last executing test programs:

39.979881021s ago: executing program 1 (id=123):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbca313a181002c000000000100000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0)

39.82174371s ago: executing program 1 (id=127):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0)
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98)
sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0x34000}], 0x1}, 0x40)

39.821568509s ago: executing program 2 (id=128):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030010000b08d25a80648c7494f90324fc60100003400a000000053582c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

39.761087119s ago: executing program 1 (id=129):
r0 = socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRES32, @ANYBLOB="0000efff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1f000000}]}, &(0x7f0000000000)='GPL\x00', 0x6}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x8, 0x4, 0x2, 0x10, 0xffffffffffffffff, 0x9}, 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r1, &(0x7f0000000100)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
socket$kcm(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xa, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='rxrpc_client\x00', r2}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='rxrpc_client\x00', r2, 0x0, 0x5}, 0x18)
r3 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0xfc00)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="140000002b000b6c690000000000000002000000", 0x14}], 0x1}, 0x0)
r4 = socket$kcm(0x29, 0x7, 0x0)
recvmsg(r4, 0x0, 0x40)

39.760719094s ago: executing program 2 (id=131):
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$tipc(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x480d4)

39.679038049s ago: executing program 2 (id=132):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x84800)
recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001e40)=""/254, 0xfe}, {&(0x7f0000000c00)=""/230, 0xe6}, {&(0x7f0000003080)=""/4065, 0xfe1}, {&(0x7f0000000940)=""/176, 0xb0}, {&(0x7f0000000740)=""/208, 0xd0}, {&(0x7f0000000d00)=""/4059, 0xfdb}, {&(0x7f0000000b00)=""/194, 0xc2}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f0000000140)=""/196, 0xc4}], 0x9}, 0x40012100)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

39.620773833s ago: executing program 2 (id=133):
r0 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x80, &(0x7f0000000540)=[{&(0x7f00000002c0)="b564", 0x2}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"], 0x18}, 0x8080)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f00000001c0)=@un=@abs, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000480)="d1dd", 0x2}], 0x1}, 0x0)

39.620341636s ago: executing program 1 (id=135):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000018009b064e81f782db4cb904021d0800fe027c05e8fe55a10a0005000140020003600e41b00009", 0x2b}], 0x1}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab07001100"], 0xfe33)

39.551181725s ago: executing program 1 (id=136):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="b405000000000000711098000000000066000000000000009500000000000000bfd76ee96dd56ffd7713f23eab174876adbf83bb0c7c69b08047628a02bd43450c2c062a197aa28d2b15ba1ce55dcce2a591d27112605fb1cb1c4b991b8b4c99d4072b4314332d01b3440ca92fbbc2f05fc3e8a56e0b5e2726c66c81bdb056fb15ac175fb687525fc4c3837ffe49fa530cb9fa26bf2e0669a80913847be4735031c3fd6ebf87afa2704ca69854b9f0c99cea19baa7355d5fa8ef4429391c02"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)

39.550973052s ago: executing program 2 (id=137):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x510a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0x5421, 0x110e22fff7)

39.298860384s ago: executing program 2 (id=138):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x16}, 0x48)

39.129460244s ago: executing program 32 (id=138):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x16}, 0x48)

39.118516344s ago: executing program 1 (id=140):
bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0xfffffe58, 0x3}, 0x48)

39.118233267s ago: executing program 33 (id=140):
bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0xfffffe58, 0x3}, 0x48)

20.718517409s ago: executing program 0 (id=231):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000023c0), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00', 0x400})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))

20.599299063s ago: executing program 0 (id=235):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100})
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0xd, 0x7, 0x0, 0x7fffffff, 0x420, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={0x0, 0x4}, 0x26, 0x7ff, 0x5, 0x7, 0x81, 0x6, 0x5, 0x0, 0x2, 0x0, 0xe7}, 0x0, 0x9, 0xffffffffffffffff, 0x8)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89fb, &(0x7f0000000080))

20.329615209s ago: executing program 0 (id=237):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x6b}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

20.329226704s ago: executing program 0 (id=239):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000081001000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

20.250271477s ago: executing program 0 (id=242):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fec0000000000e1208000f0100810401a80016ea1f00064003030006000600000000005c0461c1d67f6f94642a052cae406401a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

20.247200476s ago: executing program 4 (id=244):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10)

20.179146917s ago: executing program 3 (id=245):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@map=r2, r2, 0x36, 0x2008, 0x0, @value=r2}, 0x20)

20.178717124s ago: executing program 0 (id=246):
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x5, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x3, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
socket$kcm(0x10, 0x2, 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x18002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, @perf_config_ext={0x1e0287bd, 0x5}, 0x10580, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000100)=[{0x34, 0x0, 0x0, 0xfffffffe}, {}, {0x6}]})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_procs(r2, 0x0, 0x2, 0x0)

20.178367424s ago: executing program 4 (id=247):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000010008104687da3aa7143a0b8c81d080b25000300e8fe55a118001500060014000040a8002b000e00014006046109d67f6f94007134cf6ee0a000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c4a918d1bcf0f938baa5d060a517898516277ce06bbace6f177ccbec4c2ee5a7cef4260027836b0d17a54ef5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f785025ccc806dcabced7ad654fac9609f4fb00"/207, 0xcf}], 0x1}, 0x4004)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0x15, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x114, 0xa, 0x0, 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000040)='%ps    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r2}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00'}, 0x80)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r4, 0x0, 0x6}, 0x18)
r6 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r6, r5, 0x0, 0xffffffffffffff65, &(0x7f00000001c0)='\x00'}, 0x11)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x4, &(0x7f0000000d80)=@raw=[@call={0x85, 0x0, 0x0, 0xc1}, @exit, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x800000c, 0x0, 0x0, 0x0, 0x8001}], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffa3)

20.115294941s ago: executing program 3 (id=248):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104e0000000000630ac0ff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x7300, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48)

19.96994002s ago: executing program 4 (id=249):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000000), 0x4)

19.969719414s ago: executing program 4 (id=250):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000050000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/14], 0x22)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

19.909629963s ago: executing program 4 (id=251):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
recvmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2122)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f00000000c0))

19.909400869s ago: executing program 3 (id=252):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

19.819413823s ago: executing program 3 (id=253):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f40)

19.819313471s ago: executing program 3 (id=254):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="e5ffffffffff"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
r0 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000), 0xc)

19.63875181s ago: executing program 3 (id=255):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'macvlan0\x00', @random="0100"})

15.273085077s ago: executing program 4 (id=256):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85c, 0x0, @perf_config_ext={0x101}, 0x120ca, 0xeb, 0x0, 0x5, 0x59f4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

5.093560517s ago: executing program 34 (id=246):
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x5, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x3, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
socket$kcm(0x10, 0x2, 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x18002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, @perf_config_ext={0x1e0287bd, 0x5}, 0x10580, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000100)=[{0x34, 0x0, 0x0, 0xfffffffe}, {}, {0x6}]})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_procs(r2, 0x0, 0x2, 0x0)

4.045489703s ago: executing program 35 (id=255):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'macvlan0\x00', @random="0100"})

