last executing test programs:

6.869000552s ago: executing program 0 (id=1):
setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x0)

6.856592115s ago: executing program 0 (id=4):
write(0xffffffffffffffff, &(0x7f0000000000), 0x0)

6.840989193s ago: executing program 0 (id=5):
unlink(&(0x7f0000000000))

6.764354844s ago: executing program 1 (id=2):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp', 0x800, 0x0)

6.745173047s ago: executing program 2 (id=3):
close(0xffffffffffffffff)

6.596750067s ago: executing program 0 (id=6):
mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

661.927199ms ago: executing program 1 (id=8):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="1400000035000b45d30000000000000003d25a80", 0x14}], 0x1}, 0x0)

488.135134ms ago: executing program 1 (id=10):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x49)
sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x4}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000580)="27050200160014000600002fb96dbcf706e105000700810000008100", 0x1c}, {&(0x7f0000000700)="cb4e64b0af329873eef12979b76d83000c42c4f9d8bb7db4f5c055a5745a7404536ff6b3130830b22f631d5d507326426cd9f5ad425869cdbf1e03a9657ebcd7b08112e669feba6299d02c2cf0f15e067425e8e26ada52181d0fb880f1fa940bc38a79d88aceaac12fcac277141309af0d5bd4e6f8170ba3320ee4a60c3bee0558c9fa97a197bad492cb15364accac83e2db60c4", 0x94}, {&(0x7f0000002980)="bb08178d799f513adcd2d9c592a7acb273f858a8e1f818657df32f69a33f29dc4ce76f5f3629554add7b745bba14b6e4be985238ef4956eb0c0871a5904558178af96d", 0x43}, {&(0x7f0000001280)="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", 0x14b}, {&(0x7f00000008c0)="123d9d8f27796161c6671c833045e17c13dce752146312428fccd422cba3ac8031ef43277c3f863e687dcc75bd7d7da3e6e82c0c1d1097b2c38a068f9723f6d97e2a38f54d75afed1784c3a15d37291ba62c9fb5f177f7ccbd5d7e505190bd6f611d28630781d13d707f972c7e2ff34cbb7ad893eb3ec47a947c8be13b245851e709ff87c21d32e28558a837fa0add3d4f57801c17a1ded20dc7efa2215a426bef4dbb68452683fb3f90a8a768dcf7da82df41e97b4582fdfeddfd5ce3088441b44e55eb14f8ec14cac1bda3395c61d727879d60eae9672a0fd23176eab20f19ec146086aa347a19726b10f66ca73b1cbddf0f545fdb4c3858ef8e8fa7d7483e0ab8c269b58f41aad478954ae1396dc1a32079d2af5e943c8c895d9c21071b10ac803aa15e264ff3578c3086f2578e15c0d9042dc768d3528dcc2e7ba755f06b940f61e37aa110a3f58884de4b15d7eb9ad3cfac4fc17a025d0e37d6aa8ee9597ec489f02818b964a6b20bc0a9bb5e7c8e64c78ee1c35881be8365012a38918c1de7a6c885494539a07c5ff5bb8e3c7660a08af0815729f56dfe303305a5cc0d0712cf952f2150ec2ee2aee8b92dfe747ad3f3c8a4342cdcc539274a3f22b189a597158bb528c964d95fa1f93127c48c5941c8f43c4fd4beee90536550ebcf5930d06895784f665b597875719fc7fff6884b4a8adcf411f68ecd2625ad5066d46ef5ce59ab4ae855aafe80d4e7bf6141ac10ff0a0b2c49f202ec6038f8744f760db8248d8fc134dda18f242a4c8e7bff3761b5979850e484de27126922145694ce324378fa35b5c51e8956a9d598db50e92edfef225c0301ddc2055e5a785dea283763f726b023416a7a91671b8b0afc3566179d533a5a49307ad4d664563c8f6cd18c43cd6802c0ff8bf8227ea7dc777449f4c4d91dfc09c4a60cf619b267bba09895d8663145417930a08e6a2ec0733aa7c7c10d26ee0d4aac330079769d5f91a237fa4976719d5b5c66a579326f6c047e2b01ca7aa25de06440dd1e8a78ab