last executing test programs:

17.409259982s ago: executing program 2 (id=473):
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x8, 0x4f63}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r0, &(0x7f0000000040), &(0x7f0000000040)=""/25, 0x2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r2 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r2, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040)
sendmsg$inet(r2, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000)
sendmsg$inet(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f00000001c0)="e9", 0x1}], 0x1}, 0x8054)
setsockopt$sock_attach_bpf(r2, 0x84, 0xb, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x200f000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r4, &(0x7f0000000000), 0x2a979d)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@fwd={0x2}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000000200)=""/4096, 0x40, 0x1000, 0x1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)

16.563917376s ago: executing program 2 (id=486):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r1 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f00000000c0)=r0, 0x4)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94)

16.498721173s ago: executing program 2 (id=487):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000270600000ee60000bf2500000000000073350000000000006507000002001000070700004c0000001f75000000000000bf54000000000000070400004400f9f0ad32010000000000950000000000000005000000000000009500000000000000debfa255e44e4cc39f211fb04d7f202e6a53bd86bde99b679b4e6d24b812569036"], 0x0}, 0x94)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x15}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r2, 0x4)
ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x6)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x2, 0x10, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000006b8af0ff00000000bfa10000000000000701000000feffffbfa40000000000000704000020fedfffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000270600000ee60000bf2500000000000073350000000000006507000002001000070700004c0000001f75000000000000bf54000000000000070400004400f9f0ad32010000000000950000000000000005000000000000009500000000000000debfa255e44e4cc39f211fb04d7f202e6a53bd86bde99b679b4e6d24b812569036"], 0x0}, 0x94) (async)
socket$kcm(0x11, 0x200000000000002, 0x300) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async)
recvmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x15}, 0x0) (async)
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r2, 0x4) (async)
ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x6) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x2, 0x10, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000006b8af0ff00000000bfa10000000000000701000000feffffbfa40000000000000704000020fedfffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x90) (async)

16.498140577s ago: executing program 1 (id=488):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xfffffffffffffeb8, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d0802070000f0810000a1180002478800000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40000)

16.497685397s ago: executing program 1 (id=489):
socket$kcm(0x29, 0x5, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1840000000000000090000008500e0ff40000400"/32], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x26}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab50200000000000a", @ANYRES32, @ANYRES8=r1], 0xfe33)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x8, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000840)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000880)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="623129db4409723161805d9d38b4e8d46b38aed725b98c75215d7d510a34ffcf6a7738d18fcd1be365abd6fd5d", @ANYRES64=0x0], 0x20)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r3, 0x29, 0x18, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r4=>0x0}, 0x8)
r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r5, 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r5, 0x0, 0x0}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x20, &(0x7f0000000740)={&(0x7f0000000580)=""/182, 0xb6, <r6=>0x0, &(0x7f0000000640)=""/212, 0xd4}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=r6, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xfc, &(0x7f0000000340)=[{}], 0x8, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x92, 0x8, 0x8, &(0x7f0000000400)}}, 0x10)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup/syz1\x00', 0x200002, 0x0)

16.430176333s ago: executing program 1 (id=490):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x20}, 0x18)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000800000010000000630200"/32], &(0x7f00000002c0)='syzkaller\x00', 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x94)
write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x2b, 'net_prio'}, {0x2b, 'net_cls'}, {0x2d, 'freezer'}, {0x2d, 'freezer'}, {0x2b, 'cpuacct'}]}, 0x2e)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x20}, 0x18) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000800000010000000630200"/32], &(0x7f00000002c0)='syzkaller\x00', 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x94) (async)
write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x2b, 'net_prio'}, {0x2b, 'net_cls'}, {0x2d, 'freezer'}, {0x2d, 'freezer'}, {0x2b, 'cpuacct'}]}, 0x2e) (async)

16.428922934s ago: executing program 2 (id=491):
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, <r0=>0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0xf, '\x00', r1, r2, 0x3, 0x5}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f00000001c0)=@raw=[@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @generic={0xa0, 0x9, 0xe, 0x8, 0x8}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @jmp={0x5, 0x0, 0x6, 0x4, 0x1, 0xffffffffffffffe8, 0xfffffffffffffff0}], &(0x7f0000000240)='syzkaller\x00', 0x3, 0x11, &(0x7f0000000280)=""/17, 0x41100, 0x10, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000002c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x9, 0xffffff61, 0x8}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0x0, 0x3}, {0x1, 0x2, 0xb, 0xa}, {0x2, 0x5, 0xf, 0xa}, {0x0, 0x1, 0xe, 0x5}], 0x10, 0xc}, 0x94)
r7 = openat$cgroup_ro(r2, &(0x7f0000000440)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000480)='\x00')
socket$kcm(0x29, 0x0, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000004c0)=r7, 0x4)
openat$cgroup_type(r5, &(0x7f0000000500), 0x2, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r7, 0x20, &(0x7f0000000640)={&(0x7f0000000540)=""/67, 0x43, 0x0, &(0x7f00000005c0)=""/113, 0x71}}, 0x10)
r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000700)={r7}, 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='ext4_forget\x00', r8, 0x0, 0x4}, 0x18)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x2100, 0x0)
ioctl$TUNSETCARRIER(r9, 0x400454e2, &(0x7f00000007c0)=0x1)
socket$kcm(0x29, 0x2, 0x0)
r10 = perf_event_open(&(0x7f0000000840)={0x3, 0x80, 0x1, 0xb, 0xc, 0x2, 0x0, 0x10, 0x2002, 0xe, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={&(0x7f0000000800), 0x2}, 0x101000, 0x78d3ed40, 0x9, 0x7, 0x7f, 0x1, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x0, r8, 0x3)
ioctl$PERF_EVENT_IOC_PERIOD(r10, 0x40082404, &(0x7f00000008c0)=0xbc3)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a00)={@cgroup=r2, 0x20, 0x0, 0xffff, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r11=>0x0}, 0x40)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a40)={@cgroup=r2, r6, 0x2d, 0x4, r6, @void, @value=r7, @void, @void, r11}, 0x20)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a80)='./cgroup.net/syz0\x00', 0x1ff)
r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x8, '\x00', 0x0, r2, 0x3, 0x2, 0x2}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@const={0x5, 0x0, 0x0, 0xa, 0x5}, @var={0xb, 0x0, 0x0, 0xe, 0x1, 0x3}]}, {0x0, [0x5f]}}, &(0x7f0000000b80)=""/170, 0x37, 0xaa, 0x0, 0x4dea, 0x10000, @value=r7}, 0x28)
sendmsg$inet(r8, &(0x7f0000001f40)={&(0x7f0000000c80)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001e40)=[{&(0x7f0000000cc0)="89b58e39c0b74b943ab794637873b67de8c20fa48e4a9fe4f6759b3d8b6ace8dedbf10b947849a12be4013d9a1c0cf02ea79e073929b5934b113da070417bc9e7769c3f3ffdceb521cab459d48d06a1b44a2b06ed3c33416855600d9283a87aff012ce91ee452fb89f559fe38142e6f3f77bb0c634c393a84e10436fed8f880f2eb009ba7d5075ab0cff9c9f510568ba695ac52339a0113d26c57843b66615fb97b3768323b3e4eae3766258ffb2f33d3f1e9ffb25111a1a82f48672a631ebe820a8721dab6378832588a143d481450cb8b51224f513b275a34013ad0c8e06ae9e95ee7e4425ac0b4eee", 0xea}, {&(0x7f0000000dc0)="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", 0x1000}, {&(0x7f0000001dc0)="fe625ce4d7c7572e57002bb2390ca7f2877fa8118f714d0f7442623f979183c71376fc950e34cd8879f765f2cfb698133f27430fa5e3683fe7b4f45ba0af9b7028366796bc1fa8826d500eff7f51dd874f489e2c4dcbe907fe7a8bfcccae9d3c2fb7bc60a94fdf", 0x67}], 0x3, &(0x7f0000001e80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xc32}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @remote, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8001}}], 0xc0}, 0x4000800)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002000)={r8, 0x58, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r13=>0x0}}, 0x10)
r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002040)={r0, 0x3, 0x18}, 0xc)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002080)={r12, <r15=>0xffffffffffffffff}, 0x4)
r16 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002280)=@generic={&(0x7f0000002240)='./file0\x00', 0x0, 0x10}, 0x18)
r17 = bpf$MAP_CREATE(0x0, &(0x7f00000022c0)=@bloom_filter={0x1e, 0xfffffff4, 0xfd, 0x4, 0x400, r8, 0x6, '\x00', r13, r8, 0x3, 0x0, 0x2, 0x6}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002480)=@bpf_lsm={0x1d, 0x10, &(0x7f00000020c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xce90, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, r15, 0x0, 0x0, 0x0, 0x450}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @call={0x85, 0x0, 0x0, 0xc0}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x100}]}, &(0x7f0000002140)='GPL\x00', 0xfffffff8, 0x14, &(0x7f0000002180)=""/20, 0x41100, 0x4, '\x00', 0x0, 0x1b, r8, 0x8, &(0x7f00000021c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000002200)={0x5, 0x5, 0x6, 0x1ff}, 0x10, 0xffffffffffffffff, 0x0, 0x5, &(0x7f00000023c0)=[r16, 0x1, r14, r17, r14, r7, 0xffffffffffffffff, r3, r14], &(0x7f0000002400)=[{0x4, 0x1, 0x9, 0x6}, {0x0, 0x2, 0x3, 0x6}, {0x3, 0x4, 0x5, 0x7}, {0x2, 0x1, 0x0, 0x8}, {0x1, 0x3, 0x3, 0x2}], 0x10, 0x80000001}, 0x94)