0s ago: executing program 36 (id=256):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85c, 0x0, @perf_config_ext={0x101}, 0x120ca, 0xeb, 0x0, 0x5, 0x59f4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:56109' (ED25519) to the list of known hosts.
syzkaller login: [   49.778384][ T5756] cgroup: Unknown subsys name 'net'
[   49.908409][ T5756] cgroup: Unknown subsys name 'cpuset'
[   49.914883][ T5756] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.895482][ T5756] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.291389][ T5219] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.295246][ T5219] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.300639][ T5219] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.304755][ T5219] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.321991][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.362078][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.366342][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.368898][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.372365][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.376318][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.398609][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.401999][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.405050][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.408328][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.411213][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.648504][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   56.812214][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   56.878701][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.882220][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.887359][ T5826] bridge_slave_0: entered allmulticast mode
[   56.891245][ T5826] bridge_slave_0: entered promiscuous mode
[   56.905897][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   56.917250][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.920063][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.922828][ T5826] bridge_slave_1: entered allmulticast mode
[   56.927066][ T5826] bridge_slave_1: entered promiscuous mode
[   56.976074][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.981719][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.027255][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.030237][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.032579][ T5830] bridge_slave_0: entered allmulticast mode
[   57.036823][ T5830] bridge_slave_0: entered promiscuous mode
[   57.051520][ T5826] team0: Port device team_slave_0 added
[   57.055432][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.057610][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.059980][ T5830] bridge_slave_1: entered allmulticast mode
[   57.062678][ T5830] bridge_slave_1: entered promiscuous mode
[   57.071371][ T5826] team0: Port device team_slave_1 added
[   57.113304][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.115603][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.123041][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.145606][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.147818][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.155956][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.164948][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.167927][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.170139][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.172915][ T5835] bridge_slave_0: entered allmulticast mode
[   57.176685][ T5835] bridge_slave_0: entered promiscuous mode
[   57.180366][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.182597][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.185895][ T5835] bridge_slave_1: entered allmulticast mode
[   57.188631][ T5835] bridge_slave_1: entered promiscuous mode
[   57.192224][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.230648][ T5830] team0: Port device team_slave_0 added
[   57.260868][ T5830] team0: Port device team_slave_1 added
[   57.265878][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.298847][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.305111][ T5826] hsr_slave_0: entered promiscuous mode
[   57.308260][ T5826] hsr_slave_1: entered promiscuous mode
[   57.352348][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.355216][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.366021][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.386080][ T5835] team0: Port device team_slave_0 added
[   57.388984][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.391632][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.401639][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.409661][ T5835] team0: Port device team_slave_1 added
[   57.461731][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.464099][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.473166][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.478944][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.481158][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.490504][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.542641][ T5830] hsr_slave_0: entered promiscuous mode
[   57.546282][ T5830] hsr_slave_1: entered promiscuous mode
[   57.549045][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.552119][ T5830] Cannot create hsr debugfs directory
[   57.618114][ T5835] hsr_slave_0: entered promiscuous mode
[   57.622164][ T5835] hsr_slave_1: entered promiscuous mode
[   57.625983][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.628376][ T5835] Cannot create hsr debugfs directory
[   57.822131][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.857123][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.867940][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.872995][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.940076][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.948799][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.957097][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.964866][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   58.030825][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   58.036163][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   58.041624][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.054604][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.115939][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.121877][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.154052][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   58.162685][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   58.168831][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.171578][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.182289][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.185028][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.199237][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.201881][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.229587][ T5830] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   58.233398][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   58.245295][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.248030][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.288718][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.326670][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   58.333469][  T188] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.335810][  T188] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.359669][ T4122] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.361918][ T4122] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.384956][ T5833] Bluetooth: hci0: command tx timeout
[   58.437197][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.465146][ T5833] Bluetooth: hci2: command tx timeout
[   58.467386][ T5833] Bluetooth: hci1: command tx timeout
[   58.511422][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.519395][ T5830] veth0_vlan: entered promiscuous mode
[   58.528125][ T5830] veth1_vlan: entered promiscuous mode
[   58.564784][ T5830] veth0_macvtap: entered promiscuous mode
[   58.571398][ T5830] veth1_macvtap: entered promiscuous mode
[   58.591072][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.595760][ T5826] veth0_vlan: entered promiscuous mode
[   58.608309][ T5826] veth1_vlan: entered promiscuous mode
[   58.620609][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.626089][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.645442][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.648092][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.650668][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.653223][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.673056][ T5826] veth0_macvtap: entered promiscuous mode
[   58.687398][ T5835] veth0_vlan: entered promiscuous mode
[   58.691310][ T5826] veth1_macvtap: entered promiscuous mode
[   58.719482][ T5835] veth1_vlan: entered promiscuous mode
