last executing test programs:

16.703551529s ago: executing program 2 (id=310):
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5, 0x4, 0x5}, {0x10000002, 0x5}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
close(r0)
r3 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
close(r3)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0xdffb, @loopback}, 0xffffffffffffffae, 0x0, 0x32}, 0xc8002)
setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r7, 0x10)

16.54141517s ago: executing program 2 (id=311):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x100200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x31, &(0x7f0000000100), 0x120)
socket$kcm(0x2, 0x2, 0x84)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4040000)
socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
socket$kcm(0x10, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="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"/2165], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r4=>0x0, 0x0})
close(r4)
socket$kcm(0x10, 0x3, 0x10)
setsockopt$sock_attach_bpf(r4, 0x10e, 0x2, &(0x7f0000000300)=r3, 0x4)

15.930729121s ago: executing program 0 (id=322):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x6c}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)

15.88450845s ago: executing program 1 (id=323):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000002200)=""/275, 0x113}, {&(0x7f0000003100)=""/4056, 0xfd8}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f00000006c0)=""/191, 0xbf}, {&(0x7f0000000240)=""/213, 0xd5}, {&(0x7f0000001100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000e00)=""/216, 0xd8}, {&(0x7f0000000a40)=""/190, 0xbe}, {&(0x7f0000000940)=""/198, 0xc6}, {&(0x7f0000000600)=""/37, 0x25}, {&(0x7f0000000bc0)=""/133, 0x85}], 0xc}, 0x40012100)
recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

15.801070429s ago: executing program 0 (id=324):
r0 = socket$kcm(0x1e, 0x4, 0x0)
sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000001540)=@nfc={0x27, 0x0, 0x0, 0x7}, 0x80, 0x0}, 0x0)

15.74068673s ago: executing program 0 (id=325):
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="850000008e0000007b00000000000000270000000a0000009500000000000000ed5f0be3755142ae31484cd0115bab2d0589e8ab9f429b60317312f13bd708a35c0670c61fc97c4551f58ae3bbfb9f1d97582f15f3922a3c39716ebdd3c864aec6bc39f3bf389d21e614314b44d3a320471dc33ceec91a1512761160808845c885e7e75118ae8702a167ce7d0ca850e435f105f4c7702c8505fc4669acef909579390b1a6795fae716b04fba77244be06160107ab2a3a30645bbec6570170c1d362e6d6209fa0809ffbcc48bfa0175374dc3"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23)

15.740529968s ago: executing program 1 (id=326):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000071116200000000008510000002000000a50000000500000095000000000000009500a5050000000078432dd442f68ba7fe2d282dc5bd6363a98aecd4b0deda447fc21574f82c7ff3eac5b814f85708ac7765aba5cb99845d8d1de7b9aefaa8b749ef36251fbe292c7e339c9d436dbdd3bcfa4c0b42413a1b5693c9ab00b0973b57cbf344499e932f11ea0126896b99df066fc1"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)

15.686749136s ago: executing program 1 (id=327):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x71}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c)

15.686448383s ago: executing program 0 (id=328):
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xa758, 0x5, 0x9, 0x1}, 0x50)

15.686128827s ago: executing program 0 (id=329):
r0 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001040)=""/4095, 0xfff}, {&(0x7f0000003080)=""/4104, 0x1008}, {&(0x7f0000000440)=""/214, 0xd6}, {&(0x7f0000000540)=""/224, 0xe0}], 0x4}, 0x0)
sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000)

15.621066045s ago: executing program 1 (id=330):
r0 = socket$kcm(0x10, 0x3, 0x10)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
sendmsg$kcm(r0, 0x0, 0x40040)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x4, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$tun(0xffffffffffffff9c, 0x0, 0x105040, 0x0)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10)
close(r2)

15.620870224s ago: executing program 2 (id=331):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xfffffec0, 0x0, &(0x7f0000000000)='\b', 0x0, 0x1, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}, 0x50)

15.550244661s ago: executing program 1 (id=332):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)

15.550028275s ago: executing program 2 (id=333):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90b24fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

15.471130239s ago: executing program 0 (id=334):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x100002e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x7, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000440))
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r3, 0x0, 0x34004811)
r4 = socket$kcm(0x23, 0x5, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r6 = openat$cgroup_devices(r5, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r6, &(0x7f0000000000)={'c', ' *:* ', 'rwm\x00'}, 0xa)
sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89ed, 0x0)

15.470934486s ago: executing program 2 (id=335):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x660}}, &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034004000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83", 0xd4}, {&(0x7f00000014c0)="5c9ebe30", 0x4}], 0x2}, 0x0)

15.394096978s ago: executing program 1 (id=336):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081024e81f783db4cb9040a1d080006007c09e8fc55a10a0015000400142603600e1209000f0000000601a8000960040008400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0)

