last executing test programs:

20.542830398s ago: executing program 0 (id=12):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r2, &(0x7f00000001c0)="7cdfd539cb6305f1c8518628d9058dfc26724fdf924572917facde6934bdc309574994ea2993ce5554bbda0b3d453b8ceb476772028107312bf17d638d7c5387e399743f859009aef608ae0ea91f3c58d9916285f11cdc2371446feaafaef53a6d453b789b2c6b296105cfccfbaac77c9c2b15fbc4886ce74ed244c2e0114fa85c7dbbc360c399d17cb6667bf697bcd8f5267ff9f6ee297db0fd00b899f9907685ae536be7b2f3f6cddceba1db17b8a4b2d7293b17358705f99bc13e56324558a113c2eaddcd2460eda5cd1ed30866b7e0c61f4f8192c3aad1a166d270742cba5efd", &(0x7f00000000c0)=""/89, 0x4}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="61107f000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x94)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="d80000001e0081054e81f782db020000001d080006007c09e8fe08a104000e000a00142603600e1208000fc01e000406a80016c008000e400400027c035c0461c1967f6f94007134cff6d26efb8000a0ffa290457f01895416277ce06bba0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d25ccca95c9757c01deeb12c0e440f57d6cf23b1900360db7e5167fda40fad956d809d5e12a9ecbee5de6ccd40dd6e4edef3d93452a92950b0000000000000023f9a941000000000000000000007d59ef7e1359485303f720a1ed469c778f", 0xd8}], 0x1}, 0x804)
r4 = syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x498a3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x3ffffe, 0x0, 0x0, 0xe, 0x0, 0x8}, r4, 0x0, 0xffffffffffffffff, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x8, 0x0, &(0x7f0000000180)="0005000000000001", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000580)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000580)=ANY=[], 0xfe33)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/13], 0x50)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000140081044e81f782db44b9040a1d08023f000000040000a118000200ff020000000100000000000000000001a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb12d", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c04)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004"], 0x48)
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000200)=ANY=[@ANYRES8=r6, @ANYRES8], 0x12)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r10, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a)

17.657819064s ago: executing program 0 (id=16):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000001000000dd00000009"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r4}, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00020000711043000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETCARRIER(r5, 0x400454e2, &(0x7f0000000280)=0x1)
close(r1)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000040)='%pI4   \x00'}, 0x2a)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = socket$kcm(0x2, 0x2, 0x0)
sendmsg$inet(r7, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x80, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @multicast1}}}], 0x20}, 0x4008804)
sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000300)="0e3d43d4ff44d0569884e9b7eae94c054f8d68f077740c0a07851fb409bf6a9904f86bb69de84a1b5613877a062ff339eaa7fb90bcaa6f518bb72a08958c6375020e3cb44e4dfa7001858d59b55ce049bd69a1f593ca98f25cc3d04589a97c491e8679f1d98cfd0273cc9b42c45a38858c", 0x71}, {&(0x7f0000000380)="65b68d14caddf7260c977e03f8aeb0dcd731b65d694d488c1d49f104d94298bca6c0a696c4996f8ca08abd4ee2ea8cd7db0b6da539bdfdcc1149b4b5a09f7b4d207942eba3ddeb8f6b06a33b7dfb5ce3b8e72ac24a71d98e04aa380622bf40bb4e1233082b7c93ca82bc50676a535fb8f55fd11f242cab51e0f0d3", 0x7b}, {&(0x7f0000000540)="28e48d55240b08587bcbb518fbd0c83a6ab60e0d70e7342935f602b053bd9a5d29947f7740352fd135124e6de46b6a59c2271a94a09c79ebb5027430a5dd057a8fc891efddd52fb760569977acd094265133c409fa75d285b7", 0x59}, {&(0x7f0000000a00)="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", 0x468}], 0x4}, 0x40000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000025c0)='fib6_table_lookup\x00', r6}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
socketpair(0x1, 0x2, 0x0, &(0x7f0000000000))
r8 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100000, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000180081064e80f782db44b9040a1d080000000000000055a10a0015400100142603600e1208009e0000000401040016004000054003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef409fd2ee0125b91643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d28a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3060000000000000081ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b4337812398", 0xd8}], 0x1}, 0x0)
sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000066006bcd843fe3dc6e000000008c000000007280", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17.462621517s ago: executing program 0 (id=17):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x6, 0x23, 0x0, 0x1, 0x3}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10)
r4 = perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x3, 0xc, 0xf0, 0x3, 0x0, 0xf4, 0x50120, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000001000), 0x4}, 0x2200, 0x561, 0x0, 0x9, 0x6, 0x8000, 0x2, 0x0, 0xb000000, 0x0, 0xfffffffffffffb56}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
r5 = perf_event_open$cgroup(&(0x7f00000010c0)={0x5, 0x80, 0x40, 0x7, 0x6, 0x7, 0x0, 0x9, 0x1, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x1, 0x3}, 0x8, 0x8, 0x4, 0x6, 0x75d0, 0x1, 0x3, 0x0, 0x1000, 0x0, 0xaa4}, 0xffffffffffffffff, 0xd, r4, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x52, 0x1, 0x4, 0x0, 0x0, 0x5, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7c, 0x1, @perf_bp={&(0x7f0000000440)}, 0x16725, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9ea}, 0x0, 0x8, r5, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7, 0x4, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$cgroup_ro(r6, &(0x7f0000001700)='blkio.bfq.io_merged\x00', 0x26e1, 0x0)
r9 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r9, &(0x7f0000000440)={&(0x7f0000000800)=@nfc_llcp={0xa, 0x0, 0xe0ffffff, 0x0, 0x0, 0x0, "be467b1f4cfd8c642c13334c199f91732d13b884b4ad52d055d6d5ae3b991ffc48ca221108c4d3aa623010eab68d9504000034ea00000001f000"}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)="80005b020eaa4da2", 0x8}, {&(0x7f00000000c0)="bb801d2b6ee74ca6dd0afd8db62e5de99f891ce37d5b7c9d62780020763e62f9f45dfb9f7bf4191f3eae21e30fd0bd2a98d0d29b7acc934ead1435306043fa7d8dee130a7eb7881168d6b534a57a9b795804ce11c4d65ad423b1f5815ae045903eea000a046284f15279a17ac2f5c9a872d7de0970782ef38c371d83155120b2f9db327afee3e6fd99551e46abfc3b828775bacd32", 0x95}, {&(0x7f0000000880)="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", 0xab4}], 0x3, 0x0, 0x0, 0x900}, 0x0)
close(0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0}, 0x28)
close(0x3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0xfe33)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xb, 0xd7, &(0x7f0000000600)=""/215, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c852, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113b40000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70)

17.437523729s ago: executing program 2 (id=18):
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f0000000440), 0x3d) (async)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x4, @perf_config_ext={0x20000000000003, 0x8001}, 0x2106, 0xffffffff, 0x8001, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async)
bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) (async)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4800, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='module_request\x00', r3}, 0x10) (async)
r5 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r5, r4, 0x0, 0x1, 0xfffffffffffffffe}, 0x42) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8b0b, 0x0) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r6) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0))
socket$kcm(0xa, 0x1, 0x106) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r8 = socket$kcm(0x10, 0x3, 0x10)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000980)=r7, 0x4) (async)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="1400000017000b63d25a80648c2594f934a3c92b", 0x14}], 0x1}, 0x0)
socketpair(0x25, 0x5, 0x0, &(0x7f0000000000)) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008004) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) (async)
socket$kcm(0xa, 0x2, 0x0)

17.14624578s ago: executing program 0 (id=20):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0x28, 0x1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040), 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
r1 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x6, 0x1f, 0x0, 0x5c)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000000c0)={'pim6reg\x00'})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

17.142372766s ago: executing program 2 (id=21):
r0 = socket$kcm(0x2, 0x2, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x31, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000000000000000000ffffff7f18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018310000040000000000000000000000d458f0ff0400000018460000ffffffff0000000000000000016a00000900000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000008500000003000000185600000b00000000000000000000001856000010000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000851000000300000001010200ff0f0000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000cca0f4ffffffffff85000000af000000186a000001000000000000000800000018270000", @ANYRES32, @ANYBLOB="00001a51a53e558344c000000000001e"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000), 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)
r1 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
socket$kcm(0xa, 0x2, 0x11)
r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={&(0x7f0000000280), 0x1b}, 0x14145, 0x10002e, 0xfffffbff, 0x3, 0x2, 0x6, 0x5, 0x0, 0x0, 0x0, 0xa9ea}, 0x0, 0x0, r1, 0x9)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, @perf_config_ext={0xffffffffffffffff, 0x8}, 0x8400, 0x0, 0x1, 0x1, 0x3, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000c63f1de100000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a0001400000000000030000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8918, &(0x7f0000000200)={'pimreg\x00', @random="0201ffc0ffff"})
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xfd, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x3, 0xd, 0x3}, {0x10000002, 0x0, 0x13, 0x2}], 0x10, 0x4000000}, 0x94)
r8 = socket$kcm(0x2, 0x1, 0x84)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000180))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
close(r10)
recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r11=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r8, 0x84, 0x64, &(0x7f0000000000)=r11, 0x10)
sendmsg$inet(r8, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x10, @multicast2}, 0x71, &(0x7f0000000100)=[{&(0x7f0000000480)="5b2b2f8930c6de8307757e2c86902a072396b874cb1e1ae5285406c85720b104dd98edc129338b816e547121aad0bf4c6856157fdc2aac29477f27290a57a65ca1f66ccb9a9562e79d76b4c1c1db9df0ce360bf1b1f35a60ec23e66dfd4007d8c97da5ad8a06caca123f58b4c2cfbca9b03bc24331a15babcdcf80f496a1b6d6b9c127dba0ccd49deb1e5dcd33f12e", 0x1}], 0x1}, 0x4080)

16.29620815s ago: executing program 0 (id=23):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071108d000000000006f7ffffff0000009500000700000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1400000004000000080000002200000000000000", @ANYRES32, @ANYBLOB="000000000000000000e200000000000000000000d824485a296759eb8c2be50e63967d40a7e076662ef79a3a9b71969e3ec677f326a924418cb74de4a15fc7a8a8582e35713c5d4f9662c4e11976e1426eb7c28314c5845b0021c59f3a11fedc504f5e3e2c7d78283ba18735754dfdf37c7f79000f685a118f9234fe79d9850168ee1a4c2370897ecb0e3f6e92c34c7b20", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r1, &(0x7f0000000080), 0x0, 0x4}, 0x20)
r2 = perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x80, 0x6, 0x2, 0xc9, 0x6, 0x0, 0x400, 0x80108, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000180)}, 0x110008, 0x9, 0x2, 0x2, 0x9, 0xaf, 0x7, 0x0, 0xffffff06, 0x0, 0x200}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x5)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r3)
ioctl$SIOCSIFHWADDR(r3, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="1f00"})
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r3, &(0x7f0000000380)="3397100fa25e609908291a4688baf21c093c61315f2f67ce7c56fa07002ec12bd3c0bc6ff4c9bc4d32a242ce4ceece0d2d79bed80d55106efe636d20c869d0df7d17cef46b0ef2780ad6f32bb613d318020a640643926d4a0c24cabe1a279dfac9f61e66d43150b09ad80af7d79f6fe1d37347fe9c89429c50939d3e5c87f935def8a7363f2c85bb4ff4f9c8ff93ba80b857facb6208cec30c1fe544b68f468642c6848466af41e905bbc466d1d2a35b3fd0ae45b5b93bfbda70efec8dee7c83034495378605e30161ac8a18531cc5d1024cb14f4219ebc554ba109fcb23860f41d1f289d4d0a696401e27", &(0x7f0000000480)=""/19}, 0x20)

16.236742389s ago: executing program 1 (id=24):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000100), 0x1001)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, <r1=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x35, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x7}, @jmp={0x5, 0x0, 0x3, 0x1, 0xb, 0x2, 0x10}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x7fff}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)