9558c88a126e325a1796c74e6f2e281eb1b0ec803657227422491b97cce132ee4444b490b15fef508636758e02a42be8b3afdf4a9f2d47e732a85a63dc6b01159001fb1403f84114b3c0909a95594b77fdab180e76f7eb43afd2050edd5ba8671398e860cb136a56f0ef1e7e115e301374dd86a354476e0db5ad18fd801dd7e609ac97947e6307d879720de698c83a000aa10a1256baedafcac816b26f379cb77d6f0876c4a22eb1d56000c72ef26bfc6970ff54aca1ba8f8d2d069f786f137087d62d6e65eac1f1914884570bf09d028e7044e49ae034a24fb0064a1d54883e37c397f0d9c78b94c0556ddcbbd7f32bc4593019bda1f83020c15e90de0bbf8d54aa46b14b10b443da4059fc6b5b01d84b1f484ae13b639f5948cacdf33c3b2f3180461ba187445056d031d4c4ca55adc2380c59c4dd3cb48aae81b4b1b32ed180c93b957268912046d4a28c8aa1f75a5758f53764d8b72fa40625e18564b27b486540915edc5245bc2544a5d6dc5231b35e22c454dd09f8241614cbcf77329f09423731ed3c9c180b3581ffbde15f83f608b6a3c1c85509c4daab065ae83e48b92f2e9ad38b988e3eeef26241eb37d3193207a0c6a8270dd9e8ca23dc8487392eade8fa896166d918e3d7db3854c0fd9e67c54fcb69eb9eb496a7dfd069dbc63af1686b95bd219e1ce11821d62751bda54e61eb2a3311bb0f942cd232f8675ffd519cfe81c062f7bc18e4dc38ba8333d6486e1fce471978e9e63672aed316a271e1f7ae7b277ddccff9d635fcb4af75d7f84153428f958efd89d1aa4b612ae74ff93256cf367a9711f054fae7211f334fabcb051015c6728587b2c017034c8db220e207a69632cec66c55950fae83632c34e677e88050748ed8bd108709ca977568eed324442e902e99a41770fa60e64ee88dd65e3524cec166995e6bbef7ef84f21cba9b03dc09ca5575405fa6603cf3d23ea591bfcf486144fdd0beea534a6b0193d2b330ff17fcf766dc810c98fb17b5503c41f76f1c8731e157f90f3ac9a936fb44b3d3416511c17d40a80a6ae6674403be25826ceb663394885972dece2dadc4268e59e5e61c0f5c5bc59ef4d0cffca5499f3c4ff025c3b75d4c4c2b0b0a03b7d4098f39aac16e3e42634cd5a413b5c5918fafc9cc8dd544f38984f2e6396ee81a1acd2455e46b668d823e8dee418013f0f8c7669a5970813306a6ae74dd955c1616c458a0b2de841e1b18db98adfb6ac44309358b16903a48d14adeb4e4725087ff2cd1a745c0ad82dbddb68ccf82c1b2b160f9b83eaf4e56ca9fcbe0b0897eff3ff0566ba363f323ff63184e47792980925332810fef36fba51221a8a134639c82e3048b6da6ead3ac111b06a98ec6e8afbd28232d11c33554b3aca23e4fe63e79dd107b5109319e39599231d160d9bd0c09dc0640bdc7d828e752231596ded749bd11abda5995d6749046f701354d8bceb566becfe73238e04dd8237db8f62eab061668d4fc9ef0b10c49c972cf53833df52ded41684e0eab3e120f967b205b4fb14ee6aea6f71a1bdb4297349a5a134e2b8933ea113d9985e99e8a3fde7f94b05abe22b33e4cbaee89da84bd4cb52b5d2f3d4287e95133f232ba4c79a5aae6ebc0e60585edc536fc80c0b5ad25c5921795bbce30176bf8e305c5068601d890e82bf80ba992aa3677ead21a8c7b8f8e150663dbf355230a274cf0cb6f2a80cf17c521f9ed658445a928764edd88ac4b1dd35893642bb771dc77a8916f9762eb2cde4d57bdd2283330b49afa8bcb2645749eacd1e1ea689c5c30491723ee1a75c0e812a75cb5fd277f892346f5533b6f97180673f0d72954c0c7dbb2f9940700bccecd63b635c3b4457849f0d8cef538261a229e99b6549800ecd5f2ff6e1307567f5a3fafbfa8f61815247a549a3a46ddbc9cb519422f508dfaa97045f8c1e86d3312a643466c023779b96d86e5271fd1004be4e56b9b99061994e5887520bfba97dafeb0c52cb57fc7d6cd023f373996b58c74dbc9e14fbbef66f9249640e0603cea9f3996a4ed3771f306879af2d0574fc6527b2bc5b0dd255eafb0e992a5526da715ba77743f2303e59ec6daefc3d94c50388a27ad559088dd5ac02d10ab77ee7a9e5311ad924e92047713304a134b26968c070b28f3d2fb954b8409cb6536ca094f34", 0x8e9}], 0x5}, 0x0)

