last executing test programs:

2.816129191s ago: executing program 1 (id=24):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x88}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)

2.809476236s ago: executing program 1 (id=25):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000a50000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc53c06d2626cc3f0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x0, 0xe, 0x0, &(0x7f00000004c0)="e02742e8680d85ff9782762f86dd", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.700138434s ago: executing program 1 (id=26):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffe72, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008105e00212ba0d8105040a020200020f100b067c55a1bc000900b80006990200000015000500fc038178a80015000338004002000c0901ac040000d67f6f947a7100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0)

2.690074355s ago: executing program 1 (id=28):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x4, 0x4, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x15, 0x17, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llx, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x52}}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.310898616s ago: executing program 2 (id=35):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48)

2.241244238s ago: executing program 2 (id=36):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000280), 0x9)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0xa0, 0x22, &(0x7f00000003c0)="1b102d4a1a071509f5dc29011f30ec8d26e6c7812e2cfb192b7aa6ca012f0a05687fd20ddb7c4e2c73a5bab736bda55a94faedac13fe9ed0d5019bad1e544b02ac2f0168f14e7fe8b42116a318774b820a69dc8af96d41e3d6674ae943587a94736a9bfa4f345faf112e43866fe59601cebf154d8b8c590ab6d45b97577401db2e0ba05f02271ffffdfa29fca5422566c83eb872a16de1d963ed81e7f807bf0c", &(0x7f0000000180)=""/34, 0xb3dc, 0x0, 0x11, 0x78, &(0x7f00000001c0)="95722bb8903eaa7179b7ea3fd6ecea958a", &(0x7f0000000480)="1194d9bb8193e0c50db75c4e8decef8f5ffd7b394182a238ef040ff0920a5327f00c0c76891b1165705ff9df4f702cdfd04e66924f15b87bdd4a7ff82e7a894469a7a1d751bb18910ba6189d906645cbef63cc59b1c2700791277aa8125bc9fb77349e6aa63a82838219ab89c731f9365c1acbc9730c8755", 0x7, 0x0, 0xae0}, 0x50)
r4 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000c40), 0x12)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xe, 0x1, 0xf7, 0xf8, 0x0, 0x6, 0x20290, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x22, 0x6, 0x400, 0x6, 0x5, 0x5, 0x5, 0x0, 0x80000, 0x0, 0x9}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12)

1.841648157s ago: executing program 0 (id=41):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040), 0x2}, 0x20)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed5de7e91cd360a136ce6203c23c00fe82000000000400875865969f7e7507018100000000001a8829"], 0xfe1b)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="85020000ea000000a4f90ef4", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe8b}, 0x90)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))

1.841406187s ago: executing program 0 (id=42):
r0 = socket$kcm(0x2d, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000000c0)={r1})
r2 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r2})

1.821248225s ago: executing program 0 (id=43):
r0 = socket$kcm(0xf, 0x3, 0x2)
recvmsg$kcm(r0, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x42)

1.721082615s ago: executing program 0 (id=44):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000940)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='/'], 0x20)

1.720549452s ago: executing program 0 (id=45):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_config_ext={0x9, 0x2}, 0x3000, 0x4, 0x0, 0x2, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x60)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000}, 0x10}, 0x94)
r4 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r4, 0x84, 0xb, &(0x7f0000000000), 0xe)
sendmsg$inet(r4, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x40)
close(r4)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)

1.343577939s ago: executing program 1 (id=46):
r0 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x22, &(0x7f00000000c0), 0x4)

1.34136507s ago: executing program 2 (id=47):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)

1.290293096s ago: executing program 1 (id=48):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000ea"], 0x0, 0x1a, 0x0, 0x1, 0x3}, 0x28)
r2 = socket$kcm(0x11, 0x200000000000003, 0x300)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000040), 0x4)
recvmsg(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x1}, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast})
write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)

