last executing test programs:

1.508815753s ago: executing program 1 (id=516):
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x810c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000240), 0x1}, 0x0, 0x9, 0x0, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x2, 0xffffffffffffffff, 0x1)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r1, 0x6, 0xd, &(0x7f0000000000), 0x4)
setsockopt$sock_attach_bpf(r1, 0x1, 0x24, &(0x7f0000000000), 0x4)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x40020000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x94)
sendmsg$inet(r1, 0x0, 0x40040)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x40)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x4080, 0x0, 0x0, 0x7, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50)
r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r4, r5, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r6, r4, 0x4, r4}, 0x10)
perf_event_open(0x0, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_int(r7, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f00000000c0)=0x6, 0x12)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="620ac4ff000000007110b30000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a0000f184000000060000009500000000000000c5a29a38724c254d798708b315bd0275"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
socket$kcm(0x2, 0x200000000000001, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x89fe, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r9)

1.508382647s ago: executing program 2 (id=517):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x1}, 0x50)
r1 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r1, 0x1, 0x43, &(0x7f0000000000), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x1}, 0x94)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0xa5811, &(0x7f0000000180)=ANY=[])
r2 = socket$can_raw(0x1d, 0x3, 0x1)
sendmsg(r2, &(0x7f0000000300)={&(0x7f00000001c0)=@l2={0x1f, 0x3, @any, 0x5, 0x1}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000240)="dd354f7644830898b45338d0f0", 0xfffffe87}], 0x1}, 0x1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000640)={r0, &(0x7f00000003c0), 0x0}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
r5 = socket$kcm(0x23, 0x5, 0x0)
setsockopt$sock_attach_bpf(r5, 0x113, 0x4, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', r4}, 0x32)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r1})

1.42969122s ago: executing program 2 (id=519):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000f14100025bd7000fedbdf2508000300010000000800000800010000000000080001000100000008000100020000000b00450075766572627300000800450073727000080003000100000009004500756d616400000000"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x80)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x5, 0x14, 0x0, &(0x7f0000000100)="259a53f271a76d2608fff74588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
socketpair(0x11, 0xa, 0x300, &(0x7f0000000000))
write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2211052f00fe800000fe800000875a65059ff57b00000000000000000000008100ac1414aa000088a8"], 0xcfa4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='workqueue_queue_work\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18)

1.429178116s ago: executing program 0 (id=520):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7ffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1e, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000400000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000209500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff7600000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000af9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$kcm(0x29, 0x5, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000000}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x18}]}, &(0x7f00000003c0)='syzkaller\x00', 0x9, 0xd2, &(0x7f00000002c0)=""/210}, 0x94)

1.259176801s ago: executing program 1 (id=521):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x10000000}, 0x50)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000050000000000000080000000850000007500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
close(r4)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4)
socketpair(0x20, 0x0, 0x0, &(0x7f0000000080))
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000480)=0x6)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110c230000)
r6 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff})
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x1c, 0x4}, 0x20)
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r6, 0x84, 0x6e, &(0x7f0000000000)=r8, 0x20)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@ifindex, 0x1f, 0x1, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], <r9=>0x0}, 0x40)
r10 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000440), 0x529581, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@fallback=r10, r8, 0x8, 0x1, r2, @void, @value=r5, @void, @void, r9}, 0x20)
ioctl$TUNSETOFFLOAD(r5, 0x40047440, 0xf0ff1f00000000)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x8, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000fcffffff0000000080000000850000002a00000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7020000000000dd850000008600000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

1.258843859s ago: executing program 2 (id=522):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
socket$netlink(0x10, 0x3, 0xf)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r2, 0x29, 0x7, &(0x7f0000000000)=r1, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069003600000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608f8ffffff00008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.069576804s ago: executing program 2 (id=523):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x4}, 0xa100, 0xc8, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000001cc0)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc000b2c00db5b686158bbcfe8875a060300001123000000000000000000000000ac1414aa2c"], 0xfdef)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002ac0)=@polexpire={0xd8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@private=0xa010100, @in=@multicast2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, 0x0, 0x0, 0x0, 0x0, 0x1}}, [@sec_ctx={0xc, 0x8, {0xfeb8}}, @mark={0xc, 0x15, {0x0, 0xfffffffa}}]}, 0xd8}}, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r0, 0x0, 0x8000)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '})
r5 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0xb, &(0x7f0000000800)=ANY=[@ANYBLOB="620ac4ff000000007110b300000000001801000020786c2500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000095"], &(0x7f0000000480)='GPL\x00'}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000ff0f00010700000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r8}, 0xc)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')

702.838815ms ago: executing program 0 (id=524):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="905d429b000000000000000000000000001006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000dd0000000600", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x14, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x74c}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x9, 0x4}, 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0xfc, 0x0, 0xfffffffffffffffc, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x1, 0xfefffffffffffffe, 0x2, 0xffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8)
r3 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x29, 0x23, &(0x7f0000000040), 0xcf)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0)
r4 = socket$kcm(0xf, 0x3, 0x2)
r5 = socket$kcm(0x10, 0x2, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x3c, &(0x7f0000000000), 0x4)
recvmsg$kcm(r4, &(0x7f0000000140)={0x0, 0xfffffffffffffec7, 0x0}, 0x0)
sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0xfffffeff, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0)

528.803028ms ago: executing program 0 (id=525):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1e, 0x0, 0x6, 0x8000}, 0x50)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001dc0)={0x18, 0x3, &(0x7f00000005c0)=@framed, &(0x7f0000000740)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000b40)={0x0, 0x5}, 0x8}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x7, &(0x7f0000000180)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1a, 0x3, 0x1000, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0xa, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_ID={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, 0x50}, 0x1, 0x0, 0x0, 0x4050}, 0x4)

409.688199ms ago: executing program 0 (id=526):
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
socket$kcm(0x10, 0x2, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2101, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10010, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000024000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0)

326.022455ms ago: executing program 1 (id=527):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a070300000000000000000200000908000340000000000900010073797a30000040000c0006401a0700000000000000040100"/85], 0x5c}}, 0x0)

322.955541ms ago: executing program 0 (id=528):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
r1 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32)
close(r1) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x4}, {0xfff1, 0xffff}, {0x10, 0xfff2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x200, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6, 0xf}, {0x10, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004040}, 0x40004) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}, 0x1, 0xfdff}, 0x84) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa0}, [@ldst={0x5, 0x3, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a)

209.791142ms ago: executing program 1 (id=529):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a0011"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) (async)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a0011"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x5})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) (async)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x306)
ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f00000000c0)=""/4096)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3000000000000009500000c00000000"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

