

56.925028683s ago: executing program 1 (id=380):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='virtio_transport_recv_pkt\x00', r0}, 0x10)

56.915649982s ago: executing program 1 (id=381):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x3, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10)

56.845665085s ago: executing program 1 (id=382):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x4, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
r3 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x6, 0x1b, &(0x7f0000000280)=r2, 0x4)

41.832199341s ago: executing program 32 (id=373):
socket$kcm(0xa, 0x1, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB], 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, 0x0, &(0x7f0000000240)}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080))

0s ago: executing program 33 (id=382):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x4, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
r3 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x6, 0x1b, &(0x7f0000000280)=r2, 0x4)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:54116' (ED25519) to the list of known hosts.
syzkaller login: [   40.922603][ T5752] cgroup: Unknown subsys name 'net'
[   41.051465][ T5752] cgroup: Unknown subsys name 'cpuset'
[   41.056686][ T5752] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.459753][ T5752] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   46.921926][ T5216] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   46.927587][ T5216] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   46.931267][ T5216] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   46.934979][ T5216] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   46.938723][ T5216] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   47.023686][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   47.027020][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   47.037591][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   47.040395][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   47.056562][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   47.059837][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   47.066121][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   47.069902][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   47.074307][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   47.081008][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   47.126890][ T5824] chnl_net:caif_netlink_parms(): no params data found
[   47.227024][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.229792][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.232304][ T5824] bridge_slave_0: entered allmulticast mode
[   47.235061][ T5824] bridge_slave_0: entered promiscuous mode
[   47.256402][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.259988][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.262797][ T5824] bridge_slave_1: entered allmulticast mode
[   47.266190][ T5824] bridge_slave_1: entered promiscuous mode
[   47.323935][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.336180][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.394691][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   47.414970][ T5824] team0: Port device team_slave_0 added
[   47.420725][ T5824] team0: Port device team_slave_1 added
[   47.473563][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   47.486879][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.489725][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.500208][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.516435][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.519160][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.527527][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.604253][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.607579][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.610771][ T5829] bridge_slave_0: entered allmulticast mode
[   47.614534][ T5829] bridge_slave_0: entered promiscuous mode
[   47.619674][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.622681][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.625705][ T5829] bridge_slave_1: entered allmulticast mode
[   47.629631][ T5829] bridge_slave_1: entered promiscuous mode
[   47.714633][ T5824] hsr_slave_0: entered promiscuous mode
[   47.719035][ T5824] hsr_slave_1: entered promiscuous mode
[   47.725047][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.744910][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.748983][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.752041][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.755094][ T5830] bridge_slave_0: entered allmulticast mode
[   47.759616][ T5830] bridge_slave_0: entered promiscuous mode
[   47.764669][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.767878][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.771416][ T5830] bridge_slave_1: entered allmulticast mode
[   47.775622][ T5830] bridge_slave_1: entered promiscuous mode
[   47.856262][ T5829] team0: Port device team_slave_0 added
[   47.882275][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.894889][ T5829] team0: Port device team_slave_1 added
[   47.919108][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.941070][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.944095][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.954840][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.980879][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.983695][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.994307][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.021942][ T5830] team0: Port device team_slave_0 added
[   48.028024][ T5830] team0: Port device team_slave_1 added
[   48.125103][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.130104][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.140612][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.157123][ T5829] hsr_slave_0: entered promiscuous mode
[   48.160848][ T5829] hsr_slave_1: entered promiscuous mode
[   48.163824][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   48.167079][ T5829] Cannot create hsr debugfs directory
[   48.170448][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.173345][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.184555][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.276838][ T5830] hsr_slave_0: entered promiscuous mode
[   48.280734][ T5830] hsr_slave_1: entered promiscuous mode
[   48.283648][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   48.286785][ T5830] Cannot create hsr debugfs directory
