last executing test programs:

48.604637009s ago: executing program 1 (id=158):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x9, 0x0, 0x880, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xd, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$kcm(0x23, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r2, 0x0, 0xfffffffffffffffd}, 0x10)
socket$kcm(0x2, 0x200000000000001, 0x106)
socket$kcm(0x2, 0x5, 0x84)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080))
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x4)
sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet, 0x80, 0x0, 0x0, 0x0, 0x0, 0xeaffffff}, 0x0)

48.535402904s ago: executing program 1 (id=159):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e2e210c371303ed6a33f2ff8689b3f20e"])

48.534637431s ago: executing program 1 (id=161):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2405, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0xd)

48.415860129s ago: executing program 1 (id=164):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0xb, 0x0, 0x0, 0x9, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00')
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)

48.277639731s ago: executing program 1 (id=166):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0)
recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x891b, 0x0)

48.068626182s ago: executing program 1 (id=167):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x9000001946}, 0x0, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000400)='{\x05T\x82\x89\x98Yi:')

47.925367677s ago: executing program 32 (id=167):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x9000001946}, 0x0, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000400)='{\x05T\x82\x89\x98Yi:')

1.144272377s ago: executing program 3 (id=745):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003700)=""/4064, 0xfe0}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f0000000780)=""/190, 0xbe}, {&(0x7f0000000440)=""/171, 0xab}], 0x5}, 0x0)

1.142147954s ago: executing program 3 (id=746):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x240440d1)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000600)={'ip6gre0\x00', 0x210})
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x33}, @in=@broadcast, {0x2abe9d7c, 0x40000000000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}, {}, {0x0, 0x0, 0xfffffff7}, 0xfffffffd, 0x0, 0xa}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "9300d719ed77ad60765ae9de6eb27926"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffffb}]}, 0x154}}, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x476fc0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$kcm(0x10, 0x2, 0x10)
r1 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r1, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0xa888, 0x31}, 0x80, 0x0}, 0x0)
getpid()
r2 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(r2, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)}, {&(0x7f0000000240)="a5fbc0a193bb117071c22d99b5d660cb8d7dcd6ba2911b04d34f7cffbc20a9bb3079e146b6b0cbca05b76d10ca3b54717f90d71f2b73ef44a55d5c9603b83c133d840f7f68d61a3bc606d60eb9d7baf1a4a6982ae123704e489f221664a8f5bb1fa35edbbfd780f61eaf8af7992898d9ac60fa4335cb55f2f62a5bef397edbe48b1debf924db8fcf2df2cda0cf0835845825ec68c86f76ee", 0x98}, {&(0x7f0000000300)="b735800263d887d8d4a7e38f07faa6b6de06e58e9e5c5f191e065c", 0x1b}, {&(0x7f0000000340)="b57ad92e0fc752c41b54e439f81026ddf7b174c6e69a5f801d29f86fdbce71d87467b78b4b98243c6a80", 0x2a}], 0x4, &(0x7f0000000700)=[@ip_retopts={{0x10}}, @ip_retopts={{0x28, 0x0, 0x7, {[@end, @timestamp_prespec={0x44, 0x14, 0x23, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x1d}, 0x80000000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}]}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xc}}], 0x68}, 0x84)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000023c0)=ANY=[], 0x20)
close(0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(r2, 0x84, 0x7b, 0x0, 0x0)
close(r2)
close(0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x0)

904.433086ms ago: executing program 2 (id=748):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079100000000000007b0a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48)

902.746282ms ago: executing program 3 (id=749):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x3}, 0x0, 0x0, 0x40000, 0x0, 0x21, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8000000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8, 0x9, 0x0, 0xb0ffffff}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

890.706666ms ago: executing program 2 (id=751):
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@printk={@p, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x41}, {0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

790.042276ms ago: executing program 2 (id=753):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000009400000083000000bf090000000000005509010000000000950000000000000085100000f5ffffffbf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

714.216094ms ago: executing program 2 (id=754):
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xffffffff, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000e2494c641759ed2e23a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c0c1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4)
sendmsg$inet(r1, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)='A', 0x1}], 0x1}, 0x4040)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="180200000000000000000000030000008500000017000000b7080000000000007b8af8ff00000000b7080000000000807b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffff", @ANYRES32=r0], &(0x7f0000000080)='GPL\x00'}, 0x94)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r5 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
sendmsg$kcm(r5, 0x0, 0x4c080)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4)
sendmsg$inet(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4)
sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x52cc)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000dc0)={r4, &(0x7f0000001b80), &(0x7f0000001bc0)=""/7, 0x2}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc09b6f2609", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

607.512004ms ago: executing program 0 (id=755):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x28, &(0x7f0000000000), 0x4)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f00000000000000"], 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8902, &(0x7f0000000900)='\xe5\xee\x91\xd4\xdc~\x82]0\x9e\x9e\xae0\xfa\x94q\x0eY\x1f\xfa%zu\xf9\xb6\xb4n\x13\xa0G/k5t\xb6{\xa8\xb2\xf3}\xdb\xd7j?\x95\x8dj\xf5|YZ\x1b\xa9\x89$@k\xbe\x14\xf8&\x8d\x98F\xbb\x92\f\xdc\x1dv\x83\x06\x14\xf6\xb5g$\xc4\xcc\xcd6\x83&Y\x9d\xb5S\x19\x83\x1e\xe7dt\xbf\x11\xedu&t\x1f\x84TO\x98jv\xb3?\xec\x10\xf8\xca-\x92\xf2\xe1\xae\xb6O^\xb2s\xa4\x1b$\x06{\xfa\xf32p\xa6\x01\x8a,J\xdb\xf4X\x14.\x8dl\x9c\xaa9\xfd\xe5^\xa3G\x1e\xa9\x8e\xcf\xb2X\xe4\xb4(\xf4T\x92\xc2\x9c\xa36-\xe0\x11>\xa2\x9b\'\xf1~\x18\xc9W\xd14\xd9\xee1Q\xd5m\"\xae\x9c\xd0\xaaB3\x91\x14PK`6\xed\x99j\xae\xc0\x10\n\x80\xa6\x96m\x0ecP\x13>\x8e\x04\x14\xf5\xe3=)\x16/\xe5\xe4\xa4+\x1e\xef\xf3O\xab\x04\xe0os\xd4Xj\xdc\'\xb7,\x1a\xb4\xb9\xf3\xd0\xcbE\x86D\xc8\t\x1d\xeaE;\x84\xb4\x81U\xbfo\x15\xea\x04\x04\xed\xaeS\xbe\xfe[\xce/p\x83\xc2F }B\xd2\xbd\xd7\xc0\x004\xc7\xe4Y\x8f\xf9\x99r\xcaU\x00[\xc5\x03\xdc\xe3\xab\xc1\xc0\xfb\x10Z\xb1\xdb\xe9v\x9e\f)\xe0\x8e\xd2\xb2\xf0\x81\xbc\xfb1[A\xf1{\xcck\xc5k\xcf\x91A\xd2,:\xa8\r\xb2\xeb\xa0\x84y\x7f\xc3\xe0\xe0 \xec\xf2\x18rc\xae1s\xf0h\xa8\xaa\xe6O\xe4\x0f\xbd%\x1c\xfb\x95\x15\xb2\vP\x06\xc3%+\xc7X\xf7\x99\xd8l\x1d>y\xdb\x11\xad')
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x5460, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
close(0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')

568.526162ms ago: executing program 2 (id=756):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x80047456, &(0x7f0000001200))

483.953757ms ago: executing program 3 (id=757):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x81, 0xe, 0x8, 0x7, 0x0, 0x0, 0x881c8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46c, 0x5, @perf_bp={0x0, 0x4}, 0x1000, 0xd, 0x0, 0x1, 0x0, 0xfffffffc, 0x4}, 0x0, 0xfffffffffffdffff, 0xffffffffffffffff, 0x9)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1400000038000b63d25a", 0x46}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x40000000)

483.619125ms ago: executing program 3 (id=758):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24)

