last executing test programs:

17.096535621s ago: executing program 0 (id=231):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x700, 0x0, 0x0, 0x0}, 0x50)

17.096325292s ago: executing program 0 (id=232):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10004, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x9, 0x8, 0x4, 0x4009, 0xa}, 0x48)

16.548061499s ago: executing program 1 (id=239):
r0 = perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_devices(r1, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
socket$kcm(0xa, 0x1, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x3500000000000000)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8)
r7 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$inet(r7, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x4000804)
sendmsg$kcm(r7, 0x0, 0x0)
close(r7)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000200)=@raw=[@jmp={0x4, 0x0, 0xd, 0x1, 0x0, 0x0, 0x20}, @initr0, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90)

16.183358199s ago: executing program 0 (id=240):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = gettid()
sendmsg$unix(r0, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee01, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38, 0x4004}, 0x4840)

16.107796087s ago: executing program 0 (id=243):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9)
syz_clone(0x1004000, 0x0, 0x0, 0x0, 0x0, 0x0)

16.038158483s ago: executing program 0 (id=246):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000580)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r0, 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x69)

16.037905706s ago: executing program 2 (id=247):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

15.947877964s ago: executing program 2 (id=248):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1d00000009000000040000000900000000000200", @ANYRES32, @ANYBLOB="06000000000000000000000000010054b1db3ef30000000000b204b1d34e28245bb6f591a5875aa83991e590dbedbdb19fb5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000300"/28], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e00)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000030000000800000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000280), &(0x7f0000000040)=r2}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000001d80), &(0x7f0000001d40)=r1}, 0x20)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0xb, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x43, &(0x7f0000000a00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000a80), &(0x7f0000000ac0), 0x8, 0x77, 0x8, 0x8, &(0x7f0000000300)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f00000002c0)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480)="2d4624e18a8dc16a6e119d96f1ba18968af9fd86262abc151f6989706cc93a734d6cd48cd81b1f24af7f6784b68309d7dc777c53e28e", 0x36}], 0x2}, 0x200000fd)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
getpid()
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000280000000400"], 0x48)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x4)
recvmsg(r7, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=""/15, 0xf}, 0x0)
sendmsg$inet(r7, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r5, 0x0, 0x0}, 0x20)
sendmsg$inet(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20004000)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4005, @empty}, 0x10, 0x0}, 0x34004093)

15.768001374s ago: executing program 0 (id=249):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069001c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21)

15.666500017s ago: executing program 2 (id=250):
r0 = socket$kcm(0x2d, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1, 0x0, 0x1}, 0x18)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
close(r3)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)="d8001c00180081064e81f7050044fd56170d12a0b9b54570", 0x18}], 0x1}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r4})

15.665957035s ago: executing program 1 (id=251):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x3, 0x3, 0x5}, 0x10}, 0x94)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x9, 0x6, &(0x7f0000000240)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x2, 0x0, 0x6, 0xff, 0x0, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x5}, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080))

15.596027307s ago: executing program 2 (id=252):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0), 0x4)
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x25)
r2 = perf_event_open(&(0x7f0000001380)={0x2, 0x80, 0x0, 0x6, 0x1, 0xd8, 0x0, 0x1, 0x30100, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x400, 0x81}, 0x1540, 0x9, 0x0, 0x0, 0x9, 0xfb04, 0x0, 0x0, 0x200, 0x0, 0x2}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
perf_event_open(0x0, 0x0, 0x3, r2, 0x2)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x10000}, 0x106181, 0x4, 0x0, 0x5, 0x0, 0xc, 0x1}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext={0x1}, 0x20a0, 0x58, 0x80000000, 0x4, 0x2, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x6e8}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
close(0x3)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x1f)

15.595584365s ago: executing program 1 (id=253):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000080000000000000000000010095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='ext4_allocate_inode\x00', r0}, 0x10)
r2 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r2, r1, 0x0, 0x40, &(0x7f0000000080)='\xb2\v\x94_\xf0\x92\x8c\xbe\x1bK\x00_\xbbk_\\\xbd\xf1\xdcPH\xcb\x96*\b\x95c\xb5\xb0ON\xa8\xd858\x1d\x00\x88)\x90\xda\xe6\v\xed\xde\"\xe8\xb6\xfdm\x99x\x8c\xa4\xdc\x12nt\xa97\xf9\x94\xb4\xef'}, 0x30)

