last executing test programs:

3.033461977s ago: executing program 1 (id=78):
r0 = perf_event_open(&(0x7f0000000040)={0x5, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x7fffffffffffffff)

2.949177305s ago: executing program 1 (id=80):
r0 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r1 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000001540)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21, 0x3}}, 0x80, 0x0}, 0x2400c091)

2.862986183s ago: executing program 1 (id=81):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94)
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000140)="20c46cdcee", 0x5}], 0x1}, 0x4)
setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10)

2.033301111s ago: executing program 1 (id=93):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0xa9, 0x0, 0x0, 0x0, 0x0, 0x10665, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xffff, 0x7fffffff}, 0x201c, 0x9dd, 0x80000000, 0x6, 0x9, 0xf3a, 0x6, 0x0, 0x100, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000012002f8c35093f974b21b92e0a", 0x11}], 0x1}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1310000016"], 0xfe33)

1.939585271s ago: executing program 1 (id=95):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x306)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
close(0x3)

1.678266235s ago: executing program 0 (id=99):
r0 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000540)=[{&(0x7f00000002c0)="b5640aae1e407af01eecff9e22e152a958b96c15ffd051d17c6c702f21a8abb26b561e7af56b164829c35642692c102092e1f43782559cb76acaa20f83d5e807ad43b3e153c8df10b894d755e849d01e91b7b49af88a501bc937c19203d32e33610f090c9d9e0d5972ac64142f8f4b71f2d3ce9c43c9bec897b53fee3e5f94497031ff2e460d2c011dfd60030db5a289bde09ac8326a85bc8791473d2828d1e28b5f20e286b061c4dadef878", 0xac}, {&(0x7f00000003c0)="5c6817db84aafc4ba93b3b7b773c1f5c014e2a4405abce2e2192542afa9748dcd0a777a42e01d2f6290d970e2f9a1d422ca71d4207e563f192538f527923b0f362103e5bbeda2dca0d9d2b5e5238329691753f1860286f1aaa0786be123a788ba8d0e1205af7751df76effba5cb644966e7b7566d2960bab4c5ba6", 0x7b}, {&(0x7f0000000000)="9eb8a2c0e241fb0402ac8d04ecbc724648d79b443d283855fdba1e1dc6283591a8a07eb1436788b6b641ed5ea90be62fc7499c9b017d2e73973395411b7efb244a226ba0ae7657c57101711c5aa138abd03dec1e0899824e678aced03a92fec128f69d27d84ee2ff2e4ad7a3db73f4f12d0728bada715bf5abce312346bb7d7345e8df1fc10fa733c98030cb193341700961aa2ccb9f0f029190a1d34386c73e7017cf0fe0275d2d6f9531b12f12e29b903f30c3228aa9ab3a503e9512", 0xbd}, {&(0x7f00000007c0)="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", 0x37f}], 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080)
sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x0, 0xfffffffd}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000ec0)="96f7c6863a49301d05fc1c71ca2a0cbf0c5df1fccdacaed499eb27ef0f460cb910170037bd58d6a87c3f0e1d56a5b2e7c64953859974c531336cc5a8bac64b21006443021538f4a9fec30782d4d4a16e35b3f605d9d58796f0f78650fd856c32c77c41e1be38bbc1b73b87b1", 0x6c}, {&(0x7f0000000dc0)="25b2b3cbea4056eba431bdcd60ae51dd04133d5a5e9e1a59e3a14a35637d81f77021fbd6826c046e90aeb76770d3cd3fa2e73733280bd69e0ca50405230fe54839604afc165304a0e75f92b8ac663390d69148678d62d964d748abcf147b8f4c4d1b96808fbe6e888e7adbc6c1e12bd2bd4ea2d7eebe9530e1424ef47fefef6f91c68eb2bd05333f3df3eedd5047a4e590644dc9b6e7ff8f4aecb7949dcdbf31930b606002e6d683eeffc2b8ff5d9e2bf3b8fd53843086b97659e100"/201, 0xc9}], 0x2, 0x0, 0x0, 0x900}, 0x0)

1.542556333s ago: executing program 0 (id=100):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0xa, 0x3, 0x73)
socket$kcm(0x2, 0x1000000000000002, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0xb, 0x8000, 0x4}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x0, 0x7, 0x39b8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r0, &(0x7f0000000600), &(0x7f0000000080)=""/61}, 0x20)

