last executing test programs:

16.249220946s ago: executing program 2 (id=24):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef42b000000e3bd6efb010511000b000a", 0x23}], 0x1, 0x0, 0x0, 0xc9e}, 0x0)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="934300006d00"], 0xfe33)

16.159442541s ago: executing program 2 (id=26):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x5452, &(0x7f0000000a00)={'dvmrp0\x00', @random='c\b\x00'})
setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000000), 0x4)

15.408122382s ago: executing program 1 (id=40):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10)
recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)

15.407898934s ago: executing program 0 (id=41):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x6, 0x6}, 0x0, 0x4, 0xfffffffd, 0x2, 0x2, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12)

15.358806918s ago: executing program 1 (id=42):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x15, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000000)={r0})

15.358462321s ago: executing program 0 (id=43):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x6, [@enum={0x4, 0x1, 0x0, 0x6, 0x4, [{0x1, 0x8}]}]}, {0x0, [0x61, 0x2e, 0x5f, 0x5f]}}, 0x0, 0x32, 0x0, 0x8}, 0x28)

15.29964055s ago: executing program 0 (id=44):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711263000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

15.299518553s ago: executing program 2 (id=45):
r0 = socket$kcm(0x25, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="e8", 0x1}], 0x1}, 0x20004040)

15.299335478s ago: executing program 1 (id=46):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000f020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52, 0x0, 0x1}, 0x28)

15.229144289s ago: executing program 2 (id=47):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000010c0)=ANY=[])

15.228932616s ago: executing program 0 (id=48):
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x5, 0x83501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x940, 0x4, 0x0, 0x0, 0x6d1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40000002)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socket$kcm(0x10, 0x2, 0x10)
socket$kcm(0xa, 0x0, 0x106)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000040)
perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x1, 0x0, 0x0, 0x4, 0x0, 0x84, 0x84842, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x4, @perf_config_ext={0x14, 0x2}, 0x40, 0x20008, 0x0, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0xfffffffe, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080))
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20)

15.228870112s ago: executing program 1 (id=49):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x4, 0x4}, 0x48)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8993, &(0x7f0000000080))

15.168376336s ago: executing program 1 (id=50):
r0 = socket$kcm(0x28, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x28, 0x6, 0x0, 0x44)

15.168143828s ago: executing program 1 (id=51):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg(0xffffffffffffffff, 0x0, 0x4)
socket$kcm(0x2b, 0x1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8931, &(0x7f00000000c0)={'veth1_to_bond\x00'})
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$tipc(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)="0cd7117afc3677aa5e00121b0663e4", 0xf, 0x80}, 0x4048001)
close(r0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800190007000200060001c00200bc24eab556a705251e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="dbaa00fe41000000711014000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94)
r5 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r5, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0204000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x23, &(0x7f0000000000), 0x4)
recvmsg(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000240)='+\\-)/\x00')

15.167985081s ago: executing program 2 (id=52):
r0 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x53, &(0x7f0000000640), 0x4)

15.088348998s ago: executing program 2 (id=53):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r1, 0xe4}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180))

15.03625346s ago: executing program 0 (id=54):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0xa, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0)

