last executing test programs:

1.058188843s ago: executing program 0 (id=364):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000003850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

918.290343ms ago: executing program 1 (id=369):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x2541, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0x40086602, 0x110e22fff2)

529.724796ms ago: executing program 1 (id=370):
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))

529.422371ms ago: executing program 0 (id=371):
r0 = socket$kcm(0xa, 0x2, 0x11)
sendmsg$sock(r0, &(0x7f0000000200)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[@txtime={{0x18, 0x1, 0x51}}], 0x18}, 0x0)

529.191082ms ago: executing program 1 (id=372):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xa8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

469.934343ms ago: executing program 0 (id=373):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880), 0x4000000}, 0x20)

469.442853ms ago: executing program 1 (id=374):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
socket$kcm(0x10, 0x2, 0x10)
recvmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x110}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080))

469.19887ms ago: executing program 1 (id=376):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810)
recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x48000}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

469.02548ms ago: executing program 0 (id=377):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3, 0x1, @perf_bp={0x0, 0x1}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00')
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socket$kcm(0x10, 0x2, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}, 0x100)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080))

389.351756ms ago: executing program 2 (id=378):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x39)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000800)="d2ffdd934517f3e145fa02e086dd", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4)

389.011691ms ago: executing program 1 (id=379):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x9, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x222, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140))
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r4=>0xffffffffffffffff})
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r6, 0x0, 0x60)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r8}, 0x70)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x4, 0x4, 0x9, 0x150, r1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0xff, 0x0, 0x0, 0x0, 0x33b, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b5d, 0x0, @perf_bp={&(0x7f0000000280)}, 0x14105, 0x101, 0xfffffbff, 0x3, 0x8, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0xa9e2}, 0x0, 0xffffffffffffffff, r0, 0x9)
syz_clone(0x40000400, &(0x7f00000003c0), 0x0, &(0x7f00000004c0), &(0x7f00000006c0), &(0x7f0000000700)="0b4d02a7fdd30532c5cc594bd97feb3374c7f19805401738b1b3eeb56f1bac5dd18f1327bcc36e804eeeb13cb69d42c228d7a825a8a0c5e6e9f034420102cd17c8088038ba872963380f697dd08434fb6c7720cc37b37995fc0f035f25792856e5dff8c4ffce94dbbe12cf58b2a5356fc559356ce292cdefb02fb240f0ec67fa92a91564ff6723209b3130f3485ae5d5eff009ce610e12c6fb2a991ec4a9ef580979fdaf9c92e1a5ecb603e0d24ee61e4767e08bedad17d7a56172c0ede3dd0a5a1c66aa17fd54ed0d3a48524f6fe1334ba7fcb8")

318.821472ms ago: executing program 2 (id=380):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xffffff2d, 0x0, 0x0, 0x0, 0x149, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x68)

318.495388ms ago: executing program 2 (id=381):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @func_proto, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x3e, 0x0, 0x1}, 0x28)

318.375636ms ago: executing program 2 (id=382):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x16, &(0x7f0000000300)=@ringbuf={{}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @tail_call]}, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600)={0x4, 0x0, 0x0, 0xfffffffe}, 0x10}, 0x94)

318.156611ms ago: executing program 0 (id=383):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100), 0x120)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = getpid()
r3 = openat$cgroup_procs(r1, &(0x7f0000000940)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000900)=r2, 0x11)

240.718191ms ago: executing program 2 (id=384):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x6, 0x0, &(0x7f0000000000)="259a53f271a7", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x20c2)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r0], 0x9a)

240.415878ms ago: executing program 0 (id=385):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0xc2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0x10000}, 0x14105, 0x2e, 0xfffffbff, 0x9, 0x2, 0x4, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38)

