last executing test programs:

16.781519183s ago: executing program 1 (id=218):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3f00}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x7, 0x9, 0x0, 0x0, 0x5c}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x6, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

16.730259422s ago: executing program 0 (id=220):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x50, 0x9, [@var={0x3, 0x0, 0x0, 0x11, 0x4}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x10, 0x4}, {0xc, 0x1}, {0x7}, {0x3, 0x2}]}, @func_proto={0x2, 0x4f, 0x0, 0xc, 0x2}, @volatile={0xf, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x6c}, 0x28)

16.672097656s ago: executing program 0 (id=222):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r0, &(0x7f0000000180), 0x0}, 0x20)

16.591399644s ago: executing program 1 (id=224):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000340)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000040)=0x18, &(0x7f0000000140)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0)

16.591150904s ago: executing program 0 (id=225):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x2100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x9, 0x400000000398}, 0x18020, 0x4, 0x0, 0x0, 0x2, 0xfffff271}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f93024fc60040f10", 0x17}], 0x1, 0x0, 0xffffffffffffffef}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)

16.5910859s ago: executing program 1 (id=226):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0514000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894)

16.53491635s ago: executing program 1 (id=227):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xd2}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)

16.534742757s ago: executing program 0 (id=228):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61158c000000000061134c0000000000bfa00000000000000705000008004ef02d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07206706000004000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9d0cc7d3b4814261bdb94a050000a28a404be266df76965947c73c00c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b540dcfc7ad0500c4063b3b8754c0686cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e567238809000000000000000ae2fb494059bba8e3b680324a188090eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb40000000000000000000000000040007abf9c20d89cbc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eb29000000000000003cc3aa39ee4b1386bab561cda886fa64ffffff7f473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59801fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d00000000d3114dbc7e2bf2402a75fd7a5573336004088000000000000000fb38c7f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf73400000000000000cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca8710d5c617df01f82a73f6bd61d1f5b2a443faa9bda0577383dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea90000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8a10300004d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c39e9d8547c666b6764a3c7dd62a94eee45881441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a365b5b11df7216652b5703f31e078ecdefe8e6bfc45a9980a7a8de863e3477dd47d0f11611ca92d89641a183c8f629f17cfc28fde209a793d9c0cdde3bb3f82670d33396982988b9f5207a732908fdf1506f307ccae47a69319ee2242272e4f7ceb7a40e49a21ce6405af3ecb3381bf0668749c81fc6c2d97e68a693e3e622af52e572f4fa7b20d5c72cf5ff8016461130a46803de45029489921a48bd7688dd593e4a3e9803263ecbd8ae8570293508ebe5fabc1842cbc01ae8fabbf41820c31b7bb83a3439d4540f839ed5c23828a33d7645baa1ec32bb7aa8a786bb0997ccf6bba0a2cf6ef2157a63974d5e525a3f3f7f993ea9e82732ccc2e12c631012175d5d474bef818bdf8f27a7e563684a225dee6ca5f5ff18a89ac6c627ff0e0e4769b6fbcfc847b20960704a4b13e962333bddb966de8bcade6f6bd3915a580ddec2e1bd88fbfdb749789cdc946822212f1cbacb03ba8d3e51e48ccdae20a43bf79ca0131b830620a97877242989e78dfec1d6df5f97ca5cddece50d0cae5d6eabbc1913aa3660e0b00000000000000000000004000bc16b71cb118d93461aa2914d6e454ef05c41beab7382787ba46b68c8d8b35da9fb58b259b4447b59c667ddcac0bb2d066eb0579be84bdca8ed5d693411b7e5b21efaceddacef03daa9772f2715b5613ae0d88f8d109e36f8b8871b646d9ebbcc25d527ad3f828c92cb6597f82ed4d496a519007781be0c7cac07fc508a585f415ef81a887475286df80fb6ff9c6524d0e22d50f88ca15545bc688063b04eb8e0248aca60b9983dd5966216499ccfc0551f6e0323859ae64f55e4d496a695f8e6382aa714b92f95dcfd0b456d9ce7a24f736e4009ef64230e8f83f8283a4cc5f178d4698b94ccd8d0e0e3e2e35e1a7ac0cb3ee52013e8c2802d2f89b3f708fb53c17c3e4fbe0326ee510c4317b5f5f1eb34ca8441c23755acfc469909b16fba134de01d484c1b380622d37"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48)

