last executing test programs:

2.220487678s ago: executing program 1 (id=32):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x17)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r3}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000540))

2.158989018s ago: executing program 1 (id=34):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2')
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1')

2.093323566s ago: executing program 1 (id=36):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e00)=@base={0xf, 0x4, 0x4, 0x9}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001c80)={{r0}, &(0x7f0000001c00), &(0x7f0000001c40)='%-5lx  \x00'}, 0x20)

2.093061565s ago: executing program 1 (id=38):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600200001400000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a70000090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100100040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x0)

1.975735923s ago: executing program 1 (id=40):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000200850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
perf_event_open$cgroup(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10)
syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/time_for_children\x00')
mkdir(0x0, 0x101)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
gettid()
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)

1.619885408s ago: executing program 2 (id=45):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xd, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x29}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000640)="6a03e63a4905f8e8dc01cf21f8f7", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e021fffffff000000000f00000017d3a705251e6182949a369f3d3b48dfd8cd3f9367c1fa51f60a64c9f4d4938037e786a6d0bdd7000000000000eaffffffb3d59256a5a2fd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x200040c0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x7, 0x1}, 0x100c, 0x0, 0x2, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00'}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

1.455009924s ago: executing program 0 (id=49):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000}, 0x0, 0x9, 0xacd9, 0x0, 0xfffffffffff7bbfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))

1.359307397s ago: executing program 0 (id=50):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x3, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x1321, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = socket$kcm(0x2b, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x12200)
setsockopt$sock_attach_bpf(r0, 0x6, 0x13, &(0x7f0000000200), 0x4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000005000000095"], &(0x7f00000006c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={0x0, 0x0, 0x2a}, 0x28)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x10000, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80521, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0xfffffffffffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x1408001, 0xaea}, 0x957c5, 0x32, 0xfffffbff, 0x5, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000, 0xfffffffffffffffc}, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)

1.259284193s ago: executing program 2 (id=51):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
getpid()
sendmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}, 0x8841)

1.148780663s ago: executing program 2 (id=52):
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1008d2}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x40}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.148645923s ago: executing program 2 (id=53):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80)

1.088898031s ago: executing program 1 (id=54):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x6c8100, 0x0)
close(r1)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22ff892f"], 0xffbf)

1.088600769s ago: executing program 2 (id=55):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000690c00000000000063000000000000019500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37)

1.0882543s ago: executing program 2 (id=56):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x89a2, &(0x7f0000000080)={'bridge0\x00', @random="0c0000000988"})
r1 = socket$kcm(0x2, 0x3, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2, &(0x7f0000000100)="6ba4a2"}, 0x20)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb1, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018120000", @ANYRES32=r3, @ANYBLOB="00000000000000006608ffffffff0000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b1af8ff00000000bfa10000000000000701000000feffffb70200009f000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000}, 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2}, 0x48)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x30}, @map_fd={0x18, 0x2, 0x1, 0x0, r6}]}, &(0x7f0000000080)='GPL\x00'}, 0x94)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000580)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xfffffff1}, [@call={0x85, 0x0, 0x0, 0x20}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f00000006c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x44, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000500)="1400000024000b475280ce6e7806f37201cf3494", 0x14}], 0x1}, 0x44)
ioctl$SIOCSIFHWADDR(r1, 0x8916, &(0x7f0000000040)={'syz_tun\x00', @random="0200ac7fac14"})

1.019838917s ago: executing program 0 (id=57):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0xe, 0x0, &(0x7f0000000080)="f8ad48cc02cb29dcc8007f5b88a8", 0x0, 0x4, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x1e)

1.019635112s ago: executing program 0 (id=58):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

948.122913ms ago: executing program 0 (id=59):
r0 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x0, 0xfffffffd}, 0x80, &(0x7f0000000680)=[{0x0}], 0x1, 0x0, 0x0, 0x900}, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x1c005, 0x8, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/15], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r2, 0x107, 0x8, &(0x7f00000000c0), 0x8)
recvmsg$kcm(r2, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x20)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
socket$kcm(0x11, 0x200000000000002, 0x300)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="18080000000000000000000000000000180000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
r6 = socket$kcm(0x29, 0x5, 0x0)
write$cgroup_pressure(r6, &(0x7f0000000140)={'full'}, 0xfffffdef)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf, 0x1a500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x6, @perf_bp={0x0, 0xb}, 0x105c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x400, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7fffffffffffffff, 0x1}, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x4402000a, 0x4, 0x0, 0x800, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@ifindex, 0x12, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], <r7=>0x0}, 0x40)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@fallback=r5, r5, 0x22, 0x1b, r5, @void, @value=r5, @void, @void, r7}, 0x20)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, &(0x7f0000000000))
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x13, 0x0, &(0x7f00000002c0)='GPL\x00', 0xff, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680), 0x0, 0x10, 0x4b1f}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x4, 0x7f, 0x1}, 0x50)

