last executing test programs:

19.683427809s ago: executing program 2 (id=646):
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x80, 0x9, 0x3, 0x2, 0x2, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3ff, 0xbfe}, 0x10, 0x3b8, 0x5, 0x6, 0x4, 0x6adc, 0x6, 0x0, 0x4, 0x0, 0x9}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0xc)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa4}, 0x21)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3) (async)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0) (async, rerun: 32)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x50) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x59}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033200fe08000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) (async)
openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async, rerun: 64)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x23}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@map, 0xffffffffffffffff, 0x26, 0x20}, 0x20) (async)
syz_clone(0x1000, 0x0, 0x0, &(0x7f0000003640), 0x0, 0x0)

19.659482077s ago: executing program 2 (id=647):
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480), 0x0, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000003b8279f44ebeb9349760e312072c852e9f25195e2856278457ea04870e39be1e2bcd45aa270090a43e75ef55137136a1a768e9e6b4af997a6a21e27a8b2b08b4059560f9494fef2bdc54837a3798a51ae1ce1d025f5c0e442a76d4b52aac30fd22ad8854ac351af67ffc59e56c2c6c57ac2ebd3836f8ba7800"/146], &(0x7f0000000440)='syzkaller\x00'}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
close(r0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r3=>0x0, <r4=>0x0})
close(r3)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r5=>0x0, <r6=>0x0})
close(r5)
setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0800000004"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000"], 0x0}, 0x94)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r7=>0x0, <r8=>0x0})
close(r7)
setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r9 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
close(r0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x4a)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff03076844268cb8be14f08847", 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000100)=r10, 0x4)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18f5ff0101000000f6ffffff3300000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r11}, 0x10)
r12 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r12, &(0x7f0000000140)={0x0, 0x32, &(0x7f0000000040)=[{&(0x7f00000005c0)="3504000041000511d25a35400c0002000200002037153e370c04018006041000450000002a560000e7ff00400000", 0x2e}, {&(0x7f0000000600)="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"/1013, 0x401}, {&(0x7f0000000a40)="47f72fedcd1d", 0x6}], 0x3}, 0x10049014)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="611272000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x90)

18.734758599s ago: executing program 0 (id=648):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611924000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r1, &(0x7f0000000180)="20e57196228c1b4562ba79952211d0e16825955f9d81ec8870e3db3c8aa327faf9272be988ec1ebf8e6dcd9b199d46e3815433c815768adc3cf6f777d8be1040ee2325a1", &(0x7f0000000200)=""/197}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x50)

18.733735051s ago: executing program 2 (id=649):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x60, 0x1403, 0x1, 0x70bd25, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pim6reg\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c084)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000001509010000000000b500f8ffffff000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000a36c00850000001700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

18.731350575s ago: executing program 0 (id=650):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x10, 0x5, 0x9, 0x11840, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50)
r1 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10)
r4 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="b7", 0x1}], 0x1}, 0x20008050)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff})
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe0e41b0000900ac00060411000000040012000a0005000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db7259826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d00"/216, 0xd8}], 0x1}, 0x0)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x84, 0x10, &(0x7f0000000000)=r7, 0xc)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x40, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0xa, 0x4, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x6e, &(0x7f0000000500)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x4e, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10)
r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000780), 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x33, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x91}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @exit, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @map_fd={0x18, 0x2, 0x1, 0x0, r8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000380)='syzkaller\x00', 0x6, 0x40, &(0x7f00000003c0)=""/64, 0x40f00, 0x1, '\x00', r9, 0x25, r10, 0x8, &(0x7f00000007c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x4, 0xffffffff, 0x9f}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa108000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r11, 0x0, 0xe, 0x0, &(0x7f0000000600)="e0b9547ed387db3b8691d2c0e201", 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

18.617789421s ago: executing program 2 (id=651):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}, 0x40800)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
r1 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000080)="27050200160014000600002f86dd", 0xe}], 0x1}, 0x4000)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x14, 0x4, 0x4, 0xc}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r2, &(0x7f00000003c0), &(0x7f0000000400)=""/103}, 0x20)
close(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000080), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x6c}]}, &(0x7f00000006c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x25}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x27, 0x0, 0x0, 0x0, 0x0, 0xfff, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000250000000000000018000000000000000000cd33797e9ca7e10a000000000000c7030000000000009500f76900"], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}, 0x40800) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) (async)
socket$kcm(0x11, 0x3, 0x0) (async)
sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000080)="27050200160014000600002f86dd", 0xe}], 0x1}, 0x4000) (async)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x14, 0x4, 0x4, 0xc}, 0x48) (async)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r2, &(0x7f00000003c0), &(0x7f0000000400)=""/103}, 0x20) (async)
close(0xffffffffffffffff) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) (async)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000080), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x6c}]}, &(0x7f00000006c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x25}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x27, 0x0, 0x0, 0x0, 0x0, 0xfff, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000250000000000000018000000000000000000cd33797e9ca7e10a000000000000c7030000000000009500f76900"], &(0x7f0000000000)='GPL\x00'}, 0x94) (async)

18.457067051s ago: executing program 2 (id=653):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$kcm(0x2b, 0x1, 0x0)
close(r1)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_config_ext={0x9, 0x2}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22048, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x8080, 0x0, 0x0, 0x2, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xf, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40503c2b, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100ff}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xc}, 0x24, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
socket$kcm(0x2b, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x9a)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r7}, 0x4)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40002}, [@call={0x85, 0x0, 0x0, 0xca}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

18.445925335s ago: executing program 1 (id=656):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x52}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x6}, 0xffffffffffffffcc)

18.373636064s ago: executing program 1 (id=657):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socket$kcm(0x11, 0x200000000000002, 0x300) (async)
socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = socket$kcm(0x21, 0x2, 0xa)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80800, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x10000003, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) (async)
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140))
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)}, 0x122) (async)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)}, 0x122)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1801000000000000000000000800000002110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0xb}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1801000000000000000000000800000002110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0xb}, 0x94)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) (async)
sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0xfffffeba, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x18}, 0x404f444)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000121400bee0bd7000fddbdf2508004f0005000000"], 0x18}, 0x1, 0x0, 0x0, 0x71}, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x4a, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0xfffffffffffffffc, 0x6, 0x8, 0x3fe, 0x7fffffff, 0x40}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d80000003200b904021d080005000400e8fe55a1180015000600142603600e120900210000090401a80016000a00014006000000036010faa000cf", 0x3b}], 0x1}, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d80000003200b904021d080005000400e8fe55a1180015000600142603600e120900210000090401a80016000a00014006000000036010faa000cf", 0x3b}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)

17.954917946s ago: executing program 1 (id=658):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x4, 0x4, 0x12, 0x110}, 0x48)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r2, r1, 0x5}, 0x10) (async)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000480)={0x2, &(0x7f00000004c0)=[{0x14}, {0x6}]})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) (async, rerun: 32)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1b008200000000000000400000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x5, 0x4, 0x2}, 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xf, 0x4, 0x8, 0x8, 0x41, 0xffffffffffffffff, 0x6}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, 0x0, &(0x7f0000000140)}, 0x20)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64)
socket$kcm(0x11, 0x200000000000002, 0x300) (async, rerun: 64)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, 0x0) (async)
socket$kcm(0x29, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xa5, 0xa, 0x0, 0x0, 0xffffff80, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async)
socket$kcm(0xf, 0x3, 0x2)
close(0x3) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="d60a00000400000061190c00000000001895000000000000000000f7ffffff000000000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (rerun: 32)

17.88529232s ago: executing program 1 (id=659):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000101850000002e000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x64, 0x8, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x8800)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080))

17.825257391s ago: executing program 0 (id=660):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socket$kcm(0x2, 0x1000000000000002, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/17, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0400000004000032bfdd000001000000000000002d64b91b87704d85e72d579e8d18eb8c9b00a96f91cfc457ce29a469738f376844bb1a0375a253c4ac0f4703199e5c105a22c616c56bfc32d81ee6bc911e83676a6a6482f2a076d539e462b69b05a077899fa01e0def617d173b6ede8736ed04e253ecf9c645525ffb7891861643ba96a654ec890612dbaead20fb4cefdd13443cba2d0a2d3d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
fstat(0xffffffffffffffff, &(0x7f0000000ac0))
socketpair(0x1, 0x1, 0xfffffffe, &(0x7f0000000000))
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd6000, 0x4, @perf_bp={&(0x7f0000000140), 0x7}, 0x29, 0x0, 0x2, 0x1, 0x9, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = socket$kcm(0x2b, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x6, 0x25, &(0x7f0000000200)=r5, 0x4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10})
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000340)={'team_slave_1\x00', @local})
r6 = socket$kcm(0x1e, 0x4, 0x0)
r7 = socket$kcm(0x11, 0x3, 0x300)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8906, 0x0)
recvmsg(r7, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x20)
sendmsg$kcm(r6, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e22}}, 0x80, 0x0}, 0xf5ff)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000300)=""/18)
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f0, &(0x7f0000000080))
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000008400000000010000010000", @ANYRES32, @ANYRESHEX=r8], 0x50)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080))

17.824772578s ago: executing program 2 (id=661):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="020a000302000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
r6 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4e93, 0x18445, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xc0000000000000, 0xfffe}, 0x8080, 0xa9, 0x80000000, 0x5, 0x400000a5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0)
close(r6)
ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x1d}, {0x6, 0x0, 0xfe}]})
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000feffffff000000000000000071104b000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf6700000000000036000b000fff52004507000015300000d60600000ee60000bf050000000000003d63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070000000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999eef9d60bb39d0af449deaa27ea949e8f9000d885deea2783835e29eba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f26cac1c7b21bde7d1a55d6ebe700b3be005e47ef55e0dd81244b18590e000000000000356d82e43407a6d7fa94b21002f06cd247b126b6349ab62d7b07ba0a71a72145edade9941f49f300a8c8913e0e4ea9e4c77740ab3312edee62a4dc2fc85755d387d8a1bc8eb71fbe11b2216cc8d1f0160c237d929b49d828724b95555b459f4763c6222175c974be2f76fb5f330b015a68587a75c013000000000000000000000003000000000000d6ddc46e58eff8f4fbadfc6a3af8123b7f4240713a4c0cdc9d7820c4eb67cc0f8b5fe9258eeacb5776aebbab3d5c55020000006082778366dadfc36029633e0514cbcee1f3928970bde148c940434f33acd377cbad17673b2d30b6339255c98eba97efb4e9ac1f11be815dd6045592edcbee7f253ec74c7c1313505bd7ff8fd58b3a6569c91dbdef1df585aeaea7346a2a65caee5c85f9eddeeeee3c8a2e523c864ac430eb47cb4d0c8767b9d4125661b5a1a170c04b64da3a99ddb93bf14fae3ca2d1e882375b8dbac83978e136c34f90b33cc0eeb57debcfe26589efc08125d5d62a7e593c9738a50171adf051ea4f07e7e7e770c2016eeacbe8511afffffbea75759a1ea5404f5453c0b5c46c9700808c096cf8cf5223f341cbea3841b5cd224c1b381d56afebe9f99a00e3cd94dc0bb7af9e8709db487cc4d9b3b96723d69d512ddd57b0dee9b9f6ae80a502cce352098603e77f9ecced07fa25e99e9e415414c91f8bfd1c150570512f26c4ee34a64c131dce3800000000000000006c86287945bd8d258442870e000000000000000000000000f7e6a10de4bf7369b0d5b5373829b09bf5b7b34099b27ac7770fca449d4c4ca15f88b588b2429af2e1d1a4e1fa44cb80fcfae6e50d7e5b4675d7e0be706224f34e6eed553b40e2b897e73752fc7d1e4b0f4c5967eefd7448d5fde5841fa464a67267c631052bd7333769a4b8d19d4794357edce762e8136ab9d7ed34a72baffd849b90579b96b3"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r7, 0x20, &(0x7f0000001080)={0x0, 0x0, <r8=>0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r8, 0x4)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000700)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000440)="b9ff033168440372b89e14f088a8", 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

17.749363487s ago: executing program 1 (id=662):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x7, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={0x0, 0x0, 0x8}, 0x18)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000d40)='blkio.bfq.sectors\x00', 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x80, '\x00', 0x0, r0, 0x0, 0x2}, 0x50)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x828, 0x0, 0x80000001, 0x3, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='freezer.parent_freezing\x00', 0x790197c97da9, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810)
recvmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x28, 0x0, &(0x7f00000007c0)="c1188e99b95d02ff4284860188a8", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r3 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r3, 0x12)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000040)=0x1, 0x12)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000d"], 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r9, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000540)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x8, 0x0, 0x0}}, 0x10)
r10 = openat$cgroup_ro(r6, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r10, &(0x7f0000000040)=0x1, 0x12)

17.694719667s ago: executing program 0 (id=663):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112d9000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
r7 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r7, 0x29, 0x4e, 0x0, 0x4)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x300)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x10, 0x4, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r3, &(0x7f0000000000)="3365f4", &(0x7f0000000040)=""/7}, 0x20)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xe)

17.574786978s ago: executing program 1 (id=664):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7ff1, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xe1, 0x0, 0x87, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x6, 0x10000000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) (async)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300) (async)
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa4706, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}, 0x320, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff0}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa4706, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}, 0x320, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff0}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000002c0), 0x161)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x400454d1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback=0xd}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0) (async)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)

15.535311529s ago: executing program 0 (id=665):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x2, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2002}, @CTA_TUPLE_ORIG={0x58, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x800)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)

15.534778179s ago: executing program 0 (id=666):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x13}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x19, 0x16}, [@call={0x5c}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e}, 0x3f)
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1)

2.015441975s ago: executing program 32 (id=664):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7ff1, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xe1, 0x0, 0x87, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x6, 0x10000000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) (async)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300) (async)
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa4706, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}, 0x320, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff0}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa4706, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}, 0x320, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff0}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000002c0), 0x161)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x400454d1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback=0xd}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0) (async)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)

1.953226596s ago: executing program 33 (id=661):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="020a000302000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
r6 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4e93, 0x18445, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xc0000000000000, 0xfffe}, 0x8080, 0xa9, 0x80000000, 0x5, 0x400000a5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0)
close(r6)
ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x1d}, {0x6, 0x0, 0xfe}]})
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000feffffff000000000000000071104b000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf6700000000000036000b000fff52004507000015300000d60600000ee60000bf050000000000003d63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070000000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999eef9d60bb39d0af449deaa27ea949e8f9000d885deea2783835e29eba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f26cac1c7b21bde7d1a55d6ebe700b3be005e47ef55e0dd81244b18590e000000000000356d82e43407a6d7fa94b21002f06cd247b126b6349ab62d7b07ba0a71a72145edade9941f49f300a8c8913e0e4ea9e4c77740ab3312edee62a4dc2fc85755d387d8a1bc8eb71fbe11b2216cc8d1f0160c237d929b49d828724b95555b459f4763c6222175c974be2f76fb5f330b015a68587a75c013000000000000000000000003000000000000d6ddc46e58eff8f4fbadfc6a3af8123b7f4240713a4c0cdc9d7820c4eb67cc0f8b5fe9258eeacb5776aebbab3d5c55020000006082778366dadfc36029633e0514cbcee1f3928970bde148c940434f33acd377cbad17673b2d30b6339255c98eba97efb4e9ac1f11be815dd6045592edcbee7f253ec74c7c1313505bd7ff8fd58b3a6569c91dbdef1df585aeaea7346a2a65caee5c85f9eddeeeee3c8a2e523c864ac430eb47cb4d0c8767b9d4125661b5a1a170c04b64da3a99ddb93bf14fae3ca2d1e882375b8dbac83978e136c34f90b33cc0eeb57debcfe26589efc08125d5d62a7e593c9738a50171adf051ea4f07e7e7e770c2016eeacbe8511afffffbea75759a1ea5404f5453c0b5c46c9700808c096cf8cf5223f341cbea3841b5cd224c1b381d56afebe9f99a00e3cd94dc0bb7af9e8709db487cc4d9b3b96723d69d512ddd57b0dee9b9f6ae80a502cce352098603e77f9ecced07fa25e99e9e415414c91f8bfd1c150570512f26c4ee34a64c131dce3800000000000000006c86287945bd8d258442870e000000000000000000000000f7e6a10de4bf7369b0d5b5373829b09bf5b7b34099b27ac7770fca449d4c4ca15f88b588b2429af2e1d1a4e1fa44cb80fcfae6e50d7e5b4675d7e0be706224f34e6eed553b40e2b897e73752fc7d1e4b0f4c5967eefd7448d5fde5841fa464a67267c631052bd7333769a4b8d19d4794357edce762e8136ab9d7ed34a72baffd849b90579b96b3"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r7, 0x20, &(0x7f0000001080)={0x0, 0x0, <r8=>0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r8, 0x4)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000700)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000440)="b9ff033168440372b89e14f088a8", 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