16.235545092s ago: executing program 0 (id=25):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x80000001, 0xfff, 0x4, 0x100, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='cpu\t&0&&\t')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYBLOB], 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffff27, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffff27, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1005c, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x31, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1b}, 0xa1) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1005c, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x31, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1b}, 0xa1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$unix(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="2f03", 0x2}], 0x1, 0x0, 0x0, 0x800}, 0x20004011) (async)
sendmsg$unix(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="2f03", 0x2}], 0x1, 0x0, 0x0, 0x800}, 0x20004011)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r7}, 0x10)
recvmsg$unix(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x34, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x8002, 0x2, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080))

16.176157889s ago: executing program 2 (id=26):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0xff01, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x2, 0x2, 0x73)
sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff6c, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90235fc60049711000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

16.174342917s ago: executing program 1 (id=27):
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x13, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x1209e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={&(0x7f0000000280), 0x2}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffff7fffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r0, 0x400454d1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240))
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xb3ae, 0xffffffffffffffff, 0x4, &(0x7f00000004c0)=[0x1, 0x1], &(0x7f0000000500)=[{0x5, 0x3, 0x6, 0x7}, {0x1, 0x1, 0x10, 0x8}, {0x2, 0x3, 0x2, 0x4}, {0x3, 0x2, 0x7, 0x2}], 0x10, 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc6007020f", 0x17}], 0x1, 0x0, 0x0, 0x400300}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1d, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x23a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x13, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
perf_event_open(0x0, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) (async)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x1209e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={&(0x7f0000000280), 0x2}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffff7fffffff, 0xffffffffffffffff, 0x9) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async)
ioctl$TUNATTACHFILTER(r0, 0x400454d1, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xb3ae, 0xffffffffffffffff, 0x4, &(0x7f00000004c0)=[0x1, 0x1], &(0x7f0000000500)=[{0x5, 0x3, 0x6, 0x7}, {0x1, 0x1, 0x10, 0x8}, {0x2, 0x3, 0x2, 0x4}, {0x3, 0x2, 0x7, 0x2}], 0x10, 0x9}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc6007020f", 0x17}], 0x1, 0x0, 0x0, 0x400300}, 0x0) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1d, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x23a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) (async)

15.954468522s ago: executing program 1 (id=28):
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = socket$kcm(0xa, 0x3, 0x3a)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r1})
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6065e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

15.953544656s ago: executing program 2 (id=29):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000180081064e81f782db4cb904021d0800fe027c", 0x17}], 0x1}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0)
close(r0)
socket$kcm(0xa, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @local})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b702000000000080bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095000000000000008e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97ce8df1bc9a0c4eeceb9971e43405d621ffbc9b0d8ca56b50f0c010d631f6dbc8486bc5d5bf2ca8285056892db03cf1c62d57c08a90b189d190c341035de53a9a53608c10556e5734eb84049761451ce540c772e069f80cb201b2de17dfdb4b60939d5d6aed4062049b87e03e2cd18a77dda613e0c64497fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8000000000000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231a2d73148be4248cdc138408ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a66d2e17e122040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600daded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286ccca37db965d9dd366598f5ec993cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100bd5828954a7d093a54f7e75b3753508ca3c41685d1e407315e59d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e113e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6fc7eb83714387450ea18eafbace8eec18a4b2c442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3eeec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bdf53e7d0e5c3f914d905422b83f30936674ba8f0bffaf2305c0972df71fe5f4e01506471e897bced7798509e64df360d95f9a4099f86438ac2bbcbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb4e08afbac5397b64aa369922ed7ed8918f97294b6854210d2b93aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade344d68324f9e12a6b9770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570c7c00d647daf8af334050b61e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c590bd1371e2b5d9a2ea2190f5e4f5cd641cdfe5d89f84a368ef7e6ff1eacdc0ec9e97b8f9c9e314661ea0aa8a104008d188b66b3a4aedeed9df4238a08fc2fb1007233cc2c87fcaa0cccd8ec03444471c1dd660c87acc17bff740d199a7c0c52c63c0408b5158e0000000c275eedb02f141113cf2c55b2c08c2c68cc99d2bb5840fba332e1c82862ec9b90106248f81d32a47ac94ddee815dba8aeb5d3121cf247a81aef7805b020e9eec44cbe3055be69fe066824ba2292b9cdce41635fc00df96fb10a3a8cc60c4a76c65ebbb0640e0a29de94edf5cbefac1c5fa96e7080af804b22cabce10ea52f1018527f4aa39cdafa3eff63de2a7f50d042667820f6f86f276afb2b8134301e031351ee13013137e9d5cec0c84d7e3f82c6fd12eb98f9ea654bcb9ce59a2015183c6e65bb0537e611b830d74c30fb8207fca0990acdbb51e4e234026e00000000b3ebae3eb52c140953a350fcf0124b1a30b1afc29ea56f8413686d912eb8118d73ef9c6d3843ebcb555301c0205dd3bd9b1d742e334319c8979c322e92"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, r1, 0x8, &(0x7f0000000000)={0xa}, 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e60803dc", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009110a1000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)

15.883946415s ago: executing program 1 (id=30):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$cgroup_type(r0, &(0x7f0000000180), 0xfffffe51) (async)
write$cgroup_type(r0, &(0x7f0000000180), 0xfffffe51)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x6, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="560a000000000000000089607eedb0757958f65e00"/34], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, r0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x19300000}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x19300000}, 0x94)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0x5}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = socket$kcm(0x1e, 0x5, 0x0)
sendmsg$kcm(r1, &(0x7f0000001200)={&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x80, 0x0}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40, 0x4}, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x10}, 0x0)
close(r1) (async)
close(r1)
r2 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{0x0}], 0x1}, 0x64) (async)
sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{0x0}], 0x1}, 0x64)
setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x10)
socket$kcm(0x2, 0x5, 0x84) (async)
r3 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x94)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000006c0)="5c0000006c006bcd9e3fe3dc6e48aa31086b8703240000007ea60264160a", 0x1e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000006c0)="5c0000006c006bcd9e3fe3dc6e48aa31086b8703240000007ea60264160a", 0x1e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) (async)
setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10)
syz_open_procfs$namespace(0x0, 0x0)
sendmsg$inet(r3, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x34000}], 0x1}, 0x80d1)
close(r3)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) (async)
sendmsg$kcm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000004d752c0000002c00000002000000000000000000000b00000000000000000100000d0000000000000000030000000000000000000009030000000000"], 0x0, 0x46, 0x0, 0xa}, 0x20) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000004d752c0000002c00000002000000000000000000000b00000000000000000100000d0000000000000000030000000000000000000009030000000000"], 0x0, 0x46, 0x0, 0xa}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000000000fffffffa850000007500000095"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

15.796349919s ago: executing program 2 (id=31):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000b40)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305829, 0x0)
r3 = socket$kcm(0x10, 0x7, 0x0)
recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)=""/110, 0x6e}, {&(0x7f00000047c0)=""/4057, 0xfd9}, {&(0x7f00000017c0)=""/4060, 0xfdc}, {&(0x7f0000000700)=""/238, 0xee}, {&(0x7f00000002c0)=""/130, 0x82}, {&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000500)=""/30, 0x1e}], 0x7}, 0x0)
sendmsg$inet(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000)
recvmsg$kcm(r3, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002)
r4 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x2, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2002, 0x0, @perf_bp={0x0, 0x4}, 0xa100, 0xc8, 0x3, 0x9, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r5=>0xffffffffffffffff})
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200182f00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa35f088be"], 0xfdef)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0xffca}, 0x164)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0xfdef)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1600"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, r6, 0x0, 0x5}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r6, 0xe0, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0], ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x74, &(0x7f0000000600), 0x0, 0x0, 0x0, &(0x7f0000000800), 0x8, 0x2d, 0x8, 0x8, &(0x7f0000000840)}}, 0x10)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x100002, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0)={0x0, r5}, 0x8)
ioctl$PERF_EVENT_IOC_PERIOD(r10, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_PERIOD(r10, 0x4030582a, &(0x7f0000000040)=0x8000)
r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000ac0)={0xffffffffffffffff, 0x80, 0x10}, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b80)={0x6, 0x1a, &(0x7f0000000440)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x200}, @exit, @ldst={0x0, 0x0, 0x4, 0x0, 0x3, 0x30}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, @map_fd={0x18, 0x6, 0x1, 0x0, r8}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], &(0x7f0000000300)='syzkaller\x00', 0xa51, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f0000001ac0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000001b00)={0x1, 0x4, 0x2, 0xc0}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001b40)=[r10, r11, r7, r4, r8, r7, r6, r6, r6, r6], 0x0, 0x10, 0xf}, 0x94)
openat$cgroup_devices(r10, &(0x7f0000000b00)='devices.deny\x00', 0x2, 0x0)
r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd0, 0xd0, 0xa, [@const={0x8, 0x0, 0x0, 0xa, 0x3}, @func={0x8, 0x0, 0x0, 0xc, 0x1}, @func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xe, 0x0, 0x0, 0xb, 0x4}, @enum={0xe, 0x3, 0x0, 0x6, 0x4, [{0x2, 0xffff4958}, {0x0, 0x5}, {0xf, 0x7}]}, @enum64={0xc, 0x5, 0x0, 0x13, 0x0, 0x4, [{0x9, 0x6, 0x5}, {0xb, 0x4, 0x2580}, {0xf, 0xfffffff9, 0x4}, {0x7, 0x9, 0x6}, {0x4, 0x6, 0xffffffc8}]}, @typedef={0x10, 0x0, 0x0, 0x8, 0x3}, @restrict={0x10}, @typedef={0x0, 0x0, 0x0, 0x8, 0x2}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0x58, 0x0, 0x29, 0x4}]}, {0x0, [0x61, 0xd24a35d991d1fb47, 0x61, 0x0, 0x2e, 0x5f, 0x0, 0x0]}}, &(0x7f0000000080)=""/123, 0xf2, 0x7b, 0x0, 0x0, 0x10000}, 0x28)
r13 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r2}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x17, 0x6, 0x7, 0xe, 0x300a0, r1, 0x7fff, '\x00', r9, r12, 0x4, 0x0, 0x2, 0x0, @void, @value, @value=r13}, 0x50)

15.795198991s ago: executing program 1 (id=32):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4)
close(r0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000006, 0x0, @perf_config_ext={0x4, 0xdb}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x25}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x900, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000600000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000760091"], 0xfe33)
r3 = socket$kcm(0x2, 0xa, 0x106)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3}}, 0x10, 0x0}, 0x30004081)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x400800, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140), 0x4)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYRES32, @ANYBLOB="0000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000000000000500000000000000000000000000000000000080"], 0x50)
r6 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r6, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x34, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000500)=""/114, 0x72}, {0x0, 0xffa1}], 0x3}, 0x120)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r5, 0xfffffe27, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0xe)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0600"/12, @ANYRES32=r8, @ANYBLOB="01000000000000000500"/28], 0x50)
ioctl$TUNSETIFINDEX(r4, 0x400454da, 0x0)
socketpair(0x10, 0x5, 0x2, &(0x7f00000000c0))
ioctl$TUNSETLINK(r4, 0x400454cc, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000002c0)={'veth0_to_hsr\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r9, 0x400454ce, 0x9)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
setsockopt$sock_attach_bpf(r3, 0x1, 0x19, 0x0, 0x3b)

15.674770401s ago: executing program 2 (id=33):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000079003000000000009500000000000000db74589d4b38cc306ac390649f8edea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475be393b1f1e4aba75a0750472719cc516eec8b02df8ef39db6e67fa14b769e7f385ba72c64242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba7000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb1, &(0x7f000000cf3d)=""/173, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x53) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079d})
socketpair(0x1, 0x1, 0x1, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b000000000000000000000001f8ffff00000000", @ANYRES32, @ANYBLOB="0000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000ffffff000000000000004a2600002000020000000000"], 0x50) (async)
perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x52, 0x3, 0x6, 0x0, 0x0, 0x7ff0, 0x10082, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp, 0x14105, 0x2e, 0xfffffbff, 0x6, 0x2, 0x0, 0x6, 0x0, 0x7, 0x0, 0x5}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x9) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x891c, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x1, 0xb, 0x1ff, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740), 0x10, 0x1}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r3 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r3, &(0x7f0000000b40)={&(0x7f0000000240)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000280)='0', 0x1}], 0x1}, 0x45) (async)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000059) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000880)}, 0x20000800) (async)
close(0x3) (async)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x41, 0x0, 0x0, 0x0, 0x7fef, 0x386, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x7, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x1010, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200010000008000000000030000000000000000b208fc59045b5eaf0075d0d65f0dba7830f448acbdccc5a23c4004b993f6b711a3fd8367c78367e6fe", @ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000ffbe618200"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)