209.212117ms ago: executing program 2 (id=530):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000680)={0x24c, 0x2, 0x2, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x4}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1000000}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_TUPLE={0xf8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TUPLE={0xb4, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0xb}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x24c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4085) (async)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000680)={0x24c, 0x2, 0x2, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x4}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1000000}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_TUPLE={0xf8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TUPLE={0xb4, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0xb}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x24c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4085)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r2 = socket$kcm(0x29, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0) (async)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001580)=[{&(0x7f0000000480)="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", 0x1000}, {&(0x7f00000001c0)}, {&(0x7f0000000380)="ad4af4fbb8a855e6e0ae58fe8f9b4ed6efc39ceab14f6efacbee8a51ceab40b120851bf98f6ceaafda79771ee5940c32d5fc23744df6d17a4b5eb2561e24804c3577949ad0886945eb70c651d9064bea1401cca937101d9cd9021c0fabe79b145b2517db6f4c29591df4dd089d52b76b1f530bbd23ba8248792141d1ac342e16609deb1d21e16e3d0fe72c3ac898763572b0233144e19c3e1dc6ef3f739b438ea938a1546bb7dfe7481ffa57db0c05d2", 0xb0}], 0x3, &(0x7f0000001600)}, 0x4800)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640feffffffffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640feffffffffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000e40)=""/291, 0x123}, {&(0x7f0000001340)=""/213, 0xd5}, {&(0x7f0000000f80)=""/185, 0xb9}, {&(0x7f0000000240)=""/196, 0xc4}, {&(0x7f0000006340)=""/4096, 0x1000}, {&(0x7f0000001240)=""/193, 0xc1}, {&(0x7f0000000c80)=""/190, 0xbe}, {&(0x7f0000000540)=""/196, 0xc4}, {&(0x7f0000000340)=""/170, 0xaa}, {&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000400)=""/3, 0x3}], 0xb}, 0x0)

150.228994ms ago: executing program 1 (id=531):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f80000001600010000000000000000000a010100000000000000000000dc000000000000000000000000ffff000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffac1414aa0000000033000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffffffffffff1ffffffffffffff03000000000000000000000000000000010100000000000000000000000000000200000000000000feffffffffffffff000000000000000096070000000000000000000000000000be0000000000000000000000afa00100"], 0xf8}}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="5806302397053b119ec70000201a0000851000000200ba218455a1afd2c10ae5000020000000deffffff9452010d333699b82d81dec90d5282a71d4b36f9b6fa0f74dd996f9dc498e1cd3a3bed0ffd60cc0612113f701d53486014e68e77335db88dfea67085be045a0b205cc1a9a166a244a40cebece69d5b93f4924f7d6db382924806acb43b1bb8aa8dbb28d780bf09459e4a50da05a7fb051265626b17bde181c004f300"/177], &(0x7f00000000c0)='GPL\x00', 0x2}, 0x94)

69.263078ms ago: executing program 2 (id=532):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000004000000b704000000000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000500", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe02}, {}, {0x18, 0x3, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f00000002c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

66.635752ms ago: executing program 0 (id=533):
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe0b, 0x0, 0x0, 0x0, 0x800000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x54}}]}, &(0x7f00000002c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1}, 0x1)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x60000021)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000080)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="180000002040000000000000000000", @ANYRES32=r3], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03000000040000"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000000), 0x0}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4)
sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x58, &(0x7f0000000180)}, 0x10)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x5)
r8 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f0000000100)=r9, 0x4)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x4000)
sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r10, 0x8971, &(0x7f0000000000)={'netdevsim0\x00', @remote})