487.409902ms ago: executing program 0 (id=7):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000019080000000000006b110c"], 0x0}, 0x90)
r0 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0)

400.399796ms ago: executing program 1 (id=11):
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x39, 0x0, 0x0)

310.343273ms ago: executing program 0 (id=12):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x9, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000880), 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x8183, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext, 0x40, 0x0, 0x0, 0x0, 0xc360, 0xfffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r4, 0x29, 0x23, &(0x7f0000000040), 0xcf)
r5 = socket$kcm(0xf, 0x3, 0x2)
r6 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0)
openat$cgroup_devices(r6, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="0213020902000000", 0x8}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

310.063076ms ago: executing program 1 (id=13):
r0 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r0, 0x29, 0x4d, 0x0, 0x0)

388.947µs ago: executing program 1 (id=14):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="d8000000100081414e81f782db010000001d080b01008100e8fe55a1010115000600142603600e120800040000001101a80012000500014006000d30514d3afab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef6aa98516277ce06bbace8017cbec040000000000000000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e5dbf66f282ac027812cfbd3f1aeb4edbb57a7025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0xc000)

302.294µs ago: executing program 2 (id=9):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0x80086601, 0x0)

0s ago: executing program 2 (id=15):
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
socket$kcm(0x2, 0x5, 0x84)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000003, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t')
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:46153' (ED25519) to the list of known hosts.
syzkaller login: [   56.423872][ T5813] cgroup: Unknown subsys name 'net'
[   56.580654][ T5813] cgroup: Unknown subsys name 'cpuset'
[   56.585497][ T5813] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.736303][ T5813] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   67.820039][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   70.699463][ T5221] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   70.703720][ T5221] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   70.708146][ T5221] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   70.719864][ T5221] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   70.737557][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   70.740835][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   70.746113][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   70.749854][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   70.753771][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   70.761607][ T5860] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   70.769035][ T5860] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   70.797465][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   70.805377][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   70.821233][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   70.825416][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   71.062724][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.065407][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.210920][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   71.248579][ T5856] chnl_net:caif_netlink_parms(): no params data found
[   71.363345][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   71.399616][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.402555][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.404836][ T5852] bridge_slave_0: entered allmulticast mode
[   71.409244][ T5852] bridge_slave_0: entered promiscuous mode
[   71.423162][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.425527][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.427891][ T5852] bridge_slave_1: entered allmulticast mode
[   71.431706][ T5852] bridge_slave_1: entered promiscuous mode
[   71.509248][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.512230][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.515242][ T5856] bridge_slave_0: entered allmulticast mode
[   71.519292][ T5856] bridge_slave_0: entered promiscuous mode
[   71.522934][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.525609][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.528804][ T5856] bridge_slave_1: entered allmulticast mode
[   71.532779][ T5856] bridge_slave_1: entered promiscuous mode
[   71.549549][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.579858][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.583595][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.586334][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.588966][ T5855] bridge_slave_0: entered allmulticast mode
[   71.591626][ T5855] bridge_slave_0: entered promiscuous mode