15.402369925s ago: executing program 1 (id=254):
socket$kcm(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0), 0x161)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2505, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f0000, 0x7f}, 0x80, 0x4, 0x0, 0x1, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x9)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = getpid()
sendmsg$unix(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0], 0x24}, 0x0)

15.208077517s ago: executing program 2 (id=255):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x42, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8910, &(0x7f0000000080))

15.095140864s ago: executing program 2 (id=256):
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x8, 0x1, 0x0, 0x7e, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0)
syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
write$cgroup_pid(r6, &(0x7f00000001c0), 0x12)
write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="2b70696473206aa4af0b"], 0x6)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x8)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100))
r7 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x4)
r8 = socket$kcm(0xa, 0x922000000003, 0x11)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x4, @perf_bp={&(0x7f0000000200)}, 0x0, 0x2, 0xfffffffe, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r8, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000000cc0)=@l2tp6={0xa, 0x0, 0x1000, @mcast1, 0x7, 0x83}, 0x80, &(0x7f0000000180)=[{0x0}], 0x1}, 0x800)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open$cgroup(&(0x7f0000000180)={0x1, 0x80, 0xf7, 0xfa, 0x0, 0x2, 0x0, 0x1, 0x8000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x100000, 0x2, 0xd, 0x1, 0x1, 0x4, 0xe, 0x0, 0xf31, 0x0, 0xfff}, 0xffffffffffffffff, 0x9, r7, 0x0)

10.952475795s ago: executing program 1 (id=257):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x1c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

10.952094283s ago: executing program 1 (id=258):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
close(0xffffffffffffffff)
bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r1, 0x0, 0x8080)
sendmsg$kcm(r1, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x20)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x9, 0x9, 0x2, 0x9, 0x42, 0xffffffffffffffff, 0x3}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{}, 0x0, &(0x7f00000007c0)='%pS    \x00', 0x2}, 0x20)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x40010040)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)}, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r2, &(0x7f0000000200), &(0x7f0000000580)=""/223}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff})
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x163001, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f00000001c0)=0x1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x30004001)
r5 = socket$kcm(0x10, 0x3, 0x10)
socket$kcm(0x2, 0x922000000001, 0x106)
sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)}], 0x1}, 0x20044080)
ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'})