0s ago: executing program 1 (id=534):
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
socket$kcm(0x10, 0x2, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2101, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10010, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000040000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:34778' (ED25519) to the list of known hosts.
syzkaller login: [   48.047997][ T5781] cgroup: Unknown subsys name 'net'
[   48.138374][ T5781] cgroup: Unknown subsys name 'cpuset'
[   48.144392][ T5781] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.389361][ T5781] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.068642][ T5240] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.072714][ T5240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.076168][ T5240] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.081075][ T5240] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.085846][ T5240] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.120154][ T5240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.123914][ T5240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.127396][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.131706][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.135078][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.221647][ T5240] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.225430][ T5240] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.228749][ T5240] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.232611][ T5240] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.236454][ T5240] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.432814][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   55.479692][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   55.516868][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.519677][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.522793][ T5849] bridge_slave_0: entered allmulticast mode
[   55.526544][ T5849] bridge_slave_0: entered promiscuous mode
[   55.534312][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.537040][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.539798][ T5849] bridge_slave_1: entered allmulticast mode
[   55.544106][ T5849] bridge_slave_1: entered promiscuous mode
[   55.625368][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.654315][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.718225][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.722839][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.726180][ T5854] bridge_slave_0: entered allmulticast mode
[   55.729983][ T5854] bridge_slave_0: entered promiscuous mode
[   55.755733][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.758589][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.762345][ T5854] bridge_slave_1: entered allmulticast mode
[   55.765605][ T5854] bridge_slave_1: entered promiscuous mode
[   55.783232][ T5849] team0: Port device team_slave_0 added
[   55.805679][ T5849] team0: Port device team_slave_1 added
[   55.811294][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.815260][ T5857] chnl_net:caif_netlink_parms(): no params data found
[   55.837801][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.883823][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.886596][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.897406][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.930610][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.933380][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.944027][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.951498][ T5854] team0: Port device team_slave_0 added
[   55.967882][ T5854] team0: Port device team_slave_1 added
[   56.044122][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.046810][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.057001][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.062072][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.064853][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.067627][ T5857] bridge_slave_0: entered allmulticast mode
[   56.071907][ T5857] bridge_slave_0: entered promiscuous mode
[   56.076390][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.079207][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.083207][ T5857] bridge_slave_1: entered allmulticast mode
[   56.086895][ T5857] bridge_slave_1: entered promiscuous mode
[   56.105271][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.107867][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.117202][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.166791][ T5849] hsr_slave_0: entered promiscuous mode
[   56.169818][ T5849] hsr_slave_1: entered promiscuous mode
[   56.186325][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.232904][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.267596][ T5854] hsr_slave_0: entered promiscuous mode
[   56.271558][ T5854] hsr_slave_1: entered promiscuous mode
[   56.274383][ T5854] debugfs: 'hsr0' already exists in 'hsr'
[   56.276777][ T5854] Cannot create hsr debugfs directory
[   56.293177][ T5857] team0: Port device team_slave_0 added
[   56.321390][ T5857] team0: Port device team_slave_1 added
[   56.412058][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.414971][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.426831][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.433545][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.436404][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.446414][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.559792][ T5857] hsr_slave_0: entered promiscuous mode
[   56.563622][ T5857] hsr_slave_1: entered promiscuous mode
[   56.566468][ T5857] debugfs: 'hsr0' already exists in 'hsr'
[   56.568799][ T5857] Cannot create hsr debugfs directory
[   56.683058][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.711195][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.731347][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.752478][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.803619][ T5854] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.815645][ T5854] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.834404][ T5854] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.845589][ T5854] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.877715][ T5857] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.883515][ T5857] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.888997][ T5857] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.899894][ T5857] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.017000][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.032145][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.038320][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.054680][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   57.072659][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.075699][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.083267][ T5857] 8021q: adding VLAN 0 to HW filter on device team0
[   57.096777][   T75] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.099564][   T75] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.106861][   T75] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.109602][   T75] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.119753][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   57.125048][ T5240] Bluetooth: hci0: command tx timeout
[   57.133959][   T75] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.136717][   T75] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.141809][   T75] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.144364][   T75] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.166101][   T75] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.168946][   T75] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.200466][ T5240] Bluetooth: hci1: command tx timeout
[   57.290606][ T5240] Bluetooth: hci2: command tx timeout
[   57.425919][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.493447][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.541905][ T5849] veth0_vlan: entered promiscuous mode
[   57.574086][ T5849] veth1_vlan: entered promiscuous mode
[   57.585713][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.624448][ T5857] veth0_vlan: entered promiscuous mode
[   57.637266][ T5849] veth0_macvtap: entered promiscuous mode
[   57.643886][ T5857] veth1_vlan: entered promiscuous mode
[   57.653935][ T5849] veth1_macvtap: entered promiscuous mode
[   57.682213][ T5854] veth0_vlan: entered promiscuous mode
[   57.693436][ T5854] veth1_vlan: entered promiscuous mode
[   57.699102][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.714248][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.762762][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.774570][ T5857] veth0_macvtap: entered promiscuous mode
[   57.779463][ T5857] veth1_macvtap: entered promiscuous mode
[   57.783234][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.812944][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.815866][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.833961][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.858585][ T5854] veth0_macvtap: entered promiscuous mode