0s ago: executing program 0 (id=55):
r0 = socket$kcm(0x10, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'netpci0\x00', 0x400})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400})
close(r0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:48378' (ED25519) to the list of known hosts.
syzkaller login: [   47.899750][ T5816] cgroup: Unknown subsys name 'net'
[   48.070039][ T5816] cgroup: Unknown subsys name 'cpuset'
[   48.073992][ T5816] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.636706][ T5816] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.528732][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.531716][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.534996][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.538922][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.542609][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.577665][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.581331][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.584794][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.589837][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.593358][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.663541][ T5218] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.666780][ T5218] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.669329][ T5218] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.671970][ T5218] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.674532][ T5218] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.777264][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   53.791245][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   53.909668][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.912515][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.915031][ T5832] bridge_slave_0: entered allmulticast mode
[   53.917975][ T5832] bridge_slave_0: entered promiscuous mode
[   53.921517][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.923819][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.926890][ T5827] bridge_slave_0: entered allmulticast mode
[   53.929730][ T5827] bridge_slave_0: entered promiscuous mode
[   53.934944][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.937416][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.939827][ T5827] bridge_slave_1: entered allmulticast mode
[   53.942522][ T5827] bridge_slave_1: entered promiscuous mode
[   53.945547][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.949088][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.951978][ T5832] bridge_slave_1: entered allmulticast mode
[   53.955085][ T5832] bridge_slave_1: entered promiscuous mode
[   54.011671][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.019497][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.026398][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.037044][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.067666][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   54.090558][ T5827] team0: Port device team_slave_0 added
[   54.094421][ T5832] team0: Port device team_slave_0 added
[   54.108116][ T5827] team0: Port device team_slave_1 added
[   54.112294][ T5832] team0: Port device team_slave_1 added
[   54.184641][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.188257][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.199926][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.206050][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.208922][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.219669][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.230315][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.233157][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.243198][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.248575][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.251567][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.262928][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.302467][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.306088][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.309308][ T5835] bridge_slave_0: entered allmulticast mode
[   54.313260][ T5835] bridge_slave_0: entered promiscuous mode
[   54.318744][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.321909][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.325345][ T5835] bridge_slave_1: entered allmulticast mode
[   54.329436][ T5835] bridge_slave_1: entered promiscuous mode
[   54.389566][ T5827] hsr_slave_0: entered promiscuous mode
[   54.392922][ T5827] hsr_slave_1: entered promiscuous mode
[   54.419591][ T5832] hsr_slave_0: entered promiscuous mode
[   54.421945][ T5832] hsr_slave_1: entered promiscuous mode
[   54.424152][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.428700][ T5832] Cannot create hsr debugfs directory
[   54.432953][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.439907][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.497296][ T5835] team0: Port device team_slave_0 added
[   54.512994][ T5835] team0: Port device team_slave_1 added
[   54.569896][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.572870][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.584213][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.600042][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.603112][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.614312][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.709991][ T5835] hsr_slave_0: entered promiscuous mode
[   54.713041][ T5835] hsr_slave_1: entered promiscuous mode
[   54.716500][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.719612][ T5835] Cannot create hsr debugfs directory