482.279545ms ago: executing program 0 (id=759):
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x13, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100), 0x8}], 0x1, &(0x7f0000001d00)=ANY=[], 0x7}, 0x0)

413.886691ms ago: executing program 0 (id=760):
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x411, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffff2}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x3, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890c, &(0x7f0000000100))

412.352314ms ago: executing program 2 (id=761):
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e1700800000876c1d0000007ea60864160af36514001ac00400020207000200020001000200000000938037a786a6d0001000000e4509c5f05c2f070000000000000088bbcb", 0x52}, {&(0x7f0000000100)="9b25af20af07241a63c3", 0xa}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0x12, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r5}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r6}, &(0x7f0000000840), &(0x7f0000000340)=r5}, 0x20)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r10, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r10, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, r8, 0x2, '\x00', r11, 0xffffffffffffffff, 0x1, 0x2}, 0x50)
r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000a00)=""/4096, 0x0, 0x1000, 0x1, 0x1ff}, 0x28)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0], <r13=>0x0, 0x25, &(0x7f0000000580), 0x0, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x19, 0x8, 0x0, 0x0}}, 0x10)
r14 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002a00)=@bpf_ext={0x1c, 0x11, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffff000, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000880)='GPL\x00', 0x7fff, 0x1000, &(0x7f0000001a00)=""/4096, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xc35a, 0xffffffffffffffff, 0x8, &(0x7f0000000900)=[0x1, 0xffffffffffffffff, 0x1, r0], &(0x7f0000000940)=[{0x2, 0x4, 0x1, 0x5}, {0x5, 0x3, 0x2, 0x1}, {0x1, 0x3, 0x4, 0x3}, {0x3, 0x4, 0x7, 0x8}, {0x2, 0x4, 0x2, 0x6503ef0be19e2dc}, {0x2, 0x4, 0xa, 0xa}, {0x0, 0x1, 0x1, 0x5}, {0x3, 0x3, 0xe, 0x2}], 0x10, 0xfffff234}, 0x94)
r15 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r15}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$AUDIT_TTY_SET(r4, &(0x7f0000002d00)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c80)={0x18, 0x3f9, 0x2, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8101}, 0x20004800)
bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x1e, 0x25, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2e20}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x2a0b, 0x0, 0x0, 0x41000, 0x5, '\x00', r11, @sk_lookup, r12, 0x8, &(0x7f0000000440)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0xa, 0xfffffffe, 0x10}, 0x10, r13, r14, 0x6, &(0x7f0000002ac0)=[0xffffffffffffffff, r15], &(0x7f0000002b00)=[{0x5, 0x786, 0x9, 0x3}, {0x0, 0x4, 0xe, 0x3}, {0x3, 0x2, 0x2, 0x3}, {0x4, 0x4, 0xc, 0x4}, {0x2, 0x5, 0x9, 0x1}, {0x1, 0x1, 0xc, 0x5}], 0x10, 0x34f800}, 0x94)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="24000000010401013100000000000000000004000500010001"], 0x24}}, 0x0)

226.551703ms ago: executing program 3 (id=762):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001f40)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5)
openat$cgroup_int(r1, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
socket$kcm(0xa, 0x5, 0x0)

134.064051ms ago: executing program 0 (id=763):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xd, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x6a}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94)

27.571593ms ago: executing program 0 (id=764):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000e00)="130000001a0081044e81f782db4cb9041c1d08", 0x13}], 0x1}, 0x0)

