last executing test programs:

17.573783394s ago: executing program 1 (id=151):
r0 = socket$kcm(0x10, 0x2, 0x0)
close(r0)
r1 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$inet(r1, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}, 0x8000)
sendmsg$inet(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000580)="914781cba1", 0xffe3}], 0x2}, 0x48800)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="0e3677", 0x3}], 0x1}, 0x4008002)

17.503296313s ago: executing program 1 (id=153):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9}, 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x0, 0x2b, 0xfffffbff, 0x3, 0x2, 0x8000000, 0x7, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0763707573740153646370750806"], 0x12)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x7400}, 0x4050)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00', 0x20})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f9, &(0x7f0000000080))
r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000900"/20, @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x1f, 0x14, &(0x7f0000000600)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x10000, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2006}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0)
ioctl$TUNGETFEATURES(r5, 0x800454cf, &(0x7f0000000240))
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018800cd75f56cb000000000000001c0000000c0000da48000000000000000400000d00000000"], 0x0, 0x26}, 0x28)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffd}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}, 0x40012022)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r6, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f00000027c0)=""/4096, 0x1000}}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000400), &(0x7f0000000440)='%pi6   \x00'}, 0x20)

17.143212213s ago: executing program 1 (id=157):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xce, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x7, 0x80}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x6, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44}, 0x28)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008804)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ec0)}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x32600)
socket$kcm(0x2, 0x1000000000000005, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

16.914094629s ago: executing program 1 (id=164):
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc1)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d184925922333211d168ab0f6e1081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad35ef06", 0x53}], 0x1}, 0x0)
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4)

16.711951777s ago: executing program 1 (id=165):
socketpair(0x24, 0xa, 0x3ff, &(0x7f0000000600))

16.695873412s ago: executing program 1 (id=167):
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000c00)=ANY=[], 0x5c8}, 0xf7e5)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000000), 0xff7b)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r1}, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000300)='memory.swap.max\x00', 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080c00bdad0140", 0x58}], 0x1}, 0xff0f000000008080)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macvlan0\x00', 0x1})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8924, &(0x7f0000000080))

16.29333689s ago: executing program 2 (id=178):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@map=r2, r2, 0x36, 0x2008, 0x0, @value=r2}, 0x20)

16.293004242s ago: executing program 2 (id=179):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b0ad25a80648c2594f91824fc60100c064001000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000)

16.243704654s ago: executing program 2 (id=181):
r0 = syz_clone(0x20800000, 0x0, 0x700, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12)
r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000040)=0x1, 0x12)

16.172550974s ago: executing program 2 (id=182):
r0 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x2c}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000880)='B', 0x1}], 0x1}, 0x0)

16.172148461s ago: executing program 2 (id=183):
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000200)=[{0x10, 0x84, 0x8}], 0x10}, 0x41)

16.090848872s ago: executing program 2 (id=184):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r5 = socket$kcm(0x29, 0x5, 0x0)
write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf, 0x1a500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x6, @perf_bp={0x0, 0xb}, 0x105c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x25, 0x1, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x400, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7fffffffffffffff, 0x1}, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x4402000a, 0x4, 0x0, 0x800, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)={@ifindex, r4, 0x22, 0x1b, r4, @void, @value=r4}, 0x20)
r6 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890c, &(0x7f0000000000))
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f00000000c0), 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x72)
bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0)
r7 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r7, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x13, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x56}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa5e}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ldst={0x3, 0x0, 0x2, 0xd, 0x2, 0x8, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r2}]}, &(0x7f00000002c0)='GPL\x00', 0xff, 0xb9, &(0x7f00000004c0)=""/185, 0x41000, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680), &(0x7f0000000700), 0x10, 0x4b1f}, 0x94)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x4004800)
write$cgroup_devices(r1, &(0x7f00000000c0)={'b', ' *:* ', 'wm\x00'}, 0x9)