[   48.376740][ T5824] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   48.403768][ T5824] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   48.420963][ T5824] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   48.430064][ T5824] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   48.544684][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   48.556631][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   48.578559][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   48.582999][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   48.626741][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   48.635876][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   48.642365][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   48.656480][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   48.694541][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.744591][ T5824] 8021q: adding VLAN 0 to HW filter on device team0
[   48.769687][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.772847][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.799906][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.802134][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.845757][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.856963][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.880043][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   48.902370][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   48.912280][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.915280][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.923581][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.926570][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.934540][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.937552][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.950387][ T1231] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.953388][ T1231] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.959006][ T5826] Bluetooth: hci0: command tx timeout
[   49.033950][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.117355][ T5826] Bluetooth: hci1: command tx timeout
[   49.130462][ T5826] Bluetooth: hci2: command tx timeout
[   49.144478][ T5824] veth0_vlan: entered promiscuous mode
[   49.166730][ T5824] veth1_vlan: entered promiscuous mode
[   49.232973][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.236031][ T5824] veth0_macvtap: entered promiscuous mode
[   49.255963][ T5824] veth1_macvtap: entered promiscuous mode
[   49.282144][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.290934][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.296734][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.303007][ T5824] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.306480][ T5824] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.310845][ T5824] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.314248][ T5824] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.332751][ T5829] veth0_vlan: entered promiscuous mode
[   49.352059][ T5829] veth1_vlan: entered promiscuous mode
[   49.430935][ T5829] veth0_macvtap: entered promiscuous mode
[   49.436145][ T5829] veth1_macvtap: entered promiscuous mode
[   49.440015][ T5830] veth0_vlan: entered promiscuous mode
[   49.446465][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.455370][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.463338][ T5830] veth1_vlan: entered promiscuous mode
[   49.472627][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.491226][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.495500][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.498277][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.506803][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.510461][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.513169][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.515920][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.530213][ T5830] veth0_macvtap: entered promiscuous mode
[   49.552721][ T5830] veth1_macvtap: entered promiscuous mode
[   49.565632][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   49.591619][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.634470][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.642704][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.645411][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.651398][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.654195][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.657014][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.660600][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.678316][ T5890] netlink: 208016 bytes leftover after parsing attributes in process `syz.2.3'.
[   49.682200][ T5890] openvswitch: netlink: Message has 4 unknown bytes.
[   49.683742][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.688576][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.759576][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.763121][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.784511][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.792513][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.880274][ T5897] delete_channel: no stack
[   49.933133][ T5904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'.
[   50.011644][ T5910] bridge0: port 3(veth1_to_team) entered blocking state
[   50.014071][ T5910] bridge0: port 3(veth1_to_team) entered disabled state
[   50.016448][ T5910] veth1_to_team: entered allmulticast mode
[   50.020317][ T5910] veth1_to_team: entered promiscuous mode
[   50.022593][ T5910] bridge0: port 3(veth1_to_team) entered blocking state
[   50.024998][ T5910] bridge0: port 3(veth1_to_team) entered forwarding state
[   50.084121][ T5915] netlink: 176 bytes leftover after parsing attributes in process `syz.2.12'.
[   50.335169][ T5933] netlink: 'syz.1.22': attribute type 1 has an invalid length.
[   50.362712][ T5933] netlink: 17 bytes leftover after parsing attributes in process `syz.1.22'.
[   50.516060][ T5826] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3
[   50.757189][    C1] hrtimer: interrupt took 32954 ns
[   50.861870][ T5826] Bluetooth: hci2: Malformed LE Event: 0x0b
[   50.916361][ T5962] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.36'.
[   50.920737][ T5962] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   50.923745][ T5962] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   51.008082][ T5964] netlink: 'syz.2.36': attribute type 22 has an invalid length.
[   51.011214][ T5964] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.36'.
[   51.051248][ T5826] Bluetooth: hci0: command tx timeout
[   51.197473][ T5826] Bluetooth: hci2: command tx timeout
[   51.199860][ T5826] Bluetooth: hci1: command tx timeout
[   51.799592][ T5982] syzkaller0: entered promiscuous mode
[   51.801803][ T5982] syzkaller0: entered allmulticast mode
[   52.228896][ T5216] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[   52.583519][ T5999] netlink: 'syz.0.52': attribute type 15 has an invalid length.
[   52.585950][ T5999] netlink: 11206 bytes leftover after parsing attributes in process `syz.0.52'.
[   52.630546][ T6003] netlink: 'syz.0.54': attribute type 29 has an invalid length.
[   52.894760][ T6024] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.63'.
[   52.948837][ T6028] netlink: 'syz.2.66': attribute type 10 has an invalid length.
