last executing test programs:

1m33.748357561s ago: executing program 1 (id=128):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0xf, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x5}, {0x28}}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0, 0x36, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x48, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="010000000900000007000000040000000c800000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="40000000ff0000000300"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xb8}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, 0xb}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$kcm(0x18, 0x0, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, 0x0)
r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x3}, 0xc)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18080f0000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03000000040000000400", @ANYRES32=r7, @ANYBLOB="0300"/20, @ANYRES32=r9, @ANYRES32, @ANYBLOB="03000000040000000300"/27], 0x50)
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x4, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x0, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x93}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x12)
socket$kcm(0x11, 0x200000000000002, 0x300)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
r12 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r12, 0x1, 0x2e, &(0x7f0000000640)=r11, 0x4)
recvmsg$kcm(r12, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0)
r13 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r13, &(0x7f00000001c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @local, 0x47}, 0x80, 0x0}, 0x240428f8)
write$cgroup_subtree(r10, &(0x7f00000002c0)=ANY=[], 0x12)

1m33.332975589s ago: executing program 1 (id=135):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="d50a0000000000006111780000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80)

1m33.278610393s ago: executing program 1 (id=137):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x6)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local})
close(r0)

1m33.158351046s ago: executing program 0 (id=142):
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x86e46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x2}, 0x40, 0x8, 0x1, 0x4, 0x0, 0xffff0000, 0x0, 0x0, 0x2e, 0x0, 0x4000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x4, 0x8, 0x7fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94)
r0 = socket$kcm(0xa, 0x2, 0x73)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x2d, 0x2, 0x0, &(0x7f0000000200))
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280)={r3}, 0xc)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffff8}, 0x90)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080))
r5 = socket$kcm(0xa, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(r5, &(0x7f0000000f00)={&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)='f', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000000000008400000008"], 0x20}, 0x0)
sendmsg$inet(r5, &(0x7f0000000f00)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)='&', 0x1}], 0x1, &(0x7f0000000000)=ANY=[], 0x20}, 0x0)

1m33.152751154s ago: executing program 1 (id=143):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d80000001600811e4e81f782db44b9040a1d0802a6cdda08040000a1180002461a1a39738c1e541208010f0100814401a80016ea1f", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x4008054)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00', 0x20})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f9, &(0x7f0000000080))

1m33.088550587s ago: executing program 1 (id=145):
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0xfb, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
socket$kcm(0x10, 0x3, 0x10)
socket$kcm(0x11, 0x200000000000002, 0x300)
socket$kcm(0x1e, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000003000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40040)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r1, <r3=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)='%ps    \x00'}, 0x20)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x2000000, 0xd50, 0x0, &(0x7f00000002c0)="fef351f6b11f421a5b4e415288ca", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x300000, '\x00', 0x0, r4, 0x4, 0x3, 0x4}, 0x50)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000000c0)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x98, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x18, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x0)

1m33.036665318s ago: executing program 1 (id=147):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x7, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x54}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m28.027625149s ago: executing program 0 (id=149):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_macvtap\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

1m26.355863971s ago: executing program 2 (id=150):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x2})
ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000180)=""/224)

1m26.295527727s ago: executing program 0 (id=151):
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x10}}], 0x10}, 0xc0011122)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40)

1m26.110149939s ago: executing program 0 (id=152):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000f40000000000000020000018010000202070250000000000202020db1af8ff00000000bfa100000000000017010000f0ffffffb702000008000000b70300000080000085000000ca00000095"], &(0x7f0000000400)='GPL\x00', 0x1, 0xdd, &(0x7f0000000440)=""/221, 0x0, 0x40}, 0x94)

1m26.052469447s ago: executing program 0 (id=153):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x3e, 0x107, 0xfffff7fe, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x909'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

1m26.052002213s ago: executing program 0 (id=154):
socket$kcm(0x2, 0x1, 0x84)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0x5, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socket$kcm(0x28, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xfffffffffffffe1e, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x90)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a0, &(0x7f0000000080))
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080))

1m22.34126479s ago: executing program 2 (id=155):
r0 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000300)={0x2, 0x0, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000000000000007000000d702441c1003"], 0x48}, 0xc810)

1m22.26802471s ago: executing program 2 (id=156):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001114010000000000fedbdf2508004b"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)

1m22.267771045s ago: executing program 2 (id=157):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}]}]}]}], {0x14, 0x10}}, 0xe4}, 0x1, 0x0, 0x0, 0x20040841}, 0x0)

1m20.938479643s ago: executing program 2 (id=158):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0x14, 0xa, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x45}}, 0x14}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000)

1m20.938148798s ago: executing program 2 (id=159):
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8000000000000000, 0x7}, 0x4130, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfff4}, 0x0, 0x0, r0, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x2}, 0x0, 0x0, r0, 0x0)
syz_clone(0x200400, 0x0, 0x0, 0x0, 0x0, 0x0)
close(r1)

1m17.005993829s ago: executing program 32 (id=147):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x7, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x54}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m10.259129065s ago: executing program 33 (id=154):
socket$kcm(0x2, 0x1, 0x84)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0x5, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socket$kcm(0x28, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xfffffffffffffe1e, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x90)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a0, &(0x7f0000000080))
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080))

1m6.073210111s ago: executing program 34 (id=159):
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8000000000000000, 0x7}, 0x4130, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfff4}, 0x0, 0x0, r0, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x2}, 0x0, 0x0, r0, 0x0)
syz_clone(0x200400, 0x0, 0x0, 0x0, 0x0, 0x0)
close(r1)

28.067838698s ago: executing program 4 (id=571):
r0 = socket$kcm(0x21, 0x2, 0x2)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0)

27.91203913s ago: executing program 4 (id=572):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001880)="5c00000012006b1e003de3d86e6c1dff05137e0300000000000000b68675f8001d000a00a0e69eeab556a7e60f1e611ca66982949a36c23d3b48dfd8cdbf9367b4fa0a640800030006010000080003001100000000", 0x55}, {&(0x7f0000000180)="6a628b6699d9dd", 0x7}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4040844)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x0, 0x40}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\t\x00\x00\x00\a\x00'], 0x48)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c"], 0x0, 0x4a, 0x0, 0x1}, 0x28)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=@newtaction={0x68, 0x30, 0xffff, 0x4000, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0x0, 0xc0000000, 0x3, 0x7}, 0x4, r5}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x2404c080}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b4000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000440)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)

26.761916922s ago: executing program 4 (id=575):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x5, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a0080ff00000000fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000deff00000000000000000800120002000200000000000000000030002b000303"], 0xa0}}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000740)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200000800000000000008000f0100810401a80016ea1f0008400304000803600cfa94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00000000000000000000007afd3a15e9d75fb5ae9f", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(r3)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r5, 0x0, 0x0}, 0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
socket$kcm(0x15, 0x5, 0x0)
sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

26.692721629s ago: executing program 3 (id=576):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a80000000201010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0xa8}}, 0x0)

26.613867096s ago: executing program 3 (id=578):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90424fc60", 0x14}], 0x1}, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27031c00160014000000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0b", 0x40}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050", 0x14}], 0x2}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)

26.613149497s ago: executing program 5 (id=580):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040), 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

26.429751231s ago: executing program 3 (id=581):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

26.232965908s ago: executing program 5 (id=582):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040005"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

26.171592117s ago: executing program 5 (id=583):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x0, &(0x7f0000000ac0)='./file0/../file0\x00', &(0x7f0000000b00), 0x1008080, 0x0)

26.108669195s ago: executing program 5 (id=584):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xe}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x6, 0xb}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2}, 0xc)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000240)=ANY=[], 0x5)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff8, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)
r4 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000000)=@ll={0x11, 0xf6, 0x0, 0x1, 0x9, 0x6, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB], 0x12b0}, 0x8800)
socket$kcm(0x2, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x34, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x2006, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x115}]}, @typed={0x8, 0x5, 0x0, 0x0, @u32=0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040)

25.745829733s ago: executing program 4 (id=585):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0x12, 0x0, &(0x7f00000001c0)="ffffffff7f833e9762a536c801d72069a00e", 0x0, 0x304, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x8}, 0x50)

25.480464334s ago: executing program 4 (id=586):
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x10, 0x3, 0x10)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x5, 0x83501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x940, 0x4, 0x0, 0x0, 0x6d1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000001c0)="8f00000014006b05c84e21000ab16d8b230675f802000000440002005817530461bc24eeb556a705251e6182149a36c23d3b48dfd8cd81bf9367b098fa51f60a64c9f4080000000000b6c0504bb9189d9193e9bd1c1b7376dc5214168eab57c736b13ae90298536c3aa6b230606b45823c8f8e9616afbb519374c3e3875b0f3252fc5dfbc28369efcd300a95fcfcda", 0x8f}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8094)

25.472916855s ago: executing program 5 (id=587):
socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0xa, 0x5, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000028000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000540)='rpm_return_int\x00', r1}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000540)='rpm_return_int\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x39, 0xffffffffffffffff}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080))

25.211900948s ago: executing program 4 (id=588):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="d8000000320081054e81f782db44b904021d080005000200e8fe55e1180015000600142603600e120900210000000401a8001600a40001fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970107f5d89c84c2f74b", 0xd8}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x8183, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext, 0x40, 0x0, 0x0, 0x0, 0xc360, 0xfffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x10, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x100}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @jmp={0x5, 0x0, 0x1, 0xa, 0x4, 0x4, 0xffffffffffffffff}, @ldst={0x0, 0x3, 0x3, 0x2, 0x3, 0xfffffffffffffff4, 0x4}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0xd1, &(0x7f0000000380)=""/209, 0x40f00, 0x12, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000008c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x2, 0xf, 0x7750, 0x2}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000009c0)=[{0x3, 0x1, 0x4, 0x5}, {0x5, 0x1, 0x0, 0x3}, {0x2, 0x2, 0x5, 0xa}, {0x5, 0x3, 0x9, 0x1}], 0x10, 0x7}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0xa, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$inet(r4, &(0x7f0000000900)={&(0x7f0000000500)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x18}, 0x0)

17.151056287s ago: executing program 3 (id=589):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000020000000000000f02000000000000000100000d00000000020000000100000000005f"], 0x0, 0x3c}, 0x28)

17.126554646s ago: executing program 3 (id=590):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2d}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0)