16.427225829s ago: executing program 1 (id=492):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x1e, 0x400, 0x9, 0x40200, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
socket$kcm(0xa, 0x3, 0x73)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r4, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41)
setsockopt$sock_attach_bpf(r4, 0x84, 0x1e, &(0x7f0000000000), 0x4)
close(0x3)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x1c, &(0x7f0000000140)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0xfffffffa}], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x2a}, 0x94)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0)

16.426000616s ago: executing program 2 (id=493):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x3}]}, {0x0, [0x30, 0x0, 0x2e]}}, 0x0, 0x29}, 0x28)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000002980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080))
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x1, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x10001, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@ifindex, r3, 0x3}, 0x12)

16.180336471s ago: executing program 2 (id=495):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000010008104687da3aa7143a0b8c81d080b25000300e8fe55a118001500060014000040a8002b000e00014006046109d67f6f94007134cf6ee0a000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c4a918d1bcf0f938baa5d060a517898516277ce06bbace6f177ccbec4c2ee5a7cef4260027836b0d17a54ef5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f785025ccc806dcabced7ad654fac9609f4fb00"/207, 0xcf}], 0x1}, 0x4004)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
r3 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x2b, &(0x7f0000002640), 0x42)
r4 = socket$kcm(0x15, 0x5, 0x0)
setsockopt$sock_attach_bpf(r4, 0x114, 0xa, 0x0, 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000040)='%ps    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r6}, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00'}, 0x80)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r8, 0x0, 0x6}, 0x18)
r10 = gettid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb5}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r10, r9, 0x0, 0xffffffffffffff65, &(0x7f00000001c0)='\x00'}, 0x11)
r11 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r11, 0x29, 0x4, 0x0, 0x3b)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r7, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB="85000000c100000095000000000000001846ff000c0000080000000001800000"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffa3)

16.179782407s ago: executing program 1 (id=496):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.kill\x00', 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0), 0x0, 0x6f, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x219, 0x8, 0xffffffffffffff9d, &(0x7f0000000380)}}, 0x10) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0), 0x0, 0x6f, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x219, 0x8, 0xffffffffffffff9d, &(0x7f0000000380)}}, 0x10)
r2 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x84, 0x22, &(0x7f0000000000)=r4, 0x10)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={0x1, <r5=>0xffffffffffffffff}, 0x4)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x87f, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x4}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xe, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4dc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x4, 0x0, 0x5, 0x9, 0x4, 0xfffffffffffffff8, 0xfffffffffffffffc}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x0, 0xbd, &(0x7f0000000140)=""/189, 0x41100, 0x18, '\x00', r1, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x1, 0x3, 0x4, 0x7}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000700)=[r5, r6], &(0x7f0000000740)=[{0x0, 0x1, 0x0, 0xa}], 0x10, 0x9}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x7a}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x7a}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)

16.108720874s ago: executing program 0 (id=497):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000646c6c2500000000002020057b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a35000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8c, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000000010000081100000900000001"], 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2002, 0x3, @perf_config_ext={0x7, 0x5}, 0x0, 0x2, 0x3, 0x1, 0x4, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xa, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xb, 0x0, 0x0, 0x5, 0x400000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x2, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1a00000004000000000000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000040000000000000000000000000000000000000093550682b010e6623c9d5869536562564c28d1fd498a0330c4cc03d2a20802d99d4feeb97f66828674424cf0c27dfa0401fafe306e4a0ba455b2bfbaf36b31f20770d14f9a1b955c237754318361d9e11c4b1067620a2984741b87af1a12016232e01bfac16105b2c7d00b3fc6e32980b16b"], 0x48)
close(0x3)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000040)={'wlan1\x00', @random="4f33e363a4b1"})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x8}, 0x18542, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r2)
socket$kcm(0x2, 0x3, 0x2)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x4, &(0x7f0000000280)=ANY=[@ANYRESOCT=0x0], &(0x7f0000003ff6)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32}, 0x94)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)

15.954803827s ago: executing program 0 (id=498):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x9f, 0x4}, 0x50) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1, <r3=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) (async)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x50) (async)
r5 = socket$kcm(0x2, 0x1, 0x84) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff})
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x84, 0x71, &(0x7f0000000000)=r7, 0x8) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
close(r9)
recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x0)
r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000200)=ANY=[@ANYRES8=r9, @ANYRES8=r11], 0x12) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x37, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xc366}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@generic={0x9, 0x8, 0xd, 0xb7}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xdae}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_val={0x18, 0x8551e6ca79aa3422, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x4}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000740)='syzkaller\x00', 0x8000000, 0x90, &(0x7f0000000780)=""/144, 0x41100, 0x6, '\x00', 0x0, 0x0, r10, 0x8, &(0x7f0000000840)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x4, 0x9, 0x5}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000008c0)=[{0x2, 0x5, 0x7, 0x1}, {0x3, 0x3, 0x10, 0x3}, {0x4, 0x2, 0x10}], 0x10, 0xffffffff}, 0x94) (async, rerun: 32)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) (async, rerun: 32)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94) (rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='br_fdb_external_learn_add\x00', r12, 0x0, 0xffffffffffffffff}, 0x18) (async)
r13 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x73}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)

15.760324378s ago: executing program 0 (id=499):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x7d}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xffffebff, 0x3, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='qdisc_enqueue\x00', r1, 0x0, 0x4}, 0x18) (async)
r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
close(r2) (async)
bpf$BPF_GET_PROG_INFO(0x1c, 0x0, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000d40)=[{0x10, 0xfc34c428e8c2215a, 0x1}, {0x388, 0x110, 0x7fffffff, "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"}, {0x10, 0x116, 0x6}], 0x3a8}, 0x4c840) (async)
socket$kcm(0x1e, 0x2, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a00000000000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r5 = socket$kcm(0xa, 0x5, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) (async)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) (async)
write$cgroup_int(r5, &(0x7f0000000180)=0x6, 0x12) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080))

15.75978886s ago: executing program 0 (id=500):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0x0], ""/16, <r0=>0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], <r1=>0x0, 0xd6, &(0x7f00000004c0)=[{}], 0x8, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x71, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x10}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711027000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0xe, &(0x7f0000001880)=ANY=[@ANYRES8=r1], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x5, 0xc}, 0x10, 0x0, r2}, 0x94)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
r4 = gettid()
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000780), 0x8)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000800)={r4, r5, 0x0, 0x3, &(0x7f00000007c0)='.@\x00'}, 0x30)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f109e", 0x2a}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12b6", 0x98}], 0x2}, 0x4000000)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x20001, 0x0)
ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0)
sendmsg$inet(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="099cb29dfa0ccef5b91e26d5f46e774b14a0890c9c3ebbd3f78d3c4ff23509b52f25b35f4fc8f637cbce045d674494902ec40116238323b50f50f4401cc3ae0224d2d26f481ddd985222a9238fdcc804d4933497bd45d3c255221e09dc3e111450f52336c0e992c4f3da7ea24f7ed188fa8919e8223a6ed2cc89a10333c69fbb2444be3c938465184ae36b34f37daf9832f9b1b4f12ea0514c8afecef77c86b92c8ea4db673fc38df800474167f148c17528c027babde1de201461873d324a62d14c5b7c41257da08de4f60634c073358681fbdc27315c6bedd9b83e0051ac", 0xdf}, {&(0x7f0000000180)="7664d9e08d4af9bbfa769812a47ff04e72c5b0eca51350334d82036fa76f77ff4e952946c0b55c", 0x27}, {&(0x7f0000000200)="8873d80ae886baf62fde7b72e645c1f9a5ad8c7c2e5870c65cfd615975a7f05e191d1d6f52425999103a7b5111d0361d8b56fe37da5ad72177ad99534f74d54bab22802b23a8d25103393ed0dce6f50e80cd3ea145baee199f1aa67702326e9e04afb738f5448b976d4cc9e2d04cc6dca9a9b192cf5893579db1dd292c0bdb315d644e82f9230ae5910ff388e5dc70f0350471e125b10a08c412351d07f7d4570579454374e1903b7e481b118178e62b260bff160aa75f0574f5eb096c1ff1a6807cd3d0e2ec64c9f7a83528c1c9c942b9c08862114a71805963a8e4537f4b22bdbdd1", 0xe3}, {&(0x7f0000000300)="f4bff49bc6b7c721d5210ad12850cb3b94a9d3d302ab55ab5130c8684ce581a70df56f31326fdbeb34aca77e11f975fc3c3977", 0x33}], 0x4}, 0x20008000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)