16.534352794s ago: executing program 1 (id=229):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x0, 0x0, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9b}, 0x94)
r0 = socket$kcm(0x29, 0x5, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0x1, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000240)='P 7', 0x3}], 0x1, &(0x7f00000005c0)=[@ip_retopts={{0xe0, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0xee, 0x0, 0xc, [0x460, 0x6]}, @timestamp={0x44, 0x18, 0x6f, 0x0, 0x0, [0x4, 0x0, 0x8, 0x38e46bcf, 0xe3]}, @end, @cipso={0x86, 0x31, 0x2, [{0x6, 0x3, "a6"}, {0x6, 0x12, "c166dfbfe28178e1348e05af1a1f9783"}, {0x0, 0xc, "723f3a3ca69ee0a79f7e"}, {0x0, 0xa, "06e0d49e1d343317"}]}, @end, @rr={0x7, 0x13, 0xa6, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @private=0xa010100]}, @noop, @timestamp_addr={0x44, 0x44, 0xa1, 0x1, 0x9, [{@empty, 0xe64e}, {@multicast1, 0x3c92}, {@empty, 0x73a43513}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x9}, {@multicast1, 0x400}, {@multicast2, 0x1}, {@rand_addr=0x64010102, 0x200}, {@empty, 0x1}]}, @ssrr={0x89, 0xb, 0x26, [@multicast1, @dev={0xac, 0x14, 0x14, 0x43}]}, @rr={0x7, 0x13, 0x67, [@multicast1, @broadcast, @empty, @empty]}]}}}, @ip_retopts={{0xa0, 0x0, 0x7, {[@cipso={0x86, 0x3e, 0x1, [{0x4, 0x10, "1fd15682e4c0098b7d19453694c6"}, {0x6, 0xa, "4ff4a52868360de0"}, {0x6, 0x2}, {0x5, 0x5, "7180ae"}, {0x6, 0x9, "94b38d279c666d"}, {0x5, 0x6, "e20f1b03"}, {0x0, 0x8, "bd414d4799ee"}]}, @cipso={0x86, 0x18, 0xe127718fbf14e2a6, [{0x0, 0x2}, {0x5, 0x10, "a937463fadcb5110247031e02e01"}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x80, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x3e}, 0x3}]}, @lsrr={0x83, 0x13, 0x86, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1d}, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x90, 0x1, 0x9, [{@multicast2, 0x8}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @rand_addr=0x64010101, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x1e8}, 0x4000004)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r0)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x7}, 0x22c0, 0x6, 0x0, 0x0, 0x1ff, 0x100, 0x0, 0x0, 0x5ff}, 0x0, 0x4, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

16.468704203s ago: executing program 1 (id=230):
r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB], 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2681, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0xb, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407eff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x5}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000900)}, 0xff0f000000004080)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1e, 0xb, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000040)={'wlan1\x00', @random="2e33e363a4b1"})

16.412018322s ago: executing program 0 (id=232):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r3)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000640)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xa)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r5=>0x0}, 0x8)
r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000580)=r5, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r6, r4, 0x4, r4}, 0x10)

16.30208968s ago: executing program 0 (id=234):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x1, 0x1, 0x0, 0x800, 0x1}, 0x0, 0x8, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
socket$kcm(0x29, 0x5, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407ffb, 0x20000000aea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1c00, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x3)
socket$kcm(0x11, 0x3, 0x0)
openat$cgroup_subtree(r0, &(0x7f00000002c0), 0x2, 0x0)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x73)
setsockopt$sock_attach_bpf(r1, 0x29, 0x19, 0x0, 0xfcd8)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
socket$kcm(0xa, 0x922000000003, 0x11)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfffffe84, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c00810ce00f80ecdb4cb9f207c804a00d000000020006fb0a0002000a0ada1b40d805481100c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)

16.062228917s ago: executing program 2 (id=239):
r0 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1, &(0x7f0000000680)=""/29, 0x1d}, 0x40000010)

15.982212867s ago: executing program 2 (id=240):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff)

15.982012267s ago: executing program 2 (id=241):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115000100ff11142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0)

15.912222112s ago: executing program 2 (id=242):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000440)='syzkaller\x00'}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

