last executing test programs:

15.910135187s ago: executing program 0 (id=214):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x47, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x4cf68d79c8eac253, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd081, 0x8}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

15.82193904s ago: executing program 1 (id=217):
socket$kcm(0x10, 0x2, 0x10)
socket$kcm(0x2b, 0x1, 0x0)
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64=0x0, @ANYRESHEX], 0x20)

15.821774731s ago: executing program 0 (id=218):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000500)=r0, 0x4)
setsockopt$sock_attach_bpf(r1, 0x1, 0x19, 0x0, 0x0)

15.729800522s ago: executing program 0 (id=219):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000080))

15.729441434s ago: executing program 1 (id=220):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x2f, 0x0, 0xc)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xae6}, 0x1c125, 0x2e, 0xfffffbff, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x50, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x3}, 0x40, 0x0, 0x0, 0x0, 0xc360, 0xfffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES32], 0x63)
r1 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x8902, &(0x7f00000002c0)={r1})

15.729174565s ago: executing program 0 (id=221):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000008"], 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
close(0xffffffffffffffff)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000001ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x3c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x68}, 0x2160)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x18, 0x7, 0x7f}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080))

15.641130834s ago: executing program 2 (id=222):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
r0 = socket$kcm(0x29, 0x2, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7ff3, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x0, @perf_bp={0x0, 0x3}, 0x14105, 0x30, 0xfffffbff, 0x3, 0x2, 0x7, 0x5, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
close(r0)
r1 = socket$kcm(0x2b, 0x1, 0x0)
close(r1)
socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb)
close(r1)

15.359793244s ago: executing program 0 (id=223):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
socket$kcm(0xa, 0x5, 0x0)

15.35916833s ago: executing program 1 (id=224):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r3, &(0x7f0000000180), 0x40010)

15.28907672s ago: executing program 2 (id=225):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @sock_ops=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
perf_event_open(&(0x7f0000000380)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x90, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef)

15.288682369s ago: executing program 1 (id=226):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00'}, 0x10)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x58, &(0x7f0000000040)}, 0x10)

15.288289571s ago: executing program 1 (id=227):
r0 = socket$kcm(0xa, 0x3, 0x87)
sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x18000, @remote, 0x0, 0x1000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000940)="9461", 0x2}, {&(0x7f0000000080)="b065650a", 0x4}], 0x2}, 0x0)

15.224108413s ago: executing program 2 (id=228):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000c6000100250000008510000001000000950000000000000018400008ffffffff000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0xeb, &(0x7f0000000180)=""/235, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x22)

15.22363311s ago: executing program 1 (id=229):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_clone(0x400, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000000600))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x27)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2, 0x94, 0x7, 0x8, 0x0, 0x3ff, 0x4a0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc02, 0x1, @perf_bp={0x0, 0x8}, 0x5, 0xffffffffffffffff, 0x1, 0x4, 0x4, 0xc7, 0x4, 0x0, 0x6, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x1)
sendmsg(0xffffffffffffffff, 0x0, 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
r4 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r4, 0x84, 0x84, &(0x7f0000000000), 0x90)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0x8}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)

15.223437658s ago: executing program 2 (id=230):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x89fb, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"})

15.150584303s ago: executing program 2 (id=231):
r0 = socket$kcm(0x15, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e26, 0xffffffff, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x7}, 0x80, 0x0}, 0x0)

15.149947029s ago: executing program 0 (id=232):
r0 = socket$kcm(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x3a)
r4 = socket$kcm(0x22, 0x3, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x80044943, 0x0)
r5 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
sendmsg$tipc(r5, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840), 0x0, 0x4000000}, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x19, 0x0, &(0x7f00000000c0)="b9ff03030018698cb89e40f086dd6000000e00001100630677", 0x0, 0xfffff804, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffd}, 0x50)
sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900000d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r7, 0x1, 0x41, &(0x7f0000000040), 0x4)
sendmsg$kcm(r7, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x4000080)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0)

15.133907847s ago: executing program 2 (id=233):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x3a)
openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
recvmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
socket$kcm(0xa, 0x2, 0x88)
sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0)
bpf$OBJ_GET_PROG(0x9, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f91c240685", 0x14}], 0x1}, 0x0)

