last executing test programs:

640.540256ms ago: executing program 1 (id=222):
r0 = socket$kcm(0x22, 0x2, 0x21)
sendmsg$sock(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000005c0)="e590a3a7798b051c", 0x8}], 0x1}, 0x40)

639.296548ms ago: executing program 0 (id=223):
socket$kcm(0x29, 0x5, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fff, 0xa}, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0x23, &(0x7f00000002c0)={r4, r1}, 0xc)

639.116733ms ago: executing program 1 (id=224):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001380)='U', 0x1}], 0x1}, 0x3)

499.323154ms ago: executing program 1 (id=229):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000069006bcd8e3fe3dc6e000000008c000000007280", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

497.774136ms ago: executing program 1 (id=230):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x321)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2d, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4840)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001180)={&(0x7f00000011c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0xa, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x7, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x2e]}}, 0x0, 0x36}, 0x28)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xfff}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x9, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="05000000000000007911b000000000008510000002000000850000000800000095000007000000009500a5050000000016c776df0b173b0d932a4d8add48dfd29e247fae04bd17145a8b"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000180), 0x2)
socket$kcm(0xa, 0x3, 0x73)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x2}, 0x90)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41)
recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94)
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0xfdac}], 0x1}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x18000000000002a0, 0x1f, 0x62, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x172, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000800)={0xffffffffffffffff, &(0x7f0000000780)="5a94dafd33ac1ba1fb9dbff71ef8eef96e3306a790250b6352b4053a5cb6b854188acff2de5870ca283d6ca4909d8d587244a74d2025ae62a07b693db31725cddc9e3e8d8cf0d01f27066ddbccba37f4c0dfa22959fa13954bc92037fe38721928b442f9a6619dc7fc6007f9acc5f193e5b5432471f725420244f6e996e4", &(0x7f00000008c0)=""/247}, 0x20)

437.664473ms ago: executing program 0 (id=232):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c)

270.905013ms ago: executing program 2 (id=236):
r0 = socket$kcm(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000036004b63d25a59ce0630fc2b139a7ad9", 0x14}], 0x1}, 0x20000040)

270.578602ms ago: executing program 2 (id=237):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c064001000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000)
close(0x3)

190.747226ms ago: executing program 0 (id=238):
r0 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x50, &(0x7f0000000200), 0x4)

190.43907ms ago: executing program 2 (id=239):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000c"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000040000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r2, 0x0, &(0x7f0000000380)=""/243}, 0x20)

156.491808ms ago: executing program 0 (id=240):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_config_ext={0x9, 0x2}, 0x3000, 0x4, 0x0, 0x2, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400800142603600e120800160000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

138.439152ms ago: executing program 1 (id=241):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x11c01, 0x4, 0x0, 0x8, 0x0, 0x200, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{}]})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8941, &(0x7f0000000080))

138.232516ms ago: executing program 2 (id=242):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818)
sendmsg$sock(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='k', 0x1}], 0x1, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x241)
recvmsg(r0, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x2000)

62.068179ms ago: executing program 1 (id=243):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000"], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1k\xfc\x9e\x98\xac;#\xdb\x0f!/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, 0x0}, 0x0)
syz_clone(0x84005080, 0x0, 0x0, 0x0, 0x0, 0x0)

61.887966ms ago: executing program 2 (id=244):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000200142603600e1208000f0000000401a8001600a400014005000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

61.649883ms ago: executing program 2 (id=245):
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0xa, 0x3, 0x3a)
socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60)
ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000180)=0x1)

317.205µs ago: executing program 0 (id=246):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f00000002c0)=0x6, 0x12)