[   58.740160][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.774197][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.781947][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.785229][ T5826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.788751][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.791945][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.795800][ T5826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.798434][ T5826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.829199][ T5835] veth0_macvtap: entered promiscuous mode
[   58.837352][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.840768][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.844047][ T5835] veth1_macvtap: entered promiscuous mode
[   58.869642][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.881758][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.900287][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.902892][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.909134][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.911751][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.939229][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.943177][ T4122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.958841][ T4122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.026238][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.036117][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.066601][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.069631][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.135129][ T4122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.141574][ T4122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.249598][ T5904] syz.2.7 uses obsolete (PF_INET,SOCK_PACKET)
[   59.651583][ T5935] ksmbd: Unknown IPC event: 1, ignore.
[   59.693564][    C0] hrtimer: interrupt took 29978 ns
[   59.843519][ T5941] netlink: 10 bytes leftover after parsing attributes in process `syz.2.23'.
[   60.013017][ T5945] netlink: 'syz.2.24': attribute type 29 has an invalid length.
[   60.043363][ T5945] netlink: 'syz.2.24': attribute type 10 has an invalid length.
[   60.177236][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.246486][ T5945] team0: Port device bond0 added
[   60.295422][ T5945] syz.2.24 (5945) used greatest stack depth: 19744 bytes left
[   60.337917][ T5954] netlink: 'syz.0.27': attribute type 29 has an invalid length.
[   60.348362][ T5954] netlink: 'syz.0.27': attribute type 29 has an invalid length.
[   60.464027][ T5833] Bluetooth: hci0: command tx timeout
[   60.543901][ T5833] Bluetooth: hci2: command tx timeout
[   60.545728][ T5219] Bluetooth: hci1: command tx timeout
[   60.896602][ T6000] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.49'.
[   60.940820][ T6006] netlink: 56 bytes leftover after parsing attributes in process `syz.2.52'.
[   61.086799][ T6016] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.56'.
[   61.169191][ T6020] netlink: 'syz.2.59': attribute type 3 has an invalid length.
[   61.173013][ T6020] netlink: 'syz.2.59': attribute type 2 has an invalid length.
[   61.179883][ T6020] netlink: 198000 bytes leftover after parsing attributes in process `syz.2.59'.
[   61.291586][ T6028] ref_ctr_offset mismatch. inode: 0x7c offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20
[   61.427437][ T6037] netlink: 10 bytes leftover after parsing attributes in process `syz.1.65'.
[   61.464034][ T6038] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.701480][ T6050] netlink: 132 bytes leftover after parsing attributes in process `syz.1.72'.
[   61.879759][ T6062] netlink: 60 bytes leftover after parsing attributes in process `syz.0.79'.
[   61.886168][ T6062] netlink: 60 bytes leftover after parsing attributes in process `syz.0.79'.
[   61.895094][ T6062] netlink: 60 bytes leftover after parsing attributes in process `syz.0.79'.
[   62.003214][ T5219] Bluetooth: hci2: unexpected subevent 0x03 length: 150 > 9
[   62.107639][ T6082] netlink: 'syz.2.87': attribute type 21 has an invalid length.
[   62.110176][ T6082] netlink: 'syz.2.87': attribute type 4 has an invalid length.
[   62.113059][ T6082] netlink: 'syz.2.87': attribute type 3 has an invalid length.
[   62.544448][ T5219] Bluetooth: hci0: command tx timeout
[   62.623762][ T5219] Bluetooth: hci2: command tx timeout
[   62.634618][ T5219] Bluetooth: hci1: command tx timeout
[   63.669115][ T6124] netlink: zone id is out of range
[   63.671904][ T6124] netlink: zone id is out of range
[   63.687150][ T6124] netlink: get zone limit has 8 unknown bytes
[   63.802587][ T6131] Driver unsupported XDP return value 0 on prog  (id 39) dev N/A, expect packet loss!
[   64.623936][ T5219] Bluetooth: hci0: command tx timeout
[   64.692092][ T6165] netlink: 'syz.1.123': attribute type 39 has an invalid length.
[   64.703782][ T5219] Bluetooth: hci1: command tx timeout
[   64.704609][ T5833] Bluetooth: hci2: command tx timeout
[   64.843813][ T6176] __nla_validate_parse: 7 callbacks suppressed
[   64.843825][ T6176] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.128'.
[   64.968896][ T6185] netlink: 60 bytes leftover after parsing attributes in process `syz.2.132'.
[   64.972099][ T6185] netlink: 60 bytes leftover after parsing attributes in process `syz.2.132'.
[   64.978890][ T6185] netlink: 60 bytes leftover after parsing attributes in process `syz.2.132'.
[   65.048843][ T6192] netlink: 15998 bytes leftover after parsing attributes in process `syz.1.135'.
[   65.308145][ T5826] syz-executor (5826) used greatest stack depth: 19192 bytes left
[   65.334677][ T5859] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.437252][ T5859] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.519936][ T5859] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.588337][ T5859] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.697340][ T5859] bridge_slave_1: left allmulticast mode
[   65.700108][ T5859] bridge_slave_1: left promiscuous mode
[   65.702861][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.711270][ T5859] bridge_slave_0: left promiscuous mode
[   65.716742][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.946434][ T5859] team0: Port device bond0 removed
[   65.949867][ T5859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   65.954863][ T5859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   65.958949][ T5859] bond0 (unregistering): Released all slaves
[   66.231784][ T5859] hsr_slave_0: left promiscuous mode
[   66.235169][ T5859] hsr_slave_1: left promiscuous mode
[   66.238098][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.240673][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_0
[   66.244149][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.246497][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_1
[   66.265136][ T5859] veth1_macvtap: left promiscuous mode
[   66.267156][ T5859] veth0_macvtap: left promiscuous mode
[   66.269251][ T5859] veth1_vlan: left promiscuous mode
[   66.271088][ T5859] veth0_vlan: left promiscuous mode
[   66.553736][ T5859] team0 (unregistering): Port device team_slave_1 removed
[   66.573497][ T5859] team0 (unregistering): Port device team_slave_0 removed
[   67.049884][ T5219] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   67.052828][ T5219] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   67.057793][ T5219] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   67.061424][ T5219] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   67.064356][ T5219] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   67.206942][ T6242] chnl_net:caif_netlink_parms(): no params data found
[   67.245136][ T5859] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.305977][ T5859] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.339123][ T6242] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.346394][ T6242] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.348643][ T6242] bridge_slave_0: entered allmulticast mode
[   67.351320][ T6242] bridge_slave_0: entered promiscuous mode
[   67.357040][ T6242] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.359196][ T6242] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.361310][ T6242] bridge_slave_1: entered allmulticast mode
[   67.364305][ T6242] bridge_slave_1: entered promiscuous mode
[   67.390024][ T6242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.409167][ T5859] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.416900][ T6242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.439194][ T6242] team0: Port device team_slave_0 added
[   67.443375][ T6242] team0: Port device team_slave_1 added
[   67.462421][ T6242] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.465079][ T6242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.472617][ T6242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.478035][ T6242] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.480086][ T6242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.488186][ T6242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.507409][ T5859] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.548861][ T6242] hsr_slave_0: entered promiscuous mode
[   67.552687][ T6242] hsr_slave_1: entered promiscuous mode
[   67.716599][ T5859] bridge_slave_1: left allmulticast mode
[   67.718415][ T5859] bridge_slave_1: left promiscuous mode
[   67.720271][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.736705][ T5859] bridge_slave_0: left allmulticast mode