79.609236ms ago: executing program 32 (id=232):
r0 = socket$kcm(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x3a)
r4 = socket$kcm(0x22, 0x3, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x80044943, 0x0)
r5 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
sendmsg$tipc(r5, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840), 0x0, 0x4000000}, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x19, 0x0, &(0x7f00000000c0)="b9ff03030018698cb89e40f086dd6000000e00001100630677", 0x0, 0xfffff804, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffd}, 0x50)
sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900000d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r7, 0x1, 0x41, &(0x7f0000000040), 0x4)
sendmsg$kcm(r7, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x4000080)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0)

39.389377ms ago: executing program 33 (id=229):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_clone(0x400, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000000600))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x27)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2, 0x94, 0x7, 0x8, 0x0, 0x3ff, 0x4a0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc02, 0x1, @perf_bp={0x0, 0x8}, 0x5, 0xffffffffffffffff, 0x1, 0x4, 0x4, 0xc7, 0x4, 0x0, 0x6, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x1)
sendmsg(0xffffffffffffffff, 0x0, 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
r4 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r4, 0x84, 0x84, &(0x7f0000000000), 0x90)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0x8}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)

0s ago: executing program 34 (id=233):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x3a)
openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
recvmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
socket$kcm(0xa, 0x2, 0x88)
sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0)
bpf$OBJ_GET_PROG(0x9, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f91c240685", 0x14}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:45604' (ED25519) to the list of known hosts.
syzkaller login: [   48.130592][ T5824] cgroup: Unknown subsys name 'net'
[   48.253978][ T5824] cgroup: Unknown subsys name 'cpuset'
[   48.258212][ T5824] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.928135][ T5824] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.866648][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.866667][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.875890][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.878595][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.879093][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.883838][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.886299][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.889296][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.892113][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.894425][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.946763][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.949773][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.957649][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.961451][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.964186][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.179576][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   54.197587][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   54.255255][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   54.319450][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.322710][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.325063][ T5832] bridge_slave_0: entered allmulticast mode
[   54.327881][ T5832] bridge_slave_0: entered promiscuous mode
[   54.354096][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.356542][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.358898][ T5832] bridge_slave_1: entered allmulticast mode
[   54.362374][ T5832] bridge_slave_1: entered promiscuous mode
[   54.365406][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.367644][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.369899][ T5833] bridge_slave_0: entered allmulticast mode
[   54.373797][ T5833] bridge_slave_0: entered promiscuous mode
[   54.397373][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.399641][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.402638][ T5833] bridge_slave_1: entered allmulticast mode
[   54.405329][ T5833] bridge_slave_1: entered promiscuous mode
[   54.433360][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.435568][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.437798][ T5842] bridge_slave_0: entered allmulticast mode
[   54.441014][ T5842] bridge_slave_0: entered promiscuous mode
[   54.446357][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.457982][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.461345][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.463525][ T5842] bridge_slave_1: entered allmulticast mode
[   54.466209][ T5842] bridge_slave_1: entered promiscuous mode
[   54.472067][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.476448][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.488465][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.527139][ T5833] team0: Port device team_slave_0 added
[   54.539935][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.544763][ T5833] team0: Port device team_slave_1 added
[   54.548122][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.554478][ T5832] team0: Port device team_slave_0 added
[   54.574299][ T5832] team0: Port device team_slave_1 added