15.671732727s ago: executing program 1 (id=34):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x3, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{}, {0x27}}, [], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x52, 0x1, 0x3, 0x0, 0x0, 0x7fef, 0xc0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0x806, 0x3, 0x2, 0x3, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xa, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="150000005f007fb1ee1dcd630906a754340168710b", 0x15}], 0x1}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0, 0xae, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x94, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10)
r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x4, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
socket$kcm(0x2, 0xa, 0x2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x24, 0x4, 0x2}, 0x48)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0000000085000000c0000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="06ff03076844babeb89e14f00800", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', r3}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000540)={0x2, 0x4e24, @multicast1}, 0x10, 0xfffffffffffffffe, 0x0, &(0x7f0000000580)=[@ip_ttl={{0x14}}], 0x18}, 0x4004000)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000213a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414aa"], 0xfdef)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1.226691587s ago: executing program 32 (id=25):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x80000001, 0xfff, 0x4, 0x100, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='cpu\t&0&&\t')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYBLOB], 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffff27, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffff27, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1005c, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x31, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1b}, 0xa1) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1005c, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x31, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1b}, 0xa1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$unix(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="2f03", 0x2}], 0x1, 0x0, 0x0, 0x800}, 0x20004011) (async)
sendmsg$unix(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="2f03", 0x2}], 0x1, 0x0, 0x0, 0x800}, 0x20004011)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r7}, 0x10)
recvmsg$unix(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x34, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x8002, 0x2, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080))

204.259245ms ago: executing program 33 (id=34):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x3, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{}, {0x27}}, [], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x52, 0x1, 0x3, 0x0, 0x0, 0x7fef, 0xc0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0x806, 0x3, 0x2, 0x3, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xa, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="150000005f007fb1ee1dcd630906a754340168710b", 0x15}], 0x1}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0, 0xae, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x94, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10)
r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x4, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
socket$kcm(0x2, 0xa, 0x2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x24, 0x4, 0x2}, 0x48)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="06ff03076844babeb89e14f00800", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', r3}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000540)={0x2, 0x4e24, @multicast1}, 0x10, 0xfffffffffffffffe, 0x0, &(0x7f0000000580)=[@ip_ttl={{0x14}}], 0x18}, 0x4004000)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000213a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414aa"], 0xfdef)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