[   67.738507][ T5859] bridge_slave_0: left promiscuous mode
[   67.740329][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.964122][ T5859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   67.968425][ T5859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   67.972107][ T5859] bond0 (unregistering): Released all slaves
[   68.017647][ T6242] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   68.022259][ T6242] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   68.028630][ T6242] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   68.032816][ T6242] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   68.172884][ T6274] veth1_macvtap: left promiscuous mode
[   68.189018][ T6274] veth1_macvtap: entered promiscuous mode
[   68.193202][ T6274] macsec0: entered promiscuous mode
[   68.197147][ T6274] macsec0: entered allmulticast mode
[   68.198961][ T6274] veth1_macvtap: entered allmulticast mode
[   68.389078][ T5859] hsr_slave_0: left promiscuous mode
[   68.415553][ T5859] hsr_slave_1: left promiscuous mode
[   68.418495][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.421520][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_0
[   68.446318][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.449451][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_1
[   68.478056][ T5859] veth1_macvtap: left promiscuous mode
[   68.480429][ T5859] veth0_macvtap: left promiscuous mode
[   68.501556][ T5859] veth1_vlan: left promiscuous mode
[   68.504234][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   68.509591][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   68.515808][ T5859] veth0_vlan: left promiscuous mode
[   68.518687][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   68.525884][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   68.530263][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   68.997996][ T5859] team0 (unregistering): Port device team_slave_1 removed
[   69.020815][ T5859] team0 (unregistering): Port device team_slave_0 removed
[   69.103738][ T5833] Bluetooth: hci0: command tx timeout
[   69.307234][ T6242] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.388403][ T6242] 8021q: adding VLAN 0 to HW filter on device team0
[   69.467133][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.469881][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.489410][ T6283] chnl_net:caif_netlink_parms(): no params data found
[   69.531510][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.534364][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.611658][ T6307] validate_nla: 1 callbacks suppressed
[   69.611687][ T6307] netlink: 'syz.0.151': attribute type 13 has an invalid length.
[   69.624382][ T6307] netlink: 40 bytes leftover after parsing attributes in process `syz.0.151'.
[   69.639860][ T6307] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len
[   69.667430][ T6283] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.674750][ T6283] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.676916][ T6283] bridge_slave_0: entered allmulticast mode
[   69.682931][ T6283] bridge_slave_0: entered promiscuous mode
[   69.700245][ T6283] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.703218][ T6283] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.706108][ T6283] bridge_slave_1: entered allmulticast mode
[   69.710177][ T6283] bridge_slave_1: entered promiscuous mode
[   69.786340][ T6283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.792548][ T6283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.842690][ T6242] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   69.899371][ T6283] team0: Port device team_slave_0 added
[   69.920792][ T6283] team0: Port device team_slave_1 added
[   69.980456][ T6283] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.983292][ T6283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.992038][ T6283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.007746][ T6283] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.013827][ T6283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.023242][ T6283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.085500][ T6283] hsr_slave_0: entered promiscuous mode
[   70.088017][ T6283] hsr_slave_1: entered promiscuous mode
[   70.090828][ T6283] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   70.093523][ T6283] Cannot create hsr debugfs directory
[   70.107343][ T6242] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.199272][ T6338] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.159'.
[   70.416060][ T6283] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   70.430398][ T6283] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   70.439326][ T6283] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   70.470868][ T6283] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   70.547018][ T6242] veth0_vlan: entered promiscuous mode
[   70.583029][ T6283] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.589946][ T6242] veth1_vlan: entered promiscuous mode
[   70.615987][ T6283] 8021q: adding VLAN 0 to HW filter on device team0
[   70.629443][ T4122] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.631625][ T4122] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.634320][ T5833] Bluetooth: hci1: command tx timeout
[   70.641628][ T4122] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.644607][ T4122] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.649617][ T6363] netlink: 'syz.0.162': attribute type 1 has an invalid length.
[   70.652719][ T6363] netlink: 'syz.0.162': attribute type 4 has an invalid length.
[   70.667098][ T6363] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.162'.
[   70.729307][ T6242] veth0_macvtap: entered promiscuous mode
[   70.733377][ T6242] veth1_macvtap: entered promiscuous mode
[   70.764960][ T6242] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.784574][ T6242] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.799553][ T6242] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.802267][ T6242] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.823439][ T6242] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.828635][ T6242] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.871670][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   70.874841][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   70.969695][  T186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.972619][  T186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.978209][ T6283] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.042052][  T186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.045092][  T186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.072705][ T6283] veth0_vlan: entered promiscuous mode
[   71.083368][ T6283] veth1_vlan: entered promiscuous mode
[   71.125452][ T6283] veth0_macvtap: entered promiscuous mode
[   71.136890][ T6283] veth1_macvtap: entered promiscuous mode
[   71.173247][ T6283] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.182983][ T6283] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.188181][ T5833] Bluetooth: hci0: command tx timeout
[   71.188739][ T6283] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.199243][ T6283] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.201851][ T6283] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.218392][ T6283] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.346570][ T6392] netlink: 'syz.4.168': attribute type 41 has an invalid length.
[   71.369638][ T6392] netlink: 40 bytes leftover after parsing attributes in process `syz.4.168'.
[   71.412104][  T186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.428439][  T186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.485436][  T188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.488564][  T188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.507452][ T6397] warning: `syz.4.171' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   71.662582][ T6412] netlink: 60 bytes leftover after parsing attributes in process `syz.4.175'.
[   71.668821][ T6412] netlink: 60 bytes leftover after parsing attributes in process `syz.4.175'.
[   71.672123][ T6412] netlink: 60 bytes leftover after parsing attributes in process `syz.4.175'.
[   71.716725][ T6415] raw_sendmsg: syz.4.177 forgot to set AF_INET. Fix it!
[   72.439389][ T6442] : renamed from gre0 (while UP)
[   72.468832][ T6444] netlink: 14 bytes leftover after parsing attributes in process `syz.4.184'.
[   72.713767][ T5833] Bluetooth: hci1: command tx timeout
[   73.272699][ T5833] Bluetooth: hci0: command tx timeout
[   73.469886][ T6444] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   73.501620][ T6444] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   73.525112][ T6444] bond0 (unregistering): Released all slaves
[   73.700833][ T6465] netlink: 'syz.4.193': attribute type 1 has an invalid length.
[   73.711233][ T6465] netlink: 17 bytes leftover after parsing attributes in process `syz.4.193'.
[   73.999693][ T6478] netlink: 22 bytes leftover after parsing attributes in process `syz.4.195'.
[   74.786293][ T5833] Bluetooth: hci1: command tx timeout
[   75.205275][ T6500] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.203'.
[   75.344056][ T5833] Bluetooth: hci0: command tx timeout