0s ago: executing program 34 (id=666):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x13}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x19, 0x16}, [@call={0x5c}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e}, 0x3f)
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:64176' (ED25519) to the list of known hosts.
syzkaller login: [   41.331280][ T5778] cgroup: Unknown subsys name 'net'
[   41.416359][ T5778] cgroup: Unknown subsys name 'cpuset'
[   41.420347][ T5778] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   43.077756][ T5778] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   47.007123][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   47.010063][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   47.014104][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   47.017241][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   47.020073][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   47.074601][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   47.077498][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   47.080183][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   47.083739][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   47.086507][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   47.153251][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   47.155875][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   47.158491][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   47.162145][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   47.164918][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   47.205992][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   47.313365][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.315860][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.318212][ T5849] bridge_slave_0: entered allmulticast mode
[   47.321004][ T5849] bridge_slave_0: entered promiscuous mode
[   47.330282][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.332584][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.335183][ T5849] bridge_slave_1: entered allmulticast mode
[   47.337875][ T5849] bridge_slave_1: entered promiscuous mode
[   47.378446][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.384155][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.406673][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   47.417585][ T5849] team0: Port device team_slave_0 added
[   47.420883][ T5849] team0: Port device team_slave_1 added
[   47.464165][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.466367][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.474528][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.496126][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.498286][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.506878][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.560758][ T5857] chnl_net:caif_netlink_parms(): no params data found
[   47.574186][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.576578][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.578934][ T5854] bridge_slave_0: entered allmulticast mode
[   47.581949][ T5854] bridge_slave_0: entered promiscuous mode
[   47.601981][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.604412][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.606726][ T5854] bridge_slave_1: entered allmulticast mode
[   47.609446][ T5854] bridge_slave_1: entered promiscuous mode
[   47.626875][ T5849] hsr_slave_0: entered promiscuous mode
[   47.629219][ T5849] hsr_slave_1: entered promiscuous mode
[   47.673354][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.698105][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.700939][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.703413][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.705702][ T5857] bridge_slave_0: entered allmulticast mode
[   47.708527][ T5857] bridge_slave_0: entered promiscuous mode
[   47.731415][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.734144][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.736339][ T5857] bridge_slave_1: entered allmulticast mode
[   47.738965][ T5857] bridge_slave_1: entered promiscuous mode
[   47.758893][ T5854] team0: Port device team_slave_0 added
[   47.773754][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.781365][ T5854] team0: Port device team_slave_1 added
[   47.785165][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.827195][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.829376][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.837950][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.856884][ T5857] team0: Port device team_slave_0 added
[   47.859318][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.861510][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.870016][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.879442][ T5857] team0: Port device team_slave_1 added
[   47.929103][ T5854] hsr_slave_0: entered promiscuous mode
[   47.931398][ T5854] hsr_slave_1: entered promiscuous mode
[   47.934335][ T5854] debugfs: 'hsr0' already exists in 'hsr'
[   47.936197][ T5854] Cannot create hsr debugfs directory
[   47.938477][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.940667][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.949070][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.969081][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.971317][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.979692][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.036137][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   48.046330][ T5857] hsr_slave_0: entered promiscuous mode
[   48.048649][ T5857] hsr_slave_1: entered promiscuous mode
[   48.050794][ T5857] debugfs: 'hsr0' already exists in 'hsr'
[   48.052938][ T5857] Cannot create hsr debugfs directory
[   48.058137][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   48.064785][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   48.073147][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   48.225345][ T5854] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   48.233766][ T5854] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   48.246053][ T5854] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   48.255862][ T5854] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   48.296483][ T5857] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   48.304897][ T5857] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   48.313520][ T5857] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   48.319300][ T5857] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   48.358842][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.378556][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   48.400358][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.405604][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.407866][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.412304][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.414604][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.445677][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   48.454761][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.456948][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.474257][ T3583] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.476548][ T3583] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.480592][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.520953][ T5857] 8021q: adding VLAN 0 to HW filter on device team0
[   48.547063][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.549286][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.559299][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.561510][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.594167][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.617221][ T5857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   48.648223][ T5849] veth0_vlan: entered promiscuous mode
[   48.656313][ T5849] veth1_vlan: entered promiscuous mode
[   48.676061][ T5849] veth0_macvtap: entered promiscuous mode
[   48.680281][ T5849] veth1_macvtap: entered promiscuous mode
[   48.693873][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.705329][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.713329][ T5878] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.716091][ T5878] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.718730][ T5878] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.732383][ T5878] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.767411][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.774570][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.803499][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.806904][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.849180][ T5854] veth0_vlan: entered promiscuous mode
[   48.851159][ T5857] veth0_vlan: entered promiscuous mode
[   48.853463][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.856283][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.870397][ T5854] veth1_vlan: entered promiscuous mode
[   48.876199][ T5857] veth1_vlan: entered promiscuous mode
[   48.904621][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   48.913210][ T5857] veth0_macvtap: entered promiscuous mode
[   48.917158][ T5857] veth1_macvtap: entered promiscuous mode
[   48.945506][ T5854] veth0_macvtap: entered promiscuous mode
[   48.957015][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.970644][ T5854] veth1_macvtap: entered promiscuous mode
[   48.984207][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.998254][ T5869] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.001725][ T5869] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.008808][ T5869] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.011618][ T5869] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.025455][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.046670][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.084236][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.089279][ T5238] Bluetooth: hci0: command tx timeout
[   49.092889][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.114591][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.126312][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.163071][ T5238] Bluetooth: hci1: command tx timeout
[   49.168969][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.171441][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.220164][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.221723][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.223015][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.229405][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.242711][ T5238] Bluetooth: hci2: command tx timeout
[   49.256866][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.259321][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.360762][ T5930] netlink: 'syz.2.8': attribute type 2 has an invalid length.
[   49.367616][ T5930] netlink: 164 bytes leftover after parsing attributes in process `syz.2.8'.
[   49.371592][ T5930] netlink: 'syz.2.8': attribute type 2 has an invalid length.
[   49.375362][ T5930] netlink: 164 bytes leftover after parsing attributes in process `syz.2.8'.
[   49.435630][ T5935] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.10'.
[   49.438721][ T5935] netlink: 6320 bytes leftover after parsing attributes in process `syz.2.10'.
[   50.368419][    C1] hrtimer: interrupt took 19349 ns
[   50.476952][ T5992] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.26'.
[   50.481151][ T5990] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.26'.
[   50.749495][ T6011] netlink: 'syz.0.29': attribute type 10 has an invalid length.
[   50.752231][ T6011] netlink: 40 bytes leftover after parsing attributes in process `syz.0.29'.
[   51.026807][ T6022] sctp: [Deprecated]: syz.1.33 (pid 6022) Use of struct sctp_assoc_value in delayed_ack socket option.
[   51.026807][ T6022] Use struct sctp_sack_info instead
[   51.162823][ T5238] Bluetooth: hci0: command tx timeout
[   51.252811][ T5238] Bluetooth: hci1: command tx timeout
[   51.322664][ T5238] Bluetooth: hci2: command tx timeout
[   51.658844][ T6037] netlink: 'syz.0.38': attribute type 21 has an invalid length.
[   51.661335][ T6037] netlink: 128 bytes leftover after parsing attributes in process `syz.0.38'.
[   51.664327][ T6037] netlink: 'syz.0.38': attribute type 5 has an invalid length.
[   51.666804][ T6037] netlink: 3 bytes leftover after parsing attributes in process `syz.0.38'.
[   52.314220][ T6063] macvtap0: refused to change device tx_queue_len
[   52.364530][ T6068] netlink: 'syz.0.48': attribute type 10 has an invalid length.
[   52.367258][ T6068] netlink: 2 bytes leftover after parsing attributes in process `syz.0.48'.
[   52.369986][ T6068] bond0: entered promiscuous mode
[   52.371623][ T6068] bond_slave_0: entered promiscuous mode
[   52.375815][ T6068] bond_slave_1: entered promiscuous mode
[   52.378377][ T6068] bridge0: port 3(bond0) entered blocking state
[   52.385360][ T6068] bridge0: port 3(bond0) entered disabled state
[   52.389704][ T6068] bond0: entered allmulticast mode
[   52.391340][ T6068] bond_slave_0: entered allmulticast mode
[   52.394953][ T6068] bond_slave_1: entered allmulticast mode
[   52.398629][ T6068] bridge0: port 3(bond0) entered blocking state
[   52.401086][ T6068] bridge0: port 3(bond0) entered forwarding state
[   52.449517][ T6073] Driver unsupported XDP return value 0 on prog  (id 29) dev N/A, expect packet loss!
[   52.484053][ T6074] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   52.702879][ T6081] sit0: entered allmulticast mode
[   53.242640][ T5238] Bluetooth: hci0: command tx timeout
[   53.297408][   T10] cfg80211: failed to load regulatory.db
[   53.322919][ T5238] Bluetooth: hci1: command tx timeout
[   53.404227][ T5238] Bluetooth: hci2: command tx timeout
[   53.419541][ T6116] veth1_macvtap: left promiscuous mode
[   53.421305][ T6116] macsec0: entered promiscuous mode