15.911931123s ago: executing program 2 (id=243):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d000000000000000000000000000000000000000000000000fd000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96, 0x0, 0x3}, 0x28)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r1, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0xd, 0x0}}, 0x10)

15.852182988s ago: executing program 2 (id=244):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000020850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r2}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)

507.601285ms ago: executing program 32 (id=234):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x1, 0x1, 0x0, 0x800, 0x1}, 0x0, 0x8, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
socket$kcm(0x29, 0x5, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407ffb, 0x20000000aea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1c00, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x3)
socket$kcm(0x11, 0x3, 0x0)
openat$cgroup_subtree(r0, &(0x7f00000002c0), 0x2, 0x0)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x73)
setsockopt$sock_attach_bpf(r1, 0x29, 0x19, 0x0, 0xfcd8)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
socket$kcm(0xa, 0x922000000003, 0x11)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfffffe84, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c00810ce00f80ecdb4cb9f207c804a00d000000020006fb0a0002000a0ada1b40d805481100c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)

391.613816ms ago: executing program 33 (id=230):
r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB], 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2681, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0xb, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407eff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x5}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000900)}, 0xff0f000000004080)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1e, 0xb, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000040)={'wlan1\x00', @random="2e33e363a4b1"})

0s ago: executing program 34 (id=244):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000020850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r2}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:44960' (ED25519) to the list of known hosts.
syzkaller login: [   40.740004][ T5751] cgroup: Unknown subsys name 'net'
[   40.826607][ T5751] cgroup: Unknown subsys name 'cpuset'
[   40.832435][ T5751] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.076888][ T5751] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.369432][ T5217] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.378672][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.381484][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.384639][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.386994][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.393765][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.405174][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.407925][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.411002][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.414816][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.453923][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.456715][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.461979][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.465785][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.468339][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.619497][ T5823] chnl_net:caif_netlink_parms(): no params data found
[   45.634417][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   45.744472][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.747741][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.750335][ T5828] bridge_slave_0: entered allmulticast mode
[   45.753663][ T5828] bridge_slave_0: entered promiscuous mode
[   45.785713][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.788339][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.790654][ T5828] bridge_slave_1: entered allmulticast mode
[   45.795094][ T5828] bridge_slave_1: entered promiscuous mode
[   45.807693][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.810382][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.813022][ T5823] bridge_slave_0: entered allmulticast mode
[   45.820211][ T5823] bridge_slave_0: entered promiscuous mode
[   45.823444][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.826442][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.829222][ T5823] bridge_slave_1: entered allmulticast mode
[   45.831958][ T5823] bridge_slave_1: entered promiscuous mode
[   45.852482][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.860326][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.871697][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   45.885395][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.904439][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.918222][ T5828] team0: Port device team_slave_0 added
[   45.942406][ T5828] team0: Port device team_slave_1 added
[   45.950285][ T5823] team0: Port device team_slave_0 added
[   45.972863][ T5823] team0: Port device team_slave_1 added
[   45.990604][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.992861][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.002151][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.021720][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.024604][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.032583][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.041442][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.044357][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.046761][ T5833] bridge_slave_0: entered allmulticast mode
[   46.049492][ T5833] bridge_slave_0: entered promiscuous mode
[   46.053101][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.056221][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.058585][ T5833] bridge_slave_1: entered allmulticast mode