15.393876527s ago: executing program 2 (id=337):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$kcm(0x10, 0x2, 0x0)
close(0xffffffffffffffff)
r1 = socket$kcm(0xa, 0x1, 0x106)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x39, 0x0, 0x1}, 0x28)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), 0x0}, 0x20)
r2 = perf_event_open$cgroup(&(0x7f0000000200)={0x1, 0x80, 0x40, 0x10, 0x80, 0x8, 0x0, 0x8, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x8, 0x1}, 0x109002, 0x4, 0x8, 0x2, 0x9, 0x0, 0x8, 0x0, 0x9, 0x0, 0x5}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r3, &(0x7f0000000780)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff)
sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca)
r4 = socket$kcm(0xa, 0x3, 0x73)
sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}, 0x0)
recvmsg(r4, 0x0, 0x2102)
socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e120602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4000850)

148.70584ms ago: executing program 32 (id=334):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x100002e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x7, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000440))
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r3, 0x0, 0x34004811)
r4 = socket$kcm(0x23, 0x5, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r6 = openat$cgroup_devices(r5, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r6, &(0x7f0000000000)={'c', ' *:* ', 'rwm\x00'}, 0xa)
sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89ed, 0x0)

90.106791ms ago: executing program 33 (id=336):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081024e81f783db4cb9040a1d080006007c09e8fc55a10a0015000400142603600e1209000f0000000601a8000960040008400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0)