0s ago: executing program 2 (id=386):
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000000), 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x1ff)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="04000000000000000400"/21], 0x50)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x1}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r5, 0x0, '\x00', 0x0, r4, 0x0, 0x5}, 0x48)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$tipc(r8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x4000041)
close(r7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r6, 0x0, 0x7}, 0x18)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4)
perf_event_open$cgroup(0x0, r6, 0xd, r1, 0xf)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r9, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="020a000202000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:23761' (ED25519) to the list of known hosts.
syzkaller login: [   40.856427][ T5762] cgroup: Unknown subsys name 'net'
[   41.004124][ T5762] cgroup: Unknown subsys name 'cpuset'
[   41.007524][ T5762] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.271018][ T5762] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.332042][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.334760][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.337228][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.339733][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.342433][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.366213][ T5220] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.368951][ T5220] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.371514][ T5220] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.375127][ T5220] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.378376][ T5220] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.409169][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.412307][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.414737][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.418070][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.420551][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.569038][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   45.595604][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   45.665357][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   45.697901][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.700436][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.703056][ T5832] bridge_slave_0: entered allmulticast mode
[   45.705652][ T5832] bridge_slave_0: entered promiscuous mode
[   45.709327][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.711503][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.713861][ T5832] bridge_slave_1: entered allmulticast mode
[   45.716378][ T5832] bridge_slave_1: entered promiscuous mode
[   45.738894][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.741161][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.743739][ T5828] bridge_slave_0: entered allmulticast mode
[   45.746416][ T5828] bridge_slave_0: entered promiscuous mode
[   45.749471][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.751910][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.754257][ T5828] bridge_slave_1: entered allmulticast mode
[   45.756933][ T5828] bridge_slave_1: entered promiscuous mode
[   45.790801][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.795400][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.804592][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.806820][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.809208][ T5835] bridge_slave_0: entered allmulticast mode
[   45.812527][ T5835] bridge_slave_0: entered promiscuous mode
[   45.828901][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.832555][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.834829][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.837163][ T5835] bridge_slave_1: entered allmulticast mode
[   45.839818][ T5835] bridge_slave_1: entered promiscuous mode
[   45.845078][ T5832] team0: Port device team_slave_0 added
[   45.848314][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.858092][ T5832] team0: Port device team_slave_1 added
[   45.887585][ T5828] team0: Port device team_slave_0 added
[   45.891158][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.895863][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.906255][ T5828] team0: Port device team_slave_1 added
[   45.914724][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.916895][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.926685][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.950239][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.952658][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.960588][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.965703][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.967883][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.975944][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.981707][ T5835] team0: Port device team_slave_0 added
[   45.987617][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.989997][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.998868][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.003848][ T5835] team0: Port device team_slave_1 added
[   46.031368][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.034452][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.042633][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.061234][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.063883][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.071650][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.080949][ T5832] hsr_slave_0: entered promiscuous mode
[   46.084229][ T5832] hsr_slave_1: entered promiscuous mode
[   46.097663][ T5828] hsr_slave_0: entered promiscuous mode
[   46.099956][ T5828] hsr_slave_1: entered promiscuous mode
[   46.102726][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.105196][ T5828] Cannot create hsr debugfs directory
[   46.149944][ T5835] hsr_slave_0: entered promiscuous mode
[   46.152347][ T5835] hsr_slave_1: entered promiscuous mode
[   46.154440][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.156862][ T5835] Cannot create hsr debugfs directory
[   46.319979][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.333921][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.343314][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.352584][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.369435][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.383984][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.392334][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.403223][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.411512][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.413984][ T5832] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.416670][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.419010][ T5832] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.430439][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.435679][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.444582][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.449039][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.474180][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.476471][ T5828] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.478859][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.481152][ T5828] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.495931][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.498227][ T5835] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.500581][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.502874][ T5835] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.519926][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.534254][ T4408] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.536978][ T4408] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.539462][ T4408] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.542700][ T4408] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.545738][ T4408] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.548257][ T4408] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.567092][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   46.573944][ T4408] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.576239][ T4408] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.587180][ T4408] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.589447][ T4408] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.602472][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.634884][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   46.639190][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.655689][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.657930][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.665032][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   46.695256][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.697582][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.706221][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.708477][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.714163][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.716398][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.731618][ T5835] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   46.735349][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   46.744993][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   46.784654][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.816323][ T5832] veth0_vlan: entered promiscuous mode
