last executing test programs:

44.07164099s ago: executing program 1 (id=87):
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_type(r1, &(0x7f0000000180), 0xfffffe51)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000040))

43.973478879s ago: executing program 0 (id=90):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="0700000000000000bcf7d1725c60", 0x0, 0x808005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

43.733737822s ago: executing program 1 (id=92):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000c63f1de100000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7ff3, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x0, @perf_bp={0x0, 0x3}, 0x14105, 0x2e, 0xfffffbff, 0x7, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)

43.051845773s ago: executing program 0 (id=94):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x6, 0x40, 0x40, 0x41}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000a40)="69032231ae7b520378", &(0x7f00000008c0), 0x1003, r0}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r0, &(0x7f00000014c0), &(0x7f0000000b40)=""/31}, 0x20)

43.051594496s ago: executing program 1 (id=95):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xf, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="0000000000000000009dc9000000", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

42.959246201s ago: executing program 0 (id=97):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNGETDEVNETNS(r0, 0xff06, 0x0)

42.88322773s ago: executing program 1 (id=99):
r0 = socket$kcm(0x10, 0x3, 0x10)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
perf_event_open(0x0, 0xffffffffffffffff, 0x7, r4, 0xb)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x8, 0xc, 0x1, 0x1, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022000b48f1f403c5c0de7af90124fc60", 0x14}], 0x1}, 0x0)

42.833290417s ago: executing program 2 (id=100):
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='6\x00\x00\x00@'], 0x20)

42.780895207s ago: executing program 0 (id=101):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875"], 0xfe1b)
r0 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x76, &(0x7f0000000000), 0x8)

42.780792625s ago: executing program 2 (id=102):
r0 = socket$kcm(0xa, 0x2, 0x73)
setsockopt$sock_attach_bpf(r0, 0x29, 0x35, 0x0, 0xfcd8)

42.003777272s ago: executing program 0 (id=103):
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r0=>0x0}}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x8f}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x58, '\x00', r0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0xff, 0x0, 0xfd, 0x0, 0xb0, 0x25108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x1, @perf_config_ext={0x4}, 0x2a10, 0xffffffffffffffff, 0x2, 0x0, 0x5, 0x8002000a, 0x0, 0x0, 0xfffffff8, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0x2)
r2 = socket$kcm(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x2, 0x3, 0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000018008103e00312ba0d8105040a600000ff0f040b067c55a1bc000900b80006990300000015000500fe808178a8001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x4, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0x0, 0x98, &(0x7f0000000400), &(0x7f0000000700)=""/152, 0x7, 0x0, 0x1e, 0x0, &(0x7f0000000440)="59ea2998f7b14a52de9f659d8dd86d7600814925b127d507ba10832ce989", &(0x7f00000007c0), 0x6, 0x0, 0x1}, 0x50)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f00000004c0), 0x9)
setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r4 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r4, 0x29, 0x23, &(0x7f0000000040), 0xcf)
r5 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r5, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212970902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
socket$kcm(0x29, 0x7, 0x0)

42.00351351s ago: executing program 2 (id=104):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x0)
openat$cgroup_pressure(r0, 0x0, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000001c0)='sched_kthread_stop_ret\x00', r2}, 0x10)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000003c0)=""/85, 0x55}, {&(0x7f0000000440)=""/93, 0x5d}, {0x0}], 0x3, &(0x7f00000004c0)}, 0x2)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x3)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000680)={0x0, 0x61, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

41.964634904s ago: executing program 0 (id=105):
socket$kcm(0x2a, 0x2, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="6127e29a10", 0x5}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r3, 0x400454cd, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48)
socket$kcm(0x2d, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x5, 0x106)

41.957613138s ago: executing program 2 (id=106):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={&(0x7f00000000c0), 0xe}, 0x14105, 0x950, 0xfffffbff, 0x1, 0x2, 0x200, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_bp={&(0x7f00000002c0), 0x2}, 0x8080, 0x2, 0x0, 0x1, 0x7fffffff, 0x1}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, 0x0})
close(r0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x10000002, 0x0, 0x0, 0xc}]}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40}, 0x94)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r2, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x2880, 0xc8, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8100072b00fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef)

