last executing test programs:

20.216515988s ago: executing program 1 (id=890):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$tipc(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008000}, 0x0)
sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
close(r0)

20.151117256s ago: executing program 1 (id=892):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x19)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/48}, 0x20)

20.150899221s ago: executing program 1 (id=893):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x1, 0x2}, 0x0, 0x4, 0x401, 0x1, 0xfffffffffffffffc, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2000000000000000180a02000000000000000000000000009500000000bb0000", @ANYRES64], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xff92, &(0x7f000000cf3d)=""/195, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffda3, 0x10, 0x0, 0x3d, 0x0, 0xffffffffffffffff, 0xfe45}, 0x23)

19.97302463s ago: executing program 1 (id=894):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2}, 0x10)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xca, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x86c, 0x0, 0x1, 0x2000000, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x1821480, 0x0, 0x0, 0x0, 0x0, 0x0)

19.560160009s ago: executing program 0 (id=895):
r0 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000003c0)="a67139e977f06b8606b6d054d9bf2b52", 0x10}, {0x0}], 0x2}, 0x0)

19.508950304s ago: executing program 0 (id=896):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="18000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x18)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
socket$kcm(0xa, 0x5, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c04)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x400300}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$cgroup_subtree(r3, 0x0, 0xfe33)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8)
close(r5)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1c0000005e007f029ea69801d76ab059d261de06fe3114ed3a", 0x19}], 0x1}, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0xfe33)
recvmsg(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r5, r4, 0x4, r4}, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

19.299382088s ago: executing program 0 (id=899):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4fdf09b5}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffd8b}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37438e486dd"], 0xfdef)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, 0x0, 0x158}, 0x40)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

19.168643905s ago: executing program 0 (id=902):
socket$kcm(0x15, 0x5, 0x0)
socket$kcm(0x29, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
socket$kcm(0x10, 0x2, 0x0)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))

19.16814202s ago: executing program 0 (id=904):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x101, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_bp={0x0, 0x8}, 0x4002, 0x2e, 0xfffffbff, 0x4, 0x402, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x68c01, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x189800, 0x0)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080))
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0)

18.727430129s ago: executing program 1 (id=907):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080))

18.647308167s ago: executing program 2 (id=910):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x2, 0x6}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r0 = getpid()
perf_event_open(0x0, r0, 0x5, 0xffffffffffffffff, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x14, &(0x7f0000000100), 0x120)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='hugetlb.1GB.failcnt\x00', 0x2, 0x0)
write$cgroup_subtree(r2, 0x0, 0x31)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x2, 0x0, 0x7, 0xff, 0x0, 0x1000, 0x20848, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x24, 0x80}, 0xac84, 0x86d, 0x1, 0x4, 0x5, 0x0, 0x6, 0x0, 0xffffbffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080))
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)

17.901246414s ago: executing program 0 (id=911):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

17.900801279s ago: executing program 1 (id=912):
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x5452, &(0x7f0000000100))
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x3000c0c0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0xb8, 0x8000000, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_type(r4, &(0x7f00000010c0), 0x2, 0x0)
write$cgroup_type(r5, &(0x7f0000001100), 0x9)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000000), 0x4)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1, 0x1000000}]}]}}, 0x0, 0x42}, 0x20)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x2000}, 0x8)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f0000000040)={'wlan1\x00', @random="2e33e363a4b1"})

17.900740864s ago: executing program 2 (id=913):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x2e, &(0x7f0000000000)=r0, 0x4)

17.494718199s ago: executing program 2 (id=914):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x18)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000001010000fc7f0000cc"], 0x50)

17.237060716s ago: executing program 2 (id=915):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffc4d}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5ff, 0x0, 0x3}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))

14.176048223s ago: executing program 2 (id=916):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="180100000000000000000000040000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x8, 0xf0, &(0x7f00000007c0)=""/240, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)

14.174557577s ago: executing program 2 (id=917):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d80000001600811e4e81f782db44b9040a1d0802a6cdda", 0x17}], 0x1, 0x0, 0x0, 0x7400}, 0x4008054)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0, 0x8}, 0x390, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='mem_disconnect\x00', r0}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="ae24a21f9a824666f9acf0e0163f", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50)

2.505733655s ago: executing program 32 (id=911):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

94.775µs ago: executing program 33 (id=912):
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x5452, &(0x7f0000000100))
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x3000c0c0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0xb8, 0x8000000, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_type(r4, &(0x7f00000010c0), 0x2, 0x0)
write$cgroup_type(r5, &(0x7f0000001100), 0x9)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000000), 0x4)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1, 0x1000000}]}]}}, 0x0, 0x42}, 0x20)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x2000}, 0x8)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f0000000040)={'wlan1\x00', @random="2e33e363a4b1"})