16.089371581s ago: executing program 0 (id=185):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$tipc(r0, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[], 0x50)
write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r1 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r1, 0x1, 0x7, 0x0, 0x0)
sendmsg$kcm(r1, 0x0, 0x20000800)
close(0x3)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x80)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000140081044e81f782db44b904021f080211000000040000a118000200e000000114000e1208000f0100810401a80016ea1f000840032e5f54c9201114000000000000000000000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c01000000000000e2cb090000001fb79101005ee4001b14620d9de656d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4009044)

16.044006037s ago: executing program 0 (id=186):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d000a117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

16.043524769s ago: executing program 0 (id=187):
socket$kcm(0x11, 0x200000000000002, 0x300)
socket$kcm(0x11, 0x200000000000002, 0x300)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001c80)={0x0, 0x0, 0x0}, 0x2000)

15.955854953s ago: executing program 0 (id=188):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20004000)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700))
socket$kcm(0x29, 0x7, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000100)=0x50)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000400000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890b, &(0x7f0000000100))
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890c, &(0x7f0000000100))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x38}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000640), &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x3d, 0x0, 0x0, 0x10, &(0x7f0000000740), 0x0, 0x0, 0xe5, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r4 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r4, 0x84, 0x1e, &(0x7f00000000c0)=r3, 0x4)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000009c0)={0xffffffffffffffff, 0x0, 0x10}, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000010000000000000000000062010d000000000895"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)

15.764699302s ago: executing program 0 (id=189):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90724fc60", 0x14}], 0x1}, 0x0)
syz_clone(0x40000400, &(0x7f00000003c0), 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000700))

15.564951085s ago: executing program 0 (id=190):
socket$kcm(0x11, 0x200000000000002, 0x300)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x0)

998.192067ms ago: executing program 32 (id=167):
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000c00)=ANY=[], 0x5c8}, 0xf7e5)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000000), 0xff7b)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r1}, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000300)='memory.swap.max\x00', 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080c00bdad0140", 0x58}], 0x1}, 0xff0f000000008080)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macvlan0\x00', 0x1})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8924, &(0x7f0000000080))

967.769979ms ago: executing program 33 (id=184):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r5 = socket$kcm(0x29, 0x5, 0x0)
write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf, 0x1a500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x6, @perf_bp={0x0, 0xb}, 0x105c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x25, 0x1, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x400, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7fffffffffffffff, 0x1}, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x4402000a, 0x4, 0x0, 0x800, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)={@ifindex, r4, 0x22, 0x1b, r4, @void, @value=r4}, 0x20)
r6 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890c, &(0x7f0000000000))
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f00000000c0), 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000009000000000000000000fadb2b5f2d4dd1424ea0c6d389ccd01b97dc836c977e09244a12a2a334b4736bc19421771dd2e56028e42341a2562d1ac3c67ca52189877057a908db980214ee4ddba271552f07b6fb631629951b89540385447351ce3201b06a05c46933da0663136e8a7068b1eb305e4af5a7cfe12a0fa2fec88a6f9aa84442e7af5e4244db7595ad315fd53d33925892b0eaf2cd5a9396be08ce9ad7628ce2c9794bf34304dbb90ec2ff4d6bd6ba978247c67d9e8a8522aff466a31974a0d5d3aa9900bfbfc077df76f8516380b66c0fad399be74ebcea567620e621c9ad1009e730858ad3fbbb9cc01ab78c95049c606ae6caef88aa4e63f5f888b0ba4cc6ac653d8a7fee6a55f520fcadde95f1a22b07da4ac2b55bf2eefc8792afa22526c6d36a53820341eceb4e0dcb7cf96429a6ab02d395d711ba351a4d7e9141dbb5eeaa636dc007d7195ffc71011380141809c8dc30a0168805164c4b73831e2a18eecf393da9ecf9c70903e581dc5753e5e13c07a8ab14c98db4824fec5045b0dd22cab5413c5ce3d2635f7f516b3548c9a6e2154b5036eba3b5630aff5f87370841004ae65e2a9da308821d049d5dc2"], 0x72)
bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0)
r7 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r7, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x13, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x56}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa5e}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ldst={0x3, 0x0, 0x2, 0xd, 0x2, 0x8, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r2}]}, &(0x7f00000002c0)='GPL\x00', 0xff, 0xb9, &(0x7f00000004c0)=""/185, 0x41000, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680), &(0x7f0000000700), 0x10, 0x4b1f}, 0x94)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x4004800)
write$cgroup_devices(r1, &(0x7f00000000c0)={'b', ' *:* ', 'wm\x00'}, 0x9)