[   53.528150][ T6123] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   53.540003][ T6123] batman_adv: batadv0: Removing interface: batadv_slave_0
[   53.761639][ T6123] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   53.766990][ T6123] batman_adv: batadv0: Removing interface: batadv_slave_1
[   54.409594][ T6138] tun0: tun_chr_ioctl cmd 1074025677
[   54.411420][ T6138] tun0: linktype set to 270
[   54.447044][ T6144] nft_compat: unsupported protocol 5
[   54.451860][ T6146] nft_compat: unsupported protocol 5
[   54.674619][ T6162] Zero length message leads to an empty skb
[   54.750611][ T6169] __nla_validate_parse: 4 callbacks suppressed
[   54.750623][ T6169] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.77'.
[   55.322750][ T5238] Bluetooth: hci0: command tx timeout
[   55.405572][ T5238] Bluetooth: hci1: command tx timeout
[   55.492765][ T5238] Bluetooth: hci2: command tx timeout
[   55.996720][ T6187] netlink: 'syz.0.84': attribute type 10 has an invalid length.
[   55.999184][ T6187] netlink: 55 bytes leftover after parsing attributes in process `syz.0.84'.
[   56.060544][ T6191] syzkaller0: entered promiscuous mode
[   56.062248][ T6191] syzkaller0: entered allmulticast mode
[   56.151039][ T6197] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.89'.
[   56.159456][ T6197] netlink: 6264 bytes leftover after parsing attributes in process `syz.1.89'.
[   56.162331][ T6197] netlink: 64 bytes leftover after parsing attributes in process `syz.1.89'.
[   56.503833][ T6222] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.99'.
[   56.511114][ T6222] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.99'.
[   56.516662][ T6221] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.99'.
[   56.591459][ T6227] warning: `syz.0.101' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   57.017170][ T6247] netlink: 'syz.0.107': attribute type 6 has an invalid length.
[   57.019528][ T6247] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.107'.
[   57.034154][ T6247] netlink: 'syz.0.107': attribute type 21 has an invalid length.
[   57.036473][ T6247] netlink: 168 bytes leftover after parsing attributes in process `syz.0.107'.
[   58.149633][ T6268] netlink: 'syz.2.115': attribute type 10 has an invalid length.
[   58.169458][ T6268] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[   58.175785][ T6268] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   58.193096][ T6268] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[   58.463610][ T6268] syz.2.115 (6268) used greatest stack depth: 19944 bytes left
[   58.521615][ T6289] netlink: 'syz.2.120': attribute type 27 has an invalid length.
[   58.610690][ T6294] syzkaller1: tun_chr_ioctl cmd 1074025677
[   58.618367][ T6294] syzkaller1: linktype set to 804
[   59.623995][ T6320] netlink: 'syz.1.131': attribute type 21 has an invalid length.
[   60.358040][ T6385] TCP: TCP_TX_DELAY enabled
[   61.308332][ T6410] __nla_validate_parse: 4 callbacks suppressed
[   61.308387][ T6410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.158'.
[   61.367287][ T6413] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[   62.696127][ T6451] netlink: 'syz.2.171': attribute type 21 has an invalid length.
[   62.782776][ T6460] sctp: [Deprecated]: syz.0.172 (pid 6460) Use of struct sctp_assoc_value in delayed_ack socket option.
[   62.782776][ T6460] Use struct sctp_sack_info instead
[   62.828092][ T6464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.176'.
[   62.862229][ T6466] netlink: 60 bytes leftover after parsing attributes in process `syz.2.177'.
[   62.955165][ T6473] netlink: 'syz.1.179': attribute type 13 has an invalid length.
[   62.959160][ T6473] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.179'.
[   63.138957][ T6485] netlink: 'syz.1.183': attribute type 10 has an invalid length.
[   63.195553][ T6485] team0 (unregistering): Port device team_slave_0 removed
[   63.200990][ T6485] team0 (unregistering): Port device team_slave_1 removed
[   63.320135][ T6494] netlink: 'syz.2.187': attribute type 29 has an invalid length.
[   63.326595][ T6494] netlink: 'syz.2.187': attribute type 29 has an invalid length.
[   63.329975][ T6494] netlink: 'syz.2.187': attribute type 29 has an invalid length.
[   63.334006][ T6494] netlink: 'syz.2.187': attribute type 29 has an invalid length.
[   63.439827][ T6497] mac80211_hwsim hwsim6 O3c: renamed from wlan1 (while UP)
[   64.504442][ T6534] netlink: 830 bytes leftover after parsing attributes in process `syz.0.197'.
[   65.331274][ T6573] netlink: 48 bytes leftover after parsing attributes in process `syz.2.209'.
[   65.340368][ T6573] netlink: 10 bytes leftover after parsing attributes in process `syz.2.209'.
[   65.513030][ T6597] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.516071][ T6597] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.955572][ T6637] netlink: 'syz.0.226': attribute type 10 has an invalid length.
[   65.972234][ T6637] netlink: 2 bytes leftover after parsing attributes in process `syz.0.226'.
[   66.080337][ T6644] netlink: 24 bytes leftover after parsing attributes in process `syz.1.225'.
[   66.335308][ T6661] hsr0: entered promiscuous mode
[   66.400661][    C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   67.319492][ T6699] netlink: 'syz.0.249': attribute type 11 has an invalid length.
[   67.327981][ T6699] netlink: 173820 bytes leftover after parsing attributes in process `syz.0.249'.
[   67.355936][ T6698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   67.813612][ T6710] netlink: 'syz.0.252': attribute type 1 has an invalid length.
[   67.816010][ T6710] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.252'.
[   69.756306][ T6723] @: renamed from bond_slave_0 (while UP)
[   69.770696][ T6724] netlink: 22 bytes leftover after parsing attributes in process `syz.0.257'.
[   69.822065][ T6723] netlink: 'syz.2.255': attribute type 21 has an invalid length.
[   69.824667][ T6723] netlink: 128 bytes leftover after parsing attributes in process `syz.2.255'.
[   69.827736][ T6723] netlink: 'syz.2.255': attribute type 4 has an invalid length.
[   70.847669][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   70.849931][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.720905][ T6760] netlink: 1372 bytes leftover after parsing attributes in process `syz.2.269'.
[   71.724761][ T6760] netlink: 33376 bytes leftover after parsing attributes in process `syz.2.269'.
[   71.731543][ T6760] netlink: 60 bytes leftover after parsing attributes in process `syz.2.269'.
[   71.772063][ T6762] netlink: 'syz.0.270': attribute type 1 has an invalid length.
[   71.774610][ T6762] netlink: 176 bytes leftover after parsing attributes in process `syz.0.270'.
[   71.800184][ T6760] netlink: 60 bytes leftover after parsing attributes in process `syz.2.269'.
[   71.831215][ T6762] netlink: 36 bytes leftover after parsing attributes in process `syz.0.270'.
[   72.971092][ T6795] : renamed from veth0_to_bond (while UP)
[   73.016300][ T6799] __nla_validate_parse: 1 callbacks suppressed
[   73.016312][ T6799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.283'.
[   73.026922][ T6799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.283'.
[   74.217955][ T6838] netlink: 'syz.1.296': attribute type 10 has an invalid length.
[   74.247822][ T6845] netlink: 'syz.2.298': attribute type 10 has an invalid length.
[   74.250206][ T6845] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.298'.
[   74.597196][ T6867] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   75.119695][ T6879] veth0_vlan: entered allmulticast mode
[   75.291060][ T6884] veth0_vlan: left promiscuous mode
[   75.294686][ T6884] veth0_vlan: entered promiscuous mode
[   75.304930][ T6884] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   75.307389][ T6884] IPv6: NLM_F_CREATE should be set when creating new route
[   75.309679][ T6884] IPv6: NLM_F_CREATE should be set when creating new route
[   75.311906][ T6884] IPv6: NLM_F_CREATE should be set when creating new route
[   75.613023][ T6892] syz.1.310 (6892) used greatest stack depth: 19880 bytes left
[   75.707215][ T6896] netlink: 9400 bytes leftover after parsing attributes in process `syz.1.311'.
[   75.710942][ T6896] netlink: 100 bytes leftover after parsing attributes in process `syz.1.311'.
[   76.033594][ T6900] netlink: 'syz.0.312': attribute type 13 has an invalid length.
[   76.037277][ T6900] netlink: 160 bytes leftover after parsing attributes in process `syz.0.312'.
[   76.044702][ T6900] erspan0: refused to change device tx_queue_len
[   76.047053][ T6900] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[   76.116007][ T6907] netlink: 'syz.2.314': attribute type 10 has an invalid length.
[   76.140282][ T6907] veth0_vlan: left promiscuous mode
[   76.147170][ T6907] veth0_vlan: entered promiscuous mode
[   76.155309][ T6907] team0: Device veth0_vlan failed to register rx_handler
[   77.323340][   T51] wlan1: Trigger new scan to find an IBSS to join
[   79.048836][ T6907] syz.2.314 (6907) used greatest stack depth: 19400 bytes left
[   79.661568][ T6931] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   79.670177][ T6932] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   79.675561][ T6931] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   79.870995][ T5238] Bluetooth: hci1: adv larger than maximum supported
[   80.575061][ T6970] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.333'.
[   80.580495][ T6970] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.333'.
[   80.777769][ T6992] netlink: 209588 bytes leftover after parsing attributes in process `syz.2.339'.
[   81.163834][ T7004] netlink: 'syz.1.346': attribute type 21 has an invalid length.
[   81.168974][ T7004] netlink: 'syz.1.346': attribute type 21 has an invalid length.
[   81.278327][ T7010] netlink: 32 bytes leftover after parsing attributes in process `syz.1.348'.
[   81.323004][   T68] wlan1: Trigger new scan to find an IBSS to join
[   81.868707][ T7028] netlink: 'syz.0.353': attribute type 10 has an invalid length.
[   81.872384][ T7028] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.353'.
[   82.340596][   T35] wlan1: Creating new IBSS network, BSSID 4e:2c:f2:f2:4d:7c
[   82.421972][ T7056] netlink: 'syz.2.359': attribute type 12 has an invalid length.
[   82.427870][ T7056] netlink: 132 bytes leftover after parsing attributes in process `syz.2.359'.
[   82.431028][ T7057] netlink: 132 bytes leftover after parsing attributes in process `syz.2.359'.
[   82.590262][ T7072] netlink: 'syz.1.364': attribute type 39 has an invalid length.
[   82.894269][ T7087] netlink: 'syz.0.367': attribute type 29 has an invalid length.
[   82.897475][ T7087] netlink: 'syz.0.367': attribute type 29 has an invalid length.
[   83.367973][ T7102] netlink: 188 bytes leftover after parsing attributes in process `syz.0.373'.
[   83.391614][ T7101] delete_channel: no stack
[   83.399329][ T7110] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.375'.
[   83.597861][ T7119] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.376'.
[   83.720901][ T7122] @: renamed from bond_slave_0 (while UP)
[   83.864315][ T7126] netlink: 'syz.0.380': attribute type 39 has an invalid length.
[   86.002395][ T7217] netlink: 'syz.2.403': attribute type 19 has an invalid length.
[   86.005332][ T7217] netlink: 40 bytes leftover after parsing attributes in process `syz.2.403'.
[   86.236739][ T7227] netlink: 'syz.0.407': attribute type 29 has an invalid length.
[   86.282296][ T7227] netlink: 'syz.0.407': attribute type 29 has an invalid length.
[   86.285753][ T7227] netlink: 'syz.0.407': attribute type 29 has an invalid length.
[   87.189398][ T7229] netlink: 'syz.0.408': attribute type 12 has an invalid length.
[   87.191985][ T7229] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.408'.
[   87.718372][ T7253] netlink: 'syz.2.415': attribute type 49 has an invalid length.
[   87.774675][ T7256] netlink: 48 bytes leftover after parsing attributes in process `syz.0.416'.
[   87.788267][ T7261] netlink: 152 bytes leftover after parsing attributes in process `syz.1.418'.
[   89.083215][ T7324] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.432'.
[   89.086519][ T7324] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   89.102129][ T7324] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   89.935332][ T7351] netlink: 'syz.0.442': attribute type 10 has an invalid length.
[   90.066687][ T7351] team0: Port device geneve1 added
[   90.401215][ T7363] netlink: 'syz.2.444': attribute type 10 has an invalid length.
[   90.505958][ T7363] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.529772][ T7363] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   90.587156][ T7362] bond0: entered promiscuous mode
[   90.591246][ T7362] @: entered promiscuous mode
[   90.597214][ T7362] bond_slave_1: entered promiscuous mode
[   90.601853][ T7362] batadv0: entered promiscuous mode
[   90.958494][ T7381] netlink: 26 bytes leftover after parsing attributes in process `syz.1.450'.
[   91.224655][ T7397] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.455'.
[   91.366614][ T7401] netlink: 'syz.1.456': attribute type 1 has an invalid length.
[   91.608279][ T7414] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.461'.
[   91.611298][ T7413] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.461'.
[   91.614779][ T7414] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.461'.
[   91.645450][ T7416] netlink: 14 bytes leftover after parsing attributes in process `syz.1.462'.
[   91.659234][ T7416] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.462'.
[   92.530370][ T7448] netlink: 'syz.0.470': attribute type 17 has an invalid length.
[   92.538391][ T7448] netlink: 'syz.0.470': attribute type 16 has an invalid length.
[   92.542777][ T7448] netlink: 152 bytes leftover after parsing attributes in process `syz.0.470'.
[   92.606152][ T7453] netlink: 28 bytes leftover after parsing attributes in process `syz.2.471'.
[   93.965299][ T7490] netlink: 56 bytes leftover after parsing attributes in process `syz.0.482'.
[   93.987035][ T7487] netlink: 16 bytes leftover after parsing attributes in process `syz.1.481'.