41.858322378s ago: executing program 1 (id=107):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0, 0x8}, 0x390, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r0, 0x6, 0x12, 0x0, 0x0)

41.759400518s ago: executing program 1 (id=108):
socket$kcm(0x2a, 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = socket$kcm(0x25, 0x1, 0x0)
sendmsg(r0, 0x0, 0x4)
socket$kcm(0x10, 0x2, 0x10)
socket$kcm(0x2b, 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600", 0x34}], 0x1}, 0x0)
socket$kcm(0xa, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xd)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xcf}, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x402000a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x29, 0x23, &(0x7f0000000040), 0xcf)
r4 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r4, 0x29, 0x23, &(0x7f0000000040), 0xcf)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212970902000000e4a17c45c85686605e", 0x11}], 0x1}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4000000)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0xfffffffffffffe86, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

41.758924791s ago: executing program 2 (id=109):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94)

41.702681096s ago: executing program 2 (id=110):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0xb, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
close(r0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080))

26.649460043s ago: executing program 32 (id=105):
socket$kcm(0x2a, 0x2, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="6127e29a10", 0x5}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r3, 0x400454cd, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48)
socket$kcm(0x2d, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x5, 0x106)

0s ago: executing program 33 (id=108):
socket$kcm(0x2a, 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = socket$kcm(0x25, 0x1, 0x0)
sendmsg(r0, 0x0, 0x4)
socket$kcm(0x10, 0x2, 0x10)
socket$kcm(0x2b, 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600", 0x34}], 0x1}, 0x0)
socket$kcm(0xa, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xd)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xcf}, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x402000a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x29, 0x23, &(0x7f0000000040), 0xcf)
r4 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r4, 0x29, 0x23, &(0x7f0000000040), 0xcf)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212970902000000e4a17c45c85686605e", 0x11}], 0x1}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4000000)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0xfffffffffffffe86, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:14178' (ED25519) to the list of known hosts.
syzkaller login: [   55.629262][ T5815] cgroup: Unknown subsys name 'net'
[   55.805951][ T5815] cgroup: Unknown subsys name 'cpuset'
[   55.810784][ T5815] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.189584][ T5815] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   62.180782][ T5220] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.193426][ T5220] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.196636][ T5220] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.200593][ T5220] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.204641][ T5220] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   62.210029][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.214231][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.217145][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.220007][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.222748][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.297819][ T5220] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.301293][ T5220] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.313566][ T5220] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.317364][ T5220] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.321400][ T5220] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.509343][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   62.586727][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   62.644110][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.647326][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.649755][ T5834] bridge_slave_0: entered allmulticast mode
[   62.653557][ T5834] bridge_slave_0: entered promiscuous mode
[   62.707237][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.710110][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.713983][ T5834] bridge_slave_1: entered allmulticast mode