0s ago: executing program 34 (id=190):
socket$kcm(0x11, 0x200000000000002, 0x300)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:45177' (ED25519) to the list of known hosts.
syzkaller login: [   48.147907][ T5815] cgroup: Unknown subsys name 'net'
[   48.297739][ T5815] cgroup: Unknown subsys name 'cpuset'
[   48.303873][ T5815] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.392177][ T5815] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.354918][ T5219] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.359605][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.363550][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.367682][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.372326][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.376517][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.380112][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.383923][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.387500][ T5219] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.392475][ T5219] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.449063][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.452991][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.457224][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.461185][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.464876][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.676315][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   55.702745][ T5825] chnl_net:caif_netlink_parms(): no params data found
[   55.725969][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   55.767780][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.770197][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.772816][ T5829] bridge_slave_0: entered allmulticast mode
[   55.776668][ T5829] bridge_slave_0: entered promiscuous mode
[   55.780447][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.782706][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.785474][ T5829] bridge_slave_1: entered allmulticast mode
[   55.788228][ T5829] bridge_slave_1: entered promiscuous mode
[   55.859810][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.862072][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.864809][ T5825] bridge_slave_0: entered allmulticast mode
[   55.867580][ T5825] bridge_slave_0: entered promiscuous mode
[   55.872825][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.877899][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.899120][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.902229][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.905692][ T5825] bridge_slave_1: entered allmulticast mode
[   55.909787][ T5825] bridge_slave_1: entered promiscuous mode
[   55.927601][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.929866][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.932226][ T5834] bridge_slave_0: entered allmulticast mode
[   55.937109][ T5834] bridge_slave_0: entered promiscuous mode
[   55.941612][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.944849][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.947880][ T5834] bridge_slave_1: entered allmulticast mode
[   55.951643][ T5834] bridge_slave_1: entered promiscuous mode
[   55.968944][ T5829] team0: Port device team_slave_0 added
[   55.999140][ T5829] team0: Port device team_slave_1 added
[   56.004379][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.034431][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.040285][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.055190][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.057696][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.066497][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.072576][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.090352][ T5825] team0: Port device team_slave_0 added
[   56.094115][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.097124][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.107465][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.136893][ T5825] team0: Port device team_slave_1 added
[   56.149767][ T5834] team0: Port device team_slave_0 added
[   56.155468][ T5834] team0: Port device team_slave_1 added
[   56.209534][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.212384][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.223402][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.229675][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.232583][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.243326][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.259964][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.262234][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.271234][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.293089][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.295696][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.305895][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.316506][ T5829] hsr_slave_0: entered promiscuous mode
[   56.319682][ T5829] hsr_slave_1: entered promiscuous mode
[   56.377923][ T5834] hsr_slave_0: entered promiscuous mode
[   56.381106][ T5834] hsr_slave_1: entered promiscuous mode
[   56.384804][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.388042][ T5834] Cannot create hsr debugfs directory
[   56.427343][ T5825] hsr_slave_0: entered promiscuous mode
[   56.430396][ T5825] hsr_slave_1: entered promiscuous mode
[   56.433301][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.437164][ T5825] Cannot create hsr debugfs directory