[   46.061340][ T5833] bridge_slave_1: entered promiscuous mode
[   46.065202][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.067511][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.076024][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.096720][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.099025][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.107482][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.131380][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.135987][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.150015][ T5828] hsr_slave_0: entered promiscuous mode
[   46.152446][ T5828] hsr_slave_1: entered promiscuous mode
[   46.189792][ T5833] team0: Port device team_slave_0 added
[   46.195246][ T5823] hsr_slave_0: entered promiscuous mode
[   46.197643][ T5823] hsr_slave_1: entered promiscuous mode
[   46.199764][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.202323][ T5823] Cannot create hsr debugfs directory
[   46.213299][ T5833] team0: Port device team_slave_1 added
[   46.250551][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.252823][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.260959][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.278657][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.280904][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.290000][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.339004][ T5833] hsr_slave_0: entered promiscuous mode
[   46.341370][ T5833] hsr_slave_1: entered promiscuous mode
[   46.343495][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.346015][ T5833] Cannot create hsr debugfs directory
[   46.517282][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.525940][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.543868][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.552051][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.586535][ T5823] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.619414][ T5823] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.624454][ T5823] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.628934][ T5823] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.682972][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.695424][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.705851][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.718765][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.736741][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.760802][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.771410][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   46.781114][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.784079][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.794585][ T5823] 8021q: adding VLAN 0 to HW filter on device team0
[   46.807324][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.810380][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.816598][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.819603][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.842926][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.846126][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.912291][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   46.936812][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.962089][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   46.972691][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.975082][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.998045][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.000376][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.021402][ T5833] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   47.032531][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   47.069749][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.095668][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.109422][ T5828] veth0_vlan: entered promiscuous mode
[   47.130999][ T5828] veth1_vlan: entered promiscuous mode
[   47.149560][ T5823] veth0_vlan: entered promiscuous mode
[   47.169391][ T5823] veth1_vlan: entered promiscuous mode
[   47.180954][ T5828] veth0_macvtap: entered promiscuous mode
[   47.190211][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.196671][ T5828] veth1_macvtap: entered promiscuous mode
[   47.209737][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.221476][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.228244][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.231125][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.234915][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.237674][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.243267][ T5823] veth0_macvtap: entered promiscuous mode
[   47.258113][ T5823] veth1_macvtap: entered promiscuous mode
[   47.279231][ T5833] veth0_vlan: entered promiscuous mode
[   47.301456][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.310237][ T5833] veth1_vlan: entered promiscuous mode
[   47.316459][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.331774][ T5823] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.336508][ T5823] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.339384][ T5823] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.342129][ T5823] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.354788][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.357677][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.389706][ T5833] veth0_macvtap: entered promiscuous mode
[   47.409540][ T5833] veth1_macvtap: entered promiscuous mode
[   47.411923][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.417748][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.438017][  T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.440619][  T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.450007][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.465835][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.474233][   T54] Bluetooth: hci2: command tx timeout
