last executing test programs:

16.767983716s ago: executing program 1 (id=194):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)="bafb7bc5f53a4def16b2788fe585a510", 0x10}], 0x1}, 0x4000001)
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x9c)

16.76765433s ago: executing program 1 (id=195):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000020850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

16.648282187s ago: executing program 1 (id=197):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x8000, 0x0, 0x1ff, 0xffffffff, 0x0, 0x0, 0x3ff, 0x0, 0x8000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))

16.574488804s ago: executing program 1 (id=198):
r0 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x2, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2002, 0x0, @perf_bp={0x0, 0x4}, 0xa100, 0xc8, 0x3, 0x9, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r3, 0x29, 0x49, 0x0, 0xff00)
close(r2)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200182f00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa35f088be"], 0xfdef)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0xffca}, 0x164)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfdef)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r8 = socket$kcm(0xa, 0x3, 0x73)
sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x4, @loopback, 0x5, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@timestamping={{0x14, 0x1, 0x25, 0x81}}], 0x18}, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r9)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r10 = socket$kcm(0x23, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f0000000100)={r10})
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)
r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, r4, 0x0, 0x5}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r4, 0xe0, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0], ""/16, <r13=>0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x74, &(0x7f0000000600), 0x0, 0x0, 0x0, &(0x7f0000000800), 0x8, 0x2d, 0x8, 0x8, &(0x7f0000000840)}}, 0x10)
r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x100002, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r14, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_PERIOD(r14, 0x4030582a, &(0x7f0000000040)=0x8000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b80)={0x6, 0x1b, &(0x7f0000000440)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x200}, @map_fd={0x18, 0x1, 0x1, 0x0, r12}, @ldst={0x0, 0x0, 0x4, 0x0, 0x3, 0x30}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, @map_fd={0x18, 0x6, 0x1, 0x0, r11}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], &(0x7f0000000300)='syzkaller\x00', 0xa51, 0x0, 0x0, 0x40f00, 0x1, '\x00', r13, 0x25, r5, 0x8, &(0x7f0000001ac0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000001b00)={0x1, 0x4, 0x2, 0xbe}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001b40)=[r14, r11, r5, r0, r11, r5, r4, r4, r4, r4], 0x0, 0x10, 0xf}, 0x94)
r15 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000700)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a8000800a40004080032a0901461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e216d25b4084121d9d322fe7c9f8775730d16a4683f5a360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15952503fdee7a129d8d9e604196", 0xd8}], 0x1}, 0x24002040)
sendmsg$inet(r10, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f00000009c0)="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", 0x1000}, {&(0x7f0000000140)="1214e50467c2c1aeb622db9c2c096825eed84e67ea4c84f7837eea6f1179232aa7f622100ed624d37713a12be6e57d88f4dff8a7d8ff1177fb8cda714a124b8e4164ac8ebc561bd75d5743abf9228b3644c24d22df575f13bb76f889c622591d6ce1ae95a2ea207b1d0d5690ee7385ff22d4ab3f55d2249f06bc8fbcef1da1f85da348ba4742011de9cbf97e641d99fb5306dcce82478bda5a3c5e5b257d4069bb325bd97d065f2a6224a7095ad54ea5fd8699e85b114de0ff7e4aa001e28fdc66e8d6d920e7d0a33d3961903af83ccd2565fd27e7ec541229649ccbc17093db6a71c6ae7f1a81af8f74c9cd4a1e0960", 0xf0}], 0x2}, 0x4000010)

16.468285752s ago: executing program 0 (id=201):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000a40)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x2}, 0x10}, 0x90)

16.412496457s ago: executing program 2 (id=202):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0xcd6ab2e9fc51c0d7, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff})
recvmsg(r2, 0x0, 0x80)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x80000000}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x92, &(0x7f0000000240)=""/146}, 0x80)

16.412247171s ago: executing program 0 (id=203):
r0 = socket$kcm(0xa, 0x3, 0x73)
setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000200), 0x4)
sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000300)=[{0x18, 0x29, 0xb, "9b"}], 0x18}, 0x0)

16.365901584s ago: executing program 1 (id=204):
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, 0x0})
close(r0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0})
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8)
close(r4)
close(r1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r5=>0x0, <r6=>0x0})
close(r5)
setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r7 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r8=>0x0, <r9=>0x0})
close(r8)
setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r10 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
close(r0)