[   62.716911][ T5834] bridge_slave_1: entered promiscuous mode
[   62.776863][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.780278][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.784473][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.787085][ T5830] bridge_slave_0: entered allmulticast mode
[   62.790646][ T5830] bridge_slave_0: entered promiscuous mode
[   62.796215][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.799378][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.801850][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.806104][ T5830] bridge_slave_1: entered allmulticast mode
[   62.809754][ T5830] bridge_slave_1: entered promiscuous mode
[   62.844390][ T5834] team0: Port device team_slave_0 added
[   62.847327][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   62.854807][ T5834] team0: Port device team_slave_1 added
[   62.866836][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.888304][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.935944][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.938414][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.950393][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.958178][ T5830] team0: Port device team_slave_0 added
[   62.966642][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.969551][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.980239][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.988874][ T5830] team0: Port device team_slave_1 added
[   63.045313][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.048035][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.058265][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.065219][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.068172][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.071101][ T5839] bridge_slave_0: entered allmulticast mode
[   63.075009][ T5839] bridge_slave_0: entered promiscuous mode
[   63.079346][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.081951][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.085308][ T5839] bridge_slave_1: entered allmulticast mode
[   63.088334][ T5839] bridge_slave_1: entered promiscuous mode
[   63.091337][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.094351][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.104483][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.164312][ T5834] hsr_slave_0: entered promiscuous mode
[   63.167362][ T5834] hsr_slave_1: entered promiscuous mode
[   63.174439][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.203436][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.255220][ T5830] hsr_slave_0: entered promiscuous mode
[   63.258259][ T5830] hsr_slave_1: entered promiscuous mode
[   63.261112][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.264754][ T5830] Cannot create hsr debugfs directory
[   63.286041][ T5839] team0: Port device team_slave_0 added
[   63.291401][ T5839] team0: Port device team_slave_1 added
[   63.354948][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.357809][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.368803][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.389722][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.391991][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.401328][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.517620][ T5839] hsr_slave_0: entered promiscuous mode
[   63.520114][ T5839] hsr_slave_1: entered promiscuous mode
[   63.522286][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.524939][ T5839] Cannot create hsr debugfs directory
[   63.645018][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.654307][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.686616][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.706122][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.762040][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.772485][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.785267][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.794038][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.848896][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.860558][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.868779][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.875755][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.978262][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.988941][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.018095][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   64.026011][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   