0s ago: executing program 0 (id=765):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
socketpair(0x11, 0x1, 0x1, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={0x0}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:43179' (ED25519) to the list of known hosts.
syzkaller login: [   47.739131][ T5772] cgroup: Unknown subsys name 'net'
[   47.823431][ T5772] cgroup: Unknown subsys name 'cpuset'
[   47.827890][ T5772] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.118338][ T5772] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   58.171626][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   58.175306][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   58.180496][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   58.185807][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   58.193569][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   58.470389][ T5874] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   60.121657][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   60.124562][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   60.127300][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   60.130243][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   60.134876][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   60.143055][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   60.146493][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   60.149085][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   60.158881][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   60.162471][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   60.174931][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   60.178828][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   60.182131][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   60.185212][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   60.188147][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   60.520464][ T5905] chnl_net:caif_netlink_parms(): no params data found
[   60.584470][ T5902] chnl_net:caif_netlink_parms(): no params data found
[   60.604500][ T5900] chnl_net:caif_netlink_parms(): no params data found
[   60.631842][ T5905] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.634895][ T5905] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.637612][ T5905] bridge_slave_0: entered allmulticast mode
[   60.640810][ T5905] bridge_slave_0: entered promiscuous mode
[   60.662230][ T5905] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.664495][ T5905] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.667038][ T5905] bridge_slave_1: entered allmulticast mode
[   60.670055][ T5905] bridge_slave_1: entered promiscuous mode
[   60.717840][ T5902] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.721185][ T5902] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.724301][ T5902] bridge_slave_0: entered allmulticast mode
[   60.728215][ T5902] bridge_slave_0: entered promiscuous mode
[   60.735636][ T5905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.738645][ T5902] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.742169][ T5902] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.745550][ T5902] bridge_slave_1: entered allmulticast mode
[   60.749491][ T5902] bridge_slave_1: entered promiscuous mode
[   60.768356][ T5905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.798062][ T5900] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.801562][ T5900] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.804229][ T5900] bridge_slave_0: entered allmulticast mode
[   60.807940][ T5900] bridge_slave_0: entered promiscuous mode
[   60.833904][ T5902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.839911][ T5905] team0: Port device team_slave_0 added
[   60.843121][ T5900] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.845774][ T5900] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.848363][ T5900] bridge_slave_1: entered allmulticast mode
[   60.851897][ T5900] bridge_slave_1: entered promiscuous mode
[   60.863745][ T5902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.882562][ T5905] team0: Port device team_slave_1 added
[   60.888740][ T5900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.931501][ T5900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.962284][ T5905] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.965328][ T5905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.976879][ T5905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.983962][ T5902] team0: Port device team_slave_0 added
[   60.987001][ T5905] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.989757][ T5905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.000955][ T5905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.013971][ T5900] team0: Port device team_slave_0 added
[   61.017418][ T5900] team0: Port device team_slave_1 added
[   61.029308][ T5902] team0: Port device team_slave_1 added
[   61.065476][ T5902] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.068233][ T5902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.078036][ T5902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.083345][ T5900] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.086206][ T5900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.096770][ T5900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.103281][ T5900] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.106022][ T5900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.116064][ T5900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.122742][ T5902] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.125690][ T5902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.136354][ T5902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.185976][ T5905] hsr_slave_0: entered promiscuous mode
[   61.188903][ T5905] hsr_slave_1: entered promiscuous mode
[   61.229231][ T5902] hsr_slave_0: entered promiscuous mode
[   61.231908][ T5902] hsr_slave_1: entered promiscuous mode
[   61.234564][ T5902] debugfs: 'hsr0' already exists in 'hsr'
[   61.236970][ T5902] Cannot create hsr debugfs directory
[   61.279436][ T5900] hsr_slave_0: entered promiscuous mode
[   61.283357][ T5900] hsr_slave_1: entered promiscuous mode
[   61.286266][ T5900] debugfs: 'hsr0' already exists in 'hsr'
[   61.288696][ T5900] Cannot create hsr debugfs directory
[   61.564004][ T5905] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   61.572573][ T5905] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   61.593625][ T5905] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   61.599485][ T5905] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   61.650295][ T5902] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   61.662957][ T5902] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   61.671515][ T5902] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   61.678959][ T5902] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   61.744532][ T5900] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   61.749868][ T5900] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   61.760239][ T5900] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   61.772505][ T5900] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   61.800298][ T5905] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.829319][ T5905] 8021q: adding VLAN 0 to HW filter on device team0
[   61.843147][  T778] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.845801][  T778] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.863346][  T778] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.866692][  T778] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.907404][ T5902] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.939527][ T5902] 8021q: adding VLAN 0 to HW filter on device team0
[   61.952782][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.955753][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.977235][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.980118][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.996078][ T5900] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.038295][ T5900] 8021q: adding VLAN 0 to HW filter on device team0
[   62.052925][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.055824][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.070177][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.073156][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.102459][ T5905] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.169430][ T5905] veth0_vlan: entered promiscuous mode
[   62.182648][ T5905] veth1_vlan: entered promiscuous mode
[   62.191709][ T5902] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.223272][   T55] Bluetooth: hci1: command tx timeout
[   62.223277][ T5904] Bluetooth: hci0: command tx timeout
[   62.228203][ T5236] Bluetooth: hci2: command tx timeout
[   62.237027][ T5905] veth0_macvtap: entered promiscuous mode
[   62.245140][ T5905] veth1_macvtap: entered promiscuous mode
[   62.279454][ T5902] veth0_vlan: entered promiscuous mode
[   62.286400][ T5905] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.295738][ T5905] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.307193][ T5900] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.313285][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.320299][ T5902] veth1_vlan: entered promiscuous mode
[   62.324182][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.337254][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.342961][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.392567][ T5902] veth0_macvtap: entered promiscuous mode
[   62.413591][  T778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.417700][ T5902] veth1_macvtap: entered promiscuous mode
[   62.427960][  T778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.429853][ T5900] veth0_vlan: entered promiscuous mode
[   62.450051][ T5900] veth1_vlan: entered promiscuous mode
[   62.472721][ T5902] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.488104][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.492982][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.495212][ T5902] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.511628][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.515511][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.535537][ T5900] veth0_macvtap: entered promiscuous mode
[   62.540044][ T5900] veth1_macvtap: entered promiscuous mode