0s ago: executing program 34 (id=337):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$kcm(0x10, 0x2, 0x0)
close(0xffffffffffffffff)
r1 = socket$kcm(0xa, 0x1, 0x106)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x39, 0x0, 0x1}, 0x28)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), 0x0}, 0x20)
r2 = perf_event_open$cgroup(&(0x7f0000000200)={0x1, 0x80, 0x40, 0x10, 0x80, 0x8, 0x0, 0x8, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x8, 0x1}, 0x109002, 0x4, 0x8, 0x2, 0x9, 0x0, 0x8, 0x0, 0x9, 0x0, 0x5}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r3, &(0x7f0000000780)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff)
sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca)
r4 = socket$kcm(0xa, 0x3, 0x73)
sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}, 0x0)
recvmsg(r4, 0x0, 0x2102)
socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e120602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4000850)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:58656' (ED25519) to the list of known hosts.
syzkaller login: [   48.891270][ T5789] cgroup: Unknown subsys name 'net'
[   49.019762][ T5789] cgroup: Unknown subsys name 'cpuset'
[   49.023523][ T5789] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.730784][ T5789] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.319775][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.323314][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.326099][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.329631][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.332700][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.409234][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.412261][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.415111][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.418525][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.421289][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.455368][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.458326][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.461051][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.464950][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.468213][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.578022][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   55.657145][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   55.682515][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.685214][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.688331][ T5827] bridge_slave_0: entered allmulticast mode
[   55.691541][ T5827] bridge_slave_0: entered promiscuous mode
[   55.697562][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.699957][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.702345][ T5827] bridge_slave_1: entered allmulticast mode
[   55.705463][ T5827] bridge_slave_1: entered promiscuous mode
[   55.747640][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.777103][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.831445][ T5827] team0: Port device team_slave_0 added
[   55.844697][ T5827] team0: Port device team_slave_1 added
[   55.847566][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   55.862480][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.865124][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.867758][ T5832] bridge_slave_0: entered allmulticast mode
[   55.870490][ T5832] bridge_slave_0: entered promiscuous mode
[   55.890457][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.893255][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.896000][ T5832] bridge_slave_1: entered allmulticast mode
[   55.899425][ T5832] bridge_slave_1: entered promiscuous mode
[   55.919335][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.921668][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.930883][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.954071][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.957669][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.968679][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.975208][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.991567][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.011698][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.014096][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.016684][ T5835] bridge_slave_0: entered allmulticast mode
[   56.019370][ T5835] bridge_slave_0: entered promiscuous mode
[   56.038770][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.041193][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.043525][ T5835] bridge_slave_1: entered allmulticast mode
[   56.046855][ T5835] bridge_slave_1: entered promiscuous mode
[   56.060448][ T5832] team0: Port device team_slave_0 added
[   56.092791][ T5832] team0: Port device team_slave_1 added
[   56.103550][ T5827] hsr_slave_0: entered promiscuous mode
[   56.108486][ T5827] hsr_slave_1: entered promiscuous mode
[   56.114131][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.120914][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.184719][ T5835] team0: Port device team_slave_0 added
[   56.189284][ T5835] team0: Port device team_slave_1 added
[   56.199087][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.201354][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.209721][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.250274][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.252546][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.261268][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.273518][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.275886][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.284960][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.300479][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.302828][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.311755][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.365774][ T5832] hsr_slave_0: entered promiscuous mode
[   56.368958][ T5832] hsr_slave_1: entered promiscuous mode
[   56.371633][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.374508][ T5832] Cannot create hsr debugfs directory
[   56.409365][ T5835] hsr_slave_0: entered promiscuous mode
[   56.411703][ T5835] hsr_slave_1: entered promiscuous mode
[   56.414256][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.417453][ T5835] Cannot create hsr debugfs directory
