last executing test programs:

16.774738234s ago: executing program 2 (id=121):
perf_event_open(&(0x7f0000002800)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0x4}, 0x11411d, 0x32, 0xfffffbfd, 0x3, 0x8000, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7000000000000007b5af8ff00000000bfa200000000000007020000d6ffffffb703000008000000b704000000000000850000001400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f0000000740)="000000000000c000ee6e3e20630c", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

16.367212857s ago: executing program 0 (id=132):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001)
sendmsg(r0, &(0x7f0000000880)={0x0, 0x3200, &(0x7f0000000840)=[{&(0x7f0000000780)="a9", 0xffd1}], 0x11}, 0x800)
sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000200)='s', 0x1}], 0x1}, 0x6000081)

16.287321633s ago: executing program 0 (id=134):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069003e000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21)

16.197558656s ago: executing program 0 (id=135):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132})
write$cgroup_subtree(r0, &(0x7f0000000840)=ANY=[], 0xfffffe14)

16.007397425s ago: executing program 0 (id=137):
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040), 0x4)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x100ca, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000001004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x510a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, 0x0, 0x0)
close(r1)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/time\x00')
socket$kcm(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_freezer_state(r2, &(0x7f0000000180), 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[@ANYBLOB='+cpu '], 0x5)

15.893324176s ago: executing program 2 (id=142):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8902, &(0x7f0000000380)='\x06\xec\xb1G\x19=9\x1f\"M\xca\xc4n\xfa\xf1\xec\xdf1\xfa\x9c,\x7f\xbfo\xbf\x1fG\xf3\xa6\x8e\xa3_\xbbx\b_5i1\xc4\xaa\xf6\xc3l4\x0eI\xa0\n\f\xbd\x16\xd3o\xd1\xfc\x1d\x86\xf9@\xce\xcaE\xdc<\x10\xf5\xe6\xba\x97\xf5\x92\r\xeb\xc6U\x88Xv\xec\x84\xb4\x19\xffk\xb2\xee\x89\x8e\x91 \xb2\x0e\x9a{\xac/\xe7R\xa5\x9chZ\xcd\x99>\x15vx\xc3\x7f\x9c\xe7\xd5\x84\xbe\v\xea\x98\'\xb7\xd1\x12\x00LN^\xc8\xb7\x80F!\xf9\x85\xc3\xe7#\x1e\x9e\xbfj\x89\xf4\xaf\xd5\xad\xaf\xb7\xdc\xac')

15.832370731s ago: executing program 2 (id=144):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xa9}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2004888c)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24)
close(r0)

15.831375114s ago: executing program 2 (id=145):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r0, 0x400454ce, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})

15.769878383s ago: executing program 1 (id=146):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="180000007600a9fe059f317a9dab00000000000340000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

15.752575854s ago: executing program 0 (id=147):
r0 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x0, 0x48a, 0x0, 0x0)

15.752154021s ago: executing program 1 (id=148):
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x12, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28)
mkdir(&(0x7f00000000c0)='./cgroup/file0/file0\x00', 0x81)

15.678622803s ago: executing program 2 (id=149):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r1]}}], 0x20, 0x841}, 0x84)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x4040)

15.677966232s ago: executing program 1 (id=150):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x6, 0x4, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x2, 0x0, 0x3, 0x0, 0xb}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x5}, 0x94)

15.677468022s ago: executing program 0 (id=151):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x100008, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a80016002000014003", 0x39}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000055009155090893b31b71a54a07"], 0xfe33)

15.674671819s ago: executing program 2 (id=152):
perf_event_open(&(0x7f0000001a80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0xa3, 0xffffffff, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x10000, 0xaea}, 0x14105, 0xf, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

15.519133952s ago: executing program 1 (id=153):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10)

15.518932723s ago: executing program 1 (id=154):
bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB], 0x48)
r0 = socket$kcm(0x15, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0)