0s ago: executing program 0 (id=60):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x5, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xc9}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:2072' (ED25519) to the list of known hosts.
syzkaller login: [   41.150130][ T5760] cgroup: Unknown subsys name 'net'
[   41.249576][ T5760] cgroup: Unknown subsys name 'cpuset'
[   41.253227][ T5760] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.493223][ T5760] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.742560][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.746255][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.750054][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.753208][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.756013][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.767235][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.773194][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.776137][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.779153][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.782160][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.784902][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.785076][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.788654][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.798837][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.804534][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.982003][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   46.045227][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   46.071900][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.074620][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.077367][ T5841] bridge_slave_0: entered allmulticast mode
[   46.080277][ T5841] bridge_slave_0: entered promiscuous mode
[   46.105975][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.109089][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.111537][ T5841] bridge_slave_1: entered allmulticast mode
[   46.114305][ T5841] bridge_slave_1: entered promiscuous mode
[   46.124264][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   46.141570][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.152222][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.197946][ T5841] team0: Port device team_slave_0 added
[   46.203796][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.206251][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.209746][ T5835] bridge_slave_0: entered allmulticast mode
[   46.212505][ T5835] bridge_slave_0: entered promiscuous mode
[   46.215858][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.218375][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.220912][ T5835] bridge_slave_1: entered allmulticast mode
[   46.223653][ T5835] bridge_slave_1: entered promiscuous mode
[   46.227569][ T5841] team0: Port device team_slave_1 added
[   46.269527][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.273089][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.275369][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.284256][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.296318][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.300583][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.303552][ T5832] bridge_slave_0: entered allmulticast mode
[   46.307402][ T5832] bridge_slave_0: entered promiscuous mode
[   46.311812][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.315204][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.317872][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.326252][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.330270][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.333290][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.336164][ T5832] bridge_slave_1: entered allmulticast mode
[   46.339486][ T5832] bridge_slave_1: entered promiscuous mode
[   46.369035][ T5835] team0: Port device team_slave_0 added
[   46.380570][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.391710][ T5835] team0: Port device team_slave_1 added
[   46.401667][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.414539][ T5841] hsr_slave_0: entered promiscuous mode
[   46.417639][ T5841] hsr_slave_1: entered promiscuous mode
[   46.441749][ T5832] team0: Port device team_slave_0 added
[   46.451641][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.453994][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.462883][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.468888][ T5832] team0: Port device team_slave_1 added
[   46.474693][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.477663][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.486088][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.518004][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.520364][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.529839][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.543819][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.546450][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.557785][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.585636][ T5835] hsr_slave_0: entered promiscuous mode