[   71.621533][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.624179][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.626789][ T5855] bridge_slave_1: entered allmulticast mode
[   71.630255][ T5855] bridge_slave_1: entered promiscuous mode
[   71.635765][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.645233][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.691505][ T5852] team0: Port device team_slave_0 added
[   71.695862][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.712628][ T5852] team0: Port device team_slave_1 added
[   71.718918][ T5856] team0: Port device team_slave_0 added
[   71.723272][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.728731][ T5856] team0: Port device team_slave_1 added
[   71.779347][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.781802][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.792108][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.821428][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.823727][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.833189][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.839518][ T5855] team0: Port device team_slave_0 added
[   71.842368][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.845290][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.855850][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.870944][ T5855] team0: Port device team_slave_1 added
[   71.875241][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.878123][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.886626][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.950470][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.952943][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.961417][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.976401][ T5852] hsr_slave_0: entered promiscuous mode
[   71.982654][ T5852] hsr_slave_1: entered promiscuous mode
[   72.000568][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.003294][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.013592][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.078387][ T5856] hsr_slave_0: entered promiscuous mode
[   72.081575][ T5856] hsr_slave_1: entered promiscuous mode
[   72.084607][ T5856] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   72.088464][ T5856] Cannot create hsr debugfs directory
[   72.160445][ T5855] hsr_slave_0: entered promiscuous mode
[   72.163654][ T5855] hsr_slave_1: entered promiscuous mode
[   72.167014][ T5855] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   72.171462][ T5855] Cannot create hsr debugfs directory
[   72.449110][ T5852] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   72.457669][ T5852] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   72.465509][ T5852] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   72.480482][ T5852] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   72.528091][ T5856] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   72.533113][ T5856] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   72.538804][ T5856] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   72.553969][ T5856] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   72.609316][ T5855] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   72.622263][ T5855] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   72.635185][ T5855] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   72.642754][ T5855] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   72.739465][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.770309][ T5856] 8021q: adding VLAN 0 to HW filter on device team0
[   72.780029][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.789032][ T3958] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.791614][ T3958] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.815783][ T3958] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.818771][ T3958] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.822216][ T5857] Bluetooth: hci0: command tx timeout
[   72.854991][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   72.874216][ T3958] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.877299][ T3958] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.895326][ T3958] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.897989][ T3958] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.900886][ T5857] Bluetooth: hci1: command tx timeout
[   72.901228][ T5221] Bluetooth: hci2: command tx timeout
[   72.908720][ T5856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   72.945360][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.013380][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   73.042508][  T160] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.045463][  T160] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.066839][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.084306][  T160] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.087531][  T160] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.161345][ T5856] veth0_vlan: entered promiscuous mode
[   73.201378][ T5856] veth1_vlan: entered promiscuous mode