16.291258983s ago: executing program 0 (id=205):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xc, &(0x7f0000000100)=r1, 0x4)

16.289485146s ago: executing program 2 (id=206):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000006c0)="1400000030000b07005a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0)

16.254387806s ago: executing program 1 (id=207):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeb1, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0x9}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
close(r0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000180)=@ll={0x11, 0x10, 0x0, 0x1, 0x7f, 0x6, @multicast}, 0x80, 0x0}, 0x240400c0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r4, 0x107, 0x8, &(0x7f00000000c0), 0x8)
recvmsg$kcm(r4, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x20)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x4, 0x7f, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000580), 0x7, r5}, 0x38)
r6 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0)

16.246658123s ago: executing program 2 (id=208):
r0 = socket$kcm(0xa, 0x2, 0x73)
setsockopt$sock_attach_bpf(r0, 0x29, 0x13, 0x0, 0x0)

16.23773155s ago: executing program 0 (id=209):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x4c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48)

16.153066175s ago: executing program 2 (id=210):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x39}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

16.071564103s ago: executing program 2 (id=211):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3}, 0x200, 0x0, 0x0, 0x7, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='(()}^+&)\x00')

16.024478845s ago: executing program 0 (id=212):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48)
r1 = socket$kcm(0x2c, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, <r2=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)=r1}, 0x20)

16.024085335s ago: executing program 0 (id=213):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0x9fe, 0x452}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r2], 0x48}, 0x20028814)

15.894809228s ago: executing program 2 (id=214):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0xfffffffa)

992.266681ms ago: executing program 32 (id=213):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0x9fe, 0x452}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r2], 0x48}, 0x20028814)

776.185804ms ago: executing program 33 (id=207):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeb1, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0x9}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
close(r0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000180)=@ll={0x11, 0x10, 0x0, 0x1, 0x7f, 0x6, @multicast}, 0x80, 0x0}, 0x240400c0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r4, 0x107, 0x8, &(0x7f00000000c0), 0x8)
recvmsg$kcm(r4, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x20)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x4, 0x7f, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000580), 0x7, r5}, 0x38)
r6 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0)

