last executing test programs:

2.776130718s ago: executing program 2 (id=90):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000070000000300000001000085220b00000000000101200000000000000030305f30"], &(0x7f0000000f40)=""/4069, 0x37, 0xfe5, 0x8, 0xffffffff}, 0x28)

2.664432952s ago: executing program 2 (id=92):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f0300", 0x4}], 0x1}, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000200000000000000000000030000000000000000000000000000000000000000000000010502"], 0x0, 0x42}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

2.256972526s ago: executing program 0 (id=98):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x13}, 0x20)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x2, 0x3, 0x2)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xc)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0)
write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2b, 'freezer'}]}, 0x9)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000018008103e00312ba0d8105040a600000ff0f040b067c55a1bc000900b80006990300000015000500fe808178a8001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x1c, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@jmp={0x5, 0x1, 0x9, 0x5, 0x4, 0xfffffffffffffffe, 0x1}, @ldst={0x2, 0x1, 0x1, 0xb, 0x4, 0x40, 0xb}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x33c9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xb32}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @alu={0x4, 0x1, 0x8, 0x2, 0x8, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x7, 0x3, &(0x7f0000000180)=""/3, 0x40f00, 0x12, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000000280)=[0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000580)=[{0x4, 0x1, 0x2, 0x9}, {0x3, 0x0, 0xa, 0x5}, {0x1, 0x5, 0x1, 0xa}, {0x5, 0x5, 0xc, 0x9}, {0x2, 0x3, 0xc, 0x8}, {0x5, 0x3, 0x5, 0x7}, {0x5, 0x5, 0xc, 0x8}, {0x5, 0x4, 0x3}], 0x10, 0x7b}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x4, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000000000007112bb000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r2, 0x0, 0x1, 0x98, &(0x7f0000000400)='N', &(0x7f0000000700)=""/152, 0x7, 0x0, 0x1e, 0x99, &(0x7f0000000440)="59ea2998f7b14a52de9f659d8dd86d7600814925b127d507ba10832ce989", &(0x7f00000007c0)="3c1c2150b5ce87de564dd71fc856cdfe328dc50b7755cf4c3d614446003e02ab3486314319d89f6625c4ebe2a865e931de71fc028be64deca6590b2b49cdea8f2434a4f309b558452be6af6009d560743e1231e61c21ba140cfbce34920a2e27e8634b35b4ba5723b1751a4ad5bd31071f640d5b157f4ef78c901e17854958cc5081583588f04af31df17042343891182dc675f05dbc9e8c9f", 0x6, 0x0, 0x1}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r3)
socket$kcm(0x2, 0x200000000000001, 0x0)
r4 = socket$kcm(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff})
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10)
write$cgroup_type(r6, &(0x7f00000004c0), 0x9)

1.517134197s ago: executing program 0 (id=105):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="9e36d448b388dd965f7a3312779a", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.415352266s ago: executing program 0 (id=107):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x2, 0x56d, 0x3, 0x2, 0xffffffffffffffff, 0x4}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r0}, 0x38)

1.234195723s ago: executing program 1 (id=109):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa)
write$cgroup_devices(r1, &(0x7f0000000580)={'a', ' *:* ', 'w\x00'}, 0x8)

1.160840084s ago: executing program 2 (id=110):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000023c0), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x80, 0x3, 0x4, 0x0, 0x0, 0x7, 0x20202, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x8bc, 0x400}, 0x5010, 0x2, 0x9, 0x5, 0x8, 0xfffffffe, 0xd, 0x0, 0x200, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="1c000000210081044e81f782db44b904020000f0ff806c0100001500", 0x1c}], 0x1}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'virt_wifi0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080))

1.160615208s ago: executing program 1 (id=111):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="c1dfd480cd21d308098e00000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1.091304598s ago: executing program 0 (id=112):
socket$kcm(0xa, 0x1, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB], 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x44, 0x9, 0x1, 0x1}, 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r3}, 0x38)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)

1.090852072s ago: executing program 1 (id=113):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061043c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48)

1.078856809s ago: executing program 2 (id=114):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000006000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r1, 0x2f000000, 0x138, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x8000000, 0x13}, 0x22)