0s ago: executing program 0 (id=247):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{0x0}], 0x1}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d000000000000000000000000000000000000000000000000fd000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96, 0x0, 0x3}, 0x28)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r2, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0xd, 0x0}}, 0x10)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:1031' (ED25519) to the list of known hosts.
syzkaller login: [   48.593531][ T5763] cgroup: Unknown subsys name 'net'
[   48.692337][ T5763] cgroup: Unknown subsys name 'cpuset'
[   48.696491][ T5763] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.545329][ T5763] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.830223][ T5219] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.834085][ T5219] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.837896][ T5219] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.842143][ T5219] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.845721][ T5219] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.924262][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.929799][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.933586][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.938078][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.943385][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.962992][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.966998][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.975824][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.981590][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.985386][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.249395][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   56.271691][ T5825] chnl_net:caif_netlink_parms(): no params data found
[   56.426240][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.430355][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.433806][ T5830] bridge_slave_0: entered allmulticast mode
[   56.437770][ T5830] bridge_slave_0: entered promiscuous mode
[   56.450887][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   56.459872][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.462489][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.464806][ T5830] bridge_slave_1: entered allmulticast mode
[   56.467885][ T5830] bridge_slave_1: entered promiscuous mode
[   56.480041][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.483163][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.486017][ T5825] bridge_slave_0: entered allmulticast mode
[   56.489283][ T5825] bridge_slave_0: entered promiscuous mode
[   56.498379][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.501179][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.503861][ T5825] bridge_slave_1: entered allmulticast mode
[   56.507208][ T5825] bridge_slave_1: entered promiscuous mode
[   56.523271][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.551398][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.603357][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.621761][ T5830] team0: Port device team_slave_0 added
[   56.625389][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.642320][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.644664][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.647304][ T5832] bridge_slave_0: entered allmulticast mode
[   56.651060][ T5832] bridge_slave_0: entered promiscuous mode
[   56.655205][ T5830] team0: Port device team_slave_1 added
[   56.657834][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.663610][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.666635][ T5832] bridge_slave_1: entered allmulticast mode
[   56.670295][ T5832] bridge_slave_1: entered promiscuous mode
[   56.709103][ T5825] team0: Port device team_slave_0 added
[   56.711628][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.714020][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.724666][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.731016][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.734056][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.743992][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.758871][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.764453][ T5825] team0: Port device team_slave_1 added
[   56.784093][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.839157][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.841458][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.850670][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.870994][ T5832] team0: Port device team_slave_0 added
[   56.874223][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.876779][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.888021][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.898761][ T5830] hsr_slave_0: entered promiscuous mode
[   56.902313][ T5830] hsr_slave_1: entered promiscuous mode
[   56.907808][ T5832] team0: Port device team_slave_1 added
[   56.979788][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.982364][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.993181][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.004958][ T5825] hsr_slave_0: entered promiscuous mode