15.700406421s ago: executing program 0 (id=501):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async)
socket$kcm(0x10, 0x400000002, 0x0) (async)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r3)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, <r6=>0x0}, 0x0)
r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r6, 0x4)
bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r7, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000140)=@framed={{}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x800001}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94)

14.070843945s ago: executing program 0 (id=502):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x1e, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000500000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70800000c0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000300000085000000820000001850000010000000000000000000000018290000", @ANYRES32, @ANYRESDEC], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x6, 0xd0d, 0xd}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000001c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000200)=[{0x3, 0x3, 0xd, 0x6}, {0x4, 0x1, 0x0, 0xa}, {0x5, 0x3, 0xc, 0xc}, {0x1, 0x5, 0xe, 0x8}, {0x4, 0x3, 0xe, 0x8}, {0x4, 0x3, 0xb, 0x6}], 0x10, 0x7}, 0x94) (async)
perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1b23a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0xa2, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, @perf_config_ext={0xffffffffffffffff, 0x10000008004}, 0x0, 0x1, 0xfffffbff, 0x3, 0x2, 0x7, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa4706, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x320, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
socket$kcm(0x10, 0x2, 0x0) (rerun: 32)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1c, 0x18, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x3}, 0x94) (async)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x13}, 0x20) (async)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = socket$kcm(0x10, 0x2, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
socket$kcm(0x2, 0x3, 0x2)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xc) (rerun: 32)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) (rerun: 64)
write$cgroup_subtree(r3, &(0x7f00000000c0)={[{0x2b, 'freezer'}]}, 0x9) (async)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000018008103e00312ba0d8105040a600000ff0f040b067c55a1bc000900b80006990300000015000500fe808178a8001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x1c, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@jmp={0x5, 0x1, 0x9, 0x5, 0x4, 0xfffffffffffffffe, 0x1}, @ldst={0x2, 0x1, 0x1, 0xb, 0x4, 0x40, 0xb}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x33c9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xb32}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @alu={0x4, 0x1, 0x8, 0x2, 0x8, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x7, 0x3, &(0x7f0000000180)=""/3, 0x40f00, 0x12, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000000280)=[0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000580)=[{0x4, 0x1, 0x2, 0x9}, {0x3, 0x0, 0xa, 0x5}, {0x1, 0x5, 0x1, 0xa}, {0x5, 0x5, 0xc, 0x9}, {0x2, 0x3, 0xc, 0x8}, {0x5, 0x3, 0x5, 0x7}, {0x5, 0x5, 0xc, 0x8}, {0x5, 0x4, 0x3}], 0x10, 0x7b}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x4, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000000000007112bb000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r4, 0x0, 0x1, 0x98, &(0x7f0000000400)='N', &(0x7f0000000700)=""/152, 0x7, 0x0, 0x1e, 0x99, &(0x7f0000000440)="59ea2998f7b14a52de9f659d8dd86d7600814925b127d507ba10832ce989", &(0x7f00000007c0)="3c1c2150b5ce87de564dd71fc856cdfe328dc50b7755cf4c3d614446003e02ab3486314319d89f6625c4ebe2a865e931de71fc028be64deca6590b2b49cdea8f2434a4f309b558452be6af6009d560743e1231e61c21ba140cfbce34920a2e27e8634b35b4ba5723b1751a4ad5bd31071f640d5b157f4ef78c901e17854958cc5081583588f04af31df17042343891182dc675f05dbc9e8c9f", 0x6, 0x0, 0x1}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

14.065778216s ago: executing program 1 (id=503):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000300000000000000000000000000000000000000000000000105"], 0x0, 0x42}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x31, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.057761792s ago: executing program 32 (id=495):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000010008104687da3aa7143a0b8c81d080b25000300e8fe55a118001500060014000040a8002b000e00014006046109d67f6f94007134cf6ee0a000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c4a918d1bcf0f938baa5d060a517898516277ce06bbace6f177ccbec4c2ee5a7cef4260027836b0d17a54ef5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f785025ccc806dcabced7ad654fac9609f4fb00"/207, 0xcf}], 0x1}, 0x4004)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
r3 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x2b, &(0x7f0000002640), 0x42)
r4 = socket$kcm(0x15, 0x5, 0x0)
setsockopt$sock_attach_bpf(r4, 0x114, 0xa, 0x0, 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000040)='%ps    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r6}, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00'}, 0x80)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r8, 0x0, 0x6}, 0x18)
r10 = gettid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb5}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r10, r9, 0x0, 0xffffffffffffff65, &(0x7f00000001c0)='\x00'}, 0x11)
r11 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r11, 0x29, 0x4, 0x0, 0x3b)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r7, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB="85000000c100000095000000000000001846ff000c0000080000000001800000"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffa3)

31.115913ms ago: executing program 33 (id=502):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x1e, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000500000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70800000c0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000300000085000000820000001850000010000000000000000000000018290000", @ANYRES32, @ANYRESDEC], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x6, 0xd0d, 0xd}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000001c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000200)=[{0x3, 0x3, 0xd, 0x6}, {0x4, 0x1, 0x0, 0xa}, {0x5, 0x3, 0xc, 0xc}, {0x1, 0x5, 0xe, 0x8}, {0x4, 0x3, 0xe, 0x8}, {0x4, 0x3, 0xb, 0x6}], 0x10, 0x7}, 0x94) (async)
perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1b23a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0xa2, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, @perf_config_ext={0xffffffffffffffff, 0x10000008004}, 0x0, 0x1, 0xfffffbff, 0x3, 0x2, 0x7, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa4706, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x320, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
socket$kcm(0x10, 0x2, 0x0) (rerun: 32)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1c, 0x18, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x3}, 0x94) (async)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x13}, 0x20) (async)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = socket$kcm(0x10, 0x2, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
socket$kcm(0x2, 0x3, 0x2)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xc) (rerun: 32)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) (rerun: 64)
write$cgroup_subtree(r3, &(0x7f00000000c0)={[{0x2b, 'freezer'}]}, 0x9) (async)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000018008103e00312ba0d8105040a600000ff0f040b067c55a1bc000900b80006990300000015000500fe808178a8001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x1c, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@jmp={0x5, 0x1, 0x9, 0x5, 0x4, 0xfffffffffffffffe, 0x1}, @ldst={0x2, 0x1, 0x1, 0xb, 0x4, 0x40, 0xb}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x33c9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xb32}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @alu={0x4, 0x1, 0x8, 0x2, 0x8, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x7, 0x3, &(0x7f0000000180)=""/3, 0x40f00, 0x12, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000000280)=[0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000580)=[{0x4, 0x1, 0x2, 0x9}, {0x3, 0x0, 0xa, 0x5}, {0x1, 0x5, 0x1, 0xa}, {0x5, 0x5, 0xc, 0x9}, {0x2, 0x3, 0xc, 0x8}, {0x5, 0x3, 0x5, 0x7}, {0x5, 0x5, 0xc, 0x8}, {0x5, 0x4, 0x3}], 0x10, 0x7b}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x4, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000000000007112bb000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r4, 0x0, 0x1, 0x98, &(0x7f0000000400)='N', &(0x7f0000000700)=""/152, 0x7, 0x0, 0x1e, 0x99, &(0x7f0000000440)="59ea2998f7b14a52de9f659d8dd86d7600814925b127d507ba10832ce989", &(0x7f00000007c0)="3c1c2150b5ce87de564dd71fc856cdfe328dc50b7755cf4c3d614446003e02ab3486314319d89f6625c4ebe2a865e931de71fc028be64deca6590b2b49cdea8f2434a4f309b558452be6af6009d560743e1231e61c21ba140cfbce34920a2e27e8634b35b4ba5723b1751a4ad5bd31071f640d5b157f4ef78c901e17854958cc5081583588f04af31df17042343891182dc675f05dbc9e8c9f", 0x6, 0x0, 0x1}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