0s ago: executing program 34 (id=214):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0xfffffffa)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:59817' (ED25519) to the list of known hosts.
syzkaller login: [   56.171489][ T5816] cgroup: Unknown subsys name 'net'
[   56.275771][ T5816] cgroup: Unknown subsys name 'cpuset'
[   56.282198][ T5816] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.257318][ T5816] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.161161][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.165424][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.169036][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.173499][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.177152][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.237271][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.241431][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.247417][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.252190][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.256133][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.380990][ T5220] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.384204][ T5220] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.387109][ T5220] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.392007][ T5220] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.395478][ T5220] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.536253][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   63.585471][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   63.701722][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.704721][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.708060][ T5830] bridge_slave_0: entered allmulticast mode
[   63.713116][ T5830] bridge_slave_0: entered promiscuous mode
[   63.729623][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.733727][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.736742][ T5830] bridge_slave_1: entered allmulticast mode
[   63.740981][ T5830] bridge_slave_1: entered promiscuous mode
[   63.805480][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.813587][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.853317][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.856249][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.859192][ T5835] bridge_slave_0: entered allmulticast mode
[   63.863663][ T5835] bridge_slave_0: entered promiscuous mode
[   63.869456][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.873005][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.875909][ T5835] bridge_slave_1: entered allmulticast mode
[   63.882035][ T5835] bridge_slave_1: entered promiscuous mode
[   63.966175][ T5830] team0: Port device team_slave_0 added
[   63.971343][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.983502][ T5830] team0: Port device team_slave_1 added
[   63.987785][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.048457][ T5835] team0: Port device team_slave_0 added
[   64.052653][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.055552][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.067056][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.074820][ T5835] team0: Port device team_slave_1 added
[   64.081516][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   64.092354][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.094691][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.103008][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.163275][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.166176][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.177052][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.203714][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.206652][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.219133][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.251134][ T5830] hsr_slave_0: entered promiscuous mode
[   64.254461][ T5830] hsr_slave_1: entered promiscuous mode
[   64.310160][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.312954][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.315829][ T5838] bridge_slave_0: entered allmulticast mode
[   64.319433][ T5838] bridge_slave_0: entered promiscuous mode
[   64.326785][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.329482][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.332799][ T5838] bridge_slave_1: entered allmulticast mode
[   64.336295][ T5838] bridge_slave_1: entered promiscuous mode
[   64.404949][ T5835] hsr_slave_0: entered promiscuous mode
[   64.407916][ T5835] hsr_slave_1: entered promiscuous mode
[   64.411484][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.414514][ T5835] Cannot create hsr debugfs directory
[   64.426864][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.453453][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.534223][ T5838] team0: Port device team_slave_0 added
[   64.539521][ T5838] team0: Port device team_slave_1 added
[   64.639676][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.643011][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.652128][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.679104][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.682082][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.693484][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.776215][ T5838] hsr_slave_0: entered promiscuous mode
[   64.781102][ T5838] hsr_slave_1: entered promiscuous mode
[   64.783814][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.786539][ T5838] Cannot create hsr debugfs directory