[   56.571793][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.588545][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.615532][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.640454][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.734483][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.741998][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.766057][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.775440][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.822337][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.828460][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.839342][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.847648][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.908717][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.933444][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   56.954628][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.957500][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.962635][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.965444][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.996260][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.018735][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   57.043388][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.046727][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.070381][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.073496][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.088837][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.120992][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   57.142295][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.144624][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.151110][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.153604][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.241856][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.291797][ T5827] veth0_vlan: entered promiscuous mode
[   57.302240][ T5827] veth1_vlan: entered promiscuous mode
[   57.328597][ T5827] veth0_macvtap: entered promiscuous mode
[   57.333519][ T5827] veth1_macvtap: entered promiscuous mode
[   57.350102][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.363888][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.371039][ T5827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.374054][ T5827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.380192][ T5827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.382982][ T5827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.387448][ T5218] Bluetooth: hci0: command tx timeout
[   57.442969][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.477444][ T5218] Bluetooth: hci1: command tx timeout
[   57.485753][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.491299][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.503389][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.523480][ T5832] veth0_vlan: entered promiscuous mode
[   57.534339][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.538149][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.545623][ T5832] veth1_vlan: entered promiscuous mode
[   57.557485][ T5218] Bluetooth: hci2: command tx timeout
[   57.598257][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.606126][ T5835] veth0_vlan: entered promiscuous mode
[   57.614768][ T5832] veth0_macvtap: entered promiscuous mode
[   57.625163][ T5835] veth1_vlan: entered promiscuous mode
[   57.633542][ T5832] veth1_macvtap: entered promiscuous mode
[   57.668996][ T5835] veth0_macvtap: entered promiscuous mode
[   57.679213][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.697747][ T5835] veth1_macvtap: entered promiscuous mode
[   57.714797][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.725178][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.735273][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.740144][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.743107][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.746071][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.759832][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.764124][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.768213][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.771008][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.773883][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.815332][ T5892] warning: `syz.1.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   57.881864][  T193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.884610][  T193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.921016][  T193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.923619][  T193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.956259][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.958983][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.969496][  T193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.975618][  T193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.301483][ T5923] netlink: 'syz.0.16': attribute type 39 has an invalid length.
[   58.304315][ T5923] netlink: 'syz.0.16': attribute type 4 has an invalid length.
[   58.311751][ T5923] netlink: 152 bytes leftover after parsing attributes in process `syz.0.16'.
[   58.332322][ T5923] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[   59.017752][ T5218] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30
[   59.020368][ T5218] Bluetooth: hci2: Invalid handle: 0x85b0 > 0x0eff
[   59.133896][    C0] hrtimer: interrupt took 34357 ns
[   59.486400][ T5830] Bluetooth: hci0: command tx timeout
[   59.559845][ T5830] Bluetooth: hci1: command tx timeout
[   59.628020][ T5830] Bluetooth: hci2: command tx timeout
[   59.769304][ T5993] netlink: 'syz.1.41': attribute type 10 has an invalid length.
[   60.152272][ T6000] syz.2.44 uses obsolete (PF_INET,SOCK_PACKET)
[   60.425594][ T6004] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.46'.
[   60.453629][ T6004] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.46'.
[   60.466024][ T6004] netlink: 2 bytes leftover after parsing attributes in process `syz.0.46'.
[   60.538514][ T6006] netlink: 'syz.0.47': attribute type 13 has an invalid length.
[   60.541229][ T6006] netlink: 40 bytes leftover after parsing attributes in process `syz.0.47'.
[   60.545926][ T6006] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len