[   75.480126][ T6504] blkio.reset_stats is deprecated
[   75.555785][ T6516] netlink: 'syz.0.208': attribute type 2 has an invalid length.
[   75.558684][ T6516] netlink: 'syz.0.208': attribute type 8 has an invalid length.
[   75.561135][ T6516] netlink: 132 bytes leftover after parsing attributes in process `syz.0.208'.
[   75.999300][ T6550] Dead loop on virtual device ip6_vti0, fix it urgently!
[   76.957422][ T5833] Bluetooth: hci1: command tx timeout
[   81.144230][   T24] cfg80211: failed to load regulatory.db
[   83.689700][ T6575] netlink: 'syz.4.226': attribute type 10 has an invalid length.
[   83.873910][ T6575] team0: Port device wlan1 added
[   84.162627][ T6600] bridge0: port 3(veth1_to_team) entered blocking state
[   84.174563][ T6600] bridge0: port 3(veth1_to_team) entered disabled state
[   84.176962][ T6600] veth1_to_team: entered allmulticast mode
[   84.203244][ T6600] veth1_to_team: entered promiscuous mode
[   84.209995][ T6600] bridge0: port 3(veth1_to_team) entered blocking state
[   84.212479][ T6600] bridge0: port 3(veth1_to_team) entered forwarding state
[   84.410460][ T6615] netlink: 132 bytes leftover after parsing attributes in process `syz.0.242'.
[   84.762059][ T6640] netlink: 'syz.3.252': attribute type 2 has an invalid length.
[   87.261030][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1966636131 wd_nsec: 1966636752
[   99.808168][ T5219] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   99.811544][ T5219] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   99.816104][ T5219] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   99.818945][ T5219] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   99.821653][ T5219] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  100.810021][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  100.813052][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  100.817957][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  100.820758][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  100.824241][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  101.904532][ T5219] Bluetooth: hci3: command tx timeout
[  102.864329][ T5219] Bluetooth: hci4: command tx timeout
[  103.984154][ T5219] Bluetooth: hci3: command tx timeout
[  104.955268][ T5219] Bluetooth: hci4: command tx timeout
[  105.145607][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  105.149750][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  105.153316][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  105.159476][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  105.163145][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  106.063737][ T5833] Bluetooth: hci3: command tx timeout
[  107.023801][ T5833] Bluetooth: hci4: command tx timeout
[  107.183823][ T5833] Bluetooth: hci5: command tx timeout
[  108.144446][ T5833] Bluetooth: hci3: command tx timeout
[  109.103868][ T5833] Bluetooth: hci4: command tx timeout
[  109.265310][ T5833] Bluetooth: hci5: command tx timeout
[  111.343951][ T5833] Bluetooth: hci5: command tx timeout
[  113.423957][ T5833] Bluetooth: hci5: command tx timeout
[  132.312392][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.315077][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  173.427731][ T5219] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  173.430588][ T5219] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  173.433148][ T5219] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  173.437127][ T5219] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  173.439507][ T5219] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  174.497086][ T5833] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  174.499960][ T5833] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  174.502596][ T5833] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  174.505965][ T5833] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  174.508513][ T5833] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  174.542743][ T5219] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  174.547885][ T5219] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  174.550447][ T5219] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  174.553225][ T5219] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  174.556610][ T5219] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  175.513848][ T5833] Bluetooth: hci0: command tx timeout
[  176.543745][ T5833] Bluetooth: hci6: command tx timeout
[  176.623748][ T5833] Bluetooth: hci7: command tx timeout
[  177.589872][ T5833] Bluetooth: hci0: command tx timeout
[  178.623776][ T5833] Bluetooth: hci6: command tx timeout
[  178.705264][ T5833] Bluetooth: hci7: command tx timeout
[  179.663844][ T5833] Bluetooth: hci0: command tx timeout
[  180.703742][ T5833] Bluetooth: hci6: command tx timeout
[  180.783767][ T5833] Bluetooth: hci7: command tx timeout
[  181.026721][ T5833] Bluetooth: hci2: command 0x0406 tx timeout
[  181.743740][ T5833] Bluetooth: hci0: command tx timeout
[  182.784091][ T5833] Bluetooth: hci6: command tx timeout
[  182.863811][ T5833] Bluetooth: hci7: command tx timeout
[  193.764652][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  193.767156][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  226.546818][ T5834] Bluetooth: hci3: command 0x0406 tx timeout
[  226.549249][ T5834] Bluetooth: hci4: command 0x0406 tx timeout
[  231.666572][ T6680] Bluetooth: hci5: command 0x0406 tx timeout
[  233.871955][ T6684] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  233.875522][ T6684] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  233.878130][ T6684] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  233.882122][ T6684] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  233.887890][ T6684] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  234.063986][   T34] INFO: task kworker/1:0:24 blocked for more than 143 seconds.
[  234.067069][   T34]       Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  234.089565][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  234.092949][   T34] task:kworker/1:0     state:D stack:24424 pid:24    tgid:24    ppid:2      task_flags:0x4208060 flags:0x00004000
[  234.133639][   T34] Workqueue: events_power_efficient crda_timeout_work
[  234.135857][   T34] Call Trace:
[  234.136944][   T34]  <TASK>
[  234.137908][   T34]  __schedule+0x16f5/0x4d00
[  234.139373][   T34]  ? do_raw_spin_unlock+0x4d/0x240
[  234.141003][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  234.143001][   T34]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  234.153624][   T34]  ? schedule+0x165/0x360
[  234.155063][   T34]  ? __pfx___schedule+0x10/0x10
[  234.156631][   T34]  ? schedule+0x91/0x360
[  234.157950][   T34]  schedule+0x165/0x360
[  234.159376][   T34]  schedule_preempt_disabled+0x13/0x30
[  234.161106][   T34]  __mutex_lock+0x724/0xe80
[  234.162563][   T34]  ? __mutex_lock+0x51b/0xe80
[  234.170315][   T34]  ? crda_timeout_work+0x15/0x50
[  234.171944][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  234.174023][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  234.175952][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  234.178053][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  234.180176][   T34]  crda_timeout_work+0x15/0x50
[  234.181644][   T34]  process_scheduled_works+0xae1/0x17b0
[  234.183394][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  234.187210][   T34]  worker_thread+0x8a0/0xda0
[  234.188746][   T34]  kthread+0x711/0x8a0
[  234.190059][   T34]  ? __pfx_worker_thread+0x10/0x10
[  234.191702][   T34]  ? __pfx_kthread+0x10/0x10
[  234.193215][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  234.197782][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  234.199712][   T34]  ? __pfx_kthread+0x10/0x10
[  234.201177][   T34]  ret_from_fork+0x3fc/0x770
[  234.202641][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  234.205766][   T34]  ? __switch_to_asm+0x39/0x70
[  234.207260][   T34]  ? __switch_to_asm+0x33/0x70
[  234.208803][   T34]  ? __pfx_kthread+0x10/0x10
[  234.210622][   T34]  ret_from_fork_asm+0x1a/0x30
[  234.212452][   T34]  </TASK>
[  234.214264][   T34] INFO: task dhcpcd:5576 blocked for more than 143 seconds.
[  234.216964][   T34]       Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0
[  234.219500][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  234.222215][   T34] task:dhcpcd          state:D stack:21384 pid:5576  tgid:5576  ppid:5575   task_flags:0x400140 flags:0x00004002
[  234.228124][   T34] Call Trace:
[  234.229227][   T34]  <TASK>
[  234.230273][   T34]  __schedule+0x16f5/0x4d00
[  234.232048][   T34]  ? __lock_acquire+0xab9/0xd20
[  234.234406][   T34]  ? schedule+0x165/0x360
[  234.236164][   T34]  ? __pfx___schedule+0x10/0x10
[  234.237947][   T34]  ? schedule+0x91/0x360
[  234.239471][   T34]  schedule+0x165/0x360
[  234.240862][   T34]  schedule_preempt_disabled+0x13/0x30
[  234.242881][   T34]  __mutex_lock+0x724/0xe80
[  234.246601][   T34]  ? __mutex_lock+0x51b/0xe80
[  234.248457][   T34]  ? inet_rtm_newaddr+0x3b0/0x18b0
[  234.250244][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  234.252156][   T34]  ? __nla_parse+0x40/0x60
[  234.254274][   T34]  inet_rtm_newaddr+0x3b0/0x18b0