[   52.955054][ T6028] veth1_macvtap: left promiscuous mode
[   53.137343][ T5826] Bluetooth: hci0: command tx timeout
[   53.186812][ T6046] netdevsim netdevsim2: Firmware load for '/../file0' refused, path contains '..' component
[   53.279021][ T5826] Bluetooth: hci1: command tx timeout
[   53.279048][ T5216] Bluetooth: hci2: command tx timeout
[   53.302759][ T6052] syz.2.76 (6052) used greatest stack depth: 20056 bytes left
[   53.334232][ T6056] netlink: 'syz.0.79': attribute type 21 has an invalid length.
[   53.339191][ T6056] netlink: 128 bytes leftover after parsing attributes in process `syz.0.79'.
[   53.342228][ T6056] netlink: 3 bytes leftover after parsing attributes in process `syz.0.79'.
[   53.422813][ T6063] netlink: 'syz.0.82': attribute type 2 has an invalid length.
[   53.642925][ T6084] netlink: 'syz.0.91': attribute type 10 has an invalid length.
[   53.669509][ T6084] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   53.739349][ T6084] syz.0.91 (6084) used greatest stack depth: 19520 bytes left
[   54.403816][ T5216] Bluetooth: hci1: adv larger than maximum supported
[   54.511418][ T6126] netlink: 'syz.2.111': attribute type 3 has an invalid length.
[   54.752897][ T6137] netlink: 'syz.2.116': attribute type 41 has an invalid length.
[   54.764625][ T6137] __nla_validate_parse: 1 callbacks suppressed
[   54.764634][ T6137] netlink: 40 bytes leftover after parsing attributes in process `syz.2.116'.
[   54.864623][ T6144] warning: `syz.0.119' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   54.991635][ T6150] netlink: 132 bytes leftover after parsing attributes in process `syz.0.122'.
[   55.317431][ T5216] Bluetooth: hci0: command tx timeout
[   55.357800][ T5216] Bluetooth: hci2: command tx timeout
[   55.415370][ T5216] Bluetooth: hci1: command tx timeout
[   56.065562][ T6177] netlink: 17 bytes leftover after parsing attributes in process `syz.1.134'.
[   56.068573][ T6177] netlink: zone id is out of range
[   56.071704][ T6177] netlink: zone id is out of range
[   56.074147][ T6177] netlink: zone id is out of range
[   56.091107][ T6177] netlink: zone id is out of range
[   56.093356][ T6177] netlink: zone id is out of range
[   56.100764][ T6177] netlink: zone id is out of range
[   56.105438][ T6177] netlink: zone id is out of range
[   56.109450][ T6177] netlink: zone id is out of range
[   56.111605][ T6177] netlink: zone id is out of range
[   56.113753][ T6177] netlink: zone id is out of range
[   56.234828][ T6189] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.140'.
[   56.460326][ T6208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.149'.
[   56.510431][ T6212] netlink: 40 bytes leftover after parsing attributes in process `syz.1.149'.
[   57.408739][ T6250] pim6reg1: entered allmulticast mode
[   57.414393][ T6250] pim6reg1: left allmulticast mode
[   57.449686][ T6252] Zero length message leads to an empty skb
[   57.870144][ T6269] netlink: 'syz.2.177': attribute type 19 has an invalid length.
[   57.872931][ T6269] netlink: 40 bytes leftover after parsing attributes in process `syz.2.177'.
[   58.318016][   T51] cfg80211: failed to load regulatory.db
[   58.804162][ T6314] netlink: 'syz.1.199': attribute type 21 has an invalid length.
[   58.967026][ T6331] netlink: 60 bytes leftover after parsing attributes in process `syz.0.207'.
[   58.971401][ T6331] netlink: 60 bytes leftover after parsing attributes in process `syz.0.207'.
[   58.977557][ T6331] netlink: 60 bytes leftover after parsing attributes in process `syz.0.207'.
[   59.195087][ T6353] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.522912][ T5216] Bluetooth: hci1: unknown advertising packet type: 0xff
[   59.522934][ T5216] Bluetooth: hci1: unknown advertising packet type: 0x80
[   59.525442][ T5216] Bluetooth: hci1: unknown advertising packet type: 0x09
[   59.527950][ T5216] Bluetooth: hci1: Malformed LE Event: 0x02
[   59.648644][ T6367] syzkaller0: entered promiscuous mode
[   59.654618][ T6367] syzkaller0: entered allmulticast mode
[   60.190747][ T6400] netlink: 'syz.1.240': attribute type 4 has an invalid length.