[   73.251235][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.280065][ T5856] veth0_macvtap: entered promiscuous mode
[   73.284931][ T5856] veth1_macvtap: entered promiscuous mode
[   73.320594][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.334195][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.343726][ T5856] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.346794][ T5856] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.351053][ T5856] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.353837][ T5856] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.365982][ T5852] veth0_vlan: entered promiscuous mode
[   73.393524][ T5852] veth1_vlan: entered promiscuous mode
[   73.444316][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.476945][ T5852] veth0_macvtap: entered promiscuous mode
[   73.490648][ T5852] veth1_macvtap: entered promiscuous mode
[   73.550360][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.563223][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.572472][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.573877][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.586814][ T5852] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.593391][ T5852] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.596959][ T5852] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.600626][ T5852] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.641267][ T5855] veth0_vlan: entered promiscuous mode
[   73.648867][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.652150][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.690115][ T5855] veth1_vlan: entered promiscuous mode
[   73.756603][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.760043][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.802376][ T5855] veth0_macvtap: entered promiscuous mode
[   73.820742][ T5855] veth1_macvtap: entered promiscuous mode
[   73.844623][  T160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.860244][  T160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.873760][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.892851][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.901241][ T5855] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.905240][ T5855] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.918882][ T5855] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.922709][ T5855] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.088952][ T3958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.092223][ T3958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.140199][ T3958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.143386][ T3958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.217077][    C1] hrtimer: interrupt took 25828 ns
[   74.333163][ T5930] netlink: 156 bytes leftover after parsing attributes in process `syz.1.14'.
[   74.978188][ T5221] Bluetooth: hci2: command tx timeout
[   77.058270][ T5221] Bluetooth: hci2: command tx timeout
[   79.138406][ T5221] Bluetooth: hci2: command tx timeout
[   90.452556][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   90.459379][ T5860] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   90.463281][ T5861] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   90.467775][ T5860] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   90.472412][ T5861] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   90.476577][ T5860] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   90.479952][ T5861] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   90.483778][ T5860] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   90.488464][ T5861] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   90.503228][ T5861] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   90.507558][ T5861] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   90.518232][ T5861] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   90.533216][ T5861] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   90.550675][ T5861] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   90.554345][ T5861] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   91.198973][ T5943] chnl_net:caif_netlink_parms(): no params data found
[   92.577470][   T54] Bluetooth: hci4: command tx timeout
[   92.580467][   T54] Bluetooth: hci3: command tx timeout
[   92.657406][ T5861] Bluetooth: hci5: command tx timeout
[   94.657602][ T5861] Bluetooth: hci3: command tx timeout
[   94.660047][ T5861] Bluetooth: hci4: command tx timeout
[   94.737560][   T54] Bluetooth: hci5: command tx timeout
[   96.737513][   T54] Bluetooth: hci4: command tx timeout
[   96.739956][   T54] Bluetooth: hci3: command tx timeout
[   96.817457][ T5861] Bluetooth: hci5: command tx timeout
[   98.817373][ T5861] Bluetooth: hci3: command tx timeout
[   98.819687][ T5861] Bluetooth: hci4: command tx timeout
[   98.897260][   T54] Bluetooth: hci5: command tx timeout
