last executing test programs:

16.952835505s ago: executing program 1 (id=136):
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080))

16.822830482s ago: executing program 0 (id=139):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5})
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
close(0x4)

16.752453112s ago: executing program 1 (id=140):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000540)="1400000024000b47564cb6288200eb1405000000", 0x14}], 0x1}, 0x4000)
recvmsg$kcm(r0, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x20)

16.702295721s ago: executing program 1 (id=142):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4)
sendmsg$unix(r1, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x48000}, 0x40800)
recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)

16.702119045s ago: executing program 0 (id=143):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="db759469e36512be2770717f865d", 0x0, 0x8, 0x0, 0x0, 0xe8, 0x0, &(0x7f0000000900)="ffff"}, 0x50)

16.641982755s ago: executing program 0 (id=144):
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x30}, [@ldst={0x7, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x6, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080)={0x3}, 0xfffffffffffffc79}, 0x26)

16.641781731s ago: executing program 1 (id=145):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001640)=""/4096, 0x103f}], 0x1, 0x0, 0xffffffffffffff13}, 0x0)

16.580814033s ago: executing program 2 (id=146):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

16.580430263s ago: executing program 0 (id=147):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x2, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x6dd90181, 0x0, 0x0, 0x41100, 0x78, '\x00', 0x0, @fallback=0x6, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)

16.579964686s ago: executing program 1 (id=148):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xc53a}, 0x0, 0x0, 0x7f, 0x2, 0x0, 0xf, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))

16.532935085s ago: executing program 2 (id=149):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r0, 0xf2}, 0x38)

16.532520606s ago: executing program 0 (id=150):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4)
sendmsg$unix(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0)

16.470494168s ago: executing program 2 (id=151):
socket$kcm(0x29, 0x2, 0x0)
r0 = socket$kcm(0x1e, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r1 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r2 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000004c0)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x0, 0x1}}, 0x80, 0x0}, 0x0)

16.470162634s ago: executing program 1 (id=152):
r0 = syz_clone(0x20800000, 0x0, 0x700, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4040000)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x3500000000000000)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000))
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1400000038000b63d25a80648c251bfd07b5e9d151", 0x15}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xf1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1a089, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0}, 0x2018, 0x80000000, 0x0, 0x8, 0x72, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r6 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f00000005c0)=r0, 0x12)
r7 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000040)=0x1, 0x12)

16.469500621s ago: executing program 0 (id=153):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x0, 0x4, 0x0, 0x28)
r1 = socket$kcm(0x15, 0x5, 0x0)
close(r1)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18)
r2 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x0, 0x4, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x1, @perf_bp={&(0x7f0000000200), 0x9bc2030a0a6e679}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x4, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r4 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r4, 0x84, 0x2, &(0x7f0000000000), 0x8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000700)={<r5=>0xffffffffffffffff})
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8943, &(0x7f0000000000)={'wlan1\x00', @random="e80300001000"})
socketpair(0x22, 0xa, 0x25, &(0x7f00000000c0))
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b4000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000440)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

16.469216968s ago: executing program 2 (id=154):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x3, 0x0, 0x4, 0x400, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b08d25a806f8c6394f90524fc602f1a99000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
socketpair(0x29, 0x5, 0x3, &(0x7f0000000000))
r2 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r2, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000041000b05d25a806c8c6394f90324fc60100002000a0002", 0x1b}], 0x1}, 0x0)
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='&\x00')
socketpair(0x2c, 0x800, 0xffffffff, &(0x7f0000000180))
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a)

16.147414382s ago: executing program 2 (id=155):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000007c5e0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x5}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50)

16.127904901s ago: executing program 2 (id=156):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffff8}, 0x90)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0x12)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))

812.435658ms ago: executing program 32 (id=153):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x0, 0x4, 0x0, 0x28)
r1 = socket$kcm(0x15, 0x5, 0x0)
close(r1)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18)
r2 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x0, 0x4, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x1, @perf_bp={&(0x7f0000000200), 0x9bc2030a0a6e679}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x4, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r4 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r4, 0x84, 0x2, &(0x7f0000000000), 0x8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000700)={<r5=>0xffffffffffffffff})
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8943, &(0x7f0000000000)={'wlan1\x00', @random="e80300001000"})
socketpair(0x22, 0xa, 0x25, &(0x7f00000000c0))
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b4000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000440)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

76.021µs ago: executing program 33 (id=152):
r0 = syz_clone(0x20800000, 0x0, 0x700, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4040000)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x3500000000000000)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000))
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1400000038000b63d25a80648c251bfd07b5e9d151", 0x15}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xf1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1a089, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0}, 0x2018, 0x80000000, 0x0, 0x8, 0x72, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r6 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f00000005c0)=r0, 0x12)
r7 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000040)=0x1, 0x12)

