last executing test programs:

18.04170281s ago: executing program 2 (id=66):
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@cgroup, 0xffffffffffffffff, 0x18, 0x0, 0x4000}, 0x20)

18.041499219s ago: executing program 2 (id=67):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x3a, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)

18.020591724s ago: executing program 1 (id=69):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x9, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x4, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = gettid()
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5d2d, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x89}, 0x4000, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
close(r1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa4706, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x320, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069003e000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21)

17.971950943s ago: executing program 2 (id=71):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x8, 0x2, 0x2, 0xb, 0x0, 0x6, 0x80000, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x431, 0x2, @perf_bp={0x0, 0x1}, 0x4028, 0x7, 0x2, 0x7, 0x400, 0x1d9d9e7b, 0x4, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x2)

17.160571879s ago: executing program 2 (id=77):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
recvmsg$kcm(r2, 0x0, 0x10100)
recvmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8084)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b100b4ab50a", @ANYRES32, @ANYRES8=r0], 0xfe33)

17.069796673s ago: executing program 0 (id=78):
r0 = socket$kcm(0x11, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x84, 0x53, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbef, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r2, 0x6, 0xd, &(0x7f0000000000), 0x4)
setsockopt$sock_attach_bpf(r2, 0x1, 0x24, &(0x7f0000000000), 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x700}, 0x2c)
sendmsg$kcm(r0, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x200, 0x31}, 0x80, &(0x7f0000000000)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca3a66bb0280000788fb", 0x15}], 0x1}, 0x0)

16.641577257s ago: executing program 1 (id=79):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000007c0)=""/200, 0xc8}, {&(0x7f0000000600)=""/215, 0xd7}, {&(0x7f0000004000)=""/4073, 0xfe9}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/52, 0x34}, {&(0x7f0000000340)=""/158, 0x9e}, {&(0x7f0000000500)=""/188, 0xbc}], 0x7, 0x0, 0x11}, 0x40012100)
recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)

16.580633443s ago: executing program 0 (id=80):
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2b, 0x1, 0x0)
socket$kcm(0x29, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x6, 0x25, &(0x7f0000000200)=r4, 0x4)

16.479154323s ago: executing program 0 (id=81):
socket$kcm(0xa, 0x3, 0x87)
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, 0x0, 0x3000c085)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
sendmsg$inet(r0, 0x0, 0x4000)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2d, &(0x7f00000000c0), 0xfdb8)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='jbd2_write_superblock\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2f0000000400000004000000", @ANYRES32, @ANYBLOB="096b4f185e6ae717ee30076c81ed93b9a01e536e31795473ee3f371293e81825c7754f698670ad0dbbf251df77f45e9c3c18014885f7a634eca80071cac9ba65e12508afa86634516a1e0b0b6b25c7a1f2b88c815ed5482dcf18e3", @ANYRES64=0x0], 0x20)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240), 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x12, 0x0, &(0x7f0000000280)="2eb68d24b1c06280bf0594b3f4f75c0b68eb", 0x0, 0x0, 0x0, 0x5b, 0x6, &(0x7f0000000300)="b98cd85a4e53c7a977c334677e7be69c291568461511944dd892bc1e9d089e6d20330d8722546c190e9100f150f741ea03d9bb452f151d7edd2920b04e8c50dc9db350827e962ca67f11894dfffbcbd3934463bd9b43bd8f4b4415", &(0x7f0000000380)="4b93b40e2b78", 0x2, 0x0, 0xd4b}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
r3 = socket$kcm(0x10, 0x2, 0x10)
r4 = socket$kcm(0xa, 0x2, 0x73)
setsockopt$sock_attach_bpf(r4, 0x29, 0x21, &(0x7f0000000200), 0x4)
sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f0000000000)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0xc}, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90824fc60040f170147000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)}], 0x1, 0x0, 0x0, 0x39c}, 0x0)

16.41761511s ago: executing program 1 (id=82):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'rose0\x00', 0x112})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400})