[   64.884642][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.914975][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.935869][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.941777][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.993106][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.006210][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.029978][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.045765][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.083132][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.093116][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.099584][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.117218][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.207242][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.262594][ T5220] Bluetooth: hci0: command tx timeout
[   65.266442][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   65.292910][ T3536] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.295930][ T3536] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.319690][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.333923][ T3536] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.336783][ T3536] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.341287][ T5220] Bluetooth: hci1: command tx timeout
[   65.351645][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.384972][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   65.408637][ T3536] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.411757][ T3536] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.422359][ T5220] Bluetooth: hci2: command tx timeout
[   65.423824][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   65.438480][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.441615][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.454854][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.457856][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.483082][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.486130][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.597200][ T5835] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   65.606689][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.734357][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.748044][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.768338][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.802708][ T5830] veth0_vlan: entered promiscuous mode
[   65.820969][ T5830] veth1_vlan: entered promiscuous mode
[   65.827034][ T5838] veth0_vlan: entered promiscuous mode
[   65.839810][ T5838] veth1_vlan: entered promiscuous mode
[   65.857850][ T5835] veth0_vlan: entered promiscuous mode
[   65.873521][ T5835] veth1_vlan: entered promiscuous mode
[   65.876501][ T5830] veth0_macvtap: entered promiscuous mode
[   65.891334][ T5830] veth1_macvtap: entered promiscuous mode
[   65.898778][ T5838] veth0_macvtap: entered promiscuous mode
[   65.912858][ T5838] veth1_macvtap: entered promiscuous mode
[   65.931713][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.943122][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.950091][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.961316][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.969325][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.973824][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.976943][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.980045][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.989339][ T5835] veth0_macvtap: entered promiscuous mode
[   66.000519][ T5838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.003705][ T5838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.006831][ T5838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.009925][ T5838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.023436][ T5835] veth1_macvtap: entered promiscuous mode
[   66.073299][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.105725][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.124666][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.127438][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.130024][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.133663][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.174224][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.177849][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.187502][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.195342][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.249044][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.252961][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.271240][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.281073][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.325677][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.332604][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.335854][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.395101][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.411124][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.422354][ T5896] netlink: 'syz.2.3': attribute type 2 has an invalid length.
[   66.424935][ T5896] netlink: 'syz.2.3': attribute type 1 has an invalid length.
[   66.427293][ T5896] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.3'.
[   66.431398][ T5896] nbd: illegal input index 65540
[   66.466861][ T5894] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   66.736214][ T5908] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8'.
[   66.892899][ T5919] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.13'.
[   67.213343][ T5941] netlink: 'syz.2.24': attribute type 29 has an invalid length.
[   67.226170][ T5941] netlink: 'syz.2.24': attribute type 29 has an invalid length.
[   67.236059][ T5941] netlink: 'syz.2.24': attribute type 29 has an invalid length.
[   67.240143][ T5941] netlink: 'syz.2.24': attribute type 29 has an invalid length.
[   67.340857][ T5220] Bluetooth: hci0: command tx timeout
[   67.424690][ T5220] Bluetooth: hci1: command tx timeout
[   67.500401][ T5220] Bluetooth: hci2: command tx timeout