15.518587548s ago: executing program 1 (id=155):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000200)="442d3ad11752a171df318767ddf8", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
setsockopt$sock_attach_bpf(r2, 0x29, 0x1a, &(0x7f0000000140), 0x4)
sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}, 0x20000002)
r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8003}, 0x43, 0x2e, 0xfffffbff, 0x3, 0x2, 0x2, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x9, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1, <r8=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000001c0)=r7}, 0x20)
r9 = socket$kcm(0x2c, 0x3, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r11 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r11, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0)
recvmsg(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000dc0)=""/255, 0xff}], 0x1, &(0x7f0000000480)=""/19, 0x13}, 0x40000010)
setsockopt$sock_attach_bpf(r9, 0x11b, 0x6, &(0x7f0000000000)=r10, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1, <r12=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x2a, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x7, 0xb, 0x0, 0xfffffffffffffff0, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7b2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}}, @generic={0x9, 0x6, 0xb, 0x7f, 0xffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, 0x0, 0xd, 0x65, &(0x7f0000000300)=""/101, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x4, 0x7ff, 0xfffffffa}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000600), &(0x7f0000000640)=[{0x0, 0x4, 0x5, 0x8}, {0x2, 0x1, 0xe, 0x3}, {0x2, 0x4, 0xf, 0xb}, {0x2, 0x4, 0x7, 0xb}, {0x3, 0x1, 0x10, 0xc}], 0x10, 0xb0000000}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0100"})

151.660967ms ago: executing program 32 (id=151):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x100008, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a80016002000014003", 0x39}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000055009155090893b31b71a54a07"], 0xfe33)

94.597371ms ago: executing program 33 (id=155):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000200)="442d3ad11752a171df318767ddf8", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
setsockopt$sock_attach_bpf(r2, 0x29, 0x1a, &(0x7f0000000140), 0x4)
sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}, 0x20000002)
r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8003}, 0x43, 0x2e, 0xfffffbff, 0x3, 0x2, 0x2, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x9, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1, <r8=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000001c0)=r7}, 0x20)
r9 = socket$kcm(0x2c, 0x3, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r11 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r11, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0)
recvmsg(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000dc0)=""/255, 0xff}], 0x1, &(0x7f0000000480)=""/19, 0x13}, 0x40000010)
setsockopt$sock_attach_bpf(r9, 0x11b, 0x6, &(0x7f0000000000)=r10, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1, <r12=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x2a, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x7, 0xb, 0x0, 0xfffffffffffffff0, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7b2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}}, @generic={0x9, 0x6, 0xb, 0x7f, 0xffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, 0x0, 0xd, 0x65, &(0x7f0000000300)=""/101, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x4, 0x7ff, 0xfffffffa}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000600), &(0x7f0000000640)=[{0x0, 0x4, 0x5, 0x8}, {0x2, 0x1, 0xe, 0x3}, {0x2, 0x4, 0xf, 0xb}, {0x2, 0x4, 0x7, 0xb}, {0x3, 0x1, 0x10, 0xc}], 0x10, 0xb0000000}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0100"})