[   62.546663][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.550829][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.601698][ T5900] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.635158][ T5900] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.647026][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.655140][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.658839][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.669793][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.674165][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.705425][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.758569][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.765470][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.825491][ T2405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.831765][ T2405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.882035][ T2405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.890622][ T2405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.083908][ T5981] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.166014][ T5987] netlink: 24 bytes leftover after parsing attributes in process `syz.2.36'.
[   63.547051][ T6013] netlink: 132 bytes leftover after parsing attributes in process `syz.2.49'.
[   63.826424][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.58'.
[   64.010535][    C1] hrtimer: interrupt took 30356 ns
[   64.325105][ T5236] Bluetooth: hci0: command tx timeout
[   64.327651][ T5236] Bluetooth: hci2: command tx timeout
[   64.329947][ T5236] Bluetooth: hci1: command tx timeout
[   64.532686][ T6052] netlink: zone id is out of range
[   64.535036][ T6052] netlink: del zone limit has 8 unknown bytes
[   64.676271][ T6065] netlink: 'syz.1.73': attribute type 1 has an invalid length.
[   64.679237][ T6065] netlink: 'syz.1.73': attribute type 4 has an invalid length.
[   64.684852][ T6065] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.73'.
[   64.721345][ T6068] netlink: 56 bytes leftover after parsing attributes in process `syz.1.75'.
[   64.788836][ T6070] netlink: 'syz.0.76': attribute type 11 has an invalid length.
[   64.798188][ T6070] netlink: 168 bytes leftover after parsing attributes in process `syz.0.76'.
[   64.912997][ T6070] mac80211_hwsim hwsim5 .3c: renamed from wlan1 (while UP)
[   64.970391][ T6084] Driver unsupported XDP return value 0 on prog  (id 22) dev N/A, expect packet loss!
[   65.043774][ T6088] netlink: 'syz.1.84': attribute type 1 has an invalid length.
[   65.106389][ T6095] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[   65.174090][ T6098] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24
[   65.489989][ T6114] netlink: 132 bytes leftover after parsing attributes in process `syz.0.97'.
[   65.751566][ T6126] netlink: 44 bytes leftover after parsing attributes in process `syz.2.101'.
[   66.382842][ T5904] Bluetooth: hci2: command tx timeout
[   66.385277][ T5904] Bluetooth: hci0: command tx timeout
[   66.387740][ T5236] Bluetooth: hci1: command tx timeout
[   66.463522][ T6144] netlink: 'syz.0.108': attribute type 39 has an invalid length.
[   66.491847][ T6144] veth0_macvtap: left promiscuous mode
[   66.623400][ T6153] netlink: 'syz.2.111': attribute type 291 has an invalid length.
[   66.976719][ T6161] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.115'.
[   67.510066][ T6180] netlink: 'syz.0.125': attribute type 11 has an invalid length.
[   67.550093][ T6182] netlink: 44 bytes leftover after parsing attributes in process `syz.0.126'.
[   67.558508][ T6183] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[   68.256449][ T6215] warning: `syz.2.140' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   68.509595][ T5236] Bluetooth: hci2: command tx timeout
[   68.512243][ T5904] Bluetooth: hci1: command tx timeout
[   68.512787][   T55] Bluetooth: hci0: command tx timeout
[   69.383663][ T6248] __nla_validate_parse: 3 callbacks suppressed
[   69.383680][ T6248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.153'.
[   69.443919][ T6253] netlink: 'syz.1.156': attribute type 1 has an invalid length.
[   69.709599][ T6269] =======================================================
[   69.709599][ T6269] WARNING: The mand mount option has been deprecated and
[   69.709599][ T6269]          and is ignored by this kernel. Remove the mand
[   69.709599][ T6269]          option from the mount to silence this warning.
[   69.709599][ T6269] =======================================================
[   69.846292][ T6273] Zero length message leads to an empty skb
[   70.026586][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.086449][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.155031][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.198355][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.346850][   T12] bridge_slave_1: left allmulticast mode
[   70.349601][   T12] bridge_slave_1: left promiscuous mode
[   70.361195][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.374499][   T12] bridge_slave_0: left allmulticast mode
[   70.376954][   T12] bridge_slave_0: left promiscuous mode
[   70.384545][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.493865][ T5904] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   70.497350][ T5904] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   70.500651][ T5904] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   70.505808][ T5904] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   70.510406][ T5904] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   71.188686][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.191631][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.253767][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   71.263120][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   71.269698][   T12] bond0 (unregistering): Released all slaves
[   71.284408][ T6282] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.171'.
[   71.494441][ T6295] syz.2.174: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   71.501899][ T6295] CPU: 1 UID: 0 PID: 6295 Comm: syz.2.174 Not tainted syzkaller #0 PREEMPT(full) 
[   71.501920][ T6295] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   71.501929][ T6295] Call Trace:
[   71.501936][ T6295]  <TASK>
[   71.501944][ T6295]  dump_stack_lvl+0x189/0x250
[   71.501976][ T6295]  ? __pfx_dump_stack_lvl+0x10/0x10
[   71.501995][ T6295]  ? __pfx__printk+0x10/0x10
[   71.502018][ T6295]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   71.502036][ T6295]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   71.502057][ T6295]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   71.502079][ T6295]  warn_alloc+0x214/0x310
[   71.502104][ T6295]  ? stack_depot_save_flags+0x41b/0x860
[   71.502128][ T6295]  ? __pfx_warn_alloc+0x10/0x10
[   71.502154][ T6295]  ? kasan_save_track+0x4f/0x80
[   71.502173][ T6295]  ? xskq_create+0x56/0x170
[   71.502188][ T6295]  ? xsk_init_queue+0xb0/0x110
[   71.502201][ T6295]  ? xsk_setsockopt+0x57b/0x8d0
[   71.502213][ T6295]  ? do_sock_setsockopt+0x17c/0x1b0
[   71.502257][ T6295]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   71.502270][ T6295]  ? do_syscall_64+0xfa/0x3b0
[   71.502288][ T6295]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.502319][ T6295]  __vmalloc_node_range_noprof+0x125/0x12f0
[   71.502417][ T6295]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   71.502454][ T6295]  ? __kasan_kmalloc+0x93/0xb0
[   71.502482][ T6295]  vmalloc_user_noprof+0xad/0xf0
[   71.502503][ T6295]  ? xskq_create+0xbf/0x170
[   71.502523][ T6295]  xskq_create+0xbf/0x170
[   71.502547][ T6295]  xsk_init_queue+0xb0/0x110
[   71.502571][ T6295]  xsk_setsockopt+0x57b/0x8d0
[   71.502606][ T6295]  ? __pfx_xsk_setsockopt+0x10/0x10
[   71.502625][ T6295]  ? __pfx_aa_sk_perm+0x10/0x10
[   71.502654][ T6295]  ? __fget_files+0x2a/0x420
[   71.502663][ T6295]  ? aa_sock_opt_perm+0xff/0x1b0
[   71.502685][ T6295]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   71.502700][ T6295]  ? __pfx_xsk_setsockopt+0x10/0x10
[   71.502722][ T6295]  do_sock_setsockopt+0x17c/0x1b0
[   71.502743][ T6295]  __x64_sys_setsockopt+0x13f/0x1b0
[   71.502767][ T6295]  do_syscall_64+0xfa/0x3b0
[   71.502780][ T6295]  ? lockdep_hardirqs_on+0x9c/0x150
[   71.502795][ T6295]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.502806][ T6295]  ? exc_page_fault+0x9f/0xf0
[   71.502828][ T6295]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.502841][ T6295] RIP: 0033:0x7f742718ebe9
[   71.502854][ T6295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   71.502864][ T6295] RSP: 002b:00007f74280f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   71.502879][ T6295] RAX: ffffffffffffffda RBX: 00007f74273c5fa0 RCX: 00007f742718ebe9
[   71.502888][ T6295] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006
[   71.502895][ T6295] RBP: 00007f7427211e19 R08: 0000000000000004 R09: 0000000000000000
[   71.502902][ T6295] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[   71.502910][ T6295] R13: 00007f74273c6038 R14: 00007f74273c5fa0 R15: 00007fff8920d368
[   71.502954][ T6295]  </TASK>
[   71.503078][ T6295] Mem-Info:
[   71.636376][ T6295] active_anon:5608 inactive_anon:0 isolated_anon:0
[   71.636376][ T6295]  active_file:1230 inactive_file:38239 isolated_file:0
[   71.636376][ T6295]  unevictable:1768 dirty:1448 writeback:0
[   71.636376][ T6295]  slab_reclaimable:9313 slab_unreclaimable:50999
[   71.636376][ T6295]  mapped:18019 shmem:2434 pagetables:970
[   71.636376][ T6295]  sec_pagetables:0 bounce:0
[   71.636376][ T6295]  kernel_misc_reclaimable:0
[   71.636376][ T6295]  free:305846 free_pcp:18998 free_cma:0
[   71.672332][ T6295] Node 0 active_anon:13408kB inactive_anon:0kB active_file:3644kB inactive_file:22316kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:20892kB dirty:5560kB writeback:0kB shmem:4912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6852kB pagetables:1644kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   71.694433][ T6295] Node 1 active_anon:8896kB inactive_anon:0kB active_file:1276kB inactive_file:130640kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:51232kB dirty:232kB writeback:0kB shmem:4832kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4456kB pagetables:2004kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   71.708698][ T6295] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   71.719247][ T6295] lowmem_reserve[]: 0 811 811 811 811
[   71.727538][ T6295] Node 0 DMA32 free:447524kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13408kB inactive_anon:0kB active_file:3644kB inactive_file:22316kB unevictable:3536kB writepending:5560kB present:1556484kB managed:830956kB mlocked:0kB bounce:0kB free_pcp:35888kB local_pcp:14928kB free_cma:0kB
[   71.766343][ T6295] lowmem_reserve[]: 0 0 0 0 0
[   71.768943][ T6295] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[   71.795836][ T6295] lowmem_reserve[]: 0 0 854 854 854
[   71.797881][ T6295] Node 1 Normal free:302588kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8896kB inactive_anon:0kB active_file:1276kB inactive_file:130640kB unevictable:3536kB writepending:232kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:39796kB local_pcp:22372kB free_cma:0kB
