last executing test programs:

3.151349516s ago: executing program 1 (id=64):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400700000000000001000084060000000000000001"], 0x0, 0x42}, 0x20)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "0000000108653904030405ffffff09c56a3000", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a13bd5b6cc6a9471314a1d8c69"}}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_delneigh={0x2c, 0x1e, 0x1, 0x0, 0x4, {0x2}, [@NDA_DST_IPV4={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NDA_PROBES={0x8, 0x4, 0x2}]}, 0x2c}}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33)
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1}, 0x1f00)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r6 = accept4(r5, 0x0, 0x0, 0x80000)
sendmmsg$alg(r6, &(0x7f0000003380)=[{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000040)="b8dc", 0x2}, {&(0x7f0000000500)="82c3", 0x2}], 0x2, &(0x7f0000003440)=ANY=[], 0x118, 0x20000004}], 0x1, 0x20004000)
ioctl$int_in(r1, 0x5421, &(0x7f0000000180)=0xc)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
socket$nl_route(0x10, 0x3, 0x0)
recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0xe0, 0xe0, 0x178, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0xff000000, 'wg1\x00', 'lo\x00', {}, {0xff}, 0x2f, 0x1, 0x1}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@ipvs={{0x48}, {@ipv4=@rand_addr=0x64010102, [0xff, 0xffffff00, 0xffffffff, 0xff], 0x4e22, 0x3c, 0x2, 0x4e22, 0x1, 0x20}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ip={@private=0xa010100, @rand_addr=0x64010100, 0xff, 0xffffffff, 'veth1_to_bridge\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0x88, 0x1}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3}, {0x4, 0x6, 0x9}, 0x7, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310)
sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)

1.863102654s ago: executing program 0 (id=109):
r0 = socket(0x2, 0x5, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="24000000000000008400000001"], 0x30}], 0x1, 0x0)

1.86291783s ago: executing program 0 (id=110):
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
close(0x4)

971.236585ms ago: executing program 0 (id=119):
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000280)=0x2, 0x4)
setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000100)=0x6, 0x4)
connect$tipc(r0, &(0x7f0000000140)=@id, 0x10)

892.724858ms ago: executing program 0 (id=123):
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x12, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000010400000000000000000000711235000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

892.422758ms ago: executing program 0 (id=124):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x12)
r1 = socket$kcm(0x29, 0x5, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)=ANY=[], 0x20)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)='=q', 0x2}], 0x1}, 0x1)
recvmsg(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2)
recvmsg$unix(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x60000123)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newrule={0x1c, 0x1e, 0x1, 0xfffffffe, 0x4000002, {0x2, 0x30, 0x0, 0x1, 0x1, 0x0, 0x0, 0xe, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0xa810)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
socket$nl_route(0x10, 0x3, 0x0)
write$cgroup_int(r6, &(0x7f0000000200), 0x12)
setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000040)=0xc, 0x4)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x5c}}, 0x0)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000001000)="c4", 0x1}], 0x1)
socket$can_raw(0x1d, 0x3, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r10 = openat$cgroup_procs(r8, &(0x7f0000000080)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r9, &(0x7f00000000c0), 0x12)
preadv(r10, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1, 0x1, 0x0)

629.521361ms ago: executing program 2 (id=132):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000280)={0x40, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x40}}, 0x0)

549.454666ms ago: executing program 2 (id=133):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb9040220080000000000000000070a000a000900142603600e12b0001e0000050401a8000900027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4edef3985000092954b43370e970392", 0xd8}], 0x1}, 0x0)

549.380498ms ago: executing program 2 (id=134):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e40)={0x14, 0x2b, 0xb, 0x0, 0x0, {0x8}}, 0x14}}, 0x0)

483.920009ms ago: executing program 2 (id=135):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}, @qdisc_kind_options=@q_blackhole={0xe}]}, 0x58}}, 0x4000010)

483.815976ms ago: executing program 2 (id=136):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@empty, 0x1}, 0x20)