0s ago: executing program 32 (id=258):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
close(0xffffffffffffffff)
bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r1, 0x0, 0x8080)
sendmsg$kcm(r1, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x20)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x9, 0x9, 0x2, 0x9, 0x42, 0xffffffffffffffff, 0x3}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{}, 0x0, &(0x7f00000007c0)='%pS    \x00', 0x2}, 0x20)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x40010040)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)}, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r2, &(0x7f0000000200), &(0x7f0000000580)=""/223}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff})
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x163001, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f00000001c0)=0x1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x30004001)
r5 = socket$kcm(0x10, 0x3, 0x10)
socket$kcm(0x2, 0x922000000001, 0x106)
sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)}], 0x1}, 0x20044080)
ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:12039' (ED25519) to the list of known hosts.
syzkaller login: [   41.031979][ T5754] cgroup: Unknown subsys name 'net'
[   41.141975][ T5754] cgroup: Unknown subsys name 'cpuset'
[   41.147083][ T5754] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.608580][ T5754] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.954733][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.959299][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.962844][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.966456][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.970273][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.983986][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.987526][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.990906][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.994492][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.997933][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   46.079875][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   46.083453][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   46.086927][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   46.093155][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   46.096695][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.183263][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   46.347286][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.351060][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.354214][ T5826] bridge_slave_0: entered allmulticast mode
[   46.359164][ T5826] bridge_slave_0: entered promiscuous mode
[   46.367701][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.370962][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.373990][ T5826] bridge_slave_1: entered allmulticast mode
[   46.377862][ T5826] bridge_slave_1: entered promiscuous mode
[   46.384174][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   46.440936][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.455084][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.510207][ T5826] team0: Port device team_slave_0 added
[   46.518980][ T5826] team0: Port device team_slave_1 added
[   46.530137][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   46.559836][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.562578][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.565151][ T5830] bridge_slave_0: entered allmulticast mode
[   46.568297][ T5830] bridge_slave_0: entered promiscuous mode
[   46.589067][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.591922][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.602634][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.607666][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.610358][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.612637][ T5830] bridge_slave_1: entered allmulticast mode
[   46.615294][ T5830] bridge_slave_1: entered promiscuous mode
[   46.636078][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.639771][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.650457][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.683781][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.694145][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.744682][ T5830] team0: Port device team_slave_0 added
[   46.747052][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.750964][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.753735][ T5835] bridge_slave_0: entered allmulticast mode
[   46.757091][ T5835] bridge_slave_0: entered promiscuous mode
[   46.763845][ T5826] hsr_slave_0: entered promiscuous mode
[   46.766198][ T5826] hsr_slave_1: entered promiscuous mode
[   46.777703][ T5830] team0: Port device team_slave_1 added
[   46.785657][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.789283][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.791935][ T5835] bridge_slave_1: entered allmulticast mode
[   46.795563][ T5835] bridge_slave_1: entered promiscuous mode
[   46.840971][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.843728][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.854202][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.863338][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.866651][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.869437][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.878869][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.891382][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.936544][ T5835] team0: Port device team_slave_0 added
[   46.956063][ T5830] hsr_slave_0: entered promiscuous mode
[   46.958828][ T5830] hsr_slave_1: entered promiscuous mode
[   46.961285][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.963938][ T5830] Cannot create hsr debugfs directory
[   46.971305][ T5835] team0: Port device team_slave_1 added
[   47.028759][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.031067][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.039749][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.053564][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.056214][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.065013][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.146519][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   47.156996][ T5835] hsr_slave_0: entered promiscuous mode
[   47.160468][ T5835] hsr_slave_1: entered promiscuous mode