[   56.739372][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.748291][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.755180][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.759652][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.809634][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.817939][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.828363][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.847307][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.912891][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.923463][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.935459][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.941610][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.008118][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.038974][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.063114][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   57.071863][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   57.086801][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.089871][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.099480][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.101931][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.118743][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.121079][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.127811][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.130161][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.161795][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.171537][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.185624][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[   57.205975][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.208971][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.233491][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.236608][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.263114][ T5825] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   57.268461][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.305466][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.351700][ T5834] veth0_vlan: entered promiscuous mode
[   57.368812][ T5834] veth1_vlan: entered promiscuous mode
[   57.385748][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.420973][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.425645][ T5834] veth0_macvtap: entered promiscuous mode
[   57.435621][ T5834] veth1_macvtap: entered promiscuous mode
[   57.444934][ T5832] Bluetooth: hci1: command tx timeout
[   57.446829][   T55] Bluetooth: hci0: command tx timeout
[   57.447024][ T5829] veth0_vlan: entered promiscuous mode
[   57.463061][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.473460][ T5829] veth1_vlan: entered promiscuous mode
[   57.480046][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.490956][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.493995][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.496838][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.499556][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.517133][ T5825] veth0_vlan: entered promiscuous mode
[   57.524118][   T55] Bluetooth: hci2: command tx timeout
[   57.531489][ T5825] veth1_vlan: entered promiscuous mode
[   57.591896][ T5825] veth0_macvtap: entered promiscuous mode
[   57.596856][ T5829] veth0_macvtap: entered promiscuous mode
[   57.605847][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.609116][ T5829] veth1_macvtap: entered promiscuous mode
[   57.611925][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.621839][ T5825] veth1_macvtap: entered promiscuous mode
[   57.641920][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.651173][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.659292][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.663142][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.668506][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.670814][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.676133][ T5825] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.678872][ T5825] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.681896][ T5825] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.686940][ T5825] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.692985][ T5829] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.698150][ T5829] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.701592][ T5829] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.706850][ T5829] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.731487][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.828795][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.831543][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.872880][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.884301][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.904910][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.908155][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.953366][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.957776][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.316870][    C0] hrtimer: interrupt took 25118 ns
[   59.311112][ T5933] netlink: 44 bytes leftover after parsing attributes in process `syz.2.21'.
[   59.396682][ T5934] netlink: 'syz.1.20': attribute type 21 has an invalid length.
[   59.414822][ T5931] Driver unsupported XDP return value 0 on prog  (id 15) dev N/A, expect packet loss!
[   59.526310][   T55] Bluetooth: hci0: command tx timeout
[   59.528164][   T55] Bluetooth: hci1: command tx timeout
[   59.604070][ T5832] Bluetooth: hci2: command tx timeout