394.562769ms ago: executing program 2 (id=137):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r2=>0x0]}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={r2, 0x2000}, &(0x7f0000000140)=0x8)

149.969665ms ago: executing program 1 (id=138):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0)

74.103281ms ago: executing program 1 (id=139):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000580)="aac6354efc0a7f516e24a40452449924", 0x10)
getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f00000009c0))

73.977408ms ago: executing program 1 (id=140):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xffffff, 0x0, 0x0, 0x5}, 0x10)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x24)

12.22763ms ago: executing program 1 (id=141):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000300))

12.014424ms ago: executing program 1 (id=142):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39)

0s ago: executing program 0 (id=143):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000380)={0xa, 0x4e20, 0xfffffffe, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}], 0x18}, 0x4000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:15711' (ED25519) to the list of known hosts.
syzkaller login: [   40.826562][ T5741] cgroup: Unknown subsys name 'net'
[   40.915206][ T5741] cgroup: Unknown subsys name 'cpuset'
[   40.921209][ T5741] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.138730][ T5741] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.409022][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.423221][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.426815][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.429607][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.432560][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.446200][ T5821] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.450300][ T5821] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.454107][ T5821] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.456917][ T5821] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.459571][ T5821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.473645][ T5818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.478708][ T5818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.481641][ T5818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.487865][ T5818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.490455][ T5818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.625910][ T5814] chnl_net:caif_netlink_parms(): no params data found
[   45.709375][ T5817] chnl_net:caif_netlink_parms(): no params data found
[   45.724696][ T5823] chnl_net:caif_netlink_parms(): no params data found
[   45.737041][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.739317][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.741762][ T5814] bridge_slave_0: entered allmulticast mode
[   45.745376][ T5814] bridge_slave_0: entered promiscuous mode
[   45.772182][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.774457][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.776679][ T5814] bridge_slave_1: entered allmulticast mode
[   45.779328][ T5814] bridge_slave_1: entered promiscuous mode
[   45.854101][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.857103][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.859405][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.861666][ T5817] bridge_slave_0: entered allmulticast mode
[   45.864706][ T5817] bridge_slave_0: entered promiscuous mode
[   45.868681][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.879098][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.881368][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.884256][ T5817] bridge_slave_1: entered allmulticast mode
[   45.886857][ T5817] bridge_slave_1: entered promiscuous mode
[   45.905814][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.908080][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.910391][ T5823] bridge_slave_0: entered allmulticast mode
[   45.913980][ T5823] bridge_slave_0: entered promiscuous mode
[   45.926135][ T5814] team0: Port device team_slave_0 added
[   45.928301][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.930758][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.933887][ T5823] bridge_slave_1: entered allmulticast mode
[   45.936641][ T5823] bridge_slave_1: entered promiscuous mode
[   45.955388][ T5814] team0: Port device team_slave_1 added
[   45.958640][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.977854][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.989288][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.999953][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.002675][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.010528][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.016036][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.019240][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.021493][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.029960][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.042002][ T5817] team0: Port device team_slave_0 added
[   46.057904][ T5817] team0: Port device team_slave_1 added
[   46.069573][ T5823] team0: Port device team_slave_0 added
[   46.073616][ T5823] team0: Port device team_slave_1 added