16.309803535s ago: executing program 0 (id=83):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0xb4, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1, 0x0, 0xd66}, 0x0)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x2, &(0x7f00000000c0), 0x31}, 0x0)

16.228494958s ago: executing program 1 (id=84):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}]}}, 0x0, 0x2a}, 0x28)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0)
r0 = socket$kcm(0xa, 0x5, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
setsockopt$sock_attach_bpf(r0, 0x29, 0x22, &(0x7f0000000100)=r1, 0x120)

16.146515514s ago: executing program 2 (id=85):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x6, 0x0, &(0x7f0000000800)='\x00\x00\x00\x00\x00\x00', 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x2}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbfb, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x1010, 0x0, 0x0, 0xd, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000003600fb50e3d0f15185e981db175d3c4a", 0x14}], 0x1}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l')
r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
write$cgroup_subtree(r1, &(0x7f0000000100), 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, 0x0, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x1306, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18082352010400000000000000000000afec4210", @ANYRES32=r4, @ANYRES64, @ANYRES32=r3], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

16.146342208s ago: executing program 0 (id=86):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9)
syz_clone(0x1004000, 0x0, 0x0, 0x0, 0x0, 0x0)

16.146098901s ago: executing program 1 (id=87):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xca}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00')
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xd4, 0x1, 0x0, 0x0, 0x0, 0x7feb, 0x1080, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x0, 0x7, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xdd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12)

16.03127663s ago: executing program 1 (id=88):
perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0x11, 0x200000000000002, 0x300)
socket$kcm(0x11, 0x200000000000002, 0x300)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000600)=@hci={0x1f, 0x300, 0x31}, 0x80, 0x0}, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x66, &(0x7f00000009c0), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xf, 0x11, 0x0, &(0x7f0000000940)='syzkaller\x00', 0x1, 0xd7, &(0x7f0000000ac0)=""/215, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x6, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x5, 0x8, 0x9, 0xd8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0xfb, &(0x7f0000000340)=""/251, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x6, r1, 0x8, &(0x7f0000000700)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x2, &(0x7f0000000d40)=[r1], &(0x7f0000000d80)=[{0x1, 0x5, 0x9, 0x2}, {0x4, 0x4, 0x0, 0x4}], 0x10, 0xff}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8982, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f90fa3c92b", 0x14}], 0x1}, 0x0)

16.030899391s ago: executing program 0 (id=89):
r0 = socket$kcm(0x2c, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x11b, 0x5, 0x0, 0x0)

15.965547488s ago: executing program 2 (id=90):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2a, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8918, 0x0)

845.46847ms ago: executing program 32 (id=89):
r0 = socket$kcm(0x2c, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x11b, 0x5, 0x0, 0x0)

800.202941ms ago: executing program 33 (id=88):
perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0x11, 0x200000000000002, 0x300)
socket$kcm(0x11, 0x200000000000002, 0x300)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000600)=@hci={0x1f, 0x300, 0x31}, 0x80, 0x0}, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x66, &(0x7f00000009c0), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xf, 0x11, 0x0, &(0x7f0000000940)='syzkaller\x00', 0x1, 0xd7, &(0x7f0000000ac0)=""/215, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x6, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x5, 0x8, 0x9, 0xd8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0xfb, &(0x7f0000000340)=""/251, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x6, r1, 0x8, &(0x7f0000000700)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x2, &(0x7f0000000d40)=[r1], &(0x7f0000000d80)=[{0x1, 0x5, 0x9, 0x2}, {0x4, 0x4, 0x0, 0x4}], 0x10, 0xff}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8982, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f90fa3c92b", 0x14}], 0x1}, 0x0)