[   57.008038][ T5825] hsr_slave_1: entered promiscuous mode
[   57.012987][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.016324][ T5825] Cannot create hsr debugfs directory
[   57.019428][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.022104][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.031031][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.139531][ T5832] hsr_slave_0: entered promiscuous mode
[   57.143036][ T5832] hsr_slave_1: entered promiscuous mode
[   57.145996][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.151412][ T5832] Cannot create hsr debugfs directory
[   57.369648][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.384192][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.405724][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.421560][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.476463][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.487288][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.498065][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.514894][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.537495][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.553799][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.567527][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.579187][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.666578][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.687070][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   57.699884][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.702592][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.716742][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.719751][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.730567][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.741599][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[   57.749971][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.752346][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.768878][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.771308][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.791626][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.831665][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   57.861633][ T1026] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.865062][ T1026] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.884167][ T1026] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.886722][ T1026] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.929498][   T54] Bluetooth: hci0: command tx timeout
[   57.975197][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.998433][   T54] Bluetooth: hci1: command tx timeout
[   58.000595][   T54] Bluetooth: hci2: command tx timeout
[   58.006402][ T5830] veth0_vlan: entered promiscuous mode
[   58.014556][ T5830] veth1_vlan: entered promiscuous mode
[   58.048135][ T5830] veth0_macvtap: entered promiscuous mode
[   58.054692][ T5830] veth1_macvtap: entered promiscuous mode
[   58.073054][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.082818][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.092239][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.095396][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.100296][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.103363][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.115375][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.185968][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.195851][ T5832] veth0_vlan: entered promiscuous mode
[   58.216579][ T5832] veth1_vlan: entered promiscuous mode
[   58.220388][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.223910][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.245759][ T1026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.253581][ T1026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.281018][ T5832] veth0_macvtap: entered promiscuous mode
[   58.283982][ T5825] veth0_vlan: entered promiscuous mode
[   58.303967][ T5832] veth1_macvtap: entered promiscuous mode
[   58.317434][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.326606][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.333745][ T5825] veth1_vlan: entered promiscuous mode
[   58.337841][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.354992][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.359889][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.363880][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.367694][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.431573][ T5825] veth0_macvtap: entered promiscuous mode
[   58.438682][ T5890] Illegal XDP return value 4294967274 on prog  (id 2) dev N/A, expect packet loss!
[   58.447503][ T5890] Zero length message leads to an empty skb
[   58.453089][ T5825] veth1_macvtap: entered promiscuous mode
[   58.507736][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.541811][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.565299][ T5825] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.571581][ T5825] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.575855][ T5825] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.580078][ T5825] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.596206][ T1026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.602452][ T1026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.654560][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.669766][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.736993][ T1026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.746480][ T1026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.754616][ T5898] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6'.