[   94.255197][ T7504] openvswitch: netlink: Flow actions attr not present in new flow.
[   94.698412][ T7504] syzkaller0: entered promiscuous mode
[   94.714627][ T7522] netlink: 'syz.1.491': attribute type 29 has an invalid length.
[   94.725719][ T7522] netlink: 'syz.1.491': attribute type 29 has an invalid length.
[   94.729102][ T7522] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[   96.437164][ T5857] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[   96.487131][ T5857] CPU: 1 UID: 0 PID: 5857 Comm: syz-executor Not tainted 6.16.0-syzkaller-11113-gf3af62b6cee8-dirty #0 PREEMPT(full) 
[   96.487146][ T5857] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   96.487152][ T5857] Call Trace:
[   96.487156][ T5857]  <TASK>
[   96.487160][ T5857]  dump_stack_lvl+0x189/0x250
[   96.487177][ T5857]  ? __pfx_dump_stack_lvl+0x10/0x10
[   96.487186][ T5857]  ? __pfx__printk+0x10/0x10
[   96.487200][ T5857]  ? oom_kill_process+0xd5/0x920
[   96.487240][ T5857]  dump_header+0xd3/0x480
[   96.487255][ T5857]  oom_kill_process+0x387/0x920
[   96.487269][ T5857]  out_of_memory+0xf09/0x12a0
[   96.487283][ T5857]  ? perf_trace_lock+0xec/0x3b0
[   96.487294][ T5857]  ? __pfx_out_of_memory+0x10/0x10
[   96.487304][ T5857]  ? mem_cgroup_iter+0x3b/0x460
[   96.487318][ T5857]  mem_cgroup_out_of_memory+0x145/0x240
[   96.487326][ T5857]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[   96.487340][ T5857]  ? _raw_spin_unlock+0x28/0x50
[   96.487351][ T5857]  ? memcg1_oom_prepare+0x37f/0x450
[   96.487362][ T5857]  try_charge_memcg+0xdff/0x1290
[   96.487381][ T5857]  ? __pfx_try_charge_memcg+0x10/0x10
[   96.487392][ T5857]  ? get_mem_cgroup_from_mm+0x38/0x2a0
[   96.487403][ T5857]  ? get_mem_cgroup_from_mm+0x38/0x2a0
[   96.487413][ T5857]  charge_memcg+0x9f/0x180
[   96.487424][ T5857]  __mem_cgroup_charge+0x25/0x80
[   96.487434][ T5857]  filemap_add_folio+0x49/0x270
[   96.487448][ T5857]  __filemap_get_folio+0x4f6/0xaf0
[   96.487465][ T5857]  filemap_fault+0x89d/0x1200
[   96.487479][ T5857]  ? __pfx_filemap_fault+0x10/0x10
[   96.487488][ T5857]  ? __pfx_filemap_map_pages+0x10/0x10
[   96.487496][ T5857]  ? __handle_mm_fault+0x27b7/0x5440
[   96.487511][ T5857]  __do_fault+0x138/0x390
[   96.487524][ T5857]  __handle_mm_fault+0x3611/0x5440
[   96.487542][ T5857]  ? __pfx___handle_mm_fault+0x10/0x10
[   96.487560][ T5857]  ? irqentry_exit+0x74/0x90
[   96.487573][ T5857]  handle_mm_fault+0x40a/0x8e0
[   96.487588][ T5857]  do_user_addr_fault+0xa81/0x1390
[   96.487605][ T5857]  ? rcu_is_watching+0x15/0xb0
[   96.487614][ T5857]  ? trace_page_fault_user+0x84/0x1e0
[   96.487626][ T5857]  exc_page_fault+0x76/0xf0
[   96.487635][ T5857]  asm_exc_page_fault+0x26/0x30
[   96.487643][ T5857] RIP: 0033:0x7fa6b7065c24
[   96.487653][ T5857] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 78 fb e7 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 89 fa e7 00 48 01 d1
[   96.487659][ T5857] RSP: 002b:00007fff22094940 EFLAGS: 00010206
[   96.487668][ T5857] RAX: 0000001b32424000 RBX: 0000000000000230 RCX: 0000000000017700
[   96.487673][ T5857] RDX: 0000000002ef04c5 RSI: 00007fff220949d0 RDI: 0000000000000001
[   96.487678][ T5857] RBP: 00007fff2209497c R08: 000000000b30e8a3 R09: 7fffffffffffffff
[   96.487683][ T5857] R10: 3fffffffffffffff R11: 0000000000000293 R12: 0000000000001388
[   96.487687][ T5857] R13: 00000000000927c0 R14: 00000000000177a4 R15: 00007fff220949d0
[   96.487702][ T5857]  </TASK>
[   96.487706][ T5857] memory: usage 307200kB, limit 307200kB, failcnt 23147
[   96.657654][ T5857] memory+swap: usage 431888kB, limit 9007199254740988kB, failcnt 0
[   96.660363][ T5857] kmem: usage 5036kB, limit 9007199254740988kB, failcnt 0
[   96.662677][ T5857] Memory cgroup stats for /syz2:
[   96.663103][ T5857] cache 309121024
[   96.666096][ T5857] rss 212992
[   96.667128][ T5857] rss_huge 0
[   96.668155][ T5857] shmem 309108736
[   96.669371][ T5857] mapped_file 0
[   96.670593][ T5857] dirty 0
[   96.671537][ T5857] writeback 0
[   96.673197][ T5857] workingset_refault_anon 20
[   96.674688][ T5857] workingset_refault_file 675
[   96.679524][ T5857] swap 127680512
[   96.680768][ T5857] swapcached 94208
[   96.683345][ T5857] pgpgin 115829
[   96.684485][ T5857] pgpgout 40288
[   96.685578][ T5857] pgfault 26876
[   96.686715][ T5857] pgmajfault 72
[   96.687808][ T5857] inactive_anon 153681920
[   96.689144][ T5857] active_anon 155721728
[   96.690481][ T5857] inactive_file 12288
[   96.691832][ T5857] active_file 0
[   96.693603][ T5857] unevictable 0
[   96.694769][ T5857] hierarchical_memory_limit 314572800
[   96.696474][ T5857] hierarchical_memsw_limit 9223372036854771712
[   96.698415][ T5857] total_cache 309121024
[   96.699715][ T5857] total_rss 212992
[   96.700883][ T5857] total_rss_huge 0
[   96.702232][ T5857] total_shmem 309108736
[   96.704161][ T5857] total_mapped_file 0
[   96.705457][ T5857] total_dirty 0
[   96.706602][ T5857] total_writeback 0
[   96.707806][ T5857] total_workingset_refault_anon 20
[   96.709441][ T5857] total_workingset_refault_file 675
[   96.711052][ T5857] total_swap 127680512
[   96.713634][ T5857] total_swapcached 94208
[   96.714981][ T5857] total_pgpgin 115829
[   96.716294][ T5857] total_pgpgout 40288
[   96.717541][ T5857] total_pgfault 26876
[   96.718783][ T5857] total_pgmajfault 72
[   96.720067][ T5857] total_inactive_anon 153681920
[   96.721549][ T5857] total_active_anon 155721728
[   96.724003][ T5857] total_inactive_file 12288
[   96.725442][ T5857] total_active_file 0
[   96.726730][ T5857] total_unevictable 0
[   96.727974][ T5857] anon_cost 0
[   96.729026][ T5857] file_cost 0
[   96.730122][ T5857] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.423,pid=7290,uid=0
[   96.738179][ T5857] Memory cgroup out of memory: Killed process 7290 (syz.2.423) total-vm:98252kB, anon-rss:1084kB, file-rss:53712kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:1000
[   97.140512][ T7556] netlink: 'syz.0.502': attribute type 7 has an invalid length.
[   98.378382][ T7290] syz.2.423 (7290) used greatest stack depth: 16568 bytes left
[   98.507779][ T7593] __nla_validate_parse: 3 callbacks suppressed
[   98.507791][ T7593] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.513'.
[   98.581226][ T7300] syz.2.423 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[   98.688596][ T7597] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.515'.
[   98.719316][ T7300] CPU: 0 UID: 0 PID: 7300 Comm: syz.2.423 Not tainted 6.16.0-syzkaller-11113-gf3af62b6cee8-dirty #0 PREEMPT(full) 
[   98.719335][ T7300] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   98.719341][ T7300] Call Trace:
[   98.719345][ T7300]  <TASK>
[   98.719350][ T7300]  dump_stack_lvl+0x189/0x250
[   98.719368][ T7300]  ? __pfx_dump_stack_lvl+0x10/0x10
[   98.719377][ T7300]  ? __pfx__printk+0x10/0x10
[   98.719396][ T7300]  dump_header+0xd3/0x480
[   98.719409][ T7300]  oom_kill_process+0x387/0x920
[   98.719425][ T7300]  out_of_memory+0xf09/0x12a0
[   98.719442][ T7300]  ? __pfx_out_of_memory+0x10/0x10
[   98.719458][ T7300]  mem_cgroup_out_of_memory+0x145/0x240
[   98.719467][ T7300]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[   98.719480][ T7300]  ? _raw_spin_unlock+0x28/0x50
[   98.719492][ T7300]  ? memcg1_oom_prepare+0x37f/0x450
[   98.719503][ T7300]  try_charge_memcg+0xdff/0x1290
[   98.719522][ T7300]  ? __pfx_try_charge_memcg+0x10/0x10
[   98.719532][ T7300]  ? get_mem_cgroup_from_mm+0x38/0x2a0
[   98.719544][ T7300]  ? get_mem_cgroup_from_mm+0x38/0x2a0
[   98.719553][ T7300]  charge_memcg+0x9f/0x180
[   98.719564][ T7300]  __mem_cgroup_charge+0x25/0x80
[   98.719573][ T7300]  shmem_alloc_and_add_folio+0x7c1/0xf60
[   98.719587][ T7300]  ? filemap_get_entry+0xad/0x2f0
[   98.719599][ T7300]  ? filemap_get_entry+0xad/0x2f0
[   98.719610][ T7300]  ? filemap_get_entry+0x28f/0x2f0
[   98.719622][ T7300]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[   98.719634][ T7300]  ? shmem_allowable_huge_orders+0x1f8/0x420
[   98.719643][ T7300]  ? seqcount_lockdep_reader_access+0x175/0x1c0
[   98.719656][ T7300]  shmem_get_folio_gfp+0x59d/0x1660
[   98.719674][ T7300]  shmem_write_begin+0xf7/0x2b0
[   98.719687][ T7300]  generic_perform_write+0x2c5/0x900
[   98.719702][ T7300]  ? __pfx_generic_perform_write+0x10/0x10
[   98.719712][ T7300]  ? mnt_put_write_access_file+0xc0/0x100
[   98.719722][ T7300]  ? file_update_time+0x416/0x490
[   98.719732][ T7300]  shmem_file_write_iter+0xf8/0x120
[   98.719741][ T7300]  ? __pfx_shmem_file_write_iter+0x10/0x10
[   98.719752][ T7300]  __kernel_write_iter+0x393/0x860
[   98.719763][ T7300]  ? __pfx_shmem_file_write_iter+0x10/0x10
[   98.719774][ T7300]  ? __pfx___kernel_write_iter+0x10/0x10
[   98.719782][ T7300]  ? __up_read+0x280/0x680
[   98.719794][ T7300]  ? __asan_memset+0x22/0x50
[   98.719802][ T7300]  ? iov_iter_bvec+0xb8/0x180
[   98.719814][ T7300]  dump_user_range+0x8a0/0xc90
[   98.719832][ T7300]  ? __pfx_dump_user_range+0x10/0x10
[   98.719841][ T7300]  ? elf_coredump_extra_notes_write+0x127/0x4b0
[   98.719853][ T7300]  ? __pfx_elf_coredump_extra_notes_write+0x10/0x10
[   98.719861][ T7300]  ? __kasan_kmalloc+0x93/0xb0
[   98.719873][ T7300]  ? dump_emit+0xa6/0xe0
[   98.719882][ T7300]  ? elf_core_dump+0x2cff/0x3990
[   98.719895][ T7300]  elf_core_dump+0x337b/0x3990
[   98.719914][ T7300]  ? __pfx_elf_core_dump+0x10/0x10
[   98.719926][ T7300]  ? kasan_save_track+0x4f/0x80
[   98.719934][ T7300]  ? kasan_save_track+0x3e/0x80
[   98.719942][ T7300]  ? __kasan_kmalloc+0x93/0xb0
[   98.719950][ T7300]  ? __kvmalloc_node_noprof+0x30d/0x5f0
[   98.719961][ T7300]  ? coredump_write+0x340/0x1900
[   98.719970][ T7300]  ? vfs_coredump+0x1a4b/0x2ab0
[   98.719978][ T7300]  ? get_signal+0x1109/0x1340
[   98.719991][ T7300]  ? arch_do_signal_or_restart+0x9a/0x750
[   98.720029][ T7300]  ? irqentry_exit_to_user_mode+0x81/0x120
[   98.720037][ T7300]  ? exc_page_fault+0x9f/0xf0
[   98.720043][ T7300]  ? asm_exc_page_fault+0x26/0x30
[   98.720074][ T7300]  ? 0xffffffffff600000
[   98.720089][ T7300]  ? up_write+0x1c4/0x420
[   98.720099][ T7300]  coredump_write+0x1169/0x1900
[   98.720119][ T7300]  ? __pfx_coredump_write+0x10/0x10
[   98.720137][ T7300]  ? unshare_files+0xa9/0x140
[   98.720149][ T7300]  vfs_coredump+0x1a4b/0x2ab0
[   98.720169][ T7300]  ? __pfx_vfs_coredump+0x10/0x10
[   98.720178][ T7300]  ? perf_trace_lock_acquire+0xf5/0x410
[   98.720189][ T7300]  ? perf_trace_lock_acquire+0xf5/0x410
[   98.720198][ T7300]  ? perf_trace_lock_acquire+0xf5/0x410
[   98.720209][ T7300]  ? __lock_acquire+0xab9/0xd20
[   98.720223][ T7300]  ? is_bpf_text_address+0x26/0x2b0
[   98.720240][ T7300]  ? is_bpf_text_address+0x26/0x2b0
[   98.720253][ T7300]  ? is_bpf_text_address+0x292/0x2b0
[   98.720262][ T7300]  ? is_bpf_text_address+0x26/0x2b0
[   98.720274][ T7300]  ? kernel_text_address+0xa5/0xe0
[   98.720285][ T7300]  ? __kernel_text_address+0xd/0x40
[   98.720294][ T7300]  ? unwind_get_return_address+0x4d/0x90
[   98.720303][ T7300]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   98.720313][ T7300]  ? arch_stack_walk+0xfc/0x150
[   98.720331][ T7300]  ? stack_depot_save_flags+0x40/0x900
[   98.720348][ T7300]  ? kasan_save_track+0x4f/0x80
[   98.720355][ T7300]  ? kasan_save_track+0x3e/0x80
[   98.720363][ T7300]  ? kasan_save_free_info+0x46/0x50
[   98.720369][ T7300]  ? __kasan_slab_free+0x62/0x70
[   98.720377][ T7300]  ? kmem_cache_free+0x18f/0x400
[   98.720386][ T7300]  ? get_signal+0xa4c/0x1340
[   98.720395][ T7300]  ? arch_do_signal_or_restart+0x9a/0x750
[   98.720405][ T7300]  ? irqentry_exit_to_user_mode+0x81/0x120
[   98.720412][ T7300]  ? exc_page_fault+0x9f/0xf0
[   98.720417][ T7300]  ? asm_exc_page_fault+0x26/0x30
[   98.720449][ T7300]  ? _raw_spin_unlock_irq+0x23/0x50
[   98.720460][ T7300]  ? lockdep_hardirqs_on+0x9c/0x150
[   98.720468][ T7300]  get_signal+0x1109/0x1340
[   98.720489][ T7300]  arch_do_signal_or_restart+0x9a/0x750
[   98.720502][ T7300]  ? perf_trace_preemptirq_template+0x280/0x340
[   98.720513][ T7300]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[   98.720531][ T7300]  ? local_irq_enable_exit_to_user+0x5/0x10
[   98.720545][ T7300]  irqentry_exit_to_user_mode+0x81/0x120
[   98.720554][ T7300]  exc_page_fault+0x9f/0xf0
[   98.720562][ T7300]  asm_exc_page_fault+0x26/0x30
[   98.720570][ T7300] RIP: 0033:0x7fa6b704f927
[   98.720579][ T7300] Code: 88 15 d2 5d e9 00 88 05 cf 5d e9 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8
[   98.720586][ T7300] RSP: 002b:00007fa6b7f4d0e0 EFLAGS: 00010202
[   98.720595][ T7300] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fa6b718ebe9
[   98.720600][ T7300] RDX: 00007fa6b7f4d100 RSI: 00007fa6b7f4d230 RDI: 000000000000000b
[   98.720605][ T7300] RBP: 00007fa6b7211e19 R08: 0000000000000000 R09: 0000000000000000
[   98.720610][ T7300] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[   98.720614][ T7300] R13: 00007fa6b73b6128 R14: 00007fa6b73b6090 R15: 00007fff220945b8
[   98.720628][ T7300]  </TASK>
[   98.720632][ T7300] memory: usage 307200kB, limit 307200kB, failcnt 27230
[   98.917587][ T7300] memory+swap: usage 432100kB, limit 9007199254740988kB, failcnt 0
[   98.920056][ T7300] kmem: usage 4956kB, limit 9007199254740988kB, failcnt 0
[   98.922250][ T7300] Memory cgroup stats for /syz2:
[   98.922362][ T7300] cache 309248000
[   98.925172][ T7300] rss 176128
[   98.926190][ T7300] rss_huge 0
[   98.927216][ T7300] shmem 309235712
[   98.928359][ T7300] mapped_file 0
[   98.929425][ T7300] dirty 0
[   98.930332][ T7300] writeback 0
[   98.931377][ T7300] workingset_refault_anon 29
[   98.933137][ T7300] workingset_refault_file 2996
[   98.934651][ T7300] swap 127897600
[   98.936812][ T7300] swapcached 98304
[   98.937959][ T7300] pgpgin 128412
[   98.939002][ T7300] pgpgout 52851
[   98.940069][ T7300] pgfault 27743
[   98.941137][ T7300] pgmajfault 203
[   98.942217][ T7300] inactive_anon 235175936
[   98.943660][ T7300] active_anon 74309632
[   98.944858][ T7300] inactive_file 12288
[   98.946034][ T7300] active_file 0
[   98.947107][ T7300] unevictable 0