[   60.272704][ T6406] netlink: 'syz.2.241': attribute type 13 has an invalid length.
[   60.278713][ T6406] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.241'.
[   60.447539][ T6414] syz.1.247 uses obsolete (PF_INET,SOCK_PACKET)
[   60.518407][ T5216] Bluetooth: hci2: Malformed LE Event: 0x0d
[   60.602510][ T6421] netdevsim netdevsim2 : renamed from netdevsim0 (while UP)
[   61.290856][ T6415] delete_channel: no stack
[   61.576629][ T6474] netlink: 'syz.2.271': attribute type 10 has an invalid length.
[   61.579785][ T6475] sctp: [Deprecated]: syz.1.274 (pid 6475) Use of struct sctp_assoc_value in delayed_ack socket option.
[   61.579785][ T6475] Use struct sctp_sack_info instead
[   62.406008][ T6474] team0: Port device wlan1 added
[   62.442362][ T6480] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.276'.
[   62.870780][ T5216] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4
[   62.974104][ T6508] net_ratelimit: 75 callbacks suppressed
[   62.974171][ T6508] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   62.981434][ T6508] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   63.089664][ T6520] nbd: must specify an index to disconnect
[   63.148611][ T6531] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.301'.
[   63.171029][ T6526] netlink: 'syz.1.299': attribute type 1 has an invalid length.
[   63.173683][ T6526] netlink: 'syz.1.299': attribute type 4 has an invalid length.
[   63.176329][ T6526] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.299'.
[   63.181607][ T6526] netlink: 'syz.1.299': attribute type 1 has an invalid length.
[   63.184222][ T6526] netlink: 'syz.1.299': attribute type 4 has an invalid length.
[   63.186648][ T6526] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.299'.
[   63.281379][ T6534] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[   63.334883][ T6534] syzkaller0: entered promiscuous mode
[   63.337094][ T6534] syzkaller0: entered allmulticast mode
[   65.255685][ T6604] netlink: 'syz.2.335': attribute type 10 has an invalid length.
[   65.260871][ T6604] netlink: 'syz.2.335': attribute type 19 has an invalid length.
[   65.263475][ T6604] netlink: 156 bytes leftover after parsing attributes in process `syz.2.335'.
[   65.518936][ T6628] netlink: 'syz.1.344': attribute type 21 has an invalid length.
[   65.527744][ T6624] netlink: 'syz.2.343': attribute type 39 has an invalid length.
[   65.659066][ T6639] netlink: 'syz.0.350': attribute type 13 has an invalid length.
[   65.662462][ T6639] netlink: 'syz.0.350': attribute type 58 has an invalid length.
[   65.665268][ T6639] netlink: 152 bytes leftover after parsing attributes in process `syz.0.350'.
[   65.712596][ T6643] netlink: 132 bytes leftover after parsing attributes in process `syz.1.351'.
[   66.066093][ T6661] netlink: 152 bytes leftover after parsing attributes in process `syz.2.360'.
[   70.960182][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.962327][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  123.830918][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  123.836653][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  123.840914][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  123.843894][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  123.846487][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  123.861005][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  123.863797][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  123.866379][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  123.869336][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  123.871856][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  123.923097][ T5826] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  123.925934][ T5826] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  123.929929][ T5826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  123.932635][ T5826] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  123.935491][ T5826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  125.918405][ T5826] Bluetooth: hci4: command tx timeout
[  125.920657][ T5826] Bluetooth: hci3: command tx timeout