0s ago: executing program 34 (id=152):
perf_event_open(&(0x7f0000001a80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0xa3, 0xffffffff, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x10000, 0xaea}, 0x14105, 0xf, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:18846' (ED25519) to the list of known hosts.
syzkaller login: [   49.327145][ T5763] cgroup: Unknown subsys name 'net'
[   49.518385][ T5763] cgroup: Unknown subsys name 'cpuset'
[   49.524293][ T5763] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.569356][ T5763] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.423937][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.427196][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.429981][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.433707][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.438143][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.496301][ T5223] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.500303][ T5223] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.503796][ T5223] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.514174][ T5223] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.528598][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.533251][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.536874][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.540923][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.571872][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.594743][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.722897][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   56.888297][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.891380][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.895486][ T5831] bridge_slave_0: entered allmulticast mode
[   56.899338][ T5831] bridge_slave_0: entered promiscuous mode
[   56.938729][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.942026][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.945464][ T5831] bridge_slave_1: entered allmulticast mode
[   56.949623][ T5831] bridge_slave_1: entered promiscuous mode
[   57.008913][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.013001][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   57.030806][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.042251][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   57.109806][ T5831] team0: Port device team_slave_0 added
[   57.121124][ T5831] team0: Port device team_slave_1 added
[   57.208046][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.211301][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.214325][ T5836] bridge_slave_0: entered allmulticast mode
[   57.218970][ T5836] bridge_slave_0: entered promiscuous mode
[   57.225387][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.228384][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.239724][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.246882][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.249859][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.261692][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.286002][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.289090][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.292060][ T5836] bridge_slave_1: entered allmulticast mode
[   57.297852][ T5836] bridge_slave_1: entered promiscuous mode
[   57.344883][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.347784][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.350641][ T5838] bridge_slave_0: entered allmulticast mode
[   57.355776][ T5838] bridge_slave_0: entered promiscuous mode
[   57.387064][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.390045][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.393077][ T5838] bridge_slave_1: entered allmulticast mode
[   57.398451][ T5838] bridge_slave_1: entered promiscuous mode
[   57.405636][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.415953][ T5831] hsr_slave_0: entered promiscuous mode
[   57.419495][ T5831] hsr_slave_1: entered promiscuous mode
[   57.440519][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.463363][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.510701][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.518279][ T5836] team0: Port device team_slave_0 added
[   57.538556][ T5836] team0: Port device team_slave_1 added
[   57.589745][ T5838] team0: Port device team_slave_0 added
[   57.603486][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.607117][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.618945][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.626223][ T5838] team0: Port device team_slave_1 added
[   57.646208][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.649397][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.661913][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.709166][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.712024][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.723503][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.730333][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.733257][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.744612][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.836816][ T5836] hsr_slave_0: entered promiscuous mode
[   57.839416][ T5836] hsr_slave_1: entered promiscuous mode
[   57.842219][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.846134][ T5836] Cannot create hsr debugfs directory
[   57.853976][ T5838] hsr_slave_0: entered promiscuous mode
[   57.863496][ T5838] hsr_slave_1: entered promiscuous mode