0s ago: executing program 34 (id=917):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d80000001600811e4e81f782db44b9040a1d0802a6cdda", 0x17}], 0x1, 0x0, 0x0, 0x7400}, 0x4008054)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0, 0x8}, 0x390, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='mem_disconnect\x00', r0}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="ae24a21f9a824666f9acf0e0163f", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:46734' (ED25519) to the list of known hosts.
syzkaller login: [   49.317074][ T5817] cgroup: Unknown subsys name 'net'
[   49.443454][ T5817] cgroup: Unknown subsys name 'cpuset'
[   49.448099][ T5817] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.913449][ T5817] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.209646][ T5218] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.217112][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.220982][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.225161][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.228776][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.232489][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.235640][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.238877][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.242627][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.262750][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.299089][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.302733][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.305817][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.310100][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.313538][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.519116][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   55.626685][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   55.657271][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   55.697747][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.701781][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.704819][ T5827] bridge_slave_0: entered allmulticast mode
[   55.708492][ T5827] bridge_slave_0: entered promiscuous mode
[   55.717872][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.721539][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.724060][ T5827] bridge_slave_1: entered allmulticast mode
[   55.726847][ T5827] bridge_slave_1: entered promiscuous mode
[   55.775166][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.777868][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.781369][ T5831] bridge_slave_0: entered allmulticast mode
[   55.784380][ T5831] bridge_slave_0: entered promiscuous mode
[   55.794725][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.798442][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.802206][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.804932][ T5831] bridge_slave_1: entered allmulticast mode
[   55.807846][ T5831] bridge_slave_1: entered promiscuous mode
[   55.825450][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.856056][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.878126][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.890686][ T5827] team0: Port device team_slave_0 added
[   55.913049][ T5827] team0: Port device team_slave_1 added
[   55.915392][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.917985][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.920982][ T5837] bridge_slave_0: entered allmulticast mode
[   55.923981][ T5837] bridge_slave_0: entered promiscuous mode
[   55.929486][ T5831] team0: Port device team_slave_0 added
[   55.948333][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.951558][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.954538][ T5837] bridge_slave_1: entered allmulticast mode
[   55.957685][ T5837] bridge_slave_1: entered promiscuous mode
[   55.970792][ T5831] team0: Port device team_slave_1 added
[   55.985132][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.988220][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.000150][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.021779][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.024540][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.035631][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.044717][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.048615][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.052617][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.065131][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.076481][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.078889][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.090351][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.096354][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.125576][ T5837] team0: Port device team_slave_0 added
[   56.157502][ T5837] team0: Port device team_slave_1 added
[   56.181006][ T5827] hsr_slave_0: entered promiscuous mode
[   56.184495][ T5827] hsr_slave_1: entered promiscuous mode
[   56.202505][ T5831] hsr_slave_0: entered promiscuous mode
[   56.204899][ T5831] hsr_slave_1: entered promiscuous mode
[   56.207100][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.209641][ T5831] Cannot create hsr debugfs directory
[   56.242965][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.246040][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.257618][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.278162][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.281596][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.289953][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.388843][ T5837] hsr_slave_0: entered promiscuous mode
[   56.392407][ T5837] hsr_slave_1: entered promiscuous mode
[   56.395255][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.398350][ T5837] Cannot create hsr debugfs directory
[   56.526978][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.544090][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.558904][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.586573][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.625546][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.642193][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.649293][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.669628][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.719193][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.733247][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.743214][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.748936][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.832596][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.838293][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.855017][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   56.862066][  T732] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.865457][  T732] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.887833][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   56.894787][  T732] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.897476][  T732] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.934838][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.938142][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.964400][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.966944][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.994937][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.021545][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   57.044462][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.046848][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.051699][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.054277][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.090989][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.108091][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.163619][ T5831] veth0_vlan: entered promiscuous mode
[   57.182581][ T5831] veth1_vlan: entered promiscuous mode
[   57.205775][ T5831] veth0_macvtap: entered promiscuous mode
[   57.212449][ T5831] veth1_macvtap: entered promiscuous mode
[   57.243029][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.251680][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.256133][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.271141][ T5218] Bluetooth: hci0: command tx timeout
[   57.275625][ T5831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.279503][ T5831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.285306][ T5831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.289045][ T5831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.309289][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.351113][ T5218] Bluetooth: hci2: command tx timeout
[   57.351157][ T5833] Bluetooth: hci1: command tx timeout
[   57.395796][ T5827] veth0_vlan: entered promiscuous mode
[   57.427650][ T5827] veth1_vlan: entered promiscuous mode
[   57.436102][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.439401][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.447766][ T5837] veth0_vlan: entered promiscuous mode
[   57.474201][ T5837] veth1_vlan: entered promiscuous mode
[   57.480032][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.488931][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.510128][ T5827] veth0_macvtap: entered promiscuous mode
[   57.528727][ T5827] veth1_macvtap: entered promiscuous mode
[   57.532376][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.543408][ T5837] veth0_macvtap: entered promiscuous mode
[   57.550062][ T5837] veth1_macvtap: entered promiscuous mode