1.213803702s ago: executing program 0 (id=101):
r0 = socket$kcm(0x2, 0x200000000000003, 0x106)
setsockopt$sock_attach_bpf(r0, 0x0, 0x16, 0x0, 0x0)

1.144273571s ago: executing program 0 (id=102):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x5a)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xc, 0x17, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fcff1f00000000002000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b757f2dd876a9670da53f8020000000000000085000000e95c0000bf09000000000000660906000000180100002020642500000000002020207b9af8ff00000000ac91000000ff0f0037010000f8ffffffb70273b07c4463c31f9a1facbca8ae000008000000b7"], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x90)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r6], 0x12)

854.237487ms ago: executing program 0 (id=103):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x200008c0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000540)="1400000024000b47564c", 0xa}], 0x1}, 0x4000)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e00000000000000030000000700000003000000fdffffff00000000000000002e"], &(0x7f0000000040)=""/249, 0x46, 0xf9, 0x6}, 0x28)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8924, &(0x7f0000000080))

678.430252ms ago: executing program 2 (id=104):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

564.558069ms ago: executing program 2 (id=105):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r3, 0x88, 0x68, &(0x7f00000009c0)=r2, 0x4)

474.595045ms ago: executing program 2 (id=106):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="260a00000000000061116100000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)

354.256989ms ago: executing program 2 (id=107):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x4e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)

254.315766ms ago: executing program 2 (id=108):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="b405000000000000711098000000000066000000000000009500000000000000bfd76ee96dd56ffd7713f23eab174876adbf83bb0c7c69b08047628a02bd43450c2c062a197aa28d2b15ba1ce55dcce2a591d27112605fb1cb1c4b991b8b4c99d4072b4314332d01b3440ca92fbbc2f05fc3e8a56e0b5e2726c66c81bdb056fb15ac175fb687525fc4c3837ffe49fa530cb9fa26bf2e0669a80913847be4735031c3fd6ebf87afa2704ca69854b9f0c99cea19baa7355d5fa8ef4429391c02"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)

194.131388ms ago: executing program 2 (id=109):
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x2, 0x5, 0x84)
socket$kcm(0x10, 0x400000002, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0xa, 0x1, 0x106)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, 0x0}, 0x20)
bpf$OBJ_GET_PROG(0x9, 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
r0 = socket$kcm(0xa, 0x3, 0x73)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}, 0x0)
recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001880), 0x1}, 0x2102)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r1, 0x1, 0x42, &(0x7f0000000000), 0xff7b)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef)

134.300271ms ago: executing program 1 (id=110):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000800)={'pim6reg1\x00', @link_local={0x1, 0x35}})

0s ago: executing program 0 (id=111):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0xd, 0x7, 0x7, 0x6, 0x0, 0x2, 0x80, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0xe323, 0x7}, 0x10c0a1, 0xfffffffffffffc00, 0x8, 0x2, 0x0, 0xf, 0xc426, 0x0, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0x7, r0, 0x1)
socket$kcm(0xa, 0x2, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x40fd)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001f00)={0x2, 0x80, 0xec, 0x10, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x7, 0x4, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000780)='ns/pid_for_children\x00')