[  150.877462][ T5857] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  150.882838][ T5857] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  150.886193][ T5857] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  150.889705][ T5857] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  150.892351][ T5857] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  150.916029][ T5857] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  150.922202][ T5857] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  150.925584][ T5857] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  150.929658][ T5857] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  150.932501][ T5857] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  150.965458][ T5857] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  150.969748][ T5857] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  150.972687][ T5857] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  150.976271][ T5857] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  150.982759][ T5857] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  152.977686][ T5857] Bluetooth: hci6: command tx timeout
[  152.980861][ T5857] Bluetooth: hci8: command tx timeout
[  153.058110][ T5857] Bluetooth: hci7: command tx timeout
[  155.060504][ T5861] Bluetooth: hci8: command tx timeout
[  155.063960][ T5857] Bluetooth: hci6: command tx timeout
[  155.137498][ T5857] Bluetooth: hci7: command tx timeout
[  157.137471][ T5861] Bluetooth: hci8: command tx timeout
[  157.139990][ T5857] Bluetooth: hci6: command tx timeout
[  157.220749][ T5857] Bluetooth: hci7: command tx timeout
[  159.217421][ T5861] Bluetooth: hci8: command tx timeout
[  159.219513][ T5857] Bluetooth: hci6: command tx timeout
[  159.297607][ T5857] Bluetooth: hci7: command tx timeout
[  179.247100][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  179.249361][    C1] rcu: 	1-....: (10492 ticks this GP) idle=916c/1/0x4000000000000000 softirq=14115/14115 fqs=5247
[  179.254723][    C1] rcu: 	         hardirqs   softirqs   csw/system
[  179.257242][    C1] rcu: 	 number:  1067505          0            0
[  179.259822][    C1] rcu: 	cputime:    25913      26576           89   ==> 52500(ms)
[  179.262979][    C1] rcu: 	(t=10502 jiffies g=7677 q=4098 ncpus=2)
[  179.265495][    C1] CPU: 1 UID: 0 PID: 5926 Comm: syz.0.12 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  179.265530][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  179.265548][    C1] RIP: 0010:rcu_read_unlock_special+0x87/0x4c0
[  179.265597][    C1] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 62 2c f8 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
[  179.265610][    C1] RSP: 0000:ffffc900001e05a0 EFLAGS: 00000206
[  179.265624][    C1] RAX: 52b4f746ecc93600 RBX: 1ffff9200003c0bc RCX: 52b4f746ecc93600
[  179.265633][    C1] RDX: 0000000000000000 RSI: ffffffff8d99883e RDI: ffffffff8be29f40
[  179.265642][    C1] RBP: ffffc900001e0698 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  179.265651][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffffffff8e144400
[  179.265661][    C1] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000002
[  179.265669][    C1] FS:  00007f0cb19df6c0(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
[  179.265680][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  179.265689][    C1] CR2: 00007f38fb183e48 CR3: 00000000290d6000 CR4: 00000000000006f0
[  179.265722][    C1] Call Trace:
[  179.265734][    C1]  <IRQ>
[  179.265740][    C1]  ? __lock_acquire+0xab9/0xd20
[  179.265767][    C1]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  179.265792][    C1]  ? unwind_next_frame+0xa5/0x2390
[  179.265817][    C1]  __rcu_read_unlock+0x84/0xe0
[  179.265838][    C1]  ? unwind_next_frame+0xa5/0x2390
[  179.265852][    C1]  unwind_next_frame+0x19ae/0x2390
[  179.265874][    C1]  ? unwind_next_frame+0xa5/0x2390
[  179.265889][    C1]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  179.265913][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  179.265933][    C1]  arch_stack_walk+0x11c/0x150
[  179.265963][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  179.265983][    C1]  stack_trace_save+0x9c/0xe0
[  179.266001][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  179.266020][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  179.266037][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  179.266057][    C1]  kasan_save_track+0x3e/0x80
[  179.266070][    C1]  ? kasan_save_track+0x3e/0x80
[  179.266080][    C1]  ? kasan_save_free_info+0x46/0x50
[  179.266097][    C1]  ? __kasan_slab_free+0x62/0x70
[  179.266108][    C1]  ? kmem_cache_free+0x18f/0x400
[  179.266121][    C1]  ? dst_destroy+0x235/0x350
[  179.266176][    C1]  ? rcu_core+0xca8/0x1710
[  179.266189][    C1]  ? handle_softirqs+0x286/0x870
[  179.266202][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  179.266215][    C1]  ? irq_exit_rcu+0x9/0x30
[  179.266228][    C1]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  179.266283][    C1]  ? dst_destroy+0x235/0x350
[  179.266298][    C1]  kasan_save_free_info+0x46/0x50
[  179.266315][    C1]  __kasan_slab_free+0x62/0x70
[  179.266326][    C1]  kmem_cache_free+0x18f/0x400
[  179.266343][    C1]  dst_destroy+0x235/0x350
