last executing test programs:

1.250043631s ago: executing program 1 (id=5):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x224, 0xaea}, 0x14105, 0x30, 0xfffffbff, 0x3, 0x2, 0x1, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x57, 0x0, 0x9, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socket$kcm(0x2, 0x3, 0x84)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)=r3}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1.187059125s ago: executing program 2 (id=7):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x340080, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"/1367], &(0x7f0000000100)='GPL\x00', 0x9}, 0x48)
r1 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x20000000000002, 0x0, 0x0, 0x40, 0x1000000}, 0xffffffffffffffff, 0x4, r1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50)
r2 = socket$kcm(0x10, 0x3, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x9006000, &(0x7f00000030c0)=[{&(0x7f0000000180)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0)
recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080))
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x29, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3)

914.361118ms ago: executing program 2 (id=13):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r0}, 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x5, r1, 0x4}, 0x38)

861.7688ms ago: executing program 2 (id=15):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x6, 0x4, 0xfff, 0x7, 0x88}, 0xa3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

850.613172ms ago: executing program 1 (id=16):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x8, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2c00}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000600)='GPL\x00', 0x6, 0x66, &(0x7f00000006c0)=""/102, 0x41100, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94)

782.807973ms ago: executing program 2 (id=18):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="c00e020023000b02d25a80d0bcb924f93045fc60040f12", 0x17}], 0x1}, 0x4010)
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)

781.976883ms ago: executing program 1 (id=19):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3)
close(0xffffffffffffffff)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x22, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

717.082383ms ago: executing program 2 (id=20):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x5, @perf_bp={0x0, 0x6}, 0x104101, 0x0, 0x0, 0x1, 0x8000000, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x15, 0x5, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={0x0, 0xa}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
close(r0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48)
bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0, r1}, 0x18)

716.858332ms ago: executing program 0 (id=21):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x9, [@typedef={0x4, 0x0, 0x0, 0x8, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x1}]}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x61, 0x5f, 0x61]}}, 0x0, 0x41}, 0x20)

668.877979ms ago: executing program 0 (id=22):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socket$kcm(0xa, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10)
close(r1)
socket$kcm(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3}, &(0x7f00000002c0), &(0x7f00000003c0)=r0}, 0x20)

668.709808ms ago: executing program 0 (id=23):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x89fe, &(0x7f0000000300)={'ip6gre0\x00', @multicast})

368.927655ms ago: executing program 2 (id=24):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38)

368.744838ms ago: executing program 1 (id=25):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_config_ext={0x9, 0x2}, 0x3000, 0x4, 0x0, 0x2, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x3, 0x10)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000a00)="140000003600fb50e35d3c4a0ed8985b0c088c00", 0x14}], 0x1}, 0x0)

279.011966ms ago: executing program 0 (id=26):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

278.537589ms ago: executing program 0 (id=27):
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x19, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x1, @ANYRES32], 0x0, 0x10001, 0xbb, &(0x7f0000000240)=""/187, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x5, 0x4, 0x1, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, r0}, 0x94)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_bp={&(0x7f00000004c0), 0x1}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x21}, 0x94)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0xa}, 0x94)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x2400c000)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe1b)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080))
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="140000002b000b93de09a427b36c690000fff005", 0x14}], 0x1}, 0x480c0)
recvmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x40000000)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x14, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0100"})

189.506219ms ago: executing program 1 (id=28):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
sendmsg$tipc(r0, &(0x7f0000000740)={&(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x0, {0x20000401}}, 0x10, 0x0}, 0x0)

79.909744ms ago: executing program 1 (id=29):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002"], 0x0, 0x56, 0x0, 0x3}, 0x28)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd"], 0x66)