0s ago: executing program 34 (id=90):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2a, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8918, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:16725' (ED25519) to the list of known hosts.
syzkaller login: [   47.770187][ T5819] cgroup: Unknown subsys name 'net'
[   47.876819][ T5819] cgroup: Unknown subsys name 'cpuset'
[   47.880992][ T5819] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.600761][ T5819] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.640539][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.643484][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.646246][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.649263][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.652240][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.708269][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.714093][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.716639][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.719722][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.722474][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.747036][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.749939][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.752555][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.757564][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.760460][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.862189][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   53.959529][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   53.979397][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.982432][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.985306][ T5828] bridge_slave_0: entered allmulticast mode
[   53.988211][ T5828] bridge_slave_0: entered promiscuous mode
[   53.991810][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.994614][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.996887][ T5828] bridge_slave_1: entered allmulticast mode
[   53.999583][ T5828] bridge_slave_1: entered promiscuous mode
[   54.034464][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.059658][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.106978][ T5828] team0: Port device team_slave_0 added
[   54.128103][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.130585][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.132980][ T5834] bridge_slave_0: entered allmulticast mode
[   54.136559][ T5834] bridge_slave_0: entered promiscuous mode
[   54.139844][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.142241][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.144771][ T5834] bridge_slave_1: entered allmulticast mode
[   54.147631][ T5834] bridge_slave_1: entered promiscuous mode
[   54.151428][ T5828] team0: Port device team_slave_1 added
[   54.190724][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.193004][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.201724][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.208811][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.211079][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.219916][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.225528][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.228655][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   54.234810][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.289526][ T5834] team0: Port device team_slave_0 added
[   54.299455][ T5828] hsr_slave_0: entered promiscuous mode
[   54.301824][ T5828] hsr_slave_1: entered promiscuous mode
[   54.314736][ T5834] team0: Port device team_slave_1 added
[   54.366997][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.369170][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.378052][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.397281][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.399492][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.408150][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.415637][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.417994][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.420264][ T5836] bridge_slave_0: entered allmulticast mode
[   54.422973][ T5836] bridge_slave_0: entered promiscuous mode
[   54.427798][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.430082][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.432446][ T5836] bridge_slave_1: entered allmulticast mode
[   54.435697][ T5836] bridge_slave_1: entered promiscuous mode
[   54.484477][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.502687][ T5834] hsr_slave_0: entered promiscuous mode
[   54.505088][ T5834] hsr_slave_1: entered promiscuous mode
[   54.507217][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.509707][ T5834] Cannot create hsr debugfs directory
[   54.516823][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.550432][ T5836] team0: Port device team_slave_0 added
[   54.556035][ T5836] team0: Port device team_slave_1 added
[   54.596208][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.598427][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.607011][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.620012][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.622150][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.630566][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.675616][ T5836] hsr_slave_0: entered promiscuous mode