17.04132998s ago: executing program 3 (id=591):
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
r1 = perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0))
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r5}, 0x8)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000100)={0x5, 0x80, 0x45, 0xc, 0x0, 0x2, 0x0, 0x0, 0x8a00, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80000000, 0x2, @perf_config_ext={0x1, 0xd7}, 0x10000, 0xffffffffffffffdf, 0x4, 0x0, 0xffff, 0x2, 0xf, 0x0, 0x7, 0x0, 0x5})
socket$nl_rdma(0x10, 0x3, 0x14)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001000000000000f1ff000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000050600030076657468315f6d6163767461700000000900010073797a31000000004c000000050a010200"], 0xe8}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x20000)
r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000880)={@fallback, 0xffffffffffffffff, 0x12, 0x4}, 0x20)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYRES64], 0x12)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup=r8, r2, 0x18, 0x12, r0, @void, @value=r4}, 0x20)
ioctl$TUNDETACHFILTER(r7, 0x401054d6, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002540))

13.013438637s ago: executing program 5 (id=592):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000000c0)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000000000002000300010004a10200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8300)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0xb, [@decl_tag={0xf, 0x0, 0x0, 0x11, 0x6, 0x8}]}, {0x0, [0x61, 0x2e, 0x0, 0x2e, 0x0, 0x0, 0x30, 0x61, 0x61]}}, &(0x7f0000000380)=""/33, 0x33, 0x21, 0x1, 0x2}, 0x28)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='flush_foreign\x00', r3}, 0x18)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r4 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r4, &(0x7f0000000080)={'full', 0x20, 0x9, 0x20, 0x7fff}, 0x2f)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7)
close(r6)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$unix(r5, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYRES8=r6, @ANYBLOB="3eca", @ANYRES8=r8], 0x9a)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r11 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x39c}, 0x0)

8.867561677s ago: executing program 35 (id=588):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="d8000000320081054e81f782db44b904021d080005000200e8fe55e1180015000600142603600e120900210000000401a8001600a40001fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970107f5d89c84c2f74b", 0xd8}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x8183, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext, 0x40, 0x0, 0x0, 0x0, 0xc360, 0xfffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x10, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x100}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @jmp={0x5, 0x0, 0x1, 0xa, 0x4, 0x4, 0xffffffffffffffff}, @ldst={0x0, 0x3, 0x3, 0x2, 0x3, 0xfffffffffffffff4, 0x4}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0xd1, &(0x7f0000000380)=""/209, 0x40f00, 0x12, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000008c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x2, 0xf, 0x7750, 0x2}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000009c0)=[{0x3, 0x1, 0x4, 0x5}, {0x5, 0x1, 0x0, 0x3}, {0x2, 0x2, 0x5, 0xa}, {0x5, 0x3, 0x9, 0x1}], 0x10, 0x7}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0xa, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$inet(r4, &(0x7f0000000900)={&(0x7f0000000500)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x18}, 0x0)

2.002008423s ago: executing program 36 (id=591):
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
r1 = perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0))
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r5}, 0x8)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000100)={0x5, 0x80, 0x45, 0xc, 0x0, 0x2, 0x0, 0x0, 0x8a00, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80000000, 0x2, @perf_config_ext={0x1, 0xd7}, 0x10000, 0xffffffffffffffdf, 0x4, 0x0, 0xffff, 0x2, 0xf, 0x0, 0x7, 0x0, 0x5})
socket$nl_rdma(0x10, 0x3, 0x14)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001000000000000f1ff000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000050600030076657468315f6d6163767461700000000900010073797a31000000004c000000050a010200"], 0xe8}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x20000)
r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000880)={@fallback, 0xffffffffffffffff, 0x12, 0x4}, 0x20)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYRES64], 0x12)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup=r8, r2, 0x18, 0x12, r0, @void, @value=r4}, 0x20)
ioctl$TUNDETACHFILTER(r7, 0x401054d6, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002540))