[   58.775719][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.781134][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.862104][ T5900] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.7'.
[   58.983457][ T5907] tap0: tun_chr_ioctl cmd 1074025677
[   58.986080][ T5907] tap0: linktype set to 6
[   59.179967][    C0] hrtimer: interrupt took 63039 ns
[   60.011639][ T5219] Bluetooth: hci0: command tx timeout
[   60.078972][ T5219] Bluetooth: hci2: command tx timeout
[   60.081587][ T5219] Bluetooth: hci1: command tx timeout
[   60.601377][ T5934] : port 1(vlan0) entered blocking state
[   60.609038][ T5934] : port 1(vlan0) entered disabled state
[   60.614308][ T5934] vlan0: entered allmulticast mode
[   60.620218][ T5934] veth0_vlan: entered allmulticast mode
[   60.642368][ T5934] vlan0: entered promiscuous mode
[   60.745942][ T5942] netlink: 'syz.0.23': attribute type 37 has an invalid length.
[   60.982967][ T5948] bridge0: entered promiscuous mode
[   60.986657][ T5948] bridge0: entered allmulticast mode
[   61.133369][ T5957] netlink: 'syz.1.31': attribute type 16 has an invalid length.
[   61.136026][ T5957] netlink: 132 bytes leftover after parsing attributes in process `syz.1.31'.
[   61.311779][ T5963] netlink: 830 bytes leftover after parsing attributes in process `syz.0.33'.
[   61.336579][ T5969] warning: `syz.2.37' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   61.346184][ T5971] netlink: 'syz.1.36': attribute type 4 has an invalid length.
[   61.350883][ T5971] netlink: 132 bytes leftover after parsing attributes in process `syz.1.36'.
[   61.393172][ T5973] netlink: 'syz.1.38': attribute type 10 has an invalid length.
[   61.434805][ T5973] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[   61.438787][ T5973] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   61.443414][ T5973] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[   61.459370][ T5975] netlink: 830 bytes leftover after parsing attributes in process `syz.0.39'.
[   61.856363][ T5999] team0: Port device team_slave_0 removed
[   61.874627][ T5999] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[   61.892045][ T6007] netlink: 14 bytes leftover after parsing attributes in process `syz.0.53'.
[   61.895160][ T6007] hsr0: entered promiscuous mode
[   61.896861][ T6007] hsr0: entered allmulticast mode
[   61.899032][ T6007] hsr_slave_0: entered allmulticast mode
[   61.901086][ T6007] hsr_slave_1: entered allmulticast mode
[   61.927233][ T5999] syz.1.48 (5999) used greatest stack depth: 19264 bytes left
[   62.089470][   T54] Bluetooth: hci0: command tx timeout
[   62.104029][ T6017] netlink: 'syz.0.59': attribute type 10 has an invalid length.
[   62.146577][ T6017] team0: Port device geneve1 added
[   62.168593][   T54] Bluetooth: hci1: command tx timeout
[   62.169401][ T5219] Bluetooth: hci2: command tx timeout
[   62.336087][ T6017] syz.0.59 (6017) used greatest stack depth: 18088 bytes left
[   62.789009][ T6040] netlink: 'syz.0.69': attribute type 3 has an invalid length.
[   63.750387][ T6071] netlink: 176 bytes leftover after parsing attributes in process `syz.2.82'.
[   64.160794][ T6089] netlink: 'syz.2.91': attribute type 39 has an invalid length.
[   64.171193][ T6095] netlink: 'syz.0.94': attribute type 2 has an invalid length.
[   64.173961][ T6095] netlink: 164 bytes leftover after parsing attributes in process `syz.0.94'.
[   64.243948][ T5219] Bluetooth: hci1: command tx timeout
[   64.291600][ T5219] Bluetooth: hci0: command tx timeout
[   64.294505][ T5219] Bluetooth: hci2: command tx timeout
[   64.298572][ T6089] veth0_macvtap: left promiscuous mode
[   64.385122][ T6099] netlink: 60 bytes leftover after parsing attributes in process `syz.0.95'.
[   64.411239][ T6103] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   64.621555][ T5219] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4
[   64.849506][ T6120] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   64.939816][ T6128] netlink: 'syz.0.108': attribute type 37 has an invalid length.
[   65.256783][ T6143] netlink: 10 bytes leftover after parsing attributes in process `syz.0.115'.
[   65.327139][ T6141] netlink: 'syz.2.111': attribute type 10 has an invalid length.
[   65.363546][ T6141] bridge0: port 3(macsec0) entered blocking state
[   65.374140][ T6141] bridge0: port 3(macsec0) entered disabled state
[   65.380866][ T6141] macsec0: entered allmulticast mode
[   65.383530][ T6141] veth1_macvtap: entered allmulticast mode
[   65.403332][ T6141] macsec0: entered promiscuous mode
[   65.425079][ T6141] bridge0: port 3(macsec0) entered blocking state
[   65.428454][ T6141] bridge0: port 3(macsec0) entered forwarding state
[   65.756627][ T6170] netlink: 'syz.0.127': attribute type 29 has an invalid length.
[   68.147594][ T6261] syzkaller0: entered promiscuous mode
[   68.152869][ T6261] syzkaller0: entered allmulticast mode