[   59.614500][ T5940] Zero length message leads to an empty skb
[   59.651570][ T5942] syzkaller1: tun_chr_ioctl cmd 1074025680
[   59.826940][ T5951] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.28'.
[   59.830018][ T5951] netlink: 6108 bytes leftover after parsing attributes in process `syz.1.28'.
[   61.241378][ T5977] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   61.298380][ T5975] syzkaller0: entered promiscuous mode
[   61.300300][ T5975] syzkaller0: entered allmulticast mode
[   61.306331][ T5982] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f
[   61.353517][ T5984] syz.0.41 uses obsolete (PF_INET,SOCK_PACKET)
[   61.605697][ T5832] Bluetooth: hci1: command tx timeout
[   61.608096][ T5832] Bluetooth: hci0: command tx timeout
[   61.694485][   T55] Bluetooth: hci2: command tx timeout
[   62.133924][ T5988] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.137277][ T5988] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.166877][ T5988] bridge0: entered allmulticast mode
[   62.185010][ T5989] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.188367][ T5989] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.191986][ T5989] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.195092][ T5989] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.256833][ T5989] bridge0: entered promiscuous mode
[   62.474336][ T5999] warning: `syz.2.47' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   62.548623][ T6005] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.50'.
[   62.777482][ T6011] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.53'.
[   62.809240][ T6011] bridge: RTM_NEWNEIGH with invalid state 0x1
[   62.876835][ T6015] netlink: 'syz.2.55': attribute type 39 has an invalid length.
[   62.931621][ T6016] delete_channel: no stack
[   63.138249][ T6015] veth0_macvtap: left promiscuous mode
[   63.349492][   T55] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4
[   63.537589][ T6041] netlink: 132 bytes leftover after parsing attributes in process `syz.2.67'.
[   63.538699][ T6043] netlink: 'syz.0.68': attribute type 3 has an invalid length.
[   63.553964][ T6043] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.68'.
[   63.695137][   T55] Bluetooth: hci0: command tx timeout
[   63.695297][ T5832] Bluetooth: hci1: command tx timeout
[   63.743003][ T6052] wg2: entered promiscuous mode
[   63.748033][ T6052] wg2: entered allmulticast mode
[   63.763947][ T5832] Bluetooth: hci2: command tx timeout
[   64.736801][ T6090] netlink: 144 bytes leftover after parsing attributes in process `syz.0.89'.
[   64.895120][ T6103] netlink: 60 bytes leftover after parsing attributes in process `syz.2.95'.
[   64.898825][ T6103] netlink: 60 bytes leftover after parsing attributes in process `syz.2.95'.
[   64.902518][ T6103] netlink: 60 bytes leftover after parsing attributes in process `syz.2.95'.
[   65.081753][ T6121] netlink: 132 bytes leftover after parsing attributes in process `syz.0.104'.
[   65.088523][ T6117] netlink: 'syz.2.102': attribute type 39 has an invalid length.
[   65.137839][ T6125] netlink: zone id is out of range
[   65.139961][ T6125] netlink: zone id is out of range
[   65.141984][ T6125] netlink: zone id is out of range
[   65.144706][ T6125] netlink: zone id is out of range
[   65.146812][ T6125] netlink: zone id is out of range
[   65.148881][ T6125] netlink: zone id is out of range
[   65.151137][ T6125] netlink: zone id is out of range
[   65.153002][ T6125] netlink: zone id is out of range
[   65.156583][ T6125] netlink: zone id is out of range
[   65.349193][ T6140] netlink: 'syz.1.113': attribute type 2 has an invalid length.
[   65.423354][ T6133] syz.0.110 (6133) used greatest stack depth: 19552 bytes left
[   65.457268][ T6147] netlink: 'syz.1.116': attribute type 10 has an invalid length.
[   65.460028][ T6147] team0: Device ip6_vti0 is of different type
[   65.489128][ T6152] netlink: 48 bytes leftover after parsing attributes in process `syz.0.119'.
[   65.553307][ T6158] netlink: 'syz.0.123': attribute type 10 has an invalid length.
[   65.556019][ T6158] netlink: 55 bytes leftover after parsing attributes in process `syz.0.123'.
[   65.583479][ T6160] netlink: 'syz.1.122': attribute type 10 has an invalid length.
[   65.589888][ T6160] netlink: 40 bytes leftover after parsing attributes in process `syz.1.122'.
[   65.595825][ T6160] batman_adv: batadv0: Adding interface: vlan1
[   65.597860][ T6160] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.616282][ T6160] batman_adv: batadv0: Interface activated: vlan1
[   65.812605][ T6172] mac80211_hwsim hwsim7 O3c: renamed from wlan1 (while UP)
[   66.077712][ T6199] netlink: 'syz.1.142': attribute type 19 has an invalid length.
[   66.080557][ T6199] netlink: 55 bytes leftover after parsing attributes in process `syz.1.142'.
[   66.126847][ T6197] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.197435][ T6203] netlink: 'syz.0.144': attribute type 39 has an invalid length.
[   66.415556][ T6214] netlink: 'syz.0.149': attribute type 4 has an invalid length.
[   66.419070][ T6214] netlink: 140 bytes leftover after parsing attributes in process `syz.0.149'.
[   66.724991][ T6238] netlink: 'syz.0.161': attribute type 2 has an invalid length.
[   66.769903][ T6241] netlink: 'syz.1.157': attribute type 10 has an invalid length.
[   66.777756][ T6241] 8021q: adding VLAN 0 to HW filter on device team0
[   66.781383][ T6241] bond0: (slave team0): Enslaving as an active interface with an up link
[   67.209534][ T6244] net_ratelimit: 79 callbacks suppressed