[   57.570075][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.591462][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.609403][ T5827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.613001][ T5827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.615893][ T5827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.618838][ T5827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.634811][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.662291][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.685453][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.688579][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.707531][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.711783][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.749153][  T732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.756054][  T732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.784415][  T732] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.789548][  T732] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.843412][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.851076][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.883458][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.887360][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.941087][ T5833] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[   57.943067][ T5905] netlink: 'syz.1.7': attribute type 2 has an invalid length.
[   57.947209][ T5905] netlink: 'syz.1.7': attribute type 8 has an invalid length.
[   57.950811][ T5905] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7'.
[   58.096947][    C1] hrtimer: interrupt took 49046 ns
[   58.336541][ T5927] IPv6: NLM_F_REPLACE set, but no existing node found!
[   58.364827][ T5930] netlink: 'syz.2.18': attribute type 11 has an invalid length.
[   58.367460][ T5930] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.18'.
[   58.456947][ T5929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   58.710665][ T5957] netlink: 'syz.2.30': attribute type 21 has an invalid length.
[   58.713318][ T5957] netlink: 132 bytes leftover after parsing attributes in process `syz.2.30'.
[   59.045128][ T5967] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.053428][ T5967] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.067281][ T5967] bridge0: entered allmulticast mode
[   59.145714][ T5970] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.148278][ T5970] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.151874][ T5970] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.154779][ T5970] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.158671][ T5970] bridge0: entered promiscuous mode
[   59.175851][ T5218] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4
[   59.371991][ T5979] netlink: 'syz.2.39': attribute type 10 has an invalid length.
[   59.394399][ T5218] Bluetooth: hci0: command tx timeout
[   59.430944][ T5218] Bluetooth: hci2: command tx timeout
[   59.440724][ T5218] Bluetooth: hci1: command tx timeout
[   59.547517][ T5979] bond0: (slave bond_slave_0): Releasing backup interface
[   60.015718][ T5997] bridge0: port 3(syz_tun) entered blocking state
[   60.018347][ T5997] bridge0: port 3(syz_tun) entered disabled state
[   60.021688][ T5997] syz_tun: entered allmulticast mode
[   60.024562][ T5997] syz_tun: entered promiscuous mode
[   60.026730][ T5997] bridge0: port 3(syz_tun) entered blocking state
[   60.029086][ T5997] bridge0: port 3(syz_tun) entered forwarding state
[   60.311617][ T6011] warning: `syz.0.55' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   60.571958][ T6021] netlink: 'syz.1.60': attribute type 21 has an invalid length.
[   60.574605][ T6021] netlink: 'syz.1.60': attribute type 5 has an invalid length.
[   60.739452][ T6035] netlink: 6955 bytes leftover after parsing attributes in process `syz.2.67'.
[   60.742817][ T6035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.67'.
[   60.746405][ T6035] netlink: 125808 bytes leftover after parsing attributes in process `syz.2.67'.
[   60.875198][ T6029] netlink: 'syz.0.64': attribute type 21 has an invalid length.
[   61.033407][ T6056] netlink: 'syz.2.77': attribute type 10 has an invalid length.
[   61.036062][ T6056] netlink: 40 bytes leftover after parsing attributes in process `syz.2.77'.
[   61.042178][ T6056] batman_adv: batadv0: Adding interface: hsr_slave_1
[   61.044403][ T6056] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.058393][ T6056] batman_adv: batadv0: Interface activated: hsr_slave_1
[   61.299058][ T6076] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   61.306843][ T6076] batman_adv: batadv0: Removing interface: batadv_slave_0
[   61.318002][ T6076] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   61.335248][ T6076] batman_adv: batadv0: Removing interface: batadv_slave_1
[   61.367971][ T6076] batman_adv: batadv0: Interface deactivated: hsr_slave_1
[   61.382050][ T6076] batman_adv: batadv0: Removing interface: hsr_slave_1
[   61.430524][ T5218] Bluetooth: hci0: command tx timeout
[   61.469777][ T6078] netlink: 'syz.0.88': attribute type 3 has an invalid length.
[   61.473718][ T6078] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.88'.
[   61.523230][ T5218] Bluetooth: hci1: command tx timeout
[   61.526384][ T5218] Bluetooth: hci2: command tx timeout
[   61.745414][ T6085] netlink: 8192 bytes leftover after parsing attributes in process `syz.1.91'.
[   61.880797][ T6093] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.516591][ T6133] netlink: 'syz.0.112': attribute type 2 has an invalid length.
[   62.695310][ T6141] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.116'.
[   62.716277][ T6145] vcan0: entered promiscuous mode
[   62.719083][ T6145] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check.
[   63.515269][ T5218] Bluetooth: hci0: command tx timeout
[   63.590851][ T5218] Bluetooth: hci2: command tx timeout
[   63.593016][ T5218] Bluetooth: hci1: command tx timeout
[   63.694805][ T6173] validate_nla: 2 callbacks suppressed
[   63.694818][ T6173] netlink: 'syz.2.128': attribute type 14 has an invalid length.
[   63.699463][ T6173] __nla_validate_parse: 1 callbacks suppressed
[   63.699469][ T6173] netlink: 164 bytes leftover after parsing attributes in process `syz.2.128'.
[   64.071662][ T5833] Bluetooth: hci1: Opcode 0x206a failed: -110
[   64.543333][ T6193] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.137'.
[   65.389875][ T6212] netlink: 'syz.2.146': attribute type 21 has an invalid length.
[   65.670451][ T5833] Bluetooth: hci1: command 0x206a tx timeout
[   65.758476][ T6227] netlink: 'syz.1.153': attribute type 21 has an invalid length.
[   65.763875][ T6227] netlink: 14045 bytes leftover after parsing attributes in process `syz.1.153'.
[   65.931596][ T6237] netlink: 'syz.0.159': attribute type 33 has an invalid length.
[   67.003492][ T6290] Zero length message leads to an empty skb
[   67.705368][ T6297] syz.2.185 uses obsolete (PF_INET,SOCK_PACKET)
[   68.239971][ T6342] netlink: 'syz.0.208': attribute type 10 has an invalid length.
[   68.247506][ T6342] netlink: 40 bytes leftover after parsing attributes in process `syz.0.208'.
[   68.250753][ T6342] vcan0: entered promiscuous mode
[   68.252631][ T6342] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check.
[   68.266180][ T6346] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.207'.
[   68.453283][ T6363] netlink: 1018 bytes leftover after parsing attributes in process `syz.0.219'.
[   68.499471][ T6371] netlink: 'syz.1.220': attribute type 1 has an invalid length.
[   68.499711][ T6370] tap0: tun_chr_ioctl cmd 1074025678
[   68.502487][ T6371] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.220'.
[   68.504195][ T6370] tap0: group set to 0
[   68.575992][ T6377] netlink: 'syz.2.223': attribute type 5 has an invalid length.
[   68.664231][ T6384] netlink: 'syz.0.227': attribute type 10 has an invalid length.
[   69.259879][ T6415] netlink: 'syz.1.240': attribute type 49 has an invalid length.
[   69.392651][ T6430] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.248'.
[   69.511555][ T6446] netlink: 'syz.1.254': attribute type 21 has an invalid length.
[   70.945110][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.948238][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.049220][ T5833] Bluetooth: hci0: Malformed LE Event: 0x0d
[   71.220551][ T6474] netlink: 144 bytes leftover after parsing attributes in process `syz.1.268'.
[   71.926526][ T6516] netlink: 'syz.2.288': attribute type 3 has an invalid length.
[   71.929158][ T6516] netlink: 132 bytes leftover after parsing attributes in process `syz.2.288'.
[   72.069038][ T6522] Driver unsupported XDP return value 0 on prog  (id 104) dev N/A, expect packet loss!
[   72.276115][ T6533] netlink: 'syz.0.294': attribute type 10 has an invalid length.
[   72.280109][ T6533] geneve0: entered promiscuous mode
[   72.289070][ T6533] bond0: (slave geneve0): Enslaving as an active interface with an up link
[   72.422025][ T6539] netlink: 'syz.2.296': attribute type 41 has an invalid length.
[   72.425482][ T6539] netlink: 40 bytes leftover after parsing attributes in process `syz.2.296'.
[   72.857026][ T6560] netlink: 10 bytes leftover after parsing attributes in process `syz.2.305'.
[   73.189882][ T6579] netlink: 6 bytes leftover after parsing attributes in process `syz.1.314'.
[   73.552872][ T5833] Bluetooth: hci1: Dropping invalid advertising data
[   73.557171][ T5833] Bluetooth: hci1: unknown advertising packet type: 0xff
[   73.557255][ T5833] Bluetooth: hci1: Malformed LE Event: 0x02
[   73.818130][ T6636] netlink: 140 bytes leftover after parsing attributes in process `syz.1.331'.
[   73.894253][ T6642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.332'.
[   74.216693][ T6672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.340'.
[   75.729816][ T6774] veth1_macvtap: left promiscuous mode
[   76.017681][ T6784] mac80211_hwsim hwsim3 .3c: renamed from wlan1 (while UP)
[   76.028425][ T6786] netlink: 'syz.0.375': attribute type 1 has an invalid length.
[   76.033409][ T6786] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.375'.
[   76.041815][ T6786] netlink: 14207 bytes leftover after parsing attributes in process `syz.0.375'.
[   76.132093][ T6788] C: renamed from team_slave_0 (while UP)