[   54.782167][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.805738][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.819061][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.840684][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   54.904110][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.912885][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.931451][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.944439][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   54.975048][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.986505][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.996793][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.003231][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.065121][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.089898][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   55.114571][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.122013][  T984] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.125274][  T984] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.139113][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.148248][  T984] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.151195][  T984] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.175250][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   55.191052][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   55.208221][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.210710][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.222032][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.224817][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.232312][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.235431][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.248422][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.250805][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.284613][ T5832] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   55.288328][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.410494][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.440571][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.452465][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.492323][ T5832] veth0_vlan: entered promiscuous mode
[   55.494460][ T5835] veth0_vlan: entered promiscuous mode
[   55.507752][ T5832] veth1_vlan: entered promiscuous mode
[   55.519043][ T5835] veth1_vlan: entered promiscuous mode
[   55.522508][ T5827] veth0_vlan: entered promiscuous mode
[   55.536694][ T5827] veth1_vlan: entered promiscuous mode
[   55.545482][ T5832] veth0_macvtap: entered promiscuous mode
[   55.557399][ T5832] veth1_macvtap: entered promiscuous mode
[   55.568239][ T5835] veth0_macvtap: entered promiscuous mode
[   55.575077][ T5835] veth1_macvtap: entered promiscuous mode
[   55.584532][ T5827] veth0_macvtap: entered promiscuous mode
[   55.587539][ T5218] Bluetooth: hci0: command tx timeout
[   55.589055][ T5827] veth1_macvtap: entered promiscuous mode
[   55.594049][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.604989][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.614388][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.617963][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.620845][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.624033][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.630920][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.635089][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.647882][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.655871][ T5218] Bluetooth: hci1: command tx timeout
[   55.661063][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.668124][ T5827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.671239][ T5827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.673969][ T5827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.678022][ T5827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.683146][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.686279][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.689130][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.692018][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.736326][ T5218] Bluetooth: hci2: command tx timeout
[   55.765397][ T3900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.773192][ T3900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.798305][  T984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.800886][  T984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.821915][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.824871][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.840490][ T3900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.843140][ T3900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.861424][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.865188][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.884622][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   55.918589][  T984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.930581][  T984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.990318][ T5896] netlink: 'syz.1.2': attribute type 16 has an invalid length.
[   55.992896][ T5896] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2'.
[   56.075135][ T5905] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   56.757654][ T5943] netlink: 'syz.2.24': attribute type 10 has an invalid length.
[   56.807767][ T5945] netlink: 'syz.1.25': attribute type 29 has an invalid length.
[   56.876308][ T5949] Zero length message leads to an empty skb
[   56.879218][ T5949] netlink: 'syz.1.27': attribute type 10 has an invalid length.
[   56.885317][ T5949] bridge0: port 3(team0) entered blocking state
[   56.892118][ T5949] bridge0: port 3(team0) entered disabled state
[   56.894623][ T5949] team0: entered allmulticast mode
[   56.902238][ T5949] team_slave_0: entered allmulticast mode
[   56.905606][ T5949] team_slave_1: entered allmulticast mode
[   56.911156][ T5949] team0: entered promiscuous mode
[   56.914142][ T5949] team_slave_0: entered promiscuous mode
[   56.918100][ T5949] team_slave_1: entered promiscuous mode
[   56.922035][ T5949] bridge0: port 3(team0) entered blocking state
[   56.925130][ T5949] bridge0: port 3(team0) entered forwarding state
[   57.189076][ T5958] warning: `syz.1.31' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   57.441686][ T5964] netlink: 48 bytes leftover after parsing attributes in process `syz.1.34'.
[   57.473719][ T5966] bond_slave_1: entered promiscuous mode
[   57.478188][ T5966] bond_slave_1: entered allmulticast mode
[   57.518598][ T5968] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.609560][ T5218] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3
[   57.665903][ T5218] Bluetooth: hci0: command tx timeout
[   57.745973][ T5218] Bluetooth: hci1: command tx timeout
[   57.815929][ T5218] Bluetooth: hci2: command tx timeout
[   57.894902][ T5998] netlink: 'syz.1.51': attribute type 25 has an invalid length.
[   57.904168][ T5998] netlink: 'syz.1.51': attribute type 1 has an invalid length.
[   57.914908][ T5998] bridge0: port 1(bridge_slave_0) entered learning state
[   62.425694][    C1] hrtimer: interrupt took 41637 ns