0s ago: executing program 34 (id=156):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffff8}, 0x90)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0x12)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:33401' (ED25519) to the list of known hosts.
syzkaller login: [   49.593904][ T5815] cgroup: Unknown subsys name 'net'
[   49.737697][ T5815] cgroup: Unknown subsys name 'cpuset'
[   49.741735][ T5815] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.152990][ T5815] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.197335][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.201277][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.204982][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.208706][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.212113][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.233104][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.237206][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.240563][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.244564][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.248677][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.366654][ T5222] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.370557][ T5222] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.374698][ T5222] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.379270][ T5222] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.382697][ T5222] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.477216][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   55.491581][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   55.634705][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.637911][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.640517][ T5832] bridge_slave_0: entered allmulticast mode
[   55.643418][ T5832] bridge_slave_0: entered promiscuous mode
[   55.648071][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.651097][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.654050][ T5827] bridge_slave_0: entered allmulticast mode
[   55.658398][ T5827] bridge_slave_0: entered promiscuous mode
[   55.663437][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.666899][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.669963][ T5827] bridge_slave_1: entered allmulticast mode
[   55.673834][ T5827] bridge_slave_1: entered promiscuous mode
[   55.690830][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.693853][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.698168][ T5832] bridge_slave_1: entered allmulticast mode
[   55.701935][ T5832] bridge_slave_1: entered promiscuous mode
[   55.755475][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.761486][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.771501][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.776838][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.834397][ T5827] team0: Port device team_slave_0 added
[   55.861088][ T5832] team0: Port device team_slave_0 added
[   55.865655][ T5827] team0: Port device team_slave_1 added
[   55.898500][ T5832] team0: Port device team_slave_1 added
[   55.901387][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   55.907499][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.910343][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.921812][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.946107][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.949007][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.959317][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.983029][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.986676][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.997179][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.016392][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.018869][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.027539][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.059852][ T5827] hsr_slave_0: entered promiscuous mode
[   56.062304][ T5827] hsr_slave_1: entered promiscuous mode
[   56.109464][ T5832] hsr_slave_0: entered promiscuous mode
[   56.111965][ T5832] hsr_slave_1: entered promiscuous mode
[   56.114634][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.117896][ T5832] Cannot create hsr debugfs directory
[   56.120284][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.123313][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.126823][ T5838] bridge_slave_0: entered allmulticast mode
[   56.130521][ T5838] bridge_slave_0: entered promiscuous mode
[   56.133622][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.136955][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.139343][ T5838] bridge_slave_1: entered allmulticast mode
[   56.142106][ T5838] bridge_slave_1: entered promiscuous mode
[   56.193663][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.208059][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.262755][ T5838] team0: Port device team_slave_0 added
[   56.274914][ T5838] team0: Port device team_slave_1 added
[   56.341073][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.343401][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.353437][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.367895][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.370750][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.381077][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.439735][ T5838] hsr_slave_0: entered promiscuous mode
[   56.441987][ T5838] hsr_slave_1: entered promiscuous mode
[   56.444182][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.446777][ T5838] Cannot create hsr debugfs directory
[   56.492255][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.500441][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.516938][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.541009][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.597076][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.601644][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.611119][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.627674][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.677499][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.689509][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.695333][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.708013][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.725940][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.765467][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   