0s ago: executing program 37 (id=592):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000000c0)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000000000002000300010004a10200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8300)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0xb, [@decl_tag={0xf, 0x0, 0x0, 0x11, 0x6, 0x8}]}, {0x0, [0x61, 0x2e, 0x0, 0x2e, 0x0, 0x0, 0x30, 0x61, 0x61]}}, &(0x7f0000000380)=""/33, 0x33, 0x21, 0x1, 0x2}, 0x28)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='flush_foreign\x00', r3}, 0x18)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r4 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r4, &(0x7f0000000080)={'full', 0x20, 0x9, 0x20, 0x7fff}, 0x2f)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7)
close(r6)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$unix(r5, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYRES8=r6, @ANYBLOB="3eca", @ANYRES8=r8], 0x9a)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r11 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x39c}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:40960' (ED25519) to the list of known hosts.
syzkaller login: [   48.960970][ T5782] cgroup: Unknown subsys name 'net'
[   49.059562][ T5782] cgroup: Unknown subsys name 'cpuset'
[   49.063802][ T5782] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.959326][ T5782] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.319373][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.326329][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.329504][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.332566][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.335349][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.338600][ T5858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.342071][ T5858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.344668][ T5858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.360968][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.363757][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.403267][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.405921][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.409728][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.413297][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.417078][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.573883][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   55.742228][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.746235][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.749575][ T5855] bridge_slave_0: entered allmulticast mode
[   55.753474][ T5855] bridge_slave_0: entered promiscuous mode
[   55.760117][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   55.764938][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.768553][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.771471][ T5855] bridge_slave_1: entered allmulticast mode
[   55.775291][ T5855] bridge_slave_1: entered promiscuous mode
[   55.833569][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.837785][ T5860] chnl_net:caif_netlink_parms(): no params data found
[   55.857437][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.930282][ T5855] team0: Port device team_slave_0 added
[   55.932974][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.935322][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.938064][ T5850] bridge_slave_0: entered allmulticast mode
[   55.940792][ T5850] bridge_slave_0: entered promiscuous mode
[   55.953242][ T5855] team0: Port device team_slave_1 added
[   55.963306][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.965529][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.968105][ T5850] bridge_slave_1: entered allmulticast mode
[   55.970858][ T5850] bridge_slave_1: entered promiscuous mode
[   56.018213][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.020777][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.030057][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.033962][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.036086][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.038807][ T5860] bridge_slave_0: entered allmulticast mode
[   56.041816][ T5860] bridge_slave_0: entered promiscuous mode
[   56.054836][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.058130][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.060430][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.068830][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.072437][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.074751][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.077463][ T5860] bridge_slave_1: entered allmulticast mode
[   56.080284][ T5860] bridge_slave_1: entered promiscuous mode
[   56.084646][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.135645][ T5850] team0: Port device team_slave_0 added
[   56.140672][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.144428][ T5850] team0: Port device team_slave_1 added
[   56.172831][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.189058][ T5855] hsr_slave_0: entered promiscuous mode
[   56.191678][ T5855] hsr_slave_1: entered promiscuous mode
[   56.201945][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.204399][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.214073][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.219020][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.221156][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.229931][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.244231][ T5860] team0: Port device team_slave_0 added
[   56.253674][ T5860] team0: Port device team_slave_1 added
[   56.285720][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.288073][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.297689][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.322486][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.325128][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.334809][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.373205][ T5850] hsr_slave_0: entered promiscuous mode
[   56.375375][ T5850] hsr_slave_1: entered promiscuous mode
[   56.378403][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   56.380770][ T5850] Cannot create hsr debugfs directory
[   56.441942][ T5860] hsr_slave_0: entered promiscuous mode
[   56.445139][ T5860] hsr_slave_1: entered promiscuous mode
[   56.448992][ T5860] debugfs: 'hsr0' already exists in 'hsr'
[   56.451199][ T5860] Cannot create hsr debugfs directory
[   56.729119][ T5855] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.747049][ T5855] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.761739][ T5855] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.774485][ T5855] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.810003][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.824923][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.835483][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.849661][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.911624][ T5860] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.925342][ T5860] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.932675][ T5860] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.938858][ T5860] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.997566][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.029621][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   57.044628][ T4952] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.047169][ T4952] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.060670][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.063170][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.077853][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.113461][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   57.146466][ T4952] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.149136][ T4952] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.169412][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.171636][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.183503][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.235282][ T5860] 8021q: adding VLAN 0 to HW filter on device team0
[   57.250545][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.253385][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.271179][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.273642][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.281160][ T5850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.353880][ T5860] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   57.370282][ T5860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.379597][ T5239] Bluetooth: hci1: command tx timeout
[   57.381949][ T5239] Bluetooth: hci0: command tx timeout
[   57.419002][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.467223][   T55] Bluetooth: hci2: command tx timeout
[   57.511224][ T5855] veth0_vlan: entered promiscuous mode
[   57.529793][ T5855] veth1_vlan: entered promiscuous mode
[   57.555602][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.583700][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.601483][ T5855] veth0_macvtap: entered promiscuous mode
[   57.613114][ T5855] veth1_macvtap: entered promiscuous mode
[   57.621939][ T5850] veth0_vlan: entered promiscuous mode
[   57.642849][ T5850] veth1_vlan: entered promiscuous mode
[   57.667839][ T5860] veth0_vlan: entered promiscuous mode
[   57.675794][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.685378][ T5860] veth1_vlan: entered promiscuous mode
[   57.694481][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.721931][ T5850] veth0_macvtap: entered promiscuous mode
[   57.730432][ T5750] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.734132][ T5750] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.748121][ T5750] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.751671][ T5850] veth1_macvtap: entered promiscuous mode
[   57.764339][ T5750] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.793664][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.808221][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.821064][ T5860] veth0_macvtap: entered promiscuous mode
[   57.834524][ T5860] veth1_macvtap: entered promiscuous mode
[   57.839253][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.860250][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.874765][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.878703][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.885906][ T4309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.897470][ T4309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.904332][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.924507][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.947674][ T4309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.953951][ T4309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.958940][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.961702][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.964636][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.986718][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.011533][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.015203][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.069126][ T5855] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.075338][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.080484][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.135556][ T4309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.140724][ T4309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.158940][ T5920] netlink: 'syz.1.2': attribute type 2 has an invalid length.
[   58.183354][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.186306][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.623656][ T5945] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.14'.
[   58.644585][ T5945] workqueue: name exceeds WQ_NAME_LEN. Truncating to: `]Iq!>s*!)\S
[   58.755664][    C0] hrtimer: interrupt took 35173 ns
[   59.467747][   T55] Bluetooth: hci0: command tx timeout
[   59.470373][   T55] Bluetooth: hci1: command tx timeout
[   59.536737][ T5239] Bluetooth: hci2: command tx timeout
[   59.582476][ T5994] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.695398][ T6005] netlink: 'syz.1.31': attribute type 10 has an invalid length.
[   59.700380][ T6005] netlink: 40 bytes leftover after parsing attributes in process `syz.1.31'.
[   59.703743][ T6005] ipvlan1: entered promiscuous mode
[   59.705420][ T6005] ipvlan1: entered allmulticast mode
[   59.709254][ T6005] veth0_vlan: entered allmulticast mode
[   59.713530][ T6005] bridge0: port 3(ipvlan1) entered blocking state
[   59.715947][ T6005] bridge0: port 3(ipvlan1) entered disabled state
[   59.728458][ T6005] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[   59.734303][ T6007] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.36'.
[   59.835652][ T5239] Bluetooth: hci2: Malformed LE Event: 0x1b
[   60.060969][ T6032] Zero length message leads to an empty skb
[   60.132288][ T6032] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[   61.124074][ T6037] syz.1.51 uses obsolete (PF_INET,SOCK_PACKET)