[   70.380771][    C0] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.312835][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   73.317135][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   73.320141][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   73.325902][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   73.328673][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   73.501817][ T5218] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   73.505359][ T5218] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   73.508597][ T5218] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   73.516766][ T5218] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   73.523947][ T5218] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   73.613325][   T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   73.619239][   T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   73.622641][   T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   73.626417][   T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   73.630142][   T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   75.336005][   T55] Bluetooth: hci3: command tx timeout
[   75.575915][   T55] Bluetooth: hci4: command tx timeout
[   75.655912][   T55] Bluetooth: hci5: command tx timeout
[   77.415897][   T55] Bluetooth: hci3: command tx timeout
[   77.655837][ T5218] Bluetooth: hci4: command tx timeout
[   77.735871][ T5218] Bluetooth: hci5: command tx timeout
[   79.496646][ T5218] Bluetooth: hci3: command tx timeout
[   79.735954][ T5218] Bluetooth: hci4: command tx timeout
[   79.816008][ T5218] Bluetooth: hci5: command tx timeout
[   81.587634][ T5218] Bluetooth: hci3: command tx timeout
[   81.815994][ T5218] Bluetooth: hci4: command tx timeout
[   81.897641][ T5218] Bluetooth: hci5: command tx timeout
[  133.953242][   T55] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  133.956746][   T55] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  133.960188][   T55] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  133.963276][   T55] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  133.965922][   T55] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  134.019387][ T5218] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  134.022650][ T5218] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  134.025535][ T5218] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  134.029684][ T5218] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  134.033239][ T5218] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  134.062265][   T55] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  134.065264][   T55] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  134.071438][   T55] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  134.074738][   T55] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  134.077631][   T55] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  136.056069][ T5218] Bluetooth: hci6: command tx timeout
[  136.059203][   T55] Bluetooth: hci7: command tx timeout
[  136.145909][   T55] Bluetooth: hci8: command tx timeout
[  138.136374][ T5218] Bluetooth: hci6: command tx timeout
[  138.138779][   T55] Bluetooth: hci7: command tx timeout
[  138.215831][   T55] Bluetooth: hci8: command tx timeout
[  140.215970][   T55] Bluetooth: hci7: command tx timeout
[  140.218383][   T55] Bluetooth: hci6: command tx timeout
[  140.295952][ T5218] Bluetooth: hci8: command tx timeout
[  142.296046][ T5218] Bluetooth: hci6: command tx timeout
[  142.298464][ T5218] Bluetooth: hci7: command tx timeout
[  142.376048][   T55] Bluetooth: hci8: command tx timeout
[  162.965707][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  162.967854][    C1] rcu: 	1-....: (1 GPs behind) idle=dc74/1/0x4000000000000000 softirq=13917/13918 fqs=4743
[  162.972292][    C1] rcu: 	         hardirqs   softirqs   csw/system
[  162.974476][    C1] rcu: 	 number:   962910          0            0
[  162.976603][    C1] rcu: 	cputime:    24312      28176           94   ==> 52490(ms)
[  162.979137][    C1] rcu: 	(t=10500 jiffies g=6705 q=2969 ncpus=2)
[  162.981165][    C1] CPU: 1 UID: 0 PID: 5998 Comm: syz.1.51 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  162.981174][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  162.981178][    C1] RIP: 0010:net_rps_action_and_irq_enable+0x197/0x1b0
[  162.981194][    C1] Code: e1 07 80 c1 03 38 c1 7c 94 4c 89 f7 e8 22 1c ca f8 eb 8a e8 ab f8 66 f8 eb 0b e8 a4 f8 66 f8 e8 bf 84 6e f8 fb 5b 41 5c 41 5d <41> 5e 41 5f 5d c3 cc cc cc cc cc f3 0f 1e fa e8 85 f8 66 f8 eb df
[  162.981199][    C1] RSP: 0018:ffffc900001e0bc0 EFLAGS: 00000286
[  162.981206][    C1] RAX: 64418c8544020600 RBX: ffff88813663ba48 RCX: 64418c8544020600
[  162.981211][    C1] RDX: 0000000000000000 RSI: ffffffff8d998701 RDI: ffffffff8be29f80
[  162.981233][    C1] RBP: ffffc900001e0e30 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  162.981239][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffff88813663ba40
[  162.981244][    C1] R13: dffffc0000000000 R14: ffff88813663bae0 R15: 1ffff11026cc775c
[  162.981249][    C1] FS:  00007f0000adf6c0(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
[  162.981255][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  162.981259][    C1] CR2: 00007f445bd48fc8 CR3: 0000000020cc4000 CR4: 00000000000006f0
[  162.981284][    C1] Call Trace:
[  162.981290][    C1]  <IRQ>
[  162.981294][    C1]  net_rx_action+0xcd5/0xe30
[  162.981301][    C1]  ? clockevents_program_event+0x24d/0x360
[  162.981320][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  162.981326][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  162.981334][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  162.981354][    C1]  handle_softirqs+0x286/0x870
[  162.981363][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  162.981373][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  162.981379][    C1]  ? kvm_guest_apic_eoi_write+0x97/0xc0
[  162.981393][    C1]  __irq_exit_rcu+0xca/0x1f0
[  162.981400][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  162.981410][    C1]  ? __common_interrupt+0x163/0x250
[  162.981417][    C1]  irq_exit_rcu+0x9/0x30
[  162.981424][    C1]  common_interrupt+0xbb/0xe0
[  162.981431][    C1]  </IRQ>
[  162.981433][    C1]  <TASK>
[  162.981437][    C1]  asm_common_interrupt+0x26/0x40
[  162.981444][    C1] RIP: 0010:__rcu_read_lock+0x2a/0x60