[   54.678072][ T5836] hsr_slave_1: entered promiscuous mode
[   54.680253][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.682643][ T5836] Cannot create hsr debugfs directory
[   54.684963][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.691486][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.709725][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.714440][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   54.834372][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.836828][ T5828] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.839460][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.841728][ T5828] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.851715][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.859793][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.874182][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.881554][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.916066][ T1087] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.919703][ T1087] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.934362][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.945144][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.951004][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.962274][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   54.988041][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.014259][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   55.026444][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.028855][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.047468][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.049754][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.110739][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.119611][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.138792][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.142263][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   55.152310][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.154937][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.167447][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   55.171779][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.174267][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.195162][ T4384] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.197421][ T4384] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.200707][ T4384] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.202989][ T4384] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.316215][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.368218][ T5828] veth0_vlan: entered promiscuous mode
[   55.379921][ T5828] veth1_vlan: entered promiscuous mode
[   55.422767][ T5828] veth0_macvtap: entered promiscuous mode
[   55.431637][ T5828] veth1_macvtap: entered promiscuous mode
[   55.448984][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.452249][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.461708][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.468903][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.478351][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.481086][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.484419][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.487167][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.538504][ T5834] veth0_vlan: entered promiscuous mode
[   55.559866][ T4384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.560895][ T5836] veth0_vlan: entered promiscuous mode
[   55.562342][ T4384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.575980][ T5834] veth1_vlan: entered promiscuous mode
[   55.591230][ T5836] veth1_vlan: entered promiscuous mode
[   55.593369][ T1231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.598280][ T1231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.641222][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   55.648773][ T5836] veth0_macvtap: entered promiscuous mode
[   55.652517][ T5836] veth1_macvtap: entered promiscuous mode
[   55.657078][ T5834] veth0_macvtap: entered promiscuous mode
[   55.665097][ T5834] veth1_macvtap: entered promiscuous mode
[   55.678102][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.702022][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.706040][   T54] Bluetooth: hci0: command tx timeout
[   55.709258][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.719945][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.722658][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.726118][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.734199][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.739479][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.757055][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.761717][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.766733][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.769489][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.783783][   T54] Bluetooth: hci2: command tx timeout
[   55.784888][ T5830] Bluetooth: hci1: command tx timeout