[   61.372794][ T6039] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.52'.
[   61.512349][ T6042] netlink: 'syz.2.53': attribute type 21 has an invalid length.
[   61.536695][ T5239] Bluetooth: hci1: command tx timeout
[   61.538407][ T5239] Bluetooth: hci0: command tx timeout
[   61.617464][   T55] Bluetooth: hci2: command tx timeout
[   61.943366][ T6053] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.57'.
[   63.270722][ T6076] syzkaller0: entered promiscuous mode
[   63.272631][ T6076] syzkaller0: entered allmulticast mode
[   63.554649][ T6086] Illegal XDP return value 115521920 on prog  (id 32) dev N/A, expect packet loss!
[   63.618176][   T55] Bluetooth: hci0: command tx timeout
[   63.620324][   T55] Bluetooth: hci1: command tx timeout
[   63.698132][ T5239] Bluetooth: hci2: command tx timeout
[   64.283145][ T6089] netlink: 14 bytes leftover after parsing attributes in process `syz.1.71'.
[   64.438240][ T6089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   64.467309][ T6089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   64.484056][ T6089] bond0 (unregistering): Released all slaves
[   64.519090][ T6101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.76'.
[   64.752106][ T6110] netlink: 'syz.0.80': attribute type 27 has an invalid length.
[   64.755199][ T6110] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.80'.
[   64.875704][ T6115] netlink: 56 bytes leftover after parsing attributes in process `syz.0.82'.
[   65.161618][ T6121] syzkaller0: entered promiscuous mode
[   65.169093][ T6121] syzkaller0: entered allmulticast mode
[   65.400146][ T6131] netlink: 'syz.2.89': attribute type 15 has an invalid length.
[   68.825982][ T6163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.104'.
[   69.019705][ T6174] =======================================================
[   69.019705][ T6174] WARNING: The mand mount option has been deprecated and
[   69.019705][ T6174]          and is ignored by this kernel. Remove the mand
[   69.019705][ T6174]          option from the mount to silence this warning.
[   69.019705][ T6174] =======================================================
[   69.060750][ T6177] netlink: 24 bytes leftover after parsing attributes in process `syz.0.111'.
[   69.223449][ T6185] netlink: 60 bytes leftover after parsing attributes in process `syz.0.113'.
[   69.227390][ T6183] netlink: 60 bytes leftover after parsing attributes in process `syz.0.113'.
[   69.232402][ T6183] netlink: 60 bytes leftover after parsing attributes in process `syz.0.113'.
[   70.513903][ T6227] netlink: 'syz.2.119': attribute type 10 has an invalid length.
[   70.519566][ T6227] netlink: 40 bytes leftover after parsing attributes in process `syz.2.119'.
[   70.524047][ T6227] ipvlan1: entered promiscuous mode
[   70.526322][ T6227] ipvlan1: entered allmulticast mode
[   70.530405][ T6227] veth0_vlan: entered allmulticast mode
[   70.545366][ T6227] bridge0: port 3(ipvlan1) entered blocking state
[   70.550872][ T6227] bridge0: port 3(ipvlan1) entered disabled state
[   70.559173][ T6227] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[   70.631370][ T6247] netlink: 12 bytes leftover after parsing attributes in process `syz.2.122'.
[   71.142476][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.145239][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.180596][  T793] cfg80211: failed to load regulatory.db
[   71.323598][ T6335] openvswitch: netlink: Unknown VXLAN extension attribute 0
[   71.482648][ T6339] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.133'.
[   71.526600][ T6326] syz.1.128 (6326) used greatest stack depth: 16960 bytes left
[   71.697859][ T6352] netlink: 'syz.2.139': attribute type 7 has an invalid length.
[   71.701184][ T6352] netlink: 16 bytes leftover after parsing attributes in process `syz.2.139'.
[   71.833399][ T6364] netlink: 36 bytes leftover after parsing attributes in process `syz.1.145'.
[   71.840255][ T6364] netlink: 36 bytes leftover after parsing attributes in process `syz.1.145'.
[   71.843239][ T6364] netlink: 20 bytes leftover after parsing attributes in process `syz.1.145'.
[   73.615672][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1396167516 wd_nsec: 1396167410
[   75.523269][ T6371] delete_channel: no stack
[   76.546391][    C1] sched: DL replenish lagged too much
[   79.976103][ T6386] GPL: port 1(gretap0) entered blocking state
[   79.981231][ T6386] GPL: port 1(gretap0) entered disabled state
[   79.983759][ T6386] gretap0: entered allmulticast mode
[   79.989338][ T6386] gretap0: entered promiscuous mode
[   82.632467][ T6390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.156'.
[   91.158826][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 4685080347 wd_nsec: 4685079709
[   91.925959][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   91.930645][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   91.933736][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   91.938601][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   91.941100][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   94.207453][ T5239] Bluetooth: hci3: command tx timeout
[   94.335835][ T6399] chnl_net:caif_netlink_parms(): no params data found
[   98.355654][ T5239] Bluetooth: hci3: command tx timeout
[   99.937607][ T5239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   99.941579][ T5239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   99.945271][ T5239] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   99.949708][ T5239] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   99.953101][ T5239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  100.085017][   T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  100.089904][   T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  100.093327][   T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  100.102179][   T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  100.104829][   T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  100.439595][ T5239] Bluetooth: hci3: command tx timeout
[  101.252038][ T6399] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.254539][ T6399] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.259801][ T6399] bridge_slave_0: entered allmulticast mode
[  101.266266][ T6399] bridge_slave_0: entered promiscuous mode
[  101.326835][ T6399] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.335689][ T6399] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.339194][ T6399] bridge_slave_1: entered allmulticast mode
[  101.342540][ T6399] bridge_slave_1: entered promiscuous mode
[  101.434623][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.451435][ T6399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  101.471817][ T6399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  101.544142][ T6399] team0: Port device team_slave_0 added
[  101.549350][ T6399] team0: Port device team_slave_1 added
[  101.595694][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.624355][ T6399] batman_adv: batadv0: Adding interface: batadv_slave_0
[  101.627947][ T6399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.640138][ T6399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  101.680866][ T6399] batman_adv: batadv0: Adding interface: batadv_slave_1
[  101.684055][ T6399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.694590][ T6399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  101.720185][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.756814][ T6410] chnl_net:caif_netlink_parms(): no params data found
[  101.780201][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.874850][ T6399] hsr_slave_0: entered promiscuous mode
[  101.877774][ T6399] hsr_slave_1: entered promiscuous mode
[  101.880309][ T6399] debugfs: 'hsr0' already exists in 'hsr'
[  101.882510][ T6399] Cannot create hsr debugfs directory
[  101.887595][ T6413] chnl_net:caif_netlink_parms(): no params data found
[  101.992629][ T6410] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.995490][ T6410] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.998703][ T6410] bridge_slave_0: entered allmulticast mode
[  102.002533][ T6410] bridge_slave_0: entered promiscuous mode
[  102.016686][ T5239] Bluetooth: hci4: command tx timeout
[  102.045380][ T6410] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.051671][ T6410] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.054691][ T6410] bridge_slave_1: entered allmulticast mode
[  102.060010][ T6410] bridge_slave_1: entered promiscuous mode
[  102.134896][ T6413] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.138322][ T6413] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.141367][ T6413] bridge_slave_0: entered allmulticast mode
[  102.145378][ T6413] bridge_slave_0: entered promiscuous mode
[  102.151688][ T6413] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.154718][ T6413] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.159159][ T6413] bridge_slave_1: entered allmulticast mode
[  102.163177][ T6413] bridge_slave_1: entered promiscuous mode
[  102.176509][ T5239] Bluetooth: hci5: command tx timeout
[  102.180112][   T12] bridge_slave_1: left allmulticast mode
[  102.182591][   T12] bridge_slave_1: left promiscuous mode
[  102.185723][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.195591][   T12] bridge_slave_0: left allmulticast mode
[  102.199169][   T12] bridge_slave_0: left promiscuous mode
[  102.201673][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.211188][   T12] gretap0: left allmulticast mode
[  102.213377][   T12] gretap0: left promiscuous mode
[  102.215602][   T12] GPL: port 1(gretap0) entered disabled state
[  102.506818][ T5239] Bluetooth: hci3: command tx timeout
[  102.559480][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  102.568191][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  102.573368][   T12] bond0 (unregistering): Released all slaves
[  102.612733][ T6410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  102.624998][ T6413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  102.635518][ T6410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  102.661666][ T6413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  102.723405][ T6410] team0: Port device team_slave_0 added
[  102.761837][ T6410] team0: Port device team_slave_1 added
[  102.766233][ T6413] team0: Port device team_slave_0 added
[  102.796937][ T6413] team0: Port device team_slave_1 added
[  102.838263][ T6410] batman_adv: batadv0: Adding interface: batadv_slave_0
[  102.841160][ T6410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.855197][ T6410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  102.894242][ T6410] batman_adv: batadv0: Adding interface: batadv_slave_1
[  102.897581][ T6410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.908861][ T6410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  102.920170][ T6413] batman_adv: batadv0: Adding interface: batadv_slave_0
[  102.923077][ T6413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.934077][ T6413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  102.961286][ T6413] batman_adv: batadv0: Adding interface: batadv_slave_1
[  102.964176][ T6413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.975051][ T6413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  103.077298][ T6413] hsr_slave_0: entered promiscuous mode
[  103.080246][ T6413] hsr_slave_1: entered promiscuous mode
[  103.082653][ T6413] debugfs: 'hsr0' already exists in 'hsr'
[  103.084506][ T6413] Cannot create hsr debugfs directory
[  103.090383][ T6410] hsr_slave_0: entered promiscuous mode
[  103.092682][ T6410] hsr_slave_1: entered promiscuous mode
[  103.094786][ T6410] debugfs: 'hsr0' already exists in 'hsr'
[  103.097661][ T6410] Cannot create hsr debugfs directory
[  103.137796][ T6399] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  103.142677][ T6399] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  103.171229][ T6399] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  103.178423][ T6399] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  103.250496][   T12] hsr_slave_0: left promiscuous mode
[  103.253334][   T12] hsr_slave_1: left promiscuous mode
[  103.256162][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  103.259602][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  103.263388][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.267142][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  103.285919][   T12] veth1_macvtap: left promiscuous mode
[  103.289173][   T12] veth0_macvtap: left promiscuous mode
[  103.291684][   T12] veth1_vlan: left promiscuous mode
[  103.294096][   T12] veth0_vlan: left promiscuous mode
[  103.630617][   T12] team0 (unregistering): Port device team_slave_1 removed
[  103.665241][   T12] team0 (unregistering): Port device team_slave_0 removed
[  104.099410][ T5239] Bluetooth: hci4: command tx timeout