[   71.812538][ T6295] lowmem_reserve[]: 0 0 0 0 0
[   71.814297][ T6295] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   71.818513][ T6295] Node 0 DMA32: 1095*4kB (UME) 15*8kB (UME) 69*16kB (UM) 460*32kB (UE) 161*64kB (UE) 46*128kB (UE) 3*256kB (UE) 1*512kB (U) 2*1024kB (ME) 1*2048kB (U) 101*4096kB (M) = 455588kB
[   71.830985][ T6295] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   71.836601][ T6295] Node 1 Normal: 375*4kB (UM) 218*8kB (UM) 89*16kB (UME) 48*32kB (M) 19*64kB (UME) 18*128kB (UME) 8*256kB (UME) 6*512kB (UM) 3*1024kB (M) 7*2048kB (UM) 66*4096kB (M) = 302588kB
[   71.847013][ T6295] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   71.853404][ T6295] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   71.859607][ T6295] 41905 total pagecache pages
[   71.862088][ T6295] 0 pages in swap cache
[   71.864537][ T6295] Free swap  = 124996kB
[   71.867680][ T6295] Total swap = 124996kB
[   71.872260][ T6295] 786301 pages RAM
[   71.879706][ T6295] 0 pages HighMem/MovableOnly
[   71.882699][ T6295] 241330 pages reserved
[   71.884505][ T6295] 0 pages cma reserved
[   71.957388][   T12] hsr_slave_0: left promiscuous mode
[   71.964814][   T12] hsr_slave_1: left promiscuous mode
[   71.970299][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.980355][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   72.016007][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.018535][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   72.135392][   T12] veth1_macvtap: left promiscuous mode
[   72.146806][   T12] veth0_macvtap: left promiscuous mode
[   72.153680][ T6309] syz.2.176 uses obsolete (PF_INET,SOCK_PACKET)
[   72.156733][   T12] veth1_vlan: left promiscuous mode
[   72.159008][   T12] veth0_vlan: left promiscuous mode
[   72.539798][   T12] team0 (unregistering): Port device team_slave_1 removed
[   72.540800][   T55] Bluetooth: hci0: command tx timeout
[   72.572306][   T12] team0 (unregistering): Port device team_slave_0 removed
[   72.816879][ T6315] netlink: 24 bytes leftover after parsing attributes in process `syz.0.178'.
[   73.113852][ T6277] chnl_net:caif_netlink_parms(): no params data found
[   73.445903][ T6277] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.448546][ T6277] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.453191][ T6277] bridge_slave_0: entered allmulticast mode
[   73.457135][ T6277] bridge_slave_0: entered promiscuous mode
[   73.473510][ T6277] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.476716][ T6277] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.480142][ T6277] bridge_slave_1: entered allmulticast mode
[   73.487690][ T6277] bridge_slave_1: entered promiscuous mode
[   74.608398][ T6277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.618537][ T6277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.622828][   T55] Bluetooth: hci0: command tx timeout
[   74.679560][ T6343] netlink: 'syz.0.185': attribute type 3 has an invalid length.
[   74.685534][ T6277] team0: Port device team_slave_0 added
[   74.688964][ T6277] team0: Port device team_slave_1 added
[   74.696408][ T6343] netlink: 201336 bytes leftover after parsing attributes in process `syz.0.185'.
[   74.745091][ T6277] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.758578][ T6277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.773542][ T6277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.779557][ T6277] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.795527][ T6277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.831271][ T6277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.906816][ T6357] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.189'.
[   74.935368][ T6277] hsr_slave_0: entered promiscuous mode
[   74.938069][ T6277] hsr_slave_1: entered promiscuous mode
[   74.941557][ T6277] debugfs: 'hsr0' already exists in 'hsr'
[   74.943469][ T6277] Cannot create hsr debugfs directory
[   75.116030][ T6372] netlink: 'syz.2.194': attribute type 29 has an invalid length.
[   75.134419][ T6372] netlink: 'syz.2.194': attribute type 29 has an invalid length.
[   75.208272][ T6277] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   75.232060][   T55] Bluetooth: hci1: unexpected event 0x36 length: 15 > 7
[   75.242032][ T6277] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   75.257735][ T6277] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   75.279150][ T6277] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   75.379857][ T6277] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.455072][ T6277] 8021q: adding VLAN 0 to HW filter on device team0
[   75.466131][  T778] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.470073][  T778] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.502868][  T778] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.506010][  T778] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.815882][ T6277] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.857034][ T6277] veth0_vlan: entered promiscuous mode
[   75.869780][ T6277] veth1_vlan: entered promiscuous mode
[   75.899546][ T6412] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.917019][ T6277] veth0_macvtap: entered promiscuous mode
[   75.927390][ T6277] veth1_macvtap: entered promiscuous mode
[   75.996190][ T6277] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.020356][ T6277] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.037125][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.042846][ T6416] netlink: 146936 bytes leftover after parsing attributes in process `syz.0.205'.
[   76.047262][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.054581][ T6416] openvswitch: netlink: Message has 6 unknown bytes.
[   76.066819][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.093510][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.229688][ T5032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.237312][ T5032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.285835][ T5032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.289120][ T5032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.525079][ T6432] netlink: 12 bytes leftover after parsing attributes in process `syz.3.168'.
[   76.664433][ T6439] netlink: 144 bytes leftover after parsing attributes in process `syz.2.209'.
[   76.677620][ T6439] netlink: 28 bytes leftover after parsing attributes in process `syz.2.209'.
[   76.694885][ T6439] netlink: 28 bytes leftover after parsing attributes in process `syz.2.209'.
[   76.699079][ T6439] netlink: 60 bytes leftover after parsing attributes in process `syz.2.209'.
[   76.710931][   T55] Bluetooth: hci0: command tx timeout
[   76.920343][ T6450] netlink: 'syz.2.211': attribute type 1 has an invalid length.
[   76.985776][   T24] cfg80211: failed to load regulatory.db
[   77.010925][ T6447] delete_channel: no stack
[   77.914924][ T6496] netlink: 60 bytes leftover after parsing attributes in process `syz.0.226'.
[   77.919129][ T6496] unsupported nlmsg_type 40
[   78.333881][ T6503] netlink: 1 bytes leftover after parsing attributes in process `syz.2.229'.
[   78.523933][ T6507] syzkaller0: entered promiscuous mode
[   78.527211][ T6507] syzkaller0: entered allmulticast mode
[   78.794180][   T55] Bluetooth: hci0: command tx timeout
[   79.806974][ T6539] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   79.891533][ T6549] netlink: 'syz.3.249': attribute type 21 has an invalid length.
[   79.894293][ T6549] netlink: 'syz.3.249': attribute type 1 has an invalid length.
[   79.900925][ T6549] __nla_validate_parse: 2 callbacks suppressed
[   79.900964][ T6549] netlink: 132 bytes leftover after parsing attributes in process `syz.3.249'.
[   80.244066][ T6560] netlink: 'syz.0.255': attribute type 10 has an invalid length.
[   80.251611][ T6560] netlink: 55 bytes leftover after parsing attributes in process `syz.0.255'.
[   80.498015][ T6571] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.259'.
[   80.774760][ T6590] netlink: 304 bytes leftover after parsing attributes in process `syz.3.268'.
[   81.645290][   T55] Bluetooth: hci1: unexpected event 0x3d length: 151 > 14
[   83.629384][ T6668] netdevsim netdevsim0 : renamed from netdevsim0 (while UP)
[   84.038807][ T6686] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.306'.
[   84.965365][ T6708] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   85.304825][ T6732] wg0 speed is unknown, defaulting to 1000
[   85.307472][ T6732] wg0 speed is unknown, defaulting to 1000
[   85.317936][ T6732] wg0 speed is unknown, defaulting to 1000
[   85.428799][ T6740] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   85.488161][ T6732] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   85.692324][ T6732] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   86.139449][ T6732] wg0 speed is unknown, defaulting to 1000
[   86.153956][ T6732] wg0 speed is unknown, defaulting to 1000
[   86.158585][ T6732] wg0 speed is unknown, defaulting to 1000
[   86.175696][ T6732] syz.0.327 (6732) used greatest stack depth: 19320 bytes left
[   86.231760][ T6758] netlink: 'syz.3.339': attribute type 10 has an invalid length.
[   86.291411][ T6758] batman_adv: batadv0: Adding interface: netdevsim0
[   86.300794][ T6758] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.319260][ T6758] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[   86.389318][ T6773] netlink: 48 bytes leftover after parsing attributes in process `syz.0.346'.
[   86.693623][ T6790] netlink: 'syz.3.352': attribute type 3 has an invalid length.
[   87.535215][ T6820] netlink: 'syz.0.361': attribute type 3 has an invalid length.
[   87.552698][ T6820] netlink: 'syz.0.361': attribute type 1 has an invalid length.
[   87.557664][ T6820] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.361'.
[   87.742854][ T6824] openvswitch: netlink: Message has 11 unknown bytes.
[   87.746138][ T6824] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   87.858252][ T6828] netlink: 12 bytes leftover after parsing attributes in process `syz.2.364'.
[   88.814160][ T6892] netlink: 'syz.0.381': attribute type 29 has an invalid length.
[   88.849634][ T6892] netlink: 'syz.0.381': attribute type 10 has an invalid length.
[   88.917846][ T6892] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.931356][ T6892] team0: Port device bond0 added
[   89.336801][ T6918] netlink: 'syz.2.386': attribute type 1 has an invalid length.
[   89.340188][ T6918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.386'.
[   89.809431][ T6949] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.396'.
[   89.813596][ T6949] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   89.816513][ T6949] openvswitch: netlink: Message has 6324 unknown bytes.
[   90.678321][ T6970] vxcan1: entered allmulticast mode