[   98.948178][ T7300] hierarchical_memory_limit 314572800
[   98.949803][ T7300] hierarchical_memsw_limit 9223372036854771712
[   98.951715][ T7300] total_cache 309248000
[   98.953164][ T7300] total_rss 176128
[   98.954338][ T7300] total_rss_huge 0
[   98.955508][ T7300] total_shmem 309235712
[   98.956796][ T7300] total_mapped_file 0
[   98.958035][ T7300] total_dirty 0
[   98.959143][ T7300] total_writeback 0
[   98.960330][ T7300] total_workingset_refault_anon 29
[   98.961851][ T7300] total_workingset_refault_file 2996
[   98.963700][ T7300] total_swap 127897600
[   98.965020][ T7300] total_swapcached 98304
[   98.966323][ T7300] total_pgpgin 128412
[   98.967560][ T7300] total_pgpgout 52851
[   98.968804][ T7300] total_pgfault 27743
[   98.970052][ T7300] total_pgmajfault 203
[   98.971340][ T7300] total_inactive_anon 235175936
[   98.972996][ T7300] total_active_anon 74309632
[   98.974466][ T7300] total_inactive_file 12288
[   98.975907][ T7300] total_active_file 0
[   98.977153][ T7300] total_unevictable 0
[   98.978359][ T7300] anon_cost 0
[   98.979386][ T7300] file_cost 0
[   98.980446][ T7300] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.423,pid=7281,uid=0
[   98.985233][ T7300] Memory cgroup out of memory: Killed process 7281 (syz.2.423) total-vm:98252kB, anon-rss:956kB, file-rss:53844kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000
[   99.189342][ T7300] syz.2.423 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[   99.193833][ T7300] CPU: 1 UID: 0 PID: 7300 Comm: syz.2.423 Not tainted 6.16.0-syzkaller-11113-gf3af62b6cee8-dirty #0 PREEMPT(full) 
[   99.193845][ T7300] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   99.193851][ T7300] Call Trace:
[   99.193855][ T7300]  <TASK>
[   99.193859][ T7300]  dump_stack_lvl+0x189/0x250
[   99.193876][ T7300]  ? __pfx_dump_stack_lvl+0x10/0x10
[   99.193885][ T7300]  ? __pfx__printk+0x10/0x10
[   99.193904][ T7300]  dump_header+0xd3/0x480
[   99.193917][ T7300]  oom_kill_process+0x387/0x920
[   99.193934][ T7300]  out_of_memory+0xf09/0x12a0
[   99.193975][ T7300]  ? __pfx_out_of_memory+0x10/0x10
[   99.193993][ T7300]  mem_cgroup_out_of_memory+0x145/0x240
[   99.194002][ T7300]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[   99.194014][ T7300]  ? _raw_spin_unlock+0x28/0x50
[   99.194028][ T7300]  ? memcg1_oom_prepare+0x37f/0x450
[   99.194039][ T7300]  try_charge_memcg+0xdff/0x1290
[   99.194058][ T7300]  ? __pfx_try_charge_memcg+0x10/0x10
[   99.194077][ T7300]  charge_memcg+0x9f/0x180
[   99.194086][ T7300]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[   99.194096][ T7300]  mem_cgroup_swapin_charge_folio+0x262/0x390
[   99.194107][ T7300]  __read_swap_cache_async+0x28c/0x510
[   99.194121][ T7300]  swap_cluster_readahead+0x4cf/0x5f0
[   99.194132][ T7300]  ? __pfx_swap_cluster_readahead+0x10/0x10
[   99.194147][ T7300]  ? get_vma_policy+0x27c/0x3c0
[   99.194158][ T7300]  swapin_readahead+0x17d/0xb50
[   99.194166][ T7300]  ? __pfx_filemap_get_entry+0x10/0x10
[   99.194184][ T7300]  ? __pfx_swapin_readahead+0x10/0x10
[   99.194194][ T7300]  ? __filemap_get_folio+0x9a6/0xaf0
[   99.194205][ T7300]  ? swap_cache_get_folio+0xae/0x3b0
[   99.194215][ T7300]  do_swap_page+0x525/0x5ac0
[   99.194227][ T7300]  ? __lock_acquire+0xab9/0xd20
[   99.194251][ T7300]  ? do_swap_page+0x184/0x5ac0
[   99.194259][ T7300]  ? __pfx_do_swap_page+0x10/0x10
[   99.194269][ T7300]  ? __pfx_default_wake_function+0x10/0x10
[   99.194281][ T7300]  ? ___pte_offset_map+0x1cf/0x250
[   99.194292][ T7300]  ? pte_offset_map_rw_nolock+0xea/0x160
[   99.194302][ T7300]  __handle_mm_fault+0xe55/0x5440
[   99.194320][ T7300]  ? __pfx___handle_mm_fault+0x10/0x10
[   99.194336][ T7300]  ? follow_page_pte+0x7ef/0x13e0
[   99.194350][ T7300]  handle_mm_fault+0x40a/0x8e0
[   99.194364][ T7300]  __get_user_pages+0x1699/0x2ce0
[   99.194390][ T7300]  get_dump_page+0x1ac/0x3f0
[   99.194400][ T7300]  ? __pfx_get_dump_page+0x10/0x10
[   99.194409][ T7300]  ? dump_user_range+0x19e/0xc90
[   99.194420][ T7300]  ? down_read_killable+0x1d1/0x350
[   99.194431][ T7300]  dump_user_range+0x1de/0xc90
[   99.194447][ T7300]  ? __pfx_dump_user_range+0x10/0x10
[   99.194456][ T7300]  ? elf_coredump_extra_notes_write+0x127/0x4b0
[   99.194468][ T7300]  ? __pfx_elf_coredump_extra_notes_write+0x10/0x10
[   99.194477][ T7300]  ? __kasan_kmalloc+0x93/0xb0
[   99.194489][ T7300]  ? dump_emit+0xa6/0xe0
[   99.194498][ T7300]  ? elf_core_dump+0x2cff/0x3990
[   99.194511][ T7300]  elf_core_dump+0x337b/0x3990
[   99.194531][ T7300]  ? __pfx_elf_core_dump+0x10/0x10
[   99.194542][ T7300]  ? kasan_save_track+0x4f/0x80
[   99.194550][ T7300]  ? kasan_save_track+0x3e/0x80
[   99.194557][ T7300]  ? __kasan_kmalloc+0x93/0xb0
[   99.194565][ T7300]  ? __kvmalloc_node_noprof+0x30d/0x5f0
[   99.194577][ T7300]  ? coredump_write+0x340/0x1900
[   99.194585][ T7300]  ? vfs_coredump+0x1a4b/0x2ab0
[   99.194593][ T7300]  ? get_signal+0x1109/0x1340
[   99.194604][ T7300]  ? arch_do_signal_or_restart+0x9a/0x750
[   99.194615][ T7300]  ? irqentry_exit_to_user_mode+0x81/0x120
[   99.194622][ T7300]  ? exc_page_fault+0x9f/0xf0
[   99.194628][ T7300]  ? asm_exc_page_fault+0x26/0x30
[   99.194659][ T7300]  ? 0xffffffffff600000
[   99.194670][ T7300]  ? up_write+0x1c4/0x420
[   99.194681][ T7300]  coredump_write+0x1169/0x1900
[   99.194700][ T7300]  ? __pfx_coredump_write+0x10/0x10
[   99.194717][ T7300]  ? unshare_files+0xa9/0x140
[   99.194729][ T7300]  vfs_coredump+0x1a4b/0x2ab0
[   99.194749][ T7300]  ? __pfx_vfs_coredump+0x10/0x10
[   99.194758][ T7300]  ? perf_trace_lock_acquire+0xf5/0x410
[   99.194769][ T7300]  ? perf_trace_lock_acquire+0xf5/0x410
[   99.194777][ T7300]  ? perf_trace_lock_acquire+0xf5/0x410
[   99.194789][ T7300]  ? __lock_acquire+0xab9/0xd20
[   99.194802][ T7300]  ? is_bpf_text_address+0x26/0x2b0
[   99.194820][ T7300]  ? is_bpf_text_address+0x26/0x2b0
[   99.194832][ T7300]  ? is_bpf_text_address+0x292/0x2b0
[   99.194842][ T7300]  ? is_bpf_text_address+0x26/0x2b0
[   99.194853][ T7300]  ? kernel_text_address+0xa5/0xe0
[   99.194865][ T7300]  ? __kernel_text_address+0xd/0x40
[   99.194874][ T7300]  ? unwind_get_return_address+0x4d/0x90
[   99.194884][ T7300]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   99.194893][ T7300]  ? arch_stack_walk+0xfc/0x150
[   99.194912][ T7300]  ? stack_depot_save_flags+0x40/0x900
[   99.194930][ T7300]  ? kasan_save_track+0x4f/0x80
[   99.194937][ T7300]  ? kasan_save_track+0x3e/0x80
[   99.194945][ T7300]  ? kasan_save_free_info+0x46/0x50
[   99.194972][ T7300]  ? __kasan_slab_free+0x62/0x70
[   99.194980][ T7300]  ? kmem_cache_free+0x18f/0x400
[   99.194989][ T7300]  ? get_signal+0xa4c/0x1340
[   99.194999][ T7300]  ? arch_do_signal_or_restart+0x9a/0x750
[   99.195008][ T7300]  ? irqentry_exit_to_user_mode+0x81/0x120
[   99.195036][ T7300]  ? exc_page_fault+0x9f/0xf0
[   99.195042][ T7300]  ? asm_exc_page_fault+0x26/0x30
[   99.195076][ T7300]  ? _raw_spin_unlock_irq+0x23/0x50
[   99.195086][ T7300]  ? lockdep_hardirqs_on+0x9c/0x150
[   99.195094][ T7300]  get_signal+0x1109/0x1340
[   99.195117][ T7300]  arch_do_signal_or_restart+0x9a/0x750
[   99.195130][ T7300]  ? perf_trace_preemptirq_template+0x280/0x340
[   99.195141][ T7300]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[   99.195158][ T7300]  ? local_irq_enable_exit_to_user+0x5/0x10
[   99.195172][ T7300]  irqentry_exit_to_user_mode+0x81/0x120
[   99.195180][ T7300]  exc_page_fault+0x9f/0xf0
[   99.195189][ T7300]  asm_exc_page_fault+0x26/0x30
[   99.195196][ T7300] RIP: 0033:0x7fa6b704f927
[   99.195204][ T7300] Code: 88 15 d2 5d e9 00 88 05 cf 5d e9 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8
[   99.195211][ T7300] RSP: 002b:00007fa6b7f4d0e0 EFLAGS: 00010202
[   99.195219][ T7300] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fa6b718ebe9
[   99.195224][ T7300] RDX: 00007fa6b7f4d100 RSI: 00007fa6b7f4d230 RDI: 000000000000000b
[   99.195229][ T7300] RBP: 00007fa6b7211e19 R08: 0000000000000000 R09: 0000000000000000
[   99.195237][ T7300] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[   99.195241][ T7300] R13: 00007fa6b73b6128 R14: 00007fa6b73b6090 R15: 00007fff220945b8
[   99.195255][ T7300]  </TASK>
[   99.195258][ T7300] memory: usage 307200kB, limit 307200kB, failcnt 27556
[   99.409752][ T7300] memory+swap: usage 431200kB, limit 9007199254740988kB, failcnt 0
[   99.412220][ T7300] kmem: usage 4968kB, limit 9007199254740988kB, failcnt 0
[   99.414978][ T7300] Memory cgroup stats for /syz2:
[   99.415112][ T7300] cache 308576256
[   99.417816][ T7300] rss 188416
[   99.418851][ T7300] rss_huge 0
[   99.419881][ T7300] shmem 308207616
[   99.421049][ T7300] mapped_file 118784
[   99.422273][ T7300] dirty 0
[   99.423316][ T7300] writeback 0
[   99.426810][ T7300] workingset_refault_anon 30
[   99.429320][ T7300] workingset_refault_file 3386
[   99.431051][ T7300] swap 127500288
[   99.432226][ T7300] swapcached 94208
[   99.433483][ T7300] pgpgin 129673
[   99.434604][ T7300] pgpgout 54253
[   99.435705][ T7300] pgfault 27793
[   99.437742][ T7300] pgmajfault 225
[   99.438999][ T7300] inactive_anon 182452224
[   99.440444][ T7300] active_anon 125661184
[   99.441881][ T7300] inactive_file 0
[   99.443143][ T7300] active_file 290816
[   99.444384][ T7300] unevictable 0
[   99.445503][ T7300] hierarchical_memory_limit 314572800
[   99.448162][ T7300] hierarchical_memsw_limit 9223372036854771712
[   99.450156][ T7300] total_cache 308576256
[   99.451500][ T7300] total_rss 188416
[   99.453857][ T7300] total_rss_huge 0
[   99.456142][ T7300] total_shmem 308207616
[   99.457635][ T7300] total_mapped_file 118784
[   99.459073][ T7300] total_dirty 0
[   99.460158][ T7300] total_writeback 0
[   99.461377][ T7300] total_workingset_refault_anon 30
[   99.463137][ T7300] total_workingset_refault_file 3386
[   99.464791][ T7300] total_swap 127500288
[   99.466109][ T7300] total_swapcached 94208
[   99.467475][ T7300] total_pgpgin 129673
[   99.468740][ T7300] total_pgpgout 54253
[   99.470026][ T7300] total_pgfault 27793
[   99.471282][ T7300] total_pgmajfault 225
[   99.472666][ T7300] total_inactive_anon 182452224
[   99.474196][ T7300] total_active_anon 125661184
[   99.475849][ T7300] total_inactive_file 0
[   99.477197][ T7300] total_active_file 290816
[   99.478616][ T7300] total_unevictable 0
[   99.480123][ T7300] anon_cost 0
[   99.481289][ T7300] file_cost 0
[   99.509058][ T7616] can: request_module (can-proto-0) failed.
[   99.532496][ T7300] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.423,pid=7286,uid=0
[   99.552571][ T7300] Memory cgroup out of memory: Killed process 7286 (syz.2.423) total-vm:98252kB, anon-rss:1084kB, file-rss:53712kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000
[   99.699985][ T7626] netlink: 'syz.2.523': attribute type 22 has an invalid length.
[   99.702393][ T7626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.523'.
[   99.992282][ T7634] syz.2.523 uses obsolete (PF_INET,SOCK_PACKET)
[  100.032724][ T7644] bridge0: port 3(bond0) entered disabled state
[  100.034923][ T7644] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.037577][ T7644] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.041007][ T7644] bridge0: entered allmulticast mode
[  100.110014][ T7644] bond0: left allmulticast mode
[  100.111915][ T7644] @: left allmulticast mode
[  100.116352][ T7644] bond_slave_1: left allmulticast mode
[  100.119854][ T7644] bridge0: port 3(bond0) entered disabled state
[  100.128676][ T5238] Bluetooth: hci0: ISO packet for unknown connection handle 35
[  100.181194][ T7655] netlink: 'syz.1.533': attribute type 10 has an invalid length.
[  100.184463][ T7655] netlink: 2 bytes leftover after parsing attributes in process `syz.1.533'.
[  100.234044][ T7656] netlink: 'syz.1.533': attribute type 4 has an invalid length.
[  100.236490][ T7656] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.533'.
[  100.345974][ T7644] bridge_slave_1: left allmulticast mode
[  100.348081][ T7644] bridge_slave_1: left promiscuous mode
[  100.351279][ T7644] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.458524][ T7644] bridge_slave_0: left allmulticast mode
[  100.460446][ T7644] bridge_slave_0: left promiscuous mode
[  100.466539][ T7644] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.535079][ T7281] syz.2.423 (7281) used greatest stack depth: 15288 bytes left
[  100.659526][ T7655] bond0: entered promiscuous mode
[  100.661438][ T7655] bond_slave_0: entered promiscuous mode
[  100.663851][ T7655] bond_slave_1: entered promiscuous mode
[  100.666825][ T7655] bridge0: port 3(bond0) entered blocking state
[  100.669219][ T7655] bridge0: port 3(bond0) entered disabled state
[  100.671906][ T7655] bond0: entered allmulticast mode
[  100.674826][ T7655] bond_slave_0: entered allmulticast mode
[  100.678686][ T7655] bond_slave_1: entered allmulticast mode
[  100.687467][ T7655] bridge0: port 3(bond0) entered blocking state
[  100.689691][ T7655] bridge0: port 3(bond0) entered forwarding state
[  100.734567][ T7298] syz.2.423 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  100.737662][ T7298] CPU: 1 UID: 0 PID: 7298 Comm: syz.2.423 Not tainted 6.16.0-syzkaller-11113-gf3af62b6cee8-dirty #0 PREEMPT(full) 
[  100.737673][ T7298] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  100.737678][ T7298] Call Trace:
[  100.737682][ T7298]  <TASK>
[  100.737686][ T7298]  dump_stack_lvl+0x189/0x250
[  100.737701][ T7298]  ? __pfx_dump_stack_lvl+0x10/0x10
[  100.737711][ T7298]  ? __pfx__printk+0x10/0x10
[  100.737729][ T7298]  dump_header+0xd3/0x480
[  100.737741][ T7298]  oom_kill_process+0x387/0x920
[  100.737756][ T7298]  out_of_memory+0xf09/0x12a0
[  100.737773][ T7298]  ? __pfx_out_of_memory+0x10/0x10
[  100.737789][ T7298]  mem_cgroup_out_of_memory+0x145/0x240
[  100.737817][ T7298]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  100.737830][ T7298]  ? _raw_spin_unlock+0x28/0x50
[  100.737841][ T7298]  ? memcg1_oom_prepare+0x37f/0x450
[  100.737852][ T7298]  try_charge_memcg+0xdff/0x1290
[  100.737870][ T7298]  ? __pfx_try_charge_memcg+0x10/0x10