1.289827996s ago: executing program 2 (id=49):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f00000100", @ANYRES32=0x0], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0x0, 0x0}, 0x10)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r0}, 0x38)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000000), 0x0}, 0x20)
sendmsg$tipc(r3, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
recvmsg(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x64}, 0x94)
perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

979.871955ms ago: executing program 2 (id=50):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x100002e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r3, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818)
sendmsg$sock(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='k', 0x1}], 0x1, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x241)

742.034596ms ago: executing program 0 (id=51):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4004080)
socket$kcm(0xa, 0x3, 0x73)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r3)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2505, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f0000, 0x7f}, 0x80, 0x4, 0x0, 0x1, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)

0s ago: executing program 2 (id=52):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4011, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0xa, 0x1, 0x106)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xae6}, 0x1c125, 0x2e, 0xfffffbff, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x50, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x3}, 0x40, 0x0, 0x0, 0x0, 0xc360, 0xfffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000ff0f0000be0000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000003532511aa64879a8c3"], 0x63)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x4, 0xfc, 0x3, 0x0, 0x0, 0x7, 0x8822, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xc}, 0x1000, 0xfffff, 0x3, 0xfe8d42e69ac4daf8, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x2)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, r5, 0x4}, 0x38)
r6 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r6, 0x29, 0x31, &(0x7f0000000100), 0x120)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r7)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r7, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:57258' (ED25519) to the list of known hosts.
syzkaller login: [   49.100305][ T5817] cgroup: Unknown subsys name 'net'
[   49.253892][ T5817] cgroup: Unknown subsys name 'cpuset'
[   49.257877][ T5817] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.703108][ T5817] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.323550][ T5218] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.327968][ T5218] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.331934][ T5218] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.336481][ T5218] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.340077][ T5218] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.374681][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.381482][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.385101][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.389032][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.393106][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.508988][ T5218] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.514372][ T5218] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.520106][ T5218] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.524651][ T5218] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.528192][ T5218] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.621472][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   54.666793][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   54.745512][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.748825][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.752324][ T5826] bridge_slave_0: entered allmulticast mode
[   54.755374][ T5826] bridge_slave_0: entered promiscuous mode
[   54.762424][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.765068][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.767480][ T5826] bridge_slave_1: entered allmulticast mode
[   54.770536][ T5826] bridge_slave_1: entered promiscuous mode
[   54.791278][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.794338][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.796987][ T5831] bridge_slave_0: entered allmulticast mode
[   54.801177][ T5831] bridge_slave_0: entered promiscuous mode
[   54.831393][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.833876][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.836322][ T5831] bridge_slave_1: entered allmulticast mode
[   54.841802][ T5831] bridge_slave_1: entered promiscuous mode
[   54.847697][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.866394][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.895234][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.902695][ T5826] team0: Port device team_slave_0 added