[   76.138139][ T6788] netlink: 'syz.2.376': attribute type 3 has an invalid length.
[   76.142074][ T6788] netlink: 'syz.2.376': attribute type 1 has an invalid length.
[   76.145641][ T6788] netlink: 116 bytes leftover after parsing attributes in process `syz.2.376'.
[   76.753332][ T6816] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   76.757007][ T6816] IPv6: NLM_F_CREATE should be set when creating new route
[   76.760965][ T6816] IPv6: NLM_F_CREATE should be set when creating new route
[   76.765449][ T6816] IPv6: NLM_F_CREATE should be set when creating new route
[   76.911409][ T6821] netlink: 183676 bytes leftover after parsing attributes in process `syz.0.388'.
[   76.919248][ T6821] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   76.925629][ T6821] openvswitch: netlink: Key type 31 is not supported
[   77.176161][ T5833] Bluetooth: hci1: unexpected event 0x03 length: 15 > 11
[   77.512566][ T6835] netlink: 'syz.2.393': attribute type 39 has an invalid length.
[   77.567314][ T6835] hsr_slave_0 (unregistering): left promiscuous mode
[   77.822575][ T6853] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   77.825451][ T6853] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   78.720553][ T6883] netlink: 'syz.2.414': attribute type 12 has an invalid length.
[   78.724071][ T6883] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.414'.
[   79.228898][ T6897] netlink: 10 bytes leftover after parsing attributes in process `syz.1.420'.
[   79.272787][ T6899] netdevsim0: mtu greater than device maximum
[   79.488501][ T6921] netlink: 'syz.0.432': attribute type 6 has an invalid length.
[   79.492819][ T6921] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.432'.
[   79.998733][ T6956] tun0: tun_chr_ioctl cmd 1074025675
[   80.003588][ T6956] tun0: persist enabled
[   80.841896][ T6978] netlink: 180 bytes leftover after parsing attributes in process `syz.0.459'.
[   81.125002][    T9] cfg80211: failed to load regulatory.db
[   82.177672][ T7014] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.473'.
[   82.190871][ T7011] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.473'.
[   82.273556][ T7018] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.476'.
[   82.451283][ T7027] netlink: 60 bytes leftover after parsing attributes in process `syz.2.478'.
[   82.458465][ T7024] netlink: 60 bytes leftover after parsing attributes in process `syz.2.478'.
[   82.473330][ T7027] netlink: 60 bytes leftover after parsing attributes in process `syz.2.478'.
[   82.521600][ T7031] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.482'.
[   82.536825][ T7035] netlink: 60 bytes leftover after parsing attributes in process `syz.2.484'.
[   82.541655][ T7035] netlink: 60 bytes leftover after parsing attributes in process `syz.2.484'.
[   82.908961][ T7078] netlink: 'syz.2.505': attribute type 10 has an invalid length.
[   82.912573][ T7078] vlan0: entered allmulticast mode
[   82.914429][ T7078] veth0_vlan: entered allmulticast mode
[   82.924016][ T7078] team0: Port device vlan0 added
[   83.029466][ T7082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.507'.
[   83.394125][ T7109] netlink: 'syz.0.519': attribute type 1 has an invalid length.
[   83.397609][ T7109] netlink: 'syz.0.519': attribute type 2 has an invalid length.
[   83.402559][ T7109] netlink: 'syz.0.519': attribute type 3 has an invalid length.
[   83.405735][ T7109] netlink: 'syz.0.519': attribute type 4 has an invalid length.
[   83.443522][ T7116] netlink: 'syz.0.522': attribute type 39 has an invalid length.
[   84.267090][ T7141] netlink: 'syz.1.534': attribute type 4 has an invalid length.
[   85.123516][ T7173] syz.2.549 (7173) used greatest stack depth: 19296 bytes left
[   85.718297][ T7213] netdevsim netdevsim0: Direct firmware load for  failed with error -2
[   85.723803][ T7213] netdevsim netdevsim0: Falling back to sysfs fallback for: 
[   86.671042][ T7267] syzkaller0: entered promiscuous mode
[   86.673176][ T7267] syzkaller0: entered allmulticast mode
[   86.824317][ T7281] netlink: 'syz.2.599': attribute type 16 has an invalid length.
[   87.517850][ T7281] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.525968][ T7283] 0: renamed from bond_slave_1 (while UP)
[   87.856742][ T7308] netlink: 'syz.2.612': attribute type 10 has an invalid length.
[   87.883795][ T7308] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[   87.888466][ T7308] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   87.899269][ T7308] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[   88.640055][ T7344] netlink: 'syz.0.627': attribute type 27 has an invalid length.
[   88.644753][ T7344] netlink: 'syz.0.627': attribute type 3 has an invalid length.
[   88.648427][ T7344] __nla_validate_parse: 12 callbacks suppressed
[   88.648543][ T7344] netlink: 132 bytes leftover after parsing attributes in process `syz.0.627'.
[   89.439200][ T7395] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.649'.
[   89.882278][ T7409] netlink: 'syz.0.655': attribute type 8 has an invalid length.
[   89.884882][ T7409] netlink: 'syz.0.655': attribute type 3 has an invalid length.
[   89.887385][ T7409] netlink: 153952 bytes leftover after parsing attributes in process `syz.0.655'.
[   90.305830][ T7434] netlink: 'syz.0.668': attribute type 17 has an invalid length.
[   90.309314][ T7434] netlink: 148 bytes leftover after parsing attributes in process `syz.0.668'.
[   90.371117][ T7434] netlink: 'syz.0.668': attribute type 29 has an invalid length.
[   91.108382][ T7450] netlink: 'syz.2.675': attribute type 3 has an invalid length.
[   91.111508][ T7450] netlink: 'syz.2.675': attribute type 4 has an invalid length.
[   91.114073][ T7450] netlink: 9067 bytes leftover after parsing attributes in process `syz.2.675'.
[   91.288376][ T7459] netlink: 830 bytes leftover after parsing attributes in process `syz.2.678'.
[   91.515292][ T7468] raw_sendmsg: syz.1.683 forgot to set AF_INET. Fix it!
[   91.668884][ T7479] netlink: 'syz.0.688': attribute type 10 has an invalid length.
[   91.673465][ T7479] netlink: 55 bytes leftover after parsing attributes in process `syz.0.688'.
[   91.794162][ T7484] netlink: 'syz.1.690': attribute type 3 has an invalid length.
[   91.797832][ T7484] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.690'.
[   91.953262][ T7493] netlink: 183676 bytes leftover after parsing attributes in process `syz.0.693'.
[   92.478840][ T7544] netlink: 'syz.1.714': attribute type 11 has an invalid length.
[   92.482492][ T7544] netlink: 149476 bytes leftover after parsing attributes in process `syz.1.714'.
[   92.522517][ T7538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   93.480565][ T7620] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   94.064764][ T7656] sctp: [Deprecated]: syz.2.766 (pid 7656) Use of struct sctp_assoc_value in delayed_ack socket option.
[   94.064764][ T7656] Use struct sctp_sack_info instead
[   94.418982][ T7684] syzkaller0: tun_chr_ioctl cmd 2147767507
[   95.312038][ T7729] __nla_validate_parse: 3 callbacks suppressed
[   95.312055][ T7729] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.803'.
[   95.571235][ T7747] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.811'.
[   95.574469][ T7747] netlink: zone id is out of range
[   95.576247][ T7747] netlink: zone id is out of range
[   95.578164][ T7747] netlink: zone id is out of range
[   95.579943][ T7747] netlink: get zone limit has 8 unknown bytes
[   95.594512][ T7747] validate_nla: 3 callbacks suppressed
[   95.594527][ T7747] netlink: 'syz.0.811': attribute type 2 has an invalid length.
[   95.609180][ T7747] netlink: 'syz.0.811': attribute type 1 has an invalid length.
[   95.612124][ T7747] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.811'.
[   95.875685][ T7778] netlink: 'syz.2.825': attribute type 1 has an invalid length.
[   95.878381][ T7778] netlink: 'syz.2.825': attribute type 2 has an invalid length.
[   95.883445][ T7778] netlink: 'syz.2.825': attribute type 7 has an invalid length.
[   95.886369][ T7778] netlink: 149 bytes leftover after parsing attributes in process `syz.2.825'.
[   95.889403][ T7778] netlink: 130160 bytes leftover after parsing attributes in process `syz.2.825'.
[   95.893487][ T7778] netlink: 'syz.2.825': attribute type 1 has an invalid length.
[   95.897388][ T7778] netlink: 'syz.2.825': attribute type 2 has an invalid length.
[   95.899983][ T7778] netlink: 'syz.2.825': attribute type 7 has an invalid length.
[   95.906558][ T7778] netlink: 149 bytes leftover after parsing attributes in process `syz.2.825'.
[   96.617687][ T7790] tun0: tun_chr_ioctl cmd 1074025675
[   96.620053][ T7790] tun0: persist enabled
[   96.623732][ T7790] tun0: tun_chr_ioctl cmd 1074025675
[   96.625804][ T7790] tun0: persist disabled
[   97.697380][ T7814] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.841'.
[   97.892596][ T5833] Bluetooth: hci1: unexpected subevent 0x12 length: 150 > 5
[   97.979693][ T7833] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.848'.
[   97.999382][ T7833] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.848'.
[   98.966714][ T7872] netlink: 'syz.2.867': attribute type 21 has an invalid length.
[   99.010718][ T7876] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.868'.
[   99.035351][ T7880] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   99.038090][ T7880] openvswitch: netlink: Duplicate key (type 0).
[   99.114599][ T5833] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10
[   99.114801][ T5833] Bluetooth: hci0: connection err: -111
[   99.119652][ T7889] @: renamed from bond_slave_0 (while UP)
[   99.185786][ T7893] netlink: 'syz.1.876': attribute type 22 has an invalid length.
[  100.982742][ T7947] netlink: 'syz.2.900': attribute type 3 has an invalid length.
[  101.177594][ T7955] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  101.228210][ T7958] __nla_validate_parse: 2 callbacks suppressed
[  101.228223][ T7958] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.905'.