[  104.123051][ T6410] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  104.135112][ T6410] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  104.143602][ T6410] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  104.150816][ T6410] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  104.216260][ T6413] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  104.222746][ T6413] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  104.229750][ T6413] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  104.241851][ T6413] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  104.256744][ T5239] Bluetooth: hci5: command tx timeout
[  104.259919][ T6399] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.294359][ T6399] 8021q: adding VLAN 0 to HW filter on device team0
[  104.308458][ T4309] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.310889][ T4309] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.321773][ T4309] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.324133][ T4309] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.347407][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.400741][ T6410] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.424006][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.444273][ T6410] 8021q: adding VLAN 0 to HW filter on device team0
[  104.461234][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.463980][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.490210][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.509747][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.512724][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.560364][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.572936][ T6413] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.602993][ T6413] 8021q: adding VLAN 0 to HW filter on device team0
[  104.618595][  T415] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.621518][  T415] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.642823][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.645099][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.654734][ T6410] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  104.694269][ T6399] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.750687][   T12] bridge_slave_1: left allmulticast mode
[  104.753148][   T12] bridge_slave_1: left promiscuous mode
[  104.755675][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.768923][   T12] bridge_slave_0: left allmulticast mode
[  104.771333][   T12] bridge_slave_0: left promiscuous mode
[  104.774803][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.014415][ T6399] veth0_vlan: entered promiscuous mode
[  105.043096][ T6399] veth1_vlan: entered promiscuous mode
[  105.095785][ T6399] veth0_macvtap: entered promiscuous mode
[  105.110642][ T6410] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.119101][ T6399] veth1_macvtap: entered promiscuous mode
[  105.180176][ T6399] batman_adv: batadv0: Interface activated: batadv_slave_0
[  105.190615][ T6399] batman_adv: batadv0: Interface activated: batadv_slave_1
[  105.201173][ T6459] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.203976][ T6459] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.219134][ T6459] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.247686][   T12] hsr_slave_0: left promiscuous mode
[  105.250093][   T12] hsr_slave_1: left promiscuous mode
[  105.252132][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  105.254670][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  105.257916][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  105.260231][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  105.273316][   T12] veth1_macvtap: left promiscuous mode
[  105.275154][   T12] veth0_macvtap: left promiscuous mode
[  105.277251][   T12] veth1_vlan: left promiscuous mode
[  105.279034][   T12] veth0_vlan: left promiscuous mode
[  105.547681][   T12] team0 (unregistering): Port device team_slave_1 removed
[  105.568352][   T12] team0 (unregistering): Port device team_slave_0 removed
[  105.842322][ T6413] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.847216][ T6459] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.964003][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.972472][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.031432][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.034682][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.045901][ T6410] veth0_vlan: entered promiscuous mode
[  106.081358][ T6410] veth1_vlan: entered promiscuous mode
[  106.176671][ T6410] veth0_macvtap: entered promiscuous mode
[  106.176920][ T5239] Bluetooth: hci4: command tx timeout
[  106.195123][ T6410] veth1_macvtap: entered promiscuous mode
[  106.269020][ T6413] veth0_vlan: entered promiscuous mode
[  106.286270][ T6410] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.291398][ T6413] veth1_vlan: entered promiscuous mode
[  106.300629][ T6410] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.309942][ T5883] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.314300][ T6459] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.324332][ T6459] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.328588][ T6459] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.336961][ T5239] Bluetooth: hci5: command tx timeout
[  106.382835][ T6413] veth0_macvtap: entered promiscuous mode
[  106.401330][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.402798][ T6413] veth1_macvtap: entered promiscuous mode
[  106.404513][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.472885][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.476060][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.481041][ T6413] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.503183][ T6413] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.526360][ T6459] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.533759][ T6459] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.550678][ T6459] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.559259][ T6459] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.577124][ T6481] bridge_slave_1: left allmulticast mode
[  106.579203][ T6481] bridge_slave_1: left promiscuous mode
[  106.582256][ T6481] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.589797][ T6481] bridge_slave_0: left allmulticast mode
[  106.592099][ T6481] bridge_slave_0: left promiscuous mode
[  106.594432][ T6481] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.721064][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.723361][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.760734][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.768959][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.790441][ T6487] netlink: 'syz.3.167': attribute type 21 has an invalid length.
[  106.793421][ T6487] netlink: 132 bytes leftover after parsing attributes in process `syz.3.167'.
[  106.833557][ T6489] netlink: 'syz.5.162': attribute type 21 has an invalid length.
[  107.601098][ T6527] netdevsim netdevsim3 : renamed from netdevsim0 (while UP)
[  107.781511][ T6536] netlink: 'syz.4.189': attribute type 32 has an invalid length.
[  108.256737][ T5239] Bluetooth: hci4: command tx timeout
[  108.417542][ T5239] Bluetooth: hci5: command tx timeout
[  110.266781][ T6560] netlink: 'syz.4.197': attribute type 10 has an invalid length.
[  110.269918][ T6560] netlink: 40 bytes leftover after parsing attributes in process `syz.4.197'.
[  110.273514][ T6560] batadv0: entered promiscuous mode
[  110.275829][ T6560] batadv0: entered allmulticast mode
[  110.285882][ T6560] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  110.370385][ T6567] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.200'.
[  110.374115][ T6566] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.200'.
[  110.380125][ T6567] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.200'.
[  113.787702][ T6581] netlink: 72 bytes leftover after parsing attributes in process `syz.3.204'.
[  113.805723][ T6584] netlink: 'syz.4.205': attribute type 3 has an invalid length.
[  113.822920][ T6584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.205'.
[  113.825825][ T6586] netlink: 16 bytes leftover after parsing attributes in process `syz.5.206'.
[  114.469937][ T6604] netlink: 'syz.5.213': attribute type 10 has an invalid length.
[  114.688224][ T6610] netlink: 56 bytes leftover after parsing attributes in process `syz.5.216'.
[  114.772008][ T6614] netlink: 8 bytes leftover after parsing attributes in process `syz.5.218'.
[  115.058208][ T6632] netlink: 'syz.3.220': attribute type 6 has an invalid length.
[  115.065961][ T6632] netlink: 168 bytes leftover after parsing attributes in process `syz.3.220'.
[  115.670542][ T6646] openvswitch: netlink: Message has 4 unknown bytes.
[  116.072530][ T6659] netlink: 830 bytes leftover after parsing attributes in process `syz.3.236'.
[  116.311985][ T6671] netlink: 18187 bytes leftover after parsing attributes in process `syz.5.242'.
[  116.346314][ T6663] netlink: 'syz.3.238': attribute type 2 has an invalid length.
[  116.361532][ T6663] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.238'.
[  116.365860][ T6663] nbd: must specify a device to reconfigure
[  116.540731][ T6688] netlink: 56 bytes leftover after parsing attributes in process `syz.4.250'.
[  116.925025][ T6713] netlink: 'syz.4.261': attribute type 3 has an invalid length.
[  116.928421][ T6713] netlink: 'syz.4.261': attribute type 2 has an invalid length.
[  117.121371][ T6731] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode
[  117.124166][ T6731] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode
[  117.951699][ T6770] netlink: 'syz.4.284': attribute type 21 has an invalid length.
[  118.041869][ T6770] netlink: 'syz.4.284': attribute type 4 has an invalid length.
[  118.044882][ T6770] netlink: 'syz.4.284': attribute type 5 has an invalid length.
[  118.051821][ T6771] netlink: 'syz.5.286': attribute type 39 has an invalid length.
[  118.166249][ T6771] hsr_slave_0 (unregistering): left promiscuous mode
[  118.629788][ T6782] syz.5.290 (6782) used obsolete PPPIOCDETACH ioctl
[  118.837103][ T6794] __nla_validate_parse: 9 callbacks suppressed
[  118.837159][ T6794] netlink: 48 bytes leftover after parsing attributes in process `syz.5.295'.
[  118.961726][ T6802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.299'.
[  118.964674][ T6802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.299'.
[  119.080054][ T6806] netlink: 'syz.5.300': attribute type 1 has an invalid length.
[  119.082527][ T6806] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.300'.
[  120.308657][ T6818] netlink: 'syz.5.306': attribute type 9 has an invalid length.
[  120.311806][ T6818] netlink: 61951 bytes leftover after parsing attributes in process `syz.5.306'.
[  120.369137][ T6822] netlink: 'syz.3.308': attribute type 10 has an invalid length.
[  120.372286][ T6822] netlink: 40 bytes leftover after parsing attributes in process `syz.3.308'.
[  120.375796][ T6822] dummy0: entered promiscuous mode
[  120.380027][ T6822] dummy0: entered allmulticast mode
[  120.383747][ T6822] bridge0: port 3(dummy0) entered blocking state
[  120.390534][ T6822] bridge0: port 3(dummy0) entered disabled state
[  120.395620][ T6822] bridge0: port 3(dummy0) entered blocking state
[  120.398309][ T6822] bridge0: port 3(dummy0) entered forwarding state
[  120.878668][ T5239] Bluetooth: hci5: Malformed LE Event: 0x0d
[  121.008310][ T6849] netlink: 160 bytes leftover after parsing attributes in process `syz.3.320'.
[  121.228231][ T5239] Bluetooth: hci3: unknown advertising packet type: 0x5f
[  121.424555][ T6881] delete_channel: no stack
[  121.429799][ T6881] delete_channel: no stack
[  121.487023][ T6886] sock: sock_timestamping_bind_phc: sock not bind to device
[  121.752235][ T6903] netlink: 'syz.5.345': attribute type 1 has an invalid length.
[  121.761454][ T6903] netlink: 12 bytes leftover after parsing attributes in process `syz.5.345'.
[  121.831245][ T6905] netlink: 'syz.5.346': attribute type 12 has an invalid length.
[  121.850804][ T6905] netlink: 132 bytes leftover after parsing attributes in process `syz.5.346'.
[  122.203685][ T6916] wg2: entered promiscuous mode
[  122.205300][ T6916] wg2: entered allmulticast mode
[  122.210939][ T6916] netlink: 36 bytes leftover after parsing attributes in process `syz.5.351'.
[  122.377648][ T6920] syzkaller0: entered promiscuous mode
[  122.379416][ T6920] syzkaller0: entered allmulticast mode
[  122.533934][ T6931] netlink: 'syz.3.358': attribute type 1 has an invalid length.
[  123.544199][ T6987] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  124.599959][ T7016] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  124.938633][ T7031] warning: `syz.5.401' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  125.171058][ T7043] netlink: 'syz.4.407': attribute type 21 has an invalid length.
[  125.173722][ T7043] netlink: 'syz.4.407': attribute type 5 has an invalid length.
[  125.278388][ T7051] __nla_validate_parse: 5 callbacks suppressed
[  125.278399][ T7051] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.410'.
[  125.919704][ T7091] netlink: 64535 bytes leftover after parsing attributes in process `syz.5.429'.
[  127.227387][ T7127] netlink: 12 bytes leftover after parsing attributes in process `syz.3.441'.
[  127.256127][ T7130] netlink: 10 bytes leftover after parsing attributes in process `syz.3.443'.