[   54.595889][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.598084][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.606457][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.622049][ T5842] team0: Port device team_slave_0 added
[   54.634895][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.637111][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.645604][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.650880][ T5842] team0: Port device team_slave_1 added
[   54.657218][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.659407][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.667728][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.691969][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.694139][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.702757][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.727109][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.729292][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.737336][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.744716][ T5833] hsr_slave_0: entered promiscuous mode
[   54.747119][ T5833] hsr_slave_1: entered promiscuous mode
[   54.751358][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.753472][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.761654][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.819246][ T5832] hsr_slave_0: entered promiscuous mode
[   54.822787][ T5832] hsr_slave_1: entered promiscuous mode
[   54.824955][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.828970][ T5832] Cannot create hsr debugfs directory
[   54.856932][ T5842] hsr_slave_0: entered promiscuous mode
[   54.859288][ T5842] hsr_slave_1: entered promiscuous mode
[   54.862452][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.864798][ T5842] Cannot create hsr debugfs directory
[   55.074829][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.091113][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.096088][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.106963][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.141514][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.147087][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.169676][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.183467][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.222137][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.229392][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.235767][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.245523][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.319870][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.339118][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.357975][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   55.366207][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   55.377124][   T85] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.379567][   T85] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.384787][   T85] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.387059][   T85] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.400896][   T85] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.403135][   T85] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.414339][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.416612][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.457527][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.463663][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.497201][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   55.517032][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.519300][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.524380][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.526564][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.573676][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.606761][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.665800][ T5842] veth0_vlan: entered promiscuous mode
[   55.679145][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.687798][ T5842] veth1_vlan: entered promiscuous mode
[   55.701951][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.743453][ T5842] veth0_macvtap: entered promiscuous mode
[   55.748749][ T5832] veth0_vlan: entered promiscuous mode
[   55.756899][ T5842] veth1_macvtap: entered promiscuous mode
[   55.763154][ T5833] veth0_vlan: entered promiscuous mode
[   55.768347][ T5832] veth1_vlan: entered promiscuous mode
[   55.776551][ T5833] veth1_vlan: entered promiscuous mode
[   55.787806][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.803394][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.815370][ T5842] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.818387][ T5842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.822470][ T5842] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.825229][ T5842] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.833226][ T5832] veth0_macvtap: entered promiscuous mode
[   55.844414][ T5832] veth1_macvtap: entered promiscuous mode
[   55.847965][ T5833] veth0_macvtap: entered promiscuous mode
[   55.864267][ T5833] veth1_macvtap: entered promiscuous mode
[   55.884128][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.899467][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.908032][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.912300][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.914917][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.917469][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.920042][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.935788][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.946550][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.949207][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.951088][ T5218] Bluetooth: hci0: command tx timeout