[   67.209586][ T6244] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   67.358197][ T6253] syzkaller0: entered promiscuous mode
[   67.360007][ T6253] syzkaller0: entered allmulticast mode
[   67.382489][ T6257] bridge0: entered promiscuous mode
[   67.386050][ T6257] bridge0: entered allmulticast mode
[   67.532280][ T5832] Bluetooth: hci1: unexpected subevent 0x03 length: 150 > 9
[   67.550396][ T5832] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10
[   67.550423][ T5832] Bluetooth: unknown link type 8
[   67.556385][ T5832] Bluetooth: hci2: connection err: -111
[   83.310873][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   83.315240][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   83.317876][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   83.320498][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   83.323080][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   83.387235][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   83.390108][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   83.392623][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   83.396826][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   83.399310][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   83.583017][ T6309] chnl_net:caif_netlink_parms(): no params data found
[   84.183911][   T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   84.186999][   T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   84.189619][   T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   84.192662][   T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   84.197551][   T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   85.363740][   T55] Bluetooth: hci3: command tx timeout
[   85.443772][   T55] Bluetooth: hci4: command tx timeout
[   86.244433][   T55] Bluetooth: hci5: command tx timeout
[   87.445012][   T55] Bluetooth: hci3: command tx timeout
[   87.523966][   T55] Bluetooth: hci4: command tx timeout
[   88.323801][   T55] Bluetooth: hci5: command tx timeout
[   89.523799][   T55] Bluetooth: hci3: command tx timeout
[   89.603838][   T55] Bluetooth: hci4: command tx timeout
[   90.403796][   T55] Bluetooth: hci5: command tx timeout
[   91.606549][   T55] Bluetooth: hci3: command tx timeout
[   91.683827][   T55] Bluetooth: hci4: command tx timeout
[   92.483848][   T55] Bluetooth: hci5: command tx timeout
[  143.419165][ T5832] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  143.422088][ T5832] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  143.424870][ T5832] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  143.428072][ T5832] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  143.430802][ T5832] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  143.469105][ T5219] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  143.472127][ T5219] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  143.477342][ T5219] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  143.480095][ T5219] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  143.482672][ T5219] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  144.382445][ T5832] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  144.387428][ T5832] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  144.390583][ T5832] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  144.393262][ T5832] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  144.398117][ T5832] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  145.523831][ T5219] Bluetooth: hci6: command tx timeout
[  145.528762][ T5832] Bluetooth: hci7: command tx timeout
[  146.487926][ T5832] Bluetooth: hci8: command tx timeout
[  147.603827][ T5832] Bluetooth: hci7: command tx timeout
[  147.606085][ T5832] Bluetooth: hci6: command tx timeout
[  148.567349][ T5219] Bluetooth: hci8: command tx timeout
[  149.683894][ T5219] Bluetooth: hci6: command tx timeout
[  149.686272][ T5219] Bluetooth: hci7: command tx timeout
[  150.645724][ T5832] Bluetooth: hci8: command tx timeout
[  151.764625][ T5219] Bluetooth: hci6: command tx timeout
[  151.767070][ T5832] Bluetooth: hci7: command tx timeout
[  152.726519][ T5832] Bluetooth: hci8: command tx timeout
[  173.173614][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
SYZFAIL: failed to recv rpc
[  173.176102][    C0] rcu: 	0-....: (10501 ticks this GP) idle=c97c/1/0x4000000000000000 softirq=15922/15922 fqs=5248
[  173.181324][    C0] rcu: 	         hardirqs   softirqs   csw/system
[  173.183516][    C0] rcu: 	 number:  1021846          0            0
[  173.185917][    C0] rcu: 	cputime:    24606      27893           89   ==> 52510(ms)
[  173.188709][    C0] rcu: 	(t=10502 jiffies g=7965 q=3761 ncpus=2)
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  173.190740][    C0] CPU: 0 UID: 0 PID: 6289 Comm: syz.2.184 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  173.190749][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  173.190753][    C0] RIP: 0010:rcu_read_unlock_special+0x87/0x4c0
[  173.190769][    C0] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 92 37 f8 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
[  173.190775][    C0] RSP: 0018:ffffc900000075a0 EFLAGS: 00000206
[  173.190782][    C0] RAX: 497bd756292b6c00 RBX: 1ffff92000000ebc RCX: 497bd756292b6c00
[  173.190786][    C0] RDX: 0000000000000000 RSI: ffffffff8d998701 RDI: ffffffff8be29f80
[  173.190791][    C0] RBP: ffffc90000007698 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  173.190795][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffffffff8e144400