[  127.529125][ T7145] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.448'.
[  127.532201][ T7145] netlink: 5 bytes leftover after parsing attributes in process `syz.3.448'.
[  127.614995][ T7151] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  128.063680][ T7165] netlink: 'syz.5.458': attribute type 2 has an invalid length.
[  128.068130][ T7165] netlink: 164 bytes leftover after parsing attributes in process `syz.5.458'.
[  128.152874][ T7171] netlink: 'syz.4.462': attribute type 2 has an invalid length.
[  128.156866][ T7171] netlink: 'syz.4.462': attribute type 8 has an invalid length.
[  128.160049][ T7171] netlink: 132 bytes leftover after parsing attributes in process `syz.4.462'.
[  128.417003][ T7192] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  128.555428][ T7199] netlink: 'syz.3.475': attribute type 21 has an invalid length.
[  128.821450][ T7199] netlink: 156 bytes leftover after parsing attributes in process `syz.3.475'.
[  128.862595][ T6413] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  128.868539][ T7207] netlink: 376 bytes leftover after parsing attributes in process `syz.5.478'.
[  128.888794][ T7205] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  128.891394][ T7205] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  129.122090][ T7221] netlink: 'syz.4.486': attribute type 1 has an invalid length.
[  129.239907][ T7227] netlink: 'syz.3.489': attribute type 10 has an invalid length.
[  132.481048][ T7246] netlink: 'syz.4.497': attribute type 21 has an invalid length.
[  132.533716][ T7252] netlink: 'syz.4.500': attribute type 10 has an invalid length.
[  132.541513][ T7252] __nla_validate_parse: 4 callbacks suppressed
[  132.541528][ T7252] netlink: 40 bytes leftover after parsing attributes in process `syz.4.500'.
[  132.548157][ T7252] batadv0: left promiscuous mode
[  132.551078][ T7252] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  132.581943][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.584453][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.627954][ T7258] netlink: 'syz.3.502': attribute type 46 has an invalid length.
[  132.668324][ T7261] netlink: 'syz.3.504': attribute type 1 has an invalid length.
[  132.684240][ T7263] netlink: 132 bytes leftover after parsing attributes in process `syz.4.505'.
[  132.743249][ T7266] netlink: 'syz.4.508': attribute type 5 has an invalid length.
[  132.752502][ T7269] netlink: 104 bytes leftover after parsing attributes in process `syz.5.506'.
[  132.875338][ T7278] netlink: 8 bytes leftover after parsing attributes in process `syz.5.512'.
[  132.983703][ T7282] netlink: 'syz.5.514': attribute type 2 has an invalid length.
[  132.987349][ T7282] netlink: 132 bytes leftover after parsing attributes in process `syz.5.514'.
[  133.161637][ T7287] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.516'.
[  133.372967][ T7306] netlink: 'syz.4.525': attribute type 1 has an invalid length.
[  133.376201][ T7306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.525'.
[  134.152704][ T7316] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  134.268349][ T7321] netlink: 277 bytes leftover after parsing attributes in process `syz.3.530'.
[  134.973194][ T7345] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.541'.
[  135.021527][ T7347] netlink: 24 bytes leftover after parsing attributes in process `syz.3.542'.
[  135.043182][ T7349] netlink: 'syz.5.543': attribute type 1 has an invalid length.
[  136.145035][ T7393] syzkaller0: entered promiscuous mode
[  136.148148][ T7393] syzkaller0: entered allmulticast mode
[  136.690549][ T7412] netlink: 'syz.4.568': attribute type 3 has an invalid length.
[  136.693596][ T7412] netlink: 'syz.4.568': attribute type 1 has an invalid length.
[  138.205967][ T7430] __nla_validate_parse: 8 callbacks suppressed
[  138.205983][ T7430] netlink: 112 bytes leftover after parsing attributes in process `syz.3.576'.
[  138.294288][ T7432] netlink: 132 bytes leftover after parsing attributes in process `syz.4.575'.
[  138.665881][ T7445] netlink: 8 bytes leftover after parsing attributes in process `syz.5.582'.
[  138.668820][ T7445] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  139.515452][ T7455] validate_nla: 4 callbacks suppressed
[  139.515477][ T7455] netlink: 'syz.4.586': attribute type 2 has an invalid length.
[  139.526871][ T7455] netlink: 51 bytes leftover after parsing attributes in process `syz.4.586'.
[  148.118009][ T7469] netlink: 12 bytes leftover after parsing attributes in process `syz.3.591'.
[  148.132137][ T7469] netlink: 56 bytes leftover after parsing attributes in process `syz.3.591'.
[  155.329066][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  155.332074][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  155.334994][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  155.340989][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  155.343788][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  157.616701][   T55] Bluetooth: hci0: command tx timeout
[  159.696756][   T55] Bluetooth: hci0: command tx timeout
[  161.776703][   T55] Bluetooth: hci0: command tx timeout
[  163.132334][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  163.136331][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  163.143094][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  163.147217][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  163.150672][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  163.856820][ T5239] Bluetooth: hci0: command tx timeout
[  165.164155][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  165.170517][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  165.174439][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  165.179806][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  165.183193][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  165.217761][   T55] Bluetooth: hci1: command tx timeout
[  167.216831][   T55] Bluetooth: hci2: command tx timeout
[  167.297430][   T55] Bluetooth: hci1: command tx timeout
[  169.296652][   T55] Bluetooth: hci2: command tx timeout
[  169.376927][   T55] Bluetooth: hci1: command tx timeout
[  171.376705][   T55] Bluetooth: hci2: command tx timeout
[  171.456720][   T55] Bluetooth: hci1: command tx timeout
[  173.456749][   T55] Bluetooth: hci2: command tx timeout
[  194.902018][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  194.904706][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  216.151430][ T5854] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  216.155297][ T5854] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  216.159472][ T5854] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  216.166220][ T5854] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  216.169910][ T5854] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  216.662401][ T5854] Bluetooth: hci3: command 0x0406 tx timeout
[  218.256759][ T5854] Bluetooth: hci6: command tx timeout
[  220.336856][ T5854] Bluetooth: hci6: command tx timeout
[  222.416700][ T5239] Bluetooth: hci6: command tx timeout
[  224.135656][ T5854] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  224.140220][ T5854] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  224.143746][ T5854] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  224.152440][ T5854] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  224.155943][ T5854] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  224.496702][ T5854] Bluetooth: hci6: command tx timeout
[  226.067547][ T5239] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  226.071088][ T5239] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  226.074061][ T5239] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  226.079371][ T5239] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  226.082691][ T5239] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  226.176750][ T5239] Bluetooth: hci7: command tx timeout
[  227.699014][ T5239] Bluetooth: hci4: command 0x0406 tx timeout
[  227.702011][ T5858] Bluetooth: hci5: command 0x0406 tx timeout
[  228.096698][ T5239] Bluetooth: hci8: command tx timeout
[  228.256680][ T5239] Bluetooth: hci7: command tx timeout
[  230.176591][ T5239] Bluetooth: hci8: command tx timeout
[  230.337130][ T5239] Bluetooth: hci7: command tx timeout
[  232.256684][ T5239] Bluetooth: hci8: command tx timeout
[  232.416868][ T5239] Bluetooth: hci7: command tx timeout
[  234.338670][ T5239] Bluetooth: hci8: command tx timeout
[  255.459797][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  255.461844][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  290.216341][ T5854] Bluetooth: hci0: command 0x0406 tx timeout
[  290.755386][ T5858] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  290.760574][ T5858] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  290.764923][ T5858] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  290.772595][ T7510] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  290.778038][ T7510] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  290.782522][ T7510] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  290.785870][ T7510] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  290.800080][ T5856] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  290.803502][ T5856] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  290.807501][ T5856] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  290.811580][ T5856] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  290.814561][ T5856] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  290.819639][ T5856] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  290.823312][ T5856] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  290.828693][ T7509] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  292.366709][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  292.369315][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  292.897981][ T5854] Bluetooth: hci10: command tx timeout
[  293.136734][ T5854] Bluetooth: hci11: command tx timeout
[  293.139457][ T5854] Bluetooth: hci9: command tx timeout
[  294.501065][   T34] INFO: task syz.5.592:7471 blocked for more than 143 seconds.
[  294.504136][   T34]       Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  294.519605][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  294.523077][   T34] task:syz.5.592       state:D stack:27688 pid:7471  tgid:7470  ppid:6413   task_flags:0x400140 flags:0x00004004
[  294.538881][   T34] Call Trace:
[  294.540370][   T34]  <TASK>
[  294.541611][   T34]  __schedule+0x1798/0x4cc0
[  294.543540][   T34]  ? __lock_acquire+0xab9/0xd20
[  294.545611][   T34]  ? __lock_acquire+0xab9/0xd20
[  294.596573][   T34]  ? __pfx___schedule+0x10/0x10
[  294.598606][   T34]  ? schedule+0x91/0x360
[  294.600395][   T34]  schedule+0x165/0x360
[  294.602181][   T34]  schedule_preempt_disabled+0x13/0x30
[  294.604475][   T34]  __mutex_lock+0x7e6/0x1350
[  294.636513][   T34]  ? __dev_queue_xmit+0x27b/0x3b50
[  294.638530][   T34]  ? __mutex_lock+0x5bb/0x1350
[  294.640405][   T34]  ? rtnetlink_rcv_msg+0x71c/0xb70
[  294.642436][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  294.644486][   T34]  rtnetlink_rcv_msg+0x71c/0xb70
[  294.658899][   T34]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  294.661033][   T34]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  294.663217][   T34]  ? ref_tracker_free+0x63a/0x7d0
[  294.665136][   T34]  ? __asan_memcpy+0x40/0x70
[  294.678979][   T34]  ? __pfx_ref_tracker_free+0x10/0x10
[  294.681140][   T34]  ? __skb_clone+0x63/0x7a0
[  294.682996][   T34]  netlink_rcv_skb+0x208/0x470
[  294.684957][   T34]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  294.689773][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  294.691945][   T34]  ? netlink_deliver_tap+0x2e/0x1b0
[  294.693994][   T34]  netlink_unicast+0x82f/0x9e0
[  294.695886][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  294.702222][   T34]  ? netlink_sendmsg+0x642/0xb30
[  294.704171][   T34]  ? skb_put+0x11b/0x210
[  294.705820][   T34]  netlink_sendmsg+0x805/0xb30
[  294.708808][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  294.710969][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  294.712959][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  294.715091][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  294.723069][   T34]  __sock_sendmsg+0x21c/0x270
[  294.725037][   T34]  ____sys_sendmsg+0x505/0x830
[  294.727540][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  294.729713][   T34]  ? import_iovec+0x74/0xa0
[  294.731556][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  294.733409][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  294.735513][   T34]  ? __fget_files+0x2a/0x420
[  294.740222][   T34]  ? __fget_files+0x3a0/0x420
[  294.742153][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  294.744095][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  294.746313][   T34]  ? rcu_is_watching+0x15/0xb0
[  294.748787][   T34]  ? do_syscall_64+0xbe/0x3b0
[  294.750706][   T34]  do_syscall_64+0xfa/0x3b0
[  294.752495][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  294.754565][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.759852][   T34]  ? exc_page_fault+0x9f/0xf0