0s ago: executing program 0 (id=30):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0xc2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0x10000}, 0x14105, 0x2e, 0xfffffbff, 0x9, 0x2, 0x4, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:45809' (ED25519) to the list of known hosts.
syzkaller login: [   41.272218][ T5790] cgroup: Unknown subsys name 'net'
[   41.396492][ T5790] cgroup: Unknown subsys name 'cpuset'
[   41.400353][ T5790] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.655134][ T5790] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.822613][ T5217] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.825503][ T5217] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.828197][ T5217] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.831271][ T5217] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.833947][ T5217] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.884145][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.886959][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.889416][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.892239][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.895074][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.925725][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.928341][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.934117][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.939851][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.944704][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.973190][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   46.047607][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.050167][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.052452][ T5833] bridge_slave_0: entered allmulticast mode
[   46.055121][ T5833] bridge_slave_0: entered promiscuous mode
[   46.066218][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.068461][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.070791][ T5833] bridge_slave_1: entered allmulticast mode
[   46.073352][ T5833] bridge_slave_1: entered promiscuous mode
[   46.131478][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.141422][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.147769][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   46.183296][ T5833] team0: Port device team_slave_0 added
[   46.188227][ T5833] team0: Port device team_slave_1 added
[   46.240078][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.242238][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.251016][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.277359][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.279530][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.287358][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.304132][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.306486][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.309003][ T5838] bridge_slave_0: entered allmulticast mode
[   46.312064][ T5838] bridge_slave_0: entered promiscuous mode
[   46.318593][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.321344][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.324408][ T5838] bridge_slave_1: entered allmulticast mode
[   46.327636][ T5838] bridge_slave_1: entered promiscuous mode
[   46.338334][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   46.360198][ T5833] hsr_slave_0: entered promiscuous mode
[   46.362565][ T5833] hsr_slave_1: entered promiscuous mode
[   46.390909][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.398963][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.444798][ T5838] team0: Port device team_slave_0 added
[   46.458260][ T5838] team0: Port device team_slave_1 added
[   46.460400][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.462685][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.465942][ T5841] bridge_slave_0: entered allmulticast mode
[   46.468506][ T5841] bridge_slave_0: entered promiscuous mode
[   46.471474][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.473619][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.475973][ T5841] bridge_slave_1: entered allmulticast mode
[   46.478505][ T5841] bridge_slave_1: entered promiscuous mode
[   46.528414][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.530574][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.538938][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.552871][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.555190][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.562897][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.568017][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.578470][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.609401][ T5841] team0: Port device team_slave_0 added
[   46.619196][ T5841] team0: Port device team_slave_1 added
[   46.629573][ T5838] hsr_slave_0: entered promiscuous mode
[   46.631817][ T5838] hsr_slave_1: entered promiscuous mode
[   46.634149][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.636727][ T5838] Cannot create hsr debugfs directory
[   46.652896][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.655143][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.662776][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.670493][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.672629][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.680375][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.725703][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.740693][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.748197][ T5841] hsr_slave_0: entered promiscuous mode
[   46.750400][ T5841] hsr_slave_1: entered promiscuous mode
[   46.752438][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.755518][ T5841] Cannot create hsr debugfs directory