[   91.033648][ T6998] netlink: 'syz.2.416': attribute type 10 has an invalid length.
[   91.037151][ T6998] netlink: 3531 bytes leftover after parsing attributes in process `syz.2.416'.
[   91.153865][ T7005] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   91.157175][ T7008] netlink: 12 bytes leftover after parsing attributes in process `syz.0.420'.
[   91.157201][ T7008] netlink: 16 bytes leftover after parsing attributes in process `syz.0.420'.
[   91.413326][ T7020] netlink: 'syz.0.425': attribute type 10 has an invalid length.
[   92.254639][ T7014] wg0 speed is unknown, defaulting to 1000
[   92.704661][ T7038] netlink: 62967 bytes leftover after parsing attributes in process `syz.3.432'.
[   92.858846][ T7040] netlink: 13 bytes leftover after parsing attributes in process `syz.3.433'.
[   92.993506][ T7045] netlink: 'syz.0.436': attribute type 1 has an invalid length.
[   93.104463][ T7052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.439'.
[   93.309359][ T7051] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   93.316697][ T7051] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   94.374403][ T7067] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.445'.
[   94.378062][ T7067] netlink: 5 bytes leftover after parsing attributes in process `syz.3.445'.
[   94.913653][ T7075] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[   94.916447][ T7075] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   95.116290][ T7087] netlink: 830 bytes leftover after parsing attributes in process `syz.0.451'.
[   95.197828][ T7089] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.452'.
[   95.442155][ T7099] netlink: 'syz.0.457': attribute type 13 has an invalid length.
[   95.445064][ T7099] netlink: 'syz.0.457': attribute type 17 has an invalid length.
[   95.923528][ T7099] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.997659][ T7099] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   96.053122][   T55] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4
[   96.267773][ T7130] netlink: 36 bytes leftover after parsing attributes in process `syz.3.469'.
[   96.317320][ T7130] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   96.751828][ T7165] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.486'.
[   96.759377][ T7165] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ecN^{is|ؖS
[   97.202617][ T7180] netlink: 14 bytes leftover after parsing attributes in process `syz.0.493'.
[   97.521190][ T7196] _Z`Ԁ@S: entered promiscuous mode
[   97.759329][ T7210] __nla_validate_parse: 1 callbacks suppressed
[   97.759437][ T7210] netlink: 132 bytes leftover after parsing attributes in process `syz.2.503'.
[   97.799914][ T7210] netlink: 132 bytes leftover after parsing attributes in process `syz.2.503'.
[   97.890428][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.507'.
[   98.928620][ T7258] netlink: 180 bytes leftover after parsing attributes in process `syz.3.523'.
[   99.407447][ T7277] C: renamed from team_slave_0 (while UP)
[   99.415009][ T7277] netlink: 'syz.0.531': attribute type 8 has an invalid length.
[   99.418971][ T7277] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   99.750256][ T7295] openvswitch: netlink: Flow actions attr not present in new flow.
[   99.895542][ T7309] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.547'.
[  100.053301][ T7327] netlink: 104 bytes leftover after parsing attributes in process `syz.3.556'.
[  100.057050][ T7329] netlink: 176 bytes leftover after parsing attributes in process `syz.2.557'.
[  100.142874][ T7337] netlink: 'syz.2.559': attribute type 6 has an invalid length.
[  100.143180][ T7336] netlink: 56 bytes leftover after parsing attributes in process `syz.3.560'.
[  100.145713][ T7337] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.559'.
[  101.012765][ T7352] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.566'.
[  105.211499][ T7410] !: renamed from bond_slave_0 (while UP)
[  105.344397][ T7428] netlink: 'syz.0.600': attribute type 10 has an invalid length.
[  105.347674][ T7428] __nla_validate_parse: 2 callbacks suppressed
[  105.347685][ T7428] netlink: 40 bytes leftover after parsing attributes in process `syz.0.600'.
[  105.356089][ T7428] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  107.418863][ T7507] netlink: 68 bytes leftover after parsing attributes in process `syz.2.628'.
[  107.432780][   T33] audit: type=1107 audit(1757339328.416:2): pid=7484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=','
[  107.898587][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.638'.
[  108.052266][ T7537] netlink: 12 bytes leftover after parsing attributes in process `syz.3.642'.
[  108.056218][ T7537] netlink: 12 bytes leftover after parsing attributes in process `syz.3.642'.
[  110.137394][ T7601] delete_channel: no stack
[  110.193931][ T7611] bpf: Bad value for 'gid'
[  110.234704][   T55] Bluetooth: hci1: unexpected event 0x2c length: 82 > 17
[  110.309725][ T7619] netlink: 16 bytes leftover after parsing attributes in process `syz.0.677'.
[  110.515727][ T7634] syzkaller0: entered promiscuous mode
[  110.518008][ T7634] syzkaller0: entered allmulticast mode
[  110.615533][ T7644] netlink: 'syz.3.690': attribute type 21 has an invalid length.
[  111.371305][ T7644] netlink: 156 bytes leftover after parsing attributes in process `syz.3.690'.
[  112.202188][ T7666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.698'.
[  112.293530][ T7666] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  113.415442][ T7699] netlink: 'syz.2.712': attribute type 21 has an invalid length.
[  113.573101][ T7711] netlink: 'syz.2.718': attribute type 1 has an invalid length.
[  113.576450][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.718'.
[  113.754510][ T7723] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  113.832008][ T7721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.723'.
[  113.858232][   T55] Bluetooth: hci1: unexpected event 0x1d length: 15 > 5
[  116.112232][ T7752] netlink: 104 bytes leftover after parsing attributes in process `syz.0.735'.
[  116.213903][ T7756] netlink: 356 bytes leftover after parsing attributes in process `syz.0.737'.
[  116.218175][ T7756] netlink: 356 bytes leftover after parsing attributes in process `syz.0.737'.
[  116.662471][ T7760] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.739'.
[  116.725056][ T7764] netlink: 56 bytes leftover after parsing attributes in process `syz.0.741'.
[  117.695801][ T7811] netlink: 40 bytes leftover after parsing attributes in process `syz.2.761'.
[  117.705459][ T7811] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.797248][ T7811] bridge_slave_0 (unregistering): left allmulticast mode
[  117.800892][ T7811] bridge_slave_0 (unregistering): left promiscuous mode
[  117.804105][ T7811] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.854937][ T7813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.761'.
[  118.234198][ T7823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.765'.
[  118.546790][ T7826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.766'.
[  118.550464][ T7826] ==================================================================
[  118.553904][ T7826] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  118.557081][ T7826] Read of size 4 at addr ffff8880247a40c4 by task syz.0.766/7826
[  118.560846][ T7826] 
[  118.561700][ T7826] CPU: 1 UID: 0 PID: 7826 Comm: syz.0.766 Not tainted syzkaller #0 PREEMPT(full) 
[  118.561710][ T7826] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  118.561715][ T7826] Call Trace:
[  118.561719][ T7826]  <TASK>
[  118.561723][ T7826]  dump_stack_lvl+0x189/0x250
[  118.561738][ T7826]  ? __virt_addr_valid+0x1c8/0x5c0
[  118.561748][ T7826]  ? __pfx_dump_stack_lvl+0x10/0x10
[  118.561756][ T7826]  ? __virt_addr_valid+0x1c8/0x5c0
[  118.561766][ T7826]  ? lock_release+0x4b/0x3e0
[  118.561780][ T7826]  ? __virt_addr_valid+0x4a5/0x5c0
[  118.561790][ T7826]  print_report+0xca/0x240
[  118.561798][ T7826]  ? xfrm_alloc_spi+0x570/0xf30
[  118.561806][ T7826]  kasan_report+0x118/0x150
[  118.561817][ T7826]  ? xfrm_alloc_spi+0x570/0xf30
[  118.561827][ T7826]  xfrm_alloc_spi+0x570/0xf30
[  118.561836][ T7826]  ? xfrm_alloc_spi+0x2a0/0xf30
[  118.561848][ T7826]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  118.561877][ T7826]  ? xfrm_find_acq+0x87/0xa0
[  118.561891][ T7826]  xfrm_alloc_userspi+0x70b/0xc90
[  118.561906][ T7826]  ? apparmor_capable+0x137/0x1b0
[  118.561916][ T7826]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  118.561925][ T7826]  ? __nla_parse+0x40/0x60
[  118.561938][ T7826]  xfrm_user_rcv_msg+0x7a3/0xab0
[  118.561951][ T7826]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  118.561967][ T7826]  ? __pfx___mutex_trylock_common+0x10/0x10
[  118.561978][ T7826]  ? rcu_is_watching+0x15/0xb0
[  118.561987][ T7826]  ? trace_contention_end+0x39/0x120
[  118.561995][ T7826]  ? __mutex_lock+0x335/0x1360
[  118.562006][ T7826]  netlink_rcv_skb+0x208/0x470
[  118.562017][ T7826]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  118.562025][ T7826]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  118.562037][ T7826]  ? netlink_deliver_tap+0x2e/0x1b0
[  118.562046][ T7826]  ? netlink_deliver_tap+0x2e/0x1b0
[  118.562056][ T7826]  xfrm_netlink_rcv+0x79/0x90
[  118.562063][ T7826]  netlink_unicast+0x82f/0x9e0
[  118.562074][ T7826]  ? __pfx_netlink_unicast+0x10/0x10
[  118.562082][ T7826]  ? netlink_sendmsg+0x642/0xb30
[  118.562092][ T7826]  ? skb_put+0x11b/0x210
[  118.562099][ T7826]  netlink_sendmsg+0x805/0xb30
[  118.562110][ T7826]  ? __pfx_netlink_sendmsg+0x10/0x10
[  118.562120][ T7826]  ? aa_sock_msg_perm+0xf1/0x1d0
[  118.562127][ T7826]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  118.562135][ T7826]  ? __pfx_netlink_sendmsg+0x10/0x10
[  118.562150][ T7826]  __sock_sendmsg+0x21c/0x270
[  118.562159][ T7826]  ____sys_sendmsg+0x505/0x830
[  118.562169][ T7826]  ? __pfx_____sys_sendmsg+0x10/0x10
[  118.562179][ T7826]  ? import_iovec+0x74/0xa0
[  118.562188][ T7826]  ___sys_sendmsg+0x21f/0x2a0
[  118.562196][ T7826]  ? __pfx____sys_sendmsg+0x10/0x10
[  118.562209][ T7826]  ? __fget_files+0x2a/0x420
[  118.562219][ T7826]  ? __fget_files+0x2a/0x420
[  118.562224][ T7826]  ? __fget_files+0x3a0/0x420
[  118.562232][ T7826]  __x64_sys_sendmsg+0x19b/0x260
[  118.562239][ T7826]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  118.562248][ T7826]  ? rcu_is_watching+0x15/0xb0
[  118.562255][ T7826]  ? do_syscall_64+0xbe/0x3b0
[  118.562266][ T7826]  do_syscall_64+0xfa/0x3b0
[  118.562275][ T7826]  ? lockdep_hardirqs_on+0x9c/0x150
[  118.562284][ T7826]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.562291][ T7826]  ? exc_page_fault+0x9f/0xf0
[  118.562299][ T7826]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.562306][ T7826] RIP: 0033:0x7f267098ebe9