[   57.867721][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.870860][ T5838] Cannot create hsr debugfs directory
[   58.070773][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   58.093406][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   58.126426][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.137402][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.234060][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   58.241912][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   58.251177][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   58.259168][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   58.320924][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   58.328558][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   58.333430][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   58.348032][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   58.413512][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.459814][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   58.478292][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.484003][ T1229] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.487286][ T1229] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.500136][ T5839] Bluetooth: hci0: command tx timeout
[   58.508683][ T1229] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.511809][ T1229] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.551437][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   58.567674][ T1229] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.570306][ T1229] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.578332][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.581068][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.608841][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.650839][ T5838] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   58.655065][ T5223] Bluetooth: hci1: command tx timeout
[   58.655081][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   58.662711][ T5839] Bluetooth: hci2: command tx timeout
[   58.673807][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   58.690153][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.693128][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.719091][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.722072][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.781337][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.808384][ T5831] veth0_vlan: entered promiscuous mode
[   58.817738][ T5831] veth1_vlan: entered promiscuous mode
[   58.843745][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.849666][ T5831] veth0_macvtap: entered promiscuous mode
[   58.857973][ T5831] veth1_macvtap: entered promiscuous mode
[   58.881669][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.901161][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.906911][ T5838] veth0_vlan: entered promiscuous mode
[   58.912372][ T5831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.917175][ T5831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.920489][ T5831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.924045][ T5831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.940480][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.947999][ T5838] veth1_vlan: entered promiscuous mode
[   58.993984][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.000896][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.030587][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.035017][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.054190][ T5838] veth0_macvtap: entered promiscuous mode
[   59.062954][ T5836] veth0_vlan: entered promiscuous mode
[   59.067478][ T5838] veth1_macvtap: entered promiscuous mode
[   59.075907][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.080412][ T5836] veth1_vlan: entered promiscuous mode
[   59.094482][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.142282][ T5836] veth0_macvtap: entered promiscuous mode
[   59.148025][    C0] hrtimer: interrupt took 34013 ns
[   59.154323][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.161445][ T5838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.170304][ T5838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.173716][ T5838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.177065][ T5838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.183498][ T5836] veth1_macvtap: entered promiscuous mode
[   59.221987][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.472018][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.576073][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.579276][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.582678][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.587056][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.827965][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.831328][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.040790][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.050027][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.092556][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.097660][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.225939][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.229248][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.579027][ T5839] Bluetooth: hci0: command tx timeout
[   60.931124][ T5839] Bluetooth: hci2: command tx timeout
[   60.933481][ T5839] Bluetooth: hci1: command tx timeout