[   46.103777][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.106228][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.114576][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.119081][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.121334][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.129493][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.152605][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.154825][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.163416][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.167915][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.170105][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.178413][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.185354][ T5814] hsr_slave_0: entered promiscuous mode
[   46.187762][ T5814] hsr_slave_1: entered promiscuous mode
[   46.222377][ T5817] hsr_slave_0: entered promiscuous mode
[   46.224662][ T5817] hsr_slave_1: entered promiscuous mode
[   46.226790][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.229612][ T5817] Cannot create hsr debugfs directory
[   46.247884][ T5823] hsr_slave_0: entered promiscuous mode
[   46.250125][ T5823] hsr_slave_1: entered promiscuous mode
[   46.252652][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.254993][ T5823] Cannot create hsr debugfs directory
[   46.440735][ T5814] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.453877][ T5814] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.464379][ T5814] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.472717][ T5814] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.499772][ T5817] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.506683][ T5817] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.516984][ T5817] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.521341][ T5817] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.543626][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.545936][ T5814] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.548535][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.550754][ T5814] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.557056][ T5823] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.561897][ T5823] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.573012][ T5823] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.578327][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.580573][ T5817] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.583010][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.585336][ T5817] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.595261][ T5823] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.634736][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.637124][ T5823] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.639557][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.641829][ T5823] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.653672][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.657487][  T155] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.660600][  T155] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.665444][  T155] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.668396][  T155] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.671186][  T155] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.676769][  T155] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.693430][ T5814] 8021q: adding VLAN 0 to HW filter on device team0
[   46.705187][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.707435][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.710693][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.713024][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.748816][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.755294][ T5814] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   46.758671][ T5814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   46.780886][ T5817] 8021q: adding VLAN 0 to HW filter on device team0
[   46.791892][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.794283][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.810116][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.820395][ T5817] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   46.827268][ T5817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   46.833627][  T155] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.835951][  T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.850022][ T5823] 8021q: adding VLAN 0 to HW filter on device team0
[   46.862071][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.864527][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.876811][  T155] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.879149][  T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.888837][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.945791][ T5823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   46.985980][ T5814] veth0_vlan: entered promiscuous mode
[   46.989123][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.995036][ T5814] veth1_vlan: entered promiscuous mode
[   47.037436][ T5817] veth0_vlan: entered promiscuous mode
[   47.040095][ T5814] veth0_macvtap: entered promiscuous mode
[   47.056963][ T5814] veth1_macvtap: entered promiscuous mode
[   47.063959][ T5817] veth1_vlan: entered promiscuous mode