[   57.868862][ T5854] veth1_macvtap: entered promiscuous mode
[   57.884312][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.918384][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.929228][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.937428][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.954918][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.960627][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.974050][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.997676][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.005243][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.009691][ T5861] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.017186][ T5861] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.039448][ T5861] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.049071][ T5861] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.088379][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.091852][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.140665][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.149406][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.158593][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.191270][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.194239][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.233897][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.238759][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.246074][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.249361][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.590091][    C0] hrtimer: interrupt took 30133 ns
[   58.742911][ T5934] netlink: 'syz.2.6': attribute type 10 has an invalid length.
[   58.877021][ T5934] team0: Device ipvlan1 failed to register rx_handler
[   58.901542][ T5935] netlink: 'syz.2.6': attribute type 29 has an invalid length.
[   58.911362][ T5941] Can't find ip_set type bitmap:ip,mac
[   58.913782][ T5935] netlink: 'syz.2.6': attribute type 3 has an invalid length.
[   58.931495][ T5935] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6'.
[   58.942691][ T5935] Driver unsupported XDP return value 0 on prog  (id 8) dev N/A, expect packet loss!
[   59.024951][ T5948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9'.
[   59.070795][ T5934] syz.2.6 (5934) used greatest stack depth: 18040 bytes left
[   59.201226][ T5240] Bluetooth: hci0: command tx timeout
[   59.227984][ T5954] Zero length message leads to an empty skb
[   59.283846][ T5240] Bluetooth: hci1: command tx timeout
[   59.360998][ T5240] Bluetooth: hci2: command tx timeout
[   59.720816][ T5970] netlink: 'syz.0.15': attribute type 13 has an invalid length.
[   59.836556][ T5964] Set syz1 is full, maxelem 6117 reached
[   59.855680][ T5974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18'.
[   60.073001][ T5970] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.076992][ T5970] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.187675][ T5970] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   60.199787][ T5970] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   60.346479][ T5976] netlink: 'syz.2.19': attribute type 210 has an invalid length.
[   60.353391][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.356471][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.363258][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.366956][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.452509][ T5992] netlink: 16 bytes leftover after parsing attributes in process `syz.0.24'.
[   60.511611][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25'.
[   60.517953][ T5994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.25'.
[   60.856273][ T6021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32'.
[   60.861806][ T6021] netlink: 12 bytes leftover after parsing attributes in process `syz.2.32'.
[   61.195666][   T33] audit: type=1107 audit(1758754807.967:2): pid=6031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='!
[   61.195666][   T33] &[TT㌽M_}s@b?}E;N}ހvR3'
[   61.280696][ T5240] Bluetooth: hci0: command tx timeout
[   61.360439][ T5240] Bluetooth: hci1: command tx timeout
[   61.361176][ T6042] Dead loop on virtual device ip6_vti0, fix it urgently!
[   61.452592][ T5240] Bluetooth: hci2: command tx timeout
[   61.815278][   T33] audit: type=1107 audit(1758754808.587:3): pid=6048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='#?v&ԹI~+#{U=TsamvDP])x}C|
[   61.815278][   T33] CA6cz06YX}Yq̌4Iޓp5BeVSo$<1v.b紛xq,HrNG5[$8L{+=i~{5#r4,;=GfVeuu;){ZK><XmG#zv0{ᑤQTOňFU~ ~z1s^|^eM5R;V?'Ss}_cV4q{ΞO1wXf.(\&vhq7"0B+':񢕎1k8)וv7F>7;ްqSݰ\vqށTFkYҵoZi*0	1->uJ.h`@A)2CEhFTڑC_9C?^LCnM`3@$KqH<Ō03ҢI\1A7$Lo)7_֫hQ, QAl
[   61.815278][   T33] cvm1kOk:tN=,R; wD_b'ɀAM"5qfg]<'ſU	փ]	c!{@6cG|rC(m	T}Z{0.Cӭlt9aԘA$G+4BtU'GVj-	.㢐TkD4V%(ƈ\pEUBd\Ldc}b(hom(m̈awO}
[   61.815278][   T33] ru)aoG7>9NeʇNf4+ePz'*apS(0m9.v!$HDt}1nuR
[   61.870772][ T6053] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.133974][ T6059] netlink: 830 bytes leftover after parsing attributes in process `syz.0.45'.
[   62.181017][ T6060] netlink: 'syz.2.46': attribute type 7 has an invalid length.
[   62.186590][ T6060] netlink: 140 bytes leftover after parsing attributes in process `syz.2.46'.
[   62.270961][ T6058] tap0: tun_chr_ioctl cmd 1074025677
[   62.280432][ T6058] tap0: linktype set to 258
[   63.361941][ T5240] Bluetooth: hci0: command tx timeout
[   63.441021][ T5240] Bluetooth: hci1: command tx timeout
[   63.520831][ T5240] Bluetooth: hci2: command tx timeout
[   63.677326][ T6102] Dead loop on virtual device ip6_vti0, fix it urgently!
[   66.979944][ T5861] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.002435][ T6162] Dead loop on virtual device ip6_vti0, fix it urgently!
[   67.213134][ T6170] __nla_validate_parse: 5 callbacks suppressed
[   67.213144][ T6170] netlink: 24 bytes leftover after parsing attributes in process `syz.0.84'.
[   67.217930][ T6170] netlink: 24 bytes leftover after parsing attributes in process `syz.0.84'.
[   67.303008][ T6176] syzkaller0: entered allmulticast mode
[   67.950508][ T6206] netlink: 'syz.2.91': attribute type 39 has an invalid length.
[   68.247970][ T6221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.97'.
[   68.253282][ T6221] netlink: 12 bytes leftover after parsing attributes in process `syz.2.97'.
[   68.415497][ T6236] netlink: 'syz.0.103': attribute type 1 has an invalid length.
[   68.597433][ T6245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.105'.
[   68.608528][ T6245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.105'.
[   69.526442][ T6266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.114'.
[   69.546291][ T6266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.114'.
[   69.571214][ T6269] @: renamed from bond_slave_0
[   69.593131][ T6271] delete_channel: no stack
[   69.595472][ T6271] delete_channel: no stack
[   69.658626][ T6274] syz.1.116 uses obsolete (PF_INET,SOCK_PACKET)
[   69.798810][ T6277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.117'.
[   69.960872][ T6277] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   70.085607][ T6277] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   71.207198][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[   71.212559][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[   71.398775][ T6316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.129'.
[   71.543715][ T6325] Dead loop on virtual device ip6_vti0, fix it urgently!
[   72.279471][ T6329] netlink: 'syz.0.133': attribute type 10 has an invalid length.
[   72.282750][ T6329] netlink: 2 bytes leftover after parsing attributes in process `syz.0.133'.
[   72.286425][ T6329] bond0: entered promiscuous mode
[   72.293394][ T6329] @: entered promiscuous mode
[   72.295650][ T6329] bond_slave_1: entered promiscuous mode
[   72.304372][ T6329] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.309109][ T6329] bridge0: port 3(bond0) entered blocking state
[   72.315304][ T6329] bridge0: port 3(bond0) entered disabled state
[   72.317896][ T6329] bond0: entered allmulticast mode
[   72.319883][ T6329] @: entered allmulticast mode
[   72.324091][ T6329] bond_slave_1: entered allmulticast mode
[   74.119412][ T6406] netlink: 32 bytes leftover after parsing attributes in process `syz.2.150'.
[   74.435826][ T6431] siw: device registration error -23
[   74.460658][ T6436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.159'.
[   74.544416][ T6442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.161'.
[   74.551287][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.161'.
[   74.556956][ T6442] netlink: 33 bytes leftover after parsing attributes in process `syz.2.161'.
[   74.564573][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.161'.
[   74.568012][ T6442] netlink: 33 bytes leftover after parsing attributes in process `syz.2.161'.
[   74.628323][ T6448] netlink: 703 bytes leftover after parsing attributes in process `syz.2.164'.
[   74.987042][ T6458] netlink: 'syz.1.166': attribute type 4 has an invalid length.
[   75.000799][ T6458] netlink: 17 bytes leftover after parsing attributes in process `syz.1.166'.
[   75.071301][ T6465] netlink: 'syz.1.166': attribute type 10 has an invalid length.
[   75.449199][ T6482] Dead loop on virtual device ip6_vti0, fix it urgently!