[   55.952152][ T5838] Bluetooth: hci1: command tx timeout
[   55.955552][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.958279][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.982266][ T3069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.984749][ T3069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.006769][   T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.009491][   T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.030445][ T5838] Bluetooth: hci2: command tx timeout
[   56.070409][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.072790][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.093928][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.099146][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.103623][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.124379][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.128211][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.155702][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.158171][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.387866][ T5915] netlink: 'syz.0.8': attribute type 15 has an invalid length.
[   56.401215][ T5915] netlink: 11206 bytes leftover after parsing attributes in process `syz.0.8'.
[   56.465021][ T5922] syz.2.13 uses obsolete (PF_INET,SOCK_PACKET)
[   56.567827][ T5928] warning: `syz.0.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   56.848635][ T5949] netlink: 'syz.2.25': attribute type 3 has an invalid length.
[   56.890430][ T5953] netlink: 'syz.1.27': attribute type 10 has an invalid length.
[   56.941708][ T5959] netlink: 60 bytes leftover after parsing attributes in process `syz.1.30'.
[   56.945193][ T5959] netlink: 60 bytes leftover after parsing attributes in process `syz.1.30'.
[   56.950938][ T5959] netlink: 60 bytes leftover after parsing attributes in process `syz.1.30'.
[   57.181922][ T5978] netlink: 'syz.0.40': attribute type 2 has an invalid length.
[   57.184686][ T5978] netlink: 110008 bytes leftover after parsing attributes in process `syz.0.40'.
[   57.645633][ T6010] netlink: 'syz.1.55': attribute type 9 has an invalid length.
[   57.649910][ T6010] netlink: 'syz.1.55': attribute type 8 has an invalid length.
[   57.654373][ T6010] netlink: 143452 bytes leftover after parsing attributes in process `syz.1.55'.
[   57.700827][ T6012] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.990088][    C0] hrtimer: interrupt took 30852 ns
[   58.030845][ T5838] Bluetooth: hci1: command tx timeout
[   58.040914][ T5838] Bluetooth: hci0: command tx timeout
[   58.121739][ T5838] Bluetooth: hci2: command tx timeout
[   59.921540][ T6067] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.931875][ T6067] ipvlan0: entered promiscuous mode
[   59.933628][ T6067] ipvlan0: entered allmulticast mode
[   59.935337][ T6067] veth0_vlan: entered allmulticast mode
[   60.111205][ T5838] Bluetooth: hci0: command tx timeout
[   60.113039][ T5838] Bluetooth: hci1: command tx timeout
[   60.190338][ T5218] Bluetooth: hci2: command tx timeout
[   60.842954][ T6078] syz.2.86: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   60.847720][ T6078] CPU: 0 UID: 0 PID: 6078 Comm: syz.2.86 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[   60.847736][ T6078] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   60.847743][ T6078] Call Trace:
[   60.847748][ T6078]  <TASK>
[   60.847753][ T6078]  dump_stack_lvl+0x189/0x250
[   60.847773][ T6078]  ? __pfx_dump_stack_lvl+0x10/0x10
[   60.847784][ T6078]  ? __pfx__printk+0x10/0x10
[   60.847798][ T6078]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   60.847811][ T6078]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   60.847823][ T6078]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   60.847836][ T6078]  warn_alloc+0x214/0x310
[   60.847847][ T6078]  ? stack_depot_save_flags+0x429/0x900
[   60.847862][ T6078]  ? __pfx_warn_alloc+0x10/0x10
[   60.847873][ T6078]  ? kasan_save_track+0x4f/0x80
[   60.847884][ T6078]  ? xskq_create+0x56/0x170
[   60.847895][ T6078]  ? xsk_init_queue+0xb0/0x110
[   60.847904][ T6078]  ? xsk_setsockopt+0x4de/0x710
[   60.847913][ T6078]  ? do_sock_setsockopt+0x17c/0x1b0
[   60.847923][ T6078]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   60.847931][ T6078]  ? do_syscall_64+0xfa/0x3b0
[   60.847943][ T6078]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.847958][ T6078]  __vmalloc_node_range_noprof+0x125/0x12f0
[   60.847984][ T6078]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   60.847995][ T6078]  ? xskq_create+0x56/0x170
[   60.848006][ T6078]  ? __kasan_kmalloc+0x93/0xb0
[   60.848017][ T6078]  vmalloc_user_noprof+0xad/0xf0
[   60.848027][ T6078]  ? xskq_create+0xbf/0x170
[   60.848037][ T6078]  xskq_create+0xbf/0x170
[   60.848049][ T6078]  xsk_init_queue+0xb0/0x110
[   60.848061][ T6078]  xsk_setsockopt+0x4de/0x710
[   60.848072][ T6078]  ? __pfx_xsk_setsockopt+0x10/0x10
[   60.848084][ T6078]  ? __fget_files+0x2a/0x420
[   60.848094][ T6078]  ? aa_sock_opt_perm+0x74/0x110
[   60.848111][ T6078]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   60.848125][ T6078]  ? __pfx_xsk_setsockopt+0x10/0x10
[   60.848136][ T6078]  do_sock_setsockopt+0x17c/0x1b0
[   60.848148][ T6078]  __x64_sys_setsockopt+0x13f/0x1b0
[   60.848161][ T6078]  do_syscall_64+0xfa/0x3b0
[   60.848173][ T6078]  ? lockdep_hardirqs_on+0x9c/0x150
[   60.848186][ T6078]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.848194][ T6078]  ? exc_page_fault+0x9f/0xf0