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:11219' (ED25519) to the list of known hosts.
syzkaller login: [   48.723798][ T5757] cgroup: Unknown subsys name 'net'
[   48.848086][ T5757] cgroup: Unknown subsys name 'cpuset'
[   48.853255][ T5757] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.581436][ T5757] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.445183][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.452049][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.455407][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.459531][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.466442][ T5222] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.469375][ T5222] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.473464][ T5222] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.478371][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.493075][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.497356][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.553826][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.562763][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.572553][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.577906][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.582683][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.801569][ T5825] chnl_net:caif_netlink_parms(): no params data found
[   55.892776][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   56.017887][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.023174][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.026494][ T5825] bridge_slave_0: entered allmulticast mode
[   56.031077][ T5825] bridge_slave_0: entered promiscuous mode
[   56.045154][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.048848][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.052721][ T5825] bridge_slave_1: entered allmulticast mode
[   56.056928][ T5825] bridge_slave_1: entered promiscuous mode
[   56.083271][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   56.120053][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.165622][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.182934][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.186458][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.190075][ T5829] bridge_slave_0: entered allmulticast mode
[   56.195628][ T5829] bridge_slave_0: entered promiscuous mode
[   56.200252][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.203844][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.207373][ T5829] bridge_slave_1: entered allmulticast mode
[   56.211477][ T5829] bridge_slave_1: entered promiscuous mode
[   56.264594][ T5825] team0: Port device team_slave_0 added
[   56.287150][ T5825] team0: Port device team_slave_1 added
[   56.300196][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.337677][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.378400][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.381218][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.384901][ T5834] bridge_slave_0: entered allmulticast mode
[   56.387810][ T5834] bridge_slave_0: entered promiscuous mode
[   56.393742][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.397089][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.408636][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.426213][ T5829] team0: Port device team_slave_0 added
[   56.436530][ T5829] team0: Port device team_slave_1 added
[   56.438845][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.441279][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.444384][ T5834] bridge_slave_1: entered allmulticast mode
[   56.447329][ T5834] bridge_slave_1: entered promiscuous mode
[   56.450500][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.454016][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.466427][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.514391][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.518459][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.521548][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.535783][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.543140][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.547436][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.550314][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.562116][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.622526][ T5834] team0: Port device team_slave_0 added
[   56.644012][ T5825] hsr_slave_0: entered promiscuous mode
[   56.647172][ T5825] hsr_slave_1: entered promiscuous mode
[   56.654380][ T5834] team0: Port device team_slave_1 added
[   56.677103][ T5829] hsr_slave_0: entered promiscuous mode
[   56.679774][ T5829] hsr_slave_1: entered promiscuous mode
[   56.682227][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.685126][ T5829] Cannot create hsr debugfs directory
[   56.747119][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.749855][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.760666][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.779847][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.782965][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.795504][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.909003][ T5834] hsr_slave_0: entered promiscuous mode
[   56.912712][ T5834] hsr_slave_1: entered promiscuous mode
[   56.915873][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.919369][ T5834] Cannot create hsr debugfs directory
[   57.094735][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.117577][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.148827][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.184843][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.230152][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.237229][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.256090][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.269498][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.297436][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.307110][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.317082][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.338846][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.437759][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.467629][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   57.486431][ T2423] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.490265][ T2423] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.500282][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.507324][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.520074][ T2423] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.523997][ T2423] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.552933][ T5828] Bluetooth: hci1: command tx timeout