[  125.997389][ T5835] Bluetooth: hci5: command tx timeout
[  127.997324][ T5835] Bluetooth: hci3: command tx timeout
[  127.999118][ T5835] Bluetooth: hci4: command tx timeout
[  128.077366][ T5835] Bluetooth: hci5: command tx timeout
[  130.077406][ T5826] Bluetooth: hci4: command tx timeout
[  130.080603][ T5835] Bluetooth: hci3: command tx timeout
[  130.158271][ T5835] Bluetooth: hci5: command tx timeout
[  132.157406][ T5835] Bluetooth: hci3: command tx timeout
[  132.159796][ T5835] Bluetooth: hci4: command tx timeout
[  132.237363][ T5826] Bluetooth: hci5: command tx timeout
[  132.400136][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.402905][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  142.862564][ T5835] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  142.865488][ T5835] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  142.869585][ T5835] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  142.872545][ T5835] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  142.875019][ T5835] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  142.970601][ T5835] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  142.973792][ T5835] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  142.976468][ T5835] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  142.981623][ T5835] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  142.984132][ T5835] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  144.957653][ T5835] Bluetooth: hci6: command tx timeout
[  145.037700][ T5835] Bluetooth: hci7: command tx timeout
[  147.037549][ T5835] Bluetooth: hci6: command tx timeout
[  147.119358][ T5835] Bluetooth: hci7: command tx timeout
[  149.117773][ T5835] Bluetooth: hci6: command tx timeout
[  149.197561][ T5835] Bluetooth: hci7: command tx timeout
[  151.197722][ T5835] Bluetooth: hci6: command tx timeout
[  151.277514][ T5835] Bluetooth: hci7: command tx timeout
[  170.336486][ T5835] Bluetooth: hci2: command 0x0406 tx timeout
[  170.338916][ T5835] Bluetooth: hci0: command 0x0406 tx timeout
[  170.341231][ T5835] Bluetooth: hci1: command 0x0406 tx timeout
[  171.487161][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  171.489346][    C1] rcu: 	1-....: (1 GPs behind) idle=6a0c/1/0x4000000000000000 softirq=16967/16969 fqs=5247
[  171.493636][    C1] rcu: 	         hardirqs   softirqs   csw/system
[  171.495616][    C1] rcu: 	 number:  1044978          0            0
[  171.497591][    C1] rcu: 	cputime:    24652      27837           89   ==> 52500(ms)
[  171.499962][    C1] rcu: 	(t=10502 jiffies g=9105 q=2642 ncpus=2)
[  171.501886][    C1] CPU: 1 UID: 0 PID: 6696 Comm: syz.2.377 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  171.501895][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  171.501899][    C1] RIP: 0010:rcu_read_unlock_special+0x87/0x4c0
[  171.501915][    C1] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 92 37 f8 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
[  171.501920][    C1] RSP: 0018:ffffc900001e05a0 EFLAGS: 00000206
[  171.501927][    C1] RAX: db2c4a174d2a9800 RBX: 1ffff9200003c0bc RCX: db2c4a174d2a9800
[  171.501932][    C1] RDX: 0000000000000002 RSI: ffffffff8d998701 RDI: ffffffff8be29f80
[  171.501936][    C1] RBP: ffffc900001e0698 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  171.501941][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffffffff8e144400
[  171.501945][    C1] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000002
[  171.501949][    C1] FS:  00007fcb99e2e6c0(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
[  171.501954][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  171.501959][    C1] CR2: 0000001b3010eff8 CR3: 000000003a168000 CR4: 00000000000006f0
[  171.501992][    C1] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000
[  171.501998][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  171.502002][    C1] Call Trace:
[  171.502006][    C1]  <IRQ>
[  171.502008][    C1]  ? __lock_acquire+0xab9/0xd20
[  171.502019][    C1]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  171.502061][    C1]  ? unwind_next_frame+0xa5/0x2390