[   47.476159][   T54] Bluetooth: hci0: command tx timeout
[   47.478000][   T54] Bluetooth: hci1: command tx timeout
[   47.480647][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.489676][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.492517][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.497445][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.500244][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.507968][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.511645][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.566281][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.568823][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.597053][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.602562][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.920164][ T5915] netlink: 'syz.1.13': attribute type 39 has an invalid length.
[   48.669822][ T5926] Driver unsupported XDP return value 0 on prog  (id 10) dev N/A, expect packet loss!
[   49.536249][ T5971] netlink: 132 bytes leftover after parsing attributes in process `syz.0.37'.
[   49.554303][ T5827] Bluetooth: hci1: command tx timeout
[   49.555063][   T54] Bluetooth: hci0: command tx timeout
[   49.556111][ T5831] Bluetooth: hci2: command tx timeout
[   49.826492][    C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   49.842382][ T5980] Zero length message leads to an empty skb
[   49.910233][ T5986] warning: `syz.1.44' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   49.944687][ T5988] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.45'.
[   50.165257][ T5996] syz.2.50 uses obsolete (PF_INET,SOCK_PACKET)
[   50.179029][ T5996] netlink: 'syz.2.50': attribute type 10 has an invalid length.
[   50.208434][ T5996] team0: Device ipvlan1 failed to register rx_handler
[   50.253555][    C1] hrtimer: interrupt took 42243 ns
[   50.264549][ T6002] netlink: 'syz.1.52': attribute type 33 has an invalid length.
[   50.267079][ T6002] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.52'.
[   50.286407][ T5996] syz.2.50 (5996) used greatest stack depth: 18640 bytes left
[   50.545485][ T6023] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   50.587720][ T6027] netlink: 'syz.2.62': attribute type 1 has an invalid length.
[   50.590303][ T6027] netlink: 'syz.2.62': attribute type 4 has an invalid length.
[   50.592687][ T6027] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.62'.
[   50.783363][ T6036] tap0: tun_chr_ioctl cmd 1074812118
[   51.266479][ T6061] ref_ctr_offset mismatch. inode: 0x9f offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20
[   51.578991][ T6083] dummy0: entered promiscuous mode
[   51.580943][ T6083] dummy0: entered allmulticast mode
[   51.634818][ T5827] Bluetooth: hci0: command tx timeout
[   51.925784][ T5827] Bluetooth: hci1: command tx timeout
[   51.928123][ T5827] Bluetooth: hci2: command tx timeout
[   52.730500][ T6121] delete_channel: no stack
[   52.873031][ T6137] netlink: 'syz.0.112': attribute type 10 has an invalid length.
[   52.885351][ T6137] netlink: 40 bytes leftover after parsing attributes in process `syz.0.112'.
[   52.897661][ T6137] dummy0: entered promiscuous mode
[   52.902916][ T6137] bridge0: port 3(dummy0) entered blocking state
[   52.908928][ T6137] bridge0: port 3(dummy0) entered disabled state
[   52.911790][ T6137] dummy0: entered allmulticast mode
[   52.916139][ T6137] bridge0: port 3(dummy0) entered blocking state
[   52.918437][ T6137] bridge0: port 3(dummy0) entered forwarding state
[   52.929477][ T6139] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[   52.968423][ T6139] syzkaller0: entered promiscuous mode
[   52.970342][ T6139] syzkaller0: entered allmulticast mode
[   53.336862][ T6147] netlink: 'syz.0.117': attribute type 21 has an invalid length.
[   53.339634][ T6147] netlink: 'syz.0.117': attribute type 11 has an invalid length.
[   53.714123][ T5831] Bluetooth: hci0: command tx timeout
[   53.956977][ T5827] Bluetooth: hci1: command tx timeout
[   53.959337][ T5831] Bluetooth: hci2: command tx timeout
[   54.049286][ T6163] netlink: 'syz.2.125': attribute type 7 has an invalid length.
[   54.228270][ T6181] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.133'.
[   56.302658][ T6264] netlink: 22 bytes leftover after parsing attributes in process `syz.1.173'.
[   56.429452][ T6265] netlink: 'syz.2.170': attribute type 17 has an invalid length.
[   56.442855][ T6258] netlink: 'syz.2.170': attribute type 29 has an invalid length.
[   56.445970][ T6258] netlink: 'syz.2.170': attribute type 3 has an invalid length.
[   56.448746][ T6258] netlink: 132 bytes leftover after parsing attributes in process `syz.2.170'.
[   56.485510][ T5831] Bluetooth: hci2: Received unexpected HCI Event 0x00
[   56.611992][ T6286] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.184'.
[   56.679277][ T6290] netlink: 'syz.2.185': attribute type 10 has an invalid length.
[   56.693077][ T6290] team0: Port device wlan1 added
[   56.758599][ T6292] netlink: 'syz.1.186': attribute type 10 has an invalid length.
[   56.772459][ T6292] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.777846][ T6292] team0: Port device bond0 added
[   57.211438][ T6330] netlink: 'syz.2.203': attribute type 29 has an invalid length.
[   57.218884][ T6330] netlink: 'syz.2.203': attribute type 3 has an invalid length.
[   57.221374][ T6330] netlink: 132 bytes leftover after parsing attributes in process `syz.2.203'.
[   57.546051][ T6342] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.210'.
[   57.909625][ T6370] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.225'.
[   58.234081][ T6391] mac80211_hwsim hwsim5 .3c: renamed from wlan1 (while UP)
[   58.309173][ T6398] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.237'.
[   58.536208][ T6408] validate_nla: 2 callbacks suppressed
[   58.536221][ T6408] netlink: 'syz.2.241': attribute type 3 has an invalid length.