[   46.825676][ T5832] veth1_vlan: entered promiscuous mode
[   46.841023][ T5832] veth0_macvtap: entered promiscuous mode
[   46.856379][ T5832] veth1_macvtap: entered promiscuous mode
[   46.860302][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.872416][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.883245][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.891114][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.897919][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.900760][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.906094][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.908802][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.947967][ T5835] veth0_vlan: entered promiscuous mode
[   46.969891][   T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.970451][ T5835] veth1_vlan: entered promiscuous mode
[   46.977585][   T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.986959][ T5828] veth0_vlan: entered promiscuous mode
[   47.001373][ T4408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.003560][ T5828] veth1_vlan: entered promiscuous mode
[   47.004323][ T4408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.017728][ T5835] veth0_macvtap: entered promiscuous mode
[   47.025713][ T5835] veth1_macvtap: entered promiscuous mode
[   47.037882][ T5828] veth0_macvtap: entered promiscuous mode
[   47.045032][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.047987][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.054917][ T5828] veth1_macvtap: entered promiscuous mode
[   47.061352][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.070984][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.076151][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.078847][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.088434][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.091367][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.098402][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.120432][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.120554][ T5891] netlink: 'syz.2.3': attribute type 10 has an invalid length.
[   47.123674][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.123697][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.123707][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.165520][ T5891] team0: Device hsr_slave_0 failed to register rx_handler
[   47.231231][ T4408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.235775][ T4408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.236615][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.240751][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.274356][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.276753][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.301938][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.304407][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.355467][ T5220] Bluetooth: hci0: command tx timeout
[   47.432190][ T5220] Bluetooth: hci1: command tx timeout
[   47.514158][ T5220] Bluetooth: hci2: command tx timeout
[   47.758674][ T5930] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.20'.
[   47.928918][ T5947] Zero length message leads to an empty skb
[   48.618264][ T5979] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   49.076531][ T5993] netlink: 36 bytes leftover after parsing attributes in process `syz.2.48'.
[   49.442863][ T5220] Bluetooth: hci0: command tx timeout
[   49.514843][ T5220] Bluetooth: hci1: command tx timeout
[   49.594072][ T5220] Bluetooth: hci2: command tx timeout
[   50.206989][ T6069] netlink: 'syz.2.83': attribute type 22 has an invalid length.
[   50.313675][ T6073] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.87'.
[   50.691362][ T6098] sctp: [Deprecated]: syz.1.95 (pid 6098) Use of struct sctp_assoc_value in delayed_ack socket option.
[   50.691362][ T6098] Use struct sctp_sack_info instead
[   50.866820][ T6115] netlink: 'syz.2.106': attribute type 3 has an invalid length.
[   50.869343][ T6115] netlink: 132 bytes leftover after parsing attributes in process `syz.2.106'.
[   50.993586][ T6126] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.111'.
[   51.522149][ T5220] Bluetooth: hci0: command tx timeout
[   51.529853][ T6149] netlink: 825 bytes leftover after parsing attributes in process `syz.1.122'.
[   51.537443][ T6149] netlink: 130144 bytes leftover after parsing attributes in process `syz.1.122'.
[   51.591870][ T5220] Bluetooth: hci1: command tx timeout
[   51.681857][ T5220] Bluetooth: hci2: command tx timeout
[   51.737404][ T6163] C: renamed from team_slave_0 (while UP)
[   51.759903][ T6163] netlink: 'syz.0.129': attribute type 3 has an invalid length.
[   51.763273][ T6163] netlink: 'syz.0.129': attribute type 1 has an invalid length.
[   51.765922][ T6163] netlink: 116 bytes leftover after parsing attributes in process `syz.0.129'.
[   51.779282][ T6164] netlink: 132 bytes leftover after parsing attributes in process `syz.1.128'.
[   52.126581][ T6186] netlink: 'syz.1.139': attribute type 11 has an invalid length.
[   52.131895][ T6186] netlink: 132 bytes leftover after parsing attributes in process `syz.1.139'.
[   52.310642][ T6208] netlink: 'syz.0.149': attribute type 39 has an invalid length.
[   52.324053][ T6210] netlink: 'syz.1.150': attribute type 1 has an invalid length.
[   52.555221][ T6224] raw_sendmsg: syz.0.157 forgot to set AF_INET. Fix it!
[   52.599989][    C1] hrtimer: interrupt took 31347 ns
[   53.054023][ T6238] warning: `syz.2.164' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   53.951866][ T5831] Bluetooth: hci1: command tx timeout
[   53.953614][ T5831] Bluetooth: hci2: command tx timeout
[   53.955357][ T5220] Bluetooth: hci0: command tx timeout
[   54.262558][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1540763920 wd_nsec: 1540763589
[   54.350553][ T6250] __nla_validate_parse: 2 callbacks suppressed
[   54.350562][ T6250] netlink: 60 bytes leftover after parsing attributes in process `syz.2.170'.
[   54.359308][ T6251] netlink: 60 bytes leftover after parsing attributes in process `syz.2.170'.
[   54.372942][ T6250] netlink: 60 bytes leftover after parsing attributes in process `syz.2.170'.
[   54.545836][ T6278] netlink: 'syz.0.181': attribute type 21 has an invalid length.
[   54.548879][ T6278] netlink: 'syz.0.181': attribute type 10 has an invalid length.
[   54.551381][ T6278] netlink: 55 bytes leftover after parsing attributes in process `syz.0.181'.
[   54.877594][ T6306] netlink: 'syz.1.195': attribute type 3 has an invalid length.
[   54.891649][ T6306] netlink: 'syz.1.195': attribute type 10 has an invalid length.
[   54.921331][ T5220] Bluetooth: hci1: unexpected event 0x07 length: 15 < 255
[   55.215353][ T6335] netlink: 'syz.1.208': attribute type 10 has an invalid length.
[   55.217815][ T6335] netlink: 40 bytes leftover after parsing attributes in process `syz.1.208'.
[   55.220544][ T6335] dummy0: entered promiscuous mode
[   55.979216][   T24] cfg80211: failed to load regulatory.db
[   56.019043][ T6348] netlink: 'syz.0.214': attribute type 46 has an invalid length.
[   56.210216][ T6371] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   56.212834][ T6371] IPv6: NLM_F_CREATE should be set when creating new route
[   56.215319][ T6371] IPv6: NLM_F_CREATE should be set when creating new route
[   56.217921][ T6371] IPv6: NLM_F_CREATE should be set when creating new route
[   56.542372][ T6419] syz.1.249 uses obsolete (PF_INET,SOCK_PACKET)
[   56.565827][ T6425] netlink: 'syz.0.252': attribute type 3 has an invalid length.
[   56.594847][ T6429] syzkaller1: tun_chr_ioctl cmd 1074025673
[   57.705594][ T6455] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.265'.
[   58.087341][ T6481] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.276'.
[   58.244505][ T6487] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.278'.
[   58.268698][ T6489] netlink: 'syz.2.279': attribute type 21 has an invalid length.
[   58.303427][ T6491] netlink: 'syz.2.280': attribute type 39 has an invalid length.
[   58.325798][ T6491] hsr_slave_0 (unregistering): left promiscuous mode
[   58.867489][ T6510] Driver unsupported XDP return value 0 on prog  (id 102) dev N/A, expect packet loss!
[   59.127006][ T6525] netlink: 'syz.0.297': attribute type 13 has an invalid length.
[   59.129513][ T6525] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.297'.
[   59.388233][ T6533] mac80211_hwsim hwsim7 O3c: renamed from wlan1 (while UP)
[   59.836673][ T6550] netlink: 'syz.1.309': attribute type 9 has an invalid length.
[   59.839418][ T6550] netlink: 204732 bytes leftover after parsing attributes in process `syz.1.309'.
[   59.978534][ T6560] netlink: 'syz.2.314': attribute type 2 has an invalid length.
[   59.985097][ T6560] netlink: 137592 bytes leftover after parsing attributes in process `syz.2.314'.
[   60.197837][ T6577] netlink: 'syz.2.321': attribute type 1 has an invalid length.
[   60.211883][ T6577] netlink: 'syz.2.321': attribute type 4 has an invalid length.
[   60.214315][ T6577] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.321'.
[   60.897509][ T6596] netlink: 196 bytes leftover after parsing attributes in process `syz.2.330'.
[   61.418056][ T6620] netlink: 'syz.2.341': attribute type 10 has an invalid length.
[   61.740893][ T6641] delete_channel: no stack
[   61.777697][ T6646] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.353'.
[   61.849431][ T6653] netlink: 'syz.2.356': attribute type 21 has an invalid length.
[   62.707494][ T6695] netlink: 'syz.1.376': attribute type 3 has an invalid length.
[   62.709985][ T6695] netlink: 167504 bytes leftover after parsing attributes in process `syz.1.376'.
[   62.884960][ T5220] Bluetooth: hci1: unexpected subevent 0x03 length: 150 > 9