[   62.303655][ T5966] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   62.665833][ T5223] Bluetooth: hci0: command tx timeout
[   62.976380][ T5223] Bluetooth: hci1: command tx timeout
[   62.979189][ T5223] Bluetooth: hci2: command tx timeout
[   63.153884][ T6008] netlink: 44 bytes leftover after parsing attributes in process `syz.1.49'.
[   63.159650][ T6007] netlink: 44 bytes leftover after parsing attributes in process `syz.1.49'.
[   63.171465][ T6008] netlink: 44 bytes leftover after parsing attributes in process `syz.1.49'.
[   63.320223][ T6016] syz.0.53 uses obsolete (PF_INET,SOCK_PACKET)
[   63.325441][ T6016] netlink: 'syz.0.53': attribute type 10 has an invalid length.
[   63.459432][ T6021] Zero length message leads to an empty skb
[   63.481255][ T6016] team0: Device ipvlan1 failed to register rx_handler
[   63.582338][ T6023] netlink: 163260 bytes leftover after parsing attributes in process `syz.1.55'.
[   63.859881][ T5839] Bluetooth: hci1: unexpected event 0x30 length: 82 > 3
[   63.894192][ T5839] Bluetooth: hci2: unexpected subevent 0x12 length: 150 > 5
[   64.082991][ T6048] netlink: 60 bytes leftover after parsing attributes in process `syz.2.66'.
[   64.086728][ T6043] netlink: 60 bytes leftover after parsing attributes in process `syz.2.66'.
[   64.092233][ T6048] netlink: 60 bytes leftover after parsing attributes in process `syz.2.66'.
[   64.179955][ T6053] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.69'.
[   64.189729][ T6052] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.69'.
[   64.302008][ T6061] netlink: 'syz.2.73': attribute type 29 has an invalid length.
[   64.307496][ T6061] netlink: 'syz.2.73': attribute type 29 has an invalid length.
[   64.392148][ T6065] netlink: 'syz.1.75': attribute type 10 has an invalid length.
[   64.395659][ T6065] netlink: 40 bytes leftover after parsing attributes in process `syz.1.75'.
[   64.399160][ T6065] dummy0: entered promiscuous mode
[   64.412141][ T6065] bridge0: port 3(dummy0) entered blocking state
[   64.415304][ T6065] bridge0: port 3(dummy0) entered disabled state
[   64.417663][ T6065] dummy0: entered allmulticast mode
[   64.422233][ T6065] bridge0: port 3(dummy0) entered blocking state
[   64.424672][ T6065] bridge0: port 3(dummy0) entered forwarding state
[   64.679018][ T6077] Dead loop on virtual device ip6_vti0, fix it urgently!
[   64.746940][ T5839] Bluetooth: hci0: command tx timeout
[   64.861395][ T6087] netlink: 'syz.2.85': attribute type 29 has an invalid length.
[   64.870935][ T6087] netlink: 'syz.2.85': attribute type 29 has an invalid length.
[   65.057311][ T5839] Bluetooth: hci1: command tx timeout
[   66.485138][ T6122] netlink: 'syz.2.99': attribute type 1 has an invalid length.
[   66.488343][ T6122] netlink: 'syz.2.99': attribute type 4 has an invalid length.
[   66.501717][ T6124] netlink: 'syz.0.101': attribute type 16 has an invalid length.
[   67.452098][ T6148] netlink: 'syz.0.112': attribute type 16 has an invalid length.
[   67.621965][ T6156] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   67.633571][ T6156] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   68.335246][ T5839] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[   68.338842][ T5839] Bluetooth: hci2: Injecting HCI hardware error event
[   68.342687][ T5223] Bluetooth: hci2: hardware error 0x00
[   68.399218][ T6193] netlink: 'syz.1.133': attribute type 1 has an invalid length.
[   69.133079][ T6239] warning: `syz.1.155' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   70.989689][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   70.992363][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   73.960441][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 5048991440 wd_nsec: 5048991553
[   75.944670][ T5223] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[   85.079298][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   85.083489][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   85.087308][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   85.091673][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   85.104624][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   85.224796][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   85.228989][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   85.233103][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   85.240992][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   85.245271][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   85.322805][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   85.326595][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   85.329360][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   85.332713][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   85.339396][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   85.637265][ T6243] chnl_net:caif_netlink_parms(): no params data found
[   85.669858][ T6247] chnl_net:caif_netlink_parms(): no params data found
[   87.135230][ T5839] Bluetooth: hci3: command tx timeout
[   87.294699][ T5839] Bluetooth: hci4: command tx timeout
[   87.374757][ T5839] Bluetooth: hci5: command tx timeout
[   89.214673][ T5839] Bluetooth: hci3: command tx timeout
[   89.376071][ T5839] Bluetooth: hci4: command tx timeout
[   89.464710][ T5839] Bluetooth: hci5: command tx timeout
[   91.294504][ T5839] Bluetooth: hci3: command tx timeout
[   91.455845][ T5839] Bluetooth: hci4: command tx timeout
[   91.544797][ T5839] Bluetooth: hci5: command tx timeout
[   93.384821][ T5839] Bluetooth: hci3: command tx timeout
[   93.535416][ T5839] Bluetooth: hci4: command tx timeout