[   46.759894][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.764544][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.863526][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.865945][ T5833] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.868466][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.870700][ T5833] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.900704][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.911099][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.921349][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.930787][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.955032][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.959191][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.963106][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.970217][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.980995][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.983219][ T5838] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.985611][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.987759][ T5838] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.999025][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.001901][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.007058][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.009920][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.035140][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.066493][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   47.082362][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.084656][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.091911][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.098072][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.101473][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.103753][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.118468][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   47.127752][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.129973][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.137362][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   47.145944][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.148179][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.152354][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.154617][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.179555][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.181796][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.212908][ T5841] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   47.219457][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   47.294987][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.338902][ T5833] veth0_vlan: entered promiscuous mode
[   47.347711][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.356935][ T5833] veth1_vlan: entered promiscuous mode
[   47.367199][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.402264][ T5841] veth0_vlan: entered promiscuous mode
[   47.404903][ T5833] veth0_macvtap: entered promiscuous mode
[   47.409538][ T5833] veth1_macvtap: entered promiscuous mode
[   47.417398][ T5838] veth0_vlan: entered promiscuous mode
[   47.421187][ T5841] veth1_vlan: entered promiscuous mode
[   47.427545][ T5838] veth1_vlan: entered promiscuous mode
[   47.432248][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.442085][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.452260][ T5841] veth0_macvtap: entered promiscuous mode
[   47.459301][ T5833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.461986][ T5833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.465707][ T5833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.468450][ T5833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.473381][ T5838] veth0_macvtap: entered promiscuous mode
[   47.477642][ T5841] veth1_macvtap: entered promiscuous mode
[   47.485077][ T5838] veth1_macvtap: entered promiscuous mode
[   47.494073][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.505205][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.508190][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.513300][ T5841] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.516520][ T5841] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.519122][ T5841] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.521756][ T5841] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.527574][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.541956][ T5838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.545329][ T5838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.548734][ T5838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.552055][ T5838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.588376][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.593569][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.642201][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.645224][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.651502][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.662699][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.666414][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.672615][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.688247][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.700809][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.703251][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.721986][  T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.725744][  T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.812906][   T55] Bluetooth: hci1: ISO packet too small
[   47.855483][ T5905] netlink: 'syz.0.4': attribute type 3 has an invalid length.
[   47.867510][   T55] Bluetooth: hci0: command tx timeout