VM DIAGNOSIS:
10:46:37  Registers:
info registers vcpu 0

CPU#0
RAX=8d591313807d8100 RBX=0000000000000200 RCX=8d591313807d8100 RDX=0000000000000002
RSI=ffffffff8d998940 RDI=ffffffff8be29f40 RBP=ffffc90000007f50 RSP=ffffc90000007e40
R8 =ffffffff8fa1e9f7 R9 =1ffffffff1f43d3e R10=dffffc0000000000 R11=fffffbfff1f43d3f
R12=000000000000000a R13=0000000000000000 R14=dffffc0000000000 R15=ffffffff8de0c0c0
RIP=ffffffff8185b4c0 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fead3bb5f80 CR3=00000001207e8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=58efa9c41e992afb c6120e61ce09f0ef
XMM02=1ee64ed2e003b6ec a5e1929caffd7909 XMM03=0adde3edc07261a5 d717aded8be06747
XMM04=33e16f4f52483a0d ed54fd17aa661c5a XMM05=b8fca74b33e16f4f 52483a0ded54fd17
XMM06=aa661c5a0adde3ed c07261a5d717aded XMM07=8be067471ee64ed2 e003b6eca5e1929c
XMM08=affd790958efa9c4 1e992afbc6120e61 XMM09=0000000000000000 00007fead3a11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=7f55d11cb9cd2a00 RBX=0000000000000200 RCX=7f55d11cb9cd2a00 RDX=0000000000000002
RSI=ffffffff8d998940 RDI=ffffffff8be29f40 RBP=ffffc900001e0f50 RSP=ffffc900001e0e40
R8 =ffffffff8fa1e9f7 R9 =1ffffffff1f43d3e R10=dffffc0000000000 R11=fffffbfff1f43d3f
R12=000000000000000a R13=0000000000000000 R14=dffffc0000000000 R15=ffffffff8de0c0c0
RIP=ffffffff8185b4c0 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555570376500 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c320921 CR3=00000001207fc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f823d011ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