1.039065581s ago: executing program 1 (id=115):
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)=@abs, 0x6e, 0x0}, 0x20)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff2, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407ffd, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
r0 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x38}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)="27050200d40f00000600002f8847", 0xe}], 0x1}, 0x0)

949.578672ms ago: executing program 2 (id=116):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xd, 0x4, 0x2}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x25, &(0x7f0000000080)=r1, 0x4)

949.255136ms ago: executing program 1 (id=117):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46}, [@call={0x85, 0x0, 0x0, 0x6e}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

883.771678ms ago: executing program 2 (id=118):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{}, &(0x7f00000007c0), 0x0}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0xc, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', r2}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x13, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x64, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x100004, 0x220104, 0xb, 0x1, 0xffffffffffffffff, 0x100000}, 0x50)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa4706, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x320, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r3}, 0x38)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xb4}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0xfffffff7, '\x00', 0x0, r4, 0x2, 0x5, 0x5}, 0x50)

760.783791ms ago: executing program 1 (id=119):
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
recvmsg$unix(r0, &(0x7f0000000300)={&(0x7f0000000200), 0x6e, &(0x7f0000000280)=[{&(0x7f0000000100)=""/63, 0x3f}], 0x1, &(0x7f00000006c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}, 0x10021)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xfff}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r2)
write$cgroup_type(r2, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
socketpair$unix(0x1, 0x1, 0x0, 0x0)

343.894µs ago: executing program 0 (id=120):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x23)