[   58.541803][ T6408] netlink: 132 bytes leftover after parsing attributes in process `syz.2.241'.
[   70.836990][ T1359] ieee802154 phy0 wpan0: encryption failed: -22
[   70.839311][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[   74.278957][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   74.282091][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   74.287863][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   74.290998][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   74.293879][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   74.381999][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   74.387860][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   74.390668][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   74.396063][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   74.399148][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   74.679794][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   74.683063][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   74.687635][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   74.690456][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   74.693188][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   76.353693][ T5827] Bluetooth: hci3: command tx timeout
[   76.433835][ T5827] Bluetooth: hci4: command tx timeout
[   76.753704][ T5827] Bluetooth: hci5: command tx timeout
[   78.434698][ T5827] Bluetooth: hci3: command tx timeout
[   78.513860][ T5827] Bluetooth: hci4: command tx timeout
[   78.833707][ T5827] Bluetooth: hci5: command tx timeout
[   80.513700][ T5827] Bluetooth: hci3: command tx timeout
[   80.593748][ T5827] Bluetooth: hci4: command tx timeout
[   80.913655][ T5827] Bluetooth: hci5: command tx timeout
[   81.088068][  T971] cfg80211: failed to load regulatory.db
[   82.593724][ T5827] Bluetooth: hci3: command tx timeout
[   82.673771][ T5827] Bluetooth: hci4: command tx timeout
[   82.993709][ T5827] Bluetooth: hci5: command tx timeout
[  132.278673][ T1359] ieee802154 phy0 wpan0: encryption failed: -22
[  132.281536][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[  135.486990][ T5831] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  135.490001][ T5831] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  135.493424][ T5831] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  135.496376][ T5831] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  135.498987][ T5831] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  135.579432][ T5831] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  135.583200][ T5831] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  135.587772][ T5831] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  135.591078][ T5831] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  135.594675][ T5831] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  135.641246][ T5827] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  135.645826][ T5827] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  135.648578][ T5827] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  135.651356][ T5827] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  135.654497][ T5827] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  137.553781][ T5827] Bluetooth: hci6: command tx timeout
[  137.633758][ T5827] Bluetooth: hci7: command tx timeout
[  137.713723][ T5827] Bluetooth: hci8: command tx timeout
[  139.635439][ T5827] Bluetooth: hci6: command tx timeout
[  139.713830][ T5827] Bluetooth: hci7: command tx timeout
[  139.793709][ T5827] Bluetooth: hci8: command tx timeout
[  141.713992][ T5827] Bluetooth: hci6: command tx timeout
[  141.793980][ T5827] Bluetooth: hci7: command tx timeout
[  141.873921][ T5831] Bluetooth: hci8: command tx timeout
[  143.793826][ T5827] Bluetooth: hci6: command tx timeout
[  143.874177][ T5827] Bluetooth: hci7: command tx timeout
[  143.953775][ T5827] Bluetooth: hci8: command tx timeout
[  163.243514][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
SYZFAIL: failed to recv rpc
[  163.245711][    C0] rcu: 	0-....: (1 GPs behind) idle=2234/1/0x4000000000000000 softirq=16049/16050 fqs=5249
[  163.250368][    C0] rcu: 	         hardirqs   softirqs   csw/system
[  163.252350][    C0] rcu: 	 number:  1019074          0            0
[  163.254359][    C0] rcu: 	cputime:    24153      28346           88   ==> 52510(ms)
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  163.256785][    C0] rcu: 	(t=10502 jiffies g=7477 q=3918 ncpus=2)
[  163.258872][    C0] CPU: 0 UID: 0 PID: 6385 Comm: syz.1.230 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  163.258881][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  163.258886][    C0] RIP: 0010:unwind_next_frame+0x19ae/0x2390
[  163.258899][    C0] Code: c7 e0 44 88 8b be 66 03 00 00 48 c7 c2 80 45 88 8b e8 76 a2 2b 00 48 c7 c7 e0 f0 13 8e 4c 89 fe e8 57 88 2b 00 e8 72 1e 35 00 <89> d8 48 81 c4 98 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 9a af
[  163.258905][    C0] RSP: 0018:ffffc90000007618 EFLAGS: 00000287
[  163.258912][    C0] RAX: 0000000000000000 RBX: ffffffff903ebd01 RCX: 7f2a4e73ee6c1800
[  163.258917][    C0] RDX: 0000000000000002 RSI: ffffffff8d99883e RDI: ffffffff8be29f40
[  163.258921][    C0] RBP: dffffc0000000000 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  163.258925][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffffc90000007a70
[  163.258930][    C0] R13: ffffc90000000000 R14: ffffc900000076e8 R15: ffffffff8172aae5
[  163.258934][    C0] FS:  00007f7bc15e16c0(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
[  163.258940][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  163.258944][    C0] CR2: 0000000000000004 CR3: 0000000111670000 CR4: 00000000000006f0
[  163.258969][    C0] Call Trace:
[  163.258976][    C0]  <IRQ>
[  163.258983][    C0]  ? unwind_next_frame+0xa5/0x2390
[  163.258992][    C0]  ? kasan_save_track+0x3e/0x80
[  163.259003][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  163.259012][    C0]  arch_stack_walk+0x11c/0x150