[   60.848208][ T6078]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.848216][ T6078] RIP: 0033:0x7f8654b8e9a9
[   60.848227][ T6078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   60.848235][ T6078] RSP: 002b:00007f8655963038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   60.848245][ T6078] RAX: ffffffffffffffda RBX: 00007f8654db5fa0 RCX: 00007f8654b8e9a9
[   60.848251][ T6078] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006
[   60.848256][ T6078] RBP: 00007f8654c10d69 R08: 0000000000000004 R09: 0000000000000000
[   60.848261][ T6078] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[   60.848267][ T6078] R13: 0000000000000000 R14: 00007f8654db5fa0 R15: 00007ffcb3ccca78
[   60.848281][ T6078]  </TASK>
[   60.848286][ T6078] Mem-Info:
[   60.949579][ T6078] active_anon:5162 inactive_anon:0 isolated_anon:0
[   60.949579][ T6078]  active_file:832 inactive_file:38206 isolated_file:0
[   60.949579][ T6078]  unevictable:1768 dirty:1395 writeback:0
[   60.949579][ T6078]  slab_reclaimable:8974 slab_unreclaimable:52308
[   60.949579][ T6078]  mapped:17996 shmem:2434 pagetables:896
[   60.949579][ T6078]  sec_pagetables:0 bounce:0
[   60.949579][ T6078]  kernel_misc_reclaimable:0
[   60.949579][ T6078]  free:299670 free_pcp:22712 free_cma:0
[   60.969673][ T6078] Node 0 active_anon:10644kB inactive_anon:0kB active_file:2296kB inactive_file:21164kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:29624kB dirty:4604kB writeback:0kB shmem:4708kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5796kB pagetables:1760kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   60.995479][ T6078] Node 1 active_anon:9936kB inactive_anon:0kB active_file:1032kB inactive_file:131660kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:42360kB dirty:976kB writeback:0kB shmem:5028kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5660kB pagetables:1960kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   61.014668][ T6078] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   61.048308][ T6078] lowmem_reserve[]: 0 812 812 812 812
[   61.050024][ T6078] Node 0 DMA32 free:447372kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10644kB inactive_anon:0kB active_file:2296kB inactive_file:21164kB unevictable:3536kB writepending:4604kB present:1556484kB managed:831912kB mlocked:0kB bounce:0kB free_pcp:26304kB local_pcp:7648kB free_cma:0kB
[   61.062901][ T6078] lowmem_reserve[]: 0 0 0 0 0
[   61.064771][ T6078] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[   61.097888][ T6078] lowmem_reserve[]: 0 0 854 854 854
[   61.099535][ T6078] Node 1 Normal free:279184kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9868kB inactive_anon:0kB active_file:1032kB inactive_file:131660kB unevictable:3536kB writepending:976kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:63212kB local_pcp:22652kB free_cma:0kB
[   61.119093][ T6078] lowmem_reserve[]: 0 0 0 0 0
[   61.121756][ T6078] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   61.125672][ T6078] Node 0 DMA32: 128*4kB (UME) 300*8kB (UE) 145*16kB (UME) 298*32kB (UE) 35*64kB (U) 2*128kB (UE) 2*256kB (ME) 1*512kB (U) 1*1024kB (U) 3*2048kB (UME) 103*4096kB (M) = 447344kB
[   61.139666][ T6078] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   61.147631][ T6078] Node 1 Normal: 722*4kB (UME) 147*8kB (UM) 187*16kB (UM) 86*32kB (UME) 20*64kB (UME) 9*128kB (UM) 5*256kB (ME) 5*512kB (UM) 7*1024kB (M) 3*2048kB (M) 61*4096kB (M) = 279248kB
[   61.154304][ T6078] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   61.157160][ T6078] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   61.160025][ T6078] 41472 total pagecache pages
[   61.162930][ T6078] 0 pages in swap cache
[   61.164323][ T6078] Free swap  = 124996kB
[   61.165681][ T6078] Total swap = 124996kB
[   61.167041][ T6078] 786301 pages RAM
[   61.168334][ T6078] 0 pages HighMem/MovableOnly
[   61.169853][ T6078] 241075 pages reserved
[   61.172186][ T6078] 0 pages cma reserved
[   61.839699][ T6104] netlink: 'syz.0.100': attribute type 3 has an invalid length.
[   61.848038][ T6104] netlink: 132 bytes leftover after parsing attributes in process `syz.0.100'.
[   62.190239][ T5218] Bluetooth: hci1: command tx timeout
[   62.191888][ T5838] Bluetooth: hci0: command tx timeout
[   62.272763][ T5218] Bluetooth: hci2: command tx timeout
[   62.474952][ T6154] netlink: 14 bytes leftover after parsing attributes in process `syz.2.123'.
[   62.478123][ T6154] openvswitch: netlink: Message has 4 unknown bytes.
[   63.784563][ T6187] netlink: 'syz.1.136': attribute type 6 has an invalid length.
[   64.001109][ T6196] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.141'.
[   64.003953][ T6196] netlink: 5 bytes leftover after parsing attributes in process `syz.2.141'.
[   64.146832][ T6203] syzkaller0: entered promiscuous mode
[   64.148579][ T6203] syzkaller0: entered allmulticast mode
[   64.194617][ T6210] netlink: 'syz.1.148': attribute type 21 has an invalid length.
[   64.821799][ T6210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.148'.
[   64.975436][ T6226] netlink: 'syz.0.155': attribute type 6 has an invalid length.
[   65.099535][ T6219] netlink: 'syz.1.153': attribute type 21 has an invalid length.
[   65.110217][ T6219] IPv6: NLM_F_CREATE should be specified when creating new route
[   65.113316][ T6219] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   65.116281][ T6219] IPv6: NLM_F_CREATE should be set when creating new route
[   65.119739][ T6219] IPv6: NLM_F_CREATE should be set when creating new route
[   65.123020][ T6219] IPv6: NLM_F_CREATE should be set when creating new route
[   67.551839][ T6258] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   67.699398][ T6269] netlink: 'syz.2.171': attribute type 2 has an invalid length.