[   47.954253][   T55] Bluetooth: hci1: command tx timeout
[   48.034611][   T55] Bluetooth: hci2: command tx timeout
[   48.139956][ T5919] netlink: 168 bytes leftover after parsing attributes in process `syz.0.11'.
[   48.219744][ T5925] delete_channel: no stack
[   48.221338][ T5925] delete_channel: no stack
[   48.275878][ T5927] Driver unsupported XDP return value 0 on prog  (id 8) dev N/A, expect packet loss!
[   48.325081][ T5933] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.18'.
[   48.453836][    C0] hrtimer: interrupt took 45708 ns
[   48.893412][ T5955] warning: `syz.0.27' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  154.123812][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  154.126096][    C1] rcu: 	0-...!: (0 ticks this GP) idle=96e4/1/0x4000000000000000 softirq=13623/13623 fqs=0
[  154.130259][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P5946 P5960
[  154.132792][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=5721, q=355 ncpus=2)
[  154.135265][    C1] Sending NMI from CPU 1 to CPUs 0:
[  154.135312][    C0] NMI backtrace for cpu 0
[  154.135324][    C0] CPU: 0 UID: 0 PID: 5960 Comm: syz.0.30 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  154.135333][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  154.135337][    C0] RIP: 0010:native_apic_msr_eoi+0xf/0x20
[  154.135350][    C0] Code: f8 c3 cc cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa b9 0b 08 00 00 31 c0 31 d2 0f 30 <e9> 8c 24 00 0a cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90
[  154.135355][    C0] RSP: 0018:ffffc90000007d60 EFLAGS: 00000046
[  154.135362][    C0] RAX: 0000000000000000 RBX: ffffc90000007d98 RCX: 000000000000080b
[  154.135366][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  154.135370][    C0] RBP: 0000000000000000 R08: ffff88804b023b0f R09: 1ffff11009604761
[  154.135374][    C0] R10: dffffc0000000000 R11: ffffed1009604762 R12: 0000000000000000
[  154.135379][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  154.135382][    C0] FS:  000055556cce0500(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
[  154.135388][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  154.135392][    C0] CR2: 000000110c354921 CR3: 0000000122c18000 CR4: 00000000000006f0
[  154.135416][    C0] Call Trace:
[  154.135421][    C0]  <IRQ>
[  154.135424][    C0]  __sysvec_irq_work+0x11/0x3d0
[  154.135432][    C0]  sysvec_irq_work+0x4f/0xc0
[  154.135439][    C0]  asm_sysvec_irq_work+0x1a/0x20
[  154.135446][    C0] RIP: 0010:handle_softirqs+0x1b0/0x870
[  154.135454][    C0] Code: 89 64 24 30 0f b7 db 48 c7 c7 00 ad 89 8b e8 a7 fe e8 09 65 66 c7 05 85 5b 1a 11 00 00 e8 58 00 42 00 fb 49 c7 c7 c0 c0 e0 8d <b8> ff ff ff ff 0f bc c3 41 89 c5 41 ff c5 0f 84 c2 03 00 00 89 5c
[  154.135459][    C0] RSP: 0018:ffffc90000007e40 EFLAGS: 00000286
[  154.135464][    C0] RAX: 23873b3d0962a400 RBX: 0000000000000200 RCX: 23873b3d0962a400
[  154.135468][    C0] RDX: 0000000000000002 RSI: ffffffff8d998940 RDI: ffffffff8be29f40
[  154.135472][    C0] RBP: ffffc90000007f50 R08: ffffffff8fa1e9f7 R09: 1ffffffff1f43d3e
[  154.135477][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d3f R12: 000000000000000a
[  154.135481][    C0] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8de0c0c0
[  154.135488][    C0]  ? lapic_next_event+0x11/0x20
[  154.135495][    C0]  ? clockevents_program_event+0x24d/0x360
[  154.135505][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  154.135513][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  154.135550][    C0]  ? irq_work_single+0x1ac/0x240
[  154.135557][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  154.135566][    C0]  __irq_exit_rcu+0xca/0x1f0
[  154.135573][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  154.135580][    C0]  ? rcu_is_watching+0x15/0xb0
[  154.135588][    C0]  irq_exit_rcu+0x9/0x30
[  154.135594][    C0]  sysvec_irq_work+0xa3/0xc0
[  154.135600][    C0]  </IRQ>
[  154.135602][    C0]  <TASK>
[  154.135605][    C0]  asm_sysvec_irq_work+0x1a/0x20
[  154.135610][    C0] RIP: 0010:rcu_read_unlock_special+0x87/0x4c0
[  154.135620][    C0] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 62 2c f8 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
[  154.135624][    C0] RSP: 0018:ffffc9000479fc20 EFLAGS: 00000206
[  154.135630][    C0] RAX: 23873b3d0962a400 RBX: 1ffff920008f3f8c RCX: 23873b3d0962a400
[  154.135634][    C0] RDX: 0000000000000006 RSI: ffffffff8d998940 RDI: ffffffff8be29f40
[  154.135638][    C0] RBP: ffffc9000479fd10 R08: ffffffff8fa1e9f7 R09: 1ffffffff1f43d3e
[  154.135642][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d3f R12: 0000000000000000
[  154.135646][    C0] R13: dffffc0000000000 R14: 0000000000000246 R15: ffffffff8e144560
[  154.135655][    C0]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  154.135664][    C0]  ? lock_for_kill+0x84/0x210
[  154.135674][    C0]  __rcu_read_unlock+0x84/0xe0
[  154.135682][    C0]  ? dput+0x37/0x2b0
[  154.135689][    C0]  dput+0x197/0x2b0
[  154.135695][    C0]  __fput+0x68e/0xa70
[  154.135705][    C0]  task_work_run+0x1d4/0x260
[  154.135715][    C0]  ? __pfx_task_work_run+0x10/0x10
[  154.135724][    C0]  ? exit_to_user_mode_loop+0x40/0x110
[  154.135731][    C0]  exit_to_user_mode_loop+0xec/0x110
[  154.135738][    C0]  do_syscall_64+0x2bd/0x3b0
[  154.135746][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  154.135753][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.135759][    C0]  ? exc_page_fault+0x9f/0xf0
[  154.135766][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.135772][    C0] RIP: 0033:0x7fd3aab8e9a9
[  154.135779][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  154.135783][    C0] RSP: 002b:00007ffe7288b288 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  154.135789][    C0] RAX: 0000000000000000 RBX: 000000000000bf59 RCX: 00007fd3aab8e9a9