0s ago: executing program 0 (id=121):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fec, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x31, 0xfffffbff, 0x3, 0x2, 0x1000, 0x5, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000540)="d2ff03076003008cb89e08f088a82b9a88a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:51012' (ED25519) to the list of known hosts.
syzkaller login: [   55.889959][ T5811] cgroup: Unknown subsys name 'net'
[   55.980994][ T5811] cgroup: Unknown subsys name 'cpuset'
[   55.984720][ T5811] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.465854][ T5811] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   67.266066][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   67.269478][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   67.273382][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   67.277090][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   67.280645][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   67.348349][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   67.351360][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   67.354590][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   67.358319][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   67.373949][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   67.379169][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   67.382539][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   67.386445][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   67.412708][ T5217] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   67.421507][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   67.453047][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   67.583713][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.587957][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.591917][ T5826] bridge_slave_0: entered allmulticast mode
[   67.595373][ T5826] bridge_slave_0: entered promiscuous mode
[   67.604016][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.606650][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.610069][ T5826] bridge_slave_1: entered allmulticast mode
[   67.613769][ T5826] bridge_slave_1: entered promiscuous mode
[   67.665485][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.671041][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.693362][ T5826] team0: Port device team_slave_0 added
[   67.696828][ T5826] team0: Port device team_slave_1 added
[   67.723268][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.725945][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.736005][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.750556][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.753032][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.763722][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.872633][ T5826] hsr_slave_0: entered promiscuous mode
[   67.875834][ T5826] hsr_slave_1: entered promiscuous mode
[   67.880387][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   67.913132][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   68.031523][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.034495][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.037480][ T5833] bridge_slave_0: entered allmulticast mode
[   68.042182][ T5833] bridge_slave_0: entered promiscuous mode
[   68.075634][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.078577][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.081206][ T5833] bridge_slave_1: entered allmulticast mode
[   68.084266][ T5833] bridge_slave_1: entered promiscuous mode
[   68.098771][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.101668][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.104246][ T5830] bridge_slave_0: entered allmulticast mode
[   68.107435][ T5830] bridge_slave_0: entered promiscuous mode
[   68.125837][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.134923][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.139710][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.142838][ T5830] bridge_slave_1: entered allmulticast mode
[   68.146386][ T5830] bridge_slave_1: entered promiscuous mode
[   68.152167][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.224569][ T5833] team0: Port device team_slave_0 added
[   68.228184][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.232908][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.242959][ T5833] team0: Port device team_slave_1 added
[   68.281079][ T5830] team0: Port device team_slave_0 added
[   68.301941][ T5830] team0: Port device team_slave_1 added
[   68.304773][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.310395][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.322209][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.345677][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.348874][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.361372][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.373148][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.375916][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.385878][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.391685][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.394910][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.406648][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.503033][ T5833] hsr_slave_0: entered promiscuous mode
[   68.505867][ T5833] hsr_slave_1: entered promiscuous mode
[   68.510053][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   68.512922][ T5833] Cannot create hsr debugfs directory
[   68.524764][ T5830] hsr_slave_0: entered promiscuous mode
[   68.530735][ T5830] hsr_slave_1: entered promiscuous mode
[   68.533688][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   68.536813][ T5830] Cannot create hsr debugfs directory
[   68.581897][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   68.588925][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   68.613487][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   68.632730][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   68.844709][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   68.852067][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   68.861409][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   68.869406][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   68.942464][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   68.958310][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   68.965868][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   68.973504][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   69.003359][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.052282][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   69.070424][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.073623][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.092023][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.094844][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.192743][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.222423][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.230335][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   69.245616][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.248160][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.270989][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.273983][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.289364][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   69.321280][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.324541][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.340426][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.342415][ T5837] Bluetooth: hci0: command tx timeout