[  294.761782][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.764130][   T34] RIP: 0033:0x7f59eb98eba9
[  294.765907][   T34] RSP: 002b:00007f59e9bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  294.769822][   T34] RAX: ffffffffffffffda RBX: 00007f59ebbd5fa0 RCX: 00007f59eb98eba9
[  294.773899][   T34] RDX: 0000000000008300 RSI: 0000200000000000 RDI: 0000000000000003
[  294.779671][   T34] RBP: 00007f59eba11e19 R08: 0000000000000000 R09: 0000000000000000
[  294.782877][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  294.786059][   T34] R13: 00007f59ebbd6038 R14: 00007f59ebbd5fa0 R15: 00007fff2f5d35f8
[  294.789767][   T34]  </TASK>
[  294.791029][   T34] INFO: task syz.5.592:7472 blocked for more than 143 seconds.
[  294.793972][   T34]       Not tainted syzkaller #0
[  294.795964][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  294.802166][   T34] task:syz.5.592       state:D stack:23520 pid:7472  tgid:7470  ppid:6413   task_flags:0x400140 flags:0x00004004
[  294.808204][   T34] Call Trace:
[  294.809461][   T34]  <TASK>
[  294.810675][   T34]  __schedule+0x1798/0x4cc0
[  294.812360][   T34]  ? __lock_acquire+0xab9/0xd20
[  294.813977][   T34]  ? __lock_acquire+0xab9/0xd20
[  294.815532][   T34]  ? __pfx___schedule+0x10/0x10
[  294.819157][   T34]  ? schedule+0x91/0x360
[  294.820907][   T34]  schedule+0x165/0x360
[  294.822355][   T34]  schedule_preempt_disabled+0x13/0x30
[  294.824226][   T34]  __mutex_lock+0x7e6/0x1350
[  294.825687][   T34]  ? __mutex_lock+0x5bb/0x1350
[  294.829711][   T34]  ? ib_get_eth_speed+0x151/0x7b0
[  294.831785][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  294.833836][   T34]  ? do_raw_spin_unlock+0x4d/0x240
[  294.835493][   T34]  ? _raw_spin_unlock+0x28/0x50
[  294.839016][   T34]  ? ib_device_get_netdev+0x220/0x2f0
[  294.840725][   T34]  ib_get_eth_speed+0x151/0x7b0
[  294.842256][   T34]  ? xas_create+0x1902/0x1b90
[  294.844033][   T34]  ? __pfx_ib_get_eth_speed+0x10/0x10
[  294.846088][   T34]  ? xas_store+0x9f0/0x1880
[  294.848534][   T34]  siw_query_port+0x3c/0x4a0
[  294.850429][   T34]  siw_get_port_immutable+0xab/0x1a0
[  294.852291][   T34]  ? __pfx_siw_get_port_immutable+0x10/0x10
[  294.854140][   T34]  ? alloc_port_data+0x52/0x360
[  294.855951][   T34]  ib_register_device+0xdad/0x1380
[  294.859870][   T34]  ? __pfx_ib_register_device+0x10/0x10
[  294.861723][   T34]  ? xa_load+0x60/0x210
[  294.863203][   T34]  ? xa_load+0x60/0x210
[  294.864651][   T34]  ? xa_load+0x60/0x210
[  294.866077][   T34]  ? xa_load+0x60/0x210
[  294.868207][   T34]  ? xa_load+0x1ea/0x210
[  294.869792][   T34]  ? __raw_spin_lock_init+0x45/0x100
[  294.871663][   T34]  siw_newlink+0x90a/0xd70
[  294.873360][   T34]  nldev_newlink+0x4a5/0x5a0
[  294.875460][   T34]  ? __pfx_nldev_newlink+0x10/0x10
[  294.879402][   T34]  ? __lock_acquire+0xab9/0xd20
[  294.881293][   T34]  ? bpf_lsm_capable+0x9/0x20
[  294.882804][   T34]  ? security_capable+0x7e/0x2e0
[  294.884591][   T34]  ? __pfx_nldev_newlink+0x10/0x10
[  294.887356][   T34]  rdma_nl_rcv+0x6ae/0x980
[  294.889162][   T34]  ? __pfx_rdma_nl_rcv+0x10/0x10
[  294.891028][   T34]  ? __lock_acquire+0xab9/0xd20
[  294.892930][   T34]  ? netlink_deliver_tap+0x2e/0x1b0
[  294.894892][   T34]  netlink_unicast+0x82f/0x9e0
[  294.898674][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  294.900547][   T34]  ? netlink_sendmsg+0x642/0xb30
[  294.902100][   T34]  ? skb_put+0x11b/0x210
[  294.903447][   T34]  netlink_sendmsg+0x805/0xb30
[  294.904964][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  294.907602][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  294.909487][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  294.911514][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  294.913209][   T34]  __sock_sendmsg+0x21c/0x270
[  294.914696][   T34]  ____sys_sendmsg+0x505/0x830
[  294.916216][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  294.921273][   T34]  ? import_iovec+0x74/0xa0
[  294.922930][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  294.924559][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  294.926206][   T34]  ? __fget_files+0x2a/0x420
[  294.928379][   T34]  ? __fget_files+0x3a0/0x420
[  294.930057][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  294.931759][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  294.933542][   T34]  ? rcu_is_watching+0x15/0xb0
[  294.935126][   T34]  ? do_syscall_64+0xbe/0x3b0
[  294.940934][   T34]  do_syscall_64+0xfa/0x3b0
[  294.942484][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  294.944512][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.947680][   T34]  ? exc_page_fault+0x9f/0xf0
[  294.949431][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.951202][   T34] RIP: 0033:0x7f59eb98eba9
[  294.952587][   T34] RSP: 002b:00007f59e9bd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  294.955199][   T34] RAX: ffffffffffffffda RBX: 00007f59ebbd6090 RCX: 00007f59eb98eba9
[  294.959443][   T34] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004
[  294.961891][   T34] RBP: 00007f59eba11e19 R08: 0000000000000000 R09: 0000000000000000
[  294.964340][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  294.967300][   T34] R13: 00007f59ebbd6128 R14: 00007f59ebbd6090 R15: 00007fff2f5d35f8
[  294.969764][   T34]  </TASK>
[  294.970740][   T34] 
[  294.970740][   T34] Showing all locks held in the system:
[  294.973265][   T34] 3 locks held by kworker/u8:0/12:
[  294.975167][   T34]  #0: ffff8881084b4948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  294.980448][ T5239] Bluetooth: hci10: command tx timeout
[  294.984062][   T34]  #1: ffffc900000f7bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  294.988815][   T34]  #2: ffffffff8f53a208 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  294.992514][   T34] 4 locks held by kworker/u8:1/13:
[  294.994610][   T34]  #0: ffff88801b2f7148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  295.000383][   T34]  #1: ffffc90000107bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  295.004278][   T34]  #2: ffffffff8f52d350 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  295.008102][   T34]  #3: ffffffff8f53a208 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x1d0
[  295.011266][   T34] 1 lock held by khungtaskd/34:
[  295.012773][   T34]  #0: ffffffff8e13a120 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  295.015823][   T34] 2 locks held by getty/5677:
[  295.019074][   T34]  #0: ffff88801eaca0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  295.022199][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  295.025314][   T34] 3 locks held by kworker/1:5/5903:
[  295.028102][   T34]  #0: ffff88801a482148 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  295.031847][   T34]  #1: ffffc900038bfbc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  295.035246][   T34]  #2: ffffffff8f53a208 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf30
[  295.040093][   T34] 5 locks held by syz.4.588/7460:
[  295.041665][   T34] 2 locks held by syz.3.591/7465:
[  295.043234][   T34]  #0: ffffffff8f53a208 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  295.048707][   T34]  #1: ffffffff8e13fbb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  295.052048][   T34] 1 lock held by syz.5.592/7471:
[  295.053591][   T34]  #0: ffffffff8f53a208 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70
[  295.058445][   T34] 3 locks held by syz.5.592/7472:
[  295.060000][   T34]  #0: ffffffff99e6f8f8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980
[  295.063141][   T34]  #1: ffffffff8f29a1d0 (link_ops_rwsem){++++}-{4:4}, at: nldev_newlink+0x341/0x5a0
[  295.065979][   T34]  #2: ffffffff8f53a208 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x151/0x7b0
[  295.069269][   T34] 1 lock held by syz-executor/7475:
[  295.070992][   T34]  #0: ffffffff8f53a208 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  295.074008][   T34] 1 lock held by syz-executor/7478:
[  295.075769][   T34]  #0: ffffffff8f53a208 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  295.081179][   T34] 1 lock held by syz-executor/7481:
[  295.082763][   T34]  #0: ffffffff8f53a208 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  295.085999][   T34] 1 lock held by syz-executor/7484:
[  295.088313][   T34]  #0: ffffffff8f53a208 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  295.091786][   T34] 1 lock held by syz-executor/7487:
[  295.093533][   T34]  #0: ffffffff8f53a208 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  295.098447][   T34] 1 lock held by syz-executor/7490:
[  295.100129][   T34]  #0: ffffffff8f53a208 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  295.103060][   T34] 1 lock held by syz-executor/7502:
[  295.104767][   T34]  #0: ffffffff8f53a208 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  295.108294][   T34] 1 lock held by syz-executor/7503:
[  295.110055][   T34]  #0: ffffffff8f53a208 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  295.113474][   T34] 1 lock held by syz-executor/7507:
[  295.115571][   T34]  #0: ffffffff8f53a208 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  295.121121][   T34] 
[  295.122060][   T34] =============================================
[  295.122060][   T34] 
[  295.125115][   T34] NMI backtrace for cpu 1
[  295.125146][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  295.125161][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  295.125169][   T34] Call Trace:
[  295.125176][   T34]  <TASK>
[  295.125183][   T34]  dump_stack_lvl+0x189/0x250
[  295.125205][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  295.125220][   T34]  ? __pfx__printk+0x10/0x10
[  295.125246][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  295.125269][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  295.125290][   T34]  ? __pfx__printk+0x10/0x10
[  295.125309][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  295.125328][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  295.125350][   T34]  watchdog+0xf93/0xfe0
[  295.125373][   T34]  ? watchdog+0x1de/0xfe0
[  295.125395][   T34]  kthread+0x711/0x8a0
[  295.125408][   T34]  ? __pfx_watchdog+0x10/0x10
[  295.125425][   T34]  ? __pfx_kthread+0x10/0x10
[  295.125443][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  295.125456][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  295.125468][   T34]  ? __pfx_kthread+0x10/0x10
[  295.125485][   T34]  ret_from_fork+0x439/0x7d0
[  295.125495][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  295.125512][   T34]  ? __switch_to_asm+0x39/0x70
[  295.125528][   T34]  ? __switch_to_asm+0x33/0x70
[  295.125544][   T34]  ? __pfx_kthread+0x10/0x10
[  295.125561][   T34]  ret_from_fork_asm+0x1a/0x30
[  295.125583][   T34]  </TASK>
[  295.125587][   T34] Sending NMI from CPU 1 to CPUs 0:
[  295.175992][    C0] NMI backtrace for cpu 0
[  295.176010][    C0] CPU: 0 UID: 0 PID: 7460 Comm: syz.4.588 Not tainted syzkaller #0 PREEMPT(full) 
[  295.176025][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  295.176035][    C0] RIP: 0010:__task_pid_nr_ns+0x296/0x470
[  295.176058][    C0] Code: 00 00 00 e8 cc 56 33 00 31 ed e9 8a 00 00 00 49 c1 e7 04 4e 8d 24 3b 49 81 c4 08 01 00 00 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 <74> 08 4c 89 e7 e8 90 d4 96 00 4d 39 34 24 74 38 e8 95 56 33 00 31
[  295.176069][    C0] RSP: 0018:ffffc90000006a30 EFLAGS: 00000046
[  295.176081][    C0] RAX: 1ffff11021141053 RBX: ffff888108a08180 RCX: 0000000000010100
[  295.176092][    C0] RDX: ffff88803f170000 RSI: 0000000000000001 RDI: 0000000000000001
[  295.176100][    C0] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff818c67e8
[  295.176108][    C0] R10: dffffc0000000000 R11: ffffffff81eed1e0 R12: ffff888108a08298
[  295.176118][    C0] R13: dffffc0000000000 R14: ffff888023b52390 R15: 0000000000000010
[  295.176127][    C0] FS:  00007f914bec26c0(0000) GS:ffff8880b8613000(0000) knlGS:0000000000000000
[  295.176138][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  295.176147][    C0] CR2: 00007fbcc5888386 CR3: 0000000106bdc000 CR4: 00000000000006f0
[  295.176179][    C0] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000
[  295.176188][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  295.176196][    C0] Call Trace:
[  295.176201][    C0]  <IRQ>
[  295.176207][    C0]  ? __task_pid_nr_ns+0x28/0x470
[  295.176226][    C0]  __perf_event_header__init_id+0x109/0x480
[  295.176249][    C0]  perf_prepare_sample+0x135/0x2390
[  295.176271][    C0]  ? perf_event_output_forward+0x8f/0x430
[  295.176290][    C0]  ? __pfx_perf_prepare_sample+0x10/0x10
[  295.176312][    C0]  perf_event_output_forward+0x151/0x430
[  295.176332][    C0]  ? perf_event_output_forward+0x8f/0x430
[  295.176351][    C0]  ? __pfx_perf_event_output_forward+0x10/0x10
[  295.176369][    C0]  ? perf_event_output_forward+0x8f/0x430
[  295.176388][    C0]  ? __pfx_perf_event_output_forward+0x10/0x10
[  295.176417][    C0]  ? __perf_event_account_interrupt+0x179/0x250
[  295.176432][    C0]  __perf_event_overflow+0x830/0xe40
[  295.176450][    C0]  ? __pfx___perf_event_overflow+0x10/0x10
[  295.176463][    C0]  ? __pfx_cpu_clock_event_update+0x10/0x10