[   57.554201][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   57.555636][ T5828] Bluetooth: hci0: command tx timeout
[   57.570584][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[   57.576514][ T2423] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.579791][ T2423] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.594925][ T2423] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.598155][ T2423] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.607897][ T2423] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.611243][ T2423] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.632345][ T5828] Bluetooth: hci2: command tx timeout
[   57.639197][ T2423] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.642588][ T2423] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.751278][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.837995][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.883998][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.895612][ T5829] veth0_vlan: entered promiscuous mode
[   57.908787][ T5829] veth1_vlan: entered promiscuous mode
[   57.950051][ T5834] veth0_vlan: entered promiscuous mode
[   57.957844][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.970763][ T5829] veth0_macvtap: entered promiscuous mode
[   57.979029][ T5829] veth1_macvtap: entered promiscuous mode
[   57.982085][ T5834] veth1_vlan: entered promiscuous mode
[   58.005795][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.017274][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.038191][ T5834] veth0_macvtap: entered promiscuous mode
[   58.041337][ T5829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.046612][ T5829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.049940][ T5829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.053090][ T5829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.062712][ T5834] veth1_macvtap: entered promiscuous mode
[   58.099047][ T5825] veth0_vlan: entered promiscuous mode
[   58.124445][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.127357][ T5825] veth1_vlan: entered promiscuous mode
[   58.147479][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.169459][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.173208][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.176534][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.179522][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.199769][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.212603][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.245757][ T5825] veth0_macvtap: entered promiscuous mode
[   58.264033][ T5825] veth1_macvtap: entered promiscuous mode
[   58.282870][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.288455][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.324606][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.329522][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.335344][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.340929][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.377529][ T5825] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.381322][ T5825] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.390319][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.398372][ T5825] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.405833][ T5825] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.426695][ T3576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.438008][ T3576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.608323][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.619323][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.711001][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.715020][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.850416][ T5906] netlink: 'syz.2.7': attribute type 27 has an invalid length.
[   58.856427][ T5906] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7'.
[   58.860138][ T5906] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   59.131801][    C1] hrtimer: interrupt took 42436 ns
[   59.271047][ T5920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13'.
[   59.449532][ T5927] netlink: 'syz.2.15': attribute type 13 has an invalid length.
[   59.454129][ T5927] netlink: 'syz.2.15': attribute type 58 has an invalid length.
[   59.457864][ T5927] netlink: 152 bytes leftover after parsing attributes in process `syz.2.15'.
[   59.536473][ T5931] netlink: 763 bytes leftover after parsing attributes in process `syz.2.18'.
[   59.633326][   T54] Bluetooth: hci1: command tx timeout
[   59.636314][ T5828] Bluetooth: hci0: command tx timeout
[   59.712473][ T5828] Bluetooth: hci2: command tx timeout
[   60.327275][ T5942] netlink: 'syz.1.22': attribute type 29 has an invalid length.
[   60.334159][ T5942] netlink: 'syz.1.22': attribute type 29 has an invalid length.
[   60.388934][ T5946] netlink: 'syz.2.24': attribute type 11 has an invalid length.
[   60.392071][ T5946] netlink: 149476 bytes leftover after parsing attributes in process `syz.2.24'.
[   60.456361][ T5945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   60.556296][ T5956] netlink: 'syz.0.29': attribute type 10 has an invalid length.
[   60.578684][ T5956] netlink: 40 bytes leftover after parsing attributes in process `syz.0.29'.
[   61.083601][ T5988] netlink: 'syz.2.44': attribute type 1 has an invalid length.
[   61.087944][ T5988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.44'.
[   61.713815][   T54] Bluetooth: hci1: command tx timeout
[   61.717051][ T5828] Bluetooth: hci0: command tx timeout
[   61.803881][ T5828] Bluetooth: hci2: command tx timeout
