last executing test programs:

20.785553923s ago: executing program 0 (id=177):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c0", 0x1}], 0x1}, 0x0)
close(r2)

20.26791095s ago: executing program 1 (id=183):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61126700000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560702000f0200006706000020000000620a00ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066d7ded3c5c49a08a503ea6d54f7f3125a8200578ac0836d6454745e70a27444003c5b20451b624db6f5320e9befc1e00b8b32917c4d30d16b7edb732bc3ac330b16c442aff70d27659bc58e296b16750c5577c848754b4894b07f15bab1c640a5c0c4fd62f9db829b301ef67fd2b2736f3af0c54af2412313b17c4c8081c4ed0572261960e227d34cfbfdb247bc2351c9d8363a8cb18b7330604da78b0aba47545f9a25a80dd7d28a5ae41824f611dd2de6dd581c52698f9542a444a8a3969946faded5d0e14c6c946eeb44fe63275c00000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)

20.264798947s ago: executing program 0 (id=184):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x8, 0x6, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4c000)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xff0a, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x78}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

20.084437304s ago: executing program 1 (id=186):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x325)
r1 = socket$kcm(0x29, 0x2, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xe}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x7}, @ldst={0x1, 0x3, 0x3, 0xa, 0x4, 0x2, 0xfffffffffffffff0}, @exit, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @tail_call]}, &(0x7f0000000600)='syzkaller\x00', 0x8, 0x4c, &(0x7f0000000640)=""/76, 0x41100, 0xa35500cc1455f99a, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x2665f, 0xffffffffffffffff, 0x0, &(0x7f0000000740)=[0x1, r0, 0x1]}, 0x94)
r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x9)
ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f00000009c0)=r4)
sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)}, {0x0}, {&(0x7f0000000200)="50990b23a408e931f3993c746265ac886d7cf96baf95e15fc8fc2b4a12670fe5a60f", 0x22}, {&(0x7f0000000280)}, {&(0x7f0000000340)="1d6bda165d9fe3069fde15a1ed4a0572db648a3cf23c7ca615427276c45b5c35d0f93166ce42891a73edcce361148429238765b714c50ba16c136d8a8065f1e967c93cd4f8f653d710797f3bc7bda8601515f12f40fc02c6136d01f376b7eef42808b70cc0d39f2ee93f913be9a8ba36bac80650f177a56110500866d23d8a5eb0bf5e78159b9679c5ffd9a75bb91d2ef23385a18974ad80d669bca780b0d49965", 0xa1}, {&(0x7f0000000400)="b6508902131637eb1c5bfa7fd58e0bf1bd", 0x11}], 0x6, &(0x7f00000004c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x800}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}], 0x48}, 0x42000)

19.878844348s ago: executing program 1 (id=188):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94)
perf_event_open(&(0x7f0000000680)={0x1, 0xb0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x352, 0x1, @perf_config_ext={0x9, 0xfffffffffffffff1}, 0x100e64, 0xc78, 0x0, 0x0, 0x1, 0x0, 0x10, 0x0, 0xb, 0x0, 0x1fffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x99}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r0, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$sock(r5, &(0x7f0000000740)={&(0x7f0000000100)=@nl=@unspec, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)="73dca369775ec47f3f556b9720627a7fa98a9c95182b29f27f2f0d55e044aae3b9ebcc146b29cfff", 0x28}], 0x1, &(0x7f0000000700)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x18}, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$kcm(0xf, 0x3, 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000100730109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90)
sendmsg$inet(r6, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r7, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000005c0)=[0x0, 0x0], ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900), 0x0, 0xcc, &(0x7f0000000940)=[{}], 0x8, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0xb4, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0xf, 0x12, &(0x7f0000000640)=ANY=[@ANYBLOB="180000002c0e0000000ef738570800009500200000000000181c0000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000c8040c00ff0000001850000002000000000000000000000018400000fcffffff000000000000000018280000", @ANYRES32=r3, @ANYBLOB="000000000400000018210000", @ANYRES32, @ANYBLOB="00000000030000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x7, 0xa1, &(0x7f0000000800)=""/161, 0x40f00, 0x1c, '\x00', r8, @cgroup_device=0x6, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a80)={0x0, 0x9, 0x7, 0x4}, 0x10, 0x0, r7, 0x5, &(0x7f0000000d40)=[r3, r3, r3, r3], &(0x7f0000000d80)=[{0x2, 0x4, 0x4, 0xc}, {0x3, 0x1, 0x7, 0x2}, {0x5, 0x4, 0xc}, {0x0, 0x5, 0x7, 0x8}, {0x4, 0x3, 0xa}], 0x10, 0x100}, 0x94)
sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="12e0bb305ff9c397f76cad60defb94bfa3527d4f94570023d267c9a2dc2b5153926146b5b7f1c1ad568e52aa691c825e34b2d6a56dde1b5edbf17bc8d702bedefc2173f107d63f0694328df62533b3d6cce6e9f7c0ba330c5cd8a77e61c429b9f7906aa653a3d3b992b55cb100d825c697f2656c047837f31bac341970c2df002c16cf7bd39a3501f1165b83ca25b2fd7f5866d2e244e6ecc2ffb4f89b10bc91bb6ccdd9d0babbcea5b38a39a41bf6a10a7a0337ca0e1d399b18780a2a6c8a3573a2d40219143536a06902dd28b9c2377bdf8dcb83df6ed38a59eb2bbf92b7f547287b2ca17eca7a5580ad3ef3ebfe", 0xef}, {&(0x7f0000000080)="6d6c04134bee31fe", 0x8}], 0x2, &(0x7f0000000300)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @multicast2, @rand_addr=0x64010101}}}], 0x70}, 0x4000000)
sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80)