[   75.701993][ T6489] netlink: 'syz.2.174': attribute type 2 has an invalid length.
[   76.447778][ T6516] netlink: 'syz.0.182': attribute type 4 has an invalid length.
[   76.636531][ T6515] netlink: 'syz.0.182': attribute type 10 has an invalid length.
[   76.645301][ T6515] team0: Port device dummy0 added
[   76.724047][ T6524] Dead loop on virtual device ip6_vti0, fix it urgently!
[   76.862477][ T6529] netlink: 'syz.2.188': attribute type 1 has an invalid length.
[   76.866413][ T6529] netlink: 'syz.2.188': attribute type 2 has an invalid length.
[   77.177319][ T6549] lo: entered allmulticast mode
[   77.190462][ T6548] lo: entered promiscuous mode
[   77.192667][ T6548] lo: left allmulticast mode
[   77.379021][ T6554] Dead loop on virtual device ip6_vti0, fix it urgently!
[   77.451194][ T6556] warning: `syz.2.196' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   77.472147][ T6556] netlink: 'syz.2.196': attribute type 4 has an invalid length.
[   77.475627][ T6556] __nla_validate_parse: 7 callbacks suppressed
[   77.475699][ T6556] netlink: 152 bytes leftover after parsing attributes in process `syz.2.196'.
[   77.494947][ T6558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.197'.
[   77.531469][ T6556] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[   77.609928][ T6566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.199'.
[   77.986460][ T6579] netlink: 16 bytes leftover after parsing attributes in process `syz.2.203'.
[   78.163226][ T6582] netlink: 'syz.0.204': attribute type 1 has an invalid length.
[   78.169872][ T6582] netlink: 'syz.0.204': attribute type 2 has an invalid length.
[   79.645515][ T6632] netlink: 60 bytes leftover after parsing attributes in process `syz.0.217'.
[   79.658371][ T6632] netlink: 60 bytes leftover after parsing attributes in process `syz.0.217'.
[   79.663436][ T6632] netlink: 60 bytes leftover after parsing attributes in process `syz.0.217'.
[   79.791244][ T6642] netlink: 1018 bytes leftover after parsing attributes in process `syz.0.222'.
[   79.796130][ T6644] netlink: 184 bytes leftover after parsing attributes in process `syz.2.223'.
[   79.801885][ T6644] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.897724][ T6650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.225'.
[   80.956409][ T6696] unsupported nlmsg_type 40
[   81.364262][   T10] cfg80211: failed to load regulatory.db
[   81.498013][ T6712] Dead loop on virtual device ip6_vti0, fix it urgently!
[   81.578191][ T6716] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.999526][ T6726] validate_nla: 1 callbacks suppressed
[   81.999602][ T6726] netlink: 'syz.0.249': attribute type 10 has an invalid length.
[   82.007711][ T6726] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[   82.015866][ T6726] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   82.030708][ T6726] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[   82.943295][ T6735] netlink: 'syz.0.253': attribute type 2 has an invalid length.
[   82.947469][ T6735] __nla_validate_parse: 3 callbacks suppressed
[   82.947483][ T6735] netlink: 110008 bytes leftover after parsing attributes in process `syz.0.253'.
[   82.967715][ T6736] Dead loop on virtual device ip6_vti0, fix it urgently!
[   83.132138][ T6740] netlink: 'syz.2.255': attribute type 10 has an invalid length.
[   83.135032][ T6740] netlink: 152 bytes leftover after parsing attributes in process `syz.2.255'.
[   83.187460][ T6740] netlink: 60 bytes leftover after parsing attributes in process `syz.2.255'.
[   83.290291][ T6748] netlink: 132 bytes leftover after parsing attributes in process `syz.0.258'.
[   83.457846][ T6754] netlink: 52 bytes leftover after parsing attributes in process `syz.0.260'.
[   83.638155][ T6764] netlink: 104 bytes leftover after parsing attributes in process `syz.0.264'.
[   83.788660][ T6774] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   83.794523][ T6774] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   84.984805][ T6805] netlink: zone id is out of range
[   85.041395][ T6805] netlink: zone id is out of range
[   85.067514][ T6805] netlink: del zone limit has 4 unknown bytes
[   85.119941][ T6808] erspan0 speed is unknown, defaulting to 1000
[   85.148379][ T6808] erspan0 speed is unknown, defaulting to 1000
[   85.170866][ T6808] erspan0 speed is unknown, defaulting to 1000
[   86.022296][   T10] erspan0 speed is unknown, defaulting to 1000
[   86.024789][ T6808] infiniband syz2: set active
[   86.026480][ T6808] infiniband syz2: added erspan0
[   86.059608][ T6808] RDS/IB: syz2: added
[   86.070702][ T6808] smc: adding ib device syz2 with port count 1
[   86.073399][ T6808] smc:    ib device syz2 port 1 has pnetid 
[   86.077211][   T47] erspan0 speed is unknown, defaulting to 1000
[   86.096310][ T6808] erspan0 speed is unknown, defaulting to 1000
[   86.441270][ T6808] erspan0 speed is unknown, defaulting to 1000
[   86.457025][ T6854] openvswitch: netlink: Message has 4 unknown bytes.
[   86.621248][ T6808] erspan0 speed is unknown, defaulting to 1000
[   86.725423][ T6856] netlink: 'syz.0.293': attribute type 29 has an invalid length.
[   86.787989][ T6856] netlink: 'syz.0.293': attribute type 10 has an invalid length.
[   87.338416][ T6856] bond0: left allmulticast mode
[   87.340551][ T6856] @: left allmulticast mode
[   87.343167][ T6856] bond_slave_1: left allmulticast mode
[   87.345349][ T6856] bond0: left promiscuous mode
[   87.347330][ T6856] @: left promiscuous mode
[   87.355602][ T6856] bond_slave_1: left promiscuous mode
[   87.358165][ T6856] bridge0: port 3(bond0) entered disabled state
[   87.385102][ T6856] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.388060][ T6856] team0: Port device bond0 added
[   87.659877][ T6881] netlink: 196 bytes leftover after parsing attributes in process `syz.0.300'.
[   88.274054][ T6898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.304'.
[   88.303004][ T6900] netlink: 32 bytes leftover after parsing attributes in process `syz.2.305'.
[   88.305757][ T6900] netlink: 32 bytes leftover after parsing attributes in process `syz.2.305'.
[   89.275516][ T6913] netlink: 'syz.2.311': attribute type 29 has an invalid length.
[   89.280754][ T6913] netlink: 'syz.2.311': attribute type 29 has an invalid length.
[   89.284141][ T6913] netlink: 'syz.2.311': attribute type 29 has an invalid length.
[   89.288783][ T6913] netlink: 'syz.2.311': attribute type 29 has an invalid length.
[   89.294773][ T6914] netlink: 'syz.2.311': attribute type 29 has an invalid length.
[   92.371111][ T6941] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.318'.
[   92.386548][ T6942] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.318'.
[   92.462973][ T6950] netlink: 'syz.1.320': attribute type 29 has an invalid length.
[   92.554557][ T6963] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.324'.
[   92.698880][ T6981] netlink: 'syz.1.327': attribute type 21 has an invalid length.
[   92.842738][ T6974] netlink: 'syz.2.325': attribute type 27 has an invalid length.
[   92.861393][ T6974] netlink: 'syz.2.325': attribute type 3 has an invalid length.
[   92.865728][ T6974] netlink: 132 bytes leftover after parsing attributes in process `syz.2.325'.
[   93.216547][ T7018] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[   93.296072][ T7025] syzkaller0: entered promiscuous mode
[   93.298428][ T7025] syzkaller0: entered allmulticast mode
[   93.388860][ T7027] @: renamed from bond_slave_0 (while UP)
[   93.463789][ T7034] netlink: 'syz.2.344': attribute type 1 has an invalid length.
[   93.466716][ T7034] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.344'.
[   94.248941][ T7046] veth1_macvtap: left promiscuous mode
[   94.266472][ T7046] macsec0: entered promiscuous mode
[   94.934345][ T7065] validate_nla: 1 callbacks suppressed
[   94.934360][ T7065] netlink: 'syz.2.355': attribute type 10 has an invalid length.
[   94.949266][ T7065] bond0: (slave bond_slave_0): Releasing backup interface
[   95.075836][ T7084] netlink: 10 bytes leftover after parsing attributes in process `syz.0.359'.
[   95.082716][ T7084] netlink: 'syz.0.359': attribute type 13 has an invalid length.
[   95.086099][ T7084] netlink: 'syz.0.359': attribute type 17 has an invalid length.
[   95.135511][ T7084] 8021q: adding VLAN 0 to HW filter on device team0
[   95.148549][ T7084] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   95.419828][ T7104] wg2: entered allmulticast mode
[   95.768376][ T7113] =======================================================
[   95.768376][ T7113] WARNING: The mand mount option has been deprecated and
[   95.768376][ T7113]          and is ignored by this kernel. Remove the mand
[   95.768376][ T7113]          option from the mount to silence this warning.
[   95.768376][ T7113] =======================================================
[   95.813774][ T7113] tmpfs: Bad value for 'uid'
[   95.815698][ T7113] tmpfs: Bad value for 'uid'
[   95.817902][ T7115] netlink: 10 bytes leftover after parsing attributes in process `syz.2.369'.
[   96.046699][ T5240] Bluetooth: hci2: ISO packet too small
[   96.688347][ T5870] bridge_slave_1: left allmulticast mode
[   96.694280][ T5870] bridge_slave_1: left promiscuous mode