0s ago: executing program 34 (id=503):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000300000000000000000000000000000000000000000000000105"], 0x0, 0x42}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x31, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:35446' (ED25519) to the list of known hosts.
syzkaller login: [   40.692143][ T5754] cgroup: Unknown subsys name 'net'
[   40.818796][ T5754] cgroup: Unknown subsys name 'cpuset'
[   40.822267][ T5754] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.232596][ T5754] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.414834][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.417802][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.420627][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.423234][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.425709][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.438768][ T5219] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.446239][ T5219] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.448795][ T5219] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.451327][ T5219] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.453814][ T5219] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.518952][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.527916][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.535388][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.538502][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.541218][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.601765][ T5824] chnl_net:caif_netlink_parms(): no params data found
[   45.654601][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   45.711105][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.713433][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.715784][ T5824] bridge_slave_0: entered allmulticast mode
[   45.719260][ T5824] bridge_slave_0: entered promiscuous mode
[   45.745483][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.748303][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.750617][ T5824] bridge_slave_1: entered allmulticast mode
[   45.753216][ T5824] bridge_slave_1: entered promiscuous mode
[   45.763170][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.765452][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.768199][ T5828] bridge_slave_0: entered allmulticast mode
[   45.770826][ T5828] bridge_slave_0: entered promiscuous mode
[   45.773855][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.776345][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.778788][ T5828] bridge_slave_1: entered allmulticast mode
[   45.781391][ T5828] bridge_slave_1: entered promiscuous mode
[   45.827306][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.840288][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.852179][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.868606][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.894925][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   45.903080][ T5824] team0: Port device team_slave_0 added
[   45.908203][ T5828] team0: Port device team_slave_0 added
[   45.919204][ T5824] team0: Port device team_slave_1 added
[   45.923492][ T5828] team0: Port device team_slave_1 added
[   45.984678][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.987269][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.997151][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.001378][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.003551][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.011781][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.018976][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.021185][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.029286][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.033187][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.035455][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.044311][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.072859][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.075167][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.077797][ T5833] bridge_slave_0: entered allmulticast mode
[   46.080414][ T5833] bridge_slave_0: entered promiscuous mode
[   46.104495][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.107276][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.109613][ T5833] bridge_slave_1: entered allmulticast mode
[   46.112441][ T5833] bridge_slave_1: entered promiscuous mode
[   46.118251][ T5828] hsr_slave_0: entered promiscuous mode
[   46.120488][ T5828] hsr_slave_1: entered promiscuous mode
[   46.146584][ T5824] hsr_slave_0: entered promiscuous mode
[   46.148935][ T5824] hsr_slave_1: entered promiscuous mode
[   46.151077][ T5824] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.153565][ T5824] Cannot create hsr debugfs directory
[   46.174977][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.189556][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.232196][ T5833] team0: Port device team_slave_0 added
[   46.248449][ T5833] team0: Port device team_slave_1 added
[   46.278248][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.280485][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.288679][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.305443][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.308268][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.317139][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.368470][ T5833] hsr_slave_0: entered promiscuous mode
[   46.370711][ T5833] hsr_slave_1: entered promiscuous mode
[   46.372849][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.375224][ T5833] Cannot create hsr debugfs directory
[   46.411858][ T5824] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.421188][ T5824] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.434124][ T5824] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.443715][ T5824] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.487290][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.502092][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.507809][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.513712][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.516290][ T5824] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.518926][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.521217][ T5824] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.525694][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.565137][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.570045][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.572348][ T5828] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.574759][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.577145][ T5828] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.584024][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.588608][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.594480][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.597876][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.601126][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.603783][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.619722][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.675700][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.685699][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.700998][ T5824] 8021q: adding VLAN 0 to HW filter on device team0
[   46.711400][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.713822][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.720524][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   46.731154][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.733505][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.737520][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.739807][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.747010][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.749327][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.753326][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.783509][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   46.800092][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.802363][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.817141][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.819509][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.824802][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   46.859714][ T5833] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   46.863053][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   46.938638][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.945405][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.978209][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.004970][ T5824] veth0_vlan: entered promiscuous mode
[   47.008059][ T5833] veth0_vlan: entered promiscuous mode
[   47.023253][ T5833] veth1_vlan: entered promiscuous mode
[   47.026732][ T5824] veth1_vlan: entered promiscuous mode
[   47.039667][ T5828] veth0_vlan: entered promiscuous mode
[   47.050609][ T5828] veth1_vlan: entered promiscuous mode
[   47.060985][ T5833] veth0_macvtap: entered promiscuous mode
[   47.068296][ T5824] veth0_macvtap: entered promiscuous mode
[   47.073381][ T5833] veth1_macvtap: entered promiscuous mode
[   47.078011][ T5824] veth1_macvtap: entered promiscuous mode
[   47.094492][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.097918][ T5828] veth0_macvtap: entered promiscuous mode
[   47.104955][ T5828] veth1_macvtap: entered promiscuous mode