[   68.272515][ T6268] netlink: 'syz.0.170': attribute type 3 has an invalid length.
[   68.275702][ T6268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.170'.
[   68.427976][ T6276] netlink: 'syz.2.172': attribute type 29 has an invalid length.
[   68.431595][ T6276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.172'.
[   68.930685][ T6302] netlink: 'syz.0.183': attribute type 2 has an invalid length.
[   68.936132][ T6302] netlink: 51 bytes leftover after parsing attributes in process `syz.0.183'.
[   69.234197][ T6314] netlink: 'syz.0.190': attribute type 2 has an invalid length.
[   69.240467][ T6314] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.190'.
[   69.245304][ T6314] nbd: must specify at least one socket
[   69.984510][ T6377] syzkaller1: tun_chr_ioctl cmd 1074025673
[   70.725971][ T6461] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.208'.
[   71.051192][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.054559][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.089055][ T5219] Bluetooth: hci2: unexpected event 0x35 length: 15 > 6
[   71.111106][ T6503] delete_channel: no stack
[   71.321665][ T6523] syzkaller0: tun_chr_ioctl cmd 1074025677
[   71.323826][ T6523] syzkaller0: linktype set to 801
[   71.354314][ T6527] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.233'.
[   71.505876][ T6536] netlink: 'syz.2.237': attribute type 6 has an invalid length.
[   71.510471][ T6536] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.237'.
[   71.605370][ T6542] netlink: 'syz.0.240': attribute type 21 has an invalid length.
[   71.676012][ T6548] netlink: 'syz.2.244': attribute type 21 has an invalid length.
[   71.685159][ T6548] netlink: 'syz.2.244': attribute type 1 has an invalid length.
[   86.415500][  T789] cfg80211: failed to load regulatory.db
[   96.398425][ T5219] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[   96.648886][ T5219] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   96.667929][ T5219] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   96.672043][ T5219] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   96.684464][ T5219] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   96.688414][ T5219] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   98.503922][ T6563] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[   98.718384][   T54] Bluetooth: hci4: command tx timeout
[   98.975845][ T6569] chnl_net:caif_netlink_parms(): no params data found
[   99.279041][ T5219] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  100.808391][ T5219] Bluetooth: hci4: command tx timeout
[  101.383655][ T6568] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  102.878677][ T5219] Bluetooth: hci4: command tx timeout
[  104.958490][ T5219] Bluetooth: hci4: command tx timeout
[  133.979356][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  133.981562][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  135.839893][ T5219] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  137.931205][ T6585] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  140.008384][ T5219] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  142.079309][ T6587] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  145.203311][   T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  145.228562][   T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  145.232994][   T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  145.241331][   T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  145.246759][   T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  147.363954][   T54] Bluetooth: hci5: command tx timeout
[  149.438279][   T54] Bluetooth: hci5: command tx timeout
[  151.548805][   T54] Bluetooth: hci5: command tx timeout
[  153.608444][   T54] Bluetooth: hci5: command tx timeout
[  165.918284][   T54] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  166.238495][ T5219] Bluetooth: hci6: Opcode 0x0c03 failed: -110
[  167.998312][ T6594] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  168.172418][ T5219] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  168.348299][ T6600] Bluetooth: hci6: Opcode 0x0c03 failed: -110
[  176.828251][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  176.830500][    C1] rcu: 	1-....: (1 GPs behind) idle=e8ec/1/0x4000000000000000 softirq=16318/16319 fqs=4332
[  176.835011][    C1] rcu: 	         hardirqs   softirqs   csw/system
[  176.837212][    C1] rcu: 	 number:   952855          0            0
[  176.839421][    C1] rcu: 	cputime:    24422      28067          100   ==> 52490(ms)
[  176.842077][    C1] rcu: 	(t=10500 jiffies g=9673 q=3672 ncpus=2)
[  176.844126][    C1] CPU: 1 UID: 0 PID: 6557 Comm: syz.1.243 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  176.844135][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  176.844140][    C1] RIP: 0010:rcu_read_unlock_special+0x87/0x4c0
[  176.844154][    C1] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 92 37 f8 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
[  176.844160][    C1] RSP: 0018:ffffc900001e0960 EFLAGS: 00000206
[  176.844167][    C1] RAX: 691f7bd2041c0200 RBX: 1ffff9200003c134 RCX: 691f7bd2041c0200
[  176.844172][    C1] RDX: 0000000000000002 RSI: ffffffff8d99873a RDI: ffffffff8be29f80