[   67.707227][ T5220] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4
[   67.734349][ T5968] netlink: 'syz.2.36': attribute type 21 has an invalid length.
[   67.738988][ T5968] netlink: 9650 bytes leftover after parsing attributes in process `syz.2.36'.
[   67.873616][    C0] hrtimer: interrupt took 29109 ns
[   67.877317][ T5974] netlink: 'syz.1.39': attribute type 21 has an invalid length.
[   67.879775][ T5974] netlink: 156 bytes leftover after parsing attributes in process `syz.1.39'.
[   67.994627][ T5979] syzkaller0: entered promiscuous mode
[   67.996602][ T5979] syzkaller0: entered allmulticast mode
[   69.430542][ T5220] Bluetooth: hci0: command tx timeout
[   69.500956][ T5220] Bluetooth: hci1: command tx timeout
[   69.570911][ T6005] netlink: 'syz.0.53': attribute type 29 has an invalid length.
[   69.581697][ T5220] Bluetooth: hci2: command tx timeout
[   69.584556][ T6005] netlink: 'syz.0.53': attribute type 29 has an invalid length.
[   69.596963][ T6011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.55'.
[   69.736291][ T6019] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.937346][ T6031] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.65'.
[   70.222919][ T6039] netlink: 64 bytes leftover after parsing attributes in process `syz.2.69'.
[   70.262610][ T6042] netlink: 14 bytes leftover after parsing attributes in process `syz.0.70'.
[   70.274960][ T6042] hsr0: entered promiscuous mode
[   70.276798][ T6042] hsr0: entered allmulticast mode
[   70.278543][ T6042] hsr_slave_0: entered allmulticast mode
[   70.281822][ T6042] hsr_slave_1: entered allmulticast mode
[   70.448514][ T6052] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.74'.
[   71.196270][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.198960][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.404802][ T6069] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.408083][ T6069] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.416954][ T6069] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.421702][ T6069] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.511709][ T5220] Bluetooth: hci0: command tx timeout
[   71.580817][ T5220] Bluetooth: hci1: command tx timeout
[   71.661922][ T5220] Bluetooth: hci2: command tx timeout
[   71.671278][ T6084] validate_nla: 5 callbacks suppressed
[   71.671317][ T6084] netlink: 'syz.0.86': attribute type 1 has an invalid length.
[   71.677141][ T6084] netlink: 'syz.0.86': attribute type 3 has an invalid length.
[   71.682409][ T6084] netlink: 132 bytes leftover after parsing attributes in process `syz.0.86'.
[   71.722293][ T6084] Zero length message leads to an empty skb
[   71.969405][ T6105] netlink: 60 bytes leftover after parsing attributes in process `syz.1.96'.
[   71.974608][ T6101] netlink: 60 bytes leftover after parsing attributes in process `syz.1.96'.
[   71.985442][ T6104] netlink: 1 bytes leftover after parsing attributes in process `syz.2.97'.
[   73.295665][ T6148] netlink: 'syz.1.118': attribute type 21 has an invalid length.
[   73.303435][ T6148] netlink: 'syz.1.118': attribute type 6 has an invalid length.
[   73.306120][ T6148] netlink: 132 bytes leftover after parsing attributes in process `syz.1.118'.
[   73.388186][ T6152] syzkaller1: tun_chr_ioctl cmd 1074025676
[   73.390686][ T6152] syzkaller1: owner set to 778
[   73.676892][ T6162] netlink: 'syz.2.124': attribute type 37 has an invalid length.
[   73.922899][ T6173] netlink: 'syz.2.129': attribute type 29 has an invalid length.
[   73.928424][ T6173] netlink: 'syz.2.129': attribute type 29 has an invalid length.
[   73.937650][ T6173] netlink: 'syz.2.129': attribute type 29 has an invalid length.
[   73.942770][ T6173] netlink: 'syz.2.129': attribute type 29 has an invalid length.
[   74.283644][ T6190] bond_slave_1: mtu greater than device maximum
[   74.591162][ T6205] tap0: tun_chr_ioctl cmd 1074025678
[   74.593388][ T6205] tap0: group set to 0
[   74.636310][ T6209] netlink: 96168 bytes leftover after parsing attributes in process `syz.1.145'.
[   74.921914][ T6225] netlink: 14 bytes leftover after parsing attributes in process `syz.0.154'.
[   76.054695][ T6246] netlink: 'syz.2.164': attribute type 4 has an invalid length.
[   76.057144][ T6246] netlink: 209028 bytes leftover after parsing attributes in process `syz.2.164'.
[   76.084633][ T6243] delete_channel: no stack
[   76.280025][ T6258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.170'.
[   76.604377][ T6272] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.177'.
[   76.695681][ T6276] netlink: 60 bytes leftover after parsing attributes in process `syz.2.179'.
[   76.703538][ T6276] netlink: 60 bytes leftover after parsing attributes in process `syz.2.179'.
[   76.716206][ T6276] netlink: 60 bytes leftover after parsing attributes in process `syz.2.179'.
[   77.828953][ T6292] syzkaller0: entered promiscuous mode
[   77.837067][ T6292] syzkaller0: entered allmulticast mode
[   78.130167][ T6313] netlink: 'syz.2.196': attribute type 1 has an invalid length.
[   78.143504][ T6313] netlink: 17 bytes leftover after parsing attributes in process `syz.2.196'.
[   78.328597][ T6317] netlink: 'syz.1.198': attribute type 21 has an invalid length.
[   86.550750][  T792] cfg80211: failed to load regulatory.db
[   94.112875][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   94.117506][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   94.121457][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   94.124975][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   94.128584][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   94.365687][   T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   94.372242][   T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   94.376089][   T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   94.380520][   T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   94.386414][   T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   95.091697][   T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   95.096180][   T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   95.099786][   T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   95.106725][   T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   95.110797][   T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   96.221337][ T5220] Bluetooth: hci3: command tx timeout