[   47.162642][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.165077][ T5835] Cannot create hsr debugfs directory
[   47.173673][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.183362][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.191300][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   47.268176][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   47.279630][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   47.295179][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   47.303435][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   47.349191][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   47.354403][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   47.364195][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   47.368908][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.407828][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.434437][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   47.444659][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.447028][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.463122][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.465358][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.477351][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.489865][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.515055][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   47.520443][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   47.526088][ T1199] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.528393][ T1199] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.541353][ T1199] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.543742][ T1199] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.556679][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.559058][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.563383][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.565616][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.631845][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   47.647382][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.681975][ T5826] veth0_vlan: entered promiscuous mode
[   47.700028][ T5826] veth1_vlan: entered promiscuous mode
[   47.725694][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.734204][ T5826] veth0_macvtap: entered promiscuous mode
[   47.745515][ T5826] veth1_macvtap: entered promiscuous mode
[   47.763677][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.773480][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.786208][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.789779][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.792593][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.795437][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.811864][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.816592][ T5835] veth0_vlan: entered promiscuous mode
[   47.842162][ T5835] veth1_vlan: entered promiscuous mode
[   47.867615][ T3129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.874805][ T3129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.892357][  T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.895485][  T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.907552][ T5835] veth0_macvtap: entered promiscuous mode
[   47.920404][ T5830] veth0_vlan: entered promiscuous mode
[   47.925458][ T5830] veth1_vlan: entered promiscuous mode
[   47.931529][ T5835] veth1_macvtap: entered promiscuous mode
[   47.946444][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.954808][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.970902][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.977455][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.981588][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.984712][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.987535][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.007929][ T5830] veth0_macvtap: entered promiscuous mode
[   48.010166][ T5220] Bluetooth: hci0: command tx timeout
[   48.013005][ T5830] veth1_macvtap: entered promiscuous mode
[   48.040900][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.052993][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.069440][ T5830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.072881][ T5830] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.075919][ T5830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.083423][ T5830] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.089277][ T5220] Bluetooth: hci1: command tx timeout
[   48.118143][  T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.122140][  T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.164398][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.168284][ T5220] Bluetooth: hci2: command tx timeout
[   48.170703][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.217585][ T5898] syzkaller0: entered promiscuous mode
[   48.220874][ T5898] syzkaller0: entered allmulticast mode
[   48.230083][  T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.238846][  T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.255145][ T5900] netlink: 'syz.0.1': attribute type 21 has an invalid length.
[   48.284648][ T5900] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1'.
[   48.306897][  T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.310176][  T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.314306][ T5902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6'.
[   49.036115][ T5912] syz.1.9 uses obsolete (PF_INET,SOCK_PACKET)
[   49.142849][ T5220] Bluetooth: hci0: unexpected event 0x2c length: 82 > 17
[   49.142873][ T5220] Bluetooth: hci0: Ignoring connect complete event for invalid link type
[   49.331842][ T5936] netlink: 'syz.2.22': attribute type 21 has an invalid length.
[   49.455577][ T5944] syzkaller0: entered promiscuous mode
[   49.457718][ T5944] syzkaller0: entered allmulticast mode
[   49.557083][ T5220] Bluetooth: hci1: unexpected subevent 0x01 length: 14 < 18
[   50.080307][ T5220] Bluetooth: hci0: command tx timeout
[   50.159190][ T5220] Bluetooth: hci1: command tx timeout
[   50.196025][ T5966] netlink: 128 bytes leftover after parsing attributes in process `syz.2.36'.
[   50.199772][ T5966] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   50.248340][ T5220] Bluetooth: hci2: command tx timeout
[   50.332981][ T5978] netlink: 14 bytes leftover after parsing attributes in process `syz.2.42'.
[   50.337470][ T5978] openvswitch: netlink: Message has 4 unknown bytes.