[   47.111216][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.114421][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.122560][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.128365][ T5824] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.131201][ T5824] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.133932][ T5824] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.137101][ T5824] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.142690][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.145492][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.149961][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.152762][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.164715][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.173633][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.189221][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.192133][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.194977][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.199343][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.255488][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.260470][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.278076][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.280687][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.295439][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.300944][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.309411][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.311944][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.327864][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.338079][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.341706][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.363823][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.375457][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.395297][ T5889] netlink: 'syz.1.2': attribute type 10 has an invalid length.
[   47.476608][ T5219] Bluetooth: hci0: command tx timeout
[   47.478613][   T54] Bluetooth: hci1: command tx timeout
[   47.627734][   T54] Bluetooth: hci2: command tx timeout
[   48.094754][ T5921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11'.
[   48.735045][ T5925] netlink: 'syz.0.13': attribute type 2 has an invalid length.
[   48.738406][ T5925] netlink: 'syz.0.13': attribute type 8 has an invalid length.
[   48.740920][ T5925] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13'.
[   49.085890][ T5947] netlink: 'syz.1.22': attribute type 11 has an invalid length.
[   49.239043][ T5949] delete_channel: no stack
[   49.241966][ T5949] delete_channel: no stack
[   49.252519][ T5949] warning: `syz.0.23' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   49.488448][ T5968] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   49.491268][ T5968] batman_adv: batadv0: Removing interface: batadv_slave_0
[   49.494760][ T5968] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   49.497832][ T5968] batman_adv: batadv0: Removing interface: batadv_slave_1
[   49.561449][   T54] Bluetooth: hci1: command tx timeout
[   49.563708][   T54] Bluetooth: hci0: command tx timeout
[   49.706119][ T5219] Bluetooth: hci2: command tx timeout
[   50.275959][    C1] hrtimer: interrupt took 34366 ns
[   51.627280][ T5219] Bluetooth: hci0: command tx timeout
[   51.629072][   T54] Bluetooth: hci1: command tx timeout
[   51.786081][   T54] Bluetooth: hci2: command tx timeout
[   52.041875][ T6034] netlink: 'syz.1.51': attribute type 22 has an invalid length.
[   52.047695][ T6034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.51'.
[   52.098676][ T6038] netlink: 132 bytes leftover after parsing attributes in process `syz.1.53'.
[   52.182256][ T6049] netlink: 152 bytes leftover after parsing attributes in process `syz.1.57'.
[   52.185144][ T6049] netlink: 6 bytes leftover after parsing attributes in process `syz.1.57'.
[   52.724587][   T24] cfg80211: failed to load regulatory.db
[   52.755359][ T6057] netlink: 'syz.0.59': attribute type 2 has an invalid length.
[   52.759501][ T6057] netlink: 164 bytes leftover after parsing attributes in process `syz.0.59'.
[   52.766312][ T6057] netlink: 'syz.0.59': attribute type 2 has an invalid length.
[   52.768843][ T6057] netlink: 164 bytes leftover after parsing attributes in process `syz.0.59'.
[   53.044707][    C0] Illegal XDP return value 16128 on prog  (id 50) dev bond_slave_0, expect packet loss!
[   53.706016][   T54] Bluetooth: hci0: command tx timeout
[   53.716071][   T54] Bluetooth: hci1: command tx timeout
[   53.866095][   T54] Bluetooth: hci2: command tx timeout
[   56.067519][ T6067] netlink: 132 bytes leftover after parsing attributes in process `syz.1.62'.
[   56.329480][ T6093] netlink: 132 bytes leftover after parsing attributes in process `syz.0.71'.
[   56.387381][ T6091] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.482103][ T6127] netlink: 'syz.1.83': attribute type 10 has an invalid length.
[   57.511414][ T6127] netlink: 40 bytes leftover after parsing attributes in process `syz.1.83'.
[   57.529818][ T6131] syzkaller0: entered promiscuous mode
[   57.531749][ T6131] syzkaller0: entered allmulticast mode
[   57.538016][ T6129] syzkaller0: entered promiscuous mode
[   57.539837][ T6129] syzkaller0: entered allmulticast mode
[   57.699063][ T6140] netlink: 'syz.0.88': attribute type 22 has an invalid length.
[   57.701638][ T6140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.88'.
[   57.860209][ T6146] tun0: tun_chr_ioctl cmd 1074025677
[   57.862273][ T6146] tun0: linktype set to 270
[   58.061944][ T6150] Zero length message leads to an empty skb
[   58.132202][ T6151] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.92'.
[   58.214457][ T6153] netlink: 'syz.2.93': attribute type 10 has an invalid length.
[   58.274816][ T6153] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   58.309645][ T6157] netlink: 60 bytes leftover after parsing attributes in process `syz.0.95'.
[   58.312762][ T6157] netlink: 60 bytes leftover after parsing attributes in process `syz.0.95'.
[   58.678181][ T6200] syzkaller0: entered promiscuous mode
[   58.680033][ T6200] syzkaller0: entered allmulticast mode
[   60.920937][ T6211] netlink: 830 bytes leftover after parsing attributes in process `syz.2.110'.
[   61.342071][ T6243] netlink: 60 bytes leftover after parsing attributes in process `syz.1.119'.
[   61.345350][ T6242] netlink: 60 bytes leftover after parsing attributes in process `syz.1.119'.
[   61.349573][ T6241] netlink: 60 bytes leftover after parsing attributes in process `syz.1.119'.
[   61.353078][ T6243] netlink: 60 bytes leftover after parsing attributes in process `syz.1.119'.
[   61.448252][ T6245] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.120'.
[   61.662515][ T6265] netlink: 132 bytes leftover after parsing attributes in process `syz.0.127'.
[   61.994650][ T6292] netlink: 132 bytes leftover after parsing attributes in process `syz.1.136'.
[   62.674528][ T6299] netlink: 26 bytes leftover after parsing attributes in process `syz.2.139'.
[   62.706341][ T6302] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.140'.
[   62.829082][ T6312] netlink: 'syz.0.143': attribute type 21 has an invalid length.
[   62.836210][ T6312] IPv6: NLM_F_CREATE should be specified when creating new route
[   62.838823][ T6312] IPv6: Can't replace route, no match found
[   62.982587][   T54] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[   63.053933][   T54] Bluetooth: hci2: ISO packet for unknown connection handle 36
[   63.257858][ T6332] netlink: 'syz.1.150': attribute type 25 has an invalid length.
[   63.411881][ T6339] netlink: 132 bytes leftover after parsing attributes in process `syz.1.152'.
[   63.519590][ T6346] mac80211_hwsim hwsim4 O3c: renamed from wlan1 (while UP)
[   63.756535][ T6361] netlink: 'syz.1.157': attribute type 1 has an invalid length.
[   63.905026][ T6369] IPv6: NLM_F_REPLACE set, but no existing node found!
[   64.076287][ T6368] syzkaller0: entered promiscuous mode
[   64.081886][ T6368] syzkaller0: entered allmulticast mode
[   65.484080][ T6412] tap0: tun_chr_ioctl cmd 1074025677
[   65.486991][ T6412] tap0: linktype set to 769
[   65.883827][ T6419] netlink: 'syz.0.174': attribute type 2 has an invalid length.
[   65.900683][ T6419] netlink: 'syz.0.174': attribute type 29 has an invalid length.
[   65.903803][ T6419] netlink: 'syz.0.174': attribute type 29 has an invalid length.
[   65.908989][ T6419] netlink: 'syz.0.174': attribute type 29 has an invalid length.
[   65.916918][ T6419] netlink: 'syz.0.174': attribute type 29 has an invalid length.
[   66.011777][ T6427] netlink: 'syz.2.176': attribute type 2 has an invalid length.
[   66.102496][ T6431] C: renamed from team_slave_0 (while UP)
[   66.205389][ T6446] netlink: 'syz.1.183': attribute type 2 has an invalid length.
[   66.211299][ T6447] netlink: 'syz.1.183': attribute type 2 has an invalid length.
[   66.470752][ T6431] __nla_validate_parse: 7 callbacks suppressed
[   66.470860][ T6431] netlink: 152 bytes leftover after parsing attributes in process `syz.0.179'.
[   66.610785][ T6462] netlink: 132 bytes leftover after parsing attributes in process `syz.2.188'.
[   66.679938][ T6468] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.689742][ T6468] batman_adv: batadv0: Removing interface: batadv_slave_0
[   66.697220][ T6468] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[   66.706074][ T6468] netlink: 55 bytes leftover after parsing attributes in process `syz.2.190'.
[   66.728355][ T6459] sctp: [Deprecated]: syz.1.186 (pid 6459) Use of struct sctp_assoc_value in delayed_ack socket option.
[   66.728355][ T6459] Use struct sctp_sack_info instead
[   67.589780][ T6529] netlink: 40 bytes leftover after parsing attributes in process `syz.1.211'.
[   67.592958][ T6529] netlink: 1 bytes leftover after parsing attributes in process `syz.1.211'.
[   67.638788][ T6538] syz.2.214: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   67.654197][ T6538] CPU: 1 UID: 0 PID: 6538 Comm: syz.2.214 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[   67.654211][ T6538] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   67.654216][ T6538] Call Trace:
[   67.654220][ T6538]  <TASK>
[   67.654224][ T6538]  dump_stack_lvl+0x189/0x250
[   67.654239][ T6538]  ? __pfx_dump_stack_lvl+0x10/0x10
[   67.654249][ T6538]  ? __pfx__printk+0x10/0x10