[   60.708435][ T6012] syz.0.50: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   60.715344][ T6012] CPU: 1 UID: 0 PID: 6012 Comm: syz.0.50 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[   60.715365][ T6012] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   60.715374][ T6012] Call Trace:
[   60.715379][ T6012]  <TASK>
[   60.715385][ T6012]  dump_stack_lvl+0x189/0x250
[   60.715409][ T6012]  ? __pfx_dump_stack_lvl+0x10/0x10
[   60.715425][ T6012]  ? __pfx__printk+0x10/0x10
[   60.715442][ T6012]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   60.715459][ T6012]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   60.715475][ T6012]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   60.715492][ T6012]  warn_alloc+0x214/0x310
[   60.715507][ T6012]  ? stack_depot_save_flags+0x429/0x900
[   60.715526][ T6012]  ? __pfx_warn_alloc+0x10/0x10
[   60.715541][ T6012]  ? kasan_save_track+0x4f/0x80
[   60.715554][ T6012]  ? xskq_create+0x56/0x170
[   60.715569][ T6012]  ? xsk_init_queue+0xb0/0x110
[   60.715579][ T6012]  ? xsk_setsockopt+0x4de/0x710
[   60.715590][ T6012]  ? do_sock_setsockopt+0x17c/0x1b0
[   60.715601][ T6012]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   60.715612][ T6012]  ? do_syscall_64+0xfa/0x3b0
[   60.715628][ T6012]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.715646][ T6012]  __vmalloc_node_range_noprof+0x125/0x12f0
[   60.715680][ T6012]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   60.715694][ T6012]  ? __kasan_kmalloc+0x93/0xb0
[   60.715708][ T6012]  vmalloc_user_noprof+0xad/0xf0
[   60.715722][ T6012]  ? xskq_create+0xbf/0x170
[   60.715737][ T6012]  xskq_create+0xbf/0x170
[   60.715753][ T6012]  xsk_init_queue+0xb0/0x110
[   60.715769][ T6012]  xsk_setsockopt+0x4de/0x710
[   60.715782][ T6012]  ? __pfx_xsk_setsockopt+0x10/0x10
[   60.715828][ T6012]  ? __fget_files+0x2a/0x420
[   60.715844][ T6012]  ? aa_sock_opt_perm+0x74/0x110
[   60.715863][ T6012]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   60.715880][ T6012]  ? __pfx_xsk_setsockopt+0x10/0x10
[   60.715895][ T6012]  do_sock_setsockopt+0x17c/0x1b0
[   60.715910][ T6012]  __x64_sys_setsockopt+0x13f/0x1b0
[   60.715927][ T6012]  do_syscall_64+0xfa/0x3b0
[   60.715941][ T6012]  ? lockdep_hardirqs_on+0x9c/0x150
[   60.715956][ T6012]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.715967][ T6012]  ? exc_page_fault+0x9f/0xf0
[   60.715983][ T6012]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.715995][ T6012] RIP: 0033:0x7fa6f578e9a9
[   60.716006][ T6012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   60.716017][ T6012] RSP: 002b:00007fa6f65b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   60.716030][ T6012] RAX: ffffffffffffffda RBX: 00007fa6f59b5fa0 RCX: 00007fa6f578e9a9
[   60.716038][ T6012] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006
[   60.716045][ T6012] RBP: 00007fa6f5810d69 R08: 0000000000000004 R09: 0000000000000000
[   60.716052][ T6012] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[   60.716060][ T6012] R13: 0000000000000000 R14: 00007fa6f59b5fa0 R15: 00007ffca4722ad8
[   60.716081][ T6012]  </TASK>
[   60.716088][ T6012] Mem-Info:
[   60.836052][ T6012] active_anon:5384 inactive_anon:0 isolated_anon:0
[   60.836052][ T6012]  active_file:811 inactive_file:38204 isolated_file:0
[   60.836052][ T6012]  unevictable:1768 dirty:1425 writeback:0
[   60.836052][ T6012]  slab_reclaimable:9042 slab_unreclaimable:52874
[   60.836052][ T6012]  mapped:18023 shmem:2433 pagetables:891
[   60.836052][ T6012]  sec_pagetables:0 bounce:0
[   60.836052][ T6012]  kernel_misc_reclaimable:0
[   60.836052][ T6012]  free:304135 free_pcp:20673 free_cma:0
[   60.857359][ T6012] Node 0 active_anon:12784kB inactive_anon:0kB active_file:2536kB inactive_file:142244kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40024kB dirty:5388kB writeback:0kB shmem:4960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8316kB pagetables:2404kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   60.871778][ T6012] Node 1 active_anon:8752kB inactive_anon:0kB active_file:708kB inactive_file:10572kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32068kB dirty:312kB writeback:0kB shmem:4772kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3056kB pagetables:1160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   60.887718][ T6012] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   60.900238][ T6012] lowmem_reserve[]: 0 812 812 812 812
[   60.902686][ T6012] Node 0 DMA32 free:257540kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12784kB inactive_anon:0kB active_file:2536kB inactive_file:142244kB unevictable:3536kB writepending:5388kB present:1556484kB managed:831912kB mlocked:0kB bounce:0kB free_pcp:50688kB local_pcp:14720kB free_cma:0kB
[   60.918754][ T6012] lowmem_reserve[]: 0 0 0 0 0
[   60.920972][ T6012] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   60.937517][ T6012] lowmem_reserve[]: 0 0 854 854 854
[   60.940068][ T6012] Node 1 Normal free:484640kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8752kB inactive_anon:0kB active_file:708kB inactive_file:10572kB unevictable:3536kB writepending:312kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:32088kB local_pcp:17148kB free_cma:0kB
[   60.955703][ T6012] lowmem_reserve[]: 0 0 0 0 0
[   60.958861][ T6012] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   60.964101][ T6012] Node 0 DMA32: 109*4kB (UM) 3342*8kB (UME) 24*16kB (UME) 159*32kB (UME) 56*64kB (UME) 17*128kB (UM) 8*256kB (UME) 6*512kB (UME) 5*1024kB (UME) 8*2048kB (UME) 47*4096kB (UM) = 257540kB
[   60.976501][ T6012] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   60.984275][ T6012] Node 1 Normal: 734*4kB (UME) 393*8kB (UME) 242*16kB (UM) 61*32kB (UME) 11*64kB (UME) 6*128kB (UM) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 4*2048kB (ME) 111*4096kB (M) = 484416kB
[   60.991197][ T6012] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   60.994228][ T6012] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   60.998459][ T6012] 41450 total pagecache pages
[   61.000088][ T6012] 0 pages in swap cache
[   61.001512][ T6012] Free swap  = 124996kB
[   61.003131][ T6012] Total swap = 124996kB
[   61.004573][ T6012] 786301 pages RAM
[   61.005967][ T6012] 0 pages HighMem/MovableOnly
[   61.007987][ T6012] 241075 pages reserved
[   61.009410][ T6012] 0 pages cma reserved
[   61.193651][ T6018] netlink: 132 bytes leftover after parsing attributes in process `syz.1.52'.
[   61.295516][ T6022] netlink: 'syz.1.54': attribute type 39 has an invalid length.
[   61.556629][ T5830] Bluetooth: hci0: command tx timeout