[   54.911271][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.916455][ T5826] team0: Port device team_slave_1 added
[   54.966728][ T5831] team0: Port device team_slave_0 added
[   54.985157][ T5831] team0: Port device team_slave_1 added
[   54.988538][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.992169][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.002123][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.035420][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.038199][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.048001][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.086411][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.089390][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.102694][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.127915][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.131086][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.138916][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.159628][ T5826] hsr_slave_0: entered promiscuous mode
[   55.162569][ T5826] hsr_slave_1: entered promiscuous mode
[   55.165637][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   55.221387][ T5831] hsr_slave_0: entered promiscuous mode
[   55.223778][ T5831] hsr_slave_1: entered promiscuous mode
[   55.225930][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.228556][ T5831] Cannot create hsr debugfs directory
[   55.332846][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.335679][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.338206][ T5835] bridge_slave_0: entered allmulticast mode
[   55.341431][ T5835] bridge_slave_0: entered promiscuous mode
[   55.361846][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.364330][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.366698][ T5835] bridge_slave_1: entered allmulticast mode
[   55.369570][ T5835] bridge_slave_1: entered promiscuous mode
[   55.435474][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.447421][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.482696][ T5835] team0: Port device team_slave_0 added
[   55.488021][ T5835] team0: Port device team_slave_1 added
[   55.536275][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.539365][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.550520][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.556777][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.560402][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.571397][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.610824][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.646488][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.656201][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.681783][ T5835] hsr_slave_0: entered promiscuous mode
[   55.685140][ T5835] hsr_slave_1: entered promiscuous mode
[   55.688209][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.692709][ T5835] Cannot create hsr debugfs directory
[   55.708996][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.805355][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.822703][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.829504][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.858275][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.992172][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.012327][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.025328][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.032927][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.046230][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.053954][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.106319][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   56.112922][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   56.125504][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.128326][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.136445][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.139418][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.155473][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.158583][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.165860][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.168966][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.285830][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.303371][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   56.334291][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.337361][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.345226][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.348275][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.385804][ T5218] Bluetooth: hci0: command tx timeout
[   56.451933][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.462124][ T5218] Bluetooth: hci1: command tx timeout