19.827303939s ago: executing program 0 (id=189):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)

19.826476573s ago: executing program 0 (id=190):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000e10000000000000000008500000053000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

19.467504535s ago: executing program 1 (id=192):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0x4}, 0x14105, 0x2e, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
r2 = socket$kcm(0x2, 0x5, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4)
perf_event_open(&(0x7f0000002800)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0x4}, 0x11411d, 0x32, 0xfffffbfd, 0x3, 0x8000, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x9)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40814)
recvmsg(0xffffffffffffffff, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000027c0)}, 0x10100)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a0091000b00b80000fc005f02"], 0xfe33)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14065, 0x0, 0x0, 0x5f5f10e8e5bda32e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7cdd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1d, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000310000"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x2040, 0xc8, 0xfff, 0x5, 0x7, 0x9, 0x400}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_pressure(r5, &(0x7f0000000200)={'some', 0x20, 0x95, 0x20, 0x3ff}, 0x2f)
sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8)

19.106272511s ago: executing program 1 (id=194):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000063060000000000008510000002000000850000000000000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x70)

18.85876468s ago: executing program 1 (id=195):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x1009, 0x2e, 0x4, 0x3, 0x3, 0x40, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
write$cgroup_int(r2, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8)
write$cgroup_int(r5, &(0x7f00000001c0), 0xfffffdef)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

18.714896423s ago: executing program 32 (id=195):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x1009, 0x2e, 0x4, 0x3, 0x3, 0x40, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
write$cgroup_int(r2, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8)
write$cgroup_int(r5, &(0x7f00000001c0), 0xfffffdef)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

18.667354947s ago: executing program 0 (id=197):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@generic={&(0x7f0000000080)='./file0\x00', r0}, 0x18)

18.417542339s ago: executing program 0 (id=198):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001e00)={@map, 0xffffffffffffffff, 0x1, 0x16}, 0x20)

18.417437455s ago: executing program 33 (id=198):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001e00)={@map, 0xffffffffffffffff, 0x1, 0x16}, 0x20)

16.918506218s ago: executing program 2 (id=211):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000810283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)

16.827642566s ago: executing program 2 (id=212):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r0, 0x107, 0x2, &(0x7f00000000c0), 0x10)

16.155697747s ago: executing program 2 (id=213):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x36, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

16.057613599s ago: executing program 2 (id=214):
r0 = socket$kcm(0x10, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x17, 0x0, 0x0)

15.966858658s ago: executing program 2 (id=215):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'veth0_to_team\x00', 0x400})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000580)={0x0, 0x0})

15.062794449s ago: executing program 2 (id=216):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008", @ANYRES32=<r2=>0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x48)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={&(0x7f0000000300), 0xf}, 0x14105, 0x2d, 0xfffffbff, 0xa, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', @ANYRES32=0x0, @ANYRESDEC=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES8=r1], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socketpair(0x26, 0xa, 0x5, 0x0)
r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x4147, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001)
sendmsg(r5, 0x0, 0x0)
r6 = socket$kcm(0x2, 0x5, 0x84)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, 0x0, 0x4044)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf, 0x18002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x6, @perf_bp={0x0, 0xb}, 0x105c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x2000)
r8 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000004000000000100000200000d000100001e597e38082e66f40000000000000003755f1e04"], 0x0, 0x38, 0x0, 0x1}, 0x28)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x8924, 0x0)