[  100.737882][ T7298]  ? get_mem_cgroup_from_mm+0x38/0x2a0
[  100.737897][ T7298]  ? get_mem_cgroup_from_mm+0x38/0x2a0
[  100.737911][ T7298]  charge_memcg+0x9f/0x180
[  100.737926][ T7298]  __mem_cgroup_charge+0x25/0x80
[  100.737940][ T7298]  shmem_alloc_and_add_folio+0x7c1/0xf60
[  100.737961][ T7298]  ? filemap_get_entry+0xad/0x2f0
[  100.737975][ T7298]  ? filemap_get_entry+0xad/0x2f0
[  100.737992][ T7298]  ? filemap_get_entry+0x28f/0x2f0
[  100.738011][ T7298]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  100.738035][ T7298]  ? shmem_allowable_huge_orders+0x1f8/0x420
[  100.738047][ T7298]  shmem_get_folio_gfp+0x59d/0x1660
[  100.738062][ T7298]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  100.738075][ T7298]  shmem_write_begin+0xf7/0x2b0
[  100.738088][ T7298]  generic_perform_write+0x2c5/0x900
[  100.738103][ T7298]  ? __pfx_generic_perform_write+0x10/0x10
[  100.738111][ T7298]  ? down_write+0x162/0x1f0
[  100.738122][ T7298]  ? file_update_time+0x2da/0x490
[  100.738134][ T7298]  shmem_file_write_iter+0xf8/0x120
[  100.738144][ T7298]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  100.738155][ T7298]  __kernel_write_iter+0x393/0x860
[  100.738166][ T7298]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  100.738177][ T7298]  ? __pfx___kernel_write_iter+0x10/0x10
[  100.738185][ T7298]  ? __up_read+0x280/0x680
[  100.738197][ T7298]  ? __asan_memset+0x22/0x50
[  100.738206][ T7298]  ? iov_iter_bvec+0xb8/0x180
[  100.738218][ T7298]  dump_user_range+0x8a0/0xc90
[  100.738235][ T7298]  ? __pfx_dump_user_range+0x10/0x10
[  100.738244][ T7298]  ? elf_coredump_extra_notes_write+0x127/0x4b0
[  100.738256][ T7298]  ? __pfx_elf_coredump_extra_notes_write+0x10/0x10
[  100.738265][ T7298]  ? __kasan_kmalloc+0x93/0xb0
[  100.738276][ T7298]  ? dump_emit+0xa6/0xe0
[  100.738285][ T7298]  ? elf_core_dump+0x2cff/0x3990
[  100.738297][ T7298]  elf_core_dump+0x337b/0x3990
[  100.738317][ T7298]  ? __pfx_elf_core_dump+0x10/0x10
[  100.738328][ T7298]  ? kasan_save_track+0x4f/0x80
[  100.738336][ T7298]  ? kasan_save_track+0x3e/0x80
[  100.738346][ T7298]  ? irqentry_exit+0x74/0x90
[  100.738354][ T7298]  ? lockdep_hardirqs_on+0x9c/0x150
[  100.738383][ T7298]  ? 0xffffffffff600000
[  100.738393][ T7298]  ? up_write+0x1c4/0x420
[  100.738404][ T7298]  coredump_write+0x1169/0x1900
[  100.738423][ T7298]  ? __pfx_coredump_write+0x10/0x10
[  100.738440][ T7298]  ? unshare_files+0xa9/0x140
[  100.738452][ T7298]  vfs_coredump+0x1a4b/0x2ab0
[  100.738472][ T7298]  ? __pfx_vfs_coredump+0x10/0x10
[  100.738481][ T7298]  ? perf_trace_lock_acquire+0xf5/0x410
[  100.738492][ T7298]  ? perf_trace_lock_acquire+0xf5/0x410
[  100.738500][ T7298]  ? perf_trace_lock_acquire+0xf5/0x410
[  100.738512][ T7298]  ? __lock_acquire+0xab9/0xd20
[  100.738526][ T7298]  ? is_bpf_text_address+0x26/0x2b0
[  100.738543][ T7298]  ? is_bpf_text_address+0x26/0x2b0
[  100.738555][ T7298]  ? is_bpf_text_address+0x292/0x2b0
[  100.738564][ T7298]  ? is_bpf_text_address+0x26/0x2b0
[  100.738576][ T7298]  ? kernel_text_address+0xa5/0xe0
[  100.738587][ T7298]  ? __kernel_text_address+0xd/0x40
[  100.738596][ T7298]  ? unwind_get_return_address+0x4d/0x90
[  100.738605][ T7298]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  100.738614][ T7298]  ? arch_stack_walk+0xfc/0x150
[  100.738631][ T7298]  ? stack_depot_save_flags+0x40/0x900
[  100.738647][ T7298]  ? kasan_save_track+0x4f/0x80
[  100.738655][ T7298]  ? kasan_save_track+0x3e/0x80
[  100.738662][ T7298]  ? kasan_save_free_info+0x46/0x50
[  100.738669][ T7298]  ? __kasan_slab_free+0x62/0x70
[  100.738677][ T7298]  ? kmem_cache_free+0x18f/0x400
[  100.738685][ T7298]  ? get_signal+0xa4c/0x1340
[  100.738695][ T7298]  ? arch_do_signal_or_restart+0x9a/0x750
[  100.738706][ T7298]  ? irqentry_exit_to_user_mode+0x81/0x120
[  100.738713][ T7298]  ? exc_page_fault+0x9f/0xf0
[  100.738718][ T7298]  ? asm_exc_page_fault+0x26/0x30
[  100.738752][ T7298]  ? _raw_spin_unlock_irq+0x23/0x50
[  100.738762][ T7298]  ? lockdep_hardirqs_on+0x9c/0x150
[  100.738770][ T7298]  get_signal+0x1109/0x1340
[  100.738792][ T7298]  arch_do_signal_or_restart+0x9a/0x750
[  100.738829][ T7298]  ? perf_trace_preemptirq_template+0x280/0x340
[  100.738839][ T7298]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  100.738857][ T7298]  ? local_irq_enable_exit_to_user+0x5/0x10
[  100.738870][ T7298]  irqentry_exit_to_user_mode+0x81/0x120
[  100.738878][ T7298]  exc_page_fault+0x9f/0xf0
[  100.738886][ T7298]  asm_exc_page_fault+0x26/0x30
[  100.738893][ T7298] RIP: 0033:0x7fa6b704f927
[  100.738902][ T7298] Code: 88 15 d2 5d e9 00 88 05 cf 5d e9 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8
[  100.738909][ T7298] RSP: 002b:00007fa6b7f4d0e0 EFLAGS: 00010202
[  100.738916][ T7298] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fa6b718ebe9
[  100.738921][ T7298] RDX: 00007fa6b7f4d100 RSI: 00007fa6b7f4d230 RDI: 000000000000000b
[  100.738926][ T7298] RBP: 00007fa6b7211e19 R08: 0000000000000000 R09: 0000000000000000
[  100.738931][ T7298] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  100.738935][ T7298] R13: 00007fa6b73b6128 R14: 00007fa6b73b6090 R15: 00007fff220945b8
[  100.738949][ T7298]  </TASK>
[  100.738953][ T7298] memory: usage 307200kB, limit 307200kB, failcnt 32247
[  100.946858][ T7298] memory+swap: usage 432112kB, limit 9007199254740988kB, failcnt 0
[  100.949361][ T7298] kmem: usage 4452kB, limit 9007199254740988kB, failcnt 0
[  100.951568][ T7298] Memory cgroup stats for /syz2:
[  100.951629][ T7298] cache 309682176
[  100.959793][ T7298] rss 274432
[  100.960872][ T7298] rss_huge 0
[  100.962286][ T7298] shmem 309682176
[  100.963879][ T7298] mapped_file 0
[  100.965574][ T7298] dirty 0
[  100.966755][ T7658] netlink: 'syz.0.535': attribute type 5 has an invalid length.
[  100.967016][ T7298] writeback 0
[  100.970797][ T7298] workingset_refault_anon 34
[  100.972290][ T7298] workingset_refault_file 4039
[  100.976431][ T7298] swap 127909888
[  100.977621][ T7298] swapcached 86016
[  100.978839][ T7298] pgpgin 149509
[  100.979979][ T7298] pgpgout 73822
[  100.981183][ T7298] pgfault 28033
[  100.981475][ T7661] nbd: must specify an index to disconnect
[  100.982319][ T7298] pgmajfault 251
[  100.982326][ T7298] inactive_anon 266887168
[  100.988286][ T7298] active_anon 43126784
[  100.989609][ T7298] inactive_file 0
[  100.990789][ T7298] active_file 0
[  100.991990][ T7298] unevictable 0
[  100.994692][ T7298] hierarchical_memory_limit 314572800
[  100.996530][ T7298] hierarchical_memsw_limit 9223372036854771712
[  100.998488][ T7298] total_cache 309682176
[  100.999791][ T7298] total_rss 274432
[  101.000969][ T7298] total_rss_huge 0
[  101.002231][ T7298] total_shmem 309682176
[  101.003811][ T7298] total_mapped_file 0
[  101.005137][ T7298] total_dirty 0
[  101.006244][ T7298] total_writeback 0
[  101.007456][ T7298] total_workingset_refault_anon 34
[  101.009056][ T7298] total_workingset_refault_file 4039
[  101.010695][ T7298] total_swap 127909888
[  101.033670][ T7298] total_swapcached 86016
[  101.035079][ T7298] total_pgpgin 149509
[  101.036529][ T7298] total_pgpgout 73822
[  101.037814][ T7298] total_pgfault 28033
[  101.039078][ T7298] total_pgmajfault 251
[  101.040360][ T7298] total_inactive_anon 266887168
[  101.041903][ T7298] total_active_anon 43126784
[  101.048521][ T7298] total_inactive_file 0
[  101.052108][ T7298] total_active_file 0
[  101.058152][ T7298] total_unevictable 0
[  101.060447][ T7298] anon_cost 0
[  101.061617][ T7298] file_cost 0
[  101.063099][ T7298] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.423,pid=7307,uid=0
[  101.068395][ T7298] Memory cgroup out of memory: Killed process 7307 (syz.2.423) total-vm:98252kB, anon-rss:956kB, file-rss:53892kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000
[  101.089871][ T7296] syz.2.423 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  101.099392][ T7296] CPU: 0 UID: 0 PID: 7296 Comm: syz.2.423 Not tainted 6.16.0-syzkaller-11113-gf3af62b6cee8-dirty #0 PREEMPT(full) 
[  101.099405][ T7296] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  101.099411][ T7296] Call Trace:
[  101.099415][ T7296]  <TASK>
[  101.099419][ T7296]  dump_stack_lvl+0x189/0x250
[  101.099435][ T7296]  ? __pfx_dump_stack_lvl+0x10/0x10
[  101.099445][ T7296]  ? __pfx__printk+0x10/0x10
[  101.099464][ T7296]  dump_header+0xd3/0x480
[  101.099476][ T7296]  oom_kill_process+0x387/0x920
[  101.099492][ T7296]  out_of_memory+0xf09/0x12a0
[  101.099509][ T7296]  ? __pfx_out_of_memory+0x10/0x10
[  101.099524][ T7296]  mem_cgroup_out_of_memory+0x145/0x240
[  101.099533][ T7296]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  101.099546][ T7296]  ? _raw_spin_unlock+0x28/0x50
[  101.099558][ T7296]  ? memcg1_oom_prepare+0x37f/0x450
[  101.099586][ T7296]  try_charge_memcg+0xdff/0x1290
[  101.099605][ T7296]  ? __pfx_try_charge_memcg+0x10/0x10
[  101.099616][ T7296]  ? get_mem_cgroup_from_mm+0x38/0x2a0
[  101.099630][ T7296]  charge_memcg+0x9f/0x180
[  101.099641][ T7296]  __mem_cgroup_charge+0x25/0x80
[  101.099650][ T7296]  shmem_alloc_and_add_folio+0x7c1/0xf60
[  101.099664][ T7296]  ? filemap_get_entry+0xad/0x2f0
[  101.099675][ T7296]  ? filemap_get_entry+0xad/0x2f0
[  101.099686][ T7296]  ? filemap_get_entry+0x28f/0x2f0
[  101.099698][ T7296]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  101.099710][ T7296]  ? shmem_allowable_huge_orders+0x1f8/0x420
[  101.099723][ T7296]  shmem_get_folio_gfp+0x59d/0x1660
[  101.099737][ T7296]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  101.099750][ T7296]  shmem_write_begin+0xf7/0x2b0
[  101.099783][ T7296]  generic_perform_write+0x2c5/0x900
[  101.099800][ T7296]  ? __pfx_generic_perform_write+0x10/0x10
[  101.099807][ T7296]  ? down_write+0x162/0x1f0
[  101.099818][ T7296]  ? file_update_time+0x2da/0x490
[  101.099830][ T7296]  shmem_file_write_iter+0xf8/0x120
[  101.099844][ T7296]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  101.099855][ T7296]  __kernel_write_iter+0x393/0x860
[  101.099866][ T7296]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  101.099877][ T7296]  ? __pfx___kernel_write_iter+0x10/0x10
[  101.099885][ T7296]  ? __up_read+0x280/0x680
[  101.099898][ T7296]  ? __asan_memset+0x22/0x50
[  101.099907][ T7296]  ? iov_iter_bvec+0xb8/0x180
[  101.099919][ T7296]  dump_user_range+0x8a0/0xc90
[  101.099937][ T7296]  ? __pfx_dump_user_range+0x10/0x10
[  101.099946][ T7296]  ? elf_coredump_extra_notes_write+0x127/0x4b0
[  101.099958][ T7296]  ? __pfx_elf_coredump_extra_notes_write+0x10/0x10
[  101.099966][ T7296]  ? __kasan_kmalloc+0x93/0xb0
[  101.099979][ T7296]  ? dump_emit+0xa6/0xe0
[  101.099987][ T7296]  ? elf_core_dump+0x2cff/0x3990
[  101.100000][ T7296]  elf_core_dump+0x337b/0x3990
[  101.100020][ T7296]  ? __pfx_elf_core_dump+0x10/0x10
[  101.100031][ T7296]  ? kasan_save_track+0x4f/0x80
[  101.100039][ T7296]  ? kasan_save_track+0x3e/0x80
[  101.100046][ T7296]  ? __kasan_kmalloc+0x93/0xb0
[  101.100055][ T7296]  ? __kvmalloc_node_noprof+0x30d/0x5f0
[  101.100065][ T7296]  ? coredump_write+0x340/0x1900
[  101.100074][ T7296]  ? vfs_coredump+0x1a4b/0x2ab0
[  101.100082][ T7296]  ? get_signal+0x1109/0x1340
[  101.100094][ T7296]  ? arch_do_signal_or_restart+0x9a/0x750
[  101.100105][ T7296]  ? irqentry_exit_to_user_mode+0x81/0x120
[  101.100113][ T7296]  ? exc_page_fault+0x9f/0xf0
[  101.100119][ T7296]  ? asm_exc_page_fault+0x26/0x30
[  101.100148][ T7296]  ? 0xffffffffff600000
[  101.100158][ T7296]  ? up_write+0x1c4/0x420
[  101.100169][ T7296]  coredump_write+0x1169/0x1900
[  101.100187][ T7296]  ? __pfx_coredump_write+0x10/0x10
[  101.100204][ T7296]  ? unshare_files+0xa9/0x140
[  101.100215][ T7296]  vfs_coredump+0x1a4b/0x2ab0
[  101.100235][ T7296]  ? __pfx_vfs_coredump+0x10/0x10
[  101.100244][ T7296]  ? perf_trace_lock_acquire+0xf5/0x410
[  101.100254][ T7296]  ? perf_trace_lock_acquire+0xf5/0x410
[  101.100263][ T7296]  ? perf_trace_lock_acquire+0xf5/0x410
[  101.100275][ T7296]  ? __lock_acquire+0xab9/0xd20
[  101.100288][ T7296]  ? is_bpf_text_address+0x26/0x2b0
[  101.100304][ T7296]  ? is_bpf_text_address+0x26/0x2b0
[  101.100316][ T7296]  ? is_bpf_text_address+0x292/0x2b0
[  101.100326][ T7296]  ? is_bpf_text_address+0x26/0x2b0
[  101.100337][ T7296]  ? kernel_text_address+0xa5/0xe0
[  101.100348][ T7296]  ? __kernel_text_address+0xd/0x40
[  101.100357][ T7296]  ? unwind_get_return_address+0x4d/0x90
[  101.100366][ T7296]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  101.100376][ T7296]  ? arch_stack_walk+0xfc/0x150
[  101.100394][ T7296]  ? stack_depot_save_flags+0x40/0x900
[  101.100410][ T7296]  ? kasan_save_track+0x4f/0x80
[  101.100418][ T7296]  ? kasan_save_track+0x3e/0x80
[  101.100425][ T7296]  ? kasan_save_free_info+0x46/0x50
[  101.100432][ T7296]  ? __kasan_slab_free+0x62/0x70
[  101.100440][ T7296]  ? kmem_cache_free+0x18f/0x400
[  101.100449][ T7296]  ? get_signal+0xa4c/0x1340
[  101.100458][ T7296]  ? arch_do_signal_or_restart+0x9a/0x750
[  101.100468][ T7296]  ? irqentry_exit_to_user_mode+0x81/0x120
[  101.100475][ T7296]  ? exc_page_fault+0x9f/0xf0
[  101.100481][ T7296]  ? asm_exc_page_fault+0x26/0x30
[  101.100513][ T7296]  ? _raw_spin_unlock_irq+0x23/0x50
[  101.100523][ T7296]  ? lockdep_hardirqs_on+0x9c/0x150
[  101.100532][ T7296]  get_signal+0x1109/0x1340
[  101.100553][ T7296]  arch_do_signal_or_restart+0x9a/0x750
[  101.100565][ T7296]  ? perf_trace_preemptirq_template+0x280/0x340
[  101.100576][ T7296]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  101.100593][ T7296]  ? local_irq_enable_exit_to_user+0x5/0x10
[  101.100607][ T7296]  irqentry_exit_to_user_mode+0x81/0x120
[  101.100615][ T7296]  exc_page_fault+0x9f/0xf0
[  101.100623][ T7296]  asm_exc_page_fault+0x26/0x30
[  101.100630][ T7296] RIP: 0033:0x7fa6b704f927
[  101.100639][ T7296] Code: 88 15 d2 5d e9 00 88 05 cf 5d e9 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8
[  101.100646][ T7296] RSP: 002b:00007fa6b7f4d0e0 EFLAGS: 00010202
[  101.100654][ T7296] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fa6b718ebe9
[  101.100659][ T7296] RDX: 00007fa6b7f4d100 RSI: 00007fa6b7f4d230 RDI: 000000000000000b