[   67.654260][ T6538]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   67.654272][ T6538]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   67.654283][ T6538]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   67.654294][ T6538]  warn_alloc+0x214/0x310
[   67.654325][ T6538]  ? stack_depot_save_flags+0x40/0x900
[   67.654339][ T6538]  ? __pfx_warn_alloc+0x10/0x10
[   67.654349][ T6538]  ? kasan_save_track+0x4f/0x80
[   67.654357][ T6538]  ? xskq_create+0x56/0x170
[   67.654366][ T6538]  ? xsk_init_queue+0xb0/0x110
[   67.654379][ T6538]  ? xsk_setsockopt+0x4de/0x710
[   67.654387][ T6538]  ? do_sock_setsockopt+0x17c/0x1b0
[   67.654394][ T6538]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   67.654402][ T6538]  ? do_syscall_64+0xfa/0x3b0
[   67.654412][ T6538]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.654424][ T6538]  __vmalloc_node_range_noprof+0x125/0x12f0
[   67.654446][ T6538]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   67.654458][ T6538]  ? __kasan_kmalloc+0x93/0xb0
[   67.654468][ T6538]  vmalloc_user_noprof+0xad/0xf0
[   67.654477][ T6538]  ? xskq_create+0xbf/0x170
[   67.654487][ T6538]  xskq_create+0xbf/0x170
[   67.654497][ T6538]  xsk_init_queue+0xb0/0x110
[   67.654507][ T6538]  xsk_setsockopt+0x4de/0x710
[   67.654517][ T6538]  ? __pfx_xsk_setsockopt+0x10/0x10
[   67.654529][ T6538]  ? __fget_files+0x2a/0x420
[   67.654559][ T6538]  ? aa_sock_opt_perm+0x74/0x110
[   67.654574][ T6538]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   67.654585][ T6538]  ? __pfx_xsk_setsockopt+0x10/0x10
[   67.654595][ T6538]  do_sock_setsockopt+0x17c/0x1b0
[   67.654606][ T6538]  __x64_sys_setsockopt+0x13f/0x1b0
[   67.654616][ T6538]  do_syscall_64+0xfa/0x3b0
[   67.654627][ T6538]  ? lockdep_hardirqs_on+0x9c/0x150
[   67.654637][ T6538]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.654644][ T6538]  ? exc_page_fault+0x9f/0xf0
[   67.654655][ T6538]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.654663][ T6538] RIP: 0033:0x7effc178e9a9
[   67.654671][ T6538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   67.654677][ T6538] RSP: 002b:00007effc2548038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   67.654687][ T6538] RAX: ffffffffffffffda RBX: 00007effc19b5fa0 RCX: 00007effc178e9a9
[   67.654692][ T6538] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008
[   67.654697][ T6538] RBP: 00007effc1810d69 R08: 0000000000000004 R09: 0000000000000000
[   67.654701][ T6538] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[   67.654706][ T6538] R13: 0000000000000000 R14: 00007effc19b5fa0 R15: 00007ffebc90fd18
[   67.654717][ T6538]  </TASK>
[   67.654811][ T6538] Mem-Info:
[   67.760227][ T6538] active_anon:5244 inactive_anon:0 isolated_anon:0
[   67.760227][ T6538]  active_file:990 inactive_file:38210 isolated_file:0
[   67.760227][ T6538]  unevictable:1768 dirty:1422 writeback:0
[   67.760227][ T6538]  slab_reclaimable:9086 slab_unreclaimable:52556
[   67.760227][ T6538]  mapped:18082 shmem:2437 pagetables:895
[   67.760227][ T6538]  sec_pagetables:0 bounce:0
[   67.760227][ T6538]  kernel_misc_reclaimable:0
[   67.760227][ T6538]  free:304638 free_pcp:19599 free_cma:0
[   67.774786][ T6538] Node 0 active_anon:13640kB inactive_anon:0kB active_file:3312kB inactive_file:131444kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:33180kB dirty:5528kB writeback:0kB shmem:4992kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7424kB pagetables:1800kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   67.788173][ T6538] Node 1 active_anon:7336kB inactive_anon:0kB active_file:648kB inactive_file:21396kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:39148kB dirty:160kB writeback:0kB shmem:4756kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3844kB pagetables:1780kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   67.799999][ T6538] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   67.810098][ T6538] lowmem_reserve[]: 0 812 812 812 812
[   67.812364][ T6538] Node 0 DMA32 free:285528kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13640kB inactive_anon:0kB active_file:3312kB inactive_file:131444kB unevictable:3536kB writepending:5528kB present:1556484kB managed:831908kB mlocked:0kB bounce:0kB free_pcp:41888kB local_pcp:21168kB free_cma:0kB
[   67.824120][ T6538] lowmem_reserve[]: 0 0 0 0 0
[   67.825815][ T6538] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   67.835865][ T6538] lowmem_reserve[]: 0 0 854 854 854
[   67.838604][ T6538] Node 1 Normal free:459048kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7472kB inactive_anon:0kB active_file:648kB inactive_file:21396kB unevictable:3536kB writepending:160kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:36476kB local_pcp:15548kB free_cma:0kB
[   67.859739][ T6538] lowmem_reserve[]: 0 0 0 0 0
[   67.861336][ T6538] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   67.865408][ T6538] Node 0 DMA32: 306*4kB (ME) 114*8kB (ME) 64*16kB (M) 61*32kB (ME) 180*64kB (UME) 55*128kB (UM) 18*256kB (UME) 8*512kB (UM) 1*1024kB (M) 3*2048kB (UME) 60*4096kB (UM) = 285304kB
[   67.884846][ T6538] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   67.890490][ T6538] Node 1 Normal: 156*4kB (ME) 78*8kB (UME) 333*16kB (UME) 195*32kB (UM) 122*64kB (UM) 39*128kB (UM) 21*256kB (UM) 6*512kB (UM) 5*1024kB (UM) 5*2048kB (UM) 100*4096kB (M) = 459024kB
[   67.897145][ T6538] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   67.900674][ T6538] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   67.903758][ T6538] 41637 total pagecache pages
[   67.905322][ T6538] 0 pages in swap cache
[   67.907601][ T6538] Free swap  = 124996kB
[   67.909119][ T6538] Total swap = 124996kB
[   67.911007][ T6538] 786301 pages RAM
[   67.912284][ T6538] 0 pages HighMem/MovableOnly
[   67.915099][ T6538] 241076 pages reserved
[   67.917001][ T6538] 0 pages cma reserved
[   68.701888][ T6589] netlink: 10 bytes leftover after parsing attributes in process `syz.0.231'.
[   68.825211][ T6592] validate_nla: 7 callbacks suppressed
[   68.825225][ T6592] netlink: 'syz.0.232': attribute type 4 has an invalid length.
[   68.830450][ T6592] netlink: 112 bytes leftover after parsing attributes in process `syz.0.232'.
[   69.014206][ T6599] netlink: 60 bytes leftover after parsing attributes in process `syz.0.235'.
[   69.021672][ T6598] netlink: 60 bytes leftover after parsing attributes in process `syz.0.235'.
[   69.025736][ T6598] netlink: 60 bytes leftover after parsing attributes in process `syz.0.235'.
[   69.082194][ T6603] netlink: 'syz.0.236': attribute type 5 has an invalid length.
[   69.084982][ T6603] netlink: 'syz.0.236': attribute type 7 has an invalid length.
[   69.604088][ T6623] netlink: 'syz.1.244': attribute type 10 has an invalid length.
[   69.645758][ T6625] netlink: 'syz.1.245': attribute type 23 has an invalid length.
[   70.392164][ T6656] netlink: 'syz.2.253': attribute type 10 has an invalid length.
[   70.397947][ T6656] team0: Cannot enslave team device to itself
[   70.481015][ T6664] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   70.483889][ T6664] openvswitch: netlink: Message has 2 unknown bytes.
[   70.608499][ T6670] syzkaller0: entered promiscuous mode
[   70.610344][ T6670] syzkaller0: entered allmulticast mode
[   70.649655][ T6670] netlink: 'syz.0.260': attribute type 21 has an invalid length.
[   70.652159][ T6670] netlink: 'syz.0.260': attribute type 15 has an invalid length.
[   70.655856][ T6670] IPv6: NLM_F_CREATE should be specified when creating new route
[   70.662192][ T6670] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   70.664652][ T6670] IPv6: NLM_F_CREATE should be set when creating new route
[   70.667106][ T6670] IPv6: NLM_F_CREATE should be set when creating new route
[   70.669493][ T6670] IPv6: NLM_F_CREATE should be set when creating new route
[   70.742318][ T6685] netlink: 'syz.1.265': attribute type 21 has an invalid length.
[   70.832012][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   70.834144][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.146653][   T54] Bluetooth: hci1: command 0x206a tx timeout
[   71.148769][ T5219] Bluetooth: hci1: Opcode 0x206a failed: -110
[   71.444845][ T6726] syz.2.277 uses obsolete (PF_INET,SOCK_PACKET)
[   71.562055][ T6729] mac80211_hwsim hwsim7 O3c: renamed from wlan1 (while UP)
[   71.819804][ T6733] __nla_validate_parse: 4 callbacks suppressed
[   71.819815][ T6733] netlink: 152 bytes leftover after parsing attributes in process `syz.0.279'.
[   72.477468][ T6766] netlink: 'syz.0.288': attribute type 21 has an invalid length.
[   73.063634][ T6810] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31
[   74.405445][ T6843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.313'.
[   74.525308][ T6853] bridge_slave_1: left allmulticast mode
[   74.536026][ T6853] bridge_slave_1: left promiscuous mode
[   74.544875][ T6853] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.568095][ T6853] bridge_slave_0: left allmulticast mode
[   74.582743][ T6853] bridge_slave_0: left promiscuous mode
[   74.584686][ T6853] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.684217][ T6859] tap0: tun_chr_ioctl cmd 1074025677
[   74.688507][ T6859] tap0: linktype set to 769
[   75.329593][ T6879] netlink: 14334 bytes leftover after parsing attributes in process `syz.0.325'.
[   75.470060][ T6888] netlink: 132 bytes leftover after parsing attributes in process `syz.2.329'.
[   75.538651][ T6892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.329'.
[   76.116694][ T6894] sock: sock_timestamping_bind_phc: sock not bind to device
[   76.806878][ T6914] netlink: 'syz.1.338': attribute type 39 has an invalid length.
[   76.809439][ T6914] netlink: 'syz.1.338': attribute type 4 has an invalid length.
[   76.811877][ T6914] netlink: 152 bytes leftover after parsing attributes in process `syz.1.338'.
[   76.824657][ T6914] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[   76.865840][ T6914] syz.1.338 (6914) used greatest stack depth: 19640 bytes left