[   46.590050][ T5835] hsr_slave_1: entered promiscuous mode
[   46.592308][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.594946][ T5835] Cannot create hsr debugfs directory
[   46.613563][ T5832] hsr_slave_0: entered promiscuous mode
[   46.615945][ T5832] hsr_slave_1: entered promiscuous mode
[   46.618867][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.621443][ T5832] Cannot create hsr debugfs directory
[   46.764879][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.782768][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.788048][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.796072][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.828156][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.835843][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.843442][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.849150][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.859633][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.862178][ T5841] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.864877][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.867382][ T5841] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.903241][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.905710][ T5835] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.908343][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.910773][ T5835] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.921673][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.938770][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.945859][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.958048][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.977493][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.981145][   T26] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.984319][   T26] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.989611][   T26] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.993198][   T26] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.024400][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   47.033992][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.048052][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.050679][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.060766][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   47.065497][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.068044][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.084214][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.087301][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.093819][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.096289][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.143432][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   47.165932][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.190756][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   47.220195][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.222705][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.228136][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.230668][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.244360][ T5832] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   47.249400][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   47.279038][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.296659][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.346578][ T5835] veth0_vlan: entered promiscuous mode
[   47.358456][ T5835] veth1_vlan: entered promiscuous mode
[   47.367836][ T5841] veth0_vlan: entered promiscuous mode
[   47.382998][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.393384][ T5841] veth1_vlan: entered promiscuous mode
[   47.400935][ T5835] veth0_macvtap: entered promiscuous mode
[   47.405559][ T5835] veth1_macvtap: entered promiscuous mode
[   47.421077][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.428446][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.436470][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.440606][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.444247][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.448359][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.471984][ T5841] veth0_macvtap: entered promiscuous mode
[   47.481318][ T5841] veth1_macvtap: entered promiscuous mode
[   47.489952][ T5832] veth0_vlan: entered promiscuous mode
[   47.515826][ T5832] veth1_vlan: entered promiscuous mode
[   47.530052][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.536630][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.541859][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.561446][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.565212][ T5832] veth0_macvtap: entered promiscuous mode
[   47.576652][ T5832] veth1_macvtap: entered promiscuous mode