[  179.266361][    C1]  ? __pfx_dst_destroy_rcu+0x10/0x10
[  179.266375][    C1]  ? rcu_core+0xc34/0x1710
[  179.266389][    C1]  rcu_core+0xca8/0x1710
[  179.266422][    C1]  ? __pfx_rcu_core+0x10/0x10
[  179.266438][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  179.266452][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  179.266472][    C1]  ? irqentry_exit+0x74/0x90
[  179.266500][    C1]  ? __pfx_rcu_core_si+0x10/0x10
[  179.266529][    C1]  handle_softirqs+0x286/0x870
[  179.266550][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  179.266573][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  179.266594][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  179.266619][    C1]  __irq_exit_rcu+0xca/0x1f0
[  179.266636][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  179.266661][    C1]  irq_exit_rcu+0x9/0x30
[  179.266674][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  179.266693][    C1]  </IRQ>
[  179.266698][    C1]  <TASK>
[  179.266704][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  179.266719][    C1] RIP: 0010:raw_spin_rq_unlock_irq+0x13/0x90
[  179.266741][    C1] Code: cc e8 c1 72 db 09 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 57 41 56 53 66 90 e8 14 00 de 09 e8 bf 9f 34 00 fb 5b <41> 5e 41 5f e9 44 4e de 09 cc f3 0f 1e fa 49 be 00 00 00 00 00 fc
[  179.266752][    C1] RSP: 0000:ffffc9000316fcc8 EFLAGS: 00000282
[  179.266764][    C1] RAX: 52b4f746ecc93600 RBX: ffff88802077a440 RCX: 52b4f746ecc93600
[  179.266774][    C1] RDX: 0000000000000000 RSI: ffffffff8d99883e RDI: ffffffff8be29f40
[  179.266784][    C1] RBP: ffffc9000316fef0 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  179.266794][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffff888020779cc0
[  179.266804][    C1] R13: dffffc0000000000 R14: ffff888020779cc0 R15: ffff888136639fc0
[  179.266834][    C1]  __schedule+0x1948/0x4d00
[  179.266868][    C1]  ? rcu_is_watching+0x15/0xb0
[  179.266885][    C1]  ? schedule+0x165/0x360
[  179.266901][    C1]  ? preempt_schedule_irq+0xde/0x150
[  179.266918][    C1]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  179.266936][    C1]  ? __pfx___schedule+0x10/0x10
[  179.266962][    C1]  ? irqentry_exit+0x74/0x90
[  179.266997][    C1]  schedule+0x165/0x360
[  179.267017][    C1]  irqentry_exit_to_user_mode+0x5d/0x120
[  179.267035][    C1]  asm_sysvec_call_function_single+0x1a/0x20
[  179.267049][    C1] RIP: 0033:0x7f0cb0b8e9a9
[  179.267064][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  179.267075][    C1] RSP: 002b:00007f0cb19df038 EFLAGS: 00000246
[  179.267086][    C1] RAX: 0000000000000007 RBX: 00007f0cb0db5fa0 RCX: 00007f0cb0b8e9a9
[  179.267095][    C1] RDX: bfffffffffffffff RSI: 0000000000000000 RDI: 0000200000000180
[  179.267104][    C1] RBP: 00007f0cb0c10d69 R08: 0000000000000000 R09: 0000000000000000
[  179.267112][    C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  179.267121][    C1] R13: 0000000000000000 R14: 00007f0cb0db5fa0 R15: 00007ffeab55b048
[  179.267170][    C1]  </TASK>
[  179.489368][    C1] sched: DL replenish lagged too much
[  179.495832][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 104998671355 wd_nsec: 104998665928
[  179.502737][ T5857] Bluetooth: hci0: command tx timeout
[  179.504570][ T5861] Bluetooth: hci1: command tx timeout
[  179.589235][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  179.591445][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  181.540180][ T5857] Bluetooth: hci0: command tx timeout
[  181.543762][ T5861] Bluetooth: hci1: command tx timeout
[  183.617507][ T5861] Bluetooth: hci1: command tx timeout
[  183.619395][ T5861] Bluetooth: hci0: command tx timeout

VM DIAGNOSIS:
08:18:03  Registers:
info registers vcpu 0

CPU#0
RAX=275266d940f1c000 RBX=ffffffff81976a48 RCX=275266d940f1c000 RDX=0000000000000001
RSI=ffffffff8d99883e RDI=ffffffff8be29f40 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa1e8f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6e84f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000557216c4e028 CR3=00000001104d6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f2b56b86d00
XMM02=0008006400000015 0064880300000000 XMM03=ffffffffffff0464 a003000800649803
XMM04=0000000000000000 000000000000000e XMM05=0000000000000000 000000000001df8a
XMM06=ffffffff0464f003 0008006400000017 XMM07=0064e00300000000 d80300080064d003
XMM08=0fffffffffffff04 64c0030000000016 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000037 RBX=0000000000000037 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001df8d0
R8 =ffff888020be0237 R9 =1ffff1100417c046 R10=dffffc0000000000 R11=ffffffff85472aa0
R12=dffffc0000000000 R13=ffffffff99af58f6 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff85472b1c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f0cb19df6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f38fb183e48 CR3=00000000290d6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=010000c000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=00524f5252450040 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f38fb011ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