64.040400][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.043701][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.059283][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.065277][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.068235][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.072777][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.075470][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.100382][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.103700][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.133158][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   64.151144][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.154122][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.176450][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.179424][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.216151][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   64.274424][ T5220] Bluetooth: hci0: command tx timeout
[   64.275026][ T5835] Bluetooth: hci1: command tx timeout
[   64.353925][ T5835] Bluetooth: hci2: command tx timeout
[   64.395252][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.475998][ T5834] veth0_vlan: entered promiscuous mode
[   64.485985][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.503693][ T5834] veth1_vlan: entered promiscuous mode
[   64.518199][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.560854][ T5834] veth0_macvtap: entered promiscuous mode
[   64.570921][ T5830] veth0_vlan: entered promiscuous mode
[   64.581350][ T5834] veth1_macvtap: entered promiscuous mode
[   64.590732][ T5830] veth1_vlan: entered promiscuous mode
[   64.610778][ T5839] veth0_vlan: entered promiscuous mode
[   64.621851][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.639336][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.645455][ T5839] veth1_vlan: entered promiscuous mode
[   64.659644][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.664529][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.668145][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.671652][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.693717][ T5830] veth0_macvtap: entered promiscuous mode
[   64.713770][ T5830] veth1_macvtap: entered promiscuous mode
[   64.771679][ T5839] veth0_macvtap: entered promiscuous mode
[   64.788696][ T5839] veth1_macvtap: entered promiscuous mode
[   64.796596][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.801564][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.820483][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.844629][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.853644][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.858498][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.862136][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.865905][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.874548][ T5830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.878199][ T5830] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.881716][ T5830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.885708][ T5830] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.892504][ T5839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.898469][ T5839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.901917][ T5839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.906378][ T5839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.000000][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.057351][  T158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.060330][  T158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.095200][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.098049][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.150925][ T5896] Illegal XDP return value 4150642813 on prog  (id 4) dev N/A, expect packet loss!
[   65.183704][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.186892][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.210195][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.216151][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.349075][ T5900] syz.0.4 uses obsolete (PF_INET,SOCK_PACKET)
[   65.636687][ T5915] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7'.
[   65.641247][ T5910] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7'.
[   65.702142][ T5919] netlink: 'syz.0.11': attribute type 11 has an invalid length.
[   65.715683][ T5919] netlink: 'syz.0.11': attribute type 11 has an invalid length.
[   65.718907][ T5919] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.11'.
[   65.945690][ T5932] netlink: 'syz.0.17': attribute type 29 has an invalid length.
[   65.949891][ T5932] netlink: 'syz.0.17': attribute type 29 has an invalid length.