[   96.698068][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.708438][ T5870] bridge_slave_0: left allmulticast mode
[   96.711387][ T5870] bridge_slave_0: left promiscuous mode
[   96.713869][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.758410][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   96.763613][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   96.767238][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   96.774844][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   96.778294][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   97.055339][ T5870] team0: Port device bond0 removed
[   97.058657][ T5870] bond0 (unregistering): (slave c@): Releasing backup interface
[   97.064374][ T5870] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   97.067780][ T5870] bond0 (unregistering): Released all slaves
[   97.104610][ T7135] erspan0 speed is unknown, defaulting to 1000
[   97.116330][ T7150] netlink: 830 bytes leftover after parsing attributes in process `syz.1.381'.
[   97.275494][ T7154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.382'.
[   97.517667][ T5870] hsr_slave_0: left promiscuous mode
[   97.526842][ T5870] hsr_slave_1: left promiscuous mode
[   97.534538][ T5870] batman_adv: batadv0: Removing interface: batadv_slave_0
[   97.546857][ T5870] batman_adv: batadv0: Removing interface: batadv_slave_1
[   97.963954][ T7181] netlink: 24 bytes leftover after parsing attributes in process `syz.1.386'.
[   98.081979][ T5870] team0 (unregistering): Port device team_slave_1 removed
[   98.103433][ T5870] team0 (unregistering): Port device team_slave_0 removed
[   98.267744][ T5870] team0 (unregistering): Port device dummy0 removed
[   98.418193][ T7181] netlink: 822 bytes leftover after parsing attributes in process `syz.1.386'.
[   98.594789][ T7135] chnl_net:caif_netlink_parms(): no params data found
[   98.711773][ T7135] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.715585][ T7135] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.718548][ T7135] bridge_slave_0: entered allmulticast mode
[   98.731962][ T7135] bridge_slave_0: entered promiscuous mode
[   98.736555][ T7135] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.739468][ T7135] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.747174][ T7135] bridge_slave_1: entered allmulticast mode
[   98.751461][ T7135] bridge_slave_1: entered promiscuous mode
[   98.801078][   T55] Bluetooth: hci2: command tx timeout
[   98.825504][ T7219] netlink: 12 bytes leftover after parsing attributes in process `syz.1.391'.
[   98.828411][ T7219] netlink: 12 bytes leftover after parsing attributes in process `syz.1.391'.
[   98.846079][ T7135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   98.856758][ T7135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   98.912041][ T7135] team0: Port device team_slave_0 added
[   98.923257][ T7135] team0: Port device team_slave_1 added
[   98.967131][ T7135] batman_adv: batadv0: Adding interface: batadv_slave_0
[   98.975311][ T7135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.995730][ T7135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.014496][ T7135] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.017208][ T7135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.041525][ T7135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.079876][ T7135] hsr_slave_0: entered promiscuous mode
[   99.084946][ T7135] hsr_slave_1: entered promiscuous mode
[   99.087245][ T7135] debugfs: 'hsr0' already exists in 'hsr'
[   99.089058][ T7135] Cannot create hsr debugfs directory
[   99.827372][ T7135] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   99.839089][ T7228] netlink: 'syz.1.394': attribute type 12 has an invalid length.
[   99.842476][ T7228] netlink: 132 bytes leftover after parsing attributes in process `syz.1.394'.
[   99.848115][ T7135] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   99.861324][ T7135] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   99.873124][ T7135] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   99.987824][ T7135] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.004848][ T7135] 8021q: adding VLAN 0 to HW filter on device team0
[  100.015055][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.017148][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.037187][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.039792][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.116973][ T7135] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  100.224157][ T7135] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.287794][ T7135] veth0_vlan: entered promiscuous mode
[  100.304075][ T7135] veth1_vlan: entered promiscuous mode
[  100.357632][ T7135] veth0_macvtap: entered promiscuous mode
[  100.362911][ T7135] veth1_macvtap: entered promiscuous mode
[  100.403291][ T7135] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.430114][ T7135] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.486836][ T5870] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.489561][ T5870] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.514704][ T5870] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.528909][ T5870] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.557305][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.565267][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.603730][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.606338][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.625071][ T7255] delete_channel: no stack
[  100.707230][ T7259] openvswitch: netlink: Message has 4 unknown bytes.
[  100.884248][   T55] Bluetooth: hci2: command tx timeout
[  101.200871][ T7273] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  101.308330][ T7282] netlink: 196 bytes leftover after parsing attributes in process `syz.2.407'.
[  101.395937][ T7282] netlink: 'syz.2.407': attribute type 5 has an invalid length.
[  101.407364][ T7282] netlink: 'syz.2.407': attribute type 7 has an invalid length.
[  101.425666][ T7282] netlink: 137592 bytes leftover after parsing attributes in process `syz.2.407'.
[  101.581874][ T7287] openvswitch: netlink: Flow actions attr not present in new flow.
[  101.968485][ T7300] netlink: 'syz.1.413': attribute type 10 has an invalid length.
[  101.975673][ T7300] 8021q: adding VLAN 0 to HW filter on device batadv0
[  101.980710][ T7300] team0: Port device batadv0 added
[  102.758660][ T7335] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.422'.
[  102.963002][   T55] Bluetooth: hci2: command tx timeout
[  103.251937][ T7340] netlink: 'syz.1.425': attribute type 153 has an invalid length.
[  103.444497][ T7328] delete_channel: no stack
[  103.548871][ T7366] netlink: 68 bytes leftover after parsing attributes in process `syz.2.434'.
[  103.673955][ T7373] netlink: 12 bytes leftover after parsing attributes in process `syz.0.435'.
[  104.334700][ T7386] netlink: 40 bytes leftover after parsing attributes in process `syz.0.440'.
[  104.339082][ T7386] netlink: 40 bytes leftover after parsing attributes in process `syz.0.440'.
[  104.393268][ T7393] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.442'.
[  105.057581][   T55] Bluetooth: hci2: command tx timeout
[  105.144795][ T7439] raw_sendmsg: syz.1.456 forgot to set AF_INET. Fix it!
[  105.318021][ T7453] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  105.893963][ T7493] tun0: tun_chr_ioctl cmd 1074025677
[  105.896303][ T7493] tun0: linktype set to 270
[  106.007702][ T7495] netlink: 'syz.1.468': attribute type 39 has an invalid length.
[  106.186724][ T7502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.469'.
[  106.598655][ T7509] netlink: 44 bytes leftover after parsing attributes in process `syz.2.471'.
[  106.691099][ T7512] netlink: 12 bytes leftover after parsing attributes in process `syz.0.472'.
[  106.714725][ T7512] netlink: 12 bytes leftover after parsing attributes in process `syz.0.472'.
[  106.921443][ T7521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.475'.
[  106.964530][ T7524] erspan0 speed is unknown, defaulting to 1000
[  107.333589][ T7533] netlink: 'syz.2.479': attribute type 21 has an invalid length.
[  107.336424][ T7533] netlink: 132 bytes leftover after parsing attributes in process `syz.2.479'.
[  107.373266][ T7533] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.479'.
[  109.474564][ T7657] __nla_validate_parse: 8 callbacks suppressed
[  109.474573][ T7657] netlink: 176 bytes leftover after parsing attributes in process `syz.0.518'.
[  110.645481][ T7687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.527'.
[  110.788616][ T7694] netlink: 'syz.2.530': attribute type 29 has an invalid length.
[  110.862162][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.531'.
[  216.000104][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  216.002559][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P7702/1:b.el
[  216.006410][    C0] rcu: 	(detected by 0, t=10502 jiffies, g=15301, q=354 ncpus=2)
[  216.009755][    C0] task:syz.2.532       state:R  running task     stack:26088 pid:7702  tgid:7701  ppid:5854   task_flags:0x400140 flags:0x00004004
[  216.015085][    C0] Call Trace:
[  216.016225][    C0]  <TASK>
[  216.017416][    C0]  __schedule+0x1798/0x4cc0