56.786795][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.789430][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.799620][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.802493][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.836299][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.851297][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.876912][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   56.888173][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   56.893879][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.896823][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.905013][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.907459][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.916944][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.919404][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.933466][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.936222][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.001392][ T5832] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   57.007220][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.072237][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.141028][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.198107][ T5827] veth0_vlan: entered promiscuous mode
[   57.215670][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.220280][ T5827] veth1_vlan: entered promiscuous mode
[   57.258002][ T5838] veth0_vlan: entered promiscuous mode
[   57.272578][ T5838] veth1_vlan: entered promiscuous mode
[   57.295837][ T5222] Bluetooth: hci1: command tx timeout
[   57.300413][ T5827] veth0_macvtap: entered promiscuous mode
[   57.305393][   T54] Bluetooth: hci0: command tx timeout
[   57.310117][ T5827] veth1_macvtap: entered promiscuous mode
[   57.349642][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.357445][ T5838] veth0_macvtap: entered promiscuous mode
[   57.362063][ T5832] veth0_vlan: entered promiscuous mode
[   57.368224][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.381219][ T5838] veth1_macvtap: entered promiscuous mode
[   57.389971][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.393920][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.400667][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.404469][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.411427][ T5832] veth1_vlan: entered promiscuous mode
[   57.431209][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.453363][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.466120][ T5222] Bluetooth: hci2: command tx timeout
[   57.478594][ T5832] veth0_macvtap: entered promiscuous mode
[   57.488464][ T5838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.492241][ T5838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.499544][ T5838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.503513][ T5838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.518765][ T5832] veth1_macvtap: entered promiscuous mode
[   57.552918][ T3600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.557245][ T3600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.601169][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.631991][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.642063][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.646041][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.649803][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.653471][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.658490][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.658934][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.713238][  T966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.724455][  T966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.762975][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.773661][  T966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.782577][  T966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.854198][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.869537][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.943448][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.954613][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.052834][ T5902] netlink: 'syz.0.6': attribute type 10 has an invalid length.
[   58.069814][ T5902] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   58.100312][ T5906] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.329332][ T5916] netlink: 17 bytes leftover after parsing attributes in process `syz.1.12'.
[   58.335597][ T5916] netlink: zone id is out of range
[   58.337553][ T5916] netlink: zone id is out of range
[   58.339388][ T5916] netlink: zone id is out of range
[   58.341167][ T5916] netlink: zone id is out of range
[   58.348178][ T5916] netlink: zone id is out of range
[   58.350662][ T5916] netlink: zone id is out of range
[   58.352748][ T5916] netlink: zone id is out of range
[   58.354652][ T5916] netlink: zone id is out of range
[   58.358118][ T5916] netlink: zone id is out of range
[   58.360375][ T5916] netlink: zone id is out of range
[   58.705916][ T5947] warning: `syz.2.27' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   58.824756][    C1] hrtimer: interrupt took 35905 ns
[   59.064856][ T5954] Zero length message leads to an empty skb
[   59.375662][   T54] Bluetooth: hci0: command tx timeout
[   59.378059][ T5222] Bluetooth: hci1: command tx timeout
[   59.535103][ T5222] Bluetooth: hci2: command tx timeout
[   61.458029][ T5222] Bluetooth: hci1: command tx timeout
[   61.460736][ T5222] Bluetooth: hci0: command tx timeout
[   61.615518][   T54] Bluetooth: hci2: command tx timeout
[   61.918004][ T6131] netlink: 'syz.0.68': attribute type 21 has an invalid length.
[   61.920533][ T6131] netlink: 156 bytes leftover after parsing attributes in process `syz.0.68'.
[   62.147385][ T6154] netlink: 60 bytes leftover after parsing attributes in process `syz.1.79'.
[   62.299609][ T6160] netlink: 'syz.1.82': attribute type 9 has an invalid length.
[   64.045125][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1629595993 wd_nsec: 1629595789
[   64.094651][   T54] Bluetooth: hci0: command tx timeout
[   64.097013][   T54] Bluetooth: hci1: command tx timeout
[   64.098919][   T54] Bluetooth: hci2: command tx timeout
[   64.129813][ T6152] Driver unsupported XDP return value 0 on prog  (id 19) dev N/A, expect packet loss!
[   64.164500][ T6143] syz.0.74 (6143) used greatest stack depth: 20832 bytes left
[   64.299050][ T6174] tun0: tun_chr_ioctl cmd 1074025677
[   64.300968][ T6174] tun0: linktype set to 270
[   64.446100][ T6178] syz.1.90 (6178) used greatest stack depth: 18624 bytes left
[   65.966954][ T6230] netlink: 'syz.2.112': attribute type 39 has an invalid length.
[   66.248428][ T6253] netlink: 'syz.2.123': attribute type 2 has an invalid length.
[   66.251190][ T6253] netlink: 164 bytes leftover after parsing attributes in process `syz.2.123'.