[   50.443701][ T5980] netlink: 'syz.2.43': attribute type 10 has an invalid length.
[   50.446112][ T5980] netlink: 56823 bytes leftover after parsing attributes in process `syz.2.43'.
[   50.472088][ T5982] netlink: 'syz.2.44': attribute type 8 has an invalid length.
[   50.474511][ T5982] netlink: 'syz.2.44': attribute type 3 has an invalid length.
[   50.476821][ T5982] netlink: 153952 bytes leftover after parsing attributes in process `syz.2.44'.
[   50.726053][ T6009] netlink: 'syz.2.57': attribute type 10 has an invalid length.
[   50.732795][ T6009] netlink: 40 bytes leftover after parsing attributes in process `syz.2.57'.
[   50.735768][ T6009] dummy0: entered promiscuous mode
[   50.743288][ T6009] bridge0: port 3(dummy0) entered blocking state
[   50.746220][ T6009] bridge0: port 3(dummy0) entered disabled state
[   50.752088][ T6009] dummy0: entered allmulticast mode
[   50.757086][ T6009] bridge0: port 3(dummy0) entered blocking state
[   50.759716][ T6009] bridge0: port 3(dummy0) entered forwarding state
[   50.786816][    C1] hrtimer: interrupt took 62287 ns
[   51.273387][ T6024] warning: `syz.0.64' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   51.300713][ T6026] C: renamed from team_slave_0 (while UP)
[   51.452087][ T6021] Driver unsupported XDP return value 0 on prog  (id 10) dev N/A, expect packet loss!
[   51.457681][ T6026] netlink: 'syz.0.65': attribute type 3 has an invalid length.
[   51.466083][ T6026] netlink: 'syz.0.65': attribute type 1 has an invalid length.
[   51.468839][ T6026] netlink: 116 bytes leftover after parsing attributes in process `syz.0.65'.
[   51.574537][ T5220] Bluetooth: hci0: ACL packet for unknown connection handle 0
[   51.945625][ T6048] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[   52.050853][ T6055] netlink: 160 bytes leftover after parsing attributes in process `syz.1.78'.
[   52.158944][ T5220] Bluetooth: hci0: command tx timeout
[   52.238584][ T5220] Bluetooth: hci1: command tx timeout
[   52.318429][ T5220] Bluetooth: hci2: command tx timeout
[   52.394050][ T6065] netlink: 'syz.0.82': attribute type 1 has an invalid length.
[   52.396596][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.82'.
[   52.433251][ T5279] udevd[5279]: worker [5833] terminated by signal 33 (Unknown signal 33)
[   52.436677][ T5279] udevd[5279]: worker [5833] failed while handling '/devices/virtual/block/loop0'
[   53.385649][ T6089] netlink: 'syz.0.93': attribute type 10 has an invalid length.
[   53.391779][ T6089] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.396598][ T6089] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.453049][ T6089] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.455839][ T6089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.459253][ T6089] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.462521][ T6089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.491345][ T6089] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   53.505283][ T6089] syz.0.93 (6089) used greatest stack depth: 19920 bytes left
[   53.557236][ T6106] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.100'.
[   53.785480][ T6122] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[   53.787750][ T6122] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[   54.261857][ T5220] Bluetooth: hci0: command tx timeout
[   54.318868][ T5220] Bluetooth: hci1: command tx timeout
[   54.416072][ T5220] Bluetooth: hci2: command tx timeout
[   54.450626][ T6143] tap0: tun_chr_ioctl cmd 1074025672
[   54.452375][ T6143] tap0: ignored: set checksum enabled
[   54.509955][ T6149] netlink: 'syz.1.119': attribute type 21 has an invalid length.
[   54.512510][ T6149] IPv6: NLM_F_CREATE should be specified when creating new route
[   54.515064][ T6149] IPv6: Can't replace route, no match found
[   54.602718][ T6159] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   54.643871][ T6161] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   54.646486][ T6161] IPv6: NLM_F_CREATE should be set when creating new route
[   54.649095][ T6161] IPv6: NLM_F_CREATE should be set when creating new route
[   54.651740][ T6161] IPv6: NLM_F_CREATE should be set when creating new route
[   54.842810][ T6178] Zero length message leads to an empty skb
[   55.523928][ T6181] netlink: 176 bytes leftover after parsing attributes in process `syz.0.133'.
[   55.782408][ T6191] netlink: 'syz.2.138': attribute type 19 has an invalid length.
[   55.793122][ T6193] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.139'.
[   55.800029][ T6195] netlink: 'syz.1.140': attribute type 1 has an invalid length.
[   55.803157][ T6195] netlink: 'syz.1.140': attribute type 3 has an invalid length.
[   55.806203][ T6195] netlink: 132 bytes leftover after parsing attributes in process `syz.1.140'.
[   56.123815][ T6225] netlink: 60 bytes leftover after parsing attributes in process `syz.1.153'.
[   56.127795][ T6222] netlink: 60 bytes leftover after parsing attributes in process `syz.1.153'.
[   56.134920][ T6222] netlink: 60 bytes leftover after parsing attributes in process `syz.1.153'.
[   56.194577][ T6231] netlink: 176 bytes leftover after parsing attributes in process `syz.2.157'.
[   56.530832][ T6246] netlink: 168 bytes leftover after parsing attributes in process `syz.0.164'.
[   57.397764][ T6272] netlink: 'syz.1.176': attribute type 21 has an invalid length.
[   57.402159][ T6272] netlink: 'syz.1.176': attribute type 15 has an invalid length.
[   57.404876][ T6272] netlink: 156 bytes leftover after parsing attributes in process `syz.1.176'.
[   57.408139][ T6272] IPv6: NLM_F_CREATE should be specified when creating new route
[   57.411216][ T6272] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   57.413783][ T6272] IPv6: NLM_F_CREATE should be set when creating new route
[   57.416345][ T6272] IPv6: NLM_F_CREATE should be set when creating new route
[   57.418933][ T6272] IPv6: NLM_F_CREATE should be set when creating new route
[   60.059137][ T6367] __nla_validate_parse: 3 callbacks suppressed
[   60.059147][ T6367] netlink: 15998 bytes leftover after parsing attributes in process `syz.0.220'.
[   60.272881][ T6384] netlink: 144 bytes leftover after parsing attributes in process `syz.2.228'.
[   60.863511][ T6403] macvtap0: refused to change device tx_queue_len
[   61.431811][ T6417] cgroup: fork rejected by pids controller in /syz0
[   61.751277][ T5850] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.801813][ T5850] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.860901][ T5850] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.906618][ T6437] syzkaller1: tun_chr_ioctl cmd 1074025673