[   65.960172][ T5932] netlink: 'syz.0.17': attribute type 29 has an invalid length.
[   66.209614][ T5948] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.25'.
[   66.300845][ T5953] netlink: 'syz.2.26': attribute type 22 has an invalid length.
[   66.305879][ T5953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.26'.
[   66.353524][ T5835] Bluetooth: hci1: command tx timeout
[   66.353586][ T5220] Bluetooth: hci0: command tx timeout
[   66.435513][ T5220] Bluetooth: hci2: command tx timeout
[   67.820002][ T5987] pim6reg1: entered allmulticast mode
[   68.146960][ T6008] netlink: 'syz.1.51': attribute type 2 has an invalid length.
[   68.365266][ T6015] raw_sendmsg: syz.1.55 forgot to set AF_INET. Fix it!
[   68.374975][ T6015] Zero length message leads to an empty skb
[   68.433395][ T5220] Bluetooth: hci0: command tx timeout
[   68.435786][ T5220] Bluetooth: hci1: command tx timeout
[   68.513097][ T5835] Bluetooth: hci2: command tx timeout
[   68.785073][ T6030] netlink: 'syz.0.61': attribute type 10 has an invalid length.
[   68.788550][ T6030] netlink: 40 bytes leftover after parsing attributes in process `syz.0.61'.
[   68.795066][ T6030] vcan0: entered promiscuous mode
[   68.803851][ T6030] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check.
[   68.894421][ T5835] Bluetooth: hci0: ISO packet for unknown connection handle 0
[   69.345866][ T6052] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.71'.
[   70.230222][ T6079] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.84'.
[   70.321218][ T6088] netlink: 'syz.2.88': attribute type 2 has an invalid length.
[   70.513117][ T5835] Bluetooth: hci1: command tx timeout
[   70.513792][ T5220] Bluetooth: hci0: command tx timeout
[   70.593318][ T5220] Bluetooth: hci2: command tx timeout
[   71.236671][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.239722][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.421607][ T6106] netlink: 'syz.2.96': attribute type 41 has an invalid length.
[   71.683703][ T6122] IPv6: NLM_F_REPLACE set, but no existing node found!
[   71.877457][ T6127] netlink: 'syz.2.104': attribute type 10 has an invalid length.
[   72.370056][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1187076941 wd_nsec: 1187076956
[   72.669797][ T6138] netlink: 'syz.1.108': attribute type 10 has an invalid length.
[   72.851851][ T6141] syzkaller0: tun_chr_ioctl cmd 1074025677
[   72.855062][ T6141] syzkaller0: Linktype set failed because interface is up
[   73.896010][    C1] hrtimer: interrupt took 86010 ns
[  115.077355][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  115.081383][   T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  115.085468][   T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  115.089060][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  115.095208][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  115.098375][   T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  115.102391][   T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  115.106262][   T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  115.111802][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  115.117903][   T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  115.122495][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  115.126489][   T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  115.130323][   T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  115.135899][   T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  115.146772][ T5220] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  117.153645][ T6171] Bluetooth: hci3: command tx timeout
[  117.233237][ T5832] Bluetooth: hci5: command tx timeout
[  117.235612][ T6171] Bluetooth: hci4: command tx timeout
[  119.234228][ T6171] Bluetooth: hci3: command tx timeout
[  119.323277][ T6171] Bluetooth: hci4: command tx timeout
[  119.325668][ T6171] Bluetooth: hci5: command tx timeout
[  121.324779][ T5832] Bluetooth: hci3: command tx timeout
[  121.393213][ T5832] Bluetooth: hci5: command tx timeout
[  121.395567][ T5832] Bluetooth: hci4: command tx timeout
[  123.393199][ T6171] Bluetooth: hci3: command tx timeout
[  123.474648][ T6171] Bluetooth: hci4: command tx timeout
[  123.477083][ T6171] Bluetooth: hci5: command tx timeout
[  148.419719][ T6171] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  148.426418][ T6171] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  148.429920][ T6171] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  148.436072][ T6171] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  148.439676][ T6171] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  148.483233][ T6171] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  148.489158][ T6171] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  148.494660][ T6171] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  148.498809][ T6171] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  148.502588][ T6171] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  150.513258][ T5832] Bluetooth: hci6: command tx timeout