[   77.144261][ T6926] netlink: 40 bytes leftover after parsing attributes in process `syz.1.342'.
[   77.160185][ T6928] netlink: 132 bytes leftover after parsing attributes in process `syz.0.344'.
[   77.277733][ T6930] netlink: 132 bytes leftover after parsing attributes in process `syz.0.345'.
[   77.418109][ T6934] @: renamed from bond_slave_0 (while UP)
[   77.421325][ T6936] netlink: 611 bytes leftover after parsing attributes in process `syz.2.348'.
[   77.529668][ T6951] netlink: 132 bytes leftover after parsing attributes in process `syz.2.351'.
[   77.531587][ T6952] netlink: 'syz.1.350': attribute type 21 has an invalid length.
[   77.565859][ T6955] netlink: 180 bytes leftover after parsing attributes in process `syz.2.352'.
[   77.598011][ T5219] Bluetooth: hci0: unexpected subevent 0x1a length: 150 > 6
[   77.673212][ T6966] netlink: 28 bytes leftover after parsing attributes in process `syz.0.354'.
[   77.678798][ T6959] netlink: 28 bytes leftover after parsing attributes in process `syz.0.354'.
[   77.683138][ T6959] netlink: 28 bytes leftover after parsing attributes in process `syz.0.354'.
[   78.510675][ T7000] netlink: 'syz.2.365': attribute type 10 has an invalid length.
[   78.516692][ T7000] netlink: 40 bytes leftover after parsing attributes in process `syz.2.365'.
[   79.124936][ T6994] netlink: 'syz.1.364': attribute type 29 has an invalid length.
[   79.135816][ T7000] batman_adv: batadv0: Adding interface: vlan1
[   79.140124][ T7000] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.165746][ T7000] batman_adv: batadv0: Interface activated: vlan1
[   79.383958][ T7021] netlink: 'syz.2.372': attribute type 3 has an invalid length.
[   79.393473][ T7023] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   79.397441][ T7023] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   79.420993][ T7021] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   79.590298][ T7033] netlink: 'syz.2.376': attribute type 2 has an invalid length.
[   79.592891][ T7033] netlink: 'syz.2.376': attribute type 8 has an invalid length.
[   80.229724][ T7058] netlink: 'syz.0.383': attribute type 29 has an invalid length.
[   80.683768][ T7074] openvswitch: netlink: Flow key attr not present in new flow.
[   80.794094][ T7081] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   80.805730][ T7081] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   80.914030][ T7090] sctp: [Deprecated]: syz.1.396 (pid 7090) Use of struct sctp_assoc_value in delayed_ack socket option.
[   80.914030][ T7090] Use struct sctp_sack_info instead
[   80.924188][ T7088] tc_dump_action: action bad kind
[   81.052822][ T7094] netlink: 'syz.1.396': attribute type 33 has an invalid length.
[   81.831459][ T5219] Bluetooth: hci1: unexpected event 0x16 length: 15 > 6
[   81.832184][ T5219] Bluetooth: hci1: unexpected event 0x16 length: 15 > 6
[   82.739443][ T7133] __nla_validate_parse: 11 callbacks suppressed
[   82.739457][ T7133] netlink: 132 bytes leftover after parsing attributes in process `syz.2.412'.
[   83.743123][ T5219] Bluetooth: hci0: ISO packet for unknown connection handle 15
[   83.970389][ T7163] validate_nla: 6 callbacks suppressed
[   83.970404][ T7163] netlink: 'syz.2.421': attribute type 21 has an invalid length.
[   84.260949][ T7189] netlink: 'syz.0.430': attribute type 8 has an invalid length.
[   84.263514][ T7189] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.430'.
[   84.285330][ T7187] netlink: 'syz.2.429': attribute type 11 has an invalid length.
[   84.343965][ T7195] netlink: 'syz.0.431': attribute type 29 has an invalid length.
[   84.357368][ T7195] netlink: 'syz.0.431': attribute type 29 has an invalid length.
[   84.446401][ T7198] netlink: 'syz.2.432': attribute type 13 has an invalid length.
[   84.449040][ T7198] netlink: 14581 bytes leftover after parsing attributes in process `syz.2.432'.
[   85.411618][ T7242] netlink: 'syz.2.445': attribute type 29 has an invalid length.
[   85.414625][ T7242] netlink: 'syz.2.445': attribute type 29 has an invalid length.
[   85.495476][ T7245] netlink: 'syz.2.445': attribute type 29 has an invalid length.
[   85.521214][ T7250] netlink: 'syz.0.448': attribute type 21 has an invalid length.
[   85.541606][ T7249] netlink: 'syz.1.447': attribute type 29 has an invalid length.
[   85.700797][ T7257] netlink: 60 bytes leftover after parsing attributes in process `syz.2.451'.
[   85.739317][ T7262] netlink: 132 bytes leftover after parsing attributes in process `syz.2.453'.
[   86.055098][ T7288] netlink: 132 bytes leftover after parsing attributes in process `syz.2.460'.
[   86.422993][ T7308] netlink: 132 bytes leftover after parsing attributes in process `syz.1.467'.
[   86.723680][ T7314] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   86.727648][ T7314] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   87.209472][ T7346] netlink: 10 bytes leftover after parsing attributes in process `syz.0.480'.
[   87.545396][ T7361] netlink: 14 bytes leftover after parsing attributes in process `syz.0.484'.
[   87.590660][ T7367] netlink: 132 bytes leftover after parsing attributes in process `syz.1.488'.
[   88.055114][ T7395] mac80211_hwsim hwsim5 O3c: renamed from wlan1 (while UP)
[  101.871637][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 13593663712 wd_nsec: 13593663919
[  103.203276][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  103.206956][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  103.209719][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  103.212802][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  103.215434][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  103.324056][ T7431] chnl_net:caif_netlink_parms(): no params data found
[  104.361120][ T5219] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  104.364256][ T5219] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  104.369931][ T5219] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  104.373027][ T5219] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  104.376436][ T5219] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  104.411683][   T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  104.414677][   T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  104.417660][   T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  104.420724][   T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  104.423614][   T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  105.226116][   T54] Bluetooth: hci3: command tx timeout
[  106.426132][   T54] Bluetooth: hci4: command tx timeout
[  106.506156][   T54] Bluetooth: hci5: command tx timeout
[  107.307337][   T54] Bluetooth: hci3: command tx timeout
[  108.506145][   T54] Bluetooth: hci4: command tx timeout
[  108.586108][   T54] Bluetooth: hci5: command tx timeout
[  109.386091][   T54] Bluetooth: hci3: command tx timeout
[  110.589312][   T54] Bluetooth: hci4: command tx timeout
[  110.666188][   T54] Bluetooth: hci5: command tx timeout
[  111.467942][   T54] Bluetooth: hci3: command tx timeout
[  112.666078][   T54] Bluetooth: hci4: command tx timeout
[  112.746140][   T54] Bluetooth: hci5: command tx timeout
[  132.270001][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.272055][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  163.246363][ T5219] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  163.250434][ T5219] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  163.253144][ T5219] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  163.256281][ T5219] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  163.260011][ T5219] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  164.261518][ T5219] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  164.264704][ T5219] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  164.272126][ T5219] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  164.275097][ T5219] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  164.280068][ T5219] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  165.208286][   T54] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  165.211955][   T54] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  165.215217][   T54] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  165.220503][   T54] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  165.223455][   T54] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  165.306086][   T54] Bluetooth: hci6: command tx timeout
[  166.346159][   T54] Bluetooth: hci7: command tx timeout
[  167.306147][   T54] Bluetooth: hci8: command tx timeout
[  167.386096][   T54] Bluetooth: hci6: command tx timeout
[  168.426090][ T7457] Bluetooth: hci7: command tx timeout
[  169.386131][ T7457] Bluetooth: hci8: command tx timeout
[  169.466104][ T7457] Bluetooth: hci6: command tx timeout
[  170.187404][ T7457] Bluetooth: hci2: command 0x0406 tx timeout
[  170.189530][ T7457] Bluetooth: hci0: command 0x0406 tx timeout
[  170.191608][ T7457] Bluetooth: hci1: command 0x206a tx timeout
[  170.506123][ T7458] Bluetooth: hci7: command tx timeout
[  171.466175][ T7458] Bluetooth: hci8: command tx timeout
[  171.546075][ T7458] Bluetooth: hci6: command tx timeout
[  172.586214][ T7458] Bluetooth: hci7: command tx timeout
[  173.546061][ T7458] Bluetooth: hci8: command tx timeout
[  193.556012][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
SYZFAIL: failed to recv rpc
[  193.558262][    C0] rcu: 	0-....: (10483 ticks this GP) idle=0694/1/0x4000000000000000 softirq=21270/21270 fqs=5250
[  193.563332][    C0] rcu: 	         hardirqs   softirqs   csw/system
[  193.565465][    C0] rcu: 	 number:   981051          0            0
[  193.567580][    C0] rcu: 	cputime:    26502      25977           88   ==> 52490(ms)
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  193.570131][    C0] rcu: 	(t=10501 jiffies g=11781 q=2767 ncpus=2)