[  295.176486][    C0]  perf_swevent_hrtimer+0x3c5/0x550
[  295.176507][    C0]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  295.176524][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  295.176549][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  295.176563][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  295.176586][    C0]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  295.176603][    C0]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  295.176620][    C0]  __hrtimer_run_queues+0x4e0/0xc60
[  295.176642][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  295.176654][    C0]  ? ktime_get_update_offsets_now+0x3ab/0x3d0
[  295.176675][    C0]  hrtimer_interrupt+0x45b/0xaa0
[  295.176700][    C0]  __sysvec_apic_timer_interrupt+0x10b/0x410
[  295.176718][    C0]  sysvec_apic_timer_interrupt+0x52/0xc0
[  295.176731][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  295.176746][    C0] RIP: 0010:unwind_next_frame+0x174f/0x2390
[  295.176763][    C0] Code: 48 83 c2 03 48 89 d8 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 19 0b 00 00 48 89 d0 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 2b 0b 00 00 <48> 0f bf 03 49 01 c4 49 8d 56 40 4c 89 f7 4c 89 e6 eb 5d 49 8d 5e
[  295.176774][    C0] RSP: 0018:ffffc900000073b8 EFLAGS: 00000246
[  295.176785][    C0] RAX: 0000000000000000 RBX: ffffffff9033767c RCX: 0000000000000000
[  295.176793][    C0] RDX: ffffffff9033767d RSI: 0000000000000001 RDI: ffffc90000007548
[  295.176803][    C0] RBP: dffffc0000000000 R08: ffffc90000007547 R09: 0000000000000000
[  295.176811][    C0] R10: ffffc90000007538 R11: fffff52000000ea9 R12: ffffc900000074e8
[  295.176821][    C0] R13: ffffc90000007538 R14: ffffc900000074e8 R15: 1ffffffff2066ecf
[  295.176836][    C0]  ? unwind_next_frame+0xc98/0x2390
[  295.176854][    C0]  ? unwind_next_frame+0xa5/0x2390
[  295.176867][    C0]  ? __unwind_start+0xf8/0x760
[  295.176884][    C0]  __unwind_start+0x5b9/0x760
[  295.176937][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  295.176954][    C0]  arch_stack_walk+0xe4/0x150
[  295.176971][    C0]  ? arch_stack_walk+0xe4/0x150
[  295.176987][    C0]  stack_trace_save+0x9c/0xe0
[  295.177002][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  295.177018][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  295.177029][    C0]  ? sched_clock+0x3f/0x60
[  295.177047][    C0]  ? sched_clock_cpu+0x74/0x430
[  295.177060][    C0]  ? clockevents_program_event+0x24d/0x360
[  295.177079][    C0]  kasan_save_track+0x3e/0x80
[  295.177115][    C0]  ? __pfx_kasan_save_alloc_info+0x10/0x10
[  295.177131][    C0]  __kasan_slab_alloc+0x6c/0x80
[  295.177149][    C0]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  295.177169][    C0]  ? __alloc_skb+0x112/0x2d0
[  295.177186][    C0]  __alloc_skb+0x112/0x2d0
[  295.177202][    C0]  __netdev_alloc_skb+0x108/0x970
[  295.177216][    C0]  ? __ieee80211_beacon_get+0x36/0x1880
[  295.177236][    C0]  ? __pfx___netdev_alloc_skb+0x10/0x10
[  295.177256][    C0]  __ieee80211_beacon_get+0xc06/0x1880
[  295.177274][    C0]  ? __ieee80211_beacon_get+0x36/0x1880
[  295.177296][    C0]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  295.177316][    C0]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  295.177338][    C0]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  295.177356][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  295.177376][    C0]  __iterate_interfaces+0x2ab/0x590
[  295.177392][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  295.177414][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  295.177432][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  295.177448][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  295.177467][    C0]  mac80211_hwsim_beacon+0xbb/0x1c0
[  295.177481][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  295.177494][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  295.177515][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  295.177533][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  295.177548][    C0]  handle_softirqs+0x286/0x870
[  295.177564][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  295.177579][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  295.177594][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  295.177612][    C0]  __irq_exit_rcu+0xca/0x1f0
[  295.177625][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  295.177641][    C0]  irq_exit_rcu+0x9/0x30
[  295.177653][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  295.177666][    C0]  </IRQ>
[  295.177671][    C0]  <TASK>
[  295.177676][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  295.177690][    C0] RIP: 0010:__schedule+0x150/0x4cc0
[  295.177704][    C0] Code: 80 3c 30 00 74 08 48 89 df e8 0c 0f a8 f6 4c 8b 23 49 8d 9c 24 88 7a a2 92 49 89 df 49 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <41> 80 3c 07 00 74 08 48 89 df e8 e1 0e a8 f6 48 89 5c 24 58 4c 8b
[  295.177714][    C0] RSP: 0018:ffffc900033cede0 EFLAGS: 00000a02
[  295.177724][    C0] RAX: dffffc0000000000 RBX: ffff88804b03aa88 RCX: fce5ea8cf87fa200
[  295.177734][    C0] RDX: 0000000000000000 RSI: ffffffff8be33de0 RDI: ffffffff8be33da0
[  295.177742][    C0] RBP: ffffc900033ceff0 R08: ffffffff8fa3a937 R09: 1ffffffff1f47526
[  295.177752][    C0] R10: dffffc0000000000 R11: fffffbfff1f47527 R12: ffff8880b8613000
[  295.177761][    C0] R13: 0000000000000001 R14: dffffc0000000000 R15: 1ffff11009607551
[  295.177781][    C0]  ? perf_trace_preemptirq_template+0x280/0x340
[  295.177799][    C0]  ? irqentry_enter+0x3d/0x60
[  295.177813][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  295.177833][    C0]  ? __pfx___schedule+0x10/0x10
[  295.177844][    C0]  ? irqentry_exit+0x74/0x90
[  295.177858][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  295.177879][    C0]  preempt_schedule_irq+0xb5/0x150
[  295.177919][    C0]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  295.177930][    C0]  ? __lock_acquire+0xab9/0xd20
[  295.177952][    C0]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  295.177967][    C0]  irqentry_exit+0x6f/0x90
[  295.177981][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  295.177994][    C0] RIP: 0010:__free_frozen_pages+0x698/0xd30
[  295.178015][    C0] Code: 89 da 89 e9 4c 8b 44 24 08 45 89 f9 e8 61 1f 00 00 4c 89 ef e8 a9 54 67 09 bf 01 00 00 00 e8 8f 76 7a ff 65 8b 05 18 37 8b 10 <85> c0 0f 84 80 01 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d
[  295.178026][    C0] RSP: 0018:ffffc900033cf168 EFLAGS: 00000297
[  295.178036][    C0] RAX: 0000000080000000 RBX: ffffea0000907200 RCX: 0000000000000000
[  295.178045][    C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00000000ffffffff
[  295.178052][    C0] RBP: 0000000000000000 R08: ffff88804b03fd03 R09: 1ffff11009607fa0
[  295.178061][    C0] R10: dffffc0000000000 R11: ffffed1009607fa1 R12: ffffffff8dbe2d10
[  295.178070][    C0] R13: ffff88804b03fd00 R14: ffff88805fffbb80 R15: 0000000000000000
[  295.178087][    C0]  ? __free_frozen_pages+0x691/0xd30
[  295.178109][    C0]  __put_partials+0x156/0x1a0
[  295.178124][    C0]  put_cpu_partial+0x17c/0x250
[  295.178138][    C0]  ? put_cpu_partial+0x6d/0x250
[  295.178151][    C0]  __slab_free+0x2d5/0x3c0
[  295.178166][    C0]  ? __phys_addr+0xd3/0x180
[  295.178184][    C0]  qlist_free_all+0x97/0x140
[  295.178201][    C0]  kasan_quarantine_reduce+0x148/0x160
[  295.178219][    C0]  __kasan_slab_alloc+0x22/0x80
[  295.178237][    C0]  __kmalloc_node_noprof+0x21b/0x4e0
[  295.178254][    C0]  ? __vmalloc_node_range_noprof+0x5a9/0x12f0
[  295.178276][    C0]  __vmalloc_node_range_noprof+0x5a9/0x12f0
[  295.178296][    C0]  ? irqentry_exit+0x74/0x90
[  295.178316][    C0]  ? bpf_check+0xf9/0x1d2c0
[  295.178332][    C0]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  295.178352][    C0]  ? __kvmalloc_node_noprof+0x33e/0x5f0
[  295.178370][    C0]  ? bpf_check+0x1a5/0x1d2c0
[  295.178384][    C0]  vzalloc_noprof+0xb2/0xf0
[  295.178407][    C0]  ? bpf_check+0x1a5/0x1d2c0
[  295.178421][    C0]  bpf_check+0x1a5/0x1d2c0
[  295.178434][    C0]  ? __pfx_perf_tp_event+0x10/0x10
[  295.178468][    C0]  ? perf_trace_run_bpf_submit+0xee/0x170
[  295.178485][    C0]  ? perf_trace_preemptirq_template+0x280/0x340
[  295.178503][    C0]  ? irqentry_enter+0x3d/0x60
[  295.178522][    C0]  ? irqentry_exit+0x74/0x90
[  295.178536][    C0]  ? __pfx_bpf_check+0x10/0x10
[  295.178553][    C0]  ? seqcount_lockdep_reader_access+0x175/0x1c0
[  295.178570][    C0]  ? seqcount_lockdep_reader_access+0x17e/0x1c0
[  295.178587][    C0]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  295.178607][    C0]  ? __asan_memset+0x22/0x50
[  295.178622][    C0]  ? bpf_obj_name_cpy+0x194/0x1e0
[  295.178634][    C0]  ? bpf_lsm_bpf_prog_load+0x9/0x20
[  295.178651][    C0]  ? security_bpf_prog_load+0x7f/0x310
[  295.178673][    C0]  bpf_prog_load+0x1318/0x1930
[  295.178699][    C0]  ? __pfx_bpf_prog_load+0x10/0x10
[  295.178725][    C0]  ? bpf_lsm_bpf+0x9/0x20
[  295.178740][    C0]  ? security_bpf+0x7e/0x300
[  295.178760][    C0]  __sys_bpf+0x528/0x870
[  295.178777][    C0]  ? __pfx___sys_bpf+0x10/0x10
[  295.178805][    C0]  __x64_sys_bpf+0x7c/0x90
[  295.178820][    C0]  do_syscall_64+0xfa/0x3b0
[  295.178836][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.178848][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  295.178864][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.178877][    C0] RIP: 0033:0x7f914af8eba9
[  295.178913][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  295.178925][    C0] RSP: 002b:00007f914bec2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  295.178937][    C0] RAX: ffffffffffffffda RBX: 00007f914b1d5fa0 RCX: 00007f914af8eba9
[  295.178946][    C0] RDX: 0000000000000094 RSI: 0000200000000a00 RDI: 0000000000000005
[  295.178954][    C0] RBP: 00007f914b011e19 R08: 0000000000000000 R09: 0000000000000000
[  295.178962][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  295.178969][    C0] R13: 00007f914b1d6038 R14: 00007f914b1d5fa0 R15: 00007ffda9203de8
[  295.178985][    C0]  </TASK>
[  295.652129][ T5239] Bluetooth: hci9: command tx timeout
[  295.654335][ T5239] Bluetooth: hci11: command tx timeout
[  295.669346][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  295.672184][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  295.675848][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  295.680606][   T34] Call Trace:
[  295.681901][   T34]  <TASK>
[  295.683066][   T34]  dump_stack_lvl+0x99/0x250
[  295.684894][   T34]  ? __asan_memcpy+0x40/0x70
[  295.686742][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  295.688905][   T34]  ? __pfx__printk+0x10/0x10
[  295.690753][   T34]  vpanic+0x281/0x750
[  295.692368][   T34]  ? __pfx_vpanic+0x10/0x10
[  295.694224][   T34]  ? preempt_schedule+0xae/0xc0
[  295.696138][   T34]  ? preempt_schedule_common+0x83/0xd0
[  295.698265][   T34]  panic+0xb9/0xc0
[  295.699723][   T34]  ? __pfx_panic+0x10/0x10
[  295.701454][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  295.703581][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  295.705990][   T34]  watchdog+0xfd2/0xfe0
[  295.707583][   T34]  ? watchdog+0x1de/0xfe0
[  295.709337][   T34]  kthread+0x711/0x8a0
[  295.710964][   T34]  ? __pfx_watchdog+0x10/0x10
[  295.712829][   T34]  ? __pfx_kthread+0x10/0x10
[  295.714720][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  295.716793][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  295.718887][   T34]  ? __pfx_kthread+0x10/0x10
[  295.720729][   T34]  ret_from_fork+0x439/0x7d0
[  295.722605][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  295.724672][   T34]  ? __switch_to_asm+0x39/0x70
[  295.726611][   T34]  ? __switch_to_asm+0x33/0x70
[  295.728554][   T34]  ? __pfx_kthread+0x10/0x10
[  295.730448][   T34]  ret_from_fork_asm+0x1a/0x30
[  295.732402][   T34]  </TASK>
[  295.734441][   T34] Kernel Offset: disabled
[  295.736218][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:10:09  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000001 RBX=ffff888108a08180 RCX=fce5ea8cf87fa200 RDX=ffff88803f170000
RSI=ffffffff8dba9832 RDI=ffffffff8be33e00 RBP=00000000ffffffff RSP=ffffc90000006c50
R8 =0000000000000000 R9 =ffffffff818c67e8 R10=dffffc0000000000 R11=ffffffff81eed1e0
R12=0000000000000001 R13=dffffc0000000000 R14=ffffffff8e13a120 R15=0000000000000001
RIP=ffffffff8b7a5c39 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f914bec26c0 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fbcc5888386 CR3=0000000106bdc000 CR4=000006f0
DR0=0000000000000000 DR1=0000200000000300 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=0000000000ffff00 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000792 RBX=0000000000000002 RCX=0000000000000003 RDX=0000000000000003
RSI=0000000000000000 RDI=ffff888107df0000 RBP=0000000000000000 RSP=ffffc90002e7f750
R8 =0000000000000000 R9 =ffffffff8b42ce30 R10=dffffc0000000000 R11=ffffed1023381717
R12=00000000ffffff05 R13=0000000000000001 R14=ffff888107df0b68 R15=ffff888107df0b60
RIP=ffffffff819d783e RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fbcc58ed347 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