[  176.844176][    C1] RBP: ffffc900001e0a60 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  176.844181][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffffffff8e144400
[  176.844185][    C1] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000002
[  176.844189][    C1] FS:  00007f40c2fd66c0(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
[  176.844195][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  176.844199][    C1] CR2: 0000200000003040 CR3: 000000010a362000 CR4: 00000000000006f0
[  176.844225][    C1] Call Trace:
[  176.844230][    C1]  <IRQ>
[  176.844235][    C1]  ? __netif_receive_skb_list_core+0x5f4/0x800
[  176.844248][    C1]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  176.844264][    C1]  __rcu_read_unlock+0x84/0xe0
[  176.844274][    C1]  ? netif_receive_skb_list_internal+0x4fd/0xcc0
[  176.844283][    C1]  netif_receive_skb_list_internal+0xa4f/0xcc0
[  176.844299][    C1]  ? netif_receive_skb_list_internal+0x4fd/0xcc0
[  176.844309][    C1]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[  176.844319][    C1]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  176.844334][    C1]  ? ieee80211_rx_napi+0xca/0x3d0
[  176.844342][    C1]  netif_receive_skb_list+0x54/0x450
[  176.844351][    C1]  ? ieee80211_rx_napi+0xca/0x3d0
[  176.844359][    C1]  ieee80211_rx_napi+0x354/0x3d0
[  176.844369][    C1]  ? __pfx_ieee80211_rx_napi+0x10/0x10
[  176.844380][    C1]  ? skb_dequeue+0x10e/0x150
[  176.844391][    C1]  ieee80211_handle_queued_frames+0xe8/0x1f0
[  176.844402][    C1]  tasklet_action_common+0x36c/0x580
[  176.844411][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  176.844422][    C1]  ? __pfx_tasklet_action_common+0x10/0x10
[  176.844433][    C1]  ? workqueue_softirq_action+0xd4/0x150
[  176.844444][    C1]  handle_softirqs+0x286/0x870
[  176.844453][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  176.844463][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  176.844472][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  176.844483][    C1]  __irq_exit_rcu+0xca/0x1f0
[  176.844491][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  176.844502][    C1]  irq_exit_rcu+0x9/0x30
[  176.844508][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  176.844518][    C1]  </IRQ>
[  176.844520][    C1]  <TASK>
[  176.844523][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  176.844531][    C1] RIP: 0010:preempt_schedule_irq+0xb0/0x150
[  176.844539][    C1] Code: 24 20 f6 44 24 21 02 74 0c 90 0f 0b 48 f7 03 08 00 00 00 74 64 bf 01 00 00 00 e8 5b 22 21 f6 e8 96 f5 57 f6 fb bf 01 00 00 00 <e8> 1b ab ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24
[  176.844544][    C1] RSP: 0018:ffffc90007d5ea80 EFLAGS: 00000282
[  176.844550][    C1] RAX: 691f7bd2041c0200 RBX: 0000000000000000 RCX: 691f7bd2041c0200
[  176.844554][    C1] RDX: 0000000000000006 RSI: ffffffff8d99873a RDI: 0000000000000001
[  176.844558][    C1] RBP: ffffc90007d5eb20 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  176.844562][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 0000000000000000
[  176.844566][    C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000fabd50
[  176.844578][    C1]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  176.844590][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  176.844599][    C1]  irqentry_exit+0x6f/0x90
[  176.844606][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  176.844613][    C1] RIP: 0010:stack_trace_consume_entry+0x0/0x280
[  176.844622][    C1] Code: 75 0e 48 8d 65 f0 5b 41 5e 5d e9 9b 6e c4 09 cc e8 e5 92 c1 09 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 18 48 ba 00 00
[  176.844627][    C1] RSP: 0018:ffffc90007d5ebe0 EFLAGS: 00000286
[  176.844631][    C1] RAX: ffffffff820c46ac RBX: ffffc90007d5eca0 RCX: 691f7bd2041c0200
[  176.844636][    C1] RDX: 0000000000000001 RSI: ffffffff820c46ac RDI: ffffc90007d5eca0
[  176.844640][    C1] RBP: ffffc90007d5ec70 R08: ffffc90007d5f3b0 R09: 0000000000000000
[  176.844644][    C1] R10: ffffc90007d5ec38 R11: ffffffff81acf520 R12: ffff8880235fb980
[  176.844648][    C1] R13: 1ffff92000fabda8 R14: ffffffff81acf520 R15: ffffc90007d5ebe8
[  176.844653][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  176.844662][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  176.844671][    C1]  ? copy_pmd_range+0x6bfc/0x7000
[  176.844679][    C1]  ? copy_pmd_range+0x6bfc/0x7000
[  176.844722][    C1]  arch_stack_walk+0x110/0x150
[  176.844741][    C1]  ? copy_pmd_range+0x6bfc/0x7000
[  176.844754][    C1]  stack_trace_save+0x9c/0xe0
[  176.844766][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  176.844779][    C1]  save_stack+0xf5/0x1f0
[  176.844788][    C1]  ? __pfx_save_stack+0x10/0x10
[  176.844793][    C1]  ? post_alloc_hook+0x240/0x2a0
[  176.844800][    C1]  ? get_page_from_freelist+0x21e4/0x22c0
[  176.844807][    C1]  ? __alloc_frozen_pages_noprof+0x181/0x370
[  176.844814][    C1]  ? alloc_pages_mpol+0x232/0x4a0
[  176.844821][    C1]  ? alloc_pages_noprof+0xa9/0x190
[  176.844826][    C1]  ? __pmd_alloc+0x3a/0x3b0
[  176.844836][    C1]  ? seqcount_lockdep_reader_access+0x102/0x180
[  176.844848][    C1]  __set_page_owner+0x8d/0x4a0
[  176.844856][    C1]  ? __pfx___set_page_owner+0x10/0x10
[  176.844867][    C1]  post_alloc_hook+0x240/0x2a0