[   47.080650][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.087792][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.093469][ T5814] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.096290][ T5814] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.098970][ T5814] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.101707][ T5814] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.120826][ T5817] veth0_macvtap: entered promiscuous mode
[   47.125386][ T5817] veth1_macvtap: entered promiscuous mode
[   47.133969][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.148409][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.160155][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.177892][ T5817] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.180706][ T5817] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.186412][ T5817] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.189087][ T5817] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.219059][ T5823] veth0_vlan: entered promiscuous mode
[   47.226723][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.229210][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.233650][ T5823] veth1_vlan: entered promiscuous mode
[   47.266447][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.270623][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.285568][ T5823] veth0_macvtap: entered promiscuous mode
[   47.292209][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.294677][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.299851][ T5823] veth1_macvtap: entered promiscuous mode
[   47.320961][ T5814] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.328247][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.337756][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.345843][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.348521][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.356785][ T5823] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.364366][ T5823] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.367104][ T5823] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.369749][ T5823] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.443035][ T5821] Bluetooth: hci0: command tx timeout
[   47.467108][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.469583][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.491699][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.496182][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.523110][ T5821] Bluetooth: hci2: command tx timeout
[   47.525015][ T5821] Bluetooth: hci1: command tx timeout
[   47.599549][ T5897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'.
[   47.636059][ T5899] netlink: 'syz.1.10': attribute type 21 has an invalid length.
[   47.639853][ T5899] netlink: 128 bytes leftover after parsing attributes in process `syz.1.10'.
[   47.650769][ T5899] netlink: 'syz.1.10': attribute type 4 has an invalid length.
[   47.653647][ T5899] netlink: 'syz.1.10': attribute type 3 has an invalid length.
[   47.656182][ T5899] netlink: 3 bytes leftover after parsing attributes in process `syz.1.10'.
[   47.668480][ T5888] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   47.714562][ T5888] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.718591][ T5888] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.752586][ T5907] af_packet: tpacket_rcv: packet too big, clamped from 5 to 4294967272. macoff=96
[   47.774601][ T5909] syz.2.15 uses obsolete (PF_INET,SOCK_PACKET)
[   47.809035][ T5911] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.16'.
[   47.819748][ T5911] netlink: zone id is out of range
[   47.821574][ T5911] netlink: zone id is out of range
[   47.823726][ T5911] netlink: zone id is out of range
[   47.825359][ T5911] netlink: zone id is out of range
[   47.826933][ T5911] netlink: zone id is out of range
[   47.828589][ T5911] netlink: zone id is out of range
[   47.830282][ T5911] netlink: zone id is out of range
[   47.831898][ T5911] netlink: zone id is out of range
[   47.834813][ T5911] netlink: zone id is out of range
[   47.841032][ T5911] netlink: zone id is out of range
[   47.883844][ T5915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'.
[   47.913178][ T5919] ip6t_REJECT: TCP_RESET illegal for non-tcp
[   47.994512][ T5923] Zero length message leads to an empty skb
[   48.028398][ T5927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24'.
[   48.037509][ T5929] netlink: 'syz.0.25': attribute type 1 has an invalid length.
[   48.157972][ T5940] netlink: 256 bytes leftover after parsing attributes in process `syz.0.30'.
[   48.266652][ T5948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34'.
[   48.376056][ T5956] netlink: 28 bytes leftover after parsing attributes in process `syz.0.38'.
[   48.379024][ T5956] netlink: 28 bytes leftover after parsing attributes in process `syz.0.38'.
[   48.590888][ T5972] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[   48.919180][ T5982] syzkaller1: entered promiscuous mode
[   48.921091][ T5982] syzkaller1: entered allmulticast mode
[   49.326539][ T5877] IPVS: starting estimator thread 0...
[   49.365890][ T6005] Bluetooth: MGMT ver 1.23
[   49.423429][ T6001] IPVS: using max 79 ests per chain, 189600 per kthread
[   49.522915][ T5818] Bluetooth: hci0: command tx timeout
[   49.602364][ T5818] Bluetooth: hci1: command tx timeout
[   49.604414][ T5821] Bluetooth: hci2: command tx timeout