[  234.256181][   T34]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  234.258018][   T34]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  234.259790][   T34]  rtnetlink_rcv_msg+0x7cf/0xb70
[  234.261442][   T34]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  234.263358][   T34]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  234.266846][   T34]  netlink_rcv_skb+0x208/0x470
[  234.268471][   T34]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  234.270162][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  234.272090][   T34]  ? netlink_deliver_tap+0x2e/0x1b0
[  234.275989][   T34]  ? netlink_deliver_tap+0x2e/0x1b0
[  234.278129][   T34]  netlink_unicast+0x75c/0x8e0
[  234.279903][   T34]  netlink_sendmsg+0x805/0xb30
[  234.281625][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  234.283483][   T34]  ? __lock_acquire+0xab9/0xd20
[  234.287800][   T34]  ? aa_sock_msg_perm+0x94/0x160
[  234.289705][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  234.291667][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  234.293842][   T34]  __sock_sendmsg+0x21c/0x270
[  234.295573][   T34]  ____sys_sendmsg+0x505/0x830
[  234.297281][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  234.299039][   T34]  ? import_iovec+0x74/0xa0
[  234.300627][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  234.302296][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  234.309433][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  234.311779][   T34]  ? netlink_bind+0xb82/0xd60
[  234.313396][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  234.315427][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  234.317421][   T34]  ? do_syscall_64+0xbe/0x3b0
[  234.319264][   T34]  do_syscall_64+0xfa/0x3b0
[  234.320939][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  234.322973][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.326482][   T34]  ? exc_page_fault+0x9f/0xf0
[  234.328136][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.329969][   T34] RIP: 0033:0x7f5616213a4b
[  234.331367][   T34] RSP: 002b:00007ffd82708b08 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  234.334391][   T34] RAX: ffffffffffffffda RBX: 00007f561613b6c0 RCX: 00007f5616213a4b
[  234.337118][   T34] RDX: 0000000000000000 RSI: 00007ffd8271ccb8 RDI: 0000000000000018
[  234.340043][   T34] RBP: 0000000000000018 R08: 0000000000000000 R09: 00007ffd8271ccb8
[  234.342932][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: ffffffffffffffff
[  234.347101][   T34] R13: 00007ffd8271ccb8 R14: 0000000000000044 R15: 0000000000000001
[  234.350340][   T34]  </TASK>
[  234.351631][   T34] INFO: task syz.0.246:6622 blocked for more than 143 seconds.
[  234.354961][   T34]       Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0
[  234.358085][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  234.360748][   T34] task:syz.0.246       state:D stack:25096 pid:6622  tgid:6622  ppid:5835   task_flags:0x400040 flags:0x00004004
[  234.366200][   T34] Call Trace:
[  234.367372][   T34]  <TASK>
[  234.368406][   T34]  __schedule+0x16f5/0x4d00
[  234.369976][   T34]  ? __lock_acquire+0xab9/0xd20
[  234.371836][   T34]  ? schedule+0x165/0x360
[  234.373267][   T34]  ? __pfx___schedule+0x10/0x10
[  234.375212][   T34]  ? schedule+0x91/0x360
[  234.376559][   T34]  schedule+0x165/0x360
[  234.378056][   T34]  schedule_preempt_disabled+0x13/0x30
[  234.380052][   T34]  __mutex_lock+0x724/0xe80
[  234.381717][   T34]  ? __virt_addr_valid+0x1c8/0x5c0
[  234.390758][   T34]  ? __mutex_lock+0x51b/0xe80
[  234.392597][   T34]  ? tun_chr_close+0x3e/0x1c0
[  234.394613][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  234.396476][   T34]  ? __pfx_tun_chr_close+0x10/0x10
[  234.398308][   T34]  tun_chr_close+0x3e/0x1c0
[  234.399922][   T34]  __fput+0x44c/0xa70
[  234.401285][   T34]  task_work_run+0x1d4/0x260
[  234.402920][   T34]  ? __pfx_task_work_run+0x10/0x10
[  234.406503][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  234.408532][   T34]  exit_to_user_mode_loop+0xec/0x110
[  234.410133][   T34]  do_syscall_64+0x2bd/0x3b0
[  234.411541][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.413366][   T34]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  234.418285][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.420166][   T34] RIP: 0033:0x7fabfbd8e9a9
[  234.421586][   T34] RSP: 002b:00007ffd9bf27b98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  234.425603][   T34] RAX: 0000000000000000 RBX: 00007fabfbfb7ba0 RCX: 00007fabfbd8e9a9
[  234.428087][   T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  234.430576][   T34] RBP: 00007fabfbfb7ba0 R08: 00000000000001d4 R09: 000000199bf27e8f
[  234.433009][   T34] R10: 00007fabfbfb7ac0 R11: 0000000000000246 R12: 0000000000014cbc
[  234.435881][   T34] R13: 00007fabfbfb6080 R14: ffffffffffffffff R15: 00007ffd9bf27cb0
[  234.438372][   T34]  </TASK>
[  234.439381][   T34] 
[  234.439381][   T34] Showing all locks held in the system:
[  234.441746][   T34] 3 locks held by kworker/u8:0/12:
[  234.443342][   T34]  #0: ffff88810c956948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  234.448471][   T34]  #1: ffffc900000f7bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  234.452432][   T34]  #2: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0
[  234.455689][   T34] 3 locks held by kworker/1:0/24:
[  234.457261][   T34]  #0: ffff88801a481d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  234.461076][   T34]  #1: ffffc900001c7bc0 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  234.465761][   T34]  #2: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: crda_timeout_work+0x15/0x50
[  234.468644][   T34] 1 lock held by khungtaskd/34:
[  234.470159][   T34]  #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  234.473188][   T34] 5 locks held by kworker/u11:0/54:
[  234.475145][   T34]  #0: ffff888037255948 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  234.478477][   T34]  #1: ffffc900007cfbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  234.482352][   T34]  #2: ffff888110aecdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  234.487038][   T34]  #3: ffff888110aec0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  234.490053][   T34]  #4: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  234.493114][   T34] 7 locks held by kworker/u11:1/5219:
[  234.496038][   T34]  #0: ffff88810c951948 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  234.499430][   T34]  #1: ffffc900064dfbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  234.503323][   T34]  #2: ffff88810a048dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  234.507761][   T34]  #3: ffff88810a0480b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  234.510784][   T34]  #4: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  234.514106][   T34]  #5: ffff888026a9eb38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  234.517037][   T34]  #6: ffffffff8e144bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  234.520447][   T34] 1 lock held by dhcpcd/5576:
[  234.521956][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  234.528488][   T34] 2 locks held by getty/5655:
[  234.530033][   T34]  #0: ffff8881000e10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  234.533071][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  234.536577][   T34] 5 locks held by kworker/u11:2/5829:
[  234.538305][   T34]  #0: ffff88811340f948 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  234.541684][   T34]  #1: ffffc9000464fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  234.547299][   T34]  #2: ffff888109a7cdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  234.550401][   T34]  #3: ffff888109a7c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  234.553422][   T34]  #4: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  234.556790][   T34] 5 locks held by kworker/u11:3/5833:
[  234.558488][   T34]  #0: ffff88811236c948 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  234.561876][   T34]  #1: ffffc9000468fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  234.567231][   T34]  #2: ffff888110a44dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  234.570341][   T34]  #3: ffff888110a440b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  234.573369][   T34]  #4: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  234.576912][   T34] 3 locks held by kworker/1:4/5893:
[  234.578603][   T34]  #0: ffff88801a481d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  234.582454][   T34]  #1: ffffc9000476fbc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  234.587729][   T34]  #2: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf00
[  234.590761][   T34] 1 lock held by syz-executor/6242:
[  234.592397][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  234.595529][   T34] 1 lock held by syz.0.246/6622:
[  234.597107][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  234.599953][   T34] 6 locks held by syz.0.246/6623:
[  234.601555][   T34] 1 lock held by syz-executor/6656:
[  234.603196][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  234.608634][   T34] 1 lock held by syz-executor/6661:
[  234.610282][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  234.613218][   T34] 1 lock held by syz-executor/6664:
[  234.615162][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  234.618106][   T34] 1 lock held by syz-executor/6670:
[  234.619734][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  234.622634][   T34] 1 lock held by syz-executor/6676:
[  234.625687][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  234.628618][   T34] 1 lock held by syz-executor/6678:
[  234.630230][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  234.633137][   T34] 1 lock held by syz-executor/6682:
[  234.637356][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  234.640326][   T34] 4 locks held by kworker/u11:6/6684:
[  234.642005][   T34]  #0: ffff888064b1f148 ((wq_completion)hci8#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  234.646722][   T34]  #1: ffffc9000361fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  234.650428][   T34]  #2: ffff8881118300b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0
[  234.653530][   T34]  #3: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0
[  234.657024][   T34] 
[  234.657788][   T34] =============================================
[  234.657788][   T34] 
[  234.660369][   T34] NMI backtrace for cpu 1
[  234.660394][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  234.660404][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  234.660409][   T34] Call Trace:
[  234.660413][   T34]  <TASK>
[  234.660417][   T34]  dump_stack_lvl+0x189/0x250
[  234.660431][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  234.660440][   T34]  ? __pfx__printk+0x10/0x10
[  234.660457][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  234.660468][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  234.660476][   T34]  ? _printk+0xcf/0x120
[  234.660509][   T34]  ? __pfx__printk+0x10/0x10
[  234.660520][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  234.660529][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  234.660539][   T34]  watchdog+0xfee/0x1030
[  234.660548][   T34]  ? watchdog+0x1de/0x1030
[  234.660558][   T34]  kthread+0x711/0x8a0
[  234.660571][   T34]  ? __pfx_watchdog+0x10/0x10
[  234.660578][   T34]  ? __pfx_kthread+0x10/0x10
[  234.660589][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  234.660598][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  234.660609][   T34]  ? __pfx_kthread+0x10/0x10
[  234.660619][   T34]  ret_from_fork+0x3fc/0x770
[  234.660629][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  234.660639][   T34]  ? __switch_to_asm+0x39/0x70
[  234.660649][   T34]  ? __switch_to_asm+0x33/0x70
[  234.660658][   T34]  ? __pfx_kthread+0x10/0x10
[  234.660668][   T34]  ret_from_fork_asm+0x1a/0x30
[  234.660684][   T34]  </TASK>
[  234.660687][   T34] Sending NMI from CPU 1 to CPUs 0:
[  234.709273][    C0] NMI backtrace for cpu 0
[  234.709289][    C0] CPU: 0 UID: 0 PID: 6623 Comm: syz.0.246 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  234.709299][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  234.709305][    C0] RIP: 0010:enqueue_hrtimer+0x1a3/0x3a0
[  234.709322][    C0] Code: ce 00 00 00 41 09 2f 48 8d 7b 38 48 89 f8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 d1 00 00 00 c6 43 38 01 49 83 c6 50 4c 89 f7 <48> 89 de 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cb ea bb 09 e8 36 7d 11
[  234.709330][    C0] RSP: 0018:ffffc900000071e8 EFLAGS: 00000086
[  234.709338][    C0] RAX: 0000000000000000 RBX: ffff888027119428 RCX: 0000000000000000
[  234.709343][    C0] RDX: 0000000000010100 RSI: 0000000000000000 RDI: ffff88804b027b90
[  234.709349][    C0] RBP: 0000000000000001 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  234.709354][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: dffffc0000000000
[  234.709359][    C0] R13: 1ffff11009604f68 R14: ffff88804b027b90 R15: ffff88804b027b04
[  234.709364][    C0] FS:  00007fabfcbad6c0(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
[  234.709370][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  234.709375][    C0] CR2: 00007f56162e7580 CR3: 000000003e134000 CR4: 00000000000006f0
[  234.709398][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  234.709403][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  234.709408][    C0] Call Trace:
[  234.709411][    C0]  <IRQ>
[  234.709416][    C0]  __hrtimer_run_queues+0x656/0xc60
[  234.709430][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  234.709439][    C0]  ? ktime_get_update_offsets_now+0x3ab/0x3d0
[  234.709452][    C0]  hrtimer_interrupt+0x45b/0xaa0
[  234.709466][    C0]  __sysvec_apic_timer_interrupt+0x10b/0x410
[  234.709510][    C0]  sysvec_apic_timer_interrupt+0x52/0xc0
[  234.709522][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  234.709531][    C0] RIP: 0010:lock_release+0x2b5/0x3e0
[  234.709540][    C0] Code: 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 2b c1 01 11 <48> 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e
[  234.709546][    C0] RSP: 0018:ffffc90000007590 EFLAGS: 00000206
[  234.709553][    C0] RAX: 18ba0ff626907400 RBX: 0000000000000202 RCX: 18ba0ff626907400
[  234.709558][    C0] RDX: 0000000000000004 RSI: ffffffff8db8655b RDI: ffffffff8be29f40
[  234.709563][    C0] RBP: ffff8880256561d0 R08: ffffc90002b9f6a0 R09: 0000000000000000
[  234.709568][    C0] R10: ffffc90000007718 R11: fffff52000000ee5 R12: 0000000000000004
[  234.709572][    C0] R13: 0000000000000004 R14: ffffffff8e13f0e0 R15: ffff888025655640
[  234.709582][    C0]  ? unwind_next_frame+0xa5/0x2390
[  234.709592][    C0]  ? unwind_next_frame+0xa5/0x2390
[  234.709600][    C0]  unwind_next_frame+0x19a9/0x2390
[  234.709609][    C0]  ? unwind_next_frame+0xa5/0x2390
[  234.709617][    C0]  ? preempt_schedule_irq+0xb5/0x150
[  234.709629][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  234.709640][    C0]  arch_stack_walk+0x11c/0x150
[  234.709651][    C0]  ? irqentry_exit+0x6f/0x90
[  234.709661][    C0]  stack_trace_save+0x9c/0xe0
[  234.709670][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  234.709680][    C0]  ? __irq_exit_rcu+0xd8/0x1f0
[  234.709690][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  234.709699][    C0]  kasan_save_track+0x3e/0x80
[  234.709706][    C0]  ? kasan_save_track+0x3e/0x80
[  234.709712][    C0]  ? kasan_save_free_info+0x46/0x50
[  234.709721][    C0]  ? __kasan_slab_free+0x62/0x70
[  234.709727][    C0]  ? kmem_cache_free+0x18f/0x400
[  234.709735][    C0]  ? skb_release_data+0x62d/0x7c0
[  234.709745][    C0]  ? consume_skb+0x9e/0xf0
[  234.709751][    C0]  ? mac80211_hwsim_beacon_tx+0x3f0/0x860
[  234.709765][    C0]  ? __iterate_interfaces+0x2ab/0x590
[  234.709773][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  234.709780][    C0]  ? mac80211_hwsim_beacon+0xbb/0x1c0
[  234.709788][    C0]  ? __hrtimer_run_queues+0x52c/0xc60
[  234.709796][    C0]  ? hrtimer_run_softirq+0x187/0x2b0
[  234.709804][    C0]  ? handle_softirqs+0x286/0x870
[  234.709811][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  234.709818][    C0]  ? irq_exit_rcu+0x9/0x30
[  234.709825][    C0]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  234.709833][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  234.709840][    C0]  ? lock_acquire+0x175/0x360
[  234.709846][    C0]  ? unwind_next_frame+0xc2/0x2390
[  234.709854][    C0]  ? arch_stack_walk+0x11c/0x150
[  234.709861][    C0]  ? stack_trace_save+0x9c/0xe0
[  234.709870][    C0]  ? save_stack+0xf5/0x1f0
[  234.709878][    C0]  ? __reset_page_owner+0x71/0x1f0
[  234.709884][    C0]  ? __free_frozen_pages+0xc71/0xe70
[  234.709893][    C0]  ? pagetable_dtor_free+0x2d2/0x3b0
[  234.709903][    C0]  ? __mmdrop+0xb5/0x460
[  234.709911][    C0]  ? finish_task_switch+0x3ee/0x950
[  234.709918][    C0]  ? __schedule+0x16fd/0x4d00
[  234.709926][    C0]  ? preempt_schedule_irq+0xb5/0x150
[  234.709940][    C0]  ? skb_release_data+0x62d/0x7c0
[  234.709948][    C0]  kasan_save_free_info+0x46/0x50
[  234.709957][    C0]  __kasan_slab_free+0x62/0x70
[  234.709964][    C0]  kmem_cache_free+0x18f/0x400
[  234.709972][    C0]  skb_release_data+0x62d/0x7c0
[  234.709982][    C0]  consume_skb+0x9e/0xf0
[  234.709989][    C0]  mac80211_hwsim_beacon_tx+0x3f0/0x860
[  234.710000][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  234.710008][    C0]  __iterate_interfaces+0x2ab/0x590
[  234.710015][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  234.710025][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  234.710033][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  234.710043][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  234.710052][    C0]  mac80211_hwsim_beacon+0xbb/0x1c0
[  234.710067][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  234.710075][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  234.710087][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  234.710098][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  234.710107][    C0]  handle_softirqs+0x286/0x870
[  234.710115][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  234.710124][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  234.710133][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  234.710146][    C0]  __irq_exit_rcu+0xca/0x1f0
[  234.710154][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  234.710163][    C0]  irq_exit_rcu+0x9/0x30