[  154.135793][    C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  154.135797][    C0] RBP: 00007fd3aadb7ba0 R08: 0000000000000001 R09: 000000057288b57f
[  154.135801][    C0] R10: 00007fd3aaa00000 R11: 0000000000000246 R12: 00007fd3aadb5fac
[  154.135805][    C0] R13: 00007fd3aadb5fa0 R14: ffffffffffffffff R15: 00007ffe7288b3a0
[  154.135812][    C0]  </TASK>
[  154.136290][    C1] task:syz.0.30        state:R  running task     stack:26360 pid:5960  tgid:5960  ppid:5841   task_flags:0x400040 flags:0x00004008
[  154.302343][    C1] Call Trace:
[  154.303448][    C1]  <TASK>
[  154.304402][    C1]  ? __rcu_read_unlock+0x84/0xe0
[  154.305989][    C1]  ? trace_call_bpf+0xb7/0x850
[  154.307471][    C1]  ? trace_call_bpf+0x5ba/0x850
[  154.309053][    C1]  ? trace_call_bpf+0xb7/0x850
[  154.310633][    C1]  ? perf_trace_preemptirq_template+0xa3/0x340
[  154.312647][    C1]  ? irqentry_enter+0x3d/0x60
[  154.314206][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  154.316357][    C1]  ? perf_trace_run_bpf_submit+0x100/0x170
[  154.318266][    C1]  ? rcu_is_watching+0x15/0xb0
[  154.319852][    C1]  ? sysvec_irq_work+0x83/0xc0
[  154.321415][    C1]  ? asm_sysvec_irq_work+0x1a/0x20
[  154.323123][    C1]  ? rcu_read_unlock_special+0x87/0x4c0
[  154.324943][    C1]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  154.326900][    C1]  ? lock_for_kill+0x84/0x210
[  154.328447][    C1]  ? __rcu_read_unlock+0x84/0xe0
[  154.330086][    C1]  ? dput+0x37/0x2b0
[  154.331381][    C1]  ? dput+0x197/0x2b0
[  154.332708][    C1]  ? __fput+0x68e/0xa70
[  154.334091][    C1]  ? task_work_run+0x1d4/0x260
[  154.335678][    C1]  ? __pfx_task_work_run+0x10/0x10
[  154.337358][    C1]  ? exit_to_user_mode_loop+0x40/0x110
[  154.339144][    C1]  ? exit_to_user_mode_loop+0xec/0x110
[  154.340927][    C1]  ? do_syscall_64+0x2bd/0x3b0
[  154.342510][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  154.344235][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.346234][    C1]  ? exc_page_fault+0x9f/0xf0
[  154.347795][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.349787][    C1]  </TASK>
[  154.350813][    C1] task:syz.2.24        state:R  running task     stack:25096 pid:5946  tgid:5946  ppid:5838   task_flags:0x400040 flags:0x0000400a
[  154.355137][    C1] Call Trace:
[  154.356258][    C1]  <IRQ>
[  154.357226][    C1]  sched_show_task+0x49d/0x630
[  154.358803][    C1]  ? __pfx_sched_show_task+0x10/0x10
[  154.360540][    C1]  ? rcu_dump_cpu_stacks+0x79/0x4e0
[  154.362247][    C1]  ? wq_watchdog_touch+0xef/0x180
[  154.363904][    C1]  print_other_cpu_stall+0xfa6/0x1370
[  154.365686][    C1]  ? __pfx_print_other_cpu_stall+0x10/0x10
[  154.367590][    C1]  rcu_sched_clock_irq+0x9d1/0x1090
[  154.369289][    C1]  ? __pfx_rcu_sched_clock_irq+0x10/0x10
[  154.371135][    C1]  update_process_times+0x23c/0x2f0
[  154.372854][    C1]  tick_nohz_handler+0x39a/0x520
[  154.374486][    C1]  ? __pfx_tick_nohz_handler+0x10/0x10
[  154.376275][    C1]  __hrtimer_run_queues+0x4e0/0xc60
[  154.377989][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  154.379862][    C1]  hrtimer_interrupt+0x45b/0xaa0
[  154.381494][    C1]  __sysvec_apic_timer_interrupt+0x10b/0x410
[  154.383472][    C1]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  154.385312][    C1]  </IRQ>
[  154.386297][    C1]  <TASK>
[  154.387285][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  154.389252][    C1] RIP: 0010:__kasan_check_read+0xa/0x20
[  154.391066][    C1] Code: 31 ed eb cf cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 89 f6 48 8b 0c 24 <31> d2 e9 ef e4 ff ff 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00
[  154.397292][    C1] RSP: 0018:ffffc9000477fb18 EFLAGS: 00000202
[  154.399286][    C1] RAX: 0000000000000001 RBX: ffff88801dc46dc8 RCX: ffffffff8b71360c
[  154.401869][    C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88801dc46dc8
[  154.404446][    C1] RBP: ffffc9000477fc18 R08: ffff88801dc46dcb R09: 1ffff11003b88db9
[  154.407027][    C1] R10: dffffc0000000000 R11: ffffed1003b88dba R12: 1ffff920008eff6c
[  154.409605][    C1] R13: 0000000000000001 R14: ffffc9000477fb80 R15: 1ffff11003b88db9
[  154.412171][    C1]  ? native_queued_spin_lock_slowpath+0xbc/0x8e0
[  154.414232][    C1]  native_queued_spin_lock_slowpath+0xbc/0x8e0
[  154.416254][    C1]  ? __pfx_preempt_schedule_notrace+0x10/0x10
[  154.418240][    C1]  ? __pfx_preempt_schedule_notrace+0x10/0x10
[  154.420224][    C1]  ? __pfx_native_queued_spin_lock_slowpath+0x10/0x10
[  154.422423][    C1]  ? __lock_acquire+0xab9/0xd20
[  154.424031][    C1]  queued_spin_lock_slowpath+0x43/0x50
[  154.425824][    C1]  do_raw_spin_lock+0x21f/0x290
[  154.427425][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  154.429192][    C1]  lock_for_kill+0xdc/0x210
[  154.430696][    C1]  ? dput+0x37/0x2b0
[  154.431991][    C1]  dput+0x18a/0x2b0
[  154.433260][    C1]  __fput+0x68e/0xa70
[  154.434604][    C1]  task_work_run+0x1d4/0x260
[  154.436126][    C1]  ? __pfx_task_work_run+0x10/0x10
[  154.437815][    C1]  ? exit_to_user_mode_loop+0x40/0x110
[  154.439603][    C1]  exit_to_user_mode_loop+0xec/0x110
[  154.441327][    C1]  do_syscall_64+0x2bd/0x3b0
[  154.442873][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.444853][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  154.446860][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.448799][    C1] RIP: 0033:0x7efdcd38e9a9
[  154.450262][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  154.456467][    C1] RSP: 002b:00007ffc34f1f208 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  154.459180][    C1] RAX: 0000000000000000 RBX: 00007efdcd5b7ba0 RCX: 00007efdcd38e9a9