0s ago: executing program 34 (id=33):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000079003000000000009500000000000000db74589d4b38cc306ac390649f8edea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475be393b1f1e4aba75a0750472719cc516eec8b02df8ef39db6e67fa14b769e7f385ba72c64242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba7000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb1, &(0x7f000000cf3d)=""/173, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x53) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079d})
socketpair(0x1, 0x1, 0x1, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b000000000000000000000001f8ffff00000000", @ANYRES32, @ANYBLOB="0000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000ffffff000000000000004a2600002000020000000000"], 0x50) (async)
perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x52, 0x3, 0x6, 0x0, 0x0, 0x7ff0, 0x10082, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp, 0x14105, 0x2e, 0xfffffbff, 0x6, 0x2, 0x0, 0x6, 0x0, 0x7, 0x0, 0x5}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x9) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x891c, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x1, 0xb, 0x1ff, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740), 0x10, 0x1}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r3 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r3, &(0x7f0000000b40)={&(0x7f0000000240)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000280)='0', 0x1}], 0x1}, 0x45) (async)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000059) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000880)}, 0x20000800) (async)
close(0x3) (async)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x41, 0x0, 0x0, 0x0, 0x7fef, 0x386, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x7, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x1010, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200010000008000000000030000000000000000b208fc59045b5eaf0075d0d65f0dba7830f448acbdccc5a23c4004b993f6b711a3fd8367c78367e6fe", @ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000ffbe618200"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:5889' (ED25519) to the list of known hosts.
syzkaller login: [   49.890804][ T5784] cgroup: Unknown subsys name 'net'
[   50.018692][ T5784] cgroup: Unknown subsys name 'cpuset'
[   50.027506][ T5784] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.488792][ T5784] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.903683][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.907685][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.911086][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.915101][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.918666][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.974999][ T5219] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.980280][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.985695][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.989181][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.992834][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.005581][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.010283][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.025539][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.042014][ T5219] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.048556][ T5219] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.220317][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   56.423757][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.427891][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.430470][ T5828] bridge_slave_0: entered allmulticast mode
[   56.433574][ T5828] bridge_slave_0: entered promiscuous mode
[   56.438767][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.441496][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.444070][ T5828] bridge_slave_1: entered allmulticast mode
[   56.447854][ T5828] bridge_slave_1: entered promiscuous mode
[   56.519577][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.523758][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   56.535914][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.569413][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   56.578819][ T5828] team0: Port device team_slave_0 added
[   56.605388][ T5828] team0: Port device team_slave_1 added
[   56.680327][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.683393][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.694163][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.707960][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.711343][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.714738][ T5835] bridge_slave_0: entered allmulticast mode
[   56.718520][ T5835] bridge_slave_0: entered promiscuous mode
[   56.722884][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.726482][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.739088][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.748696][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.751095][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.753478][ T5835] bridge_slave_1: entered allmulticast mode
[   56.756861][ T5835] bridge_slave_1: entered promiscuous mode
[   56.795162][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.797568][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.800931][ T5833] bridge_slave_0: entered allmulticast mode
[   56.803711][ T5833] bridge_slave_0: entered promiscuous mode
[   56.821892][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.828365][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.831608][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.834204][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.838698][ T5833] bridge_slave_1: entered allmulticast mode
[   56.841606][ T5833] bridge_slave_1: entered promiscuous mode
[   56.888400][ T5828] hsr_slave_0: entered promiscuous mode
[   56.891933][ T5828] hsr_slave_1: entered promiscuous mode
[   56.897714][ T5835] team0: Port device team_slave_0 added
[   56.902065][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.908458][ T5835] team0: Port device team_slave_1 added
[   56.912117][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.970611][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.972973][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.983438][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.990227][ T5833] team0: Port device team_slave_0 added
[   57.002908][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.006222][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.017508][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.025418][ T5833] team0: Port device team_slave_1 added
[   57.099857][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.103169][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.116135][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.123961][ T5835] hsr_slave_0: entered promiscuous mode
[   57.126569][ T5835] hsr_slave_1: entered promiscuous mode
[   57.128752][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.131387][ T5835] Cannot create hsr debugfs directory
[   57.152376][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.155072][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.166466][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.272587][ T5833] hsr_slave_0: entered promiscuous mode
[   57.276392][ T5833] hsr_slave_1: entered promiscuous mode
[   57.278921][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.281601][ T5833] Cannot create hsr debugfs directory
[   57.331918][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.351296][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.362914][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.377464][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.476541][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.481344][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.486327][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.491998][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.541026][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.545530][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.551428][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.556472][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.590382][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.618632][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   57.631992][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.634613][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.654080][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.656610][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.670273][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.692337][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   57.709917][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.712379][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.718358][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.731610][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.734030][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.758383][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   57.773330][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.776447][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.809827][ T5833] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   57.813818][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.823710][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.826890][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.899018][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.945500][ T5219] Bluetooth: hci0: command tx timeout
[   57.958932][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.006178][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.042165][ T5828] veth0_vlan: entered promiscuous mode
[   58.063289][ T5828] veth1_vlan: entered promiscuous mode
[   58.098914][ T5833] veth0_vlan: entered promiscuous mode
[   58.108613][ T5219] Bluetooth: hci2: command tx timeout
[   58.111275][ T5219] Bluetooth: hci1: command tx timeout
[   58.111438][ T5833] veth1_vlan: entered promiscuous mode
[   58.119642][ T5828] veth0_macvtap: entered promiscuous mode
[   58.123696][ T5828] veth1_macvtap: entered promiscuous mode
[   58.133289][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.160696][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.171170][ T5833] veth0_macvtap: entered promiscuous mode
[   58.181201][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.192310][ T5833] veth1_macvtap: entered promiscuous mode
[   58.201603][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.207025][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.210174][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.213851][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.230430][ T5835] veth0_vlan: entered promiscuous mode
[   58.246783][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.250577][ T5835] veth1_vlan: entered promiscuous mode
[   58.265227][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.273745][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.277878][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.280978][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.284095][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.324625][ T5835] veth0_macvtap: entered promiscuous mode
[   58.343342][ T5835] veth1_macvtap: entered promiscuous mode
[   58.368937][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.373905][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.382968][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.397486][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.402169][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.405559][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.408477][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.411284][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.439124][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.445640][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.461996][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.469524][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.498374][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.500947][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.520373][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.526309][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.530808][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.556523][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.563541][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.663857][ T5896] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   59.254496][    C0] hrtimer: interrupt took 42299 ns
[   59.778582][ T5905] netlink: 5419 bytes leftover after parsing attributes in process `syz.0.6'.
[   59.782269][ T5900] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4'.
[   59.783651][ T5905] netlink: 'syz.0.6': attribute type 21 has an invalid length.
[   59.805919][ T5905] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6'.
[   59.831845][   T54] Bluetooth: hci0: unexpected event 0x0f length: 151 > 4
[   60.185630][   T54] Bluetooth: hci1: command tx timeout
[   60.191294][   T54] Bluetooth: hci2: command tx timeout
[   60.414895][ T5912] lo: entered allmulticast mode
[   60.479583][ T5912] lo: entered promiscuous mode
[   60.481349][ T5912] lo: left allmulticast mode
[   60.487513][ T5910] netlink: 'syz.0.8': attribute type 22 has an invalid length.
[   60.490610][ T5910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8'.
[   60.828752][ T5917] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10'.
[   60.839236][ T5918] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9'.
[   60.842577][ T5917] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10'.
[   60.852000][ T5918] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9'.
[   60.857049][ T5917] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10'.
[   61.173123][ T5922] netlink: 'syz.1.9': attribute type 1 has an invalid length.
[   61.176659][ T5922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9'.
[   61.219773][ T5917] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   61.250053][ T5917] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   61.260039][ T5917] bond0 (unregistering): Released all slaves
[   61.740838][ T5928] netlink: 'syz.0.12': attribute type 2 has an invalid length.
[   61.779497][ T5219] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[   61.880032][ T5931] netlink: 'syz.1.13': attribute type 21 has an invalid length.
[   62.136438][ T5936] netlink: 'syz.1.14': attribute type 16 has an invalid length.
[   62.265332][   T54] Bluetooth: hci2: command tx timeout
[   62.267774][   T54] Bluetooth: hci1: command tx timeout
[   62.895364][ T5943] netlink: 'syz.0.16': attribute type 21 has an invalid length.
[   63.168671][ T5219] Bluetooth: hci1: ACL packet for unknown connection handle 0