[   61.951262][ T5850] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.207762][ T5850] bridge_slave_1: left allmulticast mode
[   62.210833][ T5850] bridge_slave_1: left promiscuous mode
[   62.213609][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.217460][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.221549][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.224273][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.224707][ T5850] bridge_slave_0: left allmulticast mode
[   62.229060][ T5850] bridge_slave_0: left promiscuous mode
[   62.231002][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.233596][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.237762][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.358570][ T5850] bond0 (unregistering): (slave bridge0): Releasing backup interface
[   62.429236][ T5850] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   62.434186][ T5850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   62.437874][ T5850] bond0 (unregistering): Released all slaves
[   65.287627][ T5839] Bluetooth: hci2: command tx timeout
[   65.738516][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 2849498522 wd_nsec: 2849498608
[   67.364654][ T5839] Bluetooth: hci2: command tx timeout
[   69.478347][ T5839] Bluetooth: hci2: command tx timeout
[   71.518079][ T5839] Bluetooth: hci2: command tx timeout
[   72.201273][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 5941855583 wd_nsec: 5941839716
[   74.595022][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   74.598043][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   77.852055][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   77.855460][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   77.859303][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   77.879522][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   77.882890][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   77.885820][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   77.893542][ T6471] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   77.897587][ T6471] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   77.901711][ T6471] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   77.904877][ T6471] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   79.919154][ T5220] Bluetooth: hci3: command tx timeout
[   79.922626][ T6471] Bluetooth: hci4: command tx timeout
[   81.998219][ T6471] Bluetooth: hci4: command tx timeout
[   82.000601][ T6471] Bluetooth: hci3: command tx timeout
[   84.079530][ T5220] Bluetooth: hci3: command tx timeout
[   84.081979][ T5220] Bluetooth: hci4: command tx timeout
[   86.158117][ T6471] Bluetooth: hci4: command tx timeout
[   86.159931][ T6471] Bluetooth: hci3: command tx timeout
[  122.315978][ T6471] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  122.322594][ T6471] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  122.325780][ T6471] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  122.330248][ T6471] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  122.332780][ T6471] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  124.398074][ T6471] Bluetooth: hci5: command tx timeout
[  126.478129][ T6471] Bluetooth: hci5: command tx timeout
[  128.558140][ T6471] Bluetooth: hci5: command tx timeout
[  130.638215][ T6471] Bluetooth: hci5: command tx timeout
[  138.441780][ T5220] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  138.444775][ T5220] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  138.447431][ T5220] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  138.454122][ T5220] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  138.456685][ T5220] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  138.498326][ T5220] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  138.508170][ T5220] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  138.510822][ T5220] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  138.513459][ T5220] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  138.515964][ T5220] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  140.481544][ T6471] Bluetooth: hci6: command tx timeout
[  140.558132][ T6471] Bluetooth: hci7: command tx timeout
[  142.558131][ T6471] Bluetooth: hci6: command tx timeout
[  142.638603][ T6471] Bluetooth: hci7: command tx timeout
[  144.641802][ T6471] Bluetooth: hci6: command tx timeout
[  144.718123][ T6471] Bluetooth: hci7: command tx timeout
[  146.718105][ T6471] Bluetooth: hci6: command tx timeout
[  146.798130][ T6471] Bluetooth: hci7: command tx timeout
[  167.488012][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  167.490385][    C1] rcu: 	1-....: (10499 ticks this GP) idle=91b4/1/0x4000000000000000 softirq=14942/14944 fqs=4917
[  167.495182][    C1] rcu: 	         hardirqs   softirqs   csw/system
[  167.497418][    C1] rcu: 	 number:  1060357          0            0
[  167.499690][    C1] rcu: 	cputime:    33754      18745           43   ==> 52510(ms)
[  167.502349][    C1] rcu: 	(t=10502 jiffies g=8085 q=4014 ncpus=2)
[  167.504538][    C1] CPU: 1 UID: 0 PID: 6449 Comm: syz.2.256 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  167.504547][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  167.504551][    C1] RIP: 0010:lock_acquire+0x175/0x360
[  167.504562][    C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 cb de 01 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e
[  167.504567][    C1] RSP: 0018:ffffc900001dfc98 EFLAGS: 00000206
[  167.504575][    C1] RAX: 59e5c4938c675a00 RBX: 0000000000000000 RCX: 59e5c4938c675a00
[  167.504579][    C1] RDX: 0000000000000000 RSI: ffffffff8db863e2 RDI: ffffffff8be29f80
[  167.504584][    C1] RBP: ffffffff8172aae5 R08: 0000000000000000 R09: ffffffff8172aae5
[  167.504588][    C1] R10: ffffc900001dfe58 R11: ffffffff81acf520 R12: 0000000000000002
[  167.504592][    C1] R13: ffffffff8e13f0a0 R14: 0000000000000000 R15: 0000000000000246
[  167.504596][    C1] FS:  00007fafa31ff6c0(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
[  167.504601][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  167.504605][    C1] CR2: 0000001b3030dff8 CR3: 000000010488c000 CR4: 00000000000006f0
[  167.504630][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  167.504635][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000602
[  167.504639][    C1] Call Trace:
[  167.504642][    C1]  <IRQ>
[  167.504647][    C1]  ? unwind_next_frame+0xa5/0x2390