0s ago: executing program 34 (id=216):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008", @ANYRES32=<r2=>0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x48)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={&(0x7f0000000300), 0xf}, 0x14105, 0x2d, 0xfffffbff, 0xa, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', @ANYRES32=0x0, @ANYRESDEC=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES8=r1], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socketpair(0x26, 0xa, 0x5, 0x0)
r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x4147, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001)
sendmsg(r5, 0x0, 0x0)
r6 = socket$kcm(0x2, 0x5, 0x84)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, 0x0, 0x4044)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf, 0x18002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x6, @perf_bp={0x0, 0xb}, 0x105c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x2000)
r8 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000004000000000100000200000d000100001e597e38082e66f40000000000000003755f1e04"], 0x0, 0x38, 0x0, 0x1}, 0x28)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x8924, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:24829' (ED25519) to the list of known hosts.
syzkaller login: [   56.891263][ T5818] cgroup: Unknown subsys name 'net'
[   57.037050][ T5818] cgroup: Unknown subsys name 'cpuset'
[   57.043468][ T5818] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.326613][ T5818] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   65.462959][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   65.475080][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   65.480067][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   65.484351][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   65.488010][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   65.502674][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   65.506747][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   65.523153][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   65.527866][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   65.532909][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   65.572467][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   65.577370][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   65.581614][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   65.589832][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   65.593932][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   65.877104][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   65.928348][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   66.058709][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.063030][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.066556][ T5833] bridge_slave_0: entered allmulticast mode
[   66.071118][ T5833] bridge_slave_0: entered promiscuous mode
[   66.080306][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.083795][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.087227][ T5833] bridge_slave_1: entered allmulticast mode
[   66.091398][ T5833] bridge_slave_1: entered promiscuous mode
[   66.113585][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   66.186953][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.190019][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.194148][ T5837] bridge_slave_0: entered allmulticast mode
[   66.198113][ T5837] bridge_slave_0: entered promiscuous mode
[   66.205479][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.230452][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.233795][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.237151][ T5837] bridge_slave_1: entered allmulticast mode
[   66.241207][ T5837] bridge_slave_1: entered promiscuous mode
[   66.247449][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.296236][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.303386][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.369033][ T5833] team0: Port device team_slave_0 added
[   66.375440][ T5837] team0: Port device team_slave_0 added
[   66.378046][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.381587][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.385166][ T5842] bridge_slave_0: entered allmulticast mode
[   66.388152][ T5842] bridge_slave_0: entered promiscuous mode
[   66.393552][ T5833] team0: Port device team_slave_1 added
[   66.412844][ T5837] team0: Port device team_slave_1 added
[   66.415412][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.418040][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.420505][ T5842] bridge_slave_1: entered allmulticast mode
[   66.424747][ T5842] bridge_slave_1: entered promiscuous mode
[   66.478580][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.481541][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.494876][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.500828][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.504592][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.514500][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.529708][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.533531][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.542722][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.548505][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.550746][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.559423][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.566555][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.586340][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.626634][ T5842] team0: Port device team_slave_0 added
[   66.646394][ T5842] team0: Port device team_slave_1 added
[   66.710707][ T5833] hsr_slave_0: entered promiscuous mode
[   66.714951][ T5833] hsr_slave_1: entered promiscuous mode
[   66.737514][ T5837] hsr_slave_0: entered promiscuous mode
[   66.740772][ T5837] hsr_slave_1: entered promiscuous mode
[   66.744386][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   66.747615][ T5837] Cannot create hsr debugfs directory