[   61.897895][ T6000] netlink: 'syz.0.50': attribute type 13 has an invalid length.
[   61.912294][ T6000] netlink: 14581 bytes leftover after parsing attributes in process `syz.0.50'.
[   61.971213][ T6005] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   62.207079][ T6014] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.55'.
[   62.358502][ T6022] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   62.361734][ T6022] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   62.688812][ T5828] Bluetooth: hci0: unknown advertising packet type: 0x20
[   62.780853][ T6029] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.63'.
[   62.818753][ T6037] delete_channel: no stack
[   62.821494][ T6037] delete_channel: no stack
[   63.478891][ T6073] netlink: 'syz.0.84': attribute type 21 has an invalid length.
[   63.634473][ T6081] netlink: 'syz.0.88': attribute type 21 has an invalid length.
[   63.792682][   T54] Bluetooth: hci1: command tx timeout
[   63.795215][ T5828] Bluetooth: hci0: command tx timeout
[   63.884079][ T5828] Bluetooth: hci2: command tx timeout
[   64.212276][ T6093] __nla_validate_parse: 1 callbacks suppressed
[   64.212293][ T6093] netlink: 2451 bytes leftover after parsing attributes in process `syz.1.93'.
[   64.372998][ T6097] syzkaller0: entered promiscuous mode
[   64.375414][ T6097] syzkaller0: entered allmulticast mode
[   64.470484][ T5828] Bluetooth: hci0: Unable to find connection for big 0x00
[   65.068561][ T5828] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4
[   65.647959][ T6120] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.156219][ T6131] : renamed from pim6reg1
[   70.928418][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   70.931552][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   81.178452][  T789] cfg80211: failed to load regulatory.db
[   82.208651][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   82.214095][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   82.218049][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   82.227196][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   82.231891][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   82.309818][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   82.316283][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   82.319595][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   82.333580][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   82.337629][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   82.380011][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   82.384628][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   82.388484][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   82.395935][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   82.399961][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   84.272863][ T5828] Bluetooth: hci3: command tx timeout
[   84.432272][   T54] Bluetooth: hci4: command tx timeout
[   84.437063][ T5828] Bluetooth: hci5: command tx timeout
[   86.351986][ T5828] Bluetooth: hci3: command tx timeout
[   86.512018][   T54] Bluetooth: hci4: command tx timeout
[   86.513984][ T5828] Bluetooth: hci5: command tx timeout
[   88.432077][ T5828] Bluetooth: hci3: command tx timeout
[   88.602160][ T5828] Bluetooth: hci5: command tx timeout
[   88.604622][ T5828] Bluetooth: hci4: command tx timeout
[   90.522121][ T5828] Bluetooth: hci3: command tx timeout
[   90.682333][   T54] Bluetooth: hci5: command tx timeout
[   90.684638][ T5828] Bluetooth: hci4: command tx timeout
[  171.031765][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  171.034240][    C1] rcu: 	1-...!: (10478 ticks this GP) idle=592c/1/0x4000000000000000 softirq=14881/14881 fqs=1593
[  171.039672][    C1] rcu: 	(t=10500 jiffies g=8277 q=1961 ncpus=2)
[  171.041765][    C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 7004 jiffies! g8277 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
[  171.045798][    C1] rcu: 	Possible timer handling issue on cpu=0 timer-softirq=4664
[  171.048986][    C1] rcu: rcu_preempt kthread starved for 7005 jiffies! g8277 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0
[  171.053932][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  171.057502][    C1] rcu: RCU grace-period kthread stack dump:
[  171.059764][    C1] task:rcu_preempt     state:I stack:26792 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
[  171.063905][    C1] Call Trace:
[  171.065059][    C1]  <TASK>
[  171.066358][    C1]  __schedule+0x16f5/0x4d00
[  171.068187][    C1]  ? perf_trace_lock+0xec/0x3b0
[  171.069992][    C1]  ? schedule+0x165/0x360
[  171.072061][    C1]  ? __pfx___schedule+0x10/0x10
[  171.074648][    C1]  ? schedule+0x91/0x360
[  171.076625][    C1]  ? schedule+0x91/0x360
[  171.078727][    C1]  schedule+0x165/0x360
[  171.080239][    C1]  schedule_timeout+0x12b/0x270
[  171.081909][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  171.083698][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  171.085878][    C1]  ? __pfx_process_timeout+0x10/0x10
[  171.088190][    C1]  ? prepare_to_swait_event+0x341/0x380
[  171.090574][    C1]  rcu_gp_fqs_loop+0x301/0x1540
[  171.092194][    C1]  ? __pfx_rcu_watching_snap_recheck+0x10/0x10
[  171.094534][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  171.097369][    C1]  ? _raw_spin_unlock_irq+0x2e/0x50
[  171.099407][    C1]  ? finish_swait+0xcd/0x1f0
[  171.101308][    C1]  rcu_gp_kthread+0x99/0x390
[  171.103124][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  171.104904][    C1]  ? __kthread_parkme+0x7b/0x200
[  171.106709][    C1]  ? __kthread_parkme+0x1a1/0x200
[  171.108452][    C1]  kthread+0x711/0x8a0
[  171.109927][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  171.112035][    C1]  ? __pfx_kthread+0x10/0x10
[  171.114163][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  171.116171][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  171.118346][    C1]  ? __pfx_kthread+0x10/0x10
[  171.120091][    C1]  ret_from_fork+0x3fc/0x770
[  171.122051][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  171.124317][    C1]  ? __switch_to_asm+0x39/0x70
[  171.126188][    C1]  ? __switch_to_asm+0x33/0x70
[  171.127946][    C1]  ? __pfx_kthread+0x10/0x10