[   55.857682][ T4384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.860147][ T4384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.869322][  T710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.871791][  T710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.908691][ T4384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.911211][ T4384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.929710][  T710] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.932189][  T710] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.133558][    C1] hrtimer: interrupt took 17073 ns
[   57.075314][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1321165724 wd_nsec: 1321165603
[   57.259514][ T5911] Driver unsupported XDP return value 0 on prog  (id 4) dev N/A, expect packet loss!
[   57.883686][ T5830] Bluetooth: hci1: command tx timeout
[   57.885442][ T5830] Bluetooth: hci0: command tx timeout
[   57.887164][ T5830] Bluetooth: hci2: command tx timeout
[   57.916240][ T5951] warning: `syz.0.23' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   58.431881][ T5961] netlink: 'syz.2.28': attribute type 1 has an invalid length.
[   58.444865][ T5961] netlink: 'syz.2.28': attribute type 3 has an invalid length.
[   58.450797][ T5961] netlink: 132 bytes leftover after parsing attributes in process `syz.2.28'.
[   58.470375][ T5961] Zero length message leads to an empty skb
[   58.910384][ T5970] sctp: [Deprecated]: syz.2.31 (pid 5970) Use of struct sctp_assoc_value in delayed_ack socket option.
[   58.910384][ T5970] Use struct sctp_sack_info instead
[   59.138547][ T5980] netlink: 'syz.1.37': attribute type 2 has an invalid length.
[   59.140998][ T5980] netlink: 'syz.1.37': attribute type 3 has an invalid length.
[   59.143368][ T5980] netlink: 132 bytes leftover after parsing attributes in process `syz.1.37'.
[   59.175797][ T5980] netlink: 'syz.1.37': attribute type 10 has an invalid length.
[   59.178444][ T5980] netlink: 55 bytes leftover after parsing attributes in process `syz.1.37'.
[   59.872931][ T5994] netlink: 1053 bytes leftover after parsing attributes in process `syz.2.43'.
[   59.949180][   T54] Bluetooth: hci2: command tx timeout
[   59.950944][   T54] Bluetooth: hci0: command tx timeout
[   59.952671][   T54] Bluetooth: hci1: command tx timeout
[   60.061027][ T6004] netlink: 495 bytes leftover after parsing attributes in process `syz.2.48'.
[   60.228317][ T6015] netlink: 168 bytes leftover after parsing attributes in process `syz.0.53'.
[   60.258681][ T5980] syz.1.37 (5980) used greatest stack depth: 19488 bytes left
[   61.620865][ T6071] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.77'.
[   62.024906][   T54] Bluetooth: hci1: command tx timeout
[   62.025063][ T5220] Bluetooth: hci0: command tx timeout
[   62.026658][   T54] Bluetooth: hci2: command tx timeout
[   62.054315][ T6076] netlink: 60 bytes leftover after parsing attributes in process `syz.1.79'.
[   62.070607][ T6076] netlink: 60 bytes leftover after parsing attributes in process `syz.1.79'.
[   62.080097][ T6076] netlink: 60 bytes leftover after parsing attributes in process `syz.1.79'.
[   62.513746][ T6075] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5
[   62.516972][ T6091] cgroup: fork rejected by pids controller in /syz0
[   66.033545][    C0] sched: DL replenish lagged too much
[   70.830726][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.832750][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   78.104610][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   78.115079][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   78.117653][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   78.120702][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   78.123331][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   78.145961][ T6075] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   78.148970][ T6075] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   78.151534][ T6075] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   78.156069][ T6075] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   78.158876][ T6075] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   78.851957][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   78.856141][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   78.858655][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   78.862099][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   78.865026][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   80.183689][ T6075] Bluetooth: hci3: command tx timeout
[   80.185848][ T6075] Bluetooth: hci1: command tx timeout
[   80.904224][ T6075] Bluetooth: hci4: command tx timeout
[   82.263822][ T5830] Bluetooth: hci1: command tx timeout
[   82.266948][ T6075] Bluetooth: hci3: command tx timeout
[   82.984065][ T6075] Bluetooth: hci4: command tx timeout
[   84.343722][ T5830] Bluetooth: hci1: command tx timeout
[   84.346164][ T6075] Bluetooth: hci3: command tx timeout
[   85.063867][ T6075] Bluetooth: hci4: command tx timeout
[   86.423809][ T5830] Bluetooth: hci1: command tx timeout
[   86.426117][ T6075] Bluetooth: hci3: command tx timeout
[   87.143834][ T6075] Bluetooth: hci4: command tx timeout