[   63.867634][ T5219] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[   63.872381][ T5219] Bluetooth: hci0: Injecting HCI hardware error event
[   63.880350][ T5219] Bluetooth: hci0: hardware error 0x00
[   64.345821][   T54] Bluetooth: hci1: command tx timeout
[   64.348482][   T54] Bluetooth: hci2: command tx timeout
[   64.431195][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1846627640 wd_nsec: 1846627659
[   64.986645][ T5963] netlink: 'syz.2.21': attribute type 10 has an invalid length.
[   64.992441][ T5963] __nla_validate_parse: 6 callbacks suppressed
[   64.992449][ T5963] netlink: 152 bytes leftover after parsing attributes in process `syz.2.21'.
[   65.002422][ T5963] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   65.019396][ T5963] syz.2.21 uses obsolete (PF_INET,SOCK_PACKET)
[   65.076407][ T5967] netlink: 'syz.2.21': attribute type 10 has an invalid length.
[   65.081410][ T5967] team0: Device ipvlan1 failed to register rx_handler
[   66.008345][ T5984] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.27'.
[   66.044976][ T5985] netlink: 96168 bytes leftover after parsing attributes in process `syz.2.26'.
[   66.346099][ T6000] netlink: 'syz.1.32': attribute type 10 has an invalid length.
[   66.354765][ T6000] team0: Device dummy0 is up. Set it down before adding it as a team port
[   66.507830][ T6005] syzkaller0: entered promiscuous mode
[   66.510352][ T6005] syzkaller0: entered allmulticast mode
[   71.154881][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.157799][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   78.904575][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 7500122477 wd_nsec: 7500122623
[   81.011886][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   81.012400][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   81.012837][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   81.013329][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   81.013689][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   82.112519][   T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   82.113520][   T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   82.113964][   T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   82.115840][   T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   82.116362][   T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   82.321370][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   82.321958][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   82.322224][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   82.322720][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   82.323028][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   83.064711][ T5831] Bluetooth: hci3: command tx timeout
[   84.184911][ T5831] Bluetooth: hci4: command tx timeout
[   84.345421][ T5831] Bluetooth: hci5: command tx timeout
[   85.144746][ T5831] Bluetooth: hci3: command tx timeout
[   86.264890][ T5831] Bluetooth: hci4: command tx timeout
[   86.424603][ T5831] Bluetooth: hci5: command tx timeout
[   87.238017][ T5831] Bluetooth: hci3: command tx timeout
[   88.344855][ T5831] Bluetooth: hci4: command tx timeout
[   88.504667][ T5831] Bluetooth: hci5: command tx timeout
[   89.304741][ T5831] Bluetooth: hci3: command tx timeout
[   90.424835][ T5831] Bluetooth: hci4: command tx timeout
[   90.584747][ T5831] Bluetooth: hci5: command tx timeout
[  132.589084][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.589145][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  142.028139][   T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  142.028626][   T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  142.028899][   T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  142.029372][   T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  142.029946][   T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  143.271231][   T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  143.271770][   T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  143.272090][   T54] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  143.272593][   T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  143.272944][   T54] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  143.296792][ T5831] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  143.297597][ T5831] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  143.297906][ T5831] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  143.298411][ T5831] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  143.298775][ T5831] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  144.104775][ T5831] Bluetooth: hci6: command tx timeout
[  145.304675][   T54] Bluetooth: hci7: command tx timeout
[  145.305316][ T5831] Bluetooth: hci8: command tx timeout
[  146.184816][ T5831] Bluetooth: hci6: command tx timeout
[  147.384930][   T54] Bluetooth: hci7: command tx timeout
[  147.385352][ T5831] Bluetooth: hci8: command tx timeout
[  148.264636][ T5831] Bluetooth: hci6: command tx timeout
[  149.464788][   T54] Bluetooth: hci7: command tx timeout
[  149.465369][ T5831] Bluetooth: hci8: command tx timeout
[  150.357008][ T5831] Bluetooth: hci6: command tx timeout
[  151.544794][   T54] Bluetooth: hci7: command tx timeout
[  151.544849][ T5831] Bluetooth: hci8: command tx timeout
[  171.524512][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
[  171.524530][    C0] rcu: 	0-....: (10504 ticks this GP) idle=f814/1/0x4000000000000000 softirq=15272/15274 fqs=4691
[  171.524826][    C0] rcu: 	         hardirqs   softirqs   csw/system
[  171.524833][    C0] rcu: 	 number:   918462          0            0
[  171.524842][    C0] rcu: 	cputime:    24474      27995          102   ==> 52470(ms)
[  171.524851][    C0] rcu: 	(t=10500 jiffies g=7565 q=2431 ncpus=2)
[  171.524867][    C0] CPU: 0 UID: 0 PID: 6002 Comm: syz.1.34 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  171.524880][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  171.524887][    C0] RIP: 0010:console_flush_all+0x7f7/0xc40
[  171.524906][    C0] Code: 48 21 c3 0f 85 e9 01 00 00 e8 75 e7 1e 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 66 e7 1e 00 eb 06 e8 5f e7 1e 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 8a 0a 82 00 48 8b 1b 48 8b 44 24
[  171.524917][    C0] RSP: 0018:ffffc90000007620 EFLAGS: 00000246
[  171.524928][    C0] RAX: 1ffffffff1d36927 RBX: ffffffff8e9b4938 RCX: ffff888106ebb980
[  171.524936][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  171.524943][    C0] RBP: ffffc90000007770 R08: ffffffff8fa1e9f7 R09: 1ffffffff1f43d3e
[  171.524951][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d3f R12: dffffc0000000000
[  171.524959][    C0] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8e9b48e0
[  171.524966][    C0] FS:  00007efc966486c0(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
[  171.524984][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  171.524991][    C0] CR2: 0000000000000000 CR3: 000000010b2d0000 CR4: 00000000000006f0
[  171.525030][    C0] Call Trace:
[  171.525036][    C0]  <IRQ>
[  171.525045][    C0]  ? console_flush_all+0x13a/0xc40
[  171.525067][    C0]  ? __pfx_console_flush_all+0x10/0x10
[  171.525093][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  171.525113][    C0]  console_unlock+0xc4/0x270
[  171.525129][    C0]  ? __pfx_console_unlock+0x10/0x10
[  171.525147][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  171.525166][    C0]  vprintk_emit+0x5b7/0x7a0
[  171.525183][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[  171.525194][    C0]  ? irq_work_single+0x1ac/0x240
[  171.525210][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  171.525228][    C0]  ? __irq_exit_rcu+0xd8/0x1f0
[  171.525247][    C0]  _printk+0xcf/0x120
[  171.525268][    C0]  ? __pfx__printk+0x10/0x10
[  171.525294][    C0]  clocksource_watchdog+0xdca/0x11c0
[  171.525307][    C0]  ? __lock_acquire+0xab9/0xd20
[  171.525332][    C0]  ? __pfx_clocksource_watchdog+0x10/0x10
[  171.525345][    C0]  ? __irq_exit_rcu+0xd8/0x1f0
[  171.525363][    C0]  call_timer_fn+0x17e/0x5f0
[  171.525420][    C0]  ? __pfx_clocksource_watchdog+0x10/0x10
[  171.525431][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  171.525444][    C0]  ? call_timer_fn+0xbe/0x5f0
[  171.525455][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  171.525470][    C0]  ? __pfx_clocksource_watchdog+0x10/0x10
[  171.525486][    C0]  ? __pfx_clocksource_watchdog+0x10/0x10
[  171.525498][    C0]  ? __pfx_clocksource_watchdog+0x10/0x10
[  171.525512][    C0]  __run_timer_base+0x61a/0x860
[  171.525527][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  171.525556][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  171.525587][    C0]  run_timer_softirq+0x67/0x180
[  171.525605][    C0]  handle_softirqs+0x286/0x870
[  171.525621][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  171.525639][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  171.525651][    C0]  ? irq_work_single+0x1ac/0x240
[  171.525666][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  171.525684][    C0]  __irq_exit_rcu+0xca/0x1f0
[  171.525696][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  171.525713][    C0]  ? rcu_is_watching+0x15/0xb0
[  171.525728][    C0]  irq_exit_rcu+0x9/0x30
[  171.525739][    C0]  sysvec_irq_work+0xa3/0xc0
[  171.525751][    C0]  </IRQ>
[  171.525754][    C0]  <TASK>
[  171.525759][    C0]  asm_sysvec_irq_work+0x1a/0x20
[  171.525770][    C0] RIP: 0010:kasan_check_range+0x9f/0x2c0
[  171.525783][    C0] Code: 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 41 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 <0f> 85 de 01 00 00 49 ff c3 48 ff c3 75 ee e9 21 01 00 00 44 89 dd
[  171.525792][    C0] RSP: 0018:ffffc90006027580 EFLAGS: 00000246
[  171.525802][    C0] RAX: ffffffff823aa901 RBX: fffffffffffffffe RCX: ffffffff823aa9b6
[  171.525810][    C0] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffff8880296fd8a8
[  171.525817][    C0] RBP: 0000000000000000 R08: ffff8880296fd8b7 R09: 1ffff110052dfb16
[  171.525824][    C0] R10: dffffc0000000000 R11: ffffed10052dfb15 R12: 0000000000000002
[  171.525831][    C0] R13: 1ffff110052dfb10 R14: ffffed10052dfb17 R15: 1ffff110052dfb15
[  171.525847][    C0]  ? __d_lookup_unhash+0x1a1/0x330
[  171.525862][    C0]  ? __d_lookup_unhash+0x256/0x330
[  171.525888][    C0]  __asan_memset+0x22/0x50
[  171.525904][    C0]  __d_lookup_unhash+0x256/0x330
[  171.525923][    C0]  __d_add+0x46f/0x850
[  171.525939][    C0]  ? d_splice_alias+0xf8/0x330
[  171.525960][    C0]  d_splice_alias+0x111/0x330
[  171.525984][    C0]  __lookup_slow+0x297/0x3d0
[  171.526003][    C0]  ? __pfx___lookup_slow+0x10/0x10
[  171.526033][    C0]  ? down_read+0x1ad/0x2e0
[  171.526051][    C0]  lookup_slow+0x53/0x70
[  171.526067][    C0]  walk_component+0x2d2/0x400
[  171.526080][    C0]  ? path_lookupat+0x156/0x430
[  171.526097][    C0]  path_lookupat+0x163/0x430
[  171.526118][    C0]  do_o_path+0x97/0x1f0
[  171.526134][    C0]  ? __pfx_do_o_path+0x10/0x10
[  171.526157][    C0]  path_openat+0x311f/0x3830
[  171.526176][    C0]  ? trace_call_bpf+0xb7/0x850
[  171.526190][    C0]  ? trace_call_bpf+0xb7/0x850
[  171.526202][    C0]  ? trace_call_bpf+0x5ba/0x850
[  171.526213][    C0]  ? trace_call_bpf+0xb7/0x850
[  171.526235][    C0]  ? kasan_save_track+0x4f/0x80
[  171.526245][    C0]  ? kasan_save_track+0x3e/0x80
[  171.526257][    C0]  ? __pfx_path_openat+0x10/0x10
[  171.526272][    C0]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  171.526289][    C0]  ? perf_trace_preemptirq_template+0x280/0x340
[  171.526316][    C0]  do_filp_open+0x1fa/0x410
[  171.526330][    C0]  ? __lock_acquire+0xab9/0xd20
[  171.526344][    C0]  ? __pfx_do_filp_open+0x10/0x10
[  171.526405][    C0]  ? _raw_spin_unlock+0x28/0x50
[  171.526419][    C0]  ? alloc_fd+0x64c/0x6c0
[  171.526443][    C0]  do_sys_openat2+0x121/0x1c0
[  171.526461][    C0]  ? __pfx_do_sys_openat2+0x10/0x10
[  171.526479][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  171.526503][    C0]  __x64_sys_openat+0x138/0x170
[  171.526523][    C0]  do_syscall_64+0xfa/0x3b0
[  171.526539][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.526550][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  171.526565][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.526576][    C0] RIP: 0033:0x7efc9578e9a9
[  171.526587][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  171.526595][    C0] RSP: 002b:00007efc96648038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  171.526606][    C0] RAX: ffffffffffffffda RBX: 00007efc959b5fa0 RCX: 00007efc9578e9a9
[  171.526613][    C0] RDX: 0000000000200002 RSI: 0000200000000440 RDI: ffffffffffffff9c
[  171.526621][    C0] RBP: 00007efc95810d69 R08: 0000000000000000 R09: 0000000000000000
[  171.526628][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  171.526634][    C0] R13: 0000000000000000 R14: 00007efc959b5fa0 R15: 00007ffc930deb58
[  171.526657][    C0]  </TASK>
[  180.748175][ T5831] Bluetooth: hci2: command 0x0406 tx timeout
[  194.036913][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  194.036966][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  199.150352][   T18] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 13261 jiffies s: 1449 root: 0x1/.
[  199.150400][   T18] rcu: blocking rcu_node structures (internal RCU debug):
[  199.150415][   T18] Sending NMI from CPU 1 to CPUs 0:
[  199.150483][    C0] NMI backtrace for cpu 0
[  199.150499][    C0] CPU: 0 UID: 0 PID: 6002 Comm: syz.1.34 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  199.150514][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  199.150521][    C0] RIP: 0010:native_apic_msr_eoi+0xf/0x20
[  199.150542][    C0] Code: f8 c3 cc cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa b9 0b 08 00 00 31 c0 31 d2 0f 30 <e9> 8c 24 00 0a cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90
[  199.150552][    C0] RSP: 0018:ffffc90000007540 EFLAGS: 00000046
[  199.150570][    C0] RAX: 0000000000000000 RBX: ffffc90000007578 RCX: 000000000000080b
[  199.150578][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  199.150585][    C0] RBP: 0000000000000000 R08: ffff88804b023b0f R09: 1ffff11009604761
[  199.150592][    C0] R10: dffffc0000000000 R11: ffffed1009604762 R12: 0000000000000000
[  199.150600][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  199.150607][    C0] FS:  00007efc966486c0(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
[  199.150616][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  199.150624][    C0] CR2: 0000000000000000 CR3: 000000010b2d0000 CR4: 00000000000006f0
[  199.150658][    C0] Call Trace:
[  199.150665][    C0]  <IRQ>
[  199.150670][    C0]  __sysvec_irq_work+0x11/0x3d0
[  199.150683][    C0]  sysvec_irq_work+0x4f/0xc0
[  199.150696][    C0]  asm_sysvec_irq_work+0x1a/0x20
[  199.150708][    C0] RIP: 0010:console_flush_all+0x7f7/0xc40
[  199.150723][    C0] Code: 48 21 c3 0f 85 e9 01 00 00 e8 75 e7 1e 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 66 e7 1e 00 eb 06 e8 5f e7 1e 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 8a 0a 82 00 48 8b 1b 48 8b 44 24