[  162.981453][    C1] Code: f3 0f 1e fa 53 65 48 8b 1c 25 08 10 a0 92 48 81 c3 44 04 00 00 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 <84> c0 75 18 ff 03 8b 03 3d 00 00 00 40 7d 07 5b c3 cc cc cc cc cc
[  162.981458][    C1] RSP: 0018:ffffc900043e66e8 EFLAGS: 00000a07
[  162.981463][    C1] RAX: 0000000000000000 RBX: ffff888021530444 RCX: dffffc0000000000
[  162.981483][    C1] RDX: dffffc0000000000 RSI: ffffffff822c996d RDI: ffffc900043e67c8
[  162.981487][    C1] RBP: dffffc0000000000 R08: ffffc900043e6890 R09: 0000000000000000
[  162.981491][    C1] R10: ffffc900043e6818 R11: ffffffff81acf520 R12: 1ffff9200087ccf9
[  162.981495][    C1] R13: ffffc900043e6800 R14: ffffc900043e67c8 R15: ffffc900043e6a40
[  162.981502][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  162.981513][    C1]  ? __set_page_owner+0x8d/0x4a0
[  162.981522][    C1]  ? __set_page_owner+0x8d/0x4a0
[  162.981528][    C1]  unwind_next_frame+0x9e/0x2390
[  162.981538][    C1]  ? unwind_next_frame+0xa5/0x2390
[  162.981546][    C1]  ? save_stack+0xf5/0x1f0
[  162.981554][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  162.981562][    C1]  arch_stack_walk+0x11c/0x150
[  162.981574][    C1]  ? __set_page_owner+0x8d/0x4a0
[  162.981582][    C1]  stack_trace_save+0x9c/0xe0
[  162.981591][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  162.981598][    C1]  ? trace_call_bpf+0xb7/0x850
[  162.981610][    C1]  save_stack+0xf5/0x1f0
[  162.981618][    C1]  ? __pfx_save_stack+0x10/0x10
[  162.981630][    C1]  ? seqcount_lockdep_reader_access+0x102/0x180
[  162.981643][    C1]  __set_page_owner+0x8d/0x4a0
[  162.981651][    C1]  ? __pfx___set_page_owner+0x10/0x10
[  162.981661][    C1]  post_alloc_hook+0x240/0x2a0
[  162.981671][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  162.981679][    C1]  ? trace_call_bpf+0xb7/0x850
[  162.981703][    C1]  ? __pfx_get_page_from_freelist+0x10/0x10
[  162.981712][    C1]  ? prepare_alloc_pages+0x213/0x610
[  162.981724][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  162.981740][    C1]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  162.981751][    C1]  ? irqentry_exit+0x74/0x90
[  162.981760][    C1]  ? policy_nodemask+0x27c/0x720
[  162.981771][    C1]  alloc_pages_mpol+0x232/0x4a0
[  162.981780][    C1]  alloc_pages_noprof+0xa9/0x190
[  162.981789][    C1]  get_free_pages_noprof+0xf/0x80
[  162.981797][    C1]  kasan_populate_vmalloc+0x33/0x1a0
[  162.981806][    C1]  ? do_raw_spin_unlock+0x4d/0x240
[  162.981818][    C1]  alloc_vmap_area+0xd51/0x1490
[  162.981831][    C1]  ? __pfx_alloc_vmap_area+0x10/0x10
[  162.981838][    C1]  ? __kasan_kmalloc+0x93/0xb0
[  162.981845][    C1]  ? __kmalloc_cache_node_noprof+0x234/0x3d0
[  162.981852][    C1]  ? __get_vm_area_node+0x13f/0x300
[  162.981858][    C1]  ? bpf_prog_calc_tag+0xb9/0x620
[  162.981865][    C1]  __get_vm_area_node+0x1f8/0x300
[  162.981875][    C1]  __vmalloc_node_range_noprof+0x301/0x12f0
[  162.981883][    C1]  ? bpf_prog_calc_tag+0xb9/0x620
[  162.981889][    C1]  ? kernel_text_address+0xa5/0xe0
[  162.981896][    C1]  ? unwind_get_return_address+0x4d/0x90
[  162.981904][    C1]  ? arch_stack_walk+0xfc/0x150
[  162.981917][    C1]  ? stack_trace_save+0x9c/0xe0
[  162.981926][    C1]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  162.981937][    C1]  ? bpf_prog_calc_tag+0xb9/0x620
[  162.981943][    C1]  vmalloc_noprof+0xb2/0xf0
[  162.981950][    C1]  ? bpf_prog_calc_tag+0xb9/0x620
[  162.981958][    C1]  bpf_prog_calc_tag+0xb9/0x620
[  162.981967][    C1]  ? __pfx_bpf_prog_calc_tag+0x10/0x10
[  162.981978][    C1]  ? check_btf_info+0x766/0x22a0
[  162.981986][    C1]  ? __pfx_cmp_subprogs+0x10/0x10
[  162.981995][    C1]  ? sort+0xa4/0xf0
[  162.982004][    C1]  resolve_pseudo_ldimm64+0xbc/0xc50
[  162.982016][    C1]  ? __pfx_check_btf_info+0x10/0x10
[  162.982025][    C1]  ? __pfx_resolve_pseudo_ldimm64+0x10/0x10
[  162.982034][    C1]  ? check_subprogs+0x5a1/0x670
[  162.982047][    C1]  bpf_check+0x1c58/0x1d2e0
[  162.982058][    C1]  ? trace_call_bpf+0x5ba/0x850
[  162.982071][    C1]  ? migrate_enable+0x29c/0x3c0
[  162.982086][    C1]  ? trace_call_bpf+0xb7/0x850
[  162.982093][    C1]  ? trace_call_bpf+0xb7/0x850
[  162.982099][    C1]  ? trace_call_bpf+0x5ba/0x850
[  162.982109][    C1]  ? __pfx_trace_call_bpf+0x10/0x10
[  162.982122][    C1]  ? __lock_acquire+0xab9/0xd20
[  162.982132][    C1]  ? __pfx_bpf_check+0x10/0x10
[  162.982140][    C1]  ? ktime_get_with_offset+0x8c/0x2a0
[  162.982152][    C1]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[  162.982161][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  162.982169][    C1]  ? ktime_get_with_offset+0x8c/0x2a0
[  162.982177][    C1]  ? seqcount_lockdep_reader_access+0x175/0x1c0
[  162.982185][    C1]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  162.982198][    C1]  ? __asan_memset+0x22/0x50
[  162.982206][    C1]  ? bpf_obj_name_cpy+0x194/0x1e0
[  162.982214][    C1]  ? bpf_lsm_bpf_prog_load+0x9/0x20
[  162.982249][    C1]  ? security_bpf_prog_load+0x7f/0x310
[  162.982260][    C1]  bpf_prog_load+0x1318/0x1930
[  162.982272][    C1]  ? __pfx_bpf_prog_load+0x10/0x10
[  162.982279][    C1]  ? irqentry_exit+0x74/0x90
[  162.982292][    C1]  ? __sys_bpf+0x514/0x870
[  162.982299][    C1]  ? bpf_prog_load+0x10/0x1930
[  162.982307][    C1]  __sys_bpf+0x528/0x870
[  162.982314][    C1]  ? __pfx___sys_bpf+0x10/0x10
[  162.982326][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  162.982341][    C1]  __x64_sys_bpf+0x7c/0x90
[  162.982351][    C1]  do_syscall_64+0xfa/0x3b0
[  162.982361][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.982367][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  162.982376][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.982382][    C1] RIP: 0033:0x7effffb8eb69
[  162.982390][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  162.982394][    C1] RSP: 002b:00007f0000adf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  162.982401][    C1] RAX: ffffffffffffffda RBX: 00007effffdb5fa0 RCX: 00007effffb8eb69
[  162.982406][    C1] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005
[  162.982409][    C1] RBP: 00007effffc11df1 R08: 0000000000000000 R09: 0000000000000000
[  162.982413][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  162.982417][    C1] R13: 0000000000000000 R14: 00007effffdb5fa0 R15: 00007ffebcae13e8
[  162.982428][    C1]  </TASK>
[  163.268100][    C1] sched: DL replenish lagged too much
[  172.535934][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 114080148600 wd_nsec: 114080151162