[  193.572326][    C0] CPU: 0 UID: 0 PID: 7417 Comm: syz.0.502 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  193.572335][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  193.572340][    C0] RIP: 0010:rcu_read_unlock_special+0x87/0x4c0
[  193.572358][    C0] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 62 2c f8 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
[  193.572363][    C0] RSP: 0018:ffffc900000073e0 EFLAGS: 00000206
[  193.572371][    C0] RAX: 72aec4a6da1a8200 RBX: 1ffff92000000e84 RCX: 72aec4a6da1a8200
[  193.572376][    C0] RDX: 0000000000000002 RSI: ffffffff8d99883e RDI: ffffffff8be29f40
[  193.572380][    C0] RBP: ffffc900000074d8 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  193.572385][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffffffff8e144400
[  193.572394][    C0] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000001
[  193.572398][    C0] FS:  00007fe18cc646c0(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
[  193.572404][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  193.572408][    C0] CR2: 00007fe18cc42fc8 CR3: 00000001115be000 CR4: 00000000000006f0
[  193.572433][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  193.572439][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  193.572442][    C0] Call Trace:
[  193.572446][    C0]  <IRQ>
[  193.572453][    C0]  ? irqentry_exit+0x74/0x90
[  193.572465][    C0]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  193.572476][    C0]  ? unwind_next_frame+0xa5/0x2390
[  193.572488][    C0]  __rcu_read_unlock+0x84/0xe0
[  193.572497][    C0]  ? unwind_next_frame+0xa5/0x2390
[  193.572504][    C0]  unwind_next_frame+0x19ae/0x2390
[  193.572514][    C0]  ? unwind_next_frame+0xa5/0x2390
[  193.572522][    C0]  ? do_syscall_64+0xfa/0x3b0
[  193.572533][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  193.572542][    C0]  arch_stack_walk+0x11c/0x150
[  193.572555][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.572564][    C0]  stack_trace_save+0x9c/0xe0
[  193.572572][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  193.572582][    C0]  ? __irq_exit_rcu+0xd8/0x1f0
[  193.572591][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  193.572629][    C0]  kasan_save_track+0x3e/0x80
[  193.572637][    C0]  ? kasan_save_track+0x3e/0x80
[  193.572641][    C0]  ? __kasan_slab_alloc+0x6c/0x80
[  193.572648][    C0]  ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  193.572655][    C0]  ? __alloc_skb+0x112/0x2d0
[  193.572663][    C0]  ? ndisc_alloc_skb+0x9f/0x480
[  193.572672][    C0]  ? ndisc_send_rs+0x2b5/0x630
[  193.572679][    C0]  ? addrconf_rs_timer+0x369/0x670
[  193.572686][    C0]  ? call_timer_fn+0x17e/0x5f0
[  193.572693][    C0]  ? __run_timer_base+0x61a/0x860
[  193.572702][    C0]  ? run_timer_softirq+0xb7/0x180
[  193.572710][    C0]  ? handle_softirqs+0x286/0x870
[  193.572716][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  193.572722][    C0]  ? irq_exit_rcu+0x9/0x30
[  193.572728][    C0]  ? sysvec_irq_work+0xa3/0xc0
[  193.572734][    C0]  ? asm_sysvec_irq_work+0x1a/0x20
[  193.572740][    C0]  ? preempt_schedule_irq+0xb0/0x150
[  193.572748][    C0]  ? irqentry_exit+0x6f/0x90
[  193.572754][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  193.572761][    C0]  ? lock_acquire+0x175/0x360
[  193.572767][    C0]  ? class_srcu_constructor+0x4b/0x60
[  193.572776][    C0]  ? __se_sys_perf_event_open+0x493/0x1d70
[  193.572783][    C0]  ? do_syscall_64+0xfa/0x3b0
[  193.572808][    C0]  __kasan_slab_alloc+0x6c/0x80
[  193.572816][    C0]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  193.572823][    C0]  ? __alloc_skb+0x112/0x2d0
[  193.572831][    C0]  __alloc_skb+0x112/0x2d0
[  193.572840][    C0]  ndisc_alloc_skb+0x9f/0x480
[  193.572850][    C0]  ndisc_send_rs+0x2b5/0x630
[  193.572861][    C0]  addrconf_rs_timer+0x369/0x670
[  193.572872][    C0]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  193.572880][    C0]  ? __irq_exit_rcu+0xd8/0x1f0
[  193.572889][    C0]  call_timer_fn+0x17e/0x5f0
[  193.572896][    C0]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  193.572902][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  193.572908][    C0]  ? call_timer_fn+0xbe/0x5f0
[  193.572914][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  193.572926][    C0]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  193.572934][    C0]  __run_timer_base+0x61a/0x860
[  193.572943][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  193.572959][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  193.572975][    C0]  run_timer_softirq+0xb7/0x180
[  193.572985][    C0]  handle_softirqs+0x286/0x870
[  193.572994][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  193.573004][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  193.573010][    C0]  ? irq_work_single+0x1ac/0x240
[  193.573019][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  193.573029][    C0]  __irq_exit_rcu+0xca/0x1f0
[  193.573036][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  193.573045][    C0]  ? rcu_is_watching+0x15/0xb0
[  193.573053][    C0]  irq_exit_rcu+0x9/0x30
[  193.573059][    C0]  sysvec_irq_work+0xa3/0xc0
[  193.573066][    C0]  </IRQ>
[  193.573068][    C0]  <TASK>
[  193.573071][    C0]  asm_sysvec_irq_work+0x1a/0x20
[  193.573077][    C0] RIP: 0010:preempt_schedule_irq+0xb0/0x150
[  193.573085][    C0] Code: 24 20 f6 44 24 21 02 74 0c 90 0f 0b 48 f7 03 08 00 00 00 74 64 bf 01 00 00 00 e8 8b 1d 21 f6 e8 c6 f0 57 f6 fb bf 01 00 00 00 <e8> 1b ab ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24
[  193.573089][    C0] RSP: 0018:ffffc90004cefae0 EFLAGS: 00000282
[  193.573095][    C0] RAX: 72aec4a6da1a8200 RBX: 0000000000000000 RCX: 72aec4a6da1a8200
[  193.573099][    C0] RDX: 0000000000000007 RSI: ffffffff8d99883e RDI: 0000000000000001
[  193.573103][    C0] RBP: ffffc90004cefb90 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  193.573107][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 0000000000000000
[  193.573111][    C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff9200099df5c
[  193.573124][    C0]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  193.573136][    C0]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  193.573145][    C0]  irqentry_exit+0x6f/0x90
[  193.573152][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  193.573158][    C0] RIP: 0010:lock_acquire+0x175/0x360
[  193.573165][    C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 9b d3 01 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e
[  193.573169][    C0] RSP: 0018:ffffc90004cefc50 EFLAGS: 00000206
[  193.573174][    C0] RAX: 72aec4a6da1a8200 RBX: 0000000000000000 RCX: 72aec4a6da1a8200
[  193.573178][    C0] RDX: 0000000000000000 RSI: ffffffff8db8655b RDI: ffffffff8be29f40
[  193.573182][    C0] RBP: ffffffff81f030fc R08: 0000000000000000 R09: ffffffff81f030fc
[  193.573186][    C0] R10: dffffc0000000000 R11: ffffed102160f099 R12: 0000000000000002
[  193.573190][    C0] R13: ffffffff99b075d0 R14: 0000000000000001 R15: 0000000000000246
[  193.573195][    C0]  ? class_srcu_constructor+0x2c/0x60
[  193.573204][    C0]  ? class_srcu_constructor+0x2c/0x60
[  193.573221][    C0]  class_srcu_constructor+0x4b/0x60
[  193.573229][    C0]  ? class_srcu_constructor+0x2c/0x60
[  193.573237][    C0]  __se_sys_perf_event_open+0x493/0x1d70
[  193.573245][    C0]  ? perf_trace_preemptirq_template+0x280/0x340
[  193.573256][    C0]  ? irqentry_enter+0x3d/0x60
[  193.573267][    C0]  ? __pfx___se_sys_perf_event_open+0x10/0x10
[  193.573286][    C0]  ? __x64_sys_perf_event_open+0x20/0xc0
[  193.573296][    C0]  do_syscall_64+0xfa/0x3b0
[  193.573305][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.573310][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  193.573319][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.573325][    C0] RIP: 0033:0x7fe18bd8e9a9
[  193.573333][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  193.573337][    C0] RSP: 002b:00007fe18cc64038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  193.573343][    C0] RAX: ffffffffffffffda RBX: 00007fe18bfb5fa0 RCX: 00007fe18bd8e9a9
[  193.573347][    C0] RDX: ffefffffffffffff RSI: 0000000000000000 RDI: 0000200000000180
[  193.573351][    C0] RBP: 00007fe18be10d69 R08: 0000000000000000 R09: 0000000000000000
[  193.573355][    C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  193.573359][    C0] R13: 0000000000000000 R14: 00007fe18bfb5fa0 R15: 00007ffd771f7a28
[  193.573370][    C0]  </TASK>
[  193.836391][    C0] sched: DL replenish lagged too much
[  193.841564][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  193.843716][ T1362] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
20:55:19  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000006710
R8 =ffff888107858237 R9 =1ffff11020f0b046 R10=dffffc0000000000 R11=ffffffff85472b60
R12=dffffc0000000000 R13=ffffffff99af58a5 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff85472bdc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fe18cc646c0 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe18cc42fc8 CR3=00000001115be000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fe18bf86478 00007fe18bf86450 XMM03=00007fe18bf86488 00007fe18bf86480
XMM04=00007fe18caed100 00007fe18bf86440 XMM05=00007fe18bf86458 00007fe18bf864a0
XMM06=00007fe18bf86498 00007fe18bf86490 XMM07=00007fe18bf86488 00007fe18bf86480
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007fe18be11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000001 RCX=4770f0b03bf6a900 RDX=ffff888022120000
RSI=ffffffff8db8655b RDI=ffffffff8be29f40 RBP=00000000ffffffff RSP=ffffc90002fbf240
R8 =ffffc90002fbf34f R9 =0000000000000000 R10=ffffc90002fbf340 R11=fffff520005f7e6a
R12=0000000000000046 R13=ffff888022120000 R14=ffffffff8e13f0e0 R15=0000000000000001
RIP=ffffffff8b6eb255 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f062154f800 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffc25a25d0c CR3=000000010e014000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