[  216.019324][    C0]  ? perf_trace_run_bpf_submit+0xee/0x170
[  216.021438][    C0]  ? __pfx___schedule+0x10/0x10
[  216.023241][    C0]  ? preempt_schedule_irq+0xd4/0x150
[  216.025297][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  216.027790][    C0]  ? perf_trace_preemptirq_template+0x280/0x340
[  216.030067][    C0]  ? preempt_schedule_irq+0xaa/0x150
[  216.031711][    C0]  preempt_schedule_irq+0xb5/0x150
[  216.033515][    C0]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  216.035552][    C0]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  216.037802][    C0]  irqentry_exit+0x6f/0x90
[  216.039519][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  216.041797][    C0] RIP: 0010:__local_bh_enable_ip+0x135/0x1c0
[  216.044109][    C0] Code: 8b e8 2f 34 f6 09 65 66 8b 05 df f1 1b 11 66 85 c0 75 5a bf 01 00 00 00 e8 78 15 0b 00 e8 93 70 42 00 fb 65 8b 05 bb f1 1b 11 <85> c0 75 05 e8 92 c8 ae ff 48 c7 04 24 0e 36 e0 45 4b c7 04 37 00
[  216.050761][    C0] RSP: 0018:ffffc90006977900 EFLAGS: 00000286
[  216.053089][    C0] RAX: 0000000080000000 RBX: 0000000000000200 RCX: 0e229346bd22d600
[  216.056248][    C0] RDX: 0000000000000000 RSI: ffffffff8d9baf3d RDI: ffffffff8be34500
[  216.059211][    C0] RBP: ffffc90006977990 R08: ffffffff8fa3b637 R09: 1ffffffff1f476c6
[  216.062327][    C0] R10: dffffc0000000000 R11: fffffbfff1f476c7 R12: ffffffff89a41217
[  216.065272][    C0] R13: ffffc90004741048 R14: dffffc0000000000 R15: 1ffff92000d2ef20
[  216.067949][    C0]  ? bpf_test_run+0x197/0x7b0
[  216.069611][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  216.071556][    C0]  ? bpf_test_run+0x197/0x7b0
[  216.073265][    C0]  bpf_test_run+0x376/0x7b0
[  216.075077][    C0]  ? __pfx_bpf_test_run+0x10/0x10
[  216.077002][    C0]  ? convert___skb_to_skb+0x3d/0x590
[  216.079040][    C0]  bpf_prog_test_run_skb+0xb4e/0x1550
[  216.080924][    C0]  ? __fget_files+0x2a/0x420
[  216.082347][    C0]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  216.084538][    C0]  bpf_prog_test_run+0x2c7/0x340
[  216.086409][    C0]  __sys_bpf+0x562/0x860
[  216.087743][    C0]  ? __pfx___sys_bpf+0x10/0x10
[  216.089272][    C0]  ? do_syscall_64+0xb7/0x3b0
[  216.091051][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  216.093426][    C0]  ? rcu_is_watching+0x15/0xb0
[  216.095013][    C0]  __x64_sys_bpf+0x7c/0x90
[  216.096491][    C0]  do_syscall_64+0xfa/0x3b0
[  216.098092][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  216.100087][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.102477][    C0]  ? exc_page_fault+0x9f/0xf0
[  216.104186][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.106308][    C0] RIP: 0033:0x7f0b04b8ec29
[  216.107979][    C0] RSP: 002b:00007f0b0596e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  216.110979][    C0] RAX: ffffffffffffffda RBX: 00007f0b04dd5fa0 RCX: 00007f0b04b8ec29
[  216.113922][    C0] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  216.116542][    C0] RBP: 00007f0b04c11e41 R08: 0000000000000000 R09: 0000000000000000
[  216.119333][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  216.122085][    C0] R13: 00007f0b04dd6038 R14: 00007f0b04dd5fa0 R15: 00007ffe5ad047e8
[  216.124683][    C0]  </TASK>
[  216.125662][    C0] rcu: rcu_preempt kthread starved for 10494 jiffies! g15301 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  216.129295][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  216.132542][    C0] rcu: RCU grace-period kthread stack dump:
[  216.134424][    C0] task:rcu_preempt     state:R  running task     stack:27224 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
[  216.138721][    C0] Call Trace:
[  216.139714][    C0]  <TASK>
[  216.140557][    C0]  __schedule+0x1798/0x4cc0
[  216.141964][    C0]  ? __lock_acquire+0xab9/0xd20
[  216.143592][    C0]  ? __pfx___schedule+0x10/0x10
[  216.145060][    C0]  ? schedule+0x91/0x360
[  216.146659][    C0]  schedule+0x165/0x360
[  216.148314][    C0]  schedule_timeout+0x12b/0x270
[  216.150275][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[  216.152441][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  216.154798][    C0]  ? __pfx_process_timeout+0x10/0x10
[  216.156915][    C0]  ? prepare_to_swait_event+0x341/0x380
[  216.159122][    C0]  rcu_gp_fqs_loop+0x301/0x1540
[  216.161074][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  216.163127][    C0]  ? __pfx_rcu_watching_snap_recheck+0x10/0x10
[  216.165539][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  216.167629][    C0]  ? _raw_spin_unlock_irq+0x2e/0x50
[  216.169547][    C0]  ? finish_swait+0xcd/0x1f0
[  216.170968][    C0]  rcu_gp_kthread+0x99/0x390
[  216.172388][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  216.174284][    C0]  ? __kthread_parkme+0x7b/0x200
[  216.176246][    C0]  ? __kthread_parkme+0x1a1/0x200
[  216.177913][    C0]  kthread+0x711/0x8a0
[  216.179143][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  216.180989][    C0]  ? __pfx_kthread+0x10/0x10
[  216.182455][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  216.184291][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  216.185944][    C0]  ? __pfx_kthread+0x10/0x10
[  216.187241][    C0]  ret_from_fork+0x439/0x7d0
[  216.188992][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  216.190872][    C0]  ? __switch_to_asm+0x39/0x70
[  216.192328][    C0]  ? __switch_to_asm+0x33/0x70
[  216.194142][    C0]  ? __pfx_kthread+0x10/0x10
[  216.195924][    C0]  ret_from_fork_asm+0x1a/0x30
[  216.197722][    C0]  </TASK>
[  216.198761][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  216.200875][    C0] CPU: 0 UID: 0 PID: 29 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) 
[  216.204230][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  216.207505][    C0] Workqueue: events_unbound toggle_allocation_gate
[  216.209803][    C0] RIP: 0010:smp_call_function_many_cond+0xd33/0x12d0
[  216.212146][    C0] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 b6 63 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 61 5f 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 45 5f
[  216.218562][    C0] RSP: 0018:ffffc9000062f660 EFLAGS: 00000293
[  216.220429][    C0] RAX: ffffffff81b4665b RBX: 1ffff11026cc7f61 RCX: ffff88801caf9cc0
[  216.223262][    C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  216.225602][    C0] RBP: ffffc9000062f7e0 R08: ffffffff8fa3b637 R09: 1ffffffff1f476c6
[  216.228434][    C0] R10: dffffc0000000000 R11: fffffbfff1f476c7 R12: ffff88813663fb08
[  216.231322][    C0] R13: dffffc0000000000 R14: ffff88804b03b1c0 R15: 0000000000000001
[  216.233815][    C0] FS:  0000000000000000(0000) GS:ffff8880b8611000(0000) knlGS:0000000000000000
[  216.236925][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  216.239230][    C0] CR2: 000000110c2a9ed1 CR3: 000000000df36000 CR4: 00000000000006f0
[  216.242239][    C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
[  216.244968][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  216.247798][    C0] Call Trace:
[  216.248998][    C0]  <TASK>
[  216.250115][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  216.252121][    C0]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  216.254394][    C0]  ? __pfx_text_poke_memcpy+0x10/0x10
[  216.256494][    C0]  ? kmem_cache_alloc_bulk_noprof+0x148/0x790
[  216.258839][    C0]  ? __pfx___text_poke+0x10/0x10
[  216.260783][    C0]  ? rcu_is_watching+0x15/0xb0
[  216.262656][    C0]  ? trace_contention_end+0x39/0x120
[  216.264814][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  216.266573][    C0]  on_each_cpu_cond_mask+0x3f/0x80
[  216.268270][    C0]  smp_text_poke_batch_finish+0x5f9/0x1130
[  216.270392][    C0]  ? arch_jump_label_transform_apply+0x17/0x30
[  216.272609][    C0]  ? __pfx___mutex_lock+0x10/0x10
[  216.274528][    C0]  ? __pfx_smp_text_poke_batch_finish+0x10/0x10
[  216.276913][    C0]  ? arch_jump_label_transform_queue+0x97/0x110
[  216.279200][    C0]  arch_jump_label_transform_apply+0x1c/0x30
[  216.281605][    C0]  static_key_enable_cpuslocked+0x128/0x250
[  216.283612][    C0]  static_key_enable+0x1a/0x20
[  216.284970][    C0]  toggle_allocation_gate+0xad/0x240
[  216.286476][    C0]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  216.288683][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  216.290861][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  216.292987][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  216.295044][    C0]  process_scheduled_works+0xae1/0x17b0
[  216.297264][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  216.299244][    C0]  worker_thread+0x8a0/0xda0
[  216.300741][    C0]  kthread+0x711/0x8a0
[  216.302118][    C0]  ? __pfx_worker_thread+0x10/0x10
[  216.303953][    C0]  ? __pfx_kthread+0x10/0x10
[  216.305382][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  216.306979][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  216.308963][    C0]  ? __pfx_kthread+0x10/0x10
[  216.310696][    C0]  ret_from_fork+0x439/0x7d0
[  216.312231][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  216.313993][    C0]  ? __switch_to_asm+0x39/0x70
[  216.315735][    C0]  ? __switch_to_asm+0x33/0x70
[  216.317544][    C0]  ? __pfx_kthread+0x10/0x10
[  216.319186][    C0]  ret_from_fork_asm+0x1a/0x30
[  216.320682][    C0]  </TASK>