[   56.511218][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.529765][ T5831] veth0_vlan: entered promiscuous mode
[   56.540680][ T5218] Bluetooth: hci2: command tx timeout
[   56.552279][ T5831] veth1_vlan: entered promiscuous mode
[   56.564296][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.598077][ T5831] veth0_macvtap: entered promiscuous mode
[   56.612068][ T5826] veth0_vlan: entered promiscuous mode
[   56.622289][ T5831] veth1_macvtap: entered promiscuous mode
[   56.644669][ T5826] veth1_vlan: entered promiscuous mode
[   56.656911][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.659404][ T5835] veth0_vlan: entered promiscuous mode
[   56.668786][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.679046][ T5835] veth1_vlan: entered promiscuous mode
[   56.687338][ T5831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.693660][ T5831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.697279][ T5831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.703669][ T5831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.722505][ T5826] veth0_macvtap: entered promiscuous mode
[   56.734276][ T5826] veth1_macvtap: entered promiscuous mode
[   56.772891][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.775522][ T5835] veth0_macvtap: entered promiscuous mode
[   56.788202][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.796744][ T5835] veth1_macvtap: entered promiscuous mode
[   56.818255][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.818257][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.821903][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.827335][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.830773][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.831157][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.861186][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.875838][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.878290][ T4366] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.881938][ T4366] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.889529][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.894780][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.897491][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.901793][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.964368][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.966072][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.975474][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.012696][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.015132][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.019217][  T958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.025356][  T958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.063313][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.077292][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.244041][ T5907] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.9'.
[   57.247226][ T5907] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   57.249976][ T5907] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   57.359640][ T5916] netlink: 'syz.2.12': attribute type 2 has an invalid length.
[   57.446667][ T5926] netlink: 'syz.0.17': attribute type 21 has an invalid length.
[   57.497558][ T5931] syz.2.20 uses obsolete (PF_INET,SOCK_PACKET)
[   57.767374][ T5939] warning: `syz.2.22' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   57.775681][ T5939] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   58.167336][ T5953] Driver unsupported XDP return value 0 on prog  (id 13) dev N/A, expect packet loss!
[   58.470577][ T5218] Bluetooth: hci0: command tx timeout
[   58.541534][ T5218] Bluetooth: hci1: command tx timeout
[   58.621572][ T5218] Bluetooth: hci2: command tx timeout
[   59.281104][    C1] hrtimer: interrupt took 33487 ns
[   59.361462][ T5994] syzkaller0: entered promiscuous mode
[   59.364088][ T5994] syzkaller0: entered allmulticast mode
[   60.541716][ T5218] Bluetooth: hci0: command tx timeout
[   60.544052][   T36] wlan1: Trigger new scan to find an IBSS to join
[   60.619911][ T5218] Bluetooth: hci1: command tx timeout
[   71.113353][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.116210][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   81.366284][  T971] cfg80211: failed to load regulatory.db
[  132.550371][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  132.553078][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  165.669725][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  165.671890][    C1] rcu: 	1-....: (10500 ticks this GP) idle=c4ac/1/0x4000000000000000 softirq=14592/14593 fqs=5247
[  165.676950][    C1] rcu: 	         hardirqs   softirqs   csw/system
[  165.679007][    C1] rcu: 	 number:   974343          0            0
[  165.681096][    C1] rcu: 	cputime:    24251      28237           90   ==> 52500(ms)
[  165.683522][    C1] rcu: 	(t=10502 jiffies g=7025 q=1452 ncpus=2)