[   47.581479][  T718] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.582298][ T5841] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.587581][  T718] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.587634][ T5841] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.593205][ T5841] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.596219][ T5841] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.612759][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.631914][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.648564][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.651541][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.654428][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.660258][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.666488][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.733480][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.736175][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.753727][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.756365][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.785687][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.790508][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.808977][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.817699][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.857894][ T5839] Bluetooth: hci2: command tx timeout
[   47.858574][   T54] Bluetooth: hci0: command tx timeout
[   47.867208][   T54] Bluetooth: hci1: command tx timeout
[   47.916091][ T5906] netlink: 'syz.0.1': attribute type 10 has an invalid length.
[   47.935174][ T5906] team0: Port device dummy0 added
[   48.015997][ T5910] netlink: 830 bytes leftover after parsing attributes in process `syz.1.7'.
[   48.247894][ T5924] netlink: 'syz.0.13': attribute type 3 has an invalid length.
[   48.250572][ T5924] netlink: 'syz.0.13': attribute type 1 has an invalid length.
[   48.253110][ T5924] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.13'.
[   49.190013][ T5927] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14'.
[   49.240219][ T5937] netlink: 'syz.1.19': attribute type 21 has an invalid length.
[   49.261302][ T5939] syz.1.20 uses obsolete (PF_INET,SOCK_PACKET)
[   49.264695][ T5939] dummy0: entered promiscuous mode
[   49.266608][ T5939] dummy0: entered allmulticast mode
[   49.290986][ T5941] netlink: 'syz.0.21': attribute type 10 has an invalid length.
[   49.301355][ T5941] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[   49.304861][ T5941] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   49.309818][ T5941] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[   49.512652][   T54] Bluetooth: hci1: SCO packet for unknown connection handle 0
[   49.552386][ T5960] netlink: 'syz.0.30': attribute type 29 has an invalid length.
[   49.593013][ T5960] netlink: 'syz.0.30': attribute type 29 has an invalid length.
[   49.613755][ T5968] lo: entered allmulticast mode
[   49.621782][ T5968] lo: entered promiscuous mode
[   49.623440][ T5968] lo: left allmulticast mode
[   49.686232][ T5974] netlink: 'syz.1.38': attribute type 21 has an invalid length.
[   49.690628][ T5974] netlink: 132 bytes leftover after parsing attributes in process `syz.1.38'.
[   49.731969][ T5976] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   49.758806][    C0] hrtimer: interrupt took 33567 ns
[   49.947540][   T54] Bluetooth: hci2: command tx timeout
[   49.956331][   T54] Bluetooth: hci1: command tx timeout
[   49.958922][ T5839] Bluetooth: hci0: command tx timeout
[   50.706715][ T6012] syzkaller0: entered promiscuous mode
[   50.710473][ T6012] syzkaller0: entered allmulticast mode
[   50.715303][ T6016] bridge0: port 3(ip6gretap0) entered blocking state
[   50.719243][ T6016] bridge0: port 3(ip6gretap0) entered disabled state
[   50.721549][ T6016] ip6gretap0: entered allmulticast mode
[   50.724479][ T6016] ip6gretap0: entered promiscuous mode
[   50.728870][ T6016] bridge0: port 3(ip6gretap0) entered blocking state
[   50.731280][ T6016] bridge0: port 3(ip6gretap0) entered forwarding state
[   51.762142][ T6027] netlink: 'syz.0.60': attribute type 10 has an invalid length.
[   51.764793][ T6027] netlink: 40 bytes leftover after parsing attributes in process `syz.0.60'.
[   52.007230][ T6027] dummy0: entered promiscuous mode
[   52.009665][ T6027] 
[   52.010545][ T6027] ======================================================
[   52.012950][ T6027] WARNING: possible circular locking dependency detected
[   52.015284][ T6027] 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 Not tainted
[   52.016999][   T54] Bluetooth: hci1: command tx timeout
[   52.018604][ T6027] ------------------------------------------------------
[   52.018610][ T6027] syz.0.60/6027 is trying to acquire lock:
[   52.020464][   T54] Bluetooth: hci0: command tx timeout
[   52.022788][ T6027] ffff888022024e00
[   52.024727][   T54] Bluetooth: hci2: command tx timeout
[   52.026508][ T6027]  (team->team_lock_key){+.+.}-{4:4}, at: team_device_event+0x544/0xa20
[   52.032524][ T6027] 
[   52.032524][ T6027] but task is already holding lock:
[   52.035149][ T6027] ffff888027a5cd30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0
[   52.038892][ T6027] 
[   52.038892][ T6027] which lock already depends on the new lock.
[   52.038892][ T6027] 
[   52.042403][ T6027] 
[   52.042403][ T6027] the existing dependency chain (in reverse order) is:
[   52.045316][ T6027] 
[   52.045316][ T6027] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}:
[   52.048139][ T6027]        lock_acquire+0x120/0x360
[   52.049781][ T6027]        __mutex_lock+0x182/0xe80
[   52.051448][ T6027]        dev_set_mtu+0x10e/0x260
[   52.053054][ T6027]        team_add_slave+0x8b8/0x2840
[   52.054848][ T6027]        do_set_master+0x533/0x6d0
[   52.056584][ T6027]        do_setlink+0xcf0/0x41c0
[   52.058263][ T6027]        rtnl_newlink+0x160b/0x1c70
[   52.060017][ T6027]        rtnetlink_rcv_msg+0x7cf/0xb70
[   52.061870][ T6027]        netlink_rcv_skb+0x208/0x470
[   52.063650][ T6027]        netlink_unicast+0x75c/0x8e0
[   52.065337][ T6027]        netlink_sendmsg+0x805/0xb30
[   52.067135][ T6027]        __sock_sendmsg+0x21c/0x270
[   52.068895][ T6027]        ____sys_sendmsg+0x505/0x830
[   52.070709][ T6027]        ___sys_sendmsg+0x21f/0x2a0
[   52.072482][ T6027]        __x64_sys_sendmsg+0x19b/0x260
[   52.074238][ T6027]        do_syscall_64+0xfa/0x3b0
[   52.075879][ T6027]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   52.078098][ T6027] 
[   52.078098][ T6027] -> #0 (team->team_lock_key){+.+.}-{4:4}:
[   52.080735][ T6027]        validate_chain+0xb9b/0x2140
[   52.082522][ T6027]        __lock_acquire+0xab9/0xd20
[   52.084290][ T6027]        lock_acquire+0x120/0x360
[   52.085988][ T6027]        __mutex_lock+0x182/0xe80
[   52.087705][ T6027]        team_device_event+0x544/0xa20
[   52.089540][ T6027]        notifier_call_chain+0x1b6/0x3e0
[   52.091456][ T6027]        __dev_notify_flags+0x21b/0x2e0
[   52.093258][ T6027]        netif_change_flags+0xe8/0x1a0
[   52.095088][ T6027]        do_setlink+0xc55/0x41c0
[   52.096759][ T6027]        rtnl_setlink+0x604/0x900
[   52.098381][ T6027]        rtnetlink_rcv_msg+0x7cf/0xb70
[   52.100166][ T6027]        netlink_rcv_skb+0x208/0x470
[   52.101849][ T6027]        netlink_unicast+0x75c/0x8e0
[   52.103635][ T6027]        netlink_sendmsg+0x805/0xb30
[   52.105418][ T6027]        __sock_sendmsg+0x21c/0x270
[   52.107188][ T6027]        ____sys_sendmsg+0x505/0x830
[   52.108966][ T6027]        ___sys_sendmsg+0x21f/0x2a0
[   52.110747][ T6027]        __x64_sys_sendmsg+0x19b/0x260
[   52.112601][ T6027]        do_syscall_64+0xfa/0x3b0
[   52.114265][ T6027]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   52.116342][ T6027] 
[   52.116342][ T6027] other info that might help us debug this:
[   52.116342][ T6027] 
[   52.119733][ T6027]  Possible unsafe locking scenario:
[   52.119733][ T6027] 
[   52.122251][ T6027]        CPU0                    CPU1
[   52.124048][ T6027]        ----                    ----
[   52.125860][ T6027]   lock(&dev_instance_lock_key#3);
[   52.127627][ T6027]                                lock(team->team_lock_key);
[   52.130093][ T6027]                                lock(&dev_instance_lock_key#3);
[   52.132686][ T6027]   lock(team->team_lock_key);
[   52.134308][ T6027] 
[   52.134308][ T6027]  *** DEADLOCK ***
[   52.134308][ T6027] 
[   52.136979][ T6027] 2 locks held by syz.0.60/6027:
[   52.138657][ T6027]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_setlink+0x4ea/0x900
[   52.141518][ T6027]  #1: ffff888027a5cd30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0
[   52.144876][ T6027] 
[   52.144876][ T6027] stack backtrace:
[   52.146858][ T6027] CPU: 0 UID: 0 PID: 6027 Comm: syz.0.60 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[   52.146869][ T6027] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   52.146874][ T6027] Call Trace:
[   52.146880][ T6027]  <TASK>
[   52.146885][ T6027]  dump_stack_lvl+0x189/0x250
[   52.146900][ T6027]  ? __pfx_dump_stack_lvl+0x10/0x10
[   52.146910][ T6027]  ? __pfx__printk+0x10/0x10
[   52.146926][ T6027]  ? print_lock_name+0xde/0x100
[   52.146943][ T6027]  print_circular_bug+0x2ee/0x310
[   52.146959][ T6027]  check_noncircular+0x134/0x160
[   52.146976][ T6027]  validate_chain+0xb9b/0x2140
[   52.147007][ T6027]  __lock_acquire+0xab9/0xd20
[   52.147021][ T6027]  ? team_device_event+0x544/0xa20
[   52.147030][ T6027]  lock_acquire+0x120/0x360
[   52.147037][ T6027]  ? team_device_event+0x544/0xa20
[   52.147057][ T6027]  __mutex_lock+0x182/0xe80
[   52.147089][ T6027]  ? team_device_event+0x544/0xa20
[   52.147102][ T6027]  ? perf_trace_lock+0x2f8/0x3b0
[   52.147116][ T6027]  ? team_device_event+0x544/0xa20
[   52.147125][ T6027]  ? fib_rebalance+0x8e/0x9a0
[   52.147139][ T6027]  ? __pfx___mutex_lock+0x10/0x10
[   52.147155][ T6027]  ? fib_sync_up+0x76d/0x7b0
[   52.147173][ T6027]  team_device_event+0x544/0xa20
[   52.147188][ T6027]  notifier_call_chain+0x1b6/0x3e0
[   52.147204][ T6027]  __dev_notify_flags+0x21b/0x2e0
[   52.147216][ T6027]  ? __pfx___dev_notify_flags+0x10/0x10
[   52.147223][ T6027]  ? __dev_change_flags+0x4cc/0x6d0
[   52.147247][ T6027]  netif_change_flags+0xe8/0x1a0
[   52.147260][ T6027]  do_setlink+0xc55/0x41c0
[   52.147281][ T6027]  ? __pfx_do_setlink+0x10/0x10
[   52.147294][ T6027]  ? __pfx_perf_trace_lock+0x10/0x10
[   52.147306][ T6027]  ? do_raw_spin_lock+0x121/0x290
[   52.147317][ T6027]  ? __mutex_lock+0xa0d/0xe80