[   66.750996][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.754229][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.765312][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.772535][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.774821][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.783972][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.942540][ T5842] hsr_slave_0: entered promiscuous mode
[   66.944976][ T5842] hsr_slave_1: entered promiscuous mode
[   66.947197][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   66.950286][ T5842] Cannot create hsr debugfs directory
[   67.173258][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   67.184234][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   67.206804][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   67.214422][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   67.296423][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   67.306892][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   67.334561][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   67.342778][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   67.383143][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   67.387672][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   67.397300][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   67.404752][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   67.469270][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.493031][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   67.516850][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.520390][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.535653][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.538977][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.552997][ T5840] Bluetooth: hci0: command tx timeout
[   67.553055][   T54] Bluetooth: hci1: command tx timeout
[   67.571412][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.617760][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   67.631002][ T3590] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.633610][ T3590] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.636279][   T54] Bluetooth: hci2: command tx timeout
[   67.654604][ T3590] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.656977][ T3590] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.664262][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.703648][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   67.736494][ T3590] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.738923][ T3590] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.766873][  T149] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.769439][  T149] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.857923][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.924674][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.928413][ T5837] veth0_vlan: entered promiscuous mode
[   67.940056][ T5837] veth1_vlan: entered promiscuous mode
[   67.979230][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.987377][ T5837] veth0_macvtap: entered promiscuous mode
[   67.998534][ T5837] veth1_macvtap: entered promiscuous mode
[   68.014222][ T5833] veth0_vlan: entered promiscuous mode
[   68.030544][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.033751][ T5833] veth1_vlan: entered promiscuous mode
[   68.052554][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.061511][ T5842] veth0_vlan: entered promiscuous mode
[   68.068194][ T5837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.071103][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.074787][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.077686][ T5837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.088806][ T5842] veth1_vlan: entered promiscuous mode
[   68.110860][ T5833] veth0_macvtap: entered promiscuous mode
[   68.123768][ T5833] veth1_macvtap: entered promiscuous mode
[   68.160501][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.168043][ T5842] veth0_macvtap: entered promiscuous mode
[   68.186565][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.191090][ T5842] veth1_macvtap: entered promiscuous mode
[   68.208159][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.211011][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.216409][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.219184][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.242642][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.246459][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.261263][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.295732][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.310176][ T5842] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.314849][ T5842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.317844][ T5842] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.320775][ T5842] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.328515][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.335597][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.353927][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.357111][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.400205][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   68.423154][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.427489][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.473506][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.476905][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.509329][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.514257][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.551642][ T5902] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2'.
[   68.574719][ T5904] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3'.
[   69.048068][ T5930] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12'.
[   69.080736][ T5930] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12'.
[   69.109169][ T5932] netlink: 10 bytes leftover after parsing attributes in process `syz.0.13'.
[   69.113854][ T5930] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12'.
[   69.371935][    C0] hrtimer: interrupt took 37753 ns
[   69.632879][   T54] Bluetooth: hci1: command tx timeout
[   69.642524][   T54] Bluetooth: hci0: command tx timeout
[   69.712041][   T54] Bluetooth: hci2: command tx timeout
[   70.411081][ T5952] Driver unsupported XDP return value 0 on prog  (id 9) dev N/A, expect packet loss!