[  167.504656][    C1]  ? __kasan_kmalloc+0x93/0xb0
[  167.504663][    C1]  ? unwind_next_frame+0xa5/0x2390
[  167.504670][    C1]  unwind_next_frame+0xc2/0x2390
[  167.504677][    C1]  ? unwind_next_frame+0xa5/0x2390
[  167.504686][    C1]  ? unwind_next_frame+0xa5/0x2390
[  167.504693][    C1]  ? kasan_save_track+0x3e/0x80
[  167.504704][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  167.504713][    C1]  arch_stack_walk+0x11c/0x150
[  167.504723][    C1]  ? __kasan_kmalloc+0x93/0xb0
[  167.504731][    C1]  stack_trace_save+0x9c/0xe0
[  167.504739][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  167.504754][    C1]  ? memset_orig+0x4e/0xb0
[  167.504766][    C1]  kasan_save_track+0x3e/0x80
[  167.504775][    C1]  ? kasan_save_track+0x3e/0x80
[  167.504783][    C1]  ? __kasan_kmalloc+0x93/0xb0
[  167.504805][    C1]  __kasan_kmalloc+0x93/0xb0
[  167.504812][    C1]  __kmalloc_noprof+0x27a/0x4f0
[  167.504819][    C1]  ? cfg80211_inform_single_bss_data+0x905/0x1ac0
[  167.504830][    C1]  cfg80211_inform_single_bss_data+0x905/0x1ac0
[  167.504841][    C1]  ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10
[  167.504860][    C1]  cfg80211_inform_bss_data+0x1fb/0x3b20
[  167.504871][    C1]  ? do_raw_spin_unlock+0x4d/0x240
[  167.504881][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  167.504888][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  167.504899][    C1]  ? __pfx_cfg80211_inform_bss_data+0x10/0x10
[  167.504908][    C1]  ? ktime_get+0x3e/0x1f0
[  167.504917][    C1]  ? ktime_get+0x3e/0x1f0
[  167.504926][    C1]  ? ktime_get+0x3e/0x1f0
[  167.504934][    C1]  ? ktime_get+0x3e/0x1f0
[  167.504942][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  167.504950][    C1]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  167.504997][    C1]  ? ieee80211_bss_info_update+0x2dc/0x9e0
[  167.505009][    C1]  cfg80211_inform_bss_frame_data+0x3d7/0x730
[  167.505019][    C1]  ? ieee80211_bss_info_update+0x2dc/0x9e0
[  167.505028][    C1]  ieee80211_bss_info_update+0x746/0x9e0
[  167.505038][    C1]  ? __pfx_ieee80211_bss_info_update+0x10/0x10
[  167.505050][    C1]  ? ieee80211_get_channel_khz+0x15b/0x8a0
[  167.505059][    C1]  ieee80211_scan_rx+0x593/0xa20
[  167.505070][    C1]  ieee80211_rx_list+0x22fc/0x2d80
[  167.505078][    C1]  ? hrtimer_interrupt+0x889/0xaa0
[  167.505088][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  167.505098][    C1]  ? __pfx_ieee80211_rx_list+0x10/0x10
[  167.505110][    C1]  ? ieee80211_rx_napi+0xca/0x3d0
[  167.505118][    C1]  ? ieee80211_rx_napi+0xca/0x3d0
[  167.505130][    C1]  ? ieee80211_rx_napi+0xca/0x3d0
[  167.505137][    C1]  ieee80211_rx_napi+0x1a8/0x3d0
[  167.505146][    C1]  ? __pfx_ieee80211_rx_napi+0x10/0x10
[  167.505156][    C1]  ? skb_dequeue+0x10e/0x150
[  167.505167][    C1]  ieee80211_handle_queued_frames+0xe8/0x1f0
[  167.505177][    C1]  tasklet_action_common+0x36c/0x580
[  167.505188][    C1]  ? __pfx_tasklet_action_common+0x10/0x10
[  167.505198][    C1]  ? workqueue_softirq_action+0xd4/0x150
[  167.505208][    C1]  handle_softirqs+0x286/0x870
[  167.505216][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  167.505225][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  167.505234][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  167.505244][    C1]  __irq_exit_rcu+0xca/0x1f0
[  167.505251][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  167.505261][    C1]  irq_exit_rcu+0x9/0x30
[  167.505267][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  167.505275][    C1]  </IRQ>
[  167.505278][    C1]  <TASK>
[  167.505280][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  167.505287][    C1] RIP: 0010:generic_exec_single+0x481/0x500
[  167.505294][    C1] Code: 75 11 e8 62 7f 0b 00 48 85 db 75 16 e8 58 7f 0b 00 eb 15 e8 51 7f 0b 00 e8 ac ea b9 09 48 85 db 74 ea e8 42 7f 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 66 43 c7 44 2c
[  167.505299][    C1] RSP: 0018:ffffc90008a279c0 EFLAGS: 00000246
[  167.505305][    C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000080000
[  167.505309][    C1] RDX: ffffc9000856a000 RSI: 0000000000000286 RDI: 0000000000000287
[  167.505313][    C1] RBP: ffffc90008a27a90 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  167.505317][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 1ffff92001144f3c
[  167.505321][    C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92001144f5d
[  167.505332][    C1]  ? __pfx_remote_function+0x10/0x10
[  167.505342][    C1]  ? __pfx_generic_exec_single+0x10/0x10
[  167.505350][    C1]  ? __pfx___might_resched+0x10/0x10
[  167.505357][    C1]  ? smp_call_function_single+0xa0/0x590
[  167.505366][    C1]  smp_call_function_single+0x351/0x590
[  167.505372][    C1]  ? __pfx_remote_function+0x10/0x10
[  167.505382][    C1]  ? __pfx_smp_call_function_single+0x10/0x10
[  167.505389][    C1]  ? __pfx_remote_function+0x10/0x10
[  167.505402][    C1]  perf_install_in_context+0x593/0x8f0
[  167.505413][    C1]  ? irqentry_exit+0x74/0x90
[  167.505421][    C1]  ? __pfx_perf_install_in_context+0x10/0x10
[  167.505430][    C1]  ? __pfx___perf_install_in_context+0x10/0x10
[  167.505441][    C1]  ? __se_sys_perf_event_open+0x126f/0x1d70
[  167.505450][    C1]  ? perf_event__header_size+0x168/0x230
[  167.505457][    C1]  __se_sys_perf_event_open+0x193a/0x1d70
[  167.505470][    C1]  ? __pfx___se_sys_perf_event_open+0x10/0x10
[  167.505483][    C1]  ? rcu_is_watching+0x15/0xb0
[  167.505493][    C1]  ? do_syscall_64+0xbe/0x3b0
[  167.505500][    C1]  ? __x64_sys_perf_event_open+0x20/0xc0
[  167.505510][    C1]  do_syscall_64+0xfa/0x3b0
[  167.505518][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.505524][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  167.505532][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.505538][    C1] RIP: 0033:0x7fafa238e9a9
[  167.505545][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  167.505550][    C1] RSP: 002b:00007fafa31ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  167.505556][    C1] RAX: ffffffffffffffda RBX: 00007fafa25b5fa0 RCX: 00007fafa238e9a9
[  167.505560][    C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000040
[  167.505564][    C1] RBP: 00007fafa2410d69 R08: 0000000000000000 R09: 0000000000000000
[  167.505568][    C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  167.505572][    C1] R13: 0000000000000000 R14: 00007fafa25b5fa0 R15: 00007fff33b36348
[  167.505581][    C1]  </TASK>
[  167.768271][    C1] sched: DL replenish lagged too much