[   49.649961][ T6011] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   49.870699][ T6038] netlink: 'syz.2.75': attribute type 10 has an invalid length.
[   49.873710][ T6038] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.876246][ T6038] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.882001][ T6038] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.884479][ T6038] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.887040][ T6038] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.889334][ T6038] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.896338][ T6038] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   50.341197][ T6071] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   50.564757][ T6093] netlink: 'syz.0.101': attribute type 7 has an invalid length.
[   50.657908][ T6101] netlink: 'syz.0.105': attribute type 1 has an invalid length.
[   51.603536][ T5821] Bluetooth: hci0: command tx timeout
[   51.682790][ T5818] Bluetooth: hci1: command tx timeout
[   51.684652][ T5821] Bluetooth: hci2: command tx timeout
[   52.039458][ T6173] netlink: 'syz.2.133': attribute type 30 has an invalid length.
[   52.615283][ T6192] 
[   52.616508][ T6192] =============================
[   52.618146][ T6192] WARNING: suspicious RCU usage
[   52.619773][ T6192] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   52.623413][ T6192] -----------------------------
[   52.625049][ T6192] net/core/netclassid_cgroup.c:24 suspicious rcu_dereference_check() usage!
[   52.627835][ T6192] 
[   52.627835][ T6192] other info that might help us debug this:
[   52.627835][ T6192] 
[   52.630993][ T6192] 
[   52.630993][ T6192] rcu_scheduler_active = 2, debug_locks = 1
[   52.633799][ T6192] 1 lock held by syz.1.142/6192:
[   52.635340][ T6192]  #0: ffffffff8e13f040 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x38/0x80
[   52.638497][ T6192] 
[   52.638497][ T6192] stack backtrace:
[   52.640308][ T6192] CPU: 0 UID: 0 PID: 6192 Comm: syz.1.142 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   52.640319][ T6192] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   52.640323][ T6192] Call Trace:
[   52.640329][ T6192]  <TASK>
[   52.640333][ T6192]  dump_stack_lvl+0x189/0x250
[   52.640350][ T6192]  ? __pfx_dump_stack_lvl+0x10/0x10
[   52.640363][ T6192]  ? __pfx__printk+0x10/0x10
[   52.640373][ T6192]  ? print_lock_name+0xde/0x100
[   52.640384][ T6192]  lockdep_rcu_suspicious+0x140/0x1d0
[   52.640400][ T6192]  task_cls_state+0x1a5/0x1d0
[   52.640413][ T6192]  bpf_get_cgroup_classid_curr+0x18/0x60
[   52.640422][ T6192]  bpf_prog_841aec7193f618b3+0x1b/0x21
[   52.640450][ T6192]  bpf_prog_run_pin_on_cpu+0x6a/0x150
[   52.640460][ T6192]  bpf_prog_test_run_syscall+0x312/0x4b0
[   52.640470][ T6192]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[   52.640478][ T6192]  ? __fget_files+0x2a/0x420
[   52.640490][ T6192]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[   52.640500][ T6192]  bpf_prog_test_run+0x2c7/0x340
[   52.640513][ T6192]  __sys_bpf+0x4a4/0x860
[   52.640524][ T6192]  ? __pfx___sys_bpf+0x10/0x10
[   52.640539][ T6192]  ? exc_page_fault+0x76/0xf0
[   52.640553][ T6192]  ? rcu_is_watching+0x15/0xb0
[   52.640569][ T6192]  __x64_sys_bpf+0x7c/0x90
[   52.640578][ T6192]  do_syscall_64+0xfa/0x3b0
[   52.640585][ T6192]  ? lockdep_hardirqs_on+0x9c/0x150
[   52.640594][ T6192]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   52.640601][ T6192]  ? exc_page_fault+0x9f/0xf0
[   52.640611][ T6192]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   52.640618][ T6192] RIP: 0033:0x7f0ec5b8e929
[   52.640625][ T6192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   52.640632][ T6192] RSP: 002b:00007f0ec6988038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   52.640640][ T6192] RAX: ffffffffffffffda RBX: 00007f0ec5db5fa0 RCX: 00007f0ec5b8e929
[   52.640645][ T6192] RDX: 0000000000000039 RSI: 0000200000000500 RDI: 000000000000000a
[   52.640649][ T6192] RBP: 00007f0ec5c10b39 R08: 0000000000000000 R09: 0000000000000000
[   52.640653][ T6192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   52.640657][ T6192] R13: 0000000000000000 R14: 00007f0ec5db5fa0 R15: 00007ffdafabcdb8
[   52.640667][ T6192]  </TASK>
[   53.148616][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.213131][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.263701][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.331548][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.411800][   T13] bridge_slave_1: left allmulticast mode
[   53.417328][   T13] bridge_slave_1: left promiscuous mode
[   53.419693][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.424968][   T13] bridge_slave_0: left allmulticast mode
[   53.426709][   T13] bridge_slave_0: left promiscuous mode
[   53.428733][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.618792][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   53.623890][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   53.627954][   T13] bond0 (unregistering): Released all slaves
[   53.807540][   T13] hsr_slave_0: left promiscuous mode
[   53.809716][   T13] hsr_slave_1: left promiscuous mode
[   53.811718][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   53.816172][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   53.819255][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   53.821557][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   53.830567][   T13] veth1_macvtap: left promiscuous mode