[  173.190800][    C0] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000001
[  173.190804][    C0] FS:  00007f2e0c8106c0(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
[  173.190809][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  173.190814][    C0] CR2: 0000001b3001bff8 CR3: 00000000295f0000 CR4: 00000000000006f0
[  173.190839][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  173.190844][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  173.190848][    C0] Call Trace:
[  173.190852][    C0]  <IRQ>
[  173.190855][    C0]  ? __lock_acquire+0xab9/0xd20
[  173.190866][    C0]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  173.190878][    C0]  ? unwind_next_frame+0xa5/0x2390
[  173.190889][    C0]  __rcu_read_unlock+0x84/0xe0
[  173.190899][    C0]  ? unwind_next_frame+0xa5/0x2390
[  173.190905][    C0]  unwind_next_frame+0x19ae/0x2390
[  173.190915][    C0]  ? unwind_next_frame+0xa5/0x2390
[  173.190923][    C0]  ? rcu_core+0xca8/0x1710
[  173.190933][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  173.190942][    C0]  arch_stack_walk+0x11c/0x150
[  173.190953][    C0]  ? handle_softirqs+0x286/0x870
[  173.190963][    C0]  stack_trace_save+0x9c/0xe0
[  173.190971][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  173.190981][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  173.190989][    C0]  ? sched_clock+0x3f/0x60
[  173.190998][    C0]  ? sched_clock_cpu+0x74/0x430
[  173.191008][    C0]  kasan_save_track+0x3e/0x80
[  173.191018][    C0]  ? kasan_save_track+0x3e/0x80
[  173.191026][    C0]  ? kasan_save_free_info+0x46/0x50
[  173.191036][    C0]  ? __kasan_slab_free+0x62/0x70
[  173.191042][    C0]  ? kfree+0x18e/0x440
[  173.191047][    C0]  ? slab_free_after_rcu_debug+0x60/0x2a0
[  173.191055][    C0]  ? rcu_core+0xca8/0x1710
[  173.191113][    C0]  ? kasan_byte_accessible+0x16/0x30
[  173.191122][    C0]  kasan_save_free_info+0x46/0x50
[  173.191131][    C0]  __kasan_slab_free+0x62/0x70
[  173.191137][    C0]  ? slab_free_after_rcu_debug+0x60/0x2a0
[  173.191145][    C0]  kfree+0x18e/0x440
[  173.191152][    C0]  ? rcu_core+0xc34/0x1710
[  173.191158][    C0]  slab_free_after_rcu_debug+0x60/0x2a0
[  173.191167][    C0]  ? __pfx_slab_free_after_rcu_debug+0x10/0x10
[  173.191179][    C0]  ? rcu_core+0xc34/0x1710
[  173.191186][    C0]  rcu_core+0xca8/0x1710
[  173.191201][    C0]  ? __pfx_rcu_core+0x10/0x10
[  173.191207][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  173.191222][    C0]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  173.191231][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  173.191239][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  173.191251][    C0]  handle_softirqs+0x286/0x870
[  173.191260][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  173.191270][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  173.191280][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  173.191290][    C0]  __irq_exit_rcu+0xca/0x1f0
[  173.191298][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  173.191316][    C0]  irq_exit_rcu+0x9/0x30
[  173.191325][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  173.191336][    C0]  </IRQ>
[  173.191339][    C0]  <TASK>
[  173.191343][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  173.191353][    C0] RIP: 0010:___slab_alloc+0x1db/0x1480
[  173.191363][    C0] Code: 8f 44 24 60 f7 44 24 60 00 02 00 00 0f 85 01 06 00 00 f7 c3 00 02 00 00 0f 84 79 fe ff ff fb e9 73 fe ff ff 41 f6 44 24 08 01 <0f> 85 e2 11 00 00 49 f7 04 24 00 01 00 00 0f 85 1b 02 00 00 89 5c
[  173.191371][    C0] RSP: 0018:ffffc90006847c28 EFLAGS: 00000246
[  173.191381][    C0] RAX: 497bd756292b6c00 RBX: 00000000ffffffff RCX: ffffffff894ce8d7
[  173.191387][    C0] RDX: 00000000ffffffff RSI: 0000000000000dc0 RDI: ffff88801a442000
[  173.191391][    C0] RBP: 00000000ffffffff R08: ffff88804b03e6d0 R09: 0000000000000790
[  173.191395][    C0] R10: 0000000000000005 R11: 0000000000000002 R12: ffffea0000edfa00
[  173.191399][    C0] R13: ffff88801a442000 R14: ffff88804b03e6d0 R15: 00000000ffffffff
[  173.191407][    C0]  ? sk_prot_alloc+0xe7/0x220
[  173.191422][    C0]  ? sk_prot_alloc+0xe7/0x220
[  173.191431][    C0]  __kmalloc_noprof+0x305/0x4f0
[  173.191438][    C0]  ? sk_prot_alloc+0xe7/0x220
[  173.191446][    C0]  sk_prot_alloc+0xe7/0x220
[  173.191452][    C0]  ? sk_alloc+0x24/0x370
[  173.191460][    C0]  sk_alloc+0x3a/0x370
[  173.191469][    C0]  caif_create+0x11d/0x410
[  173.191482][    C0]  __sock_create+0x4b3/0x9f0
[  173.191495][    C0]  __sys_socket+0xd7/0x1b0
[  173.191507][    C0]  __x64_sys_socket+0x7a/0x90
[  173.191517][    C0]  do_syscall_64+0xfa/0x3b0
[  173.191527][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.191533][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  173.191541][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.191547][    C0] RIP: 0033:0x7f2e0b98e9a9
[  173.191554][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  173.191559][    C0] RSP: 002b:00007f2e0c810038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  173.191565][    C0] RAX: ffffffffffffffda RBX: 00007f2e0bbb5fa0 RCX: 00007f2e0b98e9a9
[  173.191569][    C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000025
[  173.191573][    C0] RBP: 00007f2e0ba10d69 R08: 0000000000000000 R09: 0000000000000000
[  173.191577][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  173.191581][    C0] R13: 0000000000000000 R14: 00007f2e0bbb5fa0 R15: 00007ffd18e48648
[  173.191592][    C0]  </TASK>
[  173.389211][    C0] sched: DL replenish lagged too much
[  180.403867][ T5832] Bluetooth: hci1: command 0x0406 tx timeout