[   69.343365][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.412549][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.424209][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   69.509310][ T5837] Bluetooth: hci2: command tx timeout
[   69.512654][ T5837] Bluetooth: hci1: command tx timeout
[   69.517172][ T5826] veth0_vlan: entered promiscuous mode
[   69.529487][ T5826] veth1_vlan: entered promiscuous mode
[   69.607575][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.622066][ T5826] veth0_macvtap: entered promiscuous mode
[   69.635274][ T5826] veth1_macvtap: entered promiscuous mode
[   69.652625][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.682374][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.701055][ T5833] veth0_vlan: entered promiscuous mode
[   69.707702][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.716390][ T5826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.722905][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.726691][ T5826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.731650][ T5826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.751010][ T5833] veth1_vlan: entered promiscuous mode
[   69.790233][ T5830] veth0_vlan: entered promiscuous mode
[   69.801517][ T5830] veth1_vlan: entered promiscuous mode
[   69.863799][ T5833] veth0_macvtap: entered promiscuous mode
[   69.871744][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.877152][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.903289][ T5830] veth0_macvtap: entered promiscuous mode
[   69.908040][ T5833] veth1_macvtap: entered promiscuous mode
[   69.939699][ T5830] veth1_macvtap: entered promiscuous mode
[   69.946823][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.968875][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.974932][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.981895][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.991793][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.996926][ T5833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.001877][ T5833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.006378][ T5833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.011518][ T5833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.023729][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.046514][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.052434][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.056101][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.062622][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.080014][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   70.177447][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.195641][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.223314][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.226231][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.256203][ T5883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.264614][ T5883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.306941][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.311023][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.365414][    C1] hrtimer: interrupt took 24915 ns
[   70.422107][ T5905] Zero length message leads to an empty skb
[   70.440943][ T5905] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.6'.
[   70.719743][ T5924] netlink: 1 bytes leftover after parsing attributes in process `syz.2.14'.
[   70.811091][ T5926] netlink: 'syz.0.17': attribute type 25 has an invalid length.
[   70.819140][ T5926] netlink: 'syz.0.17': attribute type 28 has an invalid length.
[   70.826761][ T5928] netlink: 176 bytes leftover after parsing attributes in process `syz.2.16'.
[   70.973331][ T5828] Bluetooth: hci1: Malformed LE Event: 0x0d
[   71.265132][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.267540][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.420218][ T5828] Bluetooth: hci0: command tx timeout
[   71.581507][ T5955] netlink: 188 bytes leftover after parsing attributes in process `syz.1.29'.
[   71.978329][ T5828] Bluetooth: hci1: command tx timeout
[   71.981252][ T5828] Bluetooth: hci2: command tx timeout
[   72.315230][ T5837] Bluetooth: hci0: Malformed LE Event: 0x0d
[   72.550090][ T5976] syz.0.38 uses obsolete (PF_INET,SOCK_PACKET)
[   73.875360][ T5837] Bluetooth: hci0: command tx timeout
[   74.059083][ T5828] Bluetooth: hci1: command tx timeout
[   74.063258][ T5837] Bluetooth: hci2: command tx timeout
[   74.312202][ T5990] netlink: 'syz.0.44': attribute type 2 has an invalid length.
[   74.316106][ T5990] netlink: 'syz.0.44': attribute type 8 has an invalid length.
[   74.326228][ T5990] netlink: 132 bytes leftover after parsing attributes in process `syz.0.44'.
[   74.342980][ T5997] warning: `syz.1.45' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   74.627121][ T5837] Bluetooth: hci1: Malformed LE Event: 0x1b
[   75.502702][ T6042] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.64'.
[   75.511021][ T6039] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.64'.
[   75.904475][ T5837] Bluetooth: hci0: command tx timeout
[   75.921978][ T6053] netlink: 60 bytes leftover after parsing attributes in process `syz.0.70'.
[   75.938801][ T6053] netlink: 60 bytes leftover after parsing attributes in process `syz.0.70'.
[   75.977962][ T6053] netlink: 60 bytes leftover after parsing attributes in process `syz.0.70'.
[   76.139584][ T5837] Bluetooth: hci2: command tx timeout
[   76.141614][ T5837] Bluetooth: hci1: command tx timeout
[   76.475376][ T6072] netlink: 'syz.0.79': attribute type 10 has an invalid length.
[   77.038322][ T6072] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   77.318494][ T6091] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.89'.
[   77.322292][ T6091] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[   77.386495][ T6097] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.91'.
[   78.081278][ T6114] IPv6: NLM_F_REPLACE set, but no existing node found!
[   78.313787][ T6121] netlink: 25 bytes leftover after parsing attributes in process `syz.1.101'.
[   78.332212][ T6121] netlink: zone id is out of range
[   78.334837][ T6121] netlink: zone id is out of range
[   78.337150][ T6121] netlink: zone id is out of range
[   78.340075][ T6121] netlink: zone id is out of range
[   78.342447][ T6121] netlink: zone id is out of range
[   78.345188][ T6121] netlink: zone id is out of range
[   78.347518][ T6121] netlink: zone id is out of range
[   78.351021][ T6121] netlink: zone id is out of range
[   78.353317][ T6121] netlink: zone id is out of range
[   78.355587][ T6121] netlink: zone id is out of range
[   78.961853][ T6143] Illegal XDP return value 6143 on prog  (id 44) dev N/A, expect packet loss!
[   95.423887][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   95.428761][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   95.432366][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   95.437163][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   95.441527][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   95.751329][ T6177] chnl_net:caif_netlink_parms(): no params data found
[   97.499388][ T5837] Bluetooth: hci3: command tx timeout
[   99.578766][ T5837] Bluetooth: hci3: command tx timeout
[  101.658023][ T5837] Bluetooth: hci3: command tx timeout
[  103.738206][ T5837] Bluetooth: hci3: command tx timeout
[  155.915951][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  155.920774][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  155.923539][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  155.926748][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  155.931307][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  157.978224][ T5828] Bluetooth: hci4: command tx timeout