[  101.393892][ T7955] syzkaller0: entered promiscuous mode
[  101.396247][ T7955] syzkaller0: entered allmulticast mode
[  101.445124][ T7962] syzkaller0: entered promiscuous mode
[  101.447036][ T7962] syzkaller0: entered allmulticast mode
[  103.057562][ T7989] mac80211_hwsim hwsim5 .3c: renamed from wlan1 (while UP)
[  107.563954][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 3760836319 wd_nsec: 3760836399
[  118.570859][ T5218] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  118.577015][ T5218] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  118.581955][ T5218] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  118.591438][ T5218] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  118.594582][ T5218] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  118.666794][ T5218] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  118.671014][ T5218] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  118.674568][ T5218] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  118.678138][ T5218] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  118.684463][ T5218] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  119.262149][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  119.265961][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  119.269498][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  119.274785][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  119.278030][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  120.632083][ T5218] Bluetooth: hci3: command tx timeout
[  120.778945][ T5218] Bluetooth: hci4: command tx timeout
[  121.350715][ T5218] Bluetooth: hci5: command tx timeout
[  122.716168][ T5218] Bluetooth: hci3: command tx timeout
[  122.791059][ T5218] Bluetooth: hci4: command tx timeout
[  123.430587][ T5218] Bluetooth: hci5: command tx timeout
[  124.792268][ T5218] Bluetooth: hci3: command tx timeout
[  124.870607][ T5218] Bluetooth: hci4: command tx timeout
[  125.510490][ T5218] Bluetooth: hci5: command tx timeout
[  126.870645][ T5218] Bluetooth: hci3: command tx timeout
[  126.950718][ T5218] Bluetooth: hci4: command tx timeout
[  127.590561][ T5218] Bluetooth: hci5: command tx timeout
[  132.319207][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.321679][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  179.394154][ T5833] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  179.400619][ T5833] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  179.404789][ T5833] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  179.411925][ T5833] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  179.420363][ T5833] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  179.469931][ T5833] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  179.476764][ T5833] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  179.480491][ T5833] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  179.483981][ T5833] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  179.488046][ T5833] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  180.058759][ T5833] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  180.068404][ T5833] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  180.075025][ T5833] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  180.082615][ T5833] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  180.088637][ T5833] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  181.510715][ T8022] Bluetooth: hci6: command tx timeout
[  181.514782][ T5829] Bluetooth: hci7: command tx timeout
[  182.150794][ T5829] Bluetooth: hci8: command tx timeout
[  182.475828][ T5829] Bluetooth: hci0: command 0x0406 tx timeout
[  182.478429][ T5829] Bluetooth: hci1: command 0x206a tx timeout
[  182.482205][ T8022] Bluetooth: hci2: command 0x0406 tx timeout
[  187.138372][ T5829] Bluetooth: hci7: command tx timeout
[  187.140524][ T5829] Bluetooth: hci6: command tx timeout
[  187.181756][ T5835] Bluetooth: hci8: command tx timeout
[  189.190693][ T5835] Bluetooth: hci8: command tx timeout
[  189.192757][ T5835] Bluetooth: hci6: command tx timeout
[  189.194820][ T5835] Bluetooth: hci7: command tx timeout
[  191.270883][ T5829] Bluetooth: hci6: command tx timeout
[  191.272945][ T5829] Bluetooth: hci8: command tx timeout
[  191.274858][ T5835] Bluetooth: hci7: command tx timeout
[  200.195251][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  200.197752][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  241.585380][ T5835] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  241.605377][ T5835] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  241.630724][ T5835] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  241.642358][ T5835] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  241.647665][ T5835] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  241.912400][ T5829] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  241.916136][ T5829] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  241.938634][ T5829] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  241.945304][ T5829] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  241.949958][ T5829] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  242.623327][ T8046] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  242.627595][ T8046] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  242.632261][ T8046] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  242.635879][ T8046] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  242.650932][ T8046] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  243.009261][ T8036] chnl_net:caif_netlink_parms(): no params data found
[  272.817563][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 82285423580 wd_nsec: 82285412333
[  275.040108][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  275.043299][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  275.517199][ T8050] Bluetooth: hci3: command 0x0406 tx timeout
[  275.519943][ T8050] Bluetooth: hci4: command 0x0406 tx timeout
[  275.590694][ T8050] Bluetooth: hci5: command 0x0406 tx timeout
[  279.510637][   T34] INFO: task syz-executor:7998 blocked for more than 148 seconds.
[  279.513292][   T34]       Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0
[  279.522152][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  279.525145][   T34] task:syz-executor    state:D stack:25928 pid:7998  tgid:7998  ppid:1      task_flags:0x400140 flags:0x00004004
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  279.581268][   T34] Call Trace:
[  279.582964][   T34]  <TASK>
[  279.584316][   T34]  __schedule+0x16f5/0x4d00
[  279.586432][   T34]  ? schedule+0x165/0x360
[  279.588434][   T34]  ? __pfx___schedule+0x10/0x10
[  279.630868][   T34]  ? schedule+0x91/0x360
[  279.632972][   T34]  schedule+0x165/0x360
[  279.634951][   T34]  schedule_preempt_disabled+0x13/0x30
[  279.637459][   T34]  __mutex_lock+0x724/0xe80
[  279.639552][   T34]  ? __mutex_lock+0x51b/0xe80
[  279.690347][   T34]  ? inet_rtm_newaddr+0x3b0/0x18b0
[  279.692741][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  279.695130][   T34]  ? __nla_parse+0x40/0x60
[  279.697218][   T34]  inet_rtm_newaddr+0x3b0/0x18b0
[  279.699525][   T34]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  279.750609][   T34]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  279.752568][   T34]  rtnetlink_rcv_msg+0x7cf/0xb70
[  279.754329][   T34]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  279.756327][   T34]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  279.758276][   T34]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  279.797296][   T34]  ? perf_trace_lock_acquire+0x335/0x410
[  279.799351][   T34]  netlink_rcv_skb+0x208/0x470
[  279.810283][   T34]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  279.812222][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  279.814065][   T34]  ? netlink_deliver_tap+0x2e/0x1b0
[  279.815847][   T34]  ? netlink_deliver_tap+0x2e/0x1b0
[  279.817783][   T34]  netlink_unicast+0x75c/0x8e0
[  279.819485][   T34]  netlink_sendmsg+0x805/0xb30
[  279.850574][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  279.853003][   T34]  ? aa_sock_msg_perm+0x94/0x160
[  279.854889][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  279.857076][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  279.859083][   T34]  __sock_sendmsg+0x21c/0x270
[  279.909752][   T34]  __sys_sendto+0x3bd/0x520
[  279.913020][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  279.914793][   T34]  ? count_memcg_event_mm+0x21/0x260
[  279.916891][   T34]  ? do_syscall_64+0xb7/0x3b0
[  279.918629][   T34]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  279.954177][   T34]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  279.957259][   T34]  __x64_sys_sendto+0xde/0x100
[  279.959511][   T34]  do_syscall_64+0xfa/0x3b0
[  279.995381][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  279.997831][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.030744][   T34]  ? exc_page_fault+0x9f/0xf0
[  280.032957][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.035593][   T34] RIP: 0033:0x7fe9a9f909fc
[  280.037612][   T34] RSP: 002b:00007ffd402d6d70 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  280.080127][   T34] RAX: ffffffffffffffda RBX: 00007fe9aace4620 RCX: 00007fe9a9f909fc
[  280.083746][   T34] RDX: 0000000000000028 RSI: 00007fe9aace4670 RDI: 0000000000000003
[  280.100263][   T34] RBP: 0000000000000000 R08: 00007ffd402d6dc4 R09: 000000000000000c
[  280.103018][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  280.105727][   T34] R13: 0000000000000000 R14: 00007fe9aace4670 R15: 0000000000000000
[  280.108459][   T34]  </TASK>
[  280.109550][   T34] INFO: task syz-executor:8001 blocked for more than 149 seconds.
[  280.151444][   T34]       Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0