[   67.082483][ T6318] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.154'.
[   70.979545][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.982367][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   74.343937][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 3288411048 wd_nsec: 3288411109
[   81.223216][    T9] cfg80211: failed to load regulatory.db
[   82.538502][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   82.541562][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   82.544090][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   82.546919][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   82.549480][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   82.594581][ T5222] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   82.598532][ T5222] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   82.601130][ T5222] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   82.603778][ T5222] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   82.606741][ T5222] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   82.760154][ T6333] chnl_net:caif_netlink_parms(): no params data found
[   83.502233][   T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   83.506154][   T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   83.524850][   T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   83.528089][   T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   83.530827][   T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   84.576878][   T54] Bluetooth: hci3: command tx timeout
[   84.655073][   T54] Bluetooth: hci4: command tx timeout
[   85.614998][   T54] Bluetooth: hci5: command tx timeout
[   86.656347][   T54] Bluetooth: hci3: command tx timeout
[   86.827949][   T54] Bluetooth: hci4: command tx timeout
[   87.694897][   T54] Bluetooth: hci5: command tx timeout
[   88.734923][   T54] Bluetooth: hci3: command tx timeout
[   88.895855][   T54] Bluetooth: hci4: command tx timeout
[   89.774987][   T54] Bluetooth: hci5: command tx timeout
[   90.815376][   T54] Bluetooth: hci3: command tx timeout
[   90.975065][   T54] Bluetooth: hci4: command tx timeout
[   91.854950][   T54] Bluetooth: hci5: command tx timeout
[  132.885546][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.888354][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  143.438845][ T5222] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  143.442032][ T5222] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  143.444870][ T5222] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  143.448173][ T5222] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  143.450901][ T5222] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  143.477295][ T5222] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  143.480443][ T5222] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  143.483105][ T5222] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  143.488135][ T5222] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  143.491229][ T5222] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  144.260170][   T54] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  144.264333][   T54] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  144.267282][   T54] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  144.270940][   T54] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  144.274502][   T54] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  145.535353][ T5222] Bluetooth: hci6: command tx timeout
[  145.537618][   T54] Bluetooth: hci7: command tx timeout
[  146.345136][   T54] Bluetooth: hci8: command tx timeout
[  147.616995][   T54] Bluetooth: hci7: command tx timeout
[  147.619506][   T54] Bluetooth: hci6: command tx timeout
[  148.414952][ T5222] Bluetooth: hci8: command tx timeout
[  149.694957][ T5222] Bluetooth: hci6: command tx timeout
[  149.696953][ T5222] Bluetooth: hci7: command tx timeout
[  150.495053][   T54] Bluetooth: hci8: command tx timeout
[  151.776886][   T54] Bluetooth: hci7: command tx timeout
[  151.779199][   T54] Bluetooth: hci6: command tx timeout
[  152.576827][ T5222] Bluetooth: hci8: command tx timeout
[  180.978436][ T5831] Bluetooth: hci0: command 0x0406 tx timeout
[  180.980691][ T5831] Bluetooth: hci1: command 0x0406 tx timeout
[  180.982645][ T5831] Bluetooth: hci2: command 0x0406 tx timeout
[  193.861982][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  193.867739][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  203.678773][ T6370] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  203.685351][ T6370] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  203.689970][ T6370] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  203.693573][ T6370] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  203.696982][ T6370] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  203.795907][ T6375] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  203.799085][ T6375] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  203.801749][ T6375] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  203.806216][ T6375] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  203.808696][ T6375] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  204.689938][ T6382] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  204.692940][ T6382] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  204.696322][ T6382] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  204.699011][ T6382] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  204.701560][ T6382] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  206.179646][ T6382] Bluetooth: hci3: command 0x0406 tx timeout
[  206.182308][ T6382] Bluetooth: hci4: command 0x0406 tx timeout
[  206.184242][ T6382] Bluetooth: hci5: command 0x0406 tx timeout
[  213.055755][   T34] INFO: task syz.1.152:6314 blocked for more than 143 seconds.
[  213.058257][   T34]       Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0
[  213.061602][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  213.064607][   T34] task:syz.1.152       state:D stack:25096 pid:6314  tgid:6314  ppid:5832   task_flags:0x400040 flags:0x00004004
[  213.074028][   T34] Call Trace:
[  213.076292][   T34]  <TASK>
[  213.077279][   T34]  __schedule+0x16f5/0x4d00
[  213.078836][   T34]  ? schedule+0x165/0x360
[  213.080314][   T34]  ? __lock_acquire+0xab9/0xd20
[  213.081894][   T34]  ? __pfx___schedule+0x10/0x10
[  213.083622][   T34]  ? schedule+0x91/0x360
[  213.086087][   T34]  schedule+0x165/0x360
[  213.087530][   T34]  schedule_timeout+0x9a/0x270
[  213.089152][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  213.090944][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  213.092665][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  213.094387][   T34]  __wait_for_common+0x3da/0x710