[  150.595456][ T5832] Bluetooth: hci7: command tx timeout
[  152.594478][ T5832] Bluetooth: hci6: command tx timeout
[  152.673087][ T5832] Bluetooth: hci7: command tx timeout
[  154.673184][ T5832] Bluetooth: hci6: command tx timeout
[  154.753264][ T5832] Bluetooth: hci7: command tx timeout
[  156.763352][ T5832] Bluetooth: hci6: command tx timeout
[  156.834478][ T5832] Bluetooth: hci7: command tx timeout
[  175.494792][ T6171] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  175.498646][ T6171] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  175.502041][ T6171] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  175.508884][ T6171] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  175.512639][ T6171] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  177.564814][ T6171] Bluetooth: hci8: command tx timeout
[  177.872965][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  177.875194][    C1] rcu: 	1-....: (1 GPs behind) idle=06fc/1/0x4000000000000000 softirq=14353/14354 fqs=4576
[  177.879476][    C1] rcu: 	         hardirqs   softirqs   csw/system
[  177.881640][    C1] rcu: 	 number:   974281          0            0
[  177.883783][    C1] rcu: 	cputime:    24176      28313           96   ==> 52490(ms)
[  177.886777][    C1] rcu: 	(t=10500 jiffies g=8213 q=3576 ncpus=2)
[  177.888776][    C1] CPU: 1 UID: 0 PID: 6138 Comm: syz.1.108 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  177.888786][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  177.888790][    C1] RIP: 0010:rcu_read_unlock_special+0x87/0x4c0
[  177.888806][    C1] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 92 37 f8 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
[  177.888811][    C1] RSP: 0018:ffffc900001e05e0 EFLAGS: 00000206
[  177.888819][    C1] RAX: a10c193f05ae3d00 RBX: 1ffff9200003c0c4 RCX: a10c193f05ae3d00
[  177.888823][    C1] RDX: 0000000000000002 RSI: ffffffff8d998701 RDI: ffffffff8be29f80
[  177.888828][    C1] RBP: ffffc900001e06d8 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  177.888832][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffffffff8e144400
[  177.888837][    C1] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000002
[  177.888841][    C1] FS:  00007f1da938b6c0(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
[  177.888847][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  177.888851][    C1] CR2: 0000001b30717ff8 CR3: 00000000296da000 CR4: 00000000000006f0
[  177.888875][    C1] Call Trace:
[  177.888880][    C1]  <IRQ>
[  177.888884][    C1]  ? __pfx_perf_trace_lock+0x10/0x10
[  177.888892][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  177.888903][    C1]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  177.888912][    C1]  ? lock_acquire+0x175/0x360
[  177.888919][    C1]  ? unwind_next_frame+0xa5/0x2390
[  177.888931][    C1]  __rcu_read_unlock+0x84/0xe0
[  177.888941][    C1]  ? unwind_next_frame+0xa5/0x2390
[  177.888948][    C1]  unwind_next_frame+0x19ae/0x2390
[  177.888958][    C1]  ? unwind_next_frame+0xa5/0x2390
[  177.888966][    C1]  ? do_setlink+0xc55/0x41c0
[  177.888976][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  177.888985][    C1]  arch_stack_walk+0x11c/0x150
[  177.888996][    C1]  ? rtnl_newlink+0x160b/0x1c70
[  177.889008][    C1]  stack_trace_save+0x9c/0xe0
[  177.889016][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  177.889024][    C1]  ? kvm_sched_clock_read+0x11/0x20
[  177.889034][    C1]  ? perf_trace_lock+0xec/0x3b0
[  177.889044][    C1]  kasan_save_track+0x3e/0x80
[  177.889054][    C1]  ? kasan_save_track+0x3e/0x80
[  177.889062][    C1]  ? kasan_save_free_info+0x46/0x50
[  177.889070][    C1]  ? __kasan_slab_free+0x62/0x70
[  177.889075][    C1]  ? kmem_cache_free+0x18f/0x400
[  177.889081][    C1]  ? rcu_core+0xca8/0x1710
[  177.889087][    C1]  ? handle_softirqs+0x286/0x870
[  177.889094][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  177.889100][    C1]  ? irq_exit_rcu+0x9/0x30
[  177.889106][    C1]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  177.889114][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  177.889120][    C1]  ? kasan_save_alloc_info+0x11/0x50
[  177.889128][    C1]  ? __kasan_kmalloc+0x93/0xb0
[  177.889133][    C1]  ? __kmalloc_node_track_caller_noprof+0x271/0x4e0