[  160.058065][ T5828] Bluetooth: hci4: command tx timeout
[  162.139234][ T5828] Bluetooth: hci4: command tx timeout
[  164.218075][ T5828] Bluetooth: hci4: command tx timeout
[  184.267735][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  184.270169][    C1] rcu: 	1-....: (1 GPs behind) idle=2edc/1/0x4000000000000000 softirq=15613/15614 fqs=5249
[  184.276189][    C1] rcu: 	         hardirqs   softirqs   csw/system
[  184.279511][    C1] rcu: 	 number:   946604          0            0
[  184.281980][    C1] rcu: 	cputime:    26288      26211          102   ==> 52510(ms)
[  184.284626][    C1] rcu: 	(t=10502 jiffies g=8569 q=3105 ncpus=2)
[  184.286732][    C1] CPU: 1 UID: 0 PID: 6158 Comm: syz.2.118 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  184.286742][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  184.286747][    C1] RIP: 0010:rcu_read_unlock_special+0x87/0x4c0
[  184.286764][    C1] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 92 37 f8 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
[  184.286790][    C1] RSP: 0018:ffffc900001e01a0 EFLAGS: 00000206
[  184.286798][    C1] RAX: ceb746c8d91b9000 RBX: 1ffff9200003c03c RCX: ceb746c8d91b9000
[  184.286803][    C1] RDX: 0000000000000002 RSI: ffffffff8d99873a RDI: ffffffff8be29f80
[  184.286808][    C1] RBP: ffffc900001e0298 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  184.286812][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffffffff8e144400
[  184.286816][    C1] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000002
[  184.286821][    C1] FS:  00007f03440626c0(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
[  184.286826][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  184.286831][    C1] CR2: 0000001b30318ff8 CR3: 00000001128ae000 CR4: 00000000000006f0
[  184.286856][    C1] Call Trace:
[  184.286862][    C1]  <IRQ>
[  184.286865][    C1]  ? __lock_acquire+0xab9/0xd20
[  184.286878][    C1]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  184.286889][    C1]  ? unwind_next_frame+0xa5/0x2390
[  184.286900][    C1]  __rcu_read_unlock+0x84/0xe0
[  184.286911][    C1]  ? unwind_next_frame+0xa5/0x2390
[  184.286917][    C1]  unwind_next_frame+0x19ae/0x2390
[  184.286928][    C1]  ? unwind_next_frame+0xa5/0x2390
[  184.286936][    C1]  ? napi_alloc_skb+0x84/0x7d0
[  184.286947][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  184.286956][    C1]  arch_stack_walk+0x11c/0x150
[  184.286968][    C1]  ? e1000_clean_rx_irq+0x448/0x1170
[  184.286978][    C1]  stack_trace_save+0x9c/0xe0
[  184.286987][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  184.287000][    C1]  kasan_save_track+0x3e/0x80
[  184.287011][    C1]  ? kasan_save_track+0x3e/0x80
[  184.287019][    C1]  ? __kasan_slab_alloc+0x6c/0x80
[  184.287025][    C1]  ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  184.287031][    C1]  ? kmalloc_reserve+0xbd/0x290
[  184.287037][    C1]  ? __alloc_skb+0x142/0x2d0
[  184.287042][    C1]  ? napi_alloc_skb+0x84/0x7d0
[  184.287069][    C1]  __kasan_slab_alloc+0x6c/0x80
[  184.287076][    C1]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  184.287083][    C1]  ? kmalloc_reserve+0xbd/0x290
[  184.287092][    C1]  kmalloc_reserve+0xbd/0x290
[  184.287097][    C1]  ? napi_skb_cache_get+0x37b/0x6d0
[  184.287106][    C1]  __alloc_skb+0x142/0x2d0
[  184.287114][    C1]  napi_alloc_skb+0x84/0x7d0
[  184.287123][    C1]  e1000_clean_rx_irq+0x448/0x1170
[  184.287144][    C1]  ? __pfx_e1000_clean_rx_irq+0x10/0x10
[  184.287151][    C1]  e1000_clean+0xca4/0x2b00
[  184.287169][    C1]  ? irqentry_exit+0x74/0x90
[  184.287180][    C1]  ? __pfx_e1000_clean+0x10/0x10
[  184.287190][    C1]  __napi_poll+0xc7/0x480
[  184.287203][    C1]  net_rx_action+0x707/0xe30
[  184.287218][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  184.287223][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  184.287230][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  184.287249][    C1]  ? tmigr_handle_remote+0x1340/0x13d0
[  184.287259][    C1]  handle_softirqs+0x286/0x870
[  184.287269][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  184.287279][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  184.287288][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  184.287300][    C1]  __irq_exit_rcu+0xca/0x1f0
[  184.287308][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  184.287324][    C1]  irq_exit_rcu+0x9/0x30
[  184.287331][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  184.287341][    C1]  </IRQ>
[  184.287343][    C1]  <TASK>
[  184.287346][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  184.287353][    C1] RIP: 0010:generic_exec_single+0x481/0x500
[  184.287361][    C1] Code: 75 11 e8 62 7f 0b 00 48 85 db 75 16 e8 58 7f 0b 00 eb 15 e8 51 7f 0b 00 e8 ac ea b9 09 48 85 db 74 ea e8 42 7f 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 66 43 c7 44 2c
[  184.287366][    C1] RSP: 0018:ffffc9000407f9c0 EFLAGS: 00000246
[  184.287372][    C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000080000
[  184.287376][    C1] RDX: ffffc90009379000 RSI: 0000000000000303 RDI: 0000000000000304
[  184.287380][    C1] RBP: ffffc9000407fa90 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  184.287385][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 1ffff9200080ff3c
[  184.287389][    C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff9200080ff5d
[  184.287403][    C1]  ? __pfx_remote_function+0x10/0x10
[  184.287413][    C1]  ? __pfx_generic_exec_single+0x10/0x10
[  184.287422][    C1]  ? __pfx___might_resched+0x10/0x10
[  184.287430][    C1]  ? smp_call_function_single+0xa0/0x590
[  184.287440][    C1]  smp_call_function_single+0x351/0x590
[  184.287447][    C1]  ? __pfx_remote_function+0x10/0x10
[  184.287456][    C1]  ? __pfx_smp_call_function_single+0x10/0x10
[  184.287464][    C1]  ? __pfx_remote_function+0x10/0x10
[  184.287480][    C1]  perf_install_in_context+0x593/0x8f0
[  184.287493][    C1]  ? __pfx_perf_install_in_context+0x10/0x10
[  184.287501][    C1]  ? find_get_pmu_context+0x7cd/0x890
[  184.287509][    C1]  ? __pfx___perf_install_in_context+0x10/0x10
[  184.287524][    C1]  ? anon_inode_getfile+0x106/0x1a0
[  184.287531][    C1]  ? perf_event__header_size+0x168/0x230
[  184.287539][    C1]  __se_sys_perf_event_open+0x193a/0x1d70
[  184.287554][    C1]  ? __pfx___se_sys_perf_event_open+0x10/0x10
[  184.287569][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  184.287580][    C1]  ? rcu_is_watching+0x15/0xb0
[  184.287590][    C1]  ? do_syscall_64+0xbe/0x3b0
[  184.287598][    C1]  ? __x64_sys_perf_event_open+0x20/0xc0
[  184.287608][    C1]  do_syscall_64+0xfa/0x3b0
[  184.287616][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  184.287624][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.287630][    C1]  ? exc_page_fault+0x9f/0xf0
[  184.287640][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.287646][    C1] RIP: 0033:0x7f034318e9a9
[  184.287654][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  184.287658][    C1] RSP: 002b:00007f0344062038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  184.287665][    C1] RAX: ffffffffffffffda RBX: 00007f03433b5fa0 RCX: 00007f034318e9a9
[  184.287669][    C1] RDX: ffefffffffffffff RSI: 0000000000000000 RDI: 0000200000000180
[  184.287673][    C1] RBP: 00007f0343210d69 R08: 0000000000000000 R09: 0000000000000000
[  184.287676][    C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  184.287680][    C1] R13: 0000000000000000 R14: 00007f03433b5fa0 R15: 00007ffcd7eb2768
[  184.287692][    C1]  </TASK>
[  184.522286][    C1] sched: DL replenish lagged too much