[  176.844876][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  176.844903][    C1]  ? __pfx_get_page_from_freelist+0x10/0x10
[  176.844912][    C1]  ? prepare_alloc_pages+0x213/0x610
[  176.844924][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  176.844934][    C1]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  176.844944][    C1]  ? trace_call_bpf+0xb7/0x850
[  176.844952][    C1]  ? policy_nodemask+0x27c/0x720
[  176.844958][    C1]  ? trace_call_bpf+0x5ba/0x850
[  176.844966][    C1]  alloc_pages_mpol+0x232/0x4a0
[  176.844976][    C1]  alloc_pages_noprof+0xa9/0x190
[  176.844984][    C1]  __pmd_alloc+0x3a/0x3b0
[  176.844989][    C1]  ? __lock_acquire+0xab9/0xd20
[  176.844997][    C1]  copy_pmd_range+0x6bfc/0x7000
[  176.845010][    C1]  ? __lruvec_stat_mod_folio+0x79/0x2f0
[  176.845021][    C1]  ? __lock_acquire+0xab9/0xd20
[  176.845031][    C1]  ? do_raw_spin_lock+0x121/0x290
[  176.845040][    C1]  ? __pfx_copy_pmd_range+0x10/0x10
[  176.845050][    C1]  ? do_raw_spin_unlock+0x4d/0x240
[  176.845060][    C1]  ? _raw_spin_unlock+0x28/0x50
[  176.845067][    C1]  ? __pud_alloc+0x1db/0x260
[  176.845075][    C1]  copy_page_range+0xc46/0x1270
[  176.845094][    C1]  ? __pfx_copy_page_range+0x10/0x10
[  176.845109][    C1]  dup_mmap+0xf57/0x1ac0
[  176.845124][    C1]  ? __pfx_dup_mmap+0x10/0x10
[  176.845135][    C1]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  176.845143][    C1]  ? mm_init+0xce1/0xf10
[  176.845154][    C1]  copy_mm+0x13c/0x4b0
[  176.845163][    C1]  ? copy_process+0x978/0x3b80
[  176.845171][    C1]  copy_process+0x16d3/0x3b80
[  176.845182][    C1]  ? copy_process+0x978/0x3b80
[  176.845197][    C1]  ? __pfx_copy_process+0x10/0x10
[  176.845206][    C1]  ? kernel_clone+0x1f9/0x870
[  176.845217][    C1]  kernel_clone+0x21e/0x870
[  176.845226][    C1]  ? __pfx_trace_call_bpf+0x10/0x10
[  176.845234][    C1]  ? __pfx_kernel_clone+0x10/0x10
[  176.845250][    C1]  __x64_sys_clone+0x18b/0x1e0
[  176.845260][    C1]  ? __pfx___x64_sys_clone+0x10/0x10
[  176.845282][    C1]  do_syscall_64+0xfa/0x3b0
[  176.845293][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.845304][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  176.845312][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.845319][    C1] RIP: 0033:0x7f40c218e9a9
[  176.845326][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  176.845331][    C1] RSP: 002b:00007f40c2fd5fe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038
[  176.845338][    C1] RAX: ffffffffffffffda RBX: 00007f40c23b6080 RCX: 00007f40c218e9a9
[  176.845342][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000084005080
[  176.845346][    C1] RBP: 00007f40c2210d69 R08: 0000000000000000 R09: 0000000000000000
[  176.845350][    C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  176.845353][    C1] R13: 0000000000000000 R14: 00007f40c23b6080 R15: 00007fff1d3a6c98
[  176.845364][    C1]  </TASK>
[  177.133830][    C1] sched: DL replenish lagged too much
[  182.078433][   T54] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  182.558505][ T6571] Bluetooth: hci6: Opcode 0x0c03 failed: -110
[  183.180001][ T6571] Bluetooth: hci0: command 0x0406 tx timeout
[  183.183086][ T6571] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  183.187193][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  183.193977][ T5828] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  183.197019][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  183.200183][ T5828] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  183.202834][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  183.205391][ T5828] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  183.208920][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  183.211465][ T5828] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  183.214673][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  183.217151][ T5828] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2

VM DIAGNOSIS:
09:35:25  Registers:
info registers vcpu 0

CPU#0
RAX=0000000080000102 RBX=ffff88801c6c0440 RCX=0000000000000100 RDX=0000000000000100
RSI=ffffffff8be29f60 RDI=00000000ffffffff RBP=ffffc90000007c78 RSP=ffffc90000007b50
R8 =ffffc90000007c0f R9 =0000000000000000 R10=ffffc90000007c00 R11=fffff52000000f82
R12=dffffc0000000000 R13=1ffff110038d8088 R14=ffff88804b03ade0 R15=ffffffff8dbbec70
RIP=ffffffff819132ac RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055727bbed4f0 CR3=000000003740e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffff00ff00000000 XMM05=0000000000000062 0000000000003331
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffffff0000 XMM09=6c6c696b66720062 642e79726f74616c
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000006c RBX=000000000000006c RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001dfc90
R8 =ffff888106ef8237 R9 =1ffff11020ddf046 R10=dffffc0000000000 R11=ffffffff85471fa0
R12=dffffc0000000000 R13=ffffffff99af58b7 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff8547201c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f40c2fd66c0 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000003040 CR3=000000010a362000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffff00 ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f0022611ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