[  171.502073][    C1]  __rcu_read_unlock+0x84/0xe0
[  171.502083][    C1]  ? unwind_next_frame+0xa5/0x2390
[  171.502094][    C1]  unwind_next_frame+0x19ae/0x2390
[  171.502105][    C1]  ? unwind_next_frame+0xa5/0x2390
[  171.502112][    C1]  ? irqentry_exit+0x6f/0x90
[  171.502124][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  171.502133][    C1]  arch_stack_walk+0x11c/0x150
[  171.502144][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  171.502154][    C1]  stack_trace_save+0x9c/0xe0
[  171.502162][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  171.502175][    C1]  ? __lock_acquire+0xab9/0xd20
[  171.502182][    C1]  kasan_save_track+0x3e/0x80
[  171.502192][    C1]  ? kasan_save_track+0x3e/0x80
[  171.502200][    C1]  ? kasan_save_free_info+0x46/0x50
[  171.502208][    C1]  ? __kasan_slab_free+0x62/0x70
[  171.502213][    C1]  ? kfree+0x18e/0x440
[  171.502219][    C1]  ? slab_free_after_rcu_debug+0x60/0x2a0
[  171.502227][    C1]  ? rcu_core+0xca8/0x1710
[  171.502233][    C1]  ? handle_softirqs+0x286/0x870
[  171.502240][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  171.502246][    C1]  ? irq_exit_rcu+0x9/0x30
[  171.502252][    C1]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  171.502260][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  171.502266][    C1]  ? raw_spin_rq_unlock_irq+0x13/0x90
[  171.502274][    C1]  ? __schedule+0x1948/0x4d00
[  171.502282][    C1]  ? preempt_schedule_irq+0xb5/0x150
[  171.502289][    C1]  ? irqentry_exit+0x6f/0x90
[  171.502314][    C1]  kasan_save_free_info+0x46/0x50
[  171.502323][    C1]  __kasan_slab_free+0x62/0x70
[  171.502329][    C1]  ? slab_free_after_rcu_debug+0x60/0x2a0
[  171.502337][    C1]  kfree+0x18e/0x440
[  171.502343][    C1]  ? rcu_core+0xc34/0x1710
[  171.502350][    C1]  slab_free_after_rcu_debug+0x60/0x2a0
[  171.502359][    C1]  ? __pfx_slab_free_after_rcu_debug+0x10/0x10
[  171.502366][    C1]  ? rcu_core+0xc34/0x1710
[  171.502373][    C1]  rcu_core+0xca8/0x1710
[  171.502388][    C1]  ? __pfx_rcu_core+0x10/0x10
[  171.502399][    C1]  ? sched_balance_domains+0x121/0x9e0
[  171.502408][    C1]  ? sched_balance_domains+0x8be/0x9e0
[  171.502417][    C1]  ? sched_balance_domains+0x121/0x9e0
[  171.502427][    C1]  handle_softirqs+0x286/0x870
[  171.502436][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  171.502446][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  171.502456][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  171.502467][    C1]  __irq_exit_rcu+0xca/0x1f0
[  171.502474][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  171.502486][    C1]  irq_exit_rcu+0x9/0x30
[  171.502492][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  171.502500][    C1]  </IRQ>
[  171.502502][    C1]  <TASK>
[  171.502505][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  171.502512][    C1] RIP: 0010:raw_spin_rq_unlock_irq+0x13/0x90
[  171.502521][    C1] Code: cc e8 f1 7d db 09 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 57 41 56 53 66 90 e8 44 0b de 09 e8 bf 9f 34 00 fb 5b <41> 5e 41 5f c3 cc cc cc cc cc f3 0f 1e fa 49 be 00 00 00 00 00 fc
[  171.502526][    C1] RSP: 0018:ffffc9000932e4c8 EFLAGS: 00000282
[  171.502532][    C1] RAX: db2c4a174d2a9800 RBX: ffff888021fe5dc0 RCX: db2c4a174d2a9800
[  171.502536][    C1] RDX: 0000000000000006 RSI: ffffffff8d998701 RDI: ffffffff8be29f80
[  171.502540][    C1] RBP: ffffc9000932e6f0 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  171.502545][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffff888021fe5640
[  171.502549][    C1] R13: dffffc0000000000 R14: ffff888021fe5640 R15: ffff888136639fc0
[  171.502562][    C1]  __schedule+0x1948/0x4d00
[  171.502574][    C1]  ? irqentry_enter+0x3d/0x60
[  171.502582][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  171.502594][    C1]  ? preempt_schedule_irq+0xb5/0x150
[  171.502604][    C1]  ? __pfx___schedule+0x10/0x10
[  171.502611][    C1]  ? irqentry_exit+0x74/0x90
[  171.502619][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  171.502635][    C1]  preempt_schedule_irq+0xb5/0x150