[   61.626756][ T5830] Bluetooth: hci1: command tx timeout
[   61.707612][ T5830] Bluetooth: hci2: command tx timeout
[   61.822276][ T6047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.64'.
[   61.989296][ T6052] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[   61.994318][ T6052] Zero length message leads to an empty skb
[   62.528315][ T6074] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode
[   62.533658][ T6074] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[   63.636536][ T5830] Bluetooth: hci0: command tx timeout
[   63.738988][ T5830] Bluetooth: hci1: command tx timeout
[   63.819403][ T5830] Bluetooth: hci2: command tx timeout
[   65.199392][ T6156] netlink: 132 bytes leftover after parsing attributes in process `syz.1.109'.
[   65.644625][ T6174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.121'.
[   66.724885][ T6210] netlink: 168 bytes leftover after parsing attributes in process `syz.2.137'.
[   67.186090][ T6226] netlink: 'syz.2.143': attribute type 2 has an invalid length.
[   67.189952][ T6226] netlink: 137592 bytes leftover after parsing attributes in process `syz.2.143'.
[   67.441362][ T5830] Bluetooth: hci2: unexpected cc 0x1004 length: 12 > 11
[   68.361995][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1015637009 wd_nsec: 1015637066
[   69.437843][ T6263] netlink: 60 bytes leftover after parsing attributes in process `syz.1.158'.
[   71.474858][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.479467][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.484957][ T5830] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[   71.489124][ T5830] Bluetooth: hci2: Injecting HCI hardware error event
[   71.492669][ T5830] Bluetooth: hci2: hardware error 0x00
[   71.760278][ T6300] netlink: 731 bytes leftover after parsing attributes in process `syz.2.175'.
[   72.785368][ T5218] Bluetooth: hci1: unexpected cc 0x1004 length: 12 > 11
[   72.864732][ T6357] nbd: must specify an index to disconnect
[   73.706527][ T5830] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[   74.117196][ T6403] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   74.639518][ T6447] netlink: 'syz.1.242': attribute type 2 has an invalid length.
[   74.642453][ T6447] netlink: 85376 bytes leftover after parsing attributes in process `syz.1.242'.
[   74.659756][ T6450] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[   75.339366][ T6469] netlink: 'syz.1.252': attribute type 21 has an invalid length.
[   75.343752][ T6469] netlink: 'syz.1.252': attribute type 6 has an invalid length.
[   75.348207][ T6469] netlink: 132 bytes leftover after parsing attributes in process `syz.1.252'.
[   75.618219][ T6479] netlink: 'syz.2.256': attribute type 6 has an invalid length.
[   75.621293][ T6479] netlink: 168 bytes leftover after parsing attributes in process `syz.2.256'.
[   76.836390][ T5830] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[   76.839185][ T5830] Bluetooth: hci1: Injecting HCI hardware error event
[   76.842375][ T5218] Bluetooth: hci1: hardware error 0x00
[   77.112812][ T6514] netlink: 'syz.1.272': attribute type 10 has an invalid length.
[   77.153995][ T6514] team0: Device ipvlan1 failed to register rx_handler
[   77.282166][ T6525] netlink: 'syz.0.277': attribute type 1 has an invalid length.
[   77.285196][ T6525] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.277'.
[   77.503595][ T6533] netlink: 188 bytes leftover after parsing attributes in process `syz.2.279'.
[   79.045500][ T6514] syz.1.272 (6514) used greatest stack depth: 20432 bytes left
[   79.146909][ T5218] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[   79.199558][ T6545] netlink: 60 bytes leftover after parsing attributes in process `syz.2.286'.
[   79.758673][ T6562] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.292'.
[   79.889436][ T6566] netlink: 'syz.1.296': attribute type 11 has an invalid length.
[   79.892801][ T6566] netlink: 140 bytes leftover after parsing attributes in process `syz.1.296'.
[   80.045254][ T6574] netlink: 14 bytes leftover after parsing attributes in process `syz.2.299'.
[   80.051037][ T6574] hsr0: entered promiscuous mode
[   80.053291][ T6574] hsr0: entered allmulticast mode
[   80.057444][ T6574] hsr_slave_0: entered allmulticast mode
[   80.072027][ T6574] hsr_slave_1: entered allmulticast mode
[   80.137608][ T6576] syzkaller0: entered promiscuous mode
[   80.143010][ T6576] syzkaller0: entered allmulticast mode
[   81.147487][  T790] cfg80211: failed to load regulatory.db
[   81.566634][ T6598] netlink: 'syz.1.309': attribute type 10 has an invalid length.
[   81.643360][ T6598] team0: Device ipvlan1 failed to register rx_handler
[   82.268247][ T6625] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0500:0023 with DS=0x32
[   82.386627][ T6598] syz.1.309 (6598) used greatest stack depth: 20344 bytes left
[   82.459276][ T6633] netlink: 'syz.1.323': attribute type 29 has an invalid length.
[   82.473924][ T6633] netlink: 'syz.1.323': attribute type 29 has an invalid length.
[   82.482487][ T6633] netlink: 'syz.1.323': attribute type 29 has an invalid length.
[   82.492125][ T6633] netlink: 'syz.1.323': attribute type 29 has an invalid length.
[   82.745371][ T6651] netlink: 60 bytes leftover after parsing attributes in process `syz.0.329'.
[   82.755709][ T6647] netlink: 60 bytes leftover after parsing attributes in process `syz.0.329'.
[   82.787685][ T6654] netlink: 809 bytes leftover after parsing attributes in process `syz.2.333'.
[   82.791813][ T6654] netlink: 130160 bytes leftover after parsing attributes in process `syz.2.333'.
[   82.856237][ T6657] netlink: 'syz.2.335': attribute type 21 has an invalid length.
[   82.869710][ T6657] netlink: 132 bytes leftover after parsing attributes in process `syz.2.335'.
[   82.890375][ T6660] netlink: 'syz.1.336': attribute type 21 has an invalid length.
[   82.893830][ T6660] netlink: 'syz.1.336': attribute type 15 has an invalid length.
[   82.898113][ T6660] netlink: 156 bytes leftover after parsing attributes in process `syz.1.336'.
[   82.903596][ T6660] IPv6: NLM_F_CREATE should be specified when creating new route
[   82.914099][ T6660] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   82.917481][ T6660] IPv6: NLM_F_CREATE should be set when creating new route
[   82.920649][ T6660] IPv6: NLM_F_CREATE should be set when creating new route
[   82.923824][ T6660] IPv6: NLM_F_CREATE should be set when creating new route
[   82.933522][ T6662] netlink: 'syz.2.337': attribute type 10 has an invalid length.