[   93.614616][ T5839] Bluetooth: hci5: command tx timeout
[  132.426698][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.429558][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  145.094401][    C0] sched: DL replenish lagged too much
[  145.981237][   T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  145.986352][   T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  145.991188][   T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  145.994806][ T5841] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  145.997813][ T5841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  146.001182][ T5841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  146.004551][ T5841] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  146.007841][ T5841] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  146.027808][ T5223] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  146.033852][   T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  146.060508][ T5839] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  146.063885][ T5839] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  146.067222][ T5839] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  146.071091][ T5839] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  146.074224][ T5839] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  148.094678][   T54] Bluetooth: hci7: command tx timeout
[  148.099231][ T5839] Bluetooth: hci6: command tx timeout
[  148.174757][ T5839] Bluetooth: hci8: command tx timeout
[  150.174487][   T54] Bluetooth: hci7: command tx timeout
[  150.176855][ T5839] Bluetooth: hci6: command tx timeout
[  150.254693][ T5839] Bluetooth: hci8: command tx timeout
[  152.255127][   T54] Bluetooth: hci7: command tx timeout
[  152.258054][ T5839] Bluetooth: hci6: command tx timeout
[  152.334635][ T5839] Bluetooth: hci8: command tx timeout
[  154.337817][ T5839] Bluetooth: hci6: command tx timeout
[  154.340252][ T5839] Bluetooth: hci7: command tx timeout
[  154.414680][   T54] Bluetooth: hci8: command tx timeout
[  173.974397][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
SYZFAIL: failed to recv rpc
[  173.976804][    C0] rcu: 	0-....: (10499 ticks this GP) idle=057c/1/0x4000000000000000 softirq=16435/22216 fqs=4825
[  173.982420][    C0] rcu: 	         hardirqs   softirqs   csw/system
[  173.984982][    C0] rcu: 	 number:   939695       6068            0
[  173.987586][    C0] rcu: 	cputime:    23855      28567          155   ==> 52490(ms)
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  173.990923][    C0] rcu: 	(t=10500 jiffies g=8593 q=3709 ncpus=2)
[  173.993784][    C0] CPU: 0 UID: 0 PID: 6229 Comm: syz.0.151 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  173.993807][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  173.993815][    C0] RIP: 0010:__run_timer_base+0xc8/0x860
[  173.993837][    C0] Code: 8d e8 ec 67 75 00 48 8b 1d b5 2d 33 0c 48 8b 44 24 18 4c 8d 70 50 4c 89 f0 48 c1 e8 03 48 89 84 24 80 00 00 00 42 80 3c 20 00 <74> 08 4c 89 f7 e8 be 67 75 00 4c 89 b4 24 88 00 00 00 4d 8b 36 48
[  173.993847][    C0] RSP: 0018:ffffc90000007ca0 EFLAGS: 00000246
[  173.993859][    C0] RAX: 1ffff1100960491a RBX: 00000000ffffce3b RCX: ffff888107e0b980
[  173.993868][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: ffff88804b024880
[  173.993876][    C0] RBP: ffffc90000007e10 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  173.993884][    C0] R10: dffffc0000000000 R11: ffffffff81ae05f0 R12: dffffc0000000000
[  173.993892][    C0] R13: 0000000000000002 R14: ffff88804b0248d0 R15: ffffffff8de0c0c8
[  173.993900][    C0] FS:  00007f617d4366c0(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
[  173.993911][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  173.993918][    C0] CR2: 000055555b74c588 CR3: 000000010b7d6000 CR4: 00000000000006f0
[  173.993953][    C0] Call Trace:
[  173.993961][    C0]  <IRQ>
[  173.993966][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  173.993989][    C0]  ? __irq_exit_rcu+0xd8/0x1f0
[  173.994002][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  173.994020][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  173.994036][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  173.994067][    C0]  run_timer_softirq+0x67/0x180
[  173.994085][    C0]  handle_softirqs+0x286/0x870
[  173.994103][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  173.994122][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  173.994134][    C0]  ? irq_work_single+0x1ac/0x240
[  173.994151][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  173.994171][    C0]  __irq_exit_rcu+0xca/0x1f0
[  173.994184][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  173.994201][    C0]  ? rcu_is_watching+0x15/0xb0
[  173.994217][    C0]  irq_exit_rcu+0x9/0x30
[  173.994229][    C0]  sysvec_irq_work+0xa3/0xc0
[  173.994295][    C0]  </IRQ>
[  173.994299][    C0]  <TASK>
[  173.994305][    C0]  asm_sysvec_irq_work+0x1a/0x20
[  173.994317][    C0] RIP: 0010:preempt_schedule_irq+0xb0/0x150
[  173.994332][    C0] Code: 24 20 f6 44 24 21 02 74 0c 90 0f 0b 48 f7 03 08 00 00 00 74 64 bf 01 00 00 00 e8 8b 2d 21 f6 e8 c6 00 58 f6 fb bf 01 00 00 00 <e8> 1b ab ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24
[  173.994341][    C0] RSP: 0018:ffffc90006946b80 EFLAGS: 00000282
[  173.994352][    C0] RAX: c99168cecae71f00 RBX: 0000000000000000 RCX: c99168cecae71f00
[  173.994360][    C0] RDX: 0000000000000007 RSI: ffffffff8d99883e RDI: 0000000000000001