[  132.265932][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.267950][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  140.726247][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  140.750562][ T5830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  140.753241][ T5830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  140.768433][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  140.771330][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  140.835211][   T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  140.839362][   T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  140.841981][   T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  140.845764][   T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  140.848820][   T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  140.977207][   T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  140.980583][   T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  140.983407][   T54] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  141.002578][   T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  141.005973][   T54] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  142.823672][ T6075] Bluetooth: hci5: command tx timeout
[  142.903706][ T6075] Bluetooth: hci6: command tx timeout
[  143.063911][ T6075] Bluetooth: hci7: command tx timeout
[  144.910351][ T6075] Bluetooth: hci5: command tx timeout
[  144.983716][ T6075] Bluetooth: hci6: command tx timeout
[  145.159430][ T6075] Bluetooth: hci7: command tx timeout
[  146.983710][ T6075] Bluetooth: hci5: command tx timeout
[  147.064137][ T6075] Bluetooth: hci6: command tx timeout
[  147.239559][ T6075] Bluetooth: hci7: command tx timeout
[  149.063665][ T6075] Bluetooth: hci5: command tx timeout
[  149.144918][ T6075] Bluetooth: hci6: command tx timeout
[  149.304604][ T6075] Bluetooth: hci7: command tx timeout
[  167.713597][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
[  167.715814][    C0] rcu: 	0-....: (10498 ticks this GP) idle=9a3c/1/0x4000000000000000 softirq=14636/34667 fqs=5162
[  167.721091][    C0] rcu: 	         hardirqs   softirqs   csw/system
[  167.723120][    C0] rcu: 	 number:  1170591          0            0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  167.725089][    C0] rcu: 	cputime:    26869      25610           79   ==> 52490(ms)
[  167.727639][    C0] rcu: 	(t=10501 jiffies g=6765 q=2911 ncpus=2)
[  167.729620][    C0] CPU: 0 UID: 0 PID: 6096 Comm: syz.1.88 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  167.729631][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  167.729638][    C0] RIP: 0010:rcu_read_unlock_special+0x87/0x4c0
[  167.729660][    C0] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 92 37 f8 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
[  167.729668][    C0] RSP: 0018:ffffc90000007ae0 EFLAGS: 00000206
[  167.729677][    C0] RAX: 12f82005f3d59700 RBX: 1ffff92000000f64 RCX: 12f82005f3d59700
[  167.729683][    C0] RDX: 0000000000000000 RSI: ffffffff8d998701 RDI: ffffffff8be29f80
[  167.729689][    C0] RBP: ffffc90000007be0 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  167.729694][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffffffff8e144400
[  167.729700][    C0] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000001
[  167.729705][    C0] FS:  00007f91c40b26c0(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
[  167.729711][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  167.729716][    C0] CR2: 0000000000000000 CR3: 00000000227a0000 CR4: 00000000000006f0
[  167.729738][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  167.729744][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  167.729748][    C0] Call Trace:
[  167.729753][    C0]  <IRQ>
[  167.729763][    C0]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  167.729776][    C0]  ? ieee80211_rx_napi+0xca/0x3d0
[  167.729796][    C0]  __rcu_read_unlock+0x84/0xe0
[  167.729808][    C0]  ? ieee80211_rx_napi+0xca/0x3d0
[  167.729817][    C0]  ieee80211_rx_napi+0x228/0x3d0
[  167.729829][    C0]  ? __pfx_ieee80211_rx_napi+0x10/0x10
[  167.729842][    C0]  ? skb_dequeue+0x10e/0x150
[  167.729857][    C0]  ieee80211_handle_queued_frames+0xe8/0x1f0
[  167.729871][    C0]  tasklet_action_common+0x36c/0x580
[  167.729887][    C0]  ? __pfx_tasklet_action_common+0x10/0x10
[  167.729902][    C0]  ? workqueue_softirq_action+0xd4/0x150
[  167.729915][    C0]  handle_softirqs+0x286/0x870
[  167.729926][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  167.729938][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  167.729982][    C0]  ? irq_work_single+0x1ac/0x240
[  167.729996][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  167.730014][    C0]  __irq_exit_rcu+0xca/0x1f0
[  167.730027][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  167.730038][    C0]  ? rcu_is_watching+0x15/0xb0
[  167.730048][    C0]  irq_exit_rcu+0x9/0x30
[  167.730056][    C0]  sysvec_irq_work+0xa3/0xc0
[  167.730066][    C0]  </IRQ>
[  167.730069][    C0]  <TASK>
[  167.730073][    C0]  asm_sysvec_irq_work+0x1a/0x20
[  167.730082][    C0] RIP: 0010:preempt_schedule_irq+0xb0/0x150
[  167.730094][    C0] Code: 24 20 f6 44 24 21 02 74 0c 90 0f 0b 48 f7 03 08 00 00 00 74 64 bf 01 00 00 00 e8 5b 22 21 f6 e8 96 f5 57 f6 fb bf 01 00 00 00 <e8> 1b ab ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24
[  167.730100][    C0] RSP: 0018:ffffc90004a6f920 EFLAGS: 00000282