[   82.944554][ T6662] veth1_vlan: entered allmulticast mode
[   83.001579][ T6662] team0: Device veth1_vlan failed to register rx_handler
[   98.655282][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   98.658284][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   98.661371][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   98.664078][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   98.669116][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   98.672333][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   98.674985][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   98.679072][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   98.681831][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   98.684447][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   98.871485][   T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   98.875034][   T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   98.878812][   T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   98.882348][   T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   98.889292][   T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   98.981293][ T6674] chnl_net:caif_netlink_parms(): no params data found
[  100.746890][ T6680] Bluetooth: hci3: command tx timeout
[  100.749824][   T54] Bluetooth: hci4: command tx timeout
[  100.907472][   T54] Bluetooth: hci5: command tx timeout
[  102.826785][   T54] Bluetooth: hci4: command tx timeout
[  102.829116][   T54] Bluetooth: hci3: command tx timeout
[  102.986451][ T6680] Bluetooth: hci5: command tx timeout
[  104.906761][ T6680] Bluetooth: hci3: command tx timeout
[  104.909064][ T6680] Bluetooth: hci4: command tx timeout
[  105.066642][   T54] Bluetooth: hci5: command tx timeout
[  106.986536][   T54] Bluetooth: hci4: command tx timeout
[  106.988415][   T54] Bluetooth: hci3: command tx timeout
[  107.146565][ T6680] Bluetooth: hci5: command tx timeout
[  159.945944][ T5837] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  159.953487][ T5837] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  159.956239][ T5837] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  159.959461][ T5837] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  159.962031][ T5837] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  159.978391][ T5837] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  159.981256][ T5837] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  159.983910][ T5837] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  159.988564][ T5837] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  159.991182][ T5837] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  160.013409][ T6680] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  160.016398][ T6680] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  160.019291][ T6680] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  160.022130][ T6680] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  160.024730][ T6680] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  162.026680][ T6680] Bluetooth: hci6: command tx timeout
[  162.029403][ T6680] Bluetooth: hci7: command tx timeout
[  162.106538][ T5837] Bluetooth: hci8: command tx timeout
[  164.106524][ T5837] Bluetooth: hci7: command tx timeout
[  164.108857][ T5837] Bluetooth: hci6: command tx timeout
[  164.186728][ T6680] Bluetooth: hci8: command tx timeout
[  166.196715][ T6680] Bluetooth: hci6: command tx timeout
[  166.199071][ T6680] Bluetooth: hci7: command tx timeout
[  166.266551][ T5837] Bluetooth: hci8: command tx timeout
[  168.276774][ T5837] Bluetooth: hci7: command tx timeout
[  168.279126][ T5837] Bluetooth: hci6: command tx timeout
[  168.356649][ T6680] Bluetooth: hci8: command tx timeout
[  188.006353][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
[  188.008615][    C0] rcu: 	0-....: (10499 ticks this GP) idle=41b4/1/0x4000000000000000 softirq=17060/17061 fqs=4718
[  188.014037][    C0] rcu: 	         hardirqs   softirqs   csw/system
[  188.016161][    C0] rcu: 	 number:   972692          0            0
[  188.018264][    C0] rcu: 	cputime:    24295      28184           95   ==> 52480(ms)
[  188.021048][    C0] rcu: 	(t=10500 jiffies g=9985 q=2773 ncpus=2)
SYZFAIL: failed to recv rpc
[  188.023501][    C0] CPU: 0 UID: 0 PID: 6663 Comm: syz.0.334 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  188.023530][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  188.023535][    C0] RIP: 0010:rcu_read_unlock_special+0x87/0x4c0
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  188.023551][    C0] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 62 2c f8 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
[  188.023556][    C0] RSP: 0018:ffffc900000075e0 EFLAGS: 00000206
[  188.023564][    C0] RAX: e2f438b483813900 RBX: 1ffff92000000ec4 RCX: e2f438b483813900
[  188.023568][    C0] RDX: 0000000000000003 RSI: ffffffff8d99883e RDI: ffffffff8be29f40
[  188.023573][    C0] RBP: ffffc900000076d8 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  188.023577][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffffffff8e144400
[  188.023581][    C0] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000001
[  188.023586][    C0] FS:  00007fa6f65936c0(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
[  188.023591][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  188.023595][    C0] CR2: 0000000000000000 CR3: 000000010f57c000 CR4: 00000000000006f0
[  188.023620][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  188.023625][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  188.023629][    C0] Call Trace:
[  188.023633][    C0]  <IRQ>
[  188.023636][    C0]  ? __lock_acquire+0xab9/0xd20
[  188.023648][    C0]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  188.023666][    C0]  ? unwind_next_frame+0xa5/0x2390
[  188.023678][    C0]  __rcu_read_unlock+0x84/0xe0
[  188.023688][    C0]  ? unwind_next_frame+0xa5/0x2390
[  188.023694][    C0]  unwind_next_frame+0x19ae/0x2390
[  188.023705][    C0]  ? unwind_next_frame+0xa5/0x2390
[  188.023715][    C0]  ? __kasan_slab_free+0x62/0x70
[  188.023729][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  188.023743][    C0]  arch_stack_walk+0x11c/0x150
[  188.023762][    C0]  ? kmem_cache_free+0x18f/0x400
[  188.023779][    C0]  stack_trace_save+0x9c/0xe0
[  188.023794][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  188.023812][    C0]  ? __irq_exit_rcu+0xd8/0x1f0