[  173.994368][    C0] RBP: ffffc90006946c20 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  173.994375][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 0000000000000000
[  173.994382][    C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000d28d70
[  173.994408][    C0]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  173.994431][    C0]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  173.994447][    C0]  irqentry_exit+0x6f/0x90
[  173.994460][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  173.994473][    C0] RIP: 0010:unwind_get_return_address+0x63/0x90
[  173.994487][    C0] Code: 37 00 74 08 48 89 df e8 fb a2 b0 00 48 8b 3b e8 93 a3 1a 00 85 c0 74 14 43 80 3c 37 00 74 08 48 89 df e8 e0 a2 b0 00 48 8b 03 <eb> 02 31 c0 5b 41 5e 41 5f e9 3f ba fe 09 cc 89 d9 80 e1 07 80 c1
[  173.994496][    C0] RSP: 0018:ffffc90006946ce8 EFLAGS: 00000246
[  173.994506][    C0] RAX: ffffffff8218dbbc RBX: ffffc90006946d50 RCX: c99168cecae71f00
[  173.994514][    C0] RDX: 0000000000000001 RSI: ffffffff8db8655b RDI: ffffffff8218dbbc
[  173.994521][    C0] RBP: ffffc90006946d90 R08: ffffc90006947490 R09: 0000000000000000
[  173.994528][    C0] R10: ffffc90006946d58 R11: fffff52000d28dad R12: ffff888107e0b980
[  173.994535][    C0] R13: 1ffff92000d28dcc R14: dffffc0000000000 R15: 1ffff92000d28daa
[  173.994551][    C0]  ? ___slab_alloc+0xbfc/0x1480
[  173.994566][    C0]  ? ___slab_alloc+0xbfc/0x1480
[  173.994583][    C0]  ? unwind_get_return_address+0x4d/0x90
[  173.994595][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  173.994610][    C0]  arch_stack_walk+0xfc/0x150
[  173.994631][    C0]  ? ___slab_alloc+0xbfc/0x1480
[  173.994649][    C0]  stack_trace_save+0x9c/0xe0
[  173.994665][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  173.994679][    C0]  ? kasan_check_range+0xa5/0x2c0
[  173.994702][    C0]  save_stack+0xf5/0x1f0
[  173.994718][    C0]  ? __pfx_save_stack+0x10/0x10
[  173.994729][    C0]  ? post_alloc_hook+0x240/0x2a0
[  173.994741][    C0]  ? get_page_from_freelist+0x21e4/0x22c0
[  173.994754][    C0]  ? __alloc_frozen_pages_noprof+0x181/0x370
[  173.994767][    C0]  ? alloc_pages_mpol+0x232/0x4a0
[  173.994778][    C0]  ? allocate_slab+0x8a/0x3b0
[  173.994809][    C0]  ? seqcount_lockdep_reader_access+0x102/0x180
[  173.994834][    C0]  __set_page_owner+0x8d/0x4a0
[  173.994849][    C0]  ? __pfx___set_page_owner+0x10/0x10
[  173.994863][    C0]  ? kasan_check_range+0x6b/0x2c0
[  173.994881][    C0]  post_alloc_hook+0x240/0x2a0
[  173.994898][    C0]  get_page_from_freelist+0x21e4/0x22c0
[  173.994954][    C0]  ? __pfx_get_page_from_freelist+0x10/0x10
[  173.994972][    C0]  ? prepare_alloc_pages+0x213/0x610
[  173.994995][    C0]  __alloc_frozen_pages_noprof+0x181/0x370
[  173.995015][    C0]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  173.995039][    C0]  ? policy_nodemask+0x27c/0x720
[  173.995050][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  173.995070][    C0]  alloc_pages_mpol+0x232/0x4a0
[  173.995089][    C0]  allocate_slab+0x8a/0x3b0
[  173.995108][    C0]  ___slab_alloc+0xbfc/0x1480
[  173.995128][    C0]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  173.995152][    C0]  __kmalloc_noprof+0x305/0x4f0
[  173.995163][    C0]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  173.995184][    C0]  tomoyo_realpath_from_path+0xe3/0x5d0
[  173.995215][    C0]  tomoyo_check_open_permission+0x1c1/0x3b0
[  173.995231][    C0]  ? tomoyo_check_open_permission+0x16a/0x3b0
[  173.995276][    C0]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  173.995324][    C0]  ? mnt_get_write_access+0x68/0x2a0
[  173.995342][    C0]  ? tomoyo_file_open+0x165/0x220
[  173.995364][    C0]  security_file_open+0xb1/0x270
[  173.995381][    C0]  do_dentry_open+0x35e/0x1970
[  173.995412][    C0]  vfs_open+0x3b/0x340
[  173.995425][    C0]  ? path_openat+0x2ecd/0x3830
[  173.995446][    C0]  path_openat+0x2ee5/0x3830
[  173.995496][    C0]  ? __pfx_path_openat+0x10/0x10
[  173.995522][    C0]  ? irqentry_enter+0x3d/0x60
[  173.995545][    C0]  do_filp_open+0x1fa/0x410
[  173.995565][    C0]  ? __pfx_do_filp_open+0x10/0x10
[  173.995579][    C0]  ? preempt_schedule_common+0x83/0xd0
[  173.995612][    C0]  ? _raw_spin_unlock+0x3f/0x50
[  173.995624][    C0]  ? alloc_fd+0x64c/0x6c0
[  173.995646][    C0]  do_sys_openat2+0x121/0x1c0
[  173.995666][    C0]  ? __pfx_do_sys_openat2+0x10/0x10
[  173.995684][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  173.995701][    C0]  ? rcu_is_watching+0x15/0xb0
[  173.995717][    C0]  __x64_sys_openat+0x138/0x170
[  173.995736][    C0]  do_syscall_64+0xfa/0x3b0
[  173.995754][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.995765][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  173.995782][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.995803][    C0] RIP: 0033:0x7f617c58e9a9
[  173.995816][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  173.995825][    C0] RSP: 002b:00007f617d436038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  173.995837][    C0] RAX: ffffffffffffffda RBX: 00007f617c7b5fa0 RCX: 00007f617c58e9a9
[  173.995845][    C0] RDX: 00000000000026e1 RSI: 00002000000005c0 RDI: ffffffffffffff9c
[  173.995852][    C0] RBP: 00007f617c610d69 R08: 0000000000000000 R09: 0000000000000000
[  173.995859][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  173.995866][    C0] R13: 0000000000000000 R14: 00007f617c7b5fa0 R15: 00007ffce8325338
[  173.995890][    C0]  </TASK>
[  180.574741][ T5841] Bluetooth: hci0: command 0x0406 tx timeout
[  180.577421][ T5841] Bluetooth: hci1: command 0x0406 tx timeout