[  199.150732][    C0] RSP: 0018:ffffc90000007620 EFLAGS: 00000246
[  199.150741][    C0] RAX: 1ffffffff1d902ff RBX: ffffffff8ec817f8 RCX: ffff888106ebb980
[  199.150749][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  199.150756][    C0] RBP: ffffc90000007770 R08: ffffffff8fa1e9f7 R09: 1ffffffff1f43d3e
[  199.150764][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d3f R12: dffffc0000000000
[  199.150771][    C0] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8ec817a0
[  199.150786][    C0]  ? console_flush_all+0x13a/0xc40
[  199.150804][    C0]  ? __pfx_console_flush_all+0x10/0x10
[  199.150821][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  199.150839][    C0]  console_unlock+0xc4/0x270
[  199.150854][    C0]  ? __pfx_console_unlock+0x10/0x10
[  199.150868][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  199.150885][    C0]  vprintk_emit+0x5b7/0x7a0
[  199.150900][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[  199.150913][    C0]  ? irq_work_single+0x1ac/0x240
[  199.150926][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  199.150943][    C0]  ? __irq_exit_rcu+0xd8/0x1f0
[  199.150958][    C0]  _printk+0xcf/0x120
[  199.150975][    C0]  ? __pfx__printk+0x10/0x10
[  199.150994][    C0]  clocksource_watchdog+0xdca/0x11c0
[  199.151006][    C0]  ? __lock_acquire+0xab9/0xd20
[  199.151022][    C0]  ? __pfx_clocksource_watchdog+0x10/0x10
[  199.151078][    C0]  ? __irq_exit_rcu+0xd8/0x1f0
[  199.151093][    C0]  call_timer_fn+0x17e/0x5f0
[  199.151105][    C0]  ? __pfx_clocksource_watchdog+0x10/0x10
[  199.151116][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  199.151129][    C0]  ? call_timer_fn+0xbe/0x5f0
[  199.151139][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  199.151152][    C0]  ? __pfx_clocksource_watchdog+0x10/0x10
[  199.151165][    C0]  ? __pfx_clocksource_watchdog+0x10/0x10
[  199.151176][    C0]  ? __pfx_clocksource_watchdog+0x10/0x10
[  199.151188][    C0]  __run_timer_base+0x61a/0x860
[  199.151204][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  199.151224][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  199.151245][    C0]  run_timer_softirq+0x67/0x180
[  199.151261][    C0]  handle_softirqs+0x286/0x870
[  199.151275][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  199.151289][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  199.151300][    C0]  ? irq_work_single+0x1ac/0x240
[  199.151312][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  199.151329][    C0]  __irq_exit_rcu+0xca/0x1f0
[  199.151340][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  199.151355][    C0]  ? rcu_is_watching+0x15/0xb0
[  199.151368][    C0]  irq_exit_rcu+0x9/0x30
[  199.151380][    C0]  sysvec_irq_work+0xa3/0xc0
[  199.151390][    C0]  </IRQ>
[  199.151394][    C0]  <TASK>
[  199.151398][    C0]  asm_sysvec_irq_work+0x1a/0x20
[  199.151408][    C0] RIP: 0010:kasan_check_range+0x9f/0x2c0
[  199.151422][    C0] Code: 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 41 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 <0f> 85 de 01 00 00 49 ff c3 48 ff c3 75 ee e9 21 01 00 00 44 89 dd
[  199.151430][    C0] RSP: 0018:ffffc90006027580 EFLAGS: 00000246
[  199.151439][    C0] RAX: ffffffff823aa901 RBX: fffffffffffffffe RCX: ffffffff823aa9b6
[  199.151446][    C0] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffff8880296fd8a8
[  199.151453][    C0] RBP: 0000000000000000 R08: ffff8880296fd8b7 R09: 1ffff110052dfb16
[  199.151459][    C0] R10: dffffc0000000000 R11: ffffed10052dfb15 R12: 0000000000000002
[  199.151466][    C0] R13: 1ffff110052dfb10 R14: ffffed10052dfb17 R15: 1ffff110052dfb15
[  199.151476][    C0]  ? __d_lookup_unhash+0x1a1/0x330
[  199.151491][    C0]  ? __d_lookup_unhash+0x256/0x330
[  199.151510][    C0]  __asan_memset+0x22/0x50
[  199.151525][    C0]  __d_lookup_unhash+0x256/0x330
[  199.151542][    C0]  __d_add+0x46f/0x850
[  199.151564][    C0]  ? d_splice_alias+0xf8/0x330
[  199.151581][    C0]  d_splice_alias+0x111/0x330
[  199.151598][    C0]  __lookup_slow+0x297/0x3d0
[  199.151614][    C0]  ? __pfx___lookup_slow+0x10/0x10
[  199.151634][    C0]  ? down_read+0x1ad/0x2e0
[  199.151651][    C0]  lookup_slow+0x53/0x70
[  199.151666][    C0]  walk_component+0x2d2/0x400
[  199.151680][    C0]  ? path_lookupat+0x156/0x430
[  199.151695][    C0]  path_lookupat+0x163/0x430
[  199.151712][    C0]  do_o_path+0x97/0x1f0
[  199.151727][    C0]  ? __pfx_do_o_path+0x10/0x10
[  199.151744][    C0]  path_openat+0x311f/0x3830
[  199.151760][    C0]  ? trace_call_bpf+0xb7/0x850
[  199.151773][    C0]  ? trace_call_bpf+0xb7/0x850
[  199.151784][    C0]  ? trace_call_bpf+0x5ba/0x850
[  199.151795][    C0]  ? trace_call_bpf+0xb7/0x850
[  199.151810][    C0]  ? kasan_save_track+0x4f/0x80
[  199.151820][    C0]  ? kasan_save_track+0x3e/0x80
[  199.151830][    C0]  ? __pfx_path_openat+0x10/0x10
[  199.151845][    C0]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  199.151861][    C0]  ? perf_trace_preemptirq_template+0x280/0x340
[  199.151881][    C0]  do_filp_open+0x1fa/0x410
[  199.151896][    C0]  ? __lock_acquire+0xab9/0xd20
[  199.151907][    C0]  ? __pfx_do_filp_open+0x10/0x10
[  199.151929][    C0]  ? _raw_spin_unlock+0x28/0x50
[  199.151941][    C0]  ? alloc_fd+0x64c/0x6c0
[  199.151956][    C0]  do_sys_openat2+0x121/0x1c0
[  199.151972][    C0]  ? __pfx_do_sys_openat2+0x10/0x10
[  199.151987][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  199.152006][    C0]  __x64_sys_openat+0x138/0x170
[  199.152022][    C0]  do_syscall_64+0xfa/0x3b0
[  199.152064][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.152076][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  199.152089][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.152101][    C0] RIP: 0033:0x7efc9578e9a9
[  199.152112][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  199.152121][    C0] RSP: 002b:00007efc96648038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  199.152133][    C0] RAX: ffffffffffffffda RBX: 00007efc959b5fa0 RCX: 00007efc9578e9a9
[  199.152142][    C0] RDX: 0000000000200002 RSI: 0000200000000440 RDI: ffffffffffffff9c
[  199.152150][    C0] RBP: 00007efc95810d69 R08: 0000000000000000 R09: 0000000000000000
[  199.152156][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  199.152163][    C0] R13: 0000000000000000 R14: 00007efc959b5fa0 R15: 00007ffc930deb58
[  199.152177][    C0]  </TASK>
[  202.112635][ T5836] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  202.113433][ T5836] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  202.113905][ T5836] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  202.115225][ T5836] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  202.118758][ T5836] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  204.535312][ T6047] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  204.596486][ T6052] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  204.596944][ T6052] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  204.598020][ T6052] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  204.598759][ T6052] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  204.599955][ T6052] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  204.600912][ T6052] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  204.601368][ T6052] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  204.602384][ T6052] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  204.602915][ T6052] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  206.667222][ T5836] Bluetooth: hci3: command 0x0406 tx timeout
[  206.667256][ T5836] Bluetooth: hci4: command 0x0406 tx timeout
[  206.667272][ T5836] Bluetooth: hci5: command 0x0406 tx timeout
[  213.874801][   T34] INFO: task rcu_tasks_trace:31 blocked for more than 143 seconds.
[  213.874831][   T34]       Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0
[  213.874842][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  213.874876][   T34] task:rcu_tasks_trace state:D stack:26640 pid:31    tgid:31    ppid:2      task_flags:0x208040 flags:0x00004000
[  213.874924][   T34] Call Trace:
[  213.874932][   T34]  <TASK>
[  213.874946][   T34]  __schedule+0x16f5/0x4d00
[  213.874978][   T34]  ? __lock_acquire+0xab9/0xd20
[  213.874998][   T34]  ? schedule+0x165/0x360
[  213.875020][   T34]  ? __pfx___schedule+0x10/0x10
[  213.875051][   T34]  ? schedule+0x91/0x360
[  213.875072][   T34]  schedule+0x165/0x360
[  213.875093][   T34]  schedule_preempt_disabled+0x13/0x30
[  213.875111][   T34]  __mutex_lock+0x724/0xe80
[  213.875133][   T34]  ? __mutex_lock+0x51b/0xe80
[  213.875157][   T34]  ? synchronize_rcu_expedited+0x3b9/0x730
[  213.875179][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  213.875210][   T34]  ? do_raw_spin_unlock+0x4d/0x240
[  213.875234][   T34]  synchronize_rcu_expedited+0x3b9/0x730
[  213.875256][   T34]  ? __pfx_synchronize_rcu_expedited+0x10/0x10
[  213.875290][   T34]  ? __pfx___might_resched+0x10/0x10
[  213.875311][   T34]  ? rcu_tasks_trace_pregp_step+0xe2a/0xe70
[  213.875343][   T34]  synchronize_rcu+0x11a/0x310
[  213.875362][   T34]  ? __pfx_synchronize_rcu+0x10/0x10
[  213.875380][   T34]  ? __pfx_rcu_tasks_trace_pregp_step+0x10/0x10
[  213.875400][   T34]  ? rcu_is_watching+0x15/0xb0
[  213.875418][   T34]  ? trace_contention_end+0x39/0x120
[  213.875438][   T34]  ? __mutex_lock+0x330/0xe80
[  213.875460][   T34]  rcu_tasks_wait_gp+0x490/0xac0
[  213.875489][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  213.875508][   T34]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  213.875526][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  213.875547][   T34]  ? __pfx_rcu_tasks_wait_gp+0x10/0x10
[  213.875569][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  213.875595][   T34]  rcu_tasks_one_gp+0xc19/0xdf0
[  213.875627][   T34]  ? rcu_tasks_one_gp+0xe9/0xdf0
[  213.875661][   T34]  rcu_tasks_kthread+0x195/0x1c0
[  213.875686][   T34]  kthread+0x711/0x8a0
[  213.875710][   T34]  ? __pfx_rcu_tasks_kthread+0x10/0x10
[  213.875732][   T34]  ? __pfx_kthread+0x10/0x10
[  213.875754][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  213.875771][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  213.875789][   T34]  ? __pfx_kthread+0x10/0x10
[  213.875810][   T34]  ret_from_fork+0x3fc/0x770
[  213.875830][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  213.875875][   T34]  ? __switch_to_asm+0x39/0x70
[  213.875896][   T34]  ? __switch_to_asm+0x33/0x70
[  213.875915][   T34]  ? __pfx_kthread+0x10/0x10
[  213.875937][   T34]  ret_from_fork_asm+0x1a/0x30
[  213.875968][   T34]  </TASK>
[  213.875978][   T34] INFO: task kworker/u10:1:36 blocked for more than 143 seconds.
[  213.875989][   T34]       Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0
[  213.875998][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  213.876005][   T34] task:kworker/u10:1   state:D stack:23912 pid:36    tgid:36    ppid:2      task_flags:0x4208060 flags:0x00004000
[  213.876045][   T34] Workqueue: events_unbound bpf_map_free_deferred
[  213.876071][   T34] Call Trace:
[  213.876078][   T34]  <TASK>
[  213.876089][   T34]  __schedule+0x16f5/0x4d00
[  213.876117][   T34]  ? do_raw_spin_lock+0x121/0x290
[  213.876138][   T34]  ? schedule+0x165/0x360
[  213.876157][   T34]  ? __lock_acquire+0xab9/0xd20
[  213.876173][   T34]  ? __pfx___schedule+0x10/0x10
[  213.876198][   T34]  ? schedule+0x91/0x360
[  213.876216][   T34]  schedule+0x165/0x360
[  213.876233][   T34]  synchronize_rcu_expedited+0x5f5/0x730
[  213.876253][   T34]  ? __pfx_synchronize_rcu_expedited+0x10/0x10
[  213.876273][   T34]  ? __pfx_autoremove_wake_function+0x10/0x10
[  213.876307][   T34]  ? __pfx___might_resched+0x10/0x10
[  213.876338][   T34]  synchronize_rcu+0x11a/0x310
[  213.876357][   T34]  ? __pfx_synchronize_rcu+0x10/0x10
[  213.876385][   T34]  sock_hash_free+0x86/0x7d0
[  213.876406][   T34]  ? percpu_ref_put+0x1e/0x230
[  213.876430][   T34]  ? __pfx_sock_hash_free+0x10/0x10
[  213.876448][   T34]  ? percpu_ref_put+0x1e/0x230
[  213.876475][   T34]  bpf_map_free_deferred+0xed/0x110
[  213.876495][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  213.876514][   T34]  process_scheduled_works+0xae1/0x17b0
[  213.876553][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  213.876584][   T34]  worker_thread+0x8a0/0xda0
[  213.876612][   T34]  ? __kthread_parkme+0x7b/0x200
[  213.876645][   T34]  kthread+0x711/0x8a0
[  213.876668][   T34]  ? __pfx_worker_thread+0x10/0x10
[  213.876685][   T34]  ? __pfx_kthread+0x10/0x10
[  213.876707][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  213.876725][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  213.876743][   T34]  ? __pfx_kthread+0x10/0x10
[  213.876764][   T34]  ret_from_fork+0x3fc/0x770
[  213.876784][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  213.876805][   T34]  ? __switch_to_asm+0x39/0x70
[  213.876823][   T34]  ? __switch_to_asm+0x33/0x70
[  213.876842][   T34]  ? __pfx_kthread+0x10/0x10
[  213.876892][   T34]  ret_from_fork_asm+0x1a/0x30
[  213.876922][   T34]  </TASK>
[  213.877006][   T34] INFO: task syz.0.25:5975 blocked for more than 143 seconds.
[  213.877020][   T34]       Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0
[  213.877029][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  213.877039][   T34] task:syz.0.25        state:D stack:25096 pid:5975  tgid:5975  ppid:5835   task_flags:0x400040 flags:0x00004004
[  213.877081][   T34] Call Trace:
[  213.877088][   T34]  <TASK>
[  213.877099][   T34]  __schedule+0x16f5/0x4d00
[  213.877122][   T34]  ? trace_call_bpf+0xb7/0x850
[  213.877145][   T34]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  213.877164][   T34]  ? schedule+0x165/0x360
[  213.877183][   T34]  ? __lock_acquire+0xab9/0xd20
[  213.877199][   T34]  ? __pfx___schedule+0x10/0x10
[  213.877231][   T34]  ? schedule+0x91/0x360
[  213.877253][   T34]  schedule+0x165/0x360
[  213.877274][   T34]  schedule_timeout+0x9a/0x270
[  213.877291][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  213.877318][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  213.877336][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  213.877357][   T34]  __wait_for_common+0x3da/0x710
[  213.877389][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  213.877405][   T34]  ? __pfx___wait_for_common+0x10/0x10
[  213.877427][   T34]  ? __raw_spin_lock_init+0x45/0x100
[  213.877449][   T34]  ? __init_swait_queue_head+0xa9/0x150
[  213.877472][   T34]  wait_for_completion_state+0x1c/0x40
[  213.877490][   T34]  __wait_rcu_gp+0x24c/0x280
[  213.877515][   T34]  synchronize_rcu_tasks_generic+0x132/0x220
[  213.877536][   T34]  ? __pfx_synchronize_rcu_tasks_generic+0x10/0x10
[  213.877555][   T34]  ? rcu_read_lock_any_held+0xb3/0x120
[  213.877572][   T34]  ? __pfx_call_rcu_tasks_trace+0x10/0x10
[  213.877592][   T34]  ? __pfx_wakeme_after_rcu+0x10/0x10
[  213.877629][   T34]  perf_trace_event_unreg+0xbe/0x1b0