[  213.097982][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  213.099789][   T34]  ? __pfx___wait_for_common+0x10/0x10
[  213.101662][   T34]  ? __raw_spin_lock_init+0x45/0x100
[  213.103517][   T34]  ? __init_swait_queue_head+0xa9/0x150
[  213.106925][   T34]  wait_for_completion_state+0x1c/0x40
[  213.108979][   T34]  __wait_rcu_gp+0x24c/0x280
[  213.110804][   T34]  synchronize_rcu_tasks_generic+0x132/0x220
[  213.112751][   T34]  ? __pfx_synchronize_rcu_tasks_generic+0x10/0x10
[  213.116984][   T34]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  213.118883][   T34]  ? __pfx_call_rcu_tasks_trace+0x10/0x10
[  213.120791][   T34]  ? __pfx_wakeme_after_rcu+0x10/0x10
[  213.122565][   T34]  perf_event_detach_bpf_prog+0x298/0x320
[  213.124570][   T34]  ? __pfx_perf_event_detach_bpf_prog+0x10/0x10
[  213.127556][   T34]  ? security_perf_event_free+0x40/0x70
[  213.129714][   T34]  ? kfree+0x4d/0x440
[  213.131202][   T34]  _free_event+0x87b/0xa00
[  213.132761][   T34]  ? __pfx_perf_release+0x10/0x10
[  213.134651][   T34]  perf_event_release_kernel+0x45b/0x510
[  213.139764][   T34]  ? __pfx_perf_release+0x10/0x10
[  213.141535][   T34]  perf_release+0x38/0x50
[  213.142984][   T34]  __fput+0x44c/0xa70
[  213.144348][   T34]  task_work_run+0x1d4/0x260
[  213.148058][   T34]  ? __pfx_task_work_run+0x10/0x10
[  213.150261][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  213.152076][   T34]  exit_to_user_mode_loop+0xec/0x110
[  213.153943][   T34]  do_syscall_64+0x2bd/0x3b0
[  213.157632][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.160193][   T34]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  213.162734][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.166244][   T34] RIP: 0033:0x7f097cf8eb69
[  213.167809][   T34] RSP: 002b:00007fff7a207e78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  213.170798][   T34] RAX: 0000000000000000 RBX: 00007f097d1b7ba0 RCX: 00007f097cf8eb69
[  213.173257][   T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  213.176881][   T34] RBP: 00007f097d1b7ba0 R08: 00000000000130c0 R09: 000000177a20816f
[  213.179428][   T34] R10: 00007f097d1b7ac0 R11: 0000000000000246 R12: 00000000000108a7
[  213.182344][   T34] R13: 00007fff7a207f70 R14: ffffffffffffffff R15: 00007fff7a207f90
[  213.186722][   T34]  </TASK>
[  213.188061][   T34] INFO: task syz.0.153:6319 blocked for more than 143 seconds.
[  213.191167][   T34]       Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0
[  213.194429][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  213.200110][   T34] task:syz.0.153       state:D stack:25096 pid:6319  tgid:6319  ppid:5827   task_flags:0x400040 flags:0x00004004
[  213.205857][   T34] Call Trace:
[  213.206946][   T34]  <TASK>
[  213.207967][   T34]  __schedule+0x16f5/0x4d00
[  213.209869][   T34]  ? __lock_acquire+0xab9/0xd20
[  213.211914][   T34]  ? schedule+0x165/0x360
[  213.213757][   T34]  ? __pfx___schedule+0x10/0x10
[  213.216807][   T34]  ? schedule+0x91/0x360
[  213.218173][   T34]  schedule+0x165/0x360
[  213.219581][   T34]  schedule_preempt_disabled+0x13/0x30
[  213.221303][   T34]  __mutex_lock+0x724/0xe80
[  213.222770][   T34]  ? __mutex_lock+0x51b/0xe80
[  213.224282][   T34]  ? perf_trace_destroy+0x2e/0x150
[  213.227520][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  213.229341][   T34]  ? security_perf_event_free+0x40/0x70
[  213.231678][   T34]  ? rcu_is_watching+0x15/0xb0
[  213.233378][   T34]  ? rcu_is_watching+0x15/0xb0
[  213.236106][   T34]  ? __pfx_tp_perf_event_destroy+0x10/0x10
[  213.238011][   T34]  perf_trace_destroy+0x2e/0x150
[  213.239787][   T34]  ? __pfx_tp_perf_event_destroy+0x10/0x10
[  213.241760][   T34]  __free_event+0x316/0x7b0
[  213.243348][   T34]  ? __pfx_perf_release+0x10/0x10
[  213.245949][   T34]  perf_event_release_kernel+0x45b/0x510
[  213.248328][   T34]  ? __pfx_perf_release+0x10/0x10
[  213.250425][   T34]  perf_release+0x38/0x50
[  213.251888][   T34]  __fput+0x44c/0xa70
[  213.253267][   T34]  task_work_run+0x1d4/0x260
[  213.257504][   T34]  ? __pfx_task_work_run+0x10/0x10
[  213.259291][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  213.261132][   T34]  exit_to_user_mode_loop+0xec/0x110
[  213.262968][   T34]  do_syscall_64+0x2bd/0x3b0
[  213.264570][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  213.267440][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.269675][   T34]  ? exc_page_fault+0x9f/0xf0
[  213.271435][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.273352][   T34] RIP: 0033:0x7fe94998eb69
[  213.276179][   T34] RSP: 002b:00007ffcbe8fd468 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  213.279011][   T34] RAX: 0000000000000000 RBX: 00007fe949bb7ba0 RCX: 00007fe94998eb69
[  213.281722][   T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  213.284294][   T34] RBP: 00007fe949bb7ba0 R08: 000000000000f77c R09: 0000001cbe8fd75f
[  213.287752][   T34] R10: 00007fe949bb7ac0 R11: 0000000000000246 R12: 00000000000108bb
[  213.290790][   T34] R13: 00007fe949bb6160 R14: ffffffffffffffff R15: 00007ffcbe8fd580
[  213.293415][   T34]  </TASK>
[  213.294497][   T34] 
[  213.294497][   T34] Showing all locks held in the system:
[  213.298480][   T34] 3 locks held by kworker/0:0/9:
[  213.300146][   T34]  #0: ffff88801a481d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  213.304288][   T34]  #1: ffffc900000c7bc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  213.308633][   T34]  #2: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf00
[  213.312210][   T34] 3 locks held by kworker/u8:1/13:
[  213.313965][   T34]  #0: ffff888020ed8148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  213.319212][   T34]  #1: ffffc90000107bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  213.324478][   T34]  #2: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  213.348388][   T34] 1 lock held by rcu_tasks_trace/32:
[  213.351177][   T34]  #0: ffffffff8e13fdd0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{4:4}, at: rcu_tasks_one_gp+0xaf9/0xdf0
[  213.357325][   T34] 1 lock held by khungtaskd/34:
[  213.359418][   T34]  #0: ffffffff8e13f0a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  213.363439][   T34] 5 locks held by kworker/u11:0/54:
[  213.369840][   T34]  #0: ffff88811095e948 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  213.374264][   T34]  #1: ffffc900007cfbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  213.387463][   T34]  #2: ffff88810e3a0dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  213.391509][   T34]  #3: ffff88810e3a00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  213.415486][   T34]  #4: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  213.419071][   T34] 3 locks held by kworker/u9:6/1091:
[  213.420771][   T34]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  213.434272][   T34]  #1: ffffc90006cf7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  213.438052][   T34]  #2: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  213.441097][   T34] 5 locks held by kworker/u11:1/5222:
[  213.442847][   T34]  #0: ffff888026aef948 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  213.447671][   T34]  #1: ffffc900086c7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  213.451597][   T34]  #2: ffff888108d5cdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  213.455419][   T34]  #3: ffff888108d5c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  213.458571][   T34]  #4: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  213.461673][   T34] 2 locks held by getty/5657:
[  213.463511][   T34]  #0: ffff88810f9280a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  213.470510][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  213.474594][   T34] 5 locks held by kworker/u11:2/5831:
[  213.478999][   T34]  #0: ffff888024352948 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  213.483285][   T34]  #1: ffffc900039ffbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  213.490619][   T34]  #2: ffff888023ed4dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  213.494636][   T34]  #3: ffff888023ed40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  213.498997][   T34]  #4: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  213.503312][   T34] 3 locks held by kworker/0:5/5877:
[  213.507943][   T34]  #0: ffff88801a481d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  213.512105][   T34]  #1: ffffc90003c7fbc0 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  213.516318][   T34]  #2: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: crda_timeout_work+0x15/0x50
[  213.519969][   T34] 1 lock held by syz.0.153/6319:
[  213.522077][   T34]  #0: ffffffff8e1a2c68 (event_mutex){+.+.}-{4:4}, at: perf_trace_destroy+0x2e/0x150
[  213.528471][   T34] 2 locks held by syz.0.153/6320:
[  213.530620][   T34] 2 locks held by syz.2.156/6327:
[  213.532701][   T34]  #0: ffffffff8e1a2c68 (event_mutex){+.+.}-{4:4}, at: perf_trace_destroy+0x2e/0x150
[  213.537098][   T34]  #1: ffffffff8e144bb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  213.541640][   T34] 2 locks held by syz-executor/6333:
[  213.543424][   T34]  #0: ffffffff8eca43a0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  213.549417][   T34]  #1: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  213.553216][   T34] 2 locks held by syz-executor/6336:
[  213.556714][   T34]  #0: ffffffff8fa22288 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  213.560723][   T34]  #1: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  213.564261][   T34] 1 lock held by syz-executor/6345:
[  213.568932][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  213.572860][   T34] 1 lock held by dhcpcd/6347:
[  213.576184][   T34]  #0: ffff88802adbe808 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  213.580510][   T34] 1 lock held by dhcpcd/6348:
[  213.582481][   T34]  #0: ffff88802adbca08 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  213.590994][   T34] 1 lock held by dhcpcd/6349:
[  213.592990][   T34]  #0: ffff88802adbb208 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  213.597789][   T34] 1 lock held by dhcpcd/6350:
[  213.599798][   T34]  #0: ffff88801dcde808 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  213.603998][   T34] 1 lock held by dhcpcd/6351:
[  213.608386][   T34]  #0: ffff88802ac38e08 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  213.612566][   T34] 1 lock held by dhcpcd/6352:
[  213.614558][   T34]  #0: ffff88802ac3ca08 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  213.619295][   T34] 1 lock held by syz-executor/6355:
[  213.621508][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  213.627224][   T34] 1 lock held by syz-executor/6357:
[  213.629137][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  213.632728][   T34] 1 lock held by syz-executor/6363:
[  213.635278][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  213.639044][   T34] 7 locks held by kworker/u11:3/6365:
[  213.641298][   T34]  #0: ffff88811095f148 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  213.645534][   T34]  #1: ffffc900068bfbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  213.649960][   T34]  #2: ffff888028450dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  213.654028][   T34]  #3: ffff8880284500b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  213.661242][   T34]  #4: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  213.665577][   T34]  #5: ffff88810b125338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  213.669396][   T34]  #6: ffffffff8e144bb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  213.673773][   T34] 4 locks held by kworker/u11:4/6366:
[  213.678576][   T34]  #0: ffff888125d38948 ((wq_completion)hci9#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  213.683003][   T34]  #1: ffffc90006927bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  213.689314][   T34]  #2: ffff888030b380b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0
[  213.693343][   T34]  #3: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0
[  213.702687][   T34] 1 lock held by syz-executor/6369:
[  213.705258][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  213.709077][   T34] 4 locks held by kworker/u11:5/6370:
[  213.711254][   T34]  #0: ffff888106bf7148 ((wq_completion)hci10#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  213.718258][   T34]  #1: ffffc90006ba7bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  213.723090][   T34]  #2: ffff8880311b00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0
[  213.727557][   T34]  #3: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0
[  213.731390][   T34] 1 lock held by syz-executor/6374:
[  213.733543][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  213.739919][   T34] 5 locks held by kworker/u11:6/6375:
[  213.742137][   T34]  #0: ffff888027060948 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  213.746990][   T34]  #1: ffffc90006c27bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  213.752069][   T34]  #2: ffff88803223cdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  213.758576][   T34]  #3: ffff88803223c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  213.763319][   T34]  #4: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  213.767383][   T34] 5 locks held by kworker/u11:7/6377:
[  213.769498][   T34]  #0: ffff888030f3a948 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  213.773848][   T34]  #1: ffffc90006c37bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  213.781577][   T34]  #2: ffff888108e04dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  213.785937][   T34]  #3: ffff888108e040b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  213.789881][   T34]  #4: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  213.793813][   T34] 4 locks held by kworker/u11:9/6379:
[  213.799474][   T34]  #0: ffff888112a88148 ((wq_completion)hci11#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  213.803912][   T34]  #1: ffffc90006c87bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  213.811114][   T34]  #2: ffff88802f3500b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0
[  213.817206][   T34]  #3: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0
[  213.821487][   T34] 1 lock held by syz-executor/6381:
[  213.823647][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  213.827950][   T34] 
[  213.828987][   T34] =============================================
[  213.828987][   T34] 
[  213.832315][   T34] NMI backtrace for cpu 0
[  213.832325][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  213.832339][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  213.832346][   T34] Call Trace:
[  213.832377][   T34]  <TASK>
[  213.832384][   T34]  dump_stack_lvl+0x189/0x250
[  213.832405][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  213.832420][   T34]  ? __pfx__printk+0x10/0x10
[  213.832445][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  213.832461][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  213.832472][   T34]  ? _printk+0xcf/0x120
[  213.832491][   T34]  ? __pfx__printk+0x10/0x10
[  213.832508][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  213.832523][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  213.832536][   T34]  watchdog+0xfee/0x1030
[  213.832556][   T34]  ? watchdog+0x1de/0x1030
[  213.832578][   T34]  kthread+0x711/0x8a0
[  213.832597][   T34]  ? __pfx_watchdog+0x10/0x10
[  213.832624][   T34]  ? __pfx_kthread+0x10/0x10
[  213.832641][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  213.832655][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  213.832668][   T34]  ? __pfx_kthread+0x10/0x10
[  213.832685][   T34]  ret_from_fork+0x3fc/0x770
[  213.832700][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  213.832716][   T34]  ? __switch_to_asm+0x39/0x70
[  213.832730][   T34]  ? __switch_to_asm+0x33/0x70
[  213.832744][   T34]  ? __pfx_kthread+0x10/0x10
[  213.832761][   T34]  ret_from_fork_asm+0x1a/0x30
[  213.832787][   T34]  </TASK>
[  213.832791][   T34] Sending NMI from CPU 0 to CPUs 1:
[  213.896866][    C1] NMI backtrace for cpu 1
[  213.896883][    C1] CPU: 1 UID: 0 PID: 6320 Comm: syz.0.153 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  213.896896][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  213.896902][    C1] RIP: 0010:__rcu_read_unlock+0x58/0xe0
[  213.896924][    C1] Code: 43 0f b6 04 3c 84 c0 75 4f ff 0b 75 1d 4c 8d b7 48 04 00 00 4c 89 f0 48 c1 e8 03 42 0f b6 04 38 84 c0 75 66 41 83 3e 00 75 27 <43> 0f b6 04 3c 84 c0 75 41 8b 03 3d 00 00 00 40 73 0f 5b 41 5c 41
[  213.896940][    C1] RSP: 0018:ffffc900001e06c8 EFLAGS: 00000246
[  213.896951][    C1] RAX: 996939770d1c3900 RBX: ffff888021630444 RCX: 996939770d1c3900
[  213.896959][    C1] RDX: 0000000000000000 RSI: ffffffff8d998701 RDI: ffffffff8be29f80
[  213.896966][    C1] RBP: dffffc0000000000 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  213.896974][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 1ffff110042c6088
[  213.896981][    C1] R13: ffffc900001d9000 R14: ffff888021630448 R15: dffffc0000000000
[  213.896989][    C1] FS:  00007fe94a8816c0(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
[  213.896998][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  213.897006][    C1] CR2: 00007f0b2e49c4a6 CR3: 000000010fba6000 CR4: 00000000000006f0
[  213.897017][    C1] Call Trace:
[  213.897022][    C1]  <IRQ>
[  213.897028][    C1]  ? unwind_next_frame+0xa5/0x2390
[  213.897042][    C1]  unwind_next_frame+0x19ae/0x2390
[  213.897057][    C1]  ? unwind_next_frame+0xa5/0x2390
[  213.897070][    C1]  ? stack_trace_save+0x9c/0xe0
[  213.897085][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  213.897099][    C1]  arch_stack_walk+0x11c/0x150
[  213.897113][    C1]  ? save_stack+0xf5/0x1f0
[  213.897125][    C1]  stack_trace_save+0x9c/0xe0
[  213.897139][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  213.897155][    C1]  save_stack+0xf5/0x1f0
[  213.897166][    C1]  ? __pfx_save_stack+0x10/0x10
[  213.897176][    C1]  ? irqentry_exit+0x74/0x90
[  213.897197][    C1]  __reset_page_owner+0x71/0x1f0
[  213.897209][    C1]  __free_frozen_pages+0xc71/0xe70
[  213.897225][    C1]  __tlb_remove_table+0x2d2/0x3b0
[  213.897239][    C1]  ? __pfx___tlb_remove_table+0x10/0x10
[  213.897257][    C1]  tlb_remove_table_rcu+0x85/0x100
[  213.897270][    C1]  ? __pfx_tlb_remove_table_rcu+0x10/0x10
[  213.897283][    C1]  ? rcu_core+0xc34/0x1710
[  213.897295][    C1]  rcu_core+0xca8/0x1710
[  213.897312][    C1]  ? __pfx_rcu_core+0x10/0x10
[  213.897322][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  213.897340][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  213.897396][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  213.897409][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  213.897425][    C1]  handle_softirqs+0x286/0x870
[  213.897440][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  213.897454][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  213.897467][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  213.897483][    C1]  __irq_exit_rcu+0xca/0x1f0
[  213.897495][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  213.897511][    C1]  irq_exit_rcu+0x9/0x30
[  213.897522][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  213.897535][    C1]  </IRQ>
[  213.897539][    C1]  <TASK>
[  213.897543][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  213.897555][    C1] RIP: 0010:finish_task_switch+0x2b3/0x950
[  213.897573][    C1] Code: a4 24 1b 16 00 00 bf 49 8d 9c 24 78 16 00 00 48 89 d8 48 c1 e8 03 42 0f b6 04 28 84 c0 4c 8b 7d b8 0f 85 04 03 00 00 83 3b 00 <0f> 85 c0 00 00 00 0f 1f 44 00 00 4d 85 ff 74 72 49 81 c4 58 05 00
[  213.897581][    C1] RSP: 0018:ffffc900065977b8 EFLAGS: 00000246
[  213.897591][    C1] RAX: 0000000000000000 RBX: ffff888021631678 RCX: 996939770d1c3900
[  213.897598][    C1] RDX: 0000000000000000 RSI: ffffffff8d998701 RDI: ffff888021631618
[  213.897605][    C1] RBP: ffffc90006597810 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  213.897613][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffff888021630000