VM DIAGNOSIS:
05:30:39  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000064 RBX=0000000000000064 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000006fd0
R8 =ffff888107a30237 R9 =1ffff11020f46046 R10=dffffc0000000000 R11=ffffffff85472aa0
R12=dffffc0000000000 R13=ffffffff99af58bd R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff85472b1c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f617d4366c0 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055555b74c588 CR3=000000010b7d6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f981a986478 00007f981a986450 XMM03=00007f981a986488 00007f981a986480
XMM04=00007f981b4ed100 00007f981a986440 XMM05=00007f981a986458 00007f981a9864a0
XMM06=00007f981a986498 00007f981a986490 XMM07=00007f981a986488 00007f981a986480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f981a811ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffff888022608000 RCX=c8af57532da06500 RDX=0000000000000007
RSI=ffffffff8db8655b RDI=ffffffff8b711645 RBP=ffffc9000327f3b8 RSP=ffffc9000327f2f8
R8 =ffffffff8fa1e8f7 R9 =1ffffffff1f43d1e R10=dffffc0000000000 R11=fffffbfff1f43d1f
R12=dffffc0000000000 R13=ffff888105b68000 R14=ffffffff99d5eb38 R15=1ffff9200064fe64
RIP=ffffffff8b6e89cb RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f51cc8bd800 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffe76e1dfcc CR3=00000000286a0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