VM DIAGNOSIS:
09:33:22  Registers:
info registers vcpu 0

CPU#0
RAX=dc0f14e31fc4c000 RBX=ffffffff81975f18 RCX=dc0f14e31fc4c000 RDX=0000000000000001
RSI=ffffffff8d998701 RDI=ffffffff8be29f80 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa1e8f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6e84f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005645bfe0e028 CR3=0000000020cba000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f64af987d20
XMM02=0000000500000007 0000555500000001 XMM03=0000555591550240 0000555591550190
XMM04=0000000000000000 000000000000000e XMM05=0000000000000000 000000000003bf12
XMM06=00005555915549b0 0000555500000007 XMM07=0000555500000000 0000555591554820
XMM08=00005555915547b0 0000555500000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001dfef0
R8 =ffff888021950237 R9 =1ffff1100432a046 R10=dffffc0000000000 R11=ffffffff85471fa0
R12=dffffc0000000000 R13=ffffffff99af58c6 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff8547201c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f0000adf6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f445bd48fc8 CR3=0000000020cc4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007effffd87498 00007effffd87470 XMM03=00007effffd874a8 00007effffd874a0
XMM04=00007f00008ed100 00007effffd87460 XMM05=00007effffd87478 00007effffd874c0
XMM06=00007effffd874b8 00007effffd874b0 XMM07=00007effffd874a8 00007effffd874a0
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007effffc12f89
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