[  213.877654][   T34]  perf_trace_destroy+0xa4/0x150
[  213.877672][   T34]  ? __pfx_tp_perf_event_destroy+0x10/0x10
[  213.877691][   T34]  __free_event+0x316/0x7b0
[  213.877709][   T34]  ? __pfx_perf_release+0x10/0x10
[  213.877729][   T34]  perf_event_release_kernel+0x45b/0x510
[  213.877746][   T34]  ? __pfx_perf_release+0x10/0x10
[  213.877766][   T34]  perf_release+0x38/0x50
[  213.877786][   T34]  __fput+0x44c/0xa70
[  213.877815][   T34]  task_work_run+0x1d4/0x260
[  213.877840][   T34]  ? __pfx_task_work_run+0x10/0x10
[  213.877891][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  213.877912][   T34]  exit_to_user_mode_loop+0xec/0x110
[  213.877929][   T34]  do_syscall_64+0x2bd/0x3b0
[  213.877950][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.877966][   T34]  ? asm_sysvec_call_function_single+0x1a/0x20
[  213.877986][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.878002][   T34] RIP: 0033:0x7f66b2f8e9a9
[  213.878016][   T34] RSP: 002b:00007ffefd170818 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  213.878036][   T34] RAX: 0000000000000000 RBX: 00007f66b31b7ba0 RCX: 00007f66b2f8e9a9
[  213.878048][   T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  213.878059][   T34] RBP: 00007f66b31b7ba0 R08: 0000000000000000 R09: 00000028fd170b0f
[  213.878070][   T34] R10: 00007f66b31b7ac0 R11: 0000000000000246 R12: 00000000000103e8
[  213.878082][   T34] R13: 00007f66b31b6080 R14: ffffffffffffffff R15: 00007ffefd170930
[  213.878107][   T34]  </TASK>
[  213.878115][   T34] INFO: task syz.1.34:6001 blocked for more than 143 seconds.
[  213.878126][   T34]       Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0
[  213.878136][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  213.878145][   T34] task:syz.1.34        state:D stack:25096 pid:6001  tgid:6001  ppid:5828   task_flags:0x400040 flags:0x00004004
[  213.878187][   T34] Call Trace:
[  213.878194][   T34]  <TASK>
[  213.878206][   T34]  __schedule+0x16f5/0x4d00
[  213.878233][   T34]  ? do_raw_spin_lock+0x121/0x290
[  213.878256][   T34]  ? schedule+0x165/0x360
[  213.878275][   T34]  ? __lock_acquire+0xab9/0xd20
[  213.878291][   T34]  ? __pfx___schedule+0x10/0x10
[  213.878322][   T34]  ? schedule+0x91/0x360
[  213.878342][   T34]  schedule+0x165/0x360
[  213.878363][   T34]  synchronize_rcu_expedited+0x5f5/0x730
[  213.878384][   T34]  ? __pfx_synchronize_rcu_expedited+0x10/0x10
[  213.878403][   T34]  ? __pfx_autoremove_wake_function+0x10/0x10
[  213.878430][   T34]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  213.878455][   T34]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  213.878478][   T34]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  213.878505][   T34]  packet_release+0xa05/0xce0
[  213.878528][   T34]  ? __pfx_packet_release+0x10/0x10
[  213.878543][   T34]  ? down_write+0x162/0x1f0
[  213.878574][   T34]  sock_close+0xc3/0x240
[  213.878595][   T34]  ? __pfx_sock_close+0x10/0x10
[  213.878614][   T34]  __fput+0x44c/0xa70
[  213.878647][   T34]  task_work_run+0x1d4/0x260
[  213.878671][   T34]  ? __pfx_task_work_run+0x10/0x10
[  213.878696][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  213.878716][   T34]  exit_to_user_mode_loop+0xec/0x110
[  213.878732][   T34]  do_syscall_64+0x2bd/0x3b0
[  213.878753][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.878768][   T34]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  213.878787][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.878802][   T34] RIP: 0033:0x7efc9578e9a9
[  213.878815][   T34] RSP: 002b:00007ffc930decb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  213.878834][   T34] RAX: 0000000000000000 RBX: 00007efc959b7ba0 RCX: 00007efc9578e9a9
[  213.878846][   T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  213.878887][   T34] RBP: 00007efc959b7ba0 R08: 00000000000001b4 R09: 00000018930defaf
[  213.878899][   T34] R10: 00007efc959b7ac0 R11: 0000000000000246 R12: 0000000000010643
[  213.878911][   T34] R13: 00007efc959b6080 R14: ffffffffffffffff R15: 00007ffc930dedd0
[  213.878936][   T34]  </TASK>
[  213.878945][   T34] INFO: task syz.2.33:6005 blocked for more than 143 seconds.
[  213.878956][   T34]       Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0
[  213.878966][   T34]       Blocked by coredump.
[  213.878974][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  213.878982][   T34] task:syz.2.33        state:D stack:24528 pid:6005  tgid:6003  ppid:5833   task_flags:0x40054c flags:0x00004002
[  213.879024][   T34] Call Trace:
[  213.879031][   T34]  <TASK>
[  213.879043][   T34]  __schedule+0x16f5/0x4d00
[  213.879073][   T34]  ? do_raw_spin_lock+0x121/0x290
[  213.879094][   T34]  ? schedule+0x165/0x360
[  213.879114][   T34]  ? __lock_acquire+0xab9/0xd20
[  213.879130][   T34]  ? __pfx___schedule+0x10/0x10
[  213.879160][   T34]  ? schedule+0x91/0x360
[  213.879181][   T34]  schedule+0x165/0x360
[  213.879199][   T34]  ? __pfx_tun_chr_close+0x10/0x10
[  213.879222][   T34]  synchronize_rcu_expedited+0x583/0x730
[  213.879243][   T34]  ? __pfx_synchronize_rcu_expedited+0x10/0x10
[  213.879270][   T34]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  213.879292][   T34]  ? __pfx_wait_rcu_exp_gp+0x10/0x10
[  213.879311][   T34]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  213.879332][   T34]  ? __pfx_autoremove_wake_function+0x10/0x10
[  213.879370][   T34]  ? gro_cleanup+0x504/0x640
[  213.879386][   T34]  ? __pfx_tun_chr_close+0x10/0x10
[  213.879408][   T34]  ? __pfx_tun_chr_close+0x10/0x10
[  213.879430][   T34]  __tun_detach+0x1fc/0x1560
[  213.879456][   T34]  ? __pfx_tun_chr_close+0x10/0x10
[  213.879477][   T34]  tun_chr_close+0x10a/0x1c0
[  213.879500][   T34]  __fput+0x44c/0xa70
[  213.879528][   T34]  task_work_run+0x1d4/0x260
[  213.879552][   T34]  ? __pfx_task_work_run+0x10/0x10
[  213.879582][   T34]  do_exit+0x6b5/0x22e0
[  213.879608][   T34]  ? do_raw_spin_lock+0x121/0x290
[  213.879629][   T34]  ? __pfx_do_exit+0x10/0x10
[  213.879654][   T34]  ? migrate_enable+0x29c/0x3c0
[  213.879686][   T34]  do_group_exit+0x21c/0x2d0
[  213.879708][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  213.879729][   T34]  get_signal+0x1286/0x1340
[  213.879763][   T34]  arch_do_signal_or_restart+0x9a/0x750
[  213.879785][   T34]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  213.879808][   T34]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  213.879835][   T34]  ? __fget_files+0x2a/0x420
[  213.879882][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  213.879903][   T34]  exit_to_user_mode_loop+0x75/0x110
[  213.879920][   T34]  do_syscall_64+0x2bd/0x3b0
[  213.879939][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  213.879958][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.879973][   T34]  ? exc_page_fault+0x9f/0xf0
[  213.879993][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.880009][   T34] RIP: 0033:0x7f99ae18e9a9
[  213.880022][   T34] RSP: 002b:00007f99af0b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  213.880041][   T34] RAX: 0000000000000000 RBX: 00007f99ae3b6080 RCX: 00007f99ae18e9a9
[  213.880052][   T34] RDX: 0000200000000080 RSI: 0000000000008914 RDI: 0000000000000005
[  213.880063][   T34] RBP: 00007f99ae210d69 R08: 0000000000000000 R09: 0000000000000000
[  213.880074][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  213.880084][   T34] R13: 0000000000000000 R14: 00007f99ae3b6080 R15: 00007fff01313e08
[  213.880109][   T34]  </TASK>
[  213.880128][   T34] 
[  213.880128][   T34] Showing all locks held in the system:
[  213.880137][   T34] 3 locks held by kworker/0:1/10:
[  213.880148][   T34]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  213.880200][   T34]  #1: ffffc900000d7bc0 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  213.880251][   T34]  #2: ffffffff8dfe4850 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_lock_wait+0xff/0x210
[  213.880303][   T34] 2 locks held by rcu_tasks_trace/31:
[  213.880313][   T34]  #0: ffffffff8e13fe10 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{4:4}, at: rcu_tasks_one_gp+0xaf9/0xdf0
[  213.880367][   T34]  #1: ffffffff8e144bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  213.880419][   T34] 1 lock held by khungtaskd/34:
[  213.880429][   T34]  #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  213.880484][   T34] 2 locks held by kworker/u10:1/36:
[  213.880493][   T34]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  213.880544][   T34]  #1: ffffc900006afbc0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  213.880596][   T34] 6 locks held by kworker/u11:0/54:
[  213.880606][   T34]  #0: ffff888110216148 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  213.880663][   T34]  #1: ffffc900007cfbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  213.880714][   T34]  #2: ffff88810ac10dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  213.880765][   T34]  #3: ffff88810ac100b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  213.880820][   T34]  #4: ffffffff8f685008 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  213.880895][   T34]  #5: ffff888110214338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  213.880970][   T34] 3 locks held by kworker/u11:1/5219:
[  213.880980][   T34]  #0: ffff888112058148 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  213.881030][   T34]  #1: ffffc90021257bc0 ((work_completion)(&hdev->error_reset)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  213.881081][   T34]  #2: ffff888110394dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_error_reset+0x159/0x3e0
[  213.881135][   T34] 2 locks held by getty/5658:
[  213.881145][   T34]  #0: ffff8881086e90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  213.881194][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  213.881246][   T34] 3 locks held by kworker/u8:2/5699:
[  213.881256][   T34]  #0: ffff88802224e148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  213.881308][   T34]  #1: ffffc90002ecfbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  213.881359][   T34]  #2: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  213.881409][   T34] 4 locks held by kworker/u11:2/5831:
[  213.881419][   T34]  #0: ffff888114aa2948 ((wq_completion)hci9#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  213.881476][   T34]  #1: ffffc90003e5fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  213.881526][   T34]  #2: ffff8880653280b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0
[  213.881578][   T34]  #3: ffffffff8f685008 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0
[  213.881637][   T34] 4 locks held by kworker/u11:4/5838:
[  213.881648][   T34]  #0: ffff88811e084948 ((wq_completion)hci10#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  213.881704][   T34]  #1: ffffc90003ebfbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  213.881753][   T34]  #2: ffff88806bbe00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0
[  213.881805][   T34]  #3: ffffffff8f685008 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0
[  213.881886][   T34] 3 locks held by kworker/1:4/5892:
[  213.881896][   T34]  #0: ffff88801a481d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  213.881948][   T34]  #1: ffffc9000456fbc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  213.881998][   T34]  #2: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf00
[  213.882048][   T34] 1 lock held by syz.0.25/5975:
[  213.882058][   T34]  #0: ffffffff8e1a2ca8 (event_mutex){+.+.}-{4:4}, at: perf_trace_destroy+0x2e/0x150
[  213.882107][   T34] 1 lock held by syz.1.34/6001:
[  213.882117][   T34]  #0: ffff8881254d4408 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  213.882176][   T34] 6 locks held by syz.1.34/6002:
[  213.882186][   T34] 2 locks held by syz.2.33/6005:
[  213.882196][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  213.882250][   T34]  #1: ffffffff8e144bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  213.882303][   T34] 1 lock held by syz-executor/6010:
[  213.882313][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  213.882364][   T34] 1 lock held by syz-executor/6015:
[  213.882374][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  213.882424][   T34] 1 lock held by syz-executor/6018:
[  213.882434][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  213.882486][   T34] 1 lock held by dhcpcd/6020:
[  213.882496][   T34]  #0: ffff8881109bc258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  213.882548][   T34] 1 lock held by dhcpcd/6021:
[  213.882558][   T34]  #0: ffff8881109ba258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  213.882609][   T34] 1 lock held by dhcpcd/6022:
[  213.882619][   T34]  #0: ffff88812f6e4258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  213.882677][   T34] 1 lock held by dhcpcd/6023:
[  213.882686][   T34]  #0: ffff888031240258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  213.882737][   T34] 1 lock held by dhcpcd/6024:
[  213.882747][   T34]  #0: ffff88812f746258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  213.882798][   T34] 1 lock held by dhcpcd/6025:
[  213.882808][   T34]  #0: ffff888111cb6258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  213.882885][   T34] 1 lock held by syz-executor/6027:
[  213.882895][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  213.882947][   T34] 1 lock held by syz-executor/6034:
[  213.882957][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  213.883008][   T34] 1 lock held by syz-executor/6035:
[  213.883018][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  213.883070][   T34] 1 lock held by syz-executor/6039:
[  213.883080][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  213.883132][   T34] 1 lock held by syz-executor/6045:
[  213.883142][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  213.883193][   T34] 5 locks held by kworker/u11:5/6047:
[  213.883203][   T34]  #0: ffff88802f2a3148 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  213.883254][   T34]  #1: ffffc900061efbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  213.883305][   T34]  #2: ffff888110390dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  213.883356][   T34]  #3: ffff8881103900b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  213.883409][   T34]  #4: ffffffff8f685008 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  213.883458][   T34] 1 lock held by syz-executor/6048:
[  213.883468][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  213.883520][   T34] 5 locks held by kworker/u11:6/6050:
[  213.883530][   T34]  #0: ffff888129531948 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  213.883581][   T34]  #1: ffffc9000621fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  213.883636][   T34]  #2: ffff88802e1d4dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  213.883688][   T34]  #3: ffff88802e1d40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  213.883742][   T34]  #4: ffffffff8f685008 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  213.883791][   T34] 5 locks held by kworker/u11:7/6051:
[  213.883801][   T34]  #0: ffff888033878948 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  213.883876][   T34]  #1: ffffc9000622fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  213.883928][   T34]  #2: ffff88802f150dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  213.883977][   T34]  #3: ffff88802f1500b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  213.884031][   T34]  #4: ffffffff8f685008 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  213.884079][   T34] 4 locks held by kworker/u11:8/6052:
[  213.884090][   T34]  #0: ffff888125a0e948 ((wq_completion)hci11#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  213.884146][   T34]  #1: ffffc9000623fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  213.884196][   T34]  #2: ffff88806bbe40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0
[  213.884248][   T34]  #3: ffffffff8f685008 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0
[  213.884301][   T34] 
[  213.884308][   T34] =============================================
[  213.884308][   T34] 
[  213.884317][   T34] NMI backtrace for cpu 1
[  213.884326][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  213.884340][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  213.884348][   T34] Call Trace:
[  213.884352][   T34]  <TASK>
[  213.884357][   T34]  dump_stack_lvl+0x189/0x250
[  213.884375][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  213.884388][   T34]  ? __pfx__printk+0x10/0x10
[  213.884410][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  213.884426][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  213.884438][   T34]  ? _printk+0xcf/0x120
[  213.884476][   T34]  ? __pfx__printk+0x10/0x10
[  213.884494][   T34]  ? debug_show_all_locks+0x2e/0x180
[  213.884508][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  213.884522][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  213.884537][   T34]  watchdog+0xfee/0x1030
[  213.884551][   T34]  ? watchdog+0x1de/0x1030
[  213.884567][   T34]  kthread+0x711/0x8a0
[  213.884584][   T34]  ? __pfx_watchdog+0x10/0x10
[  213.884595][   T34]  ? __pfx_kthread+0x10/0x10
[  213.884612][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  213.884626][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  213.884646][   T34]  ? __pfx_kthread+0x10/0x10
[  213.884662][   T34]  ret_from_fork+0x3fc/0x770
[  213.884677][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  213.884693][   T34]  ? __switch_to_asm+0x39/0x70
[  213.884708][   T34]  ? __switch_to_asm+0x33/0x70
[  213.884722][   T34]  ? __pfx_kthread+0x10/0x10
[  213.884738][   T34]  ret_from_fork_asm+0x1a/0x30
[  213.884764][   T34]  </TASK>
[  213.885026][   T34] Sending NMI from CPU 1 to CPUs 0:
[  213.885086][    C0] NMI backtrace for cpu 0
[  213.885095][    C0] CPU: 0 UID: 0 PID: 6002 Comm: syz.1.34 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  213.885103][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  213.885107][    C0] RIP: 0010:native_apic_msr_eoi+0xf/0x20
[  213.885119][    C0] Code: f8 c3 cc cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa b9 0b 08 00 00 31 c0 31 d2 0f 30 <e9> 8c 24 00 0a cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90
[  213.885125][    C0] RSP: 0018:ffffc90000006fc0 EFLAGS: 00000046
[  213.885132][    C0] RAX: 0000000000000000 RBX: ffffc90000007008 RCX: 000000000000080b
[  213.885136][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  213.885140][    C0] RBP: 0000000000000000 R08: ffff88804b023b0f R09: 1ffff11009604761
[  213.885144][    C0] R10: dffffc0000000000 R11: ffffed1009604762 R12: dffffc0000000000
[  213.885149][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  213.885152][    C0] FS:  00007efc966486c0(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
[  213.885158][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  213.885162][    C0] CR2: 0000000000000000 CR3: 000000010b2d0000 CR4: 00000000000006f0
[  213.885191][    C0] Call Trace:
[  213.885197][    C0]  <IRQ>
[  213.885201][    C0]  __sysvec_apic_timer_interrupt+0x45/0x410
[  213.885216][    C0]  sysvec_apic_timer_interrupt+0x52/0xc0
[  213.885231][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  213.885242][    C0] RIP: 0010:vsnprintf+0xe07/0xf00
[  213.885252][    C0] Code: 55 f6 4c 8b 74 24 40 4c 8b 64 24 38 eb 08 e8 e0 63 55 f6 4d 89 f5 31 ff 4c 89 e6 e8 b3 68 55 f6 4d 85 e4 74 33 48 8b 5c 24 20 <49> 39 dd 73 30 e8 bf 63 55 f6 4c 89 e8 48 c1 e8 03 48 b9 00 00 00
[  213.885260][    C0] RSP: 0018:ffffc900000070b0 EFLAGS: 00000206
[  213.885268][    C0] RAX: ffffffff8b6ac51d RBX: ffffc9008000737f RCX: ffff888106ebb980
[  213.885275][    C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 0000000000000000
[  213.885282][    C0] RBP: ffffffff8b8b894c R08: ffffc9000000738d R09: 1ffff92000000e71
[  213.885290][    C0] R10: dffffc0000000000 R11: fffff52000000e72 R12: 000000007fffffff
[  213.885297][    C0] R13: ffffc9000000738e R14: ffffc90000007380 R15: ffffffff8b8b894b
[  213.885307][    C0]  ? vsnprintf+0xdfd/0xf00
[  213.885319][    C0]  sprintf+0xd9/0x120
[  213.885325][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  213.885334][    C0]  ? __pfx_sprintf+0x10/0x10
[  213.885341][    C0]  ? desc_read+0x208/0x3f0
[  213.885349][    C0]  info_print_prefix+0x155/0x310
[  213.885359][    C0]  ? __pfx_info_print_prefix+0x10/0x10
[  213.885367][    C0]  ? _prb_read_valid+0xa7b/0xa90
[  213.885376][    C0]  record_print_text+0x154/0x430
[  213.885385][    C0]  ? __pfx__prb_read_valid+0x10/0x10
[  213.885392][    C0]  ? __pfx_record_print_text+0x10/0x10
[  213.885399][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  213.885407][    C0]  ? lapic_next_event+0x11/0x20
[  213.885413][    C0]  ? clockevents_program_event+0x24d/0x360
[  213.885424][    C0]  printk_get_next_message+0x26d/0x7b0
[  213.885432][    C0]  ? irq_work_single+0x1ac/0x240
[  213.885440][    C0]  ? __pfx_printk_get_next_message+0x10/0x10
[  213.885448][    C0]  ? __irq_exit_rcu+0xd8/0x1f0
[  213.885460][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  213.885470][    C0]  ? console_flush_all+0x476/0xc40
[  213.885479][    C0]  console_flush_all+0x4ca/0xc40
[  213.885487][    C0]  ? console_flush_all+0x861/0xc40
[  213.885495][    C0]  ? console_flush_all+0x13a/0xc40
[  213.885503][    C0]  ? __pfx_console_flush_all+0x10/0x10
[  213.885513][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  213.885522][    C0]  console_unlock+0xc4/0x270
[  213.885530][    C0]  ? __pfx_console_unlock+0x10/0x10
[  213.885538][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  213.885547][    C0]  vprintk_emit+0x5b7/0x7a0
[  213.885554][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[  213.885561][    C0]  ? irq_work_single+0x1ac/0x240
[  213.885567][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  213.885577][    C0]  ? __irq_exit_rcu+0xd8/0x1f0
[  213.885584][    C0]  _printk+0xcf/0x120
[  213.885593][    C0]  ? __pfx__printk+0x10/0x10
[  213.885603][    C0]  clocksource_watchdog+0xdca/0x11c0
[  213.885610][    C0]  ? __lock_acquire+0xab9/0xd20
[  213.885618][    C0]  ? __pfx_clocksource_watchdog+0x10/0x10
[  213.885625][    C0]  ? __irq_exit_rcu+0xd8/0x1f0
[  213.885632][    C0]  call_timer_fn+0x17e/0x5f0
[  213.885639][    C0]  ? __pfx_clocksource_watchdog+0x10/0x10
[  213.885644][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  213.885651][    C0]  ? call_timer_fn+0xbe/0x5f0
[  213.885657][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  213.885663][    C0]  ? __pfx_clocksource_watchdog+0x10/0x10
[  213.885670][    C0]  ? __pfx_clocksource_watchdog+0x10/0x10
[  213.885676][    C0]  ? __pfx_clocksource_watchdog+0x10/0x10
[  213.885683][    C0]  __run_timer_base+0x61a/0x860
[  213.885691][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  213.885702][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  213.885713][    C0]  run_timer_softirq+0x67/0x180
[  213.885722][    C0]  handle_softirqs+0x286/0x870
[  213.885729][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  213.885737][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  213.885743][    C0]  ? irq_work_single+0x1ac/0x240
[  213.885749][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  213.885758][    C0]  __irq_exit_rcu+0xca/0x1f0
[  213.885764][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  213.885771][    C0]  ? rcu_is_watching+0x15/0xb0
[  213.885779][    C0]  irq_exit_rcu+0x9/0x30
[  213.885785][    C0]  sysvec_irq_work+0xa3/0xc0
[  213.885791][    C0]  </IRQ>
[  213.885794][    C0]  <TASK>
[  213.885796][    C0]  asm_sysvec_irq_work+0x1a/0x20
[  213.885802][    C0] RIP: 0010:kasan_check_range+0x9f/0x2c0
[  213.885809][    C0] Code: 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 41 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 <0f> 85 de 01 00 00 49 ff c3 48 ff c3 75 ee e9 21 01 00 00 44 89 dd
[  213.885814][    C0] RSP: 0018:ffffc90006027580 EFLAGS: 00000246
[  213.885819][    C0] RAX: ffffffff823aa901 RBX: fffffffffffffffe RCX: ffffffff823aa9b6
[  213.885824][    C0] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffff8880296fd8a8
[  213.885827][    C0] RBP: 0000000000000000 R08: ffff8880296fd8b7 R09: 1ffff110052dfb16
[  213.885831][    C0] R10: dffffc0000000000 R11: ffffed10052dfb15 R12: 0000000000000002
[  213.885835][    C0] R13: 1ffff110052dfb10 R14: ffffed10052dfb17 R15: 1ffff110052dfb15
[  213.885841][    C0]  ? __d_lookup_unhash+0x1a1/0x330
[  213.885886][    C0]  ? __d_lookup_unhash+0x256/0x330
[  213.885898][    C0]  __asan_memset+0x22/0x50
[  213.885906][    C0]  __d_lookup_unhash+0x256/0x330
[  213.885916][    C0]  __d_add+0x46f/0x850
[  213.885924][    C0]  ? d_splice_alias+0xf8/0x330
[  213.885933][    C0]  d_splice_alias+0x111/0x330
[  213.885942][    C0]  __lookup_slow+0x297/0x3d0
[  213.885950][    C0]  ? __pfx___lookup_slow+0x10/0x10
[  213.885961][    C0]  ? down_read+0x1ad/0x2e0
[  213.885970][    C0]  lookup_slow+0x53/0x70
[  213.885978][    C0]  walk_component+0x2d2/0x400
[  213.885986][    C0]  ? path_lookupat+0x156/0x430
[  213.885994][    C0]  path_lookupat+0x163/0x430
[  213.886003][    C0]  do_o_path+0x97/0x1f0
[  213.886011][    C0]  ? __pfx_do_o_path+0x10/0x10
[  213.886020][    C0]  path_openat+0x311f/0x3830
[  213.886029][    C0]  ? trace_call_bpf+0xb7/0x850
[  213.886036][    C0]  ? trace_call_bpf+0xb7/0x850
[  213.886042][    C0]  ? trace_call_bpf+0x5ba/0x850
[  213.886048][    C0]  ? trace_call_bpf+0xb7/0x850
[  213.886056][    C0]  ? kasan_save_track+0x4f/0x80
[  213.886061][    C0]  ? kasan_save_track+0x3e/0x80
[  213.886066][    C0]  ? __pfx_path_openat+0x10/0x10
[  213.886074][    C0]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  213.886083][    C0]  ? perf_trace_preemptirq_template+0x280/0x340
[  213.886093][    C0]  do_filp_open+0x1fa/0x410
[  213.886101][    C0]  ? __lock_acquire+0xab9/0xd20
[  213.886108][    C0]  ? __pfx_do_filp_open+0x10/0x10
[  213.886120][    C0]  ? _raw_spin_unlock+0x28/0x50
[  213.886126][    C0]  ? alloc_fd+0x64c/0x6c0
[  213.886135][    C0]  do_sys_openat2+0x121/0x1c0
[  213.886144][    C0]  ? __pfx_do_sys_openat2+0x10/0x10
[  213.886152][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  213.886162][    C0]  __x64_sys_openat+0x138/0x170
[  213.886171][    C0]  do_syscall_64+0xfa/0x3b0
[  213.886180][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.886185][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  213.886192][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.886198][    C0] RIP: 0033:0x7efc9578e9a9
[  213.886205][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  213.886209][    C0] RSP: 002b:00007efc96648038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  213.886216][    C0] RAX: ffffffffffffffda RBX: 00007efc959b5fa0 RCX: 00007efc9578e9a9
[  213.886220][    C0] RDX: 0000000000200002 RSI: 0000200000000440 RDI: ffffffffffffff9c
[  213.886224][    C0] RBP: 00007efc95810d69 R08: 0000000000000000 R09: 0000000000000000
[  213.886228][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  213.886232][    C0] R13: 0000000000000000 R14: 00007efc959b5fa0 R15: 00007ffc930deb58
[  213.886239][    C0]  </TASK>
[  213.901341][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  213.901352][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  213.901368][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  213.901373][   T34] Call Trace:
[  213.901377][   T34]  <TASK>
[  213.901381][   T34]  dump_stack_lvl+0x99/0x250
[  213.901393][   T34]  ? __asan_memcpy+0x40/0x70
[  213.901404][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  213.901413][   T34]  ? __pfx__printk+0x10/0x10
[  213.901427][   T34]  panic+0x2db/0x790
[  213.901437][   T34]  ? __pfx_panic+0x10/0x10
[  213.901445][   T34]  ? nmi_backtrace_stall_check+0x433/0x440
[  213.901455][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  213.901462][   T34]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  213.901474][   T34]  watchdog+0x102d/0x1030
[  213.901482][   T34]  ? watchdog+0x1de/0x1030
[  213.901492][   T34]  kthread+0x711/0x8a0
[  213.901503][   T34]  ? __pfx_watchdog+0x10/0x10
[  213.901510][   T34]  ? __pfx_kthread+0x10/0x10
[  213.901520][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  213.901529][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  213.901537][   T34]  ? __pfx_kthread+0x10/0x10
[  213.901547][   T34]  ret_from_fork+0x3fc/0x770
[  213.901557][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  213.901566][   T34]  ? __switch_to_asm+0x39/0x70
[  213.901575][   T34]  ? __switch_to_asm+0x33/0x70
[  213.901583][   T34]  ? __pfx_kthread+0x10/0x10
[  213.901593][   T34]  ret_from_fork_asm+0x1a/0x30
[  213.901607][   T34]  </TASK>
[  213.902286][   T34] Kernel Offset: disabled

VM DIAGNOSIS:
11:29:58  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81680ea6 RBX=0000000000000000 RCX=ffff888106ebb980 RDX=0000000000010100
RSI=0000000000000008 RDI=ffffffff92a52460 RBP=ffffc90000006fd8 RSP=ffffc90000006f40
R8 =ffffffff92a52467 R9 =1ffffffff254a48c R10=dffffc0000000000 R11=fffffbfff254a48d
R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff81680ea7 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007efc966486c0 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000010b2d0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007efc95986478 00007efc95986450 XMM03=00007efc95986488 00007efc95986480
XMM04=00007efc964ed100 00007efc95986440 XMM05=00007efc95986458 00007efc959864a0
XMM06=00007efc95986498 00007efc95986490 XMM07=00007efc95986488 00007efc95986480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007efc95811ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f7b0
R8 =ffff888020b30237 R9 =1ffff11004166046 R10=dffffc0000000000 R11=ffffffff85472aa0
R12=dffffc0000000000 R13=ffffffff99af58d3 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff85472b1c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f307e08df60 CR3=000000010a062000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=00ff000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