[  154.461759][    C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  154.464338][    C1] RBP: 00007efdcd5b7ba0 R08: 0000000000000040 R09: 0000000434f1f4ff
[  154.466926][    C1] R10: 00000000003ffd9c R11: 0000000000000246 R12: 000000000000c101
[  154.469488][    C1] R13: 00007ffc34f1f300 R14: ffffffffffffffff R15: 00007ffc34f1f320
[  154.472069][    C1]  </TASK>
[  154.473112][    C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g5721 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  154.476536][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  154.479697][    C1] rcu: RCU grace-period kthread stack dump:
[  154.481622][    C1] task:rcu_preempt     state:R  running task     stack:27208 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
[  154.485949][    C1] Call Trace:
[  154.487060][    C1]  <TASK>
[  154.488056][    C1]  __schedule+0x16f5/0x4d00
[  154.489579][    C1]  ? do_raw_spin_unlock+0x4d/0x240
[  154.491260][    C1]  ? schedule+0x165/0x360
[  154.492700][    C1]  ? __lock_acquire+0xab9/0xd20
[  154.494300][    C1]  ? __pfx___schedule+0x10/0x10
[  154.495921][    C1]  ? schedule+0x91/0x360
[  154.497317][    C1]  schedule+0x165/0x360
[  154.498703][    C1]  schedule_timeout+0x12b/0x270
[  154.500304][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  154.502065][    C1]  ? __pfx_process_timeout+0x10/0x10
[  154.503806][    C1]  ? prepare_to_swait_event+0x341/0x380
[  154.505629][    C1]  rcu_gp_fqs_loop+0x301/0x1540
[  154.507228][    C1]  ? __pfx_rcu_gp_init+0x10/0x10
[  154.508854][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  154.510579][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  154.512292][    C1]  ? _raw_spin_unlock_irq+0x2e/0x50
[  154.513996][    C1]  ? finish_swait+0xcd/0x1f0
[  154.515536][    C1]  rcu_gp_kthread+0x99/0x390
[  154.517056][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  154.518776][    C1]  ? __kthread_parkme+0x7b/0x200
[  154.520407][    C1]  ? __kthread_parkme+0x1a1/0x200
[  154.522068][    C1]  kthread+0x711/0x8a0
[  154.523411][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  154.525117][    C1]  ? __pfx_kthread+0x10/0x10
[  154.526651][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  154.528361][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  154.530074][    C1]  ? __pfx_kthread+0x10/0x10
[  154.531601][    C1]  ret_from_fork+0x3fc/0x770
[  154.533122][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  154.534804][    C1]  ? __switch_to_asm+0x39/0x70
[  154.536374][    C1]  ? __switch_to_asm+0x33/0x70
[  154.537947][    C1]  ? __pfx_kthread+0x10/0x10
[  154.539466][    C1]  ret_from_fork_asm+0x1a/0x30
[  154.541051][    C1]  </TASK>
[  154.542083][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  154.544140][    C1] CPU: 1 UID: 0 PID: 5946 Comm: syz.2.24 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  154.548075][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  154.551329][    C1] RIP: 0010:__kasan_check_read+0xa/0x20
[  154.553140][    C1] Code: 31 ed eb cf cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 89 f6 48 8b 0c 24 <31> d2 e9 ef e4 ff ff 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00
[  154.559344][    C1] RSP: 0018:ffffc9000477fb18 EFLAGS: 00000202
[  154.561333][    C1] RAX: 0000000000000001 RBX: ffff88801dc46dc8 RCX: ffffffff8b71360c
[  154.563894][    C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88801dc46dc8
[  154.566455][    C1] RBP: ffffc9000477fc18 R08: ffff88801dc46dcb R09: 1ffff11003b88db9
[  154.569030][    C1] R10: dffffc0000000000 R11: ffffed1003b88dba R12: 1ffff920008eff6c
[  154.571615][    C1] R13: 0000000000000001 R14: ffffc9000477fb80 R15: 1ffff11003b88db9
[  154.574181][    C1] FS:  00005555648ac500(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
[  154.577050][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  154.579173][    C1] CR2: 00007fd3ab958fc8 CR3: 00000000280ea000 CR4: 00000000000006f0
[  154.581751][    C1] Call Trace:
[  154.582876][    C1]  <TASK>
[  154.583856][    C1]  native_queued_spin_lock_slowpath+0xbc/0x8e0
[  154.585874][    C1]  ? __pfx_preempt_schedule_notrace+0x10/0x10
[  154.587763][    C1]  ? __pfx_preempt_schedule_notrace+0x10/0x10
[  154.589746][    C1]  ? __pfx_native_queued_spin_lock_slowpath+0x10/0x10
[  154.591947][    C1]  ? __lock_acquire+0xab9/0xd20
[  154.593565][    C1]  queued_spin_lock_slowpath+0x43/0x50
[  154.595344][    C1]  do_raw_spin_lock+0x21f/0x290
[  154.596951][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  154.598729][    C1]  lock_for_kill+0xdc/0x210
[  154.600229][    C1]  ? dput+0x37/0x2b0
[  154.601531][    C1]  dput+0x18a/0x2b0
[  154.602809][    C1]  __fput+0x68e/0xa70
[  154.604129][    C1]  task_work_run+0x1d4/0x260
[  154.605676][    C1]  ? __pfx_task_work_run+0x10/0x10
[  154.607360][    C1]  ? exit_to_user_mode_loop+0x40/0x110
[  154.609151][    C1]  exit_to_user_mode_loop+0xec/0x110
[  154.610882][    C1]  do_syscall_64+0x2bd/0x3b0
[  154.612406][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.614386][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  154.616406][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.618340][    C1] RIP: 0033:0x7efdcd38e9a9
[  154.619820][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  154.626017][    C1] RSP: 002b:00007ffc34f1f208 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  154.628719][    C1] RAX: 0000000000000000 RBX: 00007efdcd5b7ba0 RCX: 00007efdcd38e9a9
[  154.631246][    C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  154.633808][    C1] RBP: 00007efdcd5b7ba0 R08: 0000000000000040 R09: 0000000434f1f4ff
[  154.636372][    C1] R10: 00000000003ffd9c R11: 0000000000000246 R12: 000000000000c101
[  154.638946][    C1] R13: 00007ffc34f1f300 R14: ffffffffffffffff R15: 00007ffc34f1f320
[  154.641530][    C1]  </TASK>