VM DIAGNOSIS:
17:39:28  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000001 RBX=0000000000000000 RCX=5d080e40c08f6200 RDX=0000000000000000
RSI=ffffffff8db863e2 RDI=ffffffff8be29f80 RBP=00000000ffffffff RSP=ffffc90000127a78
R8 =ffffffff8fa1e8f7 R9 =1ffffffff1f43d1e R10=dffffc0000000000 R11=fffffbfff1f43d1f
R12=0000000000000246 R13=ffff88801c6c3980 R14=ffffffff8e13f0a0 R15=dffffc0000000000
RIP=ffffffff8b6e8d13 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000560fa58e3e08 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f3616986d00
XMM02=1000060100000015 0002b00300000000 XMM03=0788030008000780 0340100002800404
XMM04=0000000000000000 000000000000000e XMM05=0000000000000000 000000000001df8a
XMM06=d00308100007c003 0010000700000017 XMM07=100007a000000000 07980303fe020007
XMM08=96030c0200079403 0002000700000016 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000068 RBX=0000000000000068 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001defd0
R8 =ffff888106b28237 R9 =1ffff11020d65046 R10=dffffc0000000000 R11=ffffffff85471fa0
R12=dffffc0000000000 R13=ffffffff99af58b4 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff8547201c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fafa31ff6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3030dff8 CR3=000000010488c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000602
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fafa2586478 00007fafa2586450 XMM03=00007fafa2586488 00007fafa2586480
XMM04=00007fafa30ed100 00007fafa2586440 XMM05=00007fafa2586458 00007fafa25864a0
XMM06=00007fafa2586498 00007fafa2586490 XMM07=00007fafa2586488 00007fafa2586480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fafa2411ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