VM DIAGNOSIS:
23:02:42  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000006c RBX=000000000000006c RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000007430
R8 =ffff88801b7c8237 R9 =1ffff110036f9046 R10=dffffc0000000000 R11=ffffffff85504b00
R12=dffffc0000000000 R13=ffffffff99b04917 R14=ffffffff99df9420 R15=0000000000000000
RIP=ffffffff85504b7c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8611000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2a9ed1 CR3=000000000df36000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=00000000307a7973 0001000900000000
XMM02=0000000000000000 04010a0600000050 XMM03=0001000900000000 400b000800000001
XMM04=8001002480040028 00000000307a7973 XMM05=0000004002000812 0000004001000880
XMM06=0200140000000061 74656d0001000980 XMM07=0100248004002800 000000307a797300
XMM08=0100090000000040 0b00080000000100 XMM09=0000000000000000 00007f2fa6812fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=00000000000c4067 RBX=0000000000000002 RCX=ffffffff934a0388 RDX=0000000000080000
RSI=0000000000004000 RDI=ffff888025d8b980 RBP=0000000000000067 RSP=ffffc900001e0750
R8 =0000000000000000 R9 =ffffffff81adabcb R10=dffffc0000000000 R11=ffffed1026cc4f51
R12=0000000000004000 R13=0000000000000000 R14=ffff888025d8c470 R15=ffff888025d8c470
RIP=ffffffff819d7b78 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa72b4396c0 ffffffff 00c00000
GS =0000 ffff8881a3c11000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000003b270000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fa72a7a7498 00007fa72a7a7470 XMM03=00007fa72a7a74a8 00007fa72a7a74a0
XMM04=00007fa72b30d100 00007fa72a7a7460 XMM05=00007fa72a7a7478 00007fa72a7a74c0
XMM06=00007fa72a7a74b8 00007fa72a7a74b0 XMM07=00007fa72a7a74a8 00007fa72a7a74a0
XMM08=0000000000000000 00007fa72a612f0f XMM09=0000000000000000 00007fa72a612fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