[  171.502643][    C1]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  171.502655][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  171.502663][    C1]  irqentry_exit+0x6f/0x90
[  171.502671][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  171.502677][    C1] RIP: 0010:__local_bh_enable_ip+0x135/0x1c0
[  171.502684][    C1] Code: 8b e8 ff f2 e8 09 65 66 8b 05 df 5f 1a 11 66 85 c0 75 5a bf 01 00 00 00 e8 e8 27 0b 00 e8 73 f9 41 00 fb 65 8b 05 bb 5f 1a 11 <85> c0 75 05 e8 f2 f5 ad ff 48 c7 04 24 0e 36 e0 45 4b c7 04 37 00
[  171.502689][    C1] RSP: 0018:ffffc9000932e860 EFLAGS: 00000286
[  171.502693][    C1] RAX: 0000000080000000 RBX: 0000000000000201 RCX: db2c4a174d2a9800
[  171.502697][    C1] RDX: 0000000000000006 RSI: ffffffff8d998701 RDI: ffffffff8be29f80
[  171.502701][    C1] RBP: ffffc9000932e8f0 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  171.502706][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffffffff8a21ac24
[  171.502710][    C1] R13: ffff88802c070e88 R14: dffffc0000000000 R15: 1ffff92001265d0c
[  171.502715][    C1]  ? addrconf_ifdown+0x694/0x1880
[  171.502731][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  171.502741][    C1]  ? addrconf_ifdown+0x694/0x1880
[  171.502752][    C1]  addrconf_ifdown+0x694/0x1880
[  171.502761][    C1]  ? __pfx_tls_dev_event+0x10/0x10
[  171.502779][    C1]  ? __pfx_addrconf_ifdown+0x10/0x10
[  171.502795][    C1]  addrconf_notify+0x1bc/0x1010
[  171.502805][    C1]  notifier_call_chain+0x1b6/0x3e0
[  171.502817][    C1]  netif_set_mtu_ext+0x438/0x620
[  171.502827][    C1]  ? __pfx_netif_set_mtu_ext+0x10/0x10
[  171.502834][    C1]  ? trace_call_bpf+0x5ba/0x850
[  171.502841][    C1]  ? trace_call_bpf+0xb7/0x850
[  171.502847][    C1]  ? __pfx_trace_call_bpf+0x10/0x10
[  171.502855][    C1]  ? __pfx_trace_call_bpf+0x10/0x10
[  171.502863][    C1]  ? validate_linkmsg+0x765/0x950
[  171.502875][    C1]  do_setlink+0x91a/0x41c0
[  171.502882][    C1]  ? perf_trace_run_bpf_submit+0x100/0x170
[  171.502893][    C1]  ? irqentry_enter+0x3d/0x60
[  171.502902][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  171.502912][    C1]  ? __pfx_do_setlink+0x10/0x10
[  171.502923][    C1]  ? irqentry_exit+0x74/0x90
[  171.502931][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  171.502942][    C1]  ? rtnl_newlink+0x8db/0x1c70
[  171.502952][    C1]  ? rtnl_newlink+0x8db/0x1c70
[  171.502963][    C1]  ? __mutex_trylock_common+0x153/0x260
[  171.502977][    C1]  ? __pfx___mutex_trylock_common+0x10/0x10
[  171.502987][    C1]  ? rcu_is_watching+0x15/0xb0
[  171.502995][    C1]  ? trace_contention_end+0x39/0x120
[  171.503007][    C1]  ? __mutex_lock+0x330/0xe80
[  171.503017][    C1]  ? __pfx_aa_get_newest_label+0x10/0x10
[  171.503052][    C1]  ? rtnl_newlink+0x8db/0x1c70
[  171.503062][    C1]  ? rcu_is_watching+0x15/0xb0
[  171.503070][    C1]  ? __pfx___mutex_lock+0x10/0x10
[  171.503083][    C1]  ? ns_capable+0x8a/0xf0
[  171.503098][    C1]  ? rtnl_link_get_net_capable+0x16a/0x350
[  171.503107][    C1]  rtnl_newlink+0x160b/0x1c70
[  171.503127][    C1]  ? __pfx_rtnl_newlink+0x10/0x10
[  171.503137][    C1]  ? trace_call_bpf+0xb7/0x850
[  171.503148][    C1]  ? trace_call_bpf+0xb7/0x850
[  171.503156][    C1]  ? trace_call_bpf+0xb7/0x850
[  171.503162][    C1]  ? trace_call_bpf+0x5ba/0x850
[  171.503168][    C1]  ? trace_call_bpf+0xb7/0x850
[  171.503175][    C1]  ? trace_call_bpf+0x5ba/0x850
[  171.503182][    C1]  ? __pfx_trace_call_bpf+0x10/0x10
[  171.503191][    C1]  ? __pfx_trace_call_bpf+0x10/0x10
[  171.503199][    C1]  ? perf_trace_run_bpf_submit+0x100/0x170
[  171.503210][    C1]  ? perf_trace_preemptirq_template+0x280/0x340
[  171.503219][    C1]  ? irqentry_enter+0x3d/0x60
[  171.503228][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  171.503243][    C1]  ? irqentry_exit+0x74/0x90
[  171.503251][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  171.503268][    C1]  ? __pfx_rtnl_newlink+0x10/0x10
[  171.503278][    C1]  rtnetlink_rcv_msg+0x7cf/0xb70
[  171.503289][    C1]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  171.503299][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  171.503307][    C1]  ? ref_tracker_free+0x63a/0x7d0