[  234.710170][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  234.710179][    C0]  </IRQ>
[  234.710181][    C0]  <TASK>
[  234.710184][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  234.710191][    C0] RIP: 0010:lock_acquire+0x175/0x360
[  234.710198][    C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 9b d3 01 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e
[  234.710204][    C0] RSP: 0018:ffffc90002b9edf8 EFLAGS: 00000206
[  234.710210][    C0] RAX: 18ba0ff626907400 RBX: 0000000000000000 RCX: 18ba0ff626907400
[  234.710217][    C0] RDX: 0000000000000000 RSI: ffffffff8db8655b RDI: ffffffff8be29f40
[  234.710223][    C0] RBP: ffffffff8172aae5 R08: 0000000000000000 R09: ffffffff8172aae5
[  234.710230][    C0] R10: dffffc0000000000 R11: ffffffff81ad0050 R12: 0000000000000002
[  234.710236][    C0] R13: ffffffff8e13f0e0 R14: 0000000000000000 R15: 0000000000000246
[  234.710245][    C0]  ? unwind_next_frame+0xa5/0x2390
[  234.710255][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  234.710268][    C0]  ? unwind_next_frame+0xa5/0x2390
[  234.710285][    C0]  ? __free_frozen_pages+0xc71/0xe70
[  234.710293][    C0]  ? unwind_next_frame+0xa5/0x2390
[  234.710301][    C0]  unwind_next_frame+0xc2/0x2390
[  234.710308][    C0]  ? unwind_next_frame+0xa5/0x2390
[  234.710316][    C0]  ? unwind_next_frame+0xa5/0x2390
[  234.710324][    C0]  ? __reset_page_owner+0x71/0x1f0
[  234.710332][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  234.710342][    C0]  arch_stack_walk+0x11c/0x150
[  234.710351][    C0]  ? __free_frozen_pages+0xc71/0xe70
[  234.710360][    C0]  stack_trace_save+0x9c/0xe0
[  234.710369][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  234.710380][    C0]  save_stack+0xf5/0x1f0
[  234.710388][    C0]  ? __pfx_save_stack+0x10/0x10
[  234.710394][    C0]  ? __free_frozen_pages+0xc71/0xe70
[  234.710406][    C0]  __reset_page_owner+0x71/0x1f0
[  234.710414][    C0]  __free_frozen_pages+0xc71/0xe70
[  234.710423][    C0]  pagetable_dtor_free+0x2d2/0x3b0
[  234.710432][    C0]  ? __pfx_pagetable_dtor_free+0x10/0x10
[  234.710441][    C0]  ? __sanitizer_cov_trace_pc+0x46/0x70
[  234.710454][    C0]  ? pgd_free+0x1af/0x1e0
[  234.710462][    C0]  __mmdrop+0xb5/0x460
[  234.710470][    C0]  finish_task_switch+0x3ee/0x950
[  234.710500][    C0]  __schedule+0x16fd/0x4d00
[  234.710513][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  234.710526][    C0]  ? preempt_schedule_irq+0xb5/0x150
[  234.710535][    C0]  ? __pfx___schedule+0x10/0x10
[  234.710543][    C0]  ? irqentry_exit+0x74/0x90
[  234.710556][    C0]  preempt_schedule_irq+0xb5/0x150
[  234.710565][    C0]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  234.710575][    C0]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  234.710585][    C0]  irqentry_exit+0x6f/0x90
[  234.710594][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  234.710601][    C0] RIP: 0010:lock_acquire+0x175/0x360
[  234.710608][    C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 9b d3 01 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e
[  234.710614][    C0] RSP: 0018:ffffc90002b9f760 EFLAGS: 00000206
[  234.710620][    C0] RAX: 18ba0ff626907400 RBX: 0000000000000000 RCX: 18ba0ff626907400
[  234.710625][    C0] RDX: 0000000000000000 RSI: ffffffff8db8655b RDI: ffffffff8be29f40
[  234.710629][    C0] RBP: ffffffff825d6aed R08: 0000000000000000 R09: ffffffff825d6aed
[  234.710634][    C0] R10: dffffc0000000000 R11: ffffed1023460369 R12: 0000000000000000
[  234.710639][    C0] R13: ffff88801b2f7988 R14: 0000000000000001 R15: 0000000000000246
[  234.710644][    C0]  ? kernfs_remove_by_name_ns+0x3d/0x130
[  234.710657][    C0]  ? kernfs_remove_by_name_ns+0x3d/0x130
[  234.710669][    C0]  ? irqentry_exit+0x74/0x90
[  234.710679][    C0]  down_write+0x96/0x1f0
[  234.710689][    C0]  ? kernfs_remove_by_name_ns+0x3d/0x130
[  234.710699][    C0]  ? __pfx_down_write+0x10/0x10
[  234.710708][    C0]  ? kernfs_root+0x1c/0x230
[  234.710716][    C0]  ? kernfs_root+0x1c/0x230
[  234.710723][    C0]  ? kernfs_root+0x1c/0x230
[  234.710731][    C0]  ? kernfs_root+0x1ea/0x230
[  234.710739][    C0]  kernfs_remove_by_name_ns+0x3d/0x130
[  234.710750][    C0]  sysfs_remove_group+0xfc/0x2c0
[  234.710759][    C0]  sysfs_remove_groups+0x54/0xb0
[  234.710768][    C0]  netdev_queue_update_kobjects+0x5d3/0x6c0
[  234.710781][    C0]  netif_set_real_num_tx_queues+0x2c6/0xac0
[  234.710793][    C0]  __tun_detach+0xc2c/0x1560
[  234.710804][    C0]  ? __pfx_tun_chr_close+0x10/0x10
[  234.710817][    C0]  tun_chr_close+0x10a/0x1c0
[  234.710828][    C0]  __fput+0x44c/0xa70
[  234.710841][    C0]  task_work_run+0x1d4/0x260
[  234.710854][    C0]  ? __pfx_task_work_run+0x10/0x10
[  234.710866][    C0]  get_signal+0x11ed/0x1340
[  234.710877][    C0]  ? kasan_check_range+0xa5/0x2c0
[  234.710887][    C0]  arch_do_signal_or_restart+0x9a/0x750
[  234.710901][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  234.710913][    C0]  ? __fget_files+0x2a/0x420
[  234.710923][    C0]  ? exit_to_user_mode_loop+0x40/0x110
[  234.710932][    C0]  exit_to_user_mode_loop+0x75/0x110
[  234.710939][    C0]  do_syscall_64+0x2bd/0x3b0
[  234.710950][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.710957][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  234.710965][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.710972][    C0] RIP: 0033:0x7fabfbd8e9a9
[  234.710980][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  234.710986][    C0] RSP: 002b:00007fabfcbad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  234.710993][    C0] RAX: 0000000000000000 RBX: 00007fabfbfb5fa0 RCX: 00007fabfbd8e9a9
[  234.710998][    C0] RDX: 0000200000000040 RSI: 00000000401054d5 RDI: 0000000000000006
[  234.711003][    C0] RBP: 00007fabfbe10d69 R08: 0000000000000000 R09: 0000000000000000
[  234.711007][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  234.711011][    C0] R13: 0000000000000000 R14: 00007fabfbfb5fa0 R15: 00007ffd9bf27a38
[  234.711019][    C0]  </TASK>
[  234.728750][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  234.728763][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  234.728773][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  234.728780][   T34] Call Trace:
[  234.728784][   T34]  <TASK>
[  234.728788][   T34]  dump_stack_lvl+0x99/0x250
[  234.728804][   T34]  ? __asan_memcpy+0x40/0x70
[  234.728818][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  234.728827][   T34]  ? __pfx__printk+0x10/0x10
[  234.728845][   T34]  panic+0x2db/0x790
[  234.728856][   T34]  ? __pfx_panic+0x10/0x10
[  234.728865][   T34]  ? nmi_backtrace_stall_check+0x433/0x440
[  234.728878][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  234.728886][   T34]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  234.728900][   T34]  watchdog+0x102d/0x1030
[  234.728915][   T34]  ? watchdog+0x1de/0x1030
[  234.728925][   T34]  kthread+0x711/0x8a0
[  234.728938][   T34]  ? __pfx_watchdog+0x10/0x10
[  234.728945][   T34]  ? __pfx_kthread+0x10/0x10
[  234.728956][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  234.728968][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  234.728978][   T34]  ? __pfx_kthread+0x10/0x10
[  234.728989][   T34]  ret_from_fork+0x3fc/0x770
[  234.728999][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  234.729010][   T34]  ? __switch_to_asm+0x39/0x70
[  234.729020][   T34]  ? __switch_to_asm+0x33/0x70
[  234.729029][   T34]  ? __pfx_kthread+0x10/0x10
[  234.729040][   T34]  ret_from_fork_asm+0x1a/0x30
[  234.729056][   T34]  </TASK>
[  235.124046][   T34] Kernel Offset: disabled
[  235.125387][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:22:46  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81efa378 RBX=0000000000000000 RCX=ffff888025655640 RDX=0000000000010100
RSI=0000000000000001 RDI=ffff8880271192c0 RBP=ffffc90000006d70 RSP=ffffc90000006c50
R8 =ffff88802711976f R9 =1ffff11004e232ed R10=dffffc0000000000 R11=ffffed1004e232ee
R12=0000000000000000 R13=000000000000000f R14=ffff88802711976c R15=ffff8880271192c0
RIP=ffffffff81ef9ff1 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fabfcbad6c0 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f56162e7580 CR3=000000003e134000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00005555817fe4a0
XMM02=0002e0030000004d d0030fff00000000 XMM03=0280040108000601 68cc03f086809c08
XMM04=0000000000000000 0000000000000011 XMM05=000055558180680a 00005555818066d0
XMM06=000055558180cdb4 000055558180cdb0 XMM07=0000000000000000 000000000001df8a
XMM08=9203000200129003 028008000000004e XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000072 RBX=0000000000000072 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6d0
R8 =ffff888108730237 R9 =1ffff110210e6046 R10=dffffc0000000000 R11=ffffffff854728e0
R12=dffffc0000000000 R13=ffffffff99af58d5 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff8547295c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f18b5ce5000 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffff00ff00000000 XMM05=0000000000000061 642e7269662f302e
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 0000000000000000 XMM09=756765722f657261 776d7269662f302e
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