[   96.460611][ T5220] Bluetooth: hci4: command tx timeout
[   97.180514][ T5220] Bluetooth: hci5: command tx timeout
[   98.300526][ T5220] Bluetooth: hci3: command tx timeout
[   98.540557][ T5220] Bluetooth: hci4: command tx timeout
[   99.260505][ T5220] Bluetooth: hci5: command tx timeout
[  100.380450][ T5220] Bluetooth: hci3: command tx timeout
[  100.620593][ T5220] Bluetooth: hci4: command tx timeout
[  101.340421][ T5220] Bluetooth: hci5: command tx timeout
[  102.460433][ T5220] Bluetooth: hci3: command tx timeout
[  102.700522][ T5220] Bluetooth: hci4: command tx timeout
[  103.420426][ T5220] Bluetooth: hci5: command tx timeout
[  132.625804][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.628474][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  155.286855][   T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  155.294046][   T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  155.299391][   T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  155.304670][   T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  155.308534][   T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  155.360590][   T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  155.365037][   T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  155.368828][   T54] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  155.376122][   T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  155.379734][   T54] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  156.268900][ T5220] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  156.273572][ T5220] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  156.276502][ T5220] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  156.279361][ T5220] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  156.283168][ T5220] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  157.340514][   T54] Bluetooth: hci6: command tx timeout
[  157.420552][   T54] Bluetooth: hci7: command tx timeout
[  158.300424][   T54] Bluetooth: hci8: command tx timeout
[  159.420505][   T54] Bluetooth: hci6: command tx timeout
[  159.500427][   T54] Bluetooth: hci7: command tx timeout
[  160.380444][   T54] Bluetooth: hci8: command tx timeout
[  161.500642][   T54] Bluetooth: hci6: command tx timeout
[  161.580417][   T54] Bluetooth: hci7: command tx timeout
[  162.460395][   T54] Bluetooth: hci8: command tx timeout
[  163.580421][   T54] Bluetooth: hci6: command tx timeout
[  163.660585][   T54] Bluetooth: hci7: command tx timeout
[  164.540385][   T54] Bluetooth: hci8: command tx timeout
[  183.930235][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
SYZFAIL: failed to recv rpc
[  183.932974][    C0] rcu: 	0-....: (10478 ticks this GP) idle=aa5c/1/0x4000000000000000 softirq=16674/16674 fqs=5249
[  183.939036][    C0] rcu: 	         hardirqs   softirqs   csw/system
[  183.941202][    C0] rcu: 	 number:  1052852          0            0
[  183.943202][    C0] rcu: 	cputime:    25230      27259           90   ==> 52500(ms)
[  183.945507][    C0] rcu: 	(t=10502 jiffies g=9573 q=2360 ncpus=2)
[  183.947367][    C0] CPU: 0 UID: 0 PID: 6338 Comm: syz.1.207 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  183.947386][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  183.947396][    C0] RIP: 0010:rcu_read_unlock_special+0x87/0x4c0
[  183.947418][    C0] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 62 2c f8 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
[  183.947426][    C0] RSP: 0018:ffffc90000007900 EFLAGS: 00000206
[  183.947434][    C0] RAX: b2aa41061c9f5500 RBX: 1ffff92000000f28 RCX: b2aa41061c9f5500
[  183.947440][    C0] RDX: 0000000000000002 RSI: ffffffff8d99883e RDI: ffffffff8be29f40
[  183.947445][    C0] RBP: ffffc900000079f8 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  183.947451][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffffffff8e144400
[  183.947456][    C0] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000001
[  183.947461][    C0] FS:  00007f1229ff66c0(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
[  183.947466][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  183.947472][    C0] CR2: 0000001b30519ff8 CR3: 000000001cff4000 CR4: 00000000000006f0
[  183.947496][    C0] Call Trace:
[  183.947503][    C0]  <IRQ>
[  183.947512][    C0]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  183.947533][    C0]  __rcu_read_unlock+0x84/0xe0
[  183.947545][    C0]  __reset_page_owner+0x67/0x1f0
[  183.947558][    C0]  __free_frozen_pages+0xc71/0xe70
[  183.947573][    C0]  __tlb_remove_table+0x2d2/0x3b0
[  183.947583][    C0]  ? __pfx___tlb_remove_table+0x10/0x10
[  183.947600][    C0]  tlb_remove_table_rcu+0x85/0x100
[  183.947610][    C0]  ? __pfx_tlb_remove_table_rcu+0x10/0x10
[  183.947619][    C0]  ? rcu_core+0xc34/0x1710
[  183.947628][    C0]  rcu_core+0xca8/0x1710
[  183.947673][    C0]  ? __pfx_rcu_core+0x10/0x10
[  183.947683][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  183.947704][    C0]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  183.947715][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  183.947724][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  183.947739][    C0]  handle_softirqs+0x286/0x870