[  118.562314][ T7826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  118.562320][ T7826] RSP: 002b:00007f2671834038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  118.562329][ T7826] RAX: ffffffffffffffda RBX: 00007f2670bc5fa0 RCX: 00007f267098ebe9
[  118.562334][ T7826] RDX: 0000000000048000 RSI: 00002000000001c0 RDI: 0000000000000003
[  118.562338][ T7826] RBP: 00007f2670a11e19 R08: 0000000000000000 R09: 0000000000000000
[  118.562343][ T7826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  118.562346][ T7826] R13: 00007f2670bc6038 R14: 00007f2670bc5fa0 R15: 00007ffc053e7b18
[  118.562355][ T7826]  </TASK>
[  118.562358][ T7826] 
[  118.709089][ T7826] Allocated by task 6123:
[  118.710671][ T7826]  kasan_save_track+0x3e/0x80
[  118.712243][ T7826]  __kasan_slab_alloc+0x6c/0x80
[  118.714039][ T7826]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  118.716227][ T7826]  xfrm_state_alloc+0x24/0x2f0
[  118.718079][ T7826]  __find_acq_core+0x8a7/0x1c00
[  118.719758][ T7826]  xfrm_find_acq+0x78/0xa0
[  118.721241][ T7826]  xfrm_alloc_userspi+0x6b3/0xc90
[  118.722911][ T7826]  xfrm_user_rcv_msg+0x7a3/0xab0
[  118.724542][ T7826]  netlink_rcv_skb+0x208/0x470
[  118.726365][ T7826]  xfrm_netlink_rcv+0x79/0x90
[  118.728407][ T7826]  netlink_unicast+0x82f/0x9e0
[  118.730476][ T7826]  netlink_sendmsg+0x805/0xb30
[  118.732247][ T7826]  __sock_sendmsg+0x21c/0x270
[  118.733886][ T7826]  ____sys_sendmsg+0x505/0x830
[  118.735572][ T7826]  ___sys_sendmsg+0x21f/0x2a0
[  118.737214][ T7826]  __x64_sys_sendmsg+0x19b/0x260
[  118.738916][ T7826]  do_syscall_64+0xfa/0x3b0
[  118.740638][ T7826]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.743075][ T7826] 
[  118.744102][ T7826] Freed by task 5926:
[  118.745689][ T7826]  kasan_save_track+0x3e/0x80
[  118.747749][ T7826]  kasan_save_free_info+0x46/0x50
[  118.749909][ T7826]  __kasan_slab_free+0x5b/0x80
[  118.751690][ T7826]  kmem_cache_free+0x18f/0x400
[  118.753454][ T7826]  xfrm_state_gc_task+0x52d/0x6b0
[  118.755297][ T7826]  process_scheduled_works+0xae1/0x17b0
[  118.756982][ T7826]  worker_thread+0x8a0/0xda0
[  118.758371][ T7826]  kthread+0x711/0x8a0
[  118.759953][ T7826]  ret_from_fork+0x3fc/0x770
[  118.761782][ T7826]  ret_from_fork_asm+0x1a/0x30
[  118.763415][ T7826] 
[  118.764267][ T7826] The buggy address belongs to the object at ffff8880247a4000
[  118.764267][ T7826]  which belongs to the cache xfrm_state of size 928
[  118.769018][ T7826] The buggy address is located 196 bytes inside of
[  118.769018][ T7826]  freed 928-byte region [ffff8880247a4000, ffff8880247a43a0)
[  118.774203][ T7826] 
[  118.775010][ T7826] The buggy address belongs to the physical page:
[  118.777177][ T7826] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880247a4900 pfn:0x247a4
[  118.780503][ T7826] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  118.783261][ T7826] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  118.785766][ T7826] page_type: f5(slab)
[  118.787161][ T7826] raw: 00fff00000000040 ffff88801ab98a00 dead000000000122 0000000000000000
[  118.790177][ T7826] raw: ffff8880247a4900 00000000800e000c 00000000f5000000 0000000000000000
[  118.793183][ T7826] head: 00fff00000000040 ffff88801ab98a00 dead000000000122 0000000000000000
[  118.796572][ T7826] head: ffff8880247a4900 00000000800e000c 00000000f5000000 0000000000000000
[  118.799902][ T7826] head: 00fff00000000002 ffffea000091e901 00000000ffffffff 00000000ffffffff
[  118.802897][ T7826] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  118.805812][ T7826] page dumped because: kasan: bad access detected
[  118.808022][ T7826] page_owner tracks the page as allocated
[  118.810286][ T7826] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6123, tgid 6119 (syz.0.99), ts 65677510136, free_ts 65031101331
[  118.816419][ T7826]  post_alloc_hook+0x240/0x2a0
[  118.818089][ T7826]  get_page_from_freelist+0x21e4/0x22c0
[  118.820023][ T7826]  __alloc_frozen_pages_noprof+0x181/0x370
[  118.821909][ T7826]  alloc_pages_mpol+0x232/0x4a0
[  118.823535][ T7826]  allocate_slab+0x8a/0x370
[  118.825092][ T7826]  ___slab_alloc+0xbeb/0x1410
[  118.826684][ T7826]  kmem_cache_alloc_noprof+0x283/0x3c0
[  118.828510][ T7826]  xfrm_state_alloc+0x24/0x2f0
[  118.830578][ T7826]  __find_acq_core+0x8a7/0x1c00
[  118.832305][ T7826]  xfrm_find_acq+0x78/0xa0
[  118.833831][ T7826]  xfrm_alloc_userspi+0x6b3/0xc90
[  118.835519][ T7826]  xfrm_user_rcv_msg+0x7a3/0xab0
[  118.837364][ T7826]  netlink_rcv_skb+0x208/0x470
[  118.839031][ T7826]  xfrm_netlink_rcv+0x79/0x90
[  118.840846][ T7826]  netlink_unicast+0x82f/0x9e0
[  118.842602][ T7826]  netlink_sendmsg+0x805/0xb30
[  118.844197][ T7826] page last free pid 10 tgid 10 stack trace:
[  118.846407][ T7826]  __free_frozen_pages+0xbc4/0xd30
[  118.848207][ T7826]  __put_partials+0x156/0x1a0
[  118.850002][ T7826]  put_cpu_partial+0x17c/0x250
[  118.851982][ T7826]  __slab_free+0x2d5/0x3c0
[  118.853769][ T7826]  qlist_free_all+0x97/0x140
[  118.855396][ T7826]  kasan_quarantine_reduce+0x148/0x160
[  118.857206][ T7826]  __kasan_slab_alloc+0x22/0x80
[  118.859031][ T7826]  __kmalloc_cache_noprof+0x1be/0x3d0
[  118.861302][ T7826]  nsim_fib_event_work+0x1174/0x3180
[  118.863279][ T7826]  process_scheduled_works+0xae1/0x17b0
[  118.865462][ T7826]  worker_thread+0x8a0/0xda0
[  118.867073][ T7826]  kthread+0x711/0x8a0
[  118.868781][ T7826]  ret_from_fork+0x3fc/0x770
[  118.870737][ T7826]  ret_from_fork_asm+0x1a/0x30
[  118.872568][ T7826] 
[  118.873572][ T7826] Memory state around the buggy address:
[  118.875922][ T7826]  ffff8880247a3f80: fc 00 00 00 00 00 fc fc 00 00 00 00 00 fc fc fc
[  118.879234][ T7826]  ffff8880247a4000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  118.882584][ T7826] >ffff8880247a4080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  118.885881][ T7826]                                            ^
[  118.888520][ T7826]  ffff8880247a4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  118.891939][ T7826]  ffff8880247a4180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  118.895356][ T7826] ==================================================================
[  118.898753][ T7826] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  118.901687][ T7826] CPU: 1 UID: 0 PID: 7826 Comm: syz.0.766 Not tainted syzkaller #0 PREEMPT(full) 
[  118.905603][ T7826] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  118.909869][ T7826] Call Trace:
[  118.911300][ T7826]  <TASK>
[  118.912596][ T7826]  dump_stack_lvl+0x99/0x250
[  118.914580][ T7826]  ? __asan_memcpy+0x40/0x70
[  118.916508][ T7826]  ? __pfx_dump_stack_lvl+0x10/0x10
[  118.918789][ T7826]  ? __pfx__printk+0x10/0x10
[  118.920824][ T7826]  vpanic+0x281/0x750
[  118.922571][ T7826]  ? __pfx_vpanic+0x10/0x10
[  118.924569][ T7826]  ? irqentry_exit+0x74/0x90
[  118.926506][ T7826]  panic+0xb9/0xc0
[  118.928096][ T7826]  ? __pfx_panic+0x10/0x10
[  118.929990][ T7826]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  118.932513][ T7826]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  118.934961][ T7826]  ? xfrm_alloc_spi+0x570/0xf30
[  118.937095][ T7826]  check_panic_on_warn+0x89/0xb0
[  118.939252][ T7826]  ? xfrm_alloc_spi+0x570/0xf30
[  118.941352][ T7826]  end_report+0x78/0x160
[  118.943197][ T7826]  kasan_report+0x129/0x150
[  118.945188][ T7826]  ? xfrm_alloc_spi+0x570/0xf30
[  118.947291][ T7826]  xfrm_alloc_spi+0x570/0xf30
[  118.949282][ T7826]  ? xfrm_alloc_spi+0x2a0/0xf30
[  118.951401][ T7826]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  118.953623][ T7826]  ? xfrm_find_acq+0x87/0xa0
[  118.955632][ T7826]  xfrm_alloc_userspi+0x70b/0xc90
[  118.957831][ T7826]  ? apparmor_capable+0x137/0x1b0
[  118.960018][ T7826]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  118.962432][ T7826]  ? __nla_parse+0x40/0x60
[  118.964422][ T7826]  xfrm_user_rcv_msg+0x7a3/0xab0
[  118.966566][ T7826]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  118.968859][ T7826]  ? __pfx___mutex_trylock_common+0x10/0x10
[  118.971385][ T7826]  ? rcu_is_watching+0x15/0xb0
[  118.973425][ T7826]  ? trace_contention_end+0x39/0x120
[  118.975735][ T7826]  ? __mutex_lock+0x335/0x1360
[  118.977855][ T7826]  netlink_rcv_skb+0x208/0x470
[  118.979950][ T7826]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  118.982330][ T7826]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  118.984342][ T7826]  ? netlink_deliver_tap+0x2e/0x1b0
[  118.986068][ T7826]  ? netlink_deliver_tap+0x2e/0x1b0
[  118.987930][ T7826]  xfrm_netlink_rcv+0x79/0x90
[  118.989715][ T7826]  netlink_unicast+0x82f/0x9e0
[  118.991725][ T7826]  ? __pfx_netlink_unicast+0x10/0x10
[  118.993609][ T7826]  ? netlink_sendmsg+0x642/0xb30
[  118.995242][ T7826]  ? skb_put+0x11b/0x210
[  118.996605][ T7826]  netlink_sendmsg+0x805/0xb30
[  118.998293][ T7826]  ? __pfx_netlink_sendmsg+0x10/0x10
[  119.000536][ T7826]  ? aa_sock_msg_perm+0xf1/0x1d0
[  119.002720][ T7826]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  119.004983][ T7826]  ? __pfx_netlink_sendmsg+0x10/0x10
[  119.007294][ T7826]  __sock_sendmsg+0x21c/0x270
[  119.009339][ T7826]  ____sys_sendmsg+0x505/0x830
[  119.011379][ T7826]  ? __pfx_____sys_sendmsg+0x10/0x10
[  119.013608][ T7826]  ? import_iovec+0x74/0xa0
[  119.015599][ T7826]  ___sys_sendmsg+0x21f/0x2a0
[  119.017662][ T7826]  ? __pfx____sys_sendmsg+0x10/0x10
[  119.019929][ T7826]  ? __fget_files+0x2a/0x420
[  119.021956][ T7826]  ? __fget_files+0x2a/0x420
[  119.023881][ T7826]  ? __fget_files+0x3a0/0x420
[  119.025478][ T7826]  __x64_sys_sendmsg+0x19b/0x260
[  119.027260][ T7826]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  119.029480][ T7826]  ? rcu_is_watching+0x15/0xb0
[  119.031561][ T7826]  ? do_syscall_64+0xbe/0x3b0
[  119.033563][ T7826]  do_syscall_64+0xfa/0x3b0
[  119.035443][ T7826]  ? lockdep_hardirqs_on+0x9c/0x150
[  119.037438][ T7826]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.039816][ T7826]  ? exc_page_fault+0x9f/0xf0
[  119.041829][ T7826]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.044374][ T7826] RIP: 0033:0x7f267098ebe9
[  119.046287][ T7826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  119.054399][ T7826] RSP: 002b:00007f2671834038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  119.057961][ T7826] RAX: ffffffffffffffda RBX: 00007f2670bc5fa0 RCX: 00007f267098ebe9
[  119.061369][ T7826] RDX: 0000000000048000 RSI: 00002000000001c0 RDI: 0000000000000003
[  119.064746][ T7826] RBP: 00007f2670a11e19 R08: 0000000000000000 R09: 0000000000000000
[  119.068115][ T7826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  119.071504][ T7826] R13: 00007f2670bc6038 R14: 00007f2670bc5fa0 R15: 00007ffc053e7b18
[  119.074896][ T7826]  </TASK>
[  119.077066][ T7826] Kernel Offset: disabled
[  119.078921][ T7826] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:48:59  Registers:
info registers vcpu 0