[  188.023826][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  188.023841][    C0]  kasan_save_track+0x3e/0x80
[  188.023850][    C0]  ? kasan_save_track+0x3e/0x80
[  188.023858][    C0]  ? kasan_save_free_info+0x46/0x50
[  188.023870][    C0]  ? __kasan_slab_free+0x62/0x70
[  188.023909][    C0]  ? rcu_core+0xca8/0x1710
[  188.023916][    C0]  kasan_save_free_info+0x46/0x50
[  188.023924][    C0]  __kasan_slab_free+0x62/0x70
[  188.023930][    C0]  kmem_cache_free+0x18f/0x400
[  188.023937][    C0]  ? __pfx_mt_free_rcu+0x10/0x10
[  188.023947][    C0]  ? rcu_core+0xc34/0x1710
[  188.023954][    C0]  rcu_core+0xca8/0x1710
[  188.023960][    C0]  ? hrtimer_interrupt+0x889/0xaa0
[  188.023976][    C0]  ? __pfx_rcu_core+0x10/0x10
[  188.023985][    C0]  ? irqentry_exit+0x74/0x90
[  188.023994][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  188.024007][    C0]  ? handle_softirqs+0x2ae/0x870
[  188.024015][    C0]  ? kasan_check_range+0x26/0x2c0
[  188.024025][    C0]  handle_softirqs+0x286/0x870
[  188.024034][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  188.024043][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  188.024053][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  188.024064][    C0]  __irq_exit_rcu+0xca/0x1f0
[  188.024071][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  188.024082][    C0]  irq_exit_rcu+0x9/0x30
[  188.024088][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  188.024097][    C0]  </IRQ>
[  188.024099][    C0]  <TASK>
[  188.024102][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  188.024109][    C0] RIP: 0010:preempt_schedule_irq+0xb0/0x150
[  188.024117][    C0] Code: 24 20 f6 44 24 21 02 74 0c 90 0f 0b 48 f7 03 08 00 00 00 74 64 bf 01 00 00 00 e8 8b 2d 21 f6 e8 c6 00 58 f6 fb bf 01 00 00 00 <e8> 1b ab ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24
[  188.024123][    C0] RSP: 0018:ffffc90008fdf840 EFLAGS: 00000286
[  188.024129][    C0] RAX: e2f438b483813900 RBX: 0000000000000000 RCX: e2f438b483813900
[  188.024133][    C0] RDX: 0000000000000007 RSI: ffffffff8d99883e RDI: 0000000000000001
[  188.024137][    C0] RBP: ffffc90008fdf8f0 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  188.024141][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 0000000000000000
[  188.024145][    C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920011fbf08
[  188.024158][    C0]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  188.024170][    C0]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  188.024178][    C0]  irqentry_exit+0x6f/0x90
[  188.024186][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  188.024192][    C0] RIP: 0010:put_cpu_partial+0x1b4/0x250
[  188.024200][    C0] Code: 85 b5 00 00 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 68 87 55 09 f7 c5 00 02 00 00 74 bc fb 4d 85 e4 <75> bb eb c4 90 e8 d2 04 a5 02 85 c0 74 22 83 3d 5b 18 89 0d 00 75
[  188.024204][    C0] RSP: 0018:ffffc90008fdf9b0 EFLAGS: 00000246
[  188.024209][    C0] RAX: e2f438b483813900 RBX: ffff88801aba2b40 RCX: e2f438b483813900
[  188.024214][    C0] RDX: 0000000000000007 RSI: ffffffff8d99883e RDI: ffffffff8be29f40
[  188.024218][    C0] RBP: 0000000000000282 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  188.024222][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 0000000000000000
[  188.024226][    C0] R13: 0000000000000000 R14: ffff88801ff68000 R15: ffff88804b043630
[  188.024238][    C0]  ? put_cpu_partial+0x6d/0x250
[  188.024247][    C0]  __slab_free+0x2f7/0x400
[  188.024257][    C0]  ? __phys_addr+0xd3/0x180
[  188.024267][    C0]  qlist_free_all+0x97/0x140
[  188.024278][    C0]  kasan_quarantine_reduce+0x148/0x160
[  188.024288][    C0]  __kasan_slab_alloc+0x22/0x80
[  188.024296][    C0]  __kmalloc_cache_noprof+0x1be/0x3d0
[  188.024306][    C0]  ? bfq_cpd_alloc+0x73/0x120
[  188.024321][    C0]  bfq_cpd_alloc+0x73/0x120
[  188.024333][    C0]  blkcg_css_alloc+0x515/0xa80
[  188.024353][    C0]  cgroup_apply_control_enable+0x3d4/0xa80
[  188.024370][    C0]  ? css_next_descendant_pre+0x183/0x260
[  188.024394][    C0]  cgroup_mkdir+0xc40/0xe60
[  188.024416][    C0]  ? __pfx_cgroup_mkdir+0x10/0x10
[  188.024431][    C0]  kernfs_iop_mkdir+0x211/0x350
[  188.024458][    C0]  vfs_mkdir+0x306/0x510
[  188.024476][    C0]  do_mkdirat+0x247/0x590
[  188.024489][    C0]  ? __pfx_do_mkdirat+0x10/0x10
[  188.024538][    C0]  ? getname_flags+0x1e5/0x540
[  188.024550][    C0]  __x64_sys_mkdirat+0x87/0xa0
[  188.024557][    C0]  do_syscall_64+0xfa/0x3b0
[  188.024567][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.024573][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  188.024582][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.024588][    C0] RIP: 0033:0x7fa6f578e9a9
[  188.024596][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  188.024601][    C0] RSP: 002b:00007fa6f6593038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  188.024607][    C0] RAX: ffffffffffffffda RBX: 00007fa6f59b6080 RCX: 00007fa6f578e9a9
[  188.024612][    C0] RDX: 00000000000001ff RSI: 0000200000000040 RDI: ffffffffffffff9c
[  188.024616][    C0] RBP: 00007fa6f5810d69 R08: 0000000000000000 R09: 0000000000000000
[  188.024620][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  188.024623][    C0] R13: 0000000000000000 R14: 00007fa6f59b6080 R15: 00007ffca4722ad8
[  188.024635][    C0]  </TASK>
[  188.289826][    C0] sched: DL replenish lagged too much

VM DIAGNOSIS:
16:06:17  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000034 RBX=0000000000000034 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000006910
R8 =ffff888107e80237 R9 =1ffff11020fd0046 R10=dffffc0000000000 R11=ffffffff85472aa0
R12=dffffc0000000000 R13=ffffffff99af58a9 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff85472b1c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa6f65936c0 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000010f57c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007fa6f5811ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=ffffffff8e144480 RCX=ffffffff8b71260c RDX=0000000000000000
RSI=0000000000000004 RDI=ffffffff8e144480 RBP=ffffc90002fbf398 RSP=ffffc90002fbf2a0
R8 =ffffffff8e144483 R9 =1ffffffff1c28890 R10=dffffc0000000000 R11=fffffbfff1c28891
R12=1ffff920005f7e5c R13=0000000000000001 R14=ffffc90002fbf300 R15=1ffffffff1c28890
RIP=ffffffff8b7125ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f875a438f7a CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