VM DIAGNOSIS:
09:32:12  Registers:
info registers vcpu 0

CPU#0
RAX=85ce6726b0c8e400 RBX=ffffffff81975f18 RCX=85ce6726b0c8e400 RDX=0000000000000001
RSI=ffffffff8d99873a RDI=ffffffff8be29f80 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa1e8f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6e84f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000557c30ed4028 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f60ed186d00
XMM02=d003001000000035 04d0030000000000 XMM03=0010e880900004d0 030010e080900004
XMM04=0000000000000000 000000000000000e XMM05=0000000000000000 000000000001df8a
XMM06=d0030011a0809000 04d0030000000037 XMM07=0004d00300000000 900004d003001188
XMM08=80900004d0030020 f880900000000036 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33bf460 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99dfa470 RSP=ffffc900001df470
R8 =ffff8880215b8237 R9 =1ffff110042b7046 R10=dffffc0000000000 R11=ffffffff85471ed0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff85471f47 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f03440626c0 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b30318ff8 CR3=00000001128ae000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f0343386478 00007f0343386450 XMM03=00007f0343386488 00007f0343386480
XMM04=00007f0343eed100 00007f0343386440 XMM05=00007f0343386458 00007f03433864a0
XMM06=00007f0343386498 00007f0343386490 XMM07=00007f0343386488 00007f0343386480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f0343211ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