[   67.719670][ T6273] netlink: 'syz.0.173': attribute type 2 has an invalid length.
[   67.721426][ T6269] netlink: 'syz.2.171': attribute type 8 has an invalid length.
[   67.723470][ T6273] netlink: 198064 bytes leftover after parsing attributes in process `syz.0.173'.
[   67.724437][ T6269] netlink: 132 bytes leftover after parsing attributes in process `syz.2.171'.
[   67.779850][ T6277] netdevsim netdevsim1 : renamed from netdevsim0 (while UP)
[   68.581053][ T6329] netlink: 8192 bytes leftover after parsing attributes in process `syz.1.200'.
[   68.779949][ T6339] netlink: 'syz.1.204': attribute type 10 has an invalid length.
[   68.792919][ T6339] veth1_vlan: entered allmulticast mode
[   68.848963][ T6339] team0: Device veth1_vlan failed to register rx_handler
[   68.895609][ T6347] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.208'.
[   68.915693][ T6339] syz.1.204 (6339) used greatest stack depth: 19088 bytes left
[   69.914406][ T6405] Zero length message leads to an empty skb
[   70.984886][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   70.987077][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   74.180081][    C0] sched: DL replenish lagged too much
[   81.085712][   T59] cfg80211: failed to load regulatory.db
[   85.394807][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   85.398075][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   85.402743][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   85.406154][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   85.408654][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   85.455234][ T5218] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   85.458444][ T5218] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   85.462827][ T5218] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   85.465660][ T5218] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   85.468708][ T5218] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   85.499463][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   85.504459][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   85.507243][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   85.509992][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   85.513174][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   86.831283][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 9570485410 wd_nsec: 9570484693
[   87.472179][ T5838] Bluetooth: hci3: command tx timeout
[   87.550267][ T5218] Bluetooth: hci4: command tx timeout
[   87.552497][ T5838] Bluetooth: hci5: command tx timeout
[   89.550379][ T5838] Bluetooth: hci3: command tx timeout
[   89.630325][ T5218] Bluetooth: hci4: command tx timeout
[   89.632160][ T5838] Bluetooth: hci5: command tx timeout
[   91.630237][ T5838] Bluetooth: hci3: command tx timeout
[   91.710283][ T5838] Bluetooth: hci5: command tx timeout
[   91.712051][ T5838] Bluetooth: hci4: command tx timeout
[   93.710369][ T5218] Bluetooth: hci3: command tx timeout
[   93.790394][ T5218] Bluetooth: hci4: command tx timeout
[   93.792615][ T5218] Bluetooth: hci5: command tx timeout
[  132.282937][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.284901][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  146.342875][ T5218] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  146.346279][ T5218] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  146.349050][ T5218] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  146.357913][ T5218] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  146.372428][ T5837] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  146.386634][ T5837] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  146.389799][ T5837] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  146.392666][ T5837] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  146.399987][ T5837] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  146.402917][ T5837] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  146.429007][ T5218] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  146.435441][ T5218] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  146.438408][ T5218] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  146.443225][ T5218] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  146.445798][ T5218] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  148.430424][ T5218] Bluetooth: hci6: command tx timeout
[  148.433487][ T5837] Bluetooth: hci7: command tx timeout
[  148.510521][ T5837] Bluetooth: hci8: command tx timeout
[  150.511817][ T5218] Bluetooth: hci6: command tx timeout
[  150.514224][ T5837] Bluetooth: hci7: command tx timeout
[  150.590450][ T5837] Bluetooth: hci8: command tx timeout
[  152.590504][ T5837] Bluetooth: hci7: command tx timeout
[  152.592234][ T5837] Bluetooth: hci6: command tx timeout
[  152.670469][ T5218] Bluetooth: hci8: command tx timeout
[  154.670419][ T5218] Bluetooth: hci6: command tx timeout
[  154.672174][ T5218] Bluetooth: hci7: command tx timeout
[  154.750395][ T5837] Bluetooth: hci8: command tx timeout
[  174.850147][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
SYZFAIL: failed to recv rpc
[  174.852257][    C0] rcu: 	0-....: (10500 ticks this GP) idle=d054/1/0x4000000000000000 softirq=21087/144034 fqs=5248
[  174.857119][    C0] rcu: 	         hardirqs   softirqs   csw/system
[  174.859076][    C0] rcu: 	 number:  1265310      74003            0
[  174.861024][    C0] rcu: 	cputime:    22457      29101          943   ==> 52500(ms)
[  174.863379][    C0] rcu: 	(t=10502 jiffies g=8281 q=2760 ncpus=2)