[   52.147333][ T6027]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[   52.147343][ T6027]  ? lockdep_hardirqs_on+0x9c/0x150
[   52.147354][ T6027]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   52.147364][ T6027]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   52.147377][ T6027]  ? rcu_is_watching+0x15/0xb0
[   52.147390][ T6027]  ? __mutex_lock+0xa6d/0xe80
[   52.147401][ T6027]  ? __mutex_lock+0x51b/0xe80
[   52.147416][ T6027]  ? rtnl_setlink+0x4ea/0x900
[   52.147425][ T6027]  ? __pfx___mutex_lock+0x10/0x10
[   52.147443][ T6027]  ? ns_capable+0x8a/0xf0
[   52.147458][ T6027]  rtnl_setlink+0x604/0x900
[   52.147470][ T6027]  ? __pfx_rtnl_setlink+0x10/0x10
[   52.147533][ T6027]  ? rcu_read_unlock+0x87/0xa0
[   52.147559][ T6027]  ? __pfx_rtnl_setlink+0x10/0x10
[   52.147566][ T6027]  rtnetlink_rcv_msg+0x7cf/0xb70
[   52.147582][ T6027]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[   52.147594][ T6027]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   52.147604][ T6027]  ? ref_tracker_free+0x63a/0x7d0
[   52.147618][ T6027]  ? perf_trace_run_bpf_submit+0xee/0x170
[   52.147638][ T6027]  netlink_rcv_skb+0x208/0x470
[   52.147649][ T6027]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   52.147663][ T6027]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   52.147682][ T6027]  ? netlink_deliver_tap+0x2e/0x1b0
[   52.147690][ T6027]  ? netlink_deliver_tap+0x2e/0x1b0
[   52.147702][ T6027]  netlink_unicast+0x75c/0x8e0
[   52.147722][ T6027]  netlink_sendmsg+0x805/0xb30
[   52.147737][ T6027]  ? __pfx_netlink_sendmsg+0x10/0x10
[   52.147748][ T6027]  ? aa_sock_msg_perm+0x94/0x160
[   52.147760][ T6027]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   52.147770][ T6027]  ? __pfx_netlink_sendmsg+0x10/0x10
[   52.147779][ T6027]  __sock_sendmsg+0x21c/0x270
[   52.147794][ T6027]  ____sys_sendmsg+0x505/0x830
[   52.147808][ T6027]  ? __pfx_____sys_sendmsg+0x10/0x10
[   52.147824][ T6027]  ? import_iovec+0x74/0xa0
[   52.147835][ T6027]  ___sys_sendmsg+0x21f/0x2a0
[   52.147846][ T6027]  ? __pfx____sys_sendmsg+0x10/0x10
[   52.147871][ T6027]  ? __fget_files+0x2a/0x420
[   52.147890][ T6027]  ? __fget_files+0x2a/0x420
[   52.147898][ T6027]  ? __fget_files+0x3a0/0x420
[   52.147915][ T6027]  __x64_sys_sendmsg+0x19b/0x260
[   52.147927][ T6027]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   52.147944][ T6027]  ? rcu_is_watching+0x15/0xb0
[   52.147957][ T6027]  ? do_syscall_64+0xbe/0x3b0
[   52.147970][ T6027]  do_syscall_64+0xfa/0x3b0
[   52.147980][ T6027]  ? lockdep_hardirqs_on+0x9c/0x150
[   52.147990][ T6027]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   52.147998][ T6027]  ? exc_page_fault+0x9f/0xf0
[   52.148010][ T6027]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   52.148018][ T6027] RIP: 0033:0x7fbb84f8eb69
[   52.148027][ T6027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   52.148034][ T6027] RSP: 002b:00007fbb82df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   52.148044][ T6027] RAX: ffffffffffffffda RBX: 00007fbb851b5fa0 RCX: 00007fbb84f8eb69
[   52.148052][ T6027] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[   52.148057][ T6027] RBP: 00007fbb85011df1 R08: 0000000000000000 R09: 0000000000000000
[   52.148062][ T6027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   52.148091][ T6027] R13: 0000000000000000 R14: 00007fbb851b5fa0 R15: 00007ffd75b40498
[   52.148109][ T6027]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   52.348768][ T6027] team0: Port device dummy0 removed
[   52.409756][ T6027] bridge0: port 3(dummy0) entered blocking state
[   52.412691][ T6027] bridge0: port 3(dummy0) entered disabled state
[   52.414846][ T6027] dummy0: entered allmulticast mode
[   52.571896][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.630054][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.699956][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.750786][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.827809][   T13] ip6gretap0: left allmulticast mode
[   52.830308][   T13] ip6gretap0: left promiscuous mode
[   52.832286][   T13] bridge0: port 3(ip6gretap0) entered disabled state
[   52.835361][   T13] bridge_slave_1: left allmulticast mode
[   52.837348][   T13] bridge_slave_1: left promiscuous mode
[   52.839184][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.842291][   T13] bridge_slave_0: left allmulticast mode
[   52.844208][   T13] bridge_slave_0: left promiscuous mode
[   52.846131][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.909045][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   52.912639][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   52.916146][   T13] bond0 (unregistering): Released all slaves
[   53.067993][   T13] hsr_slave_0: left promiscuous mode
[   53.070263][   T13] hsr_slave_1: left promiscuous mode
[   53.072371][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   53.074945][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   53.077871][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   53.080278][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   53.084279][   T13] veth1_macvtap: left promiscuous mode