[  165.685618][    C1] CPU: 1 UID: 0 PID: 6006 Comm: syz.2.52 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  165.685628][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  165.685632][    C1] RIP: 0010:arch_stack_walk+0x11c/0x150
[  165.685646][    C1] Code: ff ff 4c 89 ff e8 e4 29 09 00 48 85 c0 74 24 48 89 df 48 89 c6 4d 89 f3 2e e8 a0 d9 07 0a 84 c0 74 11 4c 89 ff e8 14 2b 09 00 <83> bd 78 ff ff ff 00 75 cf 65 48 8b 05 e3 90 36 11 48 3b 45 d8 75
[  165.685652][    C1] RSP: 0018:ffffc900001e0808 EFLAGS: 00000292
[  165.685659][    C1] RAX: 0000000090d8f001 RBX: ffffc900001e08c0 RCX: 695fc075ce6c8900
[  165.685664][    C1] RDX: 0000000000000000 RSI: ffffffff8d998874 RDI: ffffffff8be29f40
[  165.685668][    C1] RBP: ffffc900001e0890 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  165.685672][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffff8880214e1cc0
[  165.685677][    C1] R13: ffffffff81a8c1e4 R14: ffffffff81acffe0 R15: ffffc900001e0808
[  165.685681][    C1] FS:  00007fef2170f6c0(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
[  165.685687][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  165.685691][    C1] CR2: 0000001b3030fff8 CR3: 0000000022bba000 CR4: 00000000000006f0
[  165.685716][    C1] Call Trace:
[  165.685721][    C1]  <IRQ>
[  165.685727][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.685738][    C1]  stack_trace_save+0x9c/0xe0
[  165.685748][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  165.685758][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  165.685766][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  165.685775][    C1]  kasan_save_track+0x3e/0x80
[  165.685781][    C1]  ? kasan_save_track+0x3e/0x80
[  165.685786][    C1]  ? kasan_save_free_info+0x46/0x50
[  165.685794][    C1]  ? __kasan_slab_free+0x62/0x70
[  165.685800][    C1]  ? slab_free_after_rcu_debug+0x129/0x2a0
[  165.685809][    C1]  ? rcu_core+0xca8/0x1710
[  165.685816][    C1]  ? handle_softirqs+0x286/0x870
[  165.685823][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  165.685829][    C1]  ? irq_exit_rcu+0x9/0x30
[  165.685835][    C1]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  165.685844][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  165.685851][    C1]  ? preempt_schedule_irq+0xb0/0x150
[  165.685864][    C1]  ? irqentry_exit+0x6f/0x90
[  165.685871][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  165.685877][    C1]  ? __sanitizer_cov_trace_cmp8+0x11/0x90
[  165.685886][    C1]  ? __phys_addr+0x6d/0x180
[  165.685895][    C1]  ? __memcg_slab_post_alloc_hook+0x260/0x7f0
[  165.685901][    C1]  ? kmem_cache_alloc_noprof+0x2bf/0x3c0
[  165.685907][    C1]  ? alloc_empty_file+0x55/0x1d0
[  165.685915][    C1]  ? path_openat+0x107/0x3830
[  165.685924][    C1]  ? do_filp_open+0x1fa/0x410
[  165.685933][    C1]  ? do_sys_openat2+0x121/0x1c0
[  165.685941][    C1]  ? __x64_sys_openat+0x138/0x170
[  165.685949][    C1]  ? do_syscall_64+0xfa/0x3b0
[  165.686005][    C1]  kasan_save_free_info+0x46/0x50
[  165.686013][    C1]  __kasan_slab_free+0x62/0x70
[  165.686020][    C1]  slab_free_after_rcu_debug+0x129/0x2a0
[  165.686029][    C1]  ? __pfx_slab_free_after_rcu_debug+0x10/0x10
[  165.686038][    C1]  ? rcu_core+0xc34/0x1710
[  165.686044][    C1]  rcu_core+0xca8/0x1710
[  165.686059][    C1]  ? __pfx_rcu_core+0x10/0x10
[  165.686066][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  165.686074][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  165.686083][    C1]  ? irqentry_exit+0x74/0x90
[  165.686095][    C1]  ? __pfx_rcu_core_si+0x10/0x10
[  165.686109][    C1]  handle_softirqs+0x286/0x870
[  165.686118][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  165.686128][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  165.686137][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  165.686149][    C1]  __irq_exit_rcu+0xca/0x1f0
[  165.686156][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  165.686167][    C1]  irq_exit_rcu+0x9/0x30
[  165.686174][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  165.686182][    C1]  </IRQ>
[  165.686184][    C1]  <TASK>
[  165.686187][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  165.686194][    C1] RIP: 0010:preempt_schedule_irq+0xb0/0x150
[  165.686202][    C1] Code: 24 20 f6 44 24 21 02 74 0c 90 0f 0b 48 f7 03 08 00 00 00 74 64 bf 01 00 00 00 e8 1b 2d 21 f6 e8 56 00 58 f6 fb bf 01 00 00 00 <e8> 1b ab ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24
[  165.686207][    C1] RSP: 0018:ffffc9000402f6a0 EFLAGS: 00000286
[  165.686212][    C1] RAX: 695fc075ce6c8900 RBX: 0000000000000000 RCX: 695fc075ce6c8900
[  165.686217][    C1] RDX: 0000000000000000 RSI: ffffffff8d998874 RDI: 0000000000000001
[  165.686220][    C1] RBP: ffffc9000402f750 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  165.686225][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 0000000000000000
[  165.686229][    C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000805ed4
[  165.686241][    C1]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  165.686249][    C1]  ? alloc_empty_file+0x55/0x1d0