[  101.100664][ T7296] RBP: 00007fa6b7211e19 R08: 0000000000000000 R09: 0000000000000000
[  101.100669][ T7296] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  101.100673][ T7296] R13: 00007fa6b73b6128 R14: 00007fa6b73b6090 R15: 00007fff220945b8
[  101.100686][ T7296]  </TASK>
[  101.202655][ T7296] memory: usage 280456kB, limit 307200kB, failcnt 32432
[  101.393310][ T7296] memory+swap: usage 406104kB, limit 9007199254740988kB, failcnt 0
[  101.395791][ T7296] kmem: usage 4100kB, limit 9007199254740988kB, failcnt 0
[  101.397981][ T7296] Memory cgroup stats for /syz2:
[  101.398103][ T7296] cache 289943552
[  101.400787][ T7296] rss 253952
[  101.401830][ T7296] rss_huge 0
[  101.482489][ T7296] shmem 289943552
[  101.483765][ T7296] mapped_file 0
[  101.485218][ T7296] dirty 0
[  101.485917][ T5238] Bluetooth: hci1: unexpected event 0x08 length: 151 > 4
[  101.486172][ T7296] writeback 0
[  101.486183][ T7296] workingset_refault_anon 87
[  101.490942][ T7296] workingset_refault_file 4039
[  101.523027][ T7296] swap 119595008
[  101.524265][ T7296] swapcached 184320
[  101.525548][ T7296] pgpgin 153944
[  101.526688][ T7296] pgpgout 83056
[  101.527814][ T7296] pgfault 28226
[  101.528944][ T7296] pgmajfault 294
[  101.530125][ T7296] inactive_anon 231915520
[  101.531481][ T7296] active_anon 58007552
[  101.553308][ T7296] inactive_file 0
[  101.554541][ T7296] active_file 0
[  101.555675][ T7296] unevictable 0
[  101.556756][ T7296] hierarchical_memory_limit 314572800
[  101.558372][ T7296] hierarchical_memsw_limit 9223372036854771712
[  101.560204][ T7296] total_cache 289943552
[  101.561450][ T7296] total_rss 253952
[  101.593918][ T7296] total_rss_huge 0
[  101.595483][ T7676] netlink: 'syz.0.540': attribute type 16 has an invalid length.
[  101.601368][ T7296] total_shmem 289943552
[  101.601379][ T7296] total_mapped_file 0
[  101.601382][ T7296] total_dirty 0
[  101.601386][ T7296] total_writeback 0
[  101.601389][ T7296] total_workingset_refault_anon 87
[  101.601392][ T7296] total_workingset_refault_file 4039
[  101.601396][ T7296] total_swap 119595008
[  101.601399][ T7296] total_swapcached 184320
[  101.601403][ T7296] total_pgpgin 153944
[  101.601406][ T7296] total_pgpgout 83056
[  101.601409][ T7296] total_pgfault 28226
[  101.601413][ T7296] total_pgmajfault 294
[  101.601416][ T7296] total_inactive_anon 231915520
[  101.601420][ T7296] total_active_anon 58007552
[  101.601423][ T7296] total_inactive_file 0
[  101.601426][ T7296] total_active_file 0
[  101.601430][ T7296] total_unevictable 0
[  101.601433][ T7296] anon_cost 0
[  101.601436][ T7296] file_cost 0
[  101.601440][ T7296] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.423,pid=7298,uid=0
[  101.601551][ T7296] Memory cgroup out of memory: OOM victim 7298 (syz.2.423) is already exiting. Skip killing the task
[  101.682752][ T7676] netlink: 156 bytes leftover after parsing attributes in process `syz.0.540'.
[  102.798162][ T7688] netlink: 188 bytes leftover after parsing attributes in process `syz.1.543'.
[  103.528100][ T7713] netlink: 60 bytes leftover after parsing attributes in process `syz.2.551'.
[  103.542335][ T7714] netlink: 60 bytes leftover after parsing attributes in process `syz.2.551'.
[  103.572347][ T7713] netlink: 60 bytes leftover after parsing attributes in process `syz.2.551'.
[  103.585695][ T7712] netlink: 60 bytes leftover after parsing attributes in process `syz.2.551'.
[  103.783276][ T7716] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  103.810457][ T7719] netlink: 'syz.2.553': attribute type 10 has an invalid length.
[  103.816953][ T7719] netlink: 40083 bytes leftover after parsing attributes in process `syz.2.553'.
[  104.207427][ T7748] netlink: 'syz.1.561': attribute type 49 has an invalid length.
[  104.897650][ T7751] netlink: 'syz.0.562': attribute type 3 has an invalid length.
[  104.900605][ T7751] netlink: 'syz.0.562': attribute type 1 has an invalid length.
[  105.371452][ T7773] netlink: 16182 bytes leftover after parsing attributes in process `syz.1.569'.
[  105.406267][ T7778] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  105.485382][ T7786] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.573'.
[  105.489055][ T7786] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.573'.
[  105.492058][ T7786] netlink: 2 bytes leftover after parsing attributes in process `syz.1.573'.
[  105.951822][ T7811] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.583'.
[  106.505850][ T7832] netlink: 'syz.2.591': attribute type 2 has an invalid length.
[  106.555433][ T7840] netlink: 'syz.2.591': attribute type 2 has an invalid length.
[  107.797260][ T7864] netlink: 'syz.0.598': attribute type 4 has an invalid length.
[  108.391537][ T7867] netlink: 'syz.0.599': attribute type 21 has an invalid length.
[  108.807063][ T7887] __nla_validate_parse: 4 callbacks suppressed
[  108.807077][ T7887] netlink: 17 bytes leftover after parsing attributes in process `syz.1.607'.
[  108.811820][ T7887] netlink: zone id is out of range
[  108.822148][ T7887] netlink: zone id is out of range
[  108.826828][ T7887] netlink: zone id is out of range
[  108.828586][ T7887] netlink: zone id is out of range
[  108.830158][ T7887] netlink: zone id is out of range
[  108.831684][ T7887] netlink: zone id is out of range
[  108.841122][ T7887] netlink: zone id is out of range
[  108.845803][ T7887] netlink: zone id is out of range
[  108.847515][ T7887] netlink: zone id is out of range
[  108.995208][ T7904] netlink: 'syz.2.612': attribute type 2 has an invalid length.
[  108.997812][ T7904] netlink: 51 bytes leftover after parsing attributes in process `syz.2.612'.
[  109.442789][ T7926] netlink: 'syz.0.619': attribute type 1 has an invalid length.
[  109.447577][ T7926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.619'.
[  109.777276][ T7946] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  110.028084][ T5238] Bluetooth: hci1: adv larger than maximum supported
[  110.684485][ T7989] netlink: 'syz.0.638': attribute type 10 has an invalid length.
[  110.691496][ T7989] netlink: 55 bytes leftover after parsing attributes in process `syz.0.638'.
[  110.799887][ T5238] Bluetooth: hci1: unexpected subevent 0x01 length: 14 < 18
[  111.219619][ T8015] netlink: 17 bytes leftover after parsing attributes in process `syz.2.647'.
[  111.224507][ T8015] net_ratelimit: 76 callbacks suppressed
[  111.224546][ T8015] netlink: zone id is out of range
[  111.234290][ T8015] netlink: zone id is out of range
[  111.235942][ T8015] netlink: zone id is out of range
[  111.237545][ T8015] netlink: zone id is out of range
[  111.239219][ T8015] netlink: zone id is out of range
[  111.240834][ T8015] netlink: zone id is out of range
[  111.253269][ T8015] netlink: zone id is out of range
[  111.255004][ T8015] netlink: zone id is out of range
[  111.256616][ T8015] netlink: zone id is out of range
[  111.258224][ T8015] netlink: zone id is out of range
[  112.048397][ T8020] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  112.059979][ T8020] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  112.116236][ T8026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.650'.
[  112.328569][ T5238] Bluetooth: hci2: unexpected event 0x17 length: 151 > 6
[  122.021499][  T791] sched: DL replenish lagged too much
[  129.114508][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  129.117838][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  129.120393][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  129.123780][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  129.126637][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  129.167910][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  129.172332][ T5238] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  129.176161][ T5238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  129.178893][ T5238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  129.181651][ T5238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  130.985466][ T5850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  130.989150][ T5850] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  130.991702][ T5850] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  130.996904][ T5850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  130.999523][ T5850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  131.162690][ T5850] Bluetooth: hci3: command tx timeout
[  131.243177][ T5850] Bluetooth: hci4: command tx timeout
[  132.883458][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.886090][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  133.082659][ T5850] Bluetooth: hci5: command tx timeout
[  133.332636][ T5850] Bluetooth: hci3: command tx timeout
[  133.335227][ T5850] Bluetooth: hci4: command tx timeout
[  135.163428][ T5850] Bluetooth: hci5: command tx timeout
[  135.402676][ T5850] Bluetooth: hci4: command tx timeout
[  135.404458][ T5850] Bluetooth: hci3: command tx timeout
[  137.243134][ T5238] Bluetooth: hci5: command tx timeout
[  137.509468][ T5238] Bluetooth: hci3: command tx timeout
[  137.511264][ T5238] Bluetooth: hci4: command tx timeout
[  139.352659][ T5850] Bluetooth: hci5: command tx timeout
[  167.553849][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 4279677646 wd_nsec: 4279677592
[  170.206082][ T8094] Bluetooth: hci2: command 0x0406 tx timeout
[  170.208073][ T8094] Bluetooth: hci0: command 0x0406 tx timeout
[  170.209990][ T8094] Bluetooth: hci1: command 0x0406 tx timeout
[  188.963323][   T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  188.966680][   T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  188.969338][   T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  188.972133][   T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  188.976648][   T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  189.976885][   T53] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  189.981117][   T53] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  189.984301][   T53] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  189.987624][   T53] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  189.990262][   T53] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  190.986489][   T53] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  190.989582][   T53] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  190.992184][   T53] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  190.997250][   T53] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  190.999855][   T53] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  191.002588][   T53] Bluetooth: hci6: command tx timeout
[  192.312097][ T5238] Bluetooth: hci7: command tx timeout
[  193.085036][ T5238] Bluetooth: hci8: command tx timeout
[  193.087168][ T5238] Bluetooth: hci6: command tx timeout
[  193.727781][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  193.729805][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  194.362694][   T53] Bluetooth: hci7: command tx timeout
[  195.162753][ T5238] Bluetooth: hci8: command tx timeout
[  195.166672][   T53] Bluetooth: hci6: command tx timeout
[  196.442868][   T53] Bluetooth: hci7: command tx timeout
[  197.242909][   T53] Bluetooth: hci6: command tx timeout
[  197.245512][ T5238] Bluetooth: hci8: command tx timeout
[  198.522923][   T53] Bluetooth: hci7: command tx timeout
[  199.322683][   T53] Bluetooth: hci8: command tx timeout
[  249.068796][ T5238] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  249.072392][ T5238] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  249.075581][ T5238] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  249.078350][ T5238] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  249.080926][ T5238] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  250.147870][ T8095] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  250.151453][ T8095] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  250.154180][ T8095] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  250.156906][ T8095] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  250.159682][ T8095] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  251.439793][ T8123] Bluetooth: hci9: command tx timeout
[  252.013100][ T8094] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  252.016859][ T8094] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  252.019582][ T8094] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  252.023959][ T8094] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  252.026815][ T8094] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  252.202830][ T8123] Bluetooth: hci10: command tx timeout
[  252.205737][ T8123] Bluetooth: hci4: command 0x0406 tx timeout
[  252.208256][ T8123] Bluetooth: hci3: command 0x0406 tx timeout
[  253.502748][ T8094] Bluetooth: hci9: command tx timeout
[  254.202828][ T8094] Bluetooth: hci11: command tx timeout
[  254.752616][ T8094] Bluetooth: hci10: command tx timeout
[  255.165806][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  255.167844][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  255.562664][ T8123] Bluetooth: hci9: command tx timeout
[  256.282534][ T8123] Bluetooth: hci11: command tx timeout
[  256.763300][ T8123] Bluetooth: hci10: command tx timeout
[  257.402562][ T8123] Bluetooth: hci5: command 0x0406 tx timeout
[  257.642646][ T8123] Bluetooth: hci9: command tx timeout
[  258.362568][ T8123] Bluetooth: hci11: command tx timeout
[  258.842581][ T8123] Bluetooth: hci10: command tx timeout
[  260.442612][ T8123] Bluetooth: hci11: command tx timeout
[  269.328858][   T34] INFO: task kworker/u8:1:13 blocked for more than 145 seconds.
[  269.331323][   T34]       Not tainted 6.16.0-syzkaller-11113-gf3af62b6cee8-dirty #0
[  269.336643][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  269.339377][   T34] task:kworker/u8:1    state:D stack:22984 pid:13    tgid:13    ppid:2      task_flags:0x4208060 flags:0x00004000
[  269.347804][   T34] Workqueue: netns cleanup_net
[  269.349316][   T34] Call Trace:
[  269.350363][   T34]  <TASK>
[  269.351273][   T34]  __schedule+0x1798/0x4cc0