[  183.947753][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  183.947764][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  183.947776][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  183.947791][    C0]  __irq_exit_rcu+0xca/0x1f0
[  183.947799][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  183.947812][    C0]  irq_exit_rcu+0x9/0x30
[  183.947820][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  183.947830][    C0]  </IRQ>
[  183.947832][    C0]  <TASK>
[  183.947836][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  183.947846][    C0] RIP: 0010:___slab_alloc+0x1db/0x1480
[  183.947857][    C0] Code: 8f 44 24 60 f7 44 24 60 00 02 00 00 0f 85 01 06 00 00 f7 c3 00 02 00 00 0f 84 79 fe ff ff fb e9 73 fe ff ff 41 f6 44 24 08 01 <0f> 85 e2 11 00 00 49 f7 04 24 00 01 00 00 0f 85 1b 02 00 00 89 5c
[  183.947863][    C0] RSP: 0018:ffffc90007d2f230 EFLAGS: 00000246
[  183.947870][    C0] RAX: b2aa41061c9f5500 RBX: 00000000ffffffff RCX: ffffffff894e2a62
[  183.947876][    C0] RDX: 00000000ffffffff RSI: 0000000000000cc0 RDI: ffff8881006c2a00
[  183.947881][    C0] RBP: 00000000ffffffff R08: ffff88804b0423e0 R09: 00000000000000f0
[  183.947886][    C0] R10: ffffc90007d2f420 R11: fffff52000fa5e94 R12: ffffea00008b0900
[  183.947891][    C0] R13: ffff8881006c2a00 R14: ffff88804b0423e0 R15: ffff8881006c2a00
[  183.947901][    C0]  ? __alloc_skb+0x112/0x2d0
[  183.947917][    C0]  ? __alloc_skb+0x112/0x2d0
[  183.947928][    C0]  kmem_cache_alloc_node_noprof+0x280/0x3c0
[  183.947937][    C0]  ? __alloc_skb+0x112/0x2d0
[  183.947946][    C0]  __alloc_skb+0x112/0x2d0
[  183.947956][    C0]  netlink_dump+0x1b1/0xe60
[  183.947967][    C0]  ? __netlink_lookup+0xbd/0x810
[  183.947980][    C0]  ? __pfx_netlink_dump+0x10/0x10
[  183.947994][    C0]  ? netlink_lookup+0x30/0x200
[  183.948001][    C0]  ? netlink_lookup+0x30/0x200
[  183.948006][    C0]  ? netlink_lookup+0x30/0x200
[  183.948016][    C0]  __netlink_dump_start+0x5cb/0x7e0
[  183.948029][    C0]  rtnetlink_rcv_msg+0x9eb/0xb70
[  183.948043][    C0]  ? __pfx_rtnl_stats_dump+0x10/0x10
[  183.948050][    C0]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  183.948061][    C0]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  183.948071][    C0]  ? ref_tracker_free+0x63a/0x7d0
[  183.948082][    C0]  ? __pfx_rtnl_dumpit+0x10/0x10
[  183.948089][    C0]  ? __pfx_rtnl_stats_dump+0x10/0x10
[  183.948097][    C0]  ? irqentry_exit+0x74/0x90
[  183.948110][    C0]  netlink_rcv_skb+0x208/0x470
[  183.948119][    C0]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  183.948131][    C0]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  183.948137][    C0]  ? __netlink_deliver_tap+0x650/0x850
[  183.948152][    C0]  ? netlink_deliver_tap+0x2e/0x1b0
[  183.948160][    C0]  ? netlink_deliver_tap+0x2e/0x1b0
[  183.948170][    C0]  netlink_unicast+0x75c/0x8e0
[  183.948188][    C0]  netlink_sendmsg+0x805/0xb30
[  183.948201][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  183.948211][    C0]  ? aa_sock_msg_perm+0x94/0x160
[  183.948230][    C0]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  183.948240][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  183.948249][    C0]  __sock_sendmsg+0x21c/0x270
[  183.948263][    C0]  ____sys_sendmsg+0x505/0x830
[  183.948276][    C0]  ? __pfx_____sys_sendmsg+0x10/0x10
[  183.948289][    C0]  ? import_iovec+0x74/0xa0
[  183.948300][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  183.948310][    C0]  ? __pfx____sys_sendmsg+0x10/0x10
[  183.948318][    C0]  ? irqentry_exit+0x74/0x90
[  183.948347][    C0]  ? __fget_files+0x2a/0x420
[  183.948356][    C0]  ? __fget_files+0x3a0/0x420
[  183.948370][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  183.948380][    C0]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  183.948402][    C0]  do_syscall_64+0xfa/0x3b0
[  183.948414][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.948420][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  183.948431][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.948438][    C0] RIP: 0033:0x7f122c18e9a9
[  183.948447][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  183.948453][    C0] RSP: 002b:00007f1229ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  183.948460][    C0] RAX: ffffffffffffffda RBX: 00007f122c3b5fa0 RCX: 00007f122c18e9a9
[  183.948465][    C0] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000e
[  183.948470][    C0] RBP: 00007f122c210d69 R08: 0000000000000000 R09: 0000000000000000
[  183.948476][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  183.948480][    C0] R13: 0000000000000000 R14: 00007f122c3b5fa0 R15: 00007ffdb771cdf8
[  183.948494][    C0]  </TASK>
[  184.157557][    C0] sched: DL replenish lagged too much

VM DIAGNOSIS:
08:35:37  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000006c RBX=000000000000006c RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000006c30
R8 =ffff888108120237 R9 =1ffff11021024046 R10=dffffc0000000000 R11=ffffffff85472aa0
R12=dffffc0000000000 R13=ffffffff99af58be R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff85472b1c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f1229ff66c0 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b30519ff8 CR3=000000001cff4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f122c211ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffc90007860000 RBX=1ffff1100432025a RCX=ffff888109beb980 RDX=0000000000010000
RSI=ffff888021900000 RDI=0000000000000017 RBP=0000000000000083 RSP=ffffc900001e0da0
R8 =ffffffff8fa1e8f7 R9 =1ffffffff1f43d1e R10=dffffc0000000000 R11=ffffffff868f2170
R12=dffffc0000000000 R13=ffff8880219012d0 R14=ffff888021900000 R15=dffffc0000000000
RIP=ffffffff868f21b8 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f35fa70b800 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffd269e5f84 CR3=0000000109170000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