[   71.012835][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.016137][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.233942][ T5971] netlink: 132 bytes leftover after parsing attributes in process `syz.1.29'.
[   71.249606][   T54] Bluetooth: hci1: ISO packet for unknown connection handle 3327
[   71.254896][   T54] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[   71.336691][ T5976] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.712452][ T5840] Bluetooth: hci0: command tx timeout
[   71.714886][ T5840] Bluetooth: hci1: command tx timeout
[   71.730017][ T5996] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.41'.
[   71.792171][   T54] Bluetooth: hci2: command tx timeout
[   71.843968][ T6000] netlink: 'syz.0.43': attribute type 21 has an invalid length.
[   72.005712][ T6008] netlink: 'syz.1.47': attribute type 1 has an invalid length.
[   72.008993][ T6008] netlink: 'syz.1.47': attribute type 4 has an invalid length.
[   72.033845][ T6008] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.47'.
[   72.043904][ T6008] netlink: 'syz.1.47': attribute type 1 has an invalid length.
[   72.053285][ T6008] netlink: 'syz.1.47': attribute type 4 has an invalid length.
[   72.062011][ T6008] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.47'.
[   72.459341][ T6031] netlink: 'syz.1.58': attribute type 15 has an invalid length.
[   72.462155][ T6031] netlink: 'syz.1.58': attribute type 7 has an invalid length.
[   75.677768][   T54] Bluetooth: hci2: command tx timeout
[   75.677830][ T5840] Bluetooth: hci1: command tx timeout
[   75.677864][ T5840] Bluetooth: hci0: command tx timeout
[   76.263272][ T6094] netlink: 'syz.0.88': attribute type 29 has an invalid length.
[   76.280642][ T6094] netlink: 'syz.0.88': attribute type 29 has an invalid length.
[   76.287625][ T6094] netlink: 'syz.0.88': attribute type 29 has an invalid length.
[   76.310090][ T6100] Zero length message leads to an empty skb
[   76.414726][ T6102] __nla_validate_parse: 2 callbacks suppressed
[   76.414742][ T6102] netlink: 60 bytes leftover after parsing attributes in process `syz.1.92'.
[   76.431868][ T6106] veth0_vlan: entered allmulticast mode
[   76.531088][ T6109] veth0_vlan: left promiscuous mode
[   76.550146][ T6109] veth0_vlan: entered promiscuous mode
[   76.616580][ T6110] delete_channel: no stack
[   77.207496][ T5840] Bluetooth: hci2: unexpected event 0x1d length: 15 > 5
[   78.139804][ T6187] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.124'.
[   79.475792][ T6215] IPv6: Can't replace route, no match found
[   80.348921][ T6235] sctp: [Deprecated]: syz.0.151 (pid 6235) Use of int in maxseg socket option.
[   80.348921][ T6235] Use struct sctp_assoc_value instead
[   81.247211][ T1269] cfg80211: failed to load regulatory.db
[   81.373900][ T6272] validate_nla: 1 callbacks suppressed
[   81.373923][ T6272] netlink: 'syz.1.168': attribute type 2 has an invalid length.
[   82.408752][ T6276] netlink: 'syz.0.170': attribute type 21 has an invalid length.
[   83.467117][ T6310] syzkaller0: tun_chr_ioctl cmd 1074025677
[   83.469590][ T6310] syzkaller0: linktype set to 805
[   83.735346][ T6313] netlink: 152 bytes leftover after parsing attributes in process `syz.2.187'.
[   83.739516][ T6313] netlink: 6 bytes leftover after parsing attributes in process `syz.2.187'.
[   83.778401][ T6315] netlink: 'syz.1.188': attribute type 10 has an invalid length.
[   83.778735][ T6315] netlink: 2 bytes leftover after parsing attributes in process `syz.1.188'.
[   83.796339][ T6315] team0: entered promiscuous mode
[   83.820402][ T6315] team_slave_0: entered promiscuous mode
[   83.828903][ T6315] team_slave_1: entered promiscuous mode
[   83.852726][ T6315] bridge0: port 3(team0) entered blocking state
[   83.861055][ T6315] bridge0: port 3(team0) entered disabled state
[   83.865430][ T6315] team0: entered allmulticast mode
[   83.867411][ T6315] team_slave_0: entered allmulticast mode
[   83.869965][ T6315] team_slave_1: entered allmulticast mode
[   83.945943][ T6315] bridge0: port 3(team0) entered blocking state
[   83.948847][ T6315] bridge0: port 3(team0) entered forwarding state
[   84.059780][ T6315] syz.1.188 (6315) used greatest stack depth: 19448 bytes left
[   84.227665][ T6325] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.192'.
[   84.952960][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.029769][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.080400][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.167966][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.409113][   T13] bridge_slave_1: left allmulticast mode
[   85.411823][   T13] bridge_slave_1: left promiscuous mode
[   85.432914][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.477571][   T13] bridge_slave_0: left allmulticast mode
[   85.483127][   T13] bridge_slave_0: left promiscuous mode
[   85.492811][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.566142][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   85.575156][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   85.579917][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   85.585949][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   85.596993][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   85.746580][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   85.756228][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   85.760675][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   85.768122][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   85.780932][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   85.937689][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   85.944358][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   85.948147][   T13] bond0 (unregistering): Released all slaves
[   85.965096][ T6352] netlink: 192 bytes leftover after parsing attributes in process `syz.2.202'.
[   86.127830][ T6361] netlink: 'syz.2.205': attribute type 41 has an invalid length.
[   86.130565][ T6361] netlink: 40 bytes leftover after parsing attributes in process `syz.2.205'.
[   86.529420][   T13] hsr_slave_0: left promiscuous mode
[   86.531601][   T13] hsr_slave_1: left promiscuous mode
[   86.533997][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   86.536354][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   86.540220][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   86.551653][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   86.562419][   T13] veth1_macvtap: left promiscuous mode