VM DIAGNOSIS:
11:03:49  Registers:
info registers vcpu 0

CPU#0
RAX=23873b3d0962a400 RBX=0000000000000200 RCX=23873b3d0962a400 RDX=0000000000000002
RSI=ffffffff8d998940 RDI=ffffffff8be29f40 RBP=ffffc90000007f50 RSP=ffffc90000007e18
R8 =ffffffff8fa1e9f7 R9 =1ffffffff1f43d3e R10=dffffc0000000000 R11=fffffbfff1f43d3f
R12=000000000000000a R13=0000000000000000 R14=dffffc0000000000 R15=ffffffff8de0c0c0
RIP=ffffffff810015d0 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055556cce0500 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c354921 CR3=0000000122c18000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=9500000000000000 00000002e5000000 XMM03=1800000000000000 0000000000000008
XMM04=00007fd3ab8ed100 00007fd3aad86440 XMM05=00007fd3aad86458 00007fd3aad864a0
XMM06=00007fd3aad86498 00007fd3aad86490 XMM07=00007fd3aad86488 00007fd3aad86480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fd3aac11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001e02b0
R8 =ffff8881069b0237 R9 =1ffff11020d36046 R10=dffffc0000000000 R11=ffffffff85472aa0
R12=dffffc0000000000 R13=ffffffff99af58c4 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff85472b1c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555648ac500 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd3ab958fc8 CR3=00000000280ea000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffff00 ffffffffffffff00
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffff00 ffffffffffffff00
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fd9a1e11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