VM DIAGNOSIS:
17:26:20  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000069 RBX=0000000000000069 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000068d0
R8 =ffff888107888237 R9 =1ffff11020f11046 R10=dffffc0000000000 R11=ffffffff85471fa0
R12=dffffc0000000000 R13=ffffffff99af58b5 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff8547201c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f2e0c8106c0 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3001bff8 CR3=00000000295f0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff81746ec3 ffffffff8133a4fe
XMM02=5521e9b453d5b7b8 ffffffff8133a4fe XMM03=b8eee61bcaab0835 bdf391f612b6ac05
XMM04=00007f187e0ed100 00007f187d586440 XMM05=00007f187d586458 00007f187d5864a0
XMM06=00007f187d586498 00007f187d586490 XMM07=00007f187d586488 00007f187d586480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f187d411ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000060184 RBX=0000000000000001 RCX=0000000000000002 RDX=0000000000000003
RSI=0000000000000000 RDI=ffff8880204fd640 RBP=0000000000000000 RSP=ffffc9000335efc8
R8 =0000000000000000 R9 =ffffffff8172aae5 R10=ffffc9000335f218 R11=ffffffff81acf520
R12=00000000ffffff05 R13=0000000000000001 R14=ffff8880204fe180 R15=ffff8880204fe178
RIP=ffffffff819e38df RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f6c9dcc8800 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffc557a9dfc CR3=0000000028d94000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