[  171.129926][    C1]  ret_from_fork_asm+0x1a/0x30
[  171.131842][    C1]  </TASK>
[  171.132969][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  171.135187][    C1] Sending NMI from CPU 1 to CPUs 0:
[  171.136996][    C0] NMI backtrace for cpu 0
[  171.137011][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  171.137023][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  171.137030][    C0] RIP: 0010:native_queued_spin_lock_slowpath+0xaf/0x8e0
[  171.137051][    C0] Code: 00 00 00 c7 44 24 60 00 00 00 00 0f 1f 44 00 00 4c 8d 74 24 60 49 89 df 49 c1 ef 03 41 bd 01 00 00 00 eb 06 89 44 24 60 f3 90 <48> 89 df be 04 00 00 00 e8 94 28 b2 f6 48 b8 00 00 00 00 00 fc ff
[  171.137061][    C0] RSP: 0018:ffffc90000007980 EFLAGS: 00000202
[  171.137072][    C0] RAX: 0000000000000001 RBX: ffff888112e39bc0 RCX: ffffffff8b71260c
[  171.137080][    C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888112e39bc0
[  171.137087][    C0] RBP: ffffc90000007a78 R08: ffff888112e39bc3 R09: 1ffff110225c7378
[  171.137095][    C0] R10: dffffc0000000000 R11: ffffed10225c7379 R12: 1ffff92000000f38
[  171.137102][    C0] R13: 0000000000000001 R14: ffffc900000079e0 R15: 1ffff110225c7378
[  171.137110][    C0] FS:  0000000000000000(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
[  171.137118][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  171.137126][    C0] CR2: 00000000008f0000 CR3: 000000000df38000 CR4: 00000000000006f0
[  171.137162][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  171.137170][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  171.137177][    C0] Call Trace:
[  171.137184][    C0]  <IRQ>
[  171.137189][    C0]  ? trace_call_bpf+0xb7/0x850
[  171.137203][    C0]  ? trace_call_bpf+0x5ba/0x850
[  171.137214][    C0]  ? wg_packet_send_staged_packets+0x270/0x17d0
[  171.137231][    C0]  ? __pfx_native_queued_spin_lock_slowpath+0x10/0x10
[  171.137254][    C0]  queued_spin_lock_slowpath+0x43/0x50
[  171.137271][    C0]  do_raw_spin_lock+0x21f/0x290
[  171.137323][    C0]  ? tcp_write_timer+0x62/0x2e0
[  171.137341][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  171.137356][    C0]  ? call_timer_fn+0xbe/0x5f0
[  171.137372][    C0]  tcp_write_timer+0x62/0x2e0
[  171.137389][    C0]  call_timer_fn+0x17e/0x5f0
[  171.137400][    C0]  ? __pfx_tcp_write_timer+0x10/0x10
[  171.137413][    C0]  ? call_timer_fn+0xbe/0x5f0
[  171.137423][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  171.137438][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  171.137450][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  171.137464][    C0]  ? __pfx_tcp_write_timer+0x10/0x10
[  171.137479][    C0]  __run_timer_base+0x61a/0x860
[  171.137494][    C0]  ? ktime_get+0x3e/0x1f0
[  171.137514][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  171.137529][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  171.137551][    C0]  run_timer_softirq+0xb7/0x180
[  171.137567][    C0]  handle_softirqs+0x286/0x870
[  171.137582][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  171.137597][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  171.137612][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  171.137629][    C0]  __irq_exit_rcu+0xca/0x1f0
[  171.137641][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  171.137659][    C0]  irq_exit_rcu+0x9/0x30
[  171.137669][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  171.137683][    C0]  </IRQ>
[  171.137686][    C0]  <TASK>
[  171.137691][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  171.137703][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  171.137716][    C0] Code: d3 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d d3 ad 19 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  171.137724][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000282
[  171.137733][    C0] RAX: 9f491e100354c900 RBX: ffffffff81976a48 RCX: 9f491e100354c900
[  171.137741][    C0] RDX: 0000000000000001 RSI: ffffffff8d99883e RDI: ffffffff8be29f40
[  171.137748][    C0] RBP: ffffffff8de07ea8 R08: ffff88804b032f9b R09: 1ffff110096065f3
[  171.137756][    C0] R10: dffffc0000000000 R11: ffffed10096065f4 R12: ffffffff8fa1e8f0
[  171.137763][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50
[  171.137773][    C0]  ? do_idle+0x1e8/0x510
[  171.137790][    C0]  default_idle+0x13/0x20
[  171.137806][    C0]  default_idle_call+0x74/0xb0
[  171.137821][    C0]  do_idle+0x1e8/0x510
[  171.137837][    C0]  ? __pfx_do_idle+0x10/0x10
[  171.137851][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  171.137865][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  171.137877][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  171.137893][    C0]  cpu_startup_entry+0x44/0x60
[  171.137906][    C0]  rest_init+0x2de/0x300
[  171.137916][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[  171.137929][    C0]  start_kernel+0x47d/0x500
[  171.137947][    C0]  x86_64_start_reservations+0x24/0x30
[  171.137964][    C0]  x86_64_start_kernel+0x143/0x1c0
[  171.137980][    C0]  common_startup_64+0x13e/0x147
[  171.138003][    C0]  </TASK>
[  171.139004][    C1] CPU: 1 UID: 0 PID: 6128 Comm: syz.2.109 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  171.139018][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  171.139022][    C1] RIP: 0010:rcu_read_unlock_special+0x87/0x4c0
[  171.139035][    C1] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 62 2c f8 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
[  171.139040][    C1] RSP: 0000:ffffc900001e0340 EFLAGS: 00000206
[  171.139048][    C1] RAX: 4814f11c491fb600 RBX: 1ffff9200003c070 RCX: 4814f11c491fb600
[  171.139053][    C1] RDX: 0000000000000002 RSI: ffffffff8d99883e RDI: ffffffff8be29f40
[  171.139057][    C1] RBP: ffffc900001e0438 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  171.139062][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffffffff8e144400
[  171.139066][    C1] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000002
[  171.139070][    C1] FS:  00007f2ac09f66c0(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
[  171.139075][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  171.139080][    C1] CR2: 00000000008f0000 CR3: 0000000115512000 CR4: 00000000000006f0