[  177.889139][    C1]  ? kmalloc_reserve+0x136/0x290
[  177.889184][    C1]  ? __alloc_skb+0x142/0x2d0
[  177.889189][    C1]  ? rtmsg_ifinfo_build_skb+0x84/0x260
[  177.889197][    C1]  ? rtmsg_ifinfo+0x8c/0x1a0
[  177.889204][    C1]  ? __dev_notify_flags+0xf4/0x2e0
[  177.889211][    C1]  ? netif_change_flags+0xe8/0x1a0
[  177.889217][    C1]  ? do_setlink+0xc55/0x41c0
[  177.889239][    C1]  ? rcu_core+0xca8/0x1710
[  177.889245][    C1]  kasan_save_free_info+0x46/0x50
[  177.889254][    C1]  __kasan_slab_free+0x62/0x70
[  177.889260][    C1]  kmem_cache_free+0x18f/0x400
[  177.889267][    C1]  ? __pfx_mt_free_rcu+0x10/0x10
[  177.889276][    C1]  ? rcu_core+0xc34/0x1710
[  177.889283][    C1]  rcu_core+0xca8/0x1710
[  177.889305][    C1]  ? __pfx_rcu_core+0x10/0x10
[  177.889323][    C1]  ? __pfx_tmigr_handle_remote+0x10/0x10
[  177.889335][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  177.889366][    C1]  handle_softirqs+0x286/0x870
[  177.889381][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  177.889400][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  177.889420][    C1]  __irq_exit_rcu+0xca/0x1f0
[  177.889428][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  177.889439][    C1]  irq_exit_rcu+0x9/0x30
[  177.889445][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  177.889454][    C1]  </IRQ>
[  177.889456][    C1]  <TASK>
[  177.889459][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  177.889466][    C1] RIP: 0010:kasan_save_alloc_info+0x11/0x50
[  177.889474][    C1] Code: cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 41 56 53 49 89 f6 48 63 87 bc 00 00 00 <48> 85 c0 0f 94 c1 49 01 c6 0f 94 c0 08 c8 74 09 5b 41 5e c3 cc cc
[  177.889479][    C1] RSP: 0018:ffffc900069a68e8 EFLAGS: 00000202
[  177.889486][    C1] RAX: 0000000000001000 RBX: ffff88811f9fe000 RCX: 0000000000000000
[  177.889490][    C1] RDX: 0000000000082820 RSI: ffff88811f9fe000 RDI: ffff88801a442140
[  177.889495][    C1] RBP: 0000000000082820 R08: dffffc0000000000 R09: 0000000000000000
[  177.889499][    C1] R10: ffffed1023f3fe00 R11: ffffffff81acf520 R12: 0000000000001000
[  177.889503][    C1] R13: ffff88801a442140 R14: ffff88811f9fe000 R15: 0000000000001000
[  177.889509][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  177.889524][    C1]  __kasan_kmalloc+0x93/0xb0
[  177.889531][    C1]  __kmalloc_node_track_caller_noprof+0x271/0x4e0
[  177.889538][    C1]  ? __alloc_skb+0x142/0x2d0
[  177.889546][    C1]  ? __alloc_skb+0x142/0x2d0
[  177.889551][    C1]  kmalloc_reserve+0x136/0x290
[  177.889560][    C1]  __alloc_skb+0x142/0x2d0
[  177.889569][    C1]  rtmsg_ifinfo_build_skb+0x84/0x260
[  177.889587][    C1]  rtmsg_ifinfo+0x8c/0x1a0
[  177.889599][    C1]  __dev_notify_flags+0xf4/0x2e0
[  177.889607][    C1]  ? __pfx___dev_notify_flags+0x10/0x10
[  177.889613][    C1]  ? __dev_change_flags+0x4cc/0x6d0
[  177.889623][    C1]  ? __pfx___dev_change_flags+0x10/0x10
[  177.889633][    C1]  ? trace_call_bpf+0xb7/0x850
[  177.889642][    C1]  netif_change_flags+0xe8/0x1a0
[  177.889651][    C1]  do_setlink+0xc55/0x41c0
[  177.889659][    C1]  ? __pfx_trace_call_bpf+0x10/0x10
[  177.889665][    C1]  ? trace_sched_exit_tp+0x38/0x120
[  177.889679][    C1]  ? __pfx_do_setlink+0x10/0x10
[  177.889685][    C1]  ? perf_trace_lock+0xec/0x3b0
[  177.889695][    C1]  ? __pfx_perf_trace_lock+0x10/0x10
[  177.889704][    C1]  ? do_raw_spin_lock+0x121/0x290
[  177.889713][    C1]  ? __mutex_lock+0xa0d/0xe80
[  177.889725][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  177.889733][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  177.889742][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  177.889749][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  177.889759][    C1]  ? rcu_is_watching+0x15/0xb0
[  177.889768][    C1]  ? __mutex_lock+0xa6d/0xe80
[  177.889778][    C1]  ? __mutex_lock+0x51b/0xe80
[  177.889789][    C1]  ? rtnl_newlink+0x8db/0x1c70
[  177.889799][    C1]  ? __pfx___mutex_lock+0x10/0x10
[  177.889812][    C1]  ? ns_capable+0x8a/0xf0
[  177.889821][    C1]  ? rtnl_link_get_net_capable+0x16a/0x350
[  177.889829][    C1]  rtnl_newlink+0x160b/0x1c70
[  177.889844][    C1]  ? __pfx_rtnl_newlink+0x10/0x10
[  177.889855][    C1]  ? __pfx_trace_call_bpf+0x10/0x10
[  177.889864][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  177.889876][    C1]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  177.889886][    C1]  ? perf_trace_preemptirq_template+0x280/0x340
[  177.889896][    C1]  ? __local_bh_enable_ip+0xce/0x1c0
[  177.889904][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  177.889913][    C1]  ? nlmon_xmit+0xb0/0x100