[  280.154298][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  280.157192][   T34] task:syz-executor    state:D stack:25928 pid:8001  tgid:8001  ppid:1      task_flags:0x400140 flags:0x00004004
[  280.196974][   T34] Call Trace:
[  280.198220][   T34]  <TASK>
[  280.199273][   T34]  __schedule+0x16f5/0x4d00
[  280.210315][   T34]  ? schedule+0x165/0x360
[  280.211867][   T34]  ? __pfx___schedule+0x10/0x10
[  280.213584][   T34]  ? schedule+0x91/0x360
[  280.215046][   T34]  schedule+0x165/0x360
[  280.216494][   T34]  schedule_preempt_disabled+0x13/0x30
[  280.218371][   T34]  __mutex_lock+0x724/0xe80
[  280.219923][   T34]  ? __mutex_lock+0x51b/0xe80
[  280.270439][   T34]  ? inet_rtm_newaddr+0x3b0/0x18b0
[  280.272252][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  280.273932][   T34]  ? __nla_parse+0x40/0x60
[  280.275485][   T34]  inet_rtm_newaddr+0x3b0/0x18b0
[  280.277225][   T34]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  280.279116][   T34]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  280.360268][   T34]  rtnetlink_rcv_msg+0x7cf/0xb70
[  280.362023][   T34]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  280.363782][   T34]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  280.365721][   T34]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  280.367643][   T34]  ? perf_trace_lock_acquire+0x335/0x410
[  280.369497][   T34]  netlink_rcv_skb+0x208/0x470
[  280.417841][   T34]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  280.419755][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  280.457693][   T34]  ? netlink_deliver_tap+0x2e/0x1b0
[  280.459511][   T34]  ? netlink_deliver_tap+0x2e/0x1b0
[  280.464247][   T34]  netlink_unicast+0x75c/0x8e0
[  280.466004][   T34]  netlink_sendmsg+0x805/0xb30
[  280.467660][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  280.469482][   T34]  ? aa_sock_msg_perm+0x94/0x160
[  280.497216][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  280.499084][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  280.501583][   T34]  __sock_sendmsg+0x21c/0x270
[  280.503253][   T34]  __sys_sendto+0x3bd/0x520
[  280.504825][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  280.506591][   T34]  ? count_memcg_event_mm+0x21/0x260
[  280.508440][   T34]  ? do_syscall_64+0xb7/0x3b0
[  280.510080][   T34]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  280.550253][   T34]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  280.552590][   T34]  __x64_sys_sendto+0xde/0x100
[  280.554283][   T34]  do_syscall_64+0xfa/0x3b0
[  280.555847][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  280.557595][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.559642][   T34]  ? exc_page_fault+0x9f/0xf0
[  280.590293][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.592424][   T34] RIP: 0033:0x7f20d8d909fc
[  280.594012][   T34] RSP: 002b:00007ffcdbc62a00 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  280.596865][   T34] RAX: ffffffffffffffda RBX: 00007f20d9ae4620 RCX: 00007f20d8d909fc
[  280.618657][   T34] RDX: 0000000000000028 RSI: 00007f20d9ae4670 RDI: 0000000000000003
[  280.624492][   T34] RBP: 0000000000000000 R08: 00007ffcdbc62a54 R09: 000000000000000c
[  280.627486][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  280.647454][   T34] R13: 0000000000000000 R14: 00007f20d9ae4670 R15: 0000000000000000
[  280.650794][   T34]  </TASK>
[  280.651945][   T34] INFO: task syz-executor:8007 blocked for more than 149 seconds.
[  280.654618][   T34]       Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0
[  280.657517][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  280.678583][   T34] task:syz-executor    state:D stack:25928 pid:8007  tgid:8007  ppid:1      task_flags:0x400140 flags:0x00004004
[  280.690269][   T34] Call Trace:
[  280.691454][   T34]  <TASK>
[  280.692492][   T34]  __schedule+0x16f5/0x4d00
[  280.694098][   T34]  ? schedule+0x165/0x360
[  280.695609][   T34]  ? __pfx___schedule+0x10/0x10
[  280.697322][   T34]  ? schedule+0x91/0x360
[  280.698804][   T34]  schedule+0x165/0x360
[  280.726921][   T34]  schedule_preempt_disabled+0x13/0x30
[  280.728868][   T34]  __mutex_lock+0x724/0xe80
[  280.732392][   T34]  ? __mutex_lock+0x51b/0xe80
[  280.734051][   T34]  ? inet_rtm_newaddr+0x3b0/0x18b0
[  280.735786][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  280.737533][   T34]  ? __nla_parse+0x40/0x60
[  280.739099][   T34]  inet_rtm_newaddr+0x3b0/0x18b0
[  280.757676][   T34]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  280.759600][   T34]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  280.770246][   T34]  rtnetlink_rcv_msg+0x7cf/0xb70
[  280.772011][   T34]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  280.773796][   T34]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  280.775739][   T34]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  280.777703][   T34]  ? perf_trace_lock_acquire+0x335/0x410
[  280.779761][   T34]  netlink_rcv_skb+0x208/0x470
[  280.799275][   T34]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  280.801424][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  280.810295][   T34]  ? netlink_deliver_tap+0x2e/0x1b0
[  280.812133][   T34]  ? netlink_deliver_tap+0x2e/0x1b0
[  280.813925][   T34]  netlink_unicast+0x75c/0x8e0
[  280.815693][   T34]  netlink_sendmsg+0x805/0xb30
[  280.817376][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  280.819204][   T34]  ? aa_sock_msg_perm+0x94/0x160
[  280.840249][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  280.842130][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  280.844016][   T34]  __sock_sendmsg+0x21c/0x270
[  280.845665][   T34]  __sys_sendto+0x3bd/0x520
[  280.847271][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  280.849027][   T34]  ? count_memcg_event_mm+0x21/0x260
[  280.871537][   T34]  ? do_syscall_64+0xb7/0x3b0
[  280.873227][   T34]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  280.875509][   T34]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  280.877675][   T34]  __x64_sys_sendto+0xde/0x100
[  280.879285][   T34]  do_syscall_64+0xfa/0x3b0
[  280.900247][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  280.902075][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.904192][   T34]  ? exc_page_fault+0x9f/0xf0
[  280.920255][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.922344][   T34] RIP: 0033:0x7f27047909fc
[  280.923927][   T34] RSP: 002b:00007ffd82c28630 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  280.926867][   T34] RAX: ffffffffffffffda RBX: 00007f27054e4620 RCX: 00007f27047909fc
[  280.929797][   T34] RDX: 0000000000000028 RSI: 00007f27054e4670 RDI: 0000000000000003
[  280.959231][   T34] RBP: 0000000000000000 R08: 00007ffd82c28684 R09: 000000000000000c
[  280.963380][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  280.966087][   T34] R13: 0000000000000000 R14: 00007f27054e4670 R15: 0000000000000000
[  280.968786][   T34]  </TASK>
[  280.969880][   T34] 
[  280.969880][   T34] Showing all locks held in the system:
[  280.987091][   T34] 3 locks held by kworker/0:0/9:
[  280.988798][   T34] 1 lock held by rcu_tasks_trace/32:
[  281.000267][   T34]  #0: ffffffff8e13fdd0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{4:4}, at: rcu_tasks_one_gp+0xaf9/0xdf0
[  281.004086][   T34] 1 lock held by khungtaskd/34:
[  281.005770][   T34]  #0: ffffffff8e13f0a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  281.030276][   T34] 5 locks held by kworker/u11:0/55:
[  281.032093][   T34]  #0: ffff88802a4b0948 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  281.035940][   T34]  #1: ffffc900007dfbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  281.040167][   T34]  #2: ffff88810fe94dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  281.062161][   T34]  #3: ffff88810fe940b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  281.065522][   T34]  #4: ffffffff8f6850c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  281.069517][   T34] 3 locks held by kworker/u9:8/1096:
[  281.105176][   T34]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  281.111241][   T34]  #1: ffffc90007327bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  281.116443][   T34]  #2: ffff8880326e0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x460
[  281.120077][   T34] 7 locks held by kworker/u11:1/5218:
[  281.140258][   T34]  #0: ffff888109809948 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  281.144013][   T34]  #1: ffffc90007057bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  281.148221][   T34]  #2: ffff888109a68dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  281.180278][   T34]  #3: ffff888109a680b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  281.184457][   T34]  #4: ffffffff8f6850c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  281.188643][   T34]  #5: ffff888029626b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  281.198505][   T34]  #6: ffffffff8e144bb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  281.203693][   T34] 2 locks held by getty/5654:
[  281.205750][   T34]  #0: ffff88810dfea0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  281.209431][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  281.218695][   T34] 5 locks held by kworker/u11:2/5829:
[  281.220962][   T34]  #0: ffff888033c69948 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  281.224656][   T34]  #1: ffffc9000356fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  281.228841][   T34]  #2: ffff888027a54dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  281.237618][   T34]  #3: ffff888027a540b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  281.241234][   T34]  #4: ffffffff8f6850c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  281.244531][   T34] 4 locks held by kworker/u11:3/5833:
[  281.246334][   T34]  #0: ffff888109334948 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  281.249958][   T34]  #1: ffffc9000359fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  281.258582][   T34]  #2: ffff88801b7c4dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  281.262315][   T34]  #3: ffff88801b7c40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  281.265952][   T34] 4 locks held by kworker/u11:4/5835:
[  281.268261][   T34]  #0: ffff8881114fa948 ((wq_completion)hci10#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  281.280299][   T34]  #1: ffffc900035cfbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  281.284325][   T34]  #2: ffff88810fe900b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0
[  281.287643][   T34]  #3: ffffffff8f6850c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0
[  281.294685][   T34] 3 locks held by kworker/u8:4/5858:
[  281.296770][   T34]  #0: ffff888108cbd148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  281.302929][   T34]  #1: ffffc9000374fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  281.307520][   T34]  #2: ffffffff8f51ce88 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  281.316470][   T34] 3 locks held by kworker/0:5/5983:
[  281.318316][   T34]  #0: ffff88801a481d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  281.323076][   T34]  #1: ffffc90003ccfbc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  281.326728][   T34]  #2: ffffffff8f51ce88 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf00
[  281.329842][   T34] 3 locks held by kworker/u10:11/6698:
[  281.336019][   T34]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  281.340005][   T34]  #1: ffffc9000834fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  281.345068][   T34]  #2: ffffffff8f51ce88 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  281.348163][   T34] 3 locks held by kworker/u10:12/6699:
[  281.349958][   T34]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  281.358549][   T34]  #1: ffffc90007b0fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  281.363205][   T34]  #2: ffff888032840768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x460
[  281.366676][   T34] 1 lock held by syz.1.912/7976:
[  281.368383][   T34]  #0: ffffffff8e1a2c68 (event_mutex){+.+.}-{4:4}, at: perf_trace_destroy+0x2e/0x150
[  281.375984][   T34] 2 locks held by syz.1.912/7977:
[  281.377663][   T34] 1 lock held by syz.0.911/7983:
[  281.379346][   T34]  #0: ffffffff8e144bb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  281.386731][   T34] 1 lock held by syz.2.917/7995:
[  281.388487][   T34]  #0: ffffffff8f520108 (bpf_dispatcher_xdp.mutex){+.+.}-{4:4}, at: bpf_dispatcher_change_prog+0x9c/0xc90
[  281.396362][   T34] 1 lock held by syz-executor/7998:
[  281.398249][   T34]  #0: ffffffff8f51ce88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  281.403636][   T34] 1 lock held by syz-executor/8001:
[  281.405604][   T34]  #0: ffffffff8f51ce88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  281.408772][   T34] 1 lock held by syz-executor/8007:
[  281.416338][   T34]  #0: ffffffff8f51ce88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  281.421497][   T34] 1 lock held by dhcpcd/8009:
[  281.423159][   T34]  #0: ffff88802b757408 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  281.426718][   T34] 1 lock held by syz-executor/8012:
[  281.428524][   T34]  #0: ffffffff8f51ce88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  281.439288][   T34] 1 lock held by syz-executor/8014:
[  281.441472][   T34]  #0: ffffffff8f51ce88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  281.444716][   T34] 1 lock held by syz-executor/8020:
[  281.446528][   T34]  #0: ffffffff8f51ce88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  281.449742][   T34] 4 locks held by kworker/u11:5/8022:
[  281.457084][   T34]  #0: ffff88811136d948 ((wq_completion)hci9#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  281.461331][   T34]  #1: ffffc90002b3fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  281.465428][   T34]  #2: ffff88810a2500b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0
[  281.468792][   T34]  #3: ffffffff8f6850c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0
[  281.476801][   T34] 1 lock held by dhcpcd/8023:
[  281.478451][   T34]  #0: ffff88810ed3c258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  281.482532][   T34] 1 lock held by dhcpcd/8024:
[  281.484212][   T34]  #0: ffff888106112258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  281.487514][   T34] 1 lock held by dhcpcd/8025:
[  281.489243][   T34]  #0: ffff88812209c258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  281.499365][   T34] 1 lock held by dhcpcd/8026:
[  281.501382][   T34]  #0: ffff888021934258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  281.504695][   T34] 1 lock held by dhcpcd/8027:
[  281.506317][   T34]  #0: ffff88811feb6258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  281.509617][   T34] 2 locks held by syz-executor/8036:
[  281.515931][   T34]  #0: ffffffff8eca4460 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  281.519195][   T34]  #1: ffffffff8f51ce88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  281.525623][   T34] 1 lock held by syz-executor/8040:
[  281.527458][   T34]  #0: ffffffff8f51ce88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  281.534827][   T34] 5 locks held by kworker/u11:6/8042:
[  281.536714][   T34]  #0: ffff88802acad948 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  281.540947][   T34]  #1: ffffc900033bfbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  281.545165][   T34]  #2: ffff88802afd0dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  281.548481][   T34]  #3: ffff88802afd00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  281.556159][   T34]  #4: ffffffff8f6850c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  281.559507][   T34] 1 lock held by syz-executor/8044:
[  281.562726][   T34]  #0: ffffffff8f51ce88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  281.565971][   T34] 4 locks held by kworker/u11:7/8046:
[  281.567819][   T34]  #0: ffff88811070e148 ((wq_completion)hci11#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  281.576076][   T34]  #1: ffffc9000335fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  281.580744][   T34]  #2: ffff8881100b80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0
[  281.584194][   T34]  #3: ffffffff8f6850c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0
[  281.587723][   T34] 5 locks held by kworker/u11:8/8049:
[  281.589587][   T34]  #0: ffff888021f93948 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  281.597797][   T34]  #1: ffffc9000338fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  281.605889][   T34]  #2: ffff88811fc64dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  281.609323][   T34]  #3: ffff88811fc640b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  281.616943][   T34]  #4: ffffffff8f6850c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  281.620790][   T34] 
[  281.621683][   T34] =============================================
[  281.621683][   T34] 
[  281.626149][   T34] NMI backtrace for cpu 1
[  281.626160][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  281.626169][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  281.626174][   T34] Call Trace:
[  281.626179][   T34]  <TASK>
[  281.626184][   T34]  dump_stack_lvl+0x189/0x250
[  281.626200][   T34]  ? __wake_up_klogd+0xd9/0x110
[  281.626218][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  281.626230][   T34]  ? __pfx__printk+0x10/0x10
[  281.626268][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  281.626288][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  281.626295][   T34]  ? _printk+0xcf/0x120
[  281.626317][   T34]  ? __pfx__printk+0x10/0x10
[  281.626335][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  281.626350][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  281.626367][   T34]  watchdog+0xfee/0x1030
[  281.626387][   T34]  ? watchdog+0x1de/0x1030
[  281.626418][   T34]  kthread+0x711/0x8a0
[  281.626439][   T34]  ? __pfx_watchdog+0x10/0x10
[  281.626452][   T34]  ? __pfx_kthread+0x10/0x10
[  281.626470][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  281.626484][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  281.626493][   T34]  ? __pfx_kthread+0x10/0x10
[  281.626510][   T34]  ret_from_fork+0x3fc/0x770
[  281.626528][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  281.626551][   T34]  ? __switch_to_asm+0x39/0x70
[  281.626560][   T34]  ? __switch_to_asm+0x33/0x70
[  281.626569][   T34]  ? __pfx_kthread+0x10/0x10
[  281.626585][   T34]  ret_from_fork_asm+0x1a/0x30
[  281.626625][   T34]  </TASK>
[  281.626629][   T34] Sending NMI from CPU 1 to CPUs 0:
[  281.682254][    C0] NMI backtrace for cpu 0
[  281.682269][    C0] CPU: 0 UID: 0 PID: 7977 Comm: syz.1.912 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  281.682278][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  281.682283][    C0] RIP: 0010:perf_trace_buf_alloc+0x12a/0x2a0
[  281.682299][    C0] Code: 08 4c 89 e7 e8 47 bb 59 00 4c 89 f0 48 c1 e8 03 4d 03 3c 24 42 80 3c 28 00 74 08 4c 89 f7 e8 1d bc 59 00 4d 89 3e 4c 8b 3c 24 <eb> 12 e8 ff 94 f6 ff 45 31 f6 e9 9c 00 00 00 e8 f2 94 f6 ff bf 04
[  281.682305][    C0] RSP: 0018:ffffc90000006ca0 EFLAGS: 00000246
[  281.682314][    C0] RAX: 1ffff92000000da8 RBX: 000000000000002c RCX: ffff888111510000
[  281.682319][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000008
[  281.682324][    C0] RBP: 0000000000000001 R08: 0000000000000002 R09: 0000000000000000
[  281.682327][    C0] R10: ffffc90000006fc8 R11: fffff52000000e05 R12: ffffffff8dbbec70
[  281.682332][    C0] R13: dffffc0000000000 R14: ffffc90000006d40 R15: 0000000000000001
[  281.682336][    C0] FS:  00007f3cc35f96c0(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
[  281.682342][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  281.682346][    C0] CR2: 000055946b66be08 CR3: 0000000109b72000 CR4: 00000000000006f0
[  281.682372][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  281.682378][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  281.682382][    C0] Call Trace:
[  281.682387][    C0]  <IRQ>
[  281.682399][    C0]  perf_trace_lock_acquire+0x196/0x410
[  281.682410][    C0]  ? hrtimer_interrupt+0x889/0xaa0
[  281.682428][    C0]  ? __pfx_perf_trace_lock_acquire+0x10/0x10
[  281.682446][    C0]  ? __irq_exit_rcu+0xd8/0x1f0
[  281.682463][    C0]  ? unwind_next_frame+0xa5/0x2390
[  281.682471][    C0]  lock_acquire+0x311/0x360
[  281.682480][    C0]  ? unwind_next_frame+0xa5/0x2390
[  281.682498][    C0]  ? __unwind_start+0xf8/0x760
[  281.682508][    C0]  ? unwind_next_frame+0xa5/0x2390
[  281.682516][    C0]  unwind_next_frame+0xc2/0x2390
[  281.682523][    C0]  ? unwind_next_frame+0xa5/0x2390
[  281.682539][    C0]  ? get_stack_info_noinstr+0x4e/0x130
[  281.682551][    C0]  ? get_stack_info_noinstr+0x46/0x130
[  281.682568][    C0]  __unwind_start+0x5b9/0x760
[  281.682584][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  281.682595][    C0]  arch_stack_walk+0xe4/0x150
[  281.682614][    C0]  ? __unwind_start+0xf8/0x760
[  281.682628][    C0]  stack_trace_save+0x9c/0xe0
[  281.682639][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  281.682646][    C0]  ? sched_clock_cpu+0x74/0x430
[  281.682670][    C0]  save_stack+0xf5/0x1f0
[  281.682684][    C0]  ? __pfx_save_stack+0x10/0x10
[  281.682722][    C0]  __set_page_owner+0x8d/0x4a0
[  281.682735][    C0]  ? __pfx___set_page_owner+0x10/0x10
[  281.682755][    C0]  post_alloc_hook+0x240/0x2a0
[  281.682772][    C0]  get_page_from_freelist+0x21e4/0x22c0
[  281.682786][    C0]  ? trace_call_bpf+0xb7/0x850
[  281.682809][    C0]  ? trace_call_bpf+0xb7/0x850
[  281.682821][    C0]  ? trace_call_bpf+0xb7/0x850
[  281.682828][    C0]  ? trace_call_bpf+0x5ba/0x850
[  281.682836][    C0]  ? perf_trace_lock_acquire+0x335/0x410
[  281.682844][    C0]  ? trace_call_bpf+0xb7/0x850
[  281.682878][    C0]  ? perf_trace_lock+0xec/0x3b0
[  281.682934][    C0]  ? __pfx_get_page_from_freelist+0x10/0x10
[  281.682950][    C0]  ? prepare_alloc_pages+0x213/0x610
[  281.682971][    C0]  __alloc_frozen_pages_noprof+0x181/0x370
[  281.682985][    C0]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  281.683000][    C0]  ? __pfx_perf_trace_lock+0x10/0x10
[  281.683012][    C0]  ? policy_nodemask+0x28b/0x720
[  281.683030][    C0]  alloc_pages_mpol+0x232/0x4a0
[  281.683054][    C0]  allocate_slab+0x8a/0x3b0
[  281.683071][    C0]  ___slab_alloc+0xbfc/0x1480
[  281.683082][    C0]  ? kcov_task_exit+0xb0/0x150
[  281.683097][    C0]  ? dst_cow_metrics_generic+0x56/0x1c0
[  281.683118][    C0]  __kmalloc_cache_noprof+0x296/0x3d0
[  281.683127][    C0]  ? dst_cow_metrics_generic+0x56/0x1c0
[  281.683142][    C0]  dst_cow_metrics_generic+0x56/0x1c0
[  281.683158][    C0]  icmp6_dst_alloc+0x264/0x420
[  281.683167][    C0]  ? icmpv6_flow_init+0x62/0x120
[  281.683184][    C0]  ndisc_send_skb+0x41f/0x1400
[  281.683196][    C0]  ? ndisc_send_skb+0x208/0x1400
[  281.683206][    C0]  ? __pfx_perf_trace_lock+0x10/0x10
[  281.683225][    C0]  ? __pfx_ndisc_send_skb+0x10/0x10
[  281.683273][    C0]  addrconf_rs_timer+0x369/0x670
[  281.683293][    C0]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  281.683303][    C0]  ? call_timer_fn+0xbe/0x5f0
[  281.683320][    C0]  call_timer_fn+0x17e/0x5f0
[  281.683328][    C0]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  281.683334][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  281.683342][    C0]  ? call_timer_fn+0xbe/0x5f0
[  281.683349][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  281.683373][    C0]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  281.683386][    C0]  __run_timer_base+0x61a/0x860
[  281.683396][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  281.683427][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  281.683461][    C0]  run_timer_softirq+0xb7/0x180
[  281.683474][    C0]  handle_softirqs+0x286/0x870
[  281.683490][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  281.683506][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  281.683514][    C0]  ? irq_work_single+0x1ac/0x240
[  281.683528][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  281.683542][    C0]  __irq_exit_rcu+0xca/0x1f0
[  281.683552][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  281.683567][    C0]  ? rcu_is_watching+0x15/0xb0
[  281.683581][    C0]  irq_exit_rcu+0x9/0x30
[  281.683589][    C0]  sysvec_irq_work+0xa3/0xc0
[  281.683596][    C0]  </IRQ>
[  281.683599][    C0]  <TASK>
[  281.683603][    C0]  asm_sysvec_irq_work+0x1a/0x20
[  281.683612][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110
[  281.683623][    C0] Code: 74 05 e8 9b 93 56 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> e3 c1 1f f6 65 8b 05 bc f9 2e 07 85 c0 74 40 48 c7 04 24 0e 36
[  281.683628][    C0] RSP: 0018:ffffc900034cfa20 EFLAGS: 00000206
[  281.683634][    C0] RAX: 3b1145664dd58900 RBX: 0000000000000a06 RCX: 3b1145664dd58900
[  281.683639][    C0] RDX: 0000000000000000 RSI: ffffffff8d9987c6 RDI: 0000000000000001
[  281.683643][    C0] RBP: ffffc900034cfaa8 R08: ffffffff8fa1eaf7 R09: 1ffffffff1f43d5e
[  281.683647][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d5f R12: dffffc0000000000
[  281.683651][    C0] R13: 0000000000000009 R14: ffff8880272c3208 R15: 1ffff92000699f44
[  281.683678][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  281.683701][    C0]  kcov_task_exit+0xb0/0x150
[  281.683714][    C0]  do_exit+0x105/0x22e0
[  281.683726][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  281.683744][    C0]  ? do_raw_spin_lock+0x121/0x290
[  281.683760][    C0]  ? __pfx_do_exit+0x10/0x10
[  281.683770][    C0]  ? irqentry_exit+0x74/0x90
[  281.683800][    C0]  do_group_exit+0x21c/0x2d0
[  281.683819][    C0]  get_signal+0x1286/0x1340
[  281.683857][    C0]  arch_do_signal_or_restart+0x9a/0x750
[  281.683871][    C0]  ? __pfx___se_sys_perf_event_open+0x10/0x10
[  281.683887][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  281.683919][    C0]  ? perf_trace_preemptirq_template+0xa3/0x340
[  281.683949][    C0]  ? exit_to_user_mode_loop+0x40/0x110
[  281.683964][    C0]  exit_to_user_mode_loop+0x75/0x110
[  281.683973][    C0]  do_syscall_64+0x2bd/0x3b0
[  281.683983][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  281.683993][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.684000][    C0]  ? exc_page_fault+0x9f/0xf0
[  281.684014][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.684021][    C0] RIP: 0033:0x7f3cc278eb69
[  281.684032][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  281.684037][    C0] RSP: 002b:00007f3cc35f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  281.684049][    C0] RAX: 0000000000000008 RBX: 00007f3cc29b5fa0 RCX: 00007f3cc278eb69
[  281.684054][    C0] RDX: affffff7ffffffff RSI: 0000000000000000 RDI: 0000200000000180
[  281.684058][    C0] RBP: 00007f3cc2811df1 R08: 0000000000000000 R09: 0000000000000000
[  281.684062][    C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  281.684066][    C0] R13: 0000000000000000 R14: 00007f3cc29b5fa0 R15: 00007ffcaa802378
[  281.684091][    C0]  </TASK>
[  282.005539][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  282.007928][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  282.012082][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  282.015523][   T34] Call Trace:
[  282.016690][   T34]  <TASK>
[  282.017737][   T34]  dump_stack_lvl+0x99/0x250
[  282.019328][   T34]  ? __asan_memcpy+0x40/0x70
[  282.020891][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  282.022655][   T34]  ? __pfx__printk+0x10/0x10
[  282.024289][   T34]  panic+0x2db/0x790
[  282.025615][   T34]  ? __pfx_panic+0x10/0x10
[  282.027183][   T34]  ? nmi_backtrace_stall_check+0x433/0x440
[  282.029199][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  282.031026][   T34]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  282.033123][   T34]  watchdog+0x102d/0x1030
[  282.034640][   T34]  ? watchdog+0x1de/0x1030
[  282.036220][   T34]  kthread+0x711/0x8a0
[  282.037633][   T34]  ? __pfx_watchdog+0x10/0x10
[  282.039267][   T34]  ? __pfx_kthread+0x10/0x10
[  282.040882][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  282.042822][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  282.044639][   T34]  ? __pfx_kthread+0x10/0x10
[  282.046261][   T34]  ret_from_fork+0x3fc/0x770
[  282.047886][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  282.049711][   T34]  ? __switch_to_asm+0x39/0x70
[  282.051396][   T34]  ? __switch_to_asm+0x33/0x70
[  282.053056][   T34]  ? __pfx_kthread+0x10/0x10
[  282.054664][   T34]  ret_from_fork_asm+0x1a/0x30
[  282.056381][   T34]  </TASK>
[  282.058245][   T34] Kernel Offset: disabled
[  282.059741][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:40:00  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000055 RBX=ffff88804b023900 RCX=0000000000000838 RDX=0000000000000000
RSI=0000000000000055 RDI=0000000000000838 RBP=0000000000000000 RSP=ffffc90000006ac8
R8 =0000000000000000 R9 =ffffffff81aebece R10=ffffc90000006740 R11=ffffffff81702490
R12=000000000ffffaf7 R13=dffffc0000000000 R14=0000000000000055 R15=0000000000000020
RIP=ffffffff81714f69 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f3cc35f96c0 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055946b66be08 CR3=0000000109b72000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffff00ff00000000 XMM05=6c67656b2f650061 642e7269662f302e
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=000000000000ff00 0000000000000000 XMM09=756765722f657261 776d7269662f302e
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000066 RBX=0000000000000066 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6d0
R8 =ffff888107798237 R9 =1ffff11020ef3046 R10=dffffc0000000000 R11=ffffffff85472220
R12=dffffc0000000000 R13=ffffffff99af58cc R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff8547229c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fce2ee3e3e9 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