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  174.865286][    C0] CPU: 0 UID: 0 PID: 6395 Comm: syz.1.229 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  174.865304][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  174.865311][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110
[  174.865329][    C0] Code: 74 05 e8 cb 9e 56 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 13 cd 1f f6 65 8b 05 bc f9 2e 07 85 c0 74 40 48 c7 04 24 0e 36
[  174.865336][    C0] RSP: 0018:ffffc90000007aa0 EFLAGS: 00000206
[  174.865345][    C0] RAX: deff9e5b7af11700 RBX: 0000000000000a02 RCX: deff9e5b7af11700
[  174.865351][    C0] RDX: 0000000000000002 RSI: ffffffff8d99883e RDI: 0000000000000001
[  174.865355][    C0] RBP: ffffc90000007b20 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  174.865361][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: dffffc0000000000
[  174.865366][    C0] R13: ffff8880224cc810 R14: ffff8880224cc908 R15: 1ffff92000000f54
[  174.865371][    C0] FS:  00007f7a94dae6c0(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
[  174.865377][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  174.865382][    C0] CR2: 0000000000000004 CR3: 000000010ac52000 CR4: 00000000000006f0
[  174.865404][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  174.865410][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  174.865414][    C0] Call Trace:
[  174.865419][    C0]  <IRQ>
[  174.865423][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  174.865440][    C0]  skb_dequeue+0x10e/0x150
[  174.865455][    C0]  mrp_join_timer+0x91/0x170
[  174.865469][    C0]  call_timer_fn+0x17e/0x5f0
[  174.865479][    C0]  ? __pfx_mrp_join_timer+0x10/0x10
[  174.865493][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  174.865504][    C0]  ? call_timer_fn+0xbe/0x5f0
[  174.865511][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  174.865526][    C0]  ? __pfx_mrp_join_timer+0x10/0x10
[  174.865537][    C0]  __run_timer_base+0x61a/0x860
[  174.865548][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  174.865569][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  174.865589][    C0]  run_timer_softirq+0xb7/0x180
[  174.865600][    C0]  handle_softirqs+0x286/0x870
[  174.865613][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  174.865625][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  174.865632][    C0]  ? irq_work_single+0x1ac/0x240
[  174.865643][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  174.865655][    C0]  __irq_exit_rcu+0xca/0x1f0
[  174.865663][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  174.865674][    C0]  ? rcu_is_watching+0x15/0xb0
[  174.865685][    C0]  irq_exit_rcu+0x9/0x30
[  174.865693][    C0]  sysvec_irq_work+0xa3/0xc0
[  174.865701][    C0]  </IRQ>
[  174.865703][    C0]  <TASK>
[  174.865707][    C0]  asm_sysvec_irq_work+0x1a/0x20
[  174.865716][    C0] RIP: 0010:preempt_schedule_irq+0xb0/0x150
[  174.865727][    C0] Code: 24 20 f6 44 24 21 02 74 0c 90 0f 0b 48 f7 03 08 00 00 00 74 64 bf 01 00 00 00 e8 8b 2d 21 f6 e8 c6 00 58 f6 fb bf 01 00 00 00 <e8> 1b ab ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24
[  174.865733][    C0] RSP: 0018:ffffc900071d7d80 EFLAGS: 00000282
[  174.865739][    C0] RAX: deff9e5b7af11700 RBX: 0000000000000000 RCX: deff9e5b7af11700
[  174.865744][    C0] RDX: 0000000000000000 RSI: ffffffff8d99883e RDI: 0000000000000001
[  174.865749][    C0] RBP: ffffc900071d7e30 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  174.865754][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 0000000000000000
[  174.865759][    C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000e3afb0
[  174.865774][    C0]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  174.865789][    C0]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  174.865799][    C0]  irqentry_exit+0x6f/0x90
[  174.865808][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  174.865815][    C0] RIP: 0010:do_syscall_64+0xc3/0x3b0
[  174.865825][    C0] Code: 00 48 8b 7d 08 48 89 7b 18 e8 49 5a 00 00 0f 1f 44 00 00 0f 1f 44 00 00 90 e8 c9 84 59 f6 90 90 e8 72 84 59 f6 fb 49 8b 57 08 <f6> c2 3f 74 0e 4c 89 f7 4c 89 ee e8 cd dc 3c f6 49 89 c4 90 90 41
[  174.865831][    C0] RSP: 0018:ffffc900071d7ef0 EFLAGS: 00000286
[  174.865837][    C0] RAX: deff9e5b7af11700 RBX: ffffc900071d7ef0 RCX: deff9e5b7af11700
[  174.865842][    C0] RDX: 0000000000000000 RSI: ffffffff8d99883e RDI: ffffffff8be29f40
[  174.865846][    C0] RBP: ffffc900071d7f48 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  174.865851][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 00000000000000ca
[  174.865856][    C0] R13: 00000000000000ca R14: ffffc900071d7f58 R15: ffff888022631cc0
[  174.865871][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.865878][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  174.865888][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.865895][    C0] RIP: 0033:0x7f7a93f8e9a9
[  174.865904][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  174.865910][    C0] RSP: 002b:00007f7a94dae0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  174.865917][    C0] RAX: ffffffffffffffda RBX: 00007f7a941b5fa8 RCX: 00007f7a93f8e9a9
[  174.865922][    C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7a941b5fa8
[  174.865926][    C0] RBP: 00007f7a941b5fa0 R08: 0000000000000000 R09: 0000000000000000
[  174.865930][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7a941b5fac
[  174.865935][    C0] R13: 0000000000000000 R14: 00007ffcfc375110 R15: 00007ffcfc3751f8
[  174.865948][    C0]  </TASK>
[  180.430477][ T5218] Bluetooth: hci1: command 0x0406 tx timeout
[  181.635874][ T5218] Bluetooth: hci2: command 0x0406 tx timeout
[  181.637859][ T5218] Bluetooth: hci0: command 0x0406 tx timeout