[  171.503316][    C1]  ? __copy_skb_header+0xa7/0x550
[  171.503324][    C1]  ? __pfx_ref_tracker_free+0x10/0x10
[  171.503333][    C1]  ? __skb_clone+0x63/0x7a0
[  171.503344][    C1]  netlink_rcv_skb+0x208/0x470
[  171.503352][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  171.503362][    C1]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  171.503374][    C1]  ? netlink_deliver_tap+0x2e/0x1b0
[  171.503385][    C1]  ? netlink_deliver_tap+0x2e/0x1b0
[  171.503394][    C1]  netlink_unicast+0x75c/0x8e0
[  171.503408][    C1]  netlink_sendmsg+0x805/0xb30
[  171.503419][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  171.503427][    C1]  ? aa_sock_msg_perm+0x94/0x160
[  171.503436][    C1]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  171.503444][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  171.503451][    C1]  __sock_sendmsg+0x21c/0x270
[  171.503462][    C1]  ____sys_sendmsg+0x505/0x830
[  171.503473][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[  171.503484][    C1]  ? import_iovec+0x74/0xa0
[  171.503493][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  171.503502][    C1]  ? __pfx____sys_sendmsg+0x10/0x10
[  171.503525][    C1]  ? __fget_files+0x2a/0x420
[  171.503532][    C1]  ? __fget_files+0x3a0/0x420
[  171.503544][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  171.503552][    C1]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  171.503570][    C1]  do_syscall_64+0xfa/0x3b0
[  171.503579][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.503585][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  171.503594][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.503600][    C1] RIP: 0033:0x7fcb98f8e9a9
[  171.503608][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  171.503612][    C1] RSP: 002b:00007fcb99e2e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  171.503619][    C1] RAX: ffffffffffffffda RBX: 00007fcb991b5fa0 RCX: 00007fcb98f8e9a9
[  171.503623][    C1] RDX: 0000000020004080 RSI: 0000200000000940 RDI: 000000000000000d
[  171.503627][    C1] RBP: 00007fcb99010d69 R08: 0000000000000000 R09: 0000000000000000
[  171.503631][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  171.503635][    C1] R13: 0000000000000000 R14: 00007fcb991b5fa0 R15: 00007ffe70783018
[  171.503646][    C1]  </TASK>
[  171.856639][    C1] sched: DL replenish lagged too much

VM DIAGNOSIS:
17:32:34  Registers:
info registers vcpu 0

CPU#0
RAX=89725bcc32979b00 RBX=ffffffff81975f18 RCX=89725bcc32979b00 RDX=0000000000000001
RSI=ffffffff8d998701 RDI=ffffffff8be29f80 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa1e8f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6e84f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055d8b8001028 CR3=000000000df38000 CR4=000006f0
DR0=0000200000000300 DR1=0000200000000300 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f98f4386d00
XMM02=0000000500000007 080008e000000001 XMM03=ff0409800305e096 1000088004010000
XMM04=0000000000000000 0000000000000017 XMM05=0000000000000000 000000000001df8a
XMM06=060168d200080009 e003001000000007 XMM07=0fffffff00000000 09c00300100009b0
XMM08=030fffffffffffff 0409a00300000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000003d RBX=000000000000003d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001df8d0
R8 =ffff888107778237 R9 =1ffff11020eef046 R10=dffffc0000000000 R11=ffffffff85471fa0
R12=dffffc0000000000 R13=ffffffff99af58b9 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff8547201c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fcb99e2e6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3010eff8 CR3=000000003a168000 CR4=000006f0
DR0=0000200000000300 DR1=0000200000000300 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fcb99186478 00007fcb99186450 XMM03=00007fcb99186488 00007fcb99186480
XMM04=00007fcb99ced100 00007fcb99186440 XMM05=00007fcb99186458 00007fcb991864a0
XMM06=00007fcb99186498 00007fcb99186490 XMM07=00007fcb99186488 00007fcb99186480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fcb99011ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