[  165.686256][    C1]  ? do_filp_open+0x1fa/0x410
[  165.686265][    C1]  ? do_sys_openat2+0x121/0x1c0
[  165.686276][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  165.686284][    C1]  irqentry_exit+0x6f/0x90
[  165.686292][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  165.686298][    C1] RIP: 0010:__sanitizer_cov_trace_cmp8+0x11/0x90
[  165.686307][    C1] Code: 09 cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 10 a0 92 <65> 8b 15 38 e5 df 10 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75
[  165.686312][    C1] RSP: 0018:ffffc9000402f818 EFLAGS: 00000206
[  165.686317][    C1] RAX: ffffffff81746e5d RBX: 00000001077b5400 RCX: ffff8880214e1cc0
[  165.686321][    C1] RDX: 0000000000000002 RSI: ffff8881877b5400 RDI: 00000001077b5400
[  165.686325][    C1] RBP: dffffc0000000000 R08: ffffc9000402f910 R09: 000000004c6e4496
[  165.686329][    C1] R10: 000000000000000a R11: ffffffff81acffe0 R12: dffffc0000000000
[  165.686333][    C1] R13: 0000000000000000 R14: ffff8881877b5400 R15: dffffc0000000000
[  165.686339][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  165.686349][    C1]  ? __phys_addr+0x6d/0x180
[  165.686360][    C1]  __phys_addr+0x6d/0x180
[  165.686368][    C1]  __memcg_slab_post_alloc_hook+0x260/0x7f0
[  165.686382][    C1]  kmem_cache_alloc_noprof+0x2bf/0x3c0
[  165.686389][    C1]  ? alloc_empty_file+0x55/0x1d0
[  165.686399][    C1]  alloc_empty_file+0x55/0x1d0
[  165.686408][    C1]  path_openat+0x107/0x3830
[  165.686418][    C1]  ? trace_call_bpf+0xb7/0x850
[  165.686426][    C1]  ? trace_call_bpf+0xb7/0x850
[  165.686436][    C1]  ? trace_call_bpf+0xb7/0x850
[  165.686443][    C1]  ? trace_call_bpf+0xb7/0x850
[  165.686450][    C1]  ? trace_call_bpf+0x5ba/0x850
[  165.686455][    C1]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  165.686465][    C1]  ? trace_call_bpf+0xb7/0x850
[  165.686474][    C1]  ? __pfx_path_openat+0x10/0x10
[  165.686483][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  165.686493][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  165.686501][    C1]  ? __might_fault+0xb0/0x130
[  165.686514][    C1]  do_filp_open+0x1fa/0x410
[  165.686525][    C1]  ? __pfx_do_filp_open+0x10/0x10
[  165.686547][    C1]  ? do_sys_openat2+0x10a/0x1c0
[  165.686558][    C1]  do_sys_openat2+0x121/0x1c0
[  165.686568][    C1]  ? __pfx_do_sys_openat2+0x10/0x10
[  165.686576][    C1]  ? irqentry_exit+0x74/0x90
[  165.686590][    C1]  __x64_sys_openat+0x138/0x170
[  165.686601][    C1]  do_syscall_64+0xfa/0x3b0
[  165.686610][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.686616][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  165.686625][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.686631][    C1] RIP: 0033:0x7fef2098e9a9
[  165.686638][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  165.686643][    C1] RSP: 002b:00007fef2170f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  165.686650][    C1] RAX: ffffffffffffffda RBX: 00007fef20bb5fa0 RCX: 00007fef2098e9a9
[  165.686654][    C1] RDX: 00000000000026e1 RSI: 0000200000000940 RDI: ffffffffffffff9c
[  165.686658][    C1] RBP: 00007fef20a10d69 R08: 0000000000000000 R09: 0000000000000000
[  165.686662][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  165.686665][    C1] R13: 0000000000000000 R14: 00007fef20bb5fa0 R15: 00007ffd5b3f8868
[  165.686676][    C1]  </TASK>
[  165.947081][    C1] sched: DL replenish lagged too much

VM DIAGNOSIS:
10:03:21  Registers:
info registers vcpu 0

CPU#0
RAX=e9cfe060c1f3a600 RBX=ffffffff819769d8 RCX=e9cfe060c1f3a600 RDX=0000000000000001
RSI=ffffffff8d998874 RDI=ffffffff8be29f40 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa1e8f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6e84f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000559e77182028 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000005d1960e 000000000000003c XMM01=7a79730000000000 00000000148d7f33
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffff00 0000000000000000 XMM05=0100000000000000 00000000000002ff
XMM06=0100000000000000 00000000000002ff XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000061 RBX=0000000000000061 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001dfb30
R8 =ffff888107630237 R9 =1ffff11020ec6046 R10=dffffc0000000000 R11=ffffffff85472aa0
R12=dffffc0000000000 R13=ffffffff99af58c3 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff85472b1c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fef2170f6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3030fff8 CR3=0000000022bba000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fef20b86478 00007fef20b86450 XMM03=00007fef20b86488 00007fef20b86480
XMM04=00007fef216ed100 00007fef20b86440 XMM05=00007fef20b86458 00007fef20b864a0
XMM06=00007fef20b86498 00007fef20b86490 XMM07=00007fef20b86488 00007fef20b86480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fef20a11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