[  171.139104][    C1] Call Trace:
[  171.139110][    C1]  <IRQ>
[  171.139114][    C1]  ? __pfx_perf_trace_lock+0x10/0x10
[  171.139125][    C1]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  171.139136][    C1]  ? unwind_next_frame+0xa5/0x2390
[  171.139149][    C1]  __rcu_read_unlock+0x84/0xe0
[  171.139159][    C1]  ? unwind_next_frame+0xa5/0x2390
[  171.139165][    C1]  unwind_next_frame+0x19ae/0x2390
[  171.139176][    C1]  ? unwind_next_frame+0xa5/0x2390
[  171.139183][    C1]  ? __x86_indirect_its_thunk_r15+0x80/0x80
[  171.139194][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  171.139203][    C1]  arch_stack_walk+0x11c/0x150
[  171.139215][    C1]  ? irqentry_exit_to_user_mode+0x51/0x120
[  171.139226][    C1]  stack_trace_save+0x9c/0xe0
[  171.139236][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  171.139245][    C1]  ? kvm_sched_clock_read+0x11/0x20
[  171.139252][    C1]  ? sched_clock+0x3f/0x60
[  171.139261][    C1]  ? sched_clock_cpu+0x74/0x430
[  171.139270][    C1]  kasan_save_track+0x3e/0x80
[  171.139277][    C1]  ? kasan_save_track+0x3e/0x80
[  171.139319][    C1]  ? __kasan_slab_alloc+0x6c/0x80
[  171.139328][    C1]  ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  171.139338][    C1]  ? kmalloc_reserve+0xbd/0x290
[  171.139346][    C1]  ? __alloc_skb+0x142/0x2d0
[  171.139352][    C1]  ? tcp_stream_alloc_skb+0x3d/0x340
[  171.139360][    C1]  ? tcp_write_xmit+0xeec/0x67f0
[  171.139366][    C1]  ? tcp_tsq_handler+0x11e/0x200
[  171.139372][    C1]  ? tcp_tasklet_func+0x3cd/0x460
[  171.139378][    C1]  ? tasklet_action_common+0x36c/0x580
[  171.139385][    C1]  ? handle_softirqs+0x286/0x870
[  171.139392][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  171.139398][    C1]  ? irq_exit_rcu+0x9/0x30
[  171.139404][    C1]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  171.139411][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  171.139418][    C1]  ? preempt_schedule_irq+0xb0/0x150
[  171.139425][    C1]  ? irqentry_exit+0x6f/0x90
[  171.139432][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  171.139438][    C1]  ? __x86_indirect_its_thunk_r15+0x80/0x80
[  171.139465][    C1]  __kasan_slab_alloc+0x6c/0x80
[  171.139473][    C1]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  171.139481][    C1]  ? kmalloc_reserve+0xbd/0x290
[  171.139490][    C1]  kmalloc_reserve+0xbd/0x290
[  171.139499][    C1]  __alloc_skb+0x142/0x2d0
[  171.139508][    C1]  tcp_stream_alloc_skb+0x3d/0x340
[  171.139520][    C1]  tcp_write_xmit+0xeec/0x67f0
[  171.139552][    C1]  tcp_tsq_handler+0x11e/0x200
[  171.139562][    C1]  tcp_tasklet_func+0x3cd/0x460
[  171.139571][    C1]  ? __pfx_tcp_tasklet_func+0x10/0x10
[  171.139578][    C1]  ? __pfx_wake_up_bit+0x10/0x10
[  171.139591][    C1]  ? rcu_is_watching+0x15/0xb0
[  171.139601][    C1]  tasklet_action_common+0x36c/0x580
[  171.139613][    C1]  ? __pfx_tasklet_action_common+0x10/0x10
[  171.139625][    C1]  ? workqueue_softirq_action+0xd4/0x150
[  171.139636][    C1]  handle_softirqs+0x286/0x870
[  171.139645][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  171.139655][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  171.139666][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  171.139676][    C1]  __irq_exit_rcu+0xca/0x1f0
[  171.139684][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  171.139695][    C1]  irq_exit_rcu+0x9/0x30
[  171.139702][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  171.139710][    C1]  </IRQ>
[  171.139712][    C1]  <TASK>
[  171.139715][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  171.139722][    C1] RIP: 0010:preempt_schedule_irq+0xb0/0x150
[  171.139730][    C1] Code: 24 20 f6 44 24 21 02 74 0c 90 0f 0b 48 f7 03 08 00 00 00 74 64 bf 01 00 00 00 e8 8b 2d 21 f6 e8 c6 00 58 f6 fb bf 01 00 00 00 <e8> 1b ab ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24
[  171.139735][    C1] RSP: 0000:ffffc90006727dc0 EFLAGS: 00000282
[  171.139742][    C1] RAX: 4814f11c491fb600 RBX: 0000000000000000 RCX: 4814f11c491fb600
[  171.139746][    C1] RDX: 0000000000000000 RSI: ffffffff8d99883e RDI: 0000000000000001
[  171.139750][    C1] RBP: ffffc90006727e70 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  171.139754][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 0000000000000000
[  171.139758][    C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000ce4fb8
[  171.139773][    C1]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  171.139786][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  171.139795][    C1]  irqentry_exit+0x6f/0x90
[  171.139803][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  171.139809][    C1] RIP: 0010:its_return_thunk+0x0/0x10
[  171.139821][    C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc <c3> cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e9 cb ea c1 f5 cc
[  171.139826][    C1] RSP: 0000:ffffc90006727f30 EFLAGS: 00000286
[  171.139831][    C1] RAX: 4814f11c491fb600 RBX: ffffc90006727f58 RCX: 4814f11c491fb600
[  171.139835][    C1] RDX: 0000000000000000 RSI: ffffffff8d99883e RDI: ffffffff8be29f40
[  171.139839][    C1] RBP: 0000000000000000 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  171.139843][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 0000000000000000
[  171.139847][    C1] R13: 0000000000000000 R14: ffff88801afc3980 R15: 000000000000000a
[  171.139860][    C1]  irqentry_exit_to_user_mode+0x51/0x120
[  171.139870][    C1]  asm_common_interrupt+0x26/0x40
[  171.139876][    C1] RIP: 0033:0x7f2abfb8e9a9
[  171.139883][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  171.139888][    C1] RSP: 002b:00007f2ac09f6038 EFLAGS: 00000246
[  171.139893][    C1] RAX: ffffffffffffffea RBX: 00007f2abfdb5fa0 RCX: 00007f2abfb8e9a9
[  171.139897][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009
[  171.139900][    C1] RBP: 00007f2abfc10d69 R08: 0000000000000000 R09: 0000000000000000
[  171.139904][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  171.139908][    C1] R13: 0000000000000000 R14: 00007f2abfdb5fa0 R15: 00007ffdc58a4458
[  171.139920][    C1]  </TASK>
[  171.565168][    C1] sched: DL replenish lagged too much