[  163.259025][    C0]  ? __kasan_slab_alloc+0x6c/0x80
[  163.259034][    C0]  stack_trace_save+0x9c/0xe0
[  163.259043][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  163.259053][    C0]  ? __pfx_sched_clock_cpu+0x10/0x10
[  163.259065][    C0]  kasan_save_track+0x3e/0x80
[  163.259070][    C0]  ? kasan_save_track+0x3e/0x80
[  163.259104][    C0]  __kasan_slab_alloc+0x6c/0x80
[  163.259111][    C0]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  163.259119][    C0]  ? skb_clone+0x212/0x3a0
[  163.259131][    C0]  skb_clone+0x212/0x3a0
[  163.259137][    C0]  ? neigh_timer_handler+0xa32/0x1030
[  163.259147][    C0]  neigh_timer_handler+0xa3f/0x1030
[  163.259159][    C0]  call_timer_fn+0x17e/0x5f0
[  163.259166][    C0]  ? __pfx_neigh_timer_handler+0x10/0x10
[  163.259172][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  163.259181][    C0]  ? call_timer_fn+0xbe/0x5f0
[  163.259187][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  163.259200][    C0]  ? __pfx_neigh_timer_handler+0x10/0x10
[  163.259209][    C0]  __run_timer_base+0x61a/0x860
[  163.259226][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  163.259277][    C0]  run_timer_softirq+0xb7/0x180
[  163.259288][    C0]  handle_softirqs+0x286/0x870
[  163.259299][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  163.259309][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  163.259316][    C0]  ? irq_work_single+0x1ac/0x240
[  163.259325][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  163.259337][    C0]  __irq_exit_rcu+0xca/0x1f0
[  163.259345][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  163.259354][    C0]  ? rcu_is_watching+0x15/0xb0
[  163.259364][    C0]  irq_exit_rcu+0x9/0x30
[  163.259370][    C0]  sysvec_irq_work+0xa3/0xc0
[  163.259378][    C0]  </IRQ>
[  163.259380][    C0]  <TASK>
[  163.259383][    C0]  asm_sysvec_irq_work+0x1a/0x20
[  163.259391][    C0] RIP: 0010:lock_is_held_type+0x9/0x190
[  163.259399][    C0] Code: eb b5 e8 1a fc ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 <41> 55 41 54 53 48 83 ec 10 65 48 8b 05 16 74 31 07 48 89 44 24 08
[  163.259403][    C0] RSP: 0018:ffffc90006fc7880 EFLAGS: 00000202
[  163.259409][    C0] RAX: 0000000000000001 RBX: ffffc90006fc0000 RCX: ffff8880221a5640
[  163.259413][    C0] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff8e13f1a0
[  163.259417][    C0] RBP: ffffc90006fc7ab0 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  163.259422][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffff88804b03aac8
[  163.259426][    C0] R13: dffffc0000000000 R14: ffff8880221a5640 R15: ffff8880b861f000
[  163.259441][    C0]  __schedule+0x274/0x4d00
[  163.259451][    C0]  ? trace_call_bpf+0xb7/0x850
[  163.259460][    C0]  ? trace_call_bpf+0xb7/0x850
[  163.259467][    C0]  ? trace_call_bpf+0x5ba/0x850
[  163.259474][    C0]  ? trace_call_bpf+0xb7/0x850
[  163.259480][    C0]  ? irqentry_exit+0x74/0x90
[  163.259489][    C0]  ? preempt_schedule_irq+0xb5/0x150
[  163.259500][    C0]  ? __pfx___schedule+0x10/0x10
[  163.259511][    C0]  ? perf_trace_run_bpf_submit+0x100/0x170
[  163.259523][    C0]  ? perf_trace_preemptirq_template+0x280/0x340
[  163.259535][    C0]  ? preempt_schedule_irq+0xaa/0x150
[  163.259544][    C0]  preempt_schedule_irq+0xb5/0x150
[  163.259553][    C0]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  163.259565][    C0]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  163.259573][    C0]  irqentry_exit+0x6f/0x90
[  163.259580][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  163.259587][    C0] RIP: 0010:__memcg_slab_post_alloc_hook+0x540/0x7f0
[  163.259594][    C0] Code: 01 00 00 00 4c 89 e7 e8 2e 97 00 00 48 8b 84 24 80 00 00 00 80 3c 28 00 48 8b 5c 24 70 74 08 48 89 df e8 53 f4 f7 ff 48 8b 03 <48> 85 c0 0f 94 c1 89 c2 08 ca f6 c2 01 0f 84 6e 02 00 00 a8 02 0f
[  163.259598][    C0] RSP: 0018:ffffc90006fc7c20 EFLAGS: 00000246
[  163.259603][    C0] RAX: ffff88803af57f01 RBX: ffffea00009c8038 RCX: 7f2a4e73ee6c1800
[  163.259607][    C0] RDX: 0000000000000000 RSI: ffffffff8db8655b RDI: ffff8880221a5640
[  163.259611][    C0] RBP: dffffc0000000000 R08: ffffc90006fc73d7 R09: 0000000000000000
[  163.259615][    C0] R10: ffffc90006fc73c0 R11: fffff52000df8e7b R12: ffff88803966a900
[  163.259619][    C0] R13: ffffc90006fc7cf0 R14: ffffea00009c8000 R15: 0000000000000005
[  163.259642][    C0]  kmem_cache_alloc_noprof+0x2bf/0x3c0
[  163.259648][    C0]  ? alloc_empty_file+0x55/0x1d0
[  163.259660][    C0]  alloc_empty_file+0x55/0x1d0
[  163.259669][    C0]  alloc_file_pseudo+0x13d/0x210
[  163.259678][    C0]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  163.259694][    C0]  sock_alloc_file+0xb8/0x2e0
[  163.259702][    C0]  ? __sys_socket+0x12c/0x1b0
[  163.259713][    C0]  __sys_socket+0x13d/0x1b0
[  163.259724][    C0]  __x64_sys_socket+0x7a/0x90
[  163.259734][    C0]  do_syscall_64+0xfa/0x3b0
[  163.259743][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  163.259750][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.259757][    C0]  ? exc_page_fault+0x9f/0xf0
[  163.259766][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.259772][    C0] RIP: 0033:0x7f7bc078e9a9
[  163.259780][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  163.259785][    C0] RSP: 002b:00007f7bc15e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  163.259791][    C0] RAX: ffffffffffffffda RBX: 00007f7bc09b6080 RCX: 00007f7bc078e9a9
[  163.259795][    C0] RDX: 0000000000000004 RSI: 0000000000000002 RDI: 0000000000000010
[  163.259799][    C0] RBP: 00007f7bc0810d69 R08: 0000000000000000 R09: 0000000000000000
[  163.259802][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  163.259811][    C0] R13: 0000000000000000 R14: 00007f7bc09b6080 R15: 00007ffcbf49def8
[  163.259824][    C0]  </TASK>
[  163.472434][    C0] sched: DL replenish lagged too much
[  170.201075][ T5827] Bluetooth: hci2: command 0x0406 tx timeout
[  170.203976][ T5827] Bluetooth: hci0: command 0x0406 tx timeout