VM DIAGNOSIS:
08:50:40  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000050 RBX=0000000000000050 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000006dd0
R8 =ffff8881089f8237 R9 =1ffff1102113f046 R10=dffffc0000000000 R11=ffffffff85472aa0
R12=dffffc0000000000 R13=ffffffff99af58b9 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff85472b1c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f7a94dae6c0 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000004 CR3=000000010ac52000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f7a94186478 00007f7a94186450 XMM03=00007f7a94186488 00007f7a94186480
XMM04=00007f7a94ced100 00007f7a94186440 XMM05=00007f7a94186458 00007f7a941864a0
XMM06=00007f7a94186498 00007f7a94186490 XMM07=00007f7a94186488 00007f7a94186480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f7a94011ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffffea0004228040 RCX=ffffffff8215669e RDX=0000000000000000
RSI=0000000000000004 RDI=ffffea000422805c RBP=0000000000000000 RSP=ffffc900038ff448
R8 =ffffea000422805f R9 =1ffffd400084500b R10=dffffc0000000000 R11=fffff9400084500c
R12=ffffea0004228000 R13=dffffc0000000000 R14=0000000000000000 R15=ffffea000422805c
RIP=ffffffff821566aa RFL=00000a03 [-O----C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007faaa894c800 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffe7b4d5df8 CR3=000000002891c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