VM DIAGNOSIS:
05:25:34  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000001 RBX=ffff888112e39bc0 RCX=ffffffff8b71260c RDX=0000000000000000
RSI=0000000000000004 RDI=ffff888112e39bc0 RBP=ffffc90000007a78 RSP=ffffc90000007948
R8 =ffff888112e39bc4 R9 =ffff800000000000 R10=dffffc0000000000 R11=ffffed10225c7379
R12=1ffff92000000f38 R13=0000000000000001 R14=ffffc900000079e0 R15=1ffff110225c7378
RIP=ffffffff822333f7 RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00000000008f0000 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f6c4af86d00
XMM02=00030fff00000025 ff0404a400000000 XMM03=0420030fffffffff ffff041003010800
XMM04=0000000000000000 0000000000000011 XMM05=000055556659fe45 000055556659fcf0
XMM06=00005555665aaeb4 00005555665aaeb0 XMM07=0000000000000000 000000000001df8a
XMM08=4010000004041000 060102d200000026 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000029 RBX=0000000000000029 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001df670
R8 =ffff8880213d0237 R9 =1ffff1100427a046 R10=dffffc0000000000 R11=ffffffff85472aa0
R12=dffffc0000000000 R13=ffffffff99af58ba R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff85472b1c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f2ac09f66c0 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00000000008f0000 CR3=0000000115512000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f2abfd86478 00007f2abfd86450 XMM03=00007f2abfd86488 00007f2abfd86480
XMM04=00007f2ac08ed100 00007f2abfd86440 XMM05=00007f2abfd86458 00007f2abfd864a0
XMM06=00007f2abfd86498 00007f2abfd86490 XMM07=00007f2abfd86488 00007f2abfd86480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f2abfc11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