[  167.730107][    C0] RAX: 12f82005f3d59700 RBX: 0000000000000000 RCX: 12f82005f3d59700
[  167.730113][    C0] RDX: 0000000000000000 RSI: ffffffff8d998701 RDI: 0000000000000001
[  167.730117][    C0] RBP: ffffc90004a6f9d0 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  167.730123][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 0000000000000000
[  167.730128][    C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff9200094df24
[  167.730143][    C0]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  167.730158][    C0]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  167.730168][    C0]  irqentry_exit+0x6f/0x90
[  167.730177][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  167.730185][    C0] RIP: 0010:search_exception_tables+0x0/0x60
[  167.730198][    C0] Code: 48 0f af f1 48 c7 c7 80 61 d8 8d e9 da e0 d5 09 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 53 48 89 fb 48 c7 c0 80 61 d8 8d 48 c7 c1 64 ce d8 8d
[  167.730204][    C0] RSP: 0018:ffffc90004a6fa98 EFLAGS: 00000246
[  167.730210][    C0] RAX: ffffffff81740ca3 RBX: ffffc90004a6fe28 RCX: 0000000000080000
[  167.730215][    C0] RDX: ffffc90003ee3000 RSI: 0000000000000095 RDI: ffffffff8b6e279d
[  167.730220][    C0] RBP: ffffc90004a6fc20 R08: 0000000000000001 R09: 1ffff11020e533ee
[  167.730225][    C0] R10: dffffc0000000000 R11: ffffed1020e533ef R12: 000000000000000e
[  167.730230][    C0] R13: dffffc0000000000 R14: 1ffff9200094dfc5 R15: 1ffff9200094df60
[  167.730239][    C0]  ? fixup_exception+0x83/0x1c30
[  167.730249][    C0]  ? __put_user_4+0xd/0x20
[  167.730262][    C0]  fixup_exception+0xad/0x1c30
[  167.730272][    C0]  ? mt_find+0x15c/0x5f0
[  167.730285][    C0]  ? __pfx_fixup_exception+0x10/0x10
[  167.730301][    C0]  ? __up_read+0x280/0x680
[  167.730313][    C0]  ? __pfx___up_read+0x10/0x10
[  167.730324][    C0]  kernelmode_fixup_or_oops+0x68/0xf0
[  167.730334][    C0]  __bad_area_nosemaphore+0x11a/0x780
[  167.730353][    C0]  ? __pfx___bad_area_nosemaphore+0x10/0x10
[  167.730363][    C0]  ? rcu_is_watching+0x15/0xb0
[  167.730372][    C0]  ? trace_page_fault_kernel+0x84/0x1e0
[  167.730381][    C0]  exc_page_fault+0x76/0xf0
[  167.730392][    C0]  asm_exc_page_fault+0x26/0x30
[  167.730400][    C0] RIP: 0010:__put_user_4+0xd/0x20
[  167.730409][    C0] Code: 66 89 01 31 c9 0f 1f 00 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 1f 00 <89> 01 31 c9 0f 1f 00 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90
[  167.730415][    C0] RSP: 0018:ffffc90004a6fe50 EFLAGS: 00010246
[  167.730421][    C0] RAX: 000000000000000a RBX: 0000000000000000 RCX: 0000000000000000
[  167.730426][    C0] RDX: 0000000000000000 RSI: ffffffff8db863e2 RDI: ffffffff8be29f80
[  167.730431][    C0] RBP: 000000000000000a R08: 0000000000000000 R09: ffffffff820bbaa0
[  167.730435][    C0] R10: dffffc0000000000 R11: ffffed10041d9219 R12: 0000000000000000
[  167.730440][    C0] R13: 0000000000000000 R14: 000000000000001e R15: 0000000000000005
[  167.730448][    C0]  ? __might_fault+0xb0/0x130
[  167.730460][    C0]  __sys_socketpair+0xb7/0x560
[  167.730478][    C0]  __x64_sys_socketpair+0x9b/0xb0
[  167.730491][    C0]  do_syscall_64+0xfa/0x3b0
[  167.730502][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.730508][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  167.730518][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.730526][    C0] RIP: 0033:0x7f91c318e9a9
[  167.730536][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  167.730542][    C0] RSP: 002b:00007f91c40b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[  167.730549][    C0] RAX: ffffffffffffffda RBX: 00007f91c33b5fa0 RCX: 00007f91c318e9a9
[  167.730555][    C0] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e
[  167.730559][    C0] RBP: 00007f91c3210d69 R08: 0000000000000000 R09: 0000000000000000
[  167.730564][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  167.730568][    C0] R13: 0000000000000000 R14: 00007f91c33b5fa0 R15: 00007fff5e0b3da8
[  167.730582][    C0]  </TASK>

VM DIAGNOSIS:
12:35:37  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000029 RBX=0000000000000029 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000006e10
R8 =ffff888107308237 R9 =1ffff11020e61046 R10=dffffc0000000000 R11=ffffffff85471fa0
R12=dffffc0000000000 R13=ffffffff99af58ba R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff8547201c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f91c40b26c0 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=00000000227a0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffff11026cc75fd RBX=ffff88813663afc0 RCX=ae5d33aa3dfe8100 RDX=0000000000000000
RSI=ffffffff8be29f60 RDI=ffff88813663afe8 RBP=0000000000000000 RSP=ffffc9000323f008
R8 =0000000000000000 R9 =ffffffff822c948e R10=000000000000000f R11=ffffffff81acf520
R12=000000000001184c R13=dffffc0000000000 R14=dffffc0000000000 R15=0000000000001000
RIP=ffffffff81a76877 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fcb822e7d60 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007fcb817866a3 00007fcb817866a3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0000000000000000 000000000001df8a
XMM06=ffffffff8959b164 ffffffff00000007 XMM07=ffffffff00000000 ffffffff81d0728c
XMM08=ffffffff8b109a7d ffffffff00000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