VM DIAGNOSIS:
20:44:34  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000073 RBX=0000000000000073 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000006950
R8 =ffff888107bf0237 R9 =1ffff11020f7e046 R10=dffffc0000000000 R11=ffffffff85472b60
R12=dffffc0000000000 R13=ffffffff99af58ab R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff85472bdc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f7bc15e16c0 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000004 CR3=0000000111670000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f7bc0986478 00007f7bc0986450 XMM03=00007f7bc0986488 00007f7bc0986480
XMM04=00007f7bc14ed100 00007f7bc0986440 XMM05=00007f7bc0986458 00007f7bc09864a0
XMM06=00007f7bc0986498 00007f7bc0986490 XMM07=00007f7bc0986488 00007f7bc0986480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f7bc0811ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000007 RBX=0000000000000003 RCX=0000000000000007 RDX=0000000000080000
RSI=0000000000000000 RDI=ffff888109405640 RBP=0000000000000007 RSP=ffffc90002f6ef90
R8 =0000000000000000 R9 =ffffffff81cb5957 R10=ffffe8ffffc7600c R11=fffff91ffff8ec03
R12=0000000000020000 R13=0000000000000000 R14=ffff888109406180 R15=ffff888109406130
RIP=ffffffff819e42ac RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f77454d7800 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffe5d856ff8 CR3=0000000026fdc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