CPU#0
RAX=d84cbe33e4fe3000 RBX=ffffffff819683a8 RCX=d84cbe33e4fe3000 RDX=0000000000000001
RSI=ffffffff8d9b6ac3 RDI=ffffffff8be33300 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38030 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7943f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001200 CR3=0000000031392000 CR4=000006f0
DR0=0000000000000000 DR1=0000200000000300 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f0046c12e53
XMM06=0000000000000000 00007f0046c12e4d XMM07=0000000000000000 00007f0046c12e61
XMM08=0000000000000000 00007f0046c12ee7 XMM09=0000000000000000 00007f0046c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000159c RDI=000000000000159d RBP=00000000000003f8 RSP=ffffc9000317e9f0
R8 =ffff888107f08237 R9 =1ffff11020fe1046 R10=dffffc0000000000 R11=ffffffff854efb30
R12=dffffc0000000000 R13=ffffffff99af98ff R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854efbac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f26718346c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f2671833fc8 CR3=0000000028622000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f2670b97498 00007f2670b97470 XMM03=00007f2670b974a8 00007f2670b974a0
XMM04=00007f26716fd100 00007f2670b97460 XMM05=00007f2670b97478 00007f2670b974c0
XMM06=00007f2670b974b8 00007f2670b974b0 XMM07=00007f2670b974a8 00007f2670b974a0
XMM08=0000000000000000 00007f2670a12ee7 XMM09=0000000000000000 00007f2670a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