[   53.086177][   T13] veth0_macvtap: left promiscuous mode
[   53.088276][   T13] veth1_vlan: left promiscuous mode
[   53.090277][   T13] veth0_vlan: left promiscuous mode
[   53.162962][   T13] team0 (unregistering): Port device team_slave_1 removed
[   53.172222][   T13] team0 (unregistering): Port device team_slave_0 removed
[   53.429220][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.460464][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.506080][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.541650][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.601391][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.637384][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.682755][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.721376][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.768337][   T13] dummy0: left allmulticast mode
[   53.770146][   T13] bridge0: port 3(dummy0) entered disabled state
[   53.773805][   T13] bridge_slave_1: left allmulticast mode
[   53.781168][   T13] bridge_slave_1: left promiscuous mode
[   53.783165][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.786166][   T13] bridge_slave_0: left allmulticast mode
[   53.788567][   T13] bridge_slave_0: left promiscuous mode
[   53.790531][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.793955][   T13] bridge_slave_1: left allmulticast mode
[   53.795799][   T13] bridge_slave_1: left promiscuous mode
[   53.798018][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.800922][   T13] bridge_slave_0: left allmulticast mode
[   53.802762][   T13] bridge_slave_0: left promiscuous mode
[   53.804588][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.873400][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   53.877166][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   53.880499][   T13] bond0 (unregistering): Released all slaves
[   53.943385][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   53.947781][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   53.951125][   T13] bond0 (unregistering): Released all slaves
[   54.192220][   T13] hsr_slave_0: left promiscuous mode
[   54.194344][   T13] hsr_slave_1: left promiscuous mode
[   54.196379][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   54.200386][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   54.203118][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   54.205635][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   54.214196][   T13] hsr_slave_0: left promiscuous mode
[   54.216307][   T13] hsr_slave_1: left promiscuous mode
[   54.219291][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   54.221906][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   54.224678][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   54.228772][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   54.234027][   T13] veth1_macvtap: left promiscuous mode
[   54.235896][   T13] veth0_macvtap: left promiscuous mode
[   54.238618][   T13] veth1_vlan: left promiscuous mode
[   54.240437][   T13] veth0_vlan: left promiscuous mode
[   54.242925][   T13] veth1_macvtap: left promiscuous mode
[   54.244825][   T13] veth0_macvtap: left promiscuous mode
[   54.246645][   T13] veth1_vlan: left promiscuous mode
[   54.248722][   T13] veth0_vlan: left promiscuous mode
[   54.346345][   T13] team0 (unregistering): Port device team_slave_1 removed
[   54.364867][   T13] team0 (unregistering): Port device team_slave_0 removed
[   54.458850][   T13] team0 (unregistering): Port device team_slave_1 removed
[   54.471253][   T13] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
12:44:37  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000005ceb RDI=0000000000005cec RBP=00000000000003f8 RSP=ffffc90003f25fb0
R8 =ffff888107760237 R9 =1ffff11020eec046 R10=dffffc0000000000 R11=ffffffff85471fa0
R12=dffffc0000000000 R13=ffffffff99af589e R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff8547201c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fbb82df66c0 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=0000000022e6a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000ffa11f 0000001103876b08
XMM02=d317e59e0000000d 000a000d00140004 XMM03=369a9482611e2505 a756b5ea24bc6044
XMM04=5398f6005abbc509 450ef5fcd7bdd0a6 XMM05=86e7378093d1f5c9 840af651369a9482
XMM06=611e2505a756b5ea 24bc6044d317e59e XMM07=0000000d000a000d 0014000400000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fbb85012f89
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81a0f7a5 RBX=ffffffff81a0f764 RCX=ffff88801c740000 RDX=0000000000000000
RSI=ffffffff8be29f60 RDI=ffffffff8be29f20 RBP=ffffc900007cf830 RSP=ffffc900007cf720
R8 =0000000000000001 R9 =0000000000000000 R10=dffffc0000000000 R11=fffffbfff1c2664d
R12=dffffc0000000000 R13=1ffff920000f9ee8 R14=0000000000000200 R15=0000000000000023
RIP=ffffffff81a0f791 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3a240d CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffff00 ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f9f78412f89
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