[  177.889922][    C1]  ? kmem_cache_free+0x18f/0x400
[  177.889932][    C1]  ? __local_bh_enable_ip+0x12d/0x1c0
[  177.889939][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  177.889948][    C1]  ? __local_bh_enable_ip+0x12d/0x1c0
[  177.889955][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  177.889964][    C1]  ? __dev_queue_xmit+0x27e/0x3a70
[  177.889977][    C1]  ? __lock_acquire+0xab9/0xd20
[  177.889994][    C1]  ? __pfx_rtnl_newlink+0x10/0x10
[  177.890003][    C1]  rtnetlink_rcv_msg+0x7cf/0xb70
[  177.890015][    C1]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  177.890024][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  177.890033][    C1]  ? ref_tracker_free+0x63a/0x7d0
[  177.890041][    C1]  ? __copy_skb_header+0xa7/0x550
[  177.890049][    C1]  ? __pfx_ref_tracker_free+0x10/0x10
[  177.890058][    C1]  ? __skb_clone+0x63/0x7a0
[  177.890068][    C1]  netlink_rcv_skb+0x208/0x470
[  177.890076][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  177.890086][    C1]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  177.890098][    C1]  ? netlink_deliver_tap+0x2e/0x1b0
[  177.890105][    C1]  ? netlink_deliver_tap+0x2e/0x1b0
[  177.890113][    C1]  netlink_unicast+0x75c/0x8e0
[  177.890128][    C1]  netlink_sendmsg+0x805/0xb30
[  177.890139][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  177.890169][    C1]  ? aa_sock_msg_perm+0x94/0x160
[  177.890180][    C1]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  177.890188][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  177.890195][    C1]  __sock_sendmsg+0x21c/0x270
[  177.890207][    C1]  ____sys_sendmsg+0x505/0x830
[  177.890217][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[  177.890229][    C1]  ? import_iovec+0x74/0xa0
[  177.890237][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  177.890246][    C1]  ? __pfx____sys_sendmsg+0x10/0x10
[  177.890269][    C1]  ? __fget_files+0x2a/0x420
[  177.890276][    C1]  ? __fget_files+0x3a0/0x420
[  177.890288][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  177.890294][    C1]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  177.890303][    C1]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  177.890315][    C1]  ? rcu_is_watching+0x15/0xb0
[  177.890325][    C1]  ? do_syscall_64+0xbe/0x3b0
[  177.890335][    C1]  do_syscall_64+0xfa/0x3b0
[  177.890345][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.890350][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  177.890359][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.890365][    C1] RIP: 0033:0x7f1da858eb69
[  177.890373][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  177.890378][    C1] RSP: 002b:00007f1da938b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  177.890385][    C1] RAX: ffffffffffffffda RBX: 00007f1da87b5fa0 RCX: 00007f1da858eb69
[  177.890389][    C1] RDX: 0000000004000000 RSI: 0000200000000680 RDI: 000000000000000d
[  177.890393][    C1] RBP: 00007f1da8611df1 R08: 0000000000000000 R09: 0000000000000000
[  177.890397][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  177.890401][    C1] R13: 0000000000000000 R14: 00007f1da87b5fa0 R15: 00007ffcea15fbb8
[  177.890412][    C1]  </TASK>
[  178.240553][    C1] sched: DL replenish lagged too much
[  179.633056][ T6171] Bluetooth: hci8: command tx timeout
[  181.713331][ T6171] Bluetooth: hci8: command tx timeout
[  183.793256][ T6171] Bluetooth: hci8: command tx timeout
[  185.953115][ T5832] Bluetooth: hci1: command 0x0406 tx timeout

VM DIAGNOSIS:
01:51:25  Registers:
info registers vcpu 0

CPU#0
RAX=84d4388f75f78800 RBX=ffffffff81975f18 RCX=84d4388f75f78800 RDX=0000000000000001
RSI=ffffffff8d998701 RDI=ffffffff8be29f80 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa1e8f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6e84f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000556ffdd72740 CR3=00000001107fc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001df910
R8 =ffff8881088a8237 R9 =1ffff11021115046 R10=dffffc0000000000 R11=ffffffff85471fa0
R12=dffffc0000000000 R13=ffffffff99af58c6 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff8547201c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f1da938b6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b30717ff8 CR3=00000000296da000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f1da8787498 00007f1da8787470 XMM03=00007f1da87874a8 00007f1da87874a0
XMM04=00007f1da92ed100 00007f1da8787460 XMM05=00007f1da8787478 00007f1da87874c0
XMM06=00007f1da87874b8 00007f1da87874b0 XMM07=00007f1da87874a8 00007f1da87874a0
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f1da8612f89
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