[   86.565554][   T13] veth0_macvtap: left promiscuous mode
[   86.567877][   T13] veth1_vlan: left promiscuous mode
[   86.570032][   T13] veth0_vlan: left promiscuous mode
[   86.955797][   T13] team0 (unregistering): Port device team_slave_1 removed
[   86.980788][   T13] team0 (unregistering): Port device team_slave_0 removed
[   87.354852][ T6353] chnl_net:caif_netlink_parms(): no params data found
[   87.486432][ T6345] chnl_net:caif_netlink_parms(): no params data found
[   87.642329][ T5840] Bluetooth: hci1: command tx timeout
[   87.741712][ T6353] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.744436][ T6353] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.747028][ T6353] bridge_slave_0: entered allmulticast mode
[   87.753234][ T6353] bridge_slave_0: entered promiscuous mode
[   88.442173][ T5840] Bluetooth: hci2: command tx timeout
[   90.513114][ T5840] Bluetooth: hci2: command tx timeout
[   92.592250][ T5840] Bluetooth: hci2: command tx timeout
[   94.672530][ T5840] Bluetooth: hci2: command tx timeout
[  103.797083][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  103.800505][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  103.804265][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  103.807582][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  103.810177][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  105.872447][ T5836] Bluetooth: hci3: command tx timeout
[  107.952617][ T5836] Bluetooth: hci3: command tx timeout
[  110.032229][ T5836] Bluetooth: hci3: command tx timeout
[  112.112090][ T5836] Bluetooth: hci3: command tx timeout
[  145.886116][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  145.889714][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  145.896436][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  145.899915][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  145.905785][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  146.296561][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  146.299774][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  146.303059][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  146.306676][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  146.309400][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  147.952207][ T5840] Bluetooth: hci4: command tx timeout
[  148.352253][ T5840] Bluetooth: hci5: command tx timeout
[  150.032107][ T5840] Bluetooth: hci4: command tx timeout
[  150.172244][ T5840] Bluetooth: hci1: command tx timeout
[  150.432977][ T5840] Bluetooth: hci5: command tx timeout
[  152.112141][ T5840] Bluetooth: hci4: command tx timeout
[  152.192694][ T5840] Bluetooth: hci1: command tx timeout
[  152.512156][ T5840] Bluetooth: hci5: command tx timeout
[  154.192054][ T5840] Bluetooth: hci4: command tx timeout
[  154.272142][ T5840] Bluetooth: hci1: command tx timeout
[  154.592744][ T5840] Bluetooth: hci5: command tx timeout
[  164.761571][ T5836] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  164.766777][ T5836] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  164.769657][ T5836] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  164.773933][ T5836] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  164.776762][ T5836] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  166.832239][ T5836] Bluetooth: hci6: command tx timeout
[  168.912386][ T5836] Bluetooth: hci6: command tx timeout
[  170.992196][ T5836] Bluetooth: hci6: command tx timeout
[  173.072326][ T5836] Bluetooth: hci6: command tx timeout
[  190.832250][ T5836] Bluetooth: hci0: command 0x0406 tx timeout
[  192.781899][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
[  192.783928][    C0] rcu: 	0-....: (1 GPs behind) idle=baec/1/0x4000000000000000 softirq=17960/17967 fqs=5249
SYZFAIL: failed to recv rpc
[  192.788877][    C0] rcu: 	         hardirqs   softirqs   csw/system
[  192.790834][    C0] rcu: 	 number:  1035921          0            0
[  192.792741][    C0] rcu: 	cputime:    25754      26745           91   ==> 52510(ms)
[  192.795092][    C0] rcu: 	(t=10502 jiffies g=10881 q=2156 ncpus=2)
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  192.797093][    C0] CPU: 0 UID: 0 PID: 6411 Comm: syz.2.216 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  192.797112][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  192.797122][    C0] RIP: 0010:rcu_read_unlock_special+0x87/0x4c0
[  192.797144][    C0] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 62 2c f8 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
[  192.797152][    C0] RSP: 0018:ffffc90000006f80 EFLAGS: 00000206
[  192.797160][    C0] RAX: 7d22dd49771c0600 RBX: 1ffff92000000df8 RCX: 7d22dd49771c0600
[  192.797166][    C0] RDX: 0000000000000002 RSI: ffffffff8d99883e RDI: ffffffff8be29f40
[  192.797171][    C0] RBP: ffffc90000007078 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  192.797176][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffffffff8e144400
[  192.797181][    C0] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000001
[  192.797186][    C0] FS:  00007f4c4a5f96c0(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
[  192.797192][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  192.797197][    C0] CR2: 0000000000000000 CR3: 0000000106d36000 CR4: 00000000000006f0
[  192.797219][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  192.797225][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  192.797229][    C0] Call Trace:
[  192.797234][    C0]  <IRQ>
[  192.797238][    C0]  ? __lock_acquire+0xab9/0xd20
[  192.797252][    C0]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  192.797266][    C0]  ? unwind_next_frame+0xa5/0x2390
[  192.797280][    C0]  __rcu_read_unlock+0x84/0xe0
[  192.797292][    C0]  ? unwind_next_frame+0xa5/0x2390
[  192.797299][    C0]  unwind_next_frame+0x19ae/0x2390
[  192.797312][    C0]  ? unwind_next_frame+0xa5/0x2390
[  192.797320][    C0]  ? __pfx_futex_wake+0x10/0x10
[  192.797331][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  192.797342][    C0]  arch_stack_walk+0x11c/0x150
[  192.797356][    C0]  ? do_futex+0x395/0x420
[  192.797370][    C0]  stack_trace_save+0x9c/0xe0