[  213.897620][    C1] R13: dffffc0000000000 R14: ffff88801ba8d640 R15: ffff888021d1d000
[  213.897634][    C1]  ? finish_task_switch+0x266/0x950
[  213.897652][    C1]  __schedule+0x16fd/0x4d00
[  213.897669][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  213.897685][    C1]  ? preempt_schedule_irq+0xb5/0x150
[  213.897700][    C1]  ? __pfx___schedule+0x10/0x10
[  213.897712][    C1]  ? irqentry_exit+0x74/0x90
[  213.897732][    C1]  preempt_schedule_irq+0xb5/0x150
[  213.897746][    C1]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  213.897757][    C1]  ? __lock_acquire+0xab9/0xd20
[  213.897771][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  213.897784][    C1]  irqentry_exit+0x6f/0x90
[  213.897796][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  213.897807][    C1] RIP: 0010:__phys_addr+0x4d/0x180
[  213.897821][    C1] Code: ff ff 48 89 de e8 83 b4 4b 00 49 89 de 49 81 ee 00 00 00 80 0f 83 a4 00 00 00 48 c7 c0 28 64 bb 8d 48 c1 e8 03 42 80 3c 38 00 <74> 0c 48 c7 c7 28 64 bb 8d e8 15 d3 ae 00 48 2b 1d d6 f5 46 0c 48
[  213.897829][    C1] RSP: 0018:ffffc90006597ba8 EFLAGS: 00000246
[  213.897838][    C1] RAX: 1ffffffff1b76c85 RBX: ffff88802ad748d0 RCX: ffff888021630000
[  213.897846][    C1] RDX: 0000000000000002 RSI: ffff88802ad748d0 RDI: ffffffff7fffffff
[  213.897853][    C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffffff822be719
[  213.897860][    C1] R10: 0000000000000406 R11: 0000000000000002 R12: dffffc0000000000
[  213.897866][    C1] R13: 0000000000000000 R14: ffff8880aad748d0 R15: dffffc0000000000
[  213.897876][    C1]  ? percpu_ref_put+0x19/0x180
[  213.897892][    C1]  ? __phys_addr+0x2d/0x180
[  213.897904][    C1]  __memcg_slab_post_alloc_hook+0x260/0x7f0
[  213.897926][    C1]  kmem_cache_alloc_lru_noprof+0x2c7/0x3d0
[  213.897943][    C1]  ? __d_alloc+0x31/0x6f0
[  213.897958][    C1]  __d_alloc+0x31/0x6f0
[  213.897972][    C1]  d_alloc_pseudo+0x1f/0xb0
[  213.897985][    C1]  alloc_file_pseudo+0xcc/0x210
[  213.898000][    C1]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  213.898011][    C1]  ? do_raw_spin_unlock+0x4d/0x240
[  213.898025][    C1]  ? _raw_spin_unlock+0x28/0x50
[  213.898038][    C1]  sock_alloc_file+0xb8/0x2e0
[  213.898052][    C1]  ? __sys_socket+0x12c/0x1b0
[  213.898067][    C1]  __sys_socket+0x13d/0x1b0
[  213.898083][    C1]  __x64_sys_socket+0x7a/0x90
[  213.898098][    C1]  do_syscall_64+0xfa/0x3b0
[  213.898113][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.898123][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  213.898135][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.898145][    C1] RIP: 0033:0x7fe94998eb69
[  213.898156][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  213.898165][    C1] RSP: 002b:00007fe94a881038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  213.898176][    C1] RAX: ffffffffffffffda RBX: 00007fe949bb5fa0 RCX: 00007fe94998eb69
[  213.898183][    C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b
[  213.898190][    C1] RBP: 00007fe949a11df1 R08: 0000000000000000 R09: 0000000000000000
[  213.898197][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  213.898203][    C1] R13: 0000000000000000 R14: 00007fe949bb5fa0 R15: 00007ffcbe8fd308
[  213.898216][    C1]  </TASK>
[  214.181888][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  214.184125][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  214.188370][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  214.192055][   T34] Call Trace:
[  214.193184][   T34]  <TASK>
[  214.194239][   T34]  dump_stack_lvl+0x99/0x250
[  214.195955][   T34]  ? __asan_memcpy+0x40/0x70
[  214.197628][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  214.199797][   T34]  ? __pfx__printk+0x10/0x10
[  214.201329][   T34]  panic+0x2db/0x790
[  214.202642][   T34]  ? __pfx_panic+0x10/0x10
[  214.204221][   T34]  ? nmi_backtrace_stall_check+0x433/0x440
[  214.206098][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  214.207820][   T34]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  214.209759][   T34]  watchdog+0x102d/0x1030
[  214.211153][   T34]  ? watchdog+0x1de/0x1030
[  214.212613][   T34]  kthread+0x711/0x8a0
[  214.214052][   T34]  ? __pfx_watchdog+0x10/0x10
[  214.216070][   T34]  ? __pfx_kthread+0x10/0x10
[  214.218047][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  214.220171][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  214.222065][   T34]  ? __pfx_kthread+0x10/0x10
[  214.223604][   T34]  ret_from_fork+0x3fc/0x770
[  214.225102][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  214.226768][   T34]  ? __switch_to_asm+0x39/0x70
[  214.228377][   T34]  ? __switch_to_asm+0x33/0x70
[  214.229923][   T34]  ? __pfx_kthread+0x10/0x10
[  214.231411][   T34]  ret_from_fork_asm+0x1a/0x30
[  214.232922][   T34]  </TASK>
[  214.234818][   T34] Kernel Offset: disabled
[  214.236199][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:38:47  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000007a RBX=000000000000007a RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6d0
R8 =ffff888108170237 R9 =1ffff1102102e046 R10=dffffc0000000000 R11=ffffffff85471fa0
R12=dffffc0000000000 R13=ffffffff99af58b7 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff8547201c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055b81aea1e08 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f0b30787d20
XMM02=0000000500000007 ffffffff00000001 XMM03=ffffffff8208dd3e ffffffff82090152
XMM04=0000000000000000 0000000000000016 XMM05=0000000000000000 000000000003bf12
XMM06=ffffffff8963de8a ffffffff00000007 XMM07=ffffffff00000000 ffffffff81d686ff
XMM08=ffffffff82090083 ffffffff00000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffff9200003bf94 RBX=ffffffff810014ca RCX=996939770d1c3900 RDX=dffffc0000000000
RSI=ffffffff810014ca RDI=ffffc900001dfc68 RBP=dffffc0000000000 RSP=ffffc900001dfb98
R8 =ffffc900001dfd30 R9 =0000000000000012 R10=ffffc900001dfcb8 R11=ffffffff81acf520
R12=ffff888021630000 R13=ffffc900001dfca0 R14=ffffc900001dfc68 R15=ffffc900001dfc68
RIP=ffffffff8172aa94 RFL=00000a02 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fe94a8816c0 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0b2e49c4a6 CR3=000000010fba6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=00000000000f0602
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000040000005e 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000ff000000 0000000000000000 XMM05=0000000000001001 0000000000000014
XMM06=ff00000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffffffffff00 XMM09=00316e6170772f74 656e2f317968702f
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