[   53.833596][   T13] veth0_macvtap: left promiscuous mode
[   53.835494][   T13] veth1_vlan: left promiscuous mode
[   53.837210][   T13] veth0_vlan: left promiscuous mode
[   54.047835][   T13] team0 (unregistering): Port device team_slave_1 removed
[   54.066290][   T13] team0 (unregistering): Port device team_slave_0 removed
[   54.469484][   T13] IPVS: stop unused estimator thread 0...
[   54.535804][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.577130][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.658269][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.713338][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.818353][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.885232][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.944306][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.985832][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.075155][   T13] bridge_slave_1: left allmulticast mode
[   55.076988][   T13] bridge_slave_1: left promiscuous mode
[   55.078843][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.086889][   T13] bridge_slave_0: left allmulticast mode
[   55.089566][   T13] bridge_slave_0: left promiscuous mode
[   55.092195][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.097297][   T13] bridge_slave_1: left allmulticast mode
[   55.099192][   T13] bridge_slave_1: left promiscuous mode
[   55.101083][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.106333][   T13] bridge_slave_0: left allmulticast mode
[   55.108129][   T13] bridge_slave_0: left promiscuous mode
[   55.110035][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.225785][   T13] bond0 (unregistering): (slave bridge0): Releasing backup interface
[   55.295661][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   55.299756][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   55.304939][   T13] bond0 (unregistering): Released all slaves
[   55.452287][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   55.456266][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   55.459814][   T13] bond0 (unregistering): Released all slaves
[   55.858113][   T13] hsr_slave_0: left promiscuous mode
[   55.860615][   T13] hsr_slave_1: left promiscuous mode
[   55.862693][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   55.865260][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   55.869534][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   55.871859][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   55.878577][   T13] hsr_slave_0: left promiscuous mode
[   55.880704][   T13] hsr_slave_1: left promiscuous mode
[   55.883126][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   55.885491][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   55.889617][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   55.891948][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   55.916430][   T13] veth1_macvtap: left promiscuous mode
[   55.918322][   T13] veth0_macvtap: left promiscuous mode
[   55.920144][   T13] veth1_vlan: left promiscuous mode
[   55.921808][   T13] veth0_vlan: left promiscuous mode
[   55.926054][   T13] veth1_macvtap: left promiscuous mode
[   55.927868][   T13] veth0_macvtap: left promiscuous mode
[   55.929716][   T13] veth1_vlan: left promiscuous mode
[   55.931467][   T13] veth0_vlan: left promiscuous mode
[   56.176356][   T13] team0 (unregistering): Port device team_slave_1 removed
[   56.192154][   T13] team0 (unregistering): Port device team_slave_0 removed
[   56.497066][   T13] team0 (unregistering): Port device team_slave_1 removed
[   56.514019][   T13] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
17:35:40  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000065 RBX=0000000000000065 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000f46 RDI=0000000000000f47 RBP=00000000000003f8 RSP=ffffc90003a9f550
R8 =ffff888108240237 R9 =1ffff11021048046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac48ea R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f0ec69886c0 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2f41fffc CR3=000000003754c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f0ec5d84478 00007f0ec5d84450 XMM03=00007f0ec5d84488 00007f0ec5d84480
XMM04=00007f0ec68ed100 00007f0ec5d84440 XMM05=00007f0ec5d84458 00007f0ec5d844a0
XMM06=00007f0ec5d84498 00007f0ec5d84490 XMM07=00007f0ec5d84488 00007f0ec5d84480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f0ec5c11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b4d920 RBX=ffff88813663b1c0 RCX=ffff888107a3b980 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc900032af700 RSP=ffffc900032af5a0
R8 =ffffffff8fa10cf7 R9 =1ffffffff1f4219e R10=dffffc0000000000 R11=fffffbfff1f4219f
R12=1ffff11009608385 R13=dffffc0000000000 R14=0000000000000000 R15=ffff88804b041c28
RIP=ffffffff81b4d909 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f054d8e7d60 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f054cd846a3 00007f054cd846a3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=000055557cfaaf9c 000055557cfaac10
XMM06=000055557cfa0804 000055557cfa0800 XMM07=08000eb003020490 000ea00300049000
XMM08=0102808010000004 0100000008060601 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