[  192.797380][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  192.797392][    C0]  ? __irq_exit_rcu+0xd8/0x1f0
[  192.797402][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  192.797412][    C0]  kasan_save_track+0x3e/0x80
[  192.797420][    C0]  ? kasan_save_track+0x3e/0x80
[  192.797425][    C0]  ? kasan_save_free_info+0x46/0x50
[  192.797464][    C0]  ? __kasan_slab_free+0x62/0x70
[  192.797470][    C0]  ? kmem_cache_free+0x18f/0x400
[  192.797479][    C0]  ? skb_release_data+0x62d/0x7c0
[  192.797489][    C0]  ? kfree_skb_list_reason+0x25d/0x460
[  192.797496][    C0]  ? __dev_queue_xmit+0x2148/0x3a70
[  192.797506][    C0]  ? lapb_data_transmit+0x90/0xb0
[  192.797515][    C0]  ? lapb_transmit_buffer+0x163/0x200
[  192.797521][    C0]  ? lapb_t1timer_expiry+0x699/0xab0
[  192.797528][    C0]  ? call_timer_fn+0x17e/0x5f0
[  192.797536][    C0]  ? __run_timer_base+0x61a/0x860
[  192.797546][    C0]  ? run_timer_softirq+0xb7/0x180
[  192.797556][    C0]  ? handle_softirqs+0x286/0x870
[  192.797563][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  192.797570][    C0]  ? irq_exit_rcu+0x9/0x30
[  192.797577][    C0]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  192.797588][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  192.797597][    C0]  ? __pfx_futex_wake+0x10/0x10
[  192.797624][    C0]  ? skb_release_data+0x62d/0x7c0
[  192.797632][    C0]  kasan_save_free_info+0x46/0x50
[  192.797642][    C0]  __kasan_slab_free+0x62/0x70
[  192.797650][    C0]  kmem_cache_free+0x18f/0x400
[  192.797661][    C0]  skb_release_data+0x62d/0x7c0
[  192.797676][    C0]  kfree_skb_list_reason+0x25d/0x460
[  192.797689][    C0]  ? __pfx_kfree_skb_list_reason+0x10/0x10
[  192.797696][    C0]  ? __lock_acquire+0xab9/0xd20
[  192.797717][    C0]  ? do_raw_spin_unlock+0x4d/0x240
[  192.797730][    C0]  __dev_queue_xmit+0x2148/0x3a70
[  192.797740][    C0]  ? perf_trace_run_bpf_submit+0xee/0x170
[  192.797755][    C0]  ? __dev_queue_xmit+0x27e/0x3a70
[  192.797766][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  192.797781][    C0]  ? __irq_exit_rcu+0xd8/0x1f0
[  192.797788][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  192.797797][    C0]  ? __pfx___dev_queue_xmit+0x10/0x10
[  192.797807][    C0]  ? irqentry_exit+0x74/0x90
[  192.797816][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  192.797834][    C0]  ? rcu_is_watching+0x15/0xb0
[  192.797843][    C0]  ? trace_kmem_cache_alloc+0x1f/0xc0
[  192.797849][    C0]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  192.797856][    C0]  ? eth_header+0x11b/0x200
[  192.797867][    C0]  ? __asan_memcpy+0x40/0x70
[  192.797878][    C0]  ? eth_header+0x11b/0x200
[  192.797888][    C0]  ? __pfx_eth_header+0x10/0x10
[  192.797895][    C0]  ? lapbeth_data_transmit+0x218/0x2e0
[  192.797909][    C0]  ? __pfx_lapbeth_data_transmit+0x10/0x10
[  192.797918][    C0]  lapb_data_transmit+0x90/0xb0
[  192.797928][    C0]  lapb_transmit_buffer+0x163/0x200
[  192.797937][    C0]  lapb_t1timer_expiry+0x699/0xab0
[  192.797950][    C0]  call_timer_fn+0x17e/0x5f0
[  192.797958][    C0]  ? __pfx_lapb_t1timer_expiry+0x10/0x10
[  192.797965][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  192.797973][    C0]  ? call_timer_fn+0xbe/0x5f0
[  192.797980][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  192.797994][    C0]  ? __pfx_lapb_t1timer_expiry+0x10/0x10
[  192.798003][    C0]  __run_timer_base+0x61a/0x860
[  192.798012][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  192.798035][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  192.798055][    C0]  run_timer_softirq+0xb7/0x180
[  192.798066][    C0]  handle_softirqs+0x286/0x870
[  192.798076][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  192.798088][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  192.798102][    C0]  __irq_exit_rcu+0xca/0x1f0
[  192.798110][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  192.798124][    C0]  irq_exit_rcu+0x9/0x30
[  192.798131][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  192.798141][    C0]  </IRQ>
[  192.798143][    C0]  <TASK>
[  192.798147][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  192.798155][    C0] RIP: 0010:futex_wake+0x0/0x500
[  192.798162][    C0] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 0a 18 0d 03 e8 65 e1 0b 00 e9 0d ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48
[  192.798168][    C0] RSP: 0018:ffffc90003a5fcf8 EFLAGS: 00000283
[  192.798175][    C0] RAX: ffffffff81b3c07d RBX: dffffc0000000000 RCX: 00000000ffffffff
[  192.798180][    C0] RDX: 00000000000f4240 RSI: 0000000000000002 RDI: 00007f4c499b5fac
[  192.798185][    C0] RBP: ffffc90003a5fdc8 R08: ffff888108723980 R09: 000000000000000d
[  192.798190][    C0] R10: 000000000000000d R11: 0000000000000002 R12: ffffc90003a5fd60
[  192.798194][    C0] R13: 0000000000000001 R14: 1ffff9200074bfa8 R15: 0000000000000000
[  192.798203][    C0]  ? do_futex+0x36d/0x420
[  192.798216][    C0]  do_futex+0x395/0x420
[  192.798226][    C0]  ? perf_trace_preemptirq_template+0x280/0x340
[  192.798240][    C0]  ? __pfx_do_futex+0x10/0x10
[  192.798249][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  192.798263][    C0]  __se_sys_futex+0x36f/0x400
[  192.798277][    C0]  ? __pfx___se_sys_futex+0x10/0x10
[  192.798291][    C0]  ? __x64_sys_futex+0x21/0xf0
[  192.798303][    C0]  do_syscall_64+0xfa/0x3b0
[  192.798315][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.798322][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  192.798332][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.798339][    C0] RIP: 0033:0x7f4c4978e9a9
[  192.798348][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  192.798354][    C0] RSP: 002b:00007f4c4a5f90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  192.798361][    C0] RAX: ffffffffffffffda RBX: 00007f4c499b5fa8 RCX: 00007f4c4978e9a9
[  192.798366][    C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4c499b5fac
[  192.798371][    C0] RBP: 00007f4c499b5fa0 R08: 7fffffffffffffff R09: 0000000000000000
[  192.798375][    C0] R10: 000000000000000a R11: 0000000000000246 R12: 00007f4c499b5fac
[  192.798380][    C0] R13: 0000000000000000 R14: 00007fffa0cb7580 R15: 00007fffa0cb7668
[  192.798394][    C0]  </TASK>
[  193.060023][    C0] sched: DL replenish lagged too much

VM DIAGNOSIS:
08:39:02  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000062b0
R8 =ffff888107198237 R9 =1ffff11020e33046 R10=dffffc0000000000 R11=ffffffff85472aa0
R12=dffffc0000000000 R13=ffffffff99af58cd R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff85472b1c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f4c4a5f96c0 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=0000000106d36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f4c49986478 00007f4c49986450 XMM03=00007f4c49986488 00007f4c49986480
XMM04=00007f4c4a4ed100 00007f4c49986440 XMM05=00007f4c49986458 00007f4c499864a0
XMM06=00007f4c49986498 00007f4c49986490 XMM07=00007f4c49986488 00007f4c49986480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f4c49811ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=00000000f5000000 RBX=ffffc9000318f658 RCX=ffffea0004492000 RDX=0000000000000000
RSI=0000000000000000 RDI=0000000000000000 RBP=ffff88811f9f2000 RSP=ffffc9000318f620
R8 =ffffffff8fa1e8f7 R9 =1ffffffff1f43d1e R10=dffffc0000000000 R11=fffffbfff1f43d1f
R12=ffff888100eb78c0 R13=0000000000000000 R14=0000000000000000 R15=ffff888112481680
RIP=ffffffff82235e7d RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f95b808f800 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fffc36dfe50 CR3=000000001f3ca000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