[  269.353530][   T34]  ? __pfx___schedule+0x10/0x10
[  269.355112][   T34]  ? schedule+0x91/0x360
[  269.356446][   T34]  schedule+0x165/0x360
[  269.357723][   T34]  schedule_preempt_disabled+0x13/0x30
[  269.359365][   T34]  __mutex_lock+0x7e6/0x1360
[  269.360756][   T34]  ? __mutex_lock+0x5b6/0x1360
[  269.362262][   T34]  ? wg_netns_pre_exit+0x1c/0x1d0
[  269.365156][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  269.366757][   T34]  ? net_generic+0x1e/0x240
[  269.368203][   T34]  ? net_generic+0x1e/0x240
[  269.369642][   T34]  wg_netns_pre_exit+0x1c/0x1d0
[  269.371190][   T34]  ops_undo_list+0x187/0x990
[  269.373210][   T34]  ? __pfx_ops_undo_list+0x10/0x10
[  269.374858][   T34]  ? do_raw_spin_unlock+0x4d/0x240
[  269.376504][   T34]  cleanup_net+0x4c5/0x800
[  269.377910][   T34]  ? __pfx_cleanup_net+0x10/0x10
[  269.379484][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  269.381142][   T34]  ? process_scheduled_works+0x9ef/0x17b0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  269.394721][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  269.396532][   T34]  process_scheduled_works+0xae1/0x17b0
[  269.398308][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  269.400193][   T34]  worker_thread+0x8a0/0xda0
[  269.401641][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  269.423362][   T34]  ? __kthread_parkme+0x7b/0x200
[  269.424987][   T34]  kthread+0x711/0x8a0
[  269.426280][   T34]  ? __pfx_worker_thread+0x10/0x10
[  269.427864][   T34]  ? __pfx_kthread+0x10/0x10
[  269.429329][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  269.455571][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  269.457280][   T34]  ? __pfx_kthread+0x10/0x10
[  269.458750][   T34]  ret_from_fork+0x3fc/0x770
[  269.460205][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  269.461798][   T34]  ? __switch_to_asm+0x39/0x70
[  269.473612][   T34]  ? __switch_to_asm+0x33/0x70
[  269.475158][   T34]  ? __pfx_kthread+0x10/0x10
[  269.476606][   T34]  ret_from_fork_asm+0x1a/0x30
[  269.478148][   T34]  </TASK>
[  269.479189][   T34] INFO: task kworker/u9:5:1090 blocked for more than 146 seconds.
[  269.481647][   T34]       Not tainted 6.16.0-syzkaller-11113-gf3af62b6cee8-dirty #0
[  269.486775][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  269.489426][   T34] task:kworker/u9:5    state:D stack:23944 pid:1090  tgid:1090  ppid:2      task_flags:0x4208060 flags:0x00004000
[  269.494194][   T34] Workqueue: events_unbound linkwatch_event
[  269.496086][   T34] Call Trace:
[  269.497143][   T34]  <TASK>
[  269.498086][   T34]  __schedule+0x1798/0x4cc0
[  269.499534][   T34]  ? __pfx___schedule+0x10/0x10
[  269.501018][   T34]  ? schedule+0x91/0x360
[  269.502323][   T34]  schedule+0x165/0x360
[  269.506026][   T34]  schedule_preempt_disabled+0x13/0x30
[  269.507778][   T34]  __mutex_lock+0x7e6/0x1360
[  269.509237][   T34]  ? look_up_lock_class+0x74/0x170
[  269.510830][   T34]  ? __mutex_lock+0x5b6/0x1360
[  269.512344][   T34]  ? linkwatch_event+0xe/0x60
[  269.515660][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  269.517236][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  269.518864][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  269.520610][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  269.522986][   T34]  linkwatch_event+0xe/0x60
[  269.524420][   T34]  process_scheduled_works+0xae1/0x17b0
[  269.526142][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  269.527972][   T34]  worker_thread+0x8a0/0xda0
[  269.529414][   T34]  kthread+0x711/0x8a0
[  269.530661][   T34]  ? __pfx_worker_thread+0x10/0x10
[  269.532230][   T34]  ? __pfx_kthread+0x10/0x10
[  269.535543][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  269.537221][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  269.538855][   T34]  ? __pfx_kthread+0x10/0x10
[  269.540312][   T34]  ret_from_fork+0x3fc/0x770
[  269.541766][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  269.543895][   T34]  ? __switch_to_asm+0x39/0x70
[  269.545443][   T34]  ? __switch_to_asm+0x33/0x70
[  269.546902][   T34]  ? __pfx_kthread+0x10/0x10
[  269.548354][   T34]  ret_from_fork_asm+0x1a/0x30
[  269.549841][   T34]  </TASK>
[  269.550878][   T34] INFO: task syz.2.661:8059 blocked for more than 146 seconds.
[  269.554559][   T34]       Not tainted 6.16.0-syzkaller-11113-gf3af62b6cee8-dirty #0
[  269.556980][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  269.559634][   T34] task:syz.2.661       state:D stack:24264 pid:8059  tgid:8059  ppid:5857   task_flags:0x400040 flags:0x00004004
[  269.564338][   T34] Call Trace:
[  269.565409][   T34]  <TASK>
[  269.566343][   T34]  __schedule+0x1798/0x4cc0
[  269.567769][   T34]  ? __pfx___schedule+0x10/0x10
[  269.569287][   T34]  ? schedule+0x91/0x360
[  269.570591][   T34]  schedule+0x165/0x360
[  269.571835][   T34]  schedule_preempt_disabled+0x13/0x30
[  269.574952][   T34]  __mutex_lock+0x7e6/0x1360
[  269.576375][   T34]  ? __mutex_lock+0x5b6/0x1360
[  269.577879][   T34]  ? tun_chr_close+0x3e/0x1c0
[  269.579391][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  269.580981][   T34]  ? __pfx_tun_chr_close+0x10/0x10
[  269.583127][   T34]  tun_chr_close+0x3e/0x1c0
[  269.584506][   T34]  __fput+0x44c/0xa70
[  269.585780][   T34]  task_work_run+0x1d4/0x260
[  269.587259][   T34]  ? __pfx_task_work_run+0x10/0x10
[  269.588838][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  269.590501][   T34]  exit_to_user_mode_loop+0xec/0x110
[  269.592111][   T34]  do_syscall_64+0x2bd/0x3b0
[  269.595290][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  269.596920][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.598816][   T34]  ? exc_page_fault+0x9f/0xf0
[  269.600243][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.602030][   T34] RIP: 0033:0x7fa6b718ebe9
[  269.603864][   T34] RSP: 002b:00007fff22094718 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  269.606372][   T34] RAX: 0000000000000000 RBX: 00007fa6b73b7da0 RCX: 00007fa6b718ebe9
[  269.608703][   T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  269.611053][   T34] RBP: 00007fa6b73b7da0 R08: 00000000000001ac R09: 0000001922094a0f
[  269.616012][   T34] R10: 00000000003ffc30 R11: 0000000000000246 R12: 000000000001bc0a
[  269.618422][   T34] R13: 00007fa6b73b6090 R14: ffffffffffffffff R15: 00007fff22094830
[  269.620801][   T34]  </TASK>
[  269.621754][   T34] INFO: task syz.1.664:8076 blocked for more than 146 seconds.
[  269.624988][   T34]       Not tainted 6.16.0-syzkaller-11113-gf3af62b6cee8-dirty #0
[  269.627427][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  269.630097][   T34] task:syz.1.664       state:D stack:28880 pid:8076  tgid:8069  ppid:5849   task_flags:0x400040 flags:0x00004004
[  269.634834][   T34] Call Trace:
[  269.636367][   T34]  <TASK>
[  269.637321][   T34]  __schedule+0x1798/0x4cc0
[  269.638766][   T34]  ? __pfx___schedule+0x10/0x10
[  269.640311][   T34]  ? schedule+0x91/0x360
[  269.641646][   T34]  schedule+0x165/0x360
[  269.643564][   T34]  schedule_preempt_disabled+0x13/0x30
[  269.645310][   T34]  __mutex_lock+0x7e6/0x1360
[  269.646762][   T34]  ? __mutex_lock+0x5b6/0x1360
[  269.648275][   T34]  ? __tun_chr_ioctl+0x37a/0x1df0
[  269.649848][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  269.651440][   T34]  __tun_chr_ioctl+0x37a/0x1df0
[  269.654362][   T34]  ? __pfx___tun_chr_ioctl+0x10/0x10
[  269.655986][   T34]  ? __fget_files+0x2a/0x420
[  269.657411][   T34]  ? __fget_files+0x3a0/0x420
[  269.658857][   T34]  ? __fget_files+0x2a/0x420
[  269.660322][   T34]  ? bpf_lsm_file_ioctl+0x9/0x20
[  269.661864][   T34]  ? __pfx_tun_chr_ioctl+0x10/0x10
[  269.663928][   T34]  __se_sys_ioctl+0xfc/0x170
[  269.665364][   T34]  do_syscall_64+0xfa/0x3b0
[  269.666764][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  269.668349][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.670204][   T34]  ? exc_page_fault+0x9f/0xf0
[  269.671642][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.674757][   T34] RIP: 0033:0x7f01b878ebe9
[  269.676174][   T34] RSP: 002b:00007f01b69f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  269.678740][   T34] RAX: ffffffffffffffda RBX: 00007f01b89b6180 RCX: 00007f01b878ebe9
[  269.681176][   T34] RDX: ba98575a95aeb70d RSI: 00000000400454c9 RDI: 0000000000000011
[  269.683799][   T34] RBP: 00007f01b8811e19 R08: 0000000000000000 R09: 0000000000000000
[  269.686224][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  269.688619][   T34] R13: 00007f01b89b6218 R14: 00007f01b89b6180 R15: 00007ffd4ced6b38
[  269.691050][   T34]  </TASK>
[  269.692006][   T34] INFO: task syz.0.666:8081 blocked for more than 146 seconds.
[  269.695618][   T34]       Not tainted 6.16.0-syzkaller-11113-gf3af62b6cee8-dirty #0
[  269.698052][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  269.700703][   T34] task:syz.0.666       state:D stack:24776 pid:8081  tgid:8080  ppid:5854   task_flags:0x400140 flags:0x00004004
[  269.704648][   T34] Call Trace:
[  269.705709][   T34]  <TASK>
[  269.706656][   T34]  __schedule+0x1798/0x4cc0
[  269.708097][   T34]  ? __pfx___schedule+0x10/0x10
[  269.709596][   T34]  ? schedule+0x91/0x360
[  269.710894][   T34]  schedule+0x165/0x360
[  269.712212][   T34]  schedule_preempt_disabled+0x13/0x30
[  269.715347][   T34]  __mutex_lock+0x7e6/0x1360
[  269.716822][   T34]  ? __mutex_lock+0x5b6/0x1360
[  269.718325][   T34]  ? __tun_chr_ioctl+0x37a/0x1df0
[  269.719906][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  269.721484][   T34]  __tun_chr_ioctl+0x37a/0x1df0
[  269.724891][   T34]  ? __pfx___tun_chr_ioctl+0x10/0x10
[  269.726523][   T34]  ? __fget_files+0x2a/0x420
[  269.727916][   T34]  ? __fget_files+0x3a0/0x420
[  269.729351][   T34]  ? __fget_files+0x2a/0x420
[  269.730749][   T34]  ? bpf_lsm_file_ioctl+0x9/0x20
[  269.732244][   T34]  ? __pfx_tun_chr_ioctl+0x10/0x10
[  269.735728][   T34]  __se_sys_ioctl+0xfc/0x170
[  269.737224][   T34]  do_syscall_64+0xfa/0x3b0
[  269.739088][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  269.740709][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.743571][   T34]  ? exc_page_fault+0x9f/0xf0
[  269.745039][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.746867][   T34] RIP: 0033:0x7f89ce18ebe9
[  269.748265][   T34] RSP: 002b:00007f89cc3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  269.750742][   T34] RAX: ffffffffffffffda RBX: 00007f89ce3b5fa0 RCX: 00007f89ce18ebe9
[  269.754520][   T34] RDX: 0000000000000001 RSI: 00000000400454cb RDI: 0000000000000003
[  269.757005][   T34] RBP: 00007f89ce211e19 R08: 0000000000000000 R09: 0000000000000000
[  269.759493][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  269.761927][   T34] R13: 00007f89ce3b6038 R14: 00007f89ce3b5fa0 R15: 00007fffe537b6f8
[  269.764838][   T34]  </TASK>
[  269.765858][   T34] 
[  269.765858][   T34] Showing all locks held in the system:
[  269.768255][   T34] 4 locks held by kworker/u8:1/13:
[  269.769840][   T34]  #0: ffff88801b2f7148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  269.774486][   T34]  #1: ffffc90000107bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  269.777754][   T34]  #2: ffffffff8f525950 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  269.780648][   T34]  #3: ffffffff8f5327c8 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x1d0
[  269.783878][   T34] 1 lock held by khungtaskd/34:
[  269.785377][   T34]  #0: ffffffff8e139e60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  269.788378][   T34] 3 locks held by kworker/u9:5/1090:
[  269.790002][   T34]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  269.794719][   T34]  #1: ffffc900071e7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  269.798130][   T34]  #2: ffffffff8f5327c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  269.800915][   T34] 2 locks held by getty/5674:
[  269.802392][   T34]  #0: ffff888109b820a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  269.805954][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  269.809090][   T34] 3 locks held by kworker/u8:3/5869:
[  269.810720][   T34]  #0: ffff88802662a948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  269.815535][   T34]  #1: ffffc90003adfbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  269.819749][   T34]  #2: ffffffff8f5327c8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  269.822988][   T34] 3 locks held by kworker/0:4/5885:
[  269.824627][   T34]  #0: ffff88801a482148 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  269.828367][   T34]  #1: ffffc90003bbfbc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  269.831668][   T34]  #2: ffffffff8f5327c8 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf30
[  269.837271][   T34] 1 lock held by syz.2.661/8059:
[  269.838802][   T34]  #0: ffffffff8f5327c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  269.841930][   T34] 3 locks held by syz.1.664/8071:
[  269.844548][   T34] 1 lock held by syz.1.664/8076:
[  269.846093][   T34]  #0: ffffffff8f5327c8 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37a/0x1df0
[  269.848958][   T34] 1 lock held by syz.0.666/8081:
[  269.850500][   T34]  #0: ffffffff8f5327c8 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37a/0x1df0
[  269.854605][   T34] 1 lock held by syz-executor/8084:
[  269.856268][   T34]  #0: ffffffff8f5327c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  269.859166][   T34] 1 lock held by syz-executor/8088:
[  269.860783][   T34]  #0: ffffffff8f5327c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  269.864228][   T34] 1 lock held by syz-executor/8091:
[  269.865856][   T34]  #0: ffffffff8f5327c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  269.868639][   T34] 1 lock held by syz-executor/8100:
[  269.870206][   T34]  #0: ffffffff8f5327c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  269.874416][   T34] 1 lock held by syz-executor/8105:
[  269.876021][   T34]  #0: ffffffff8f5327c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  269.878889][   T34] 1 lock held by syz-executor/8108:
[  269.880495][   T34]  #0: ffffffff8f5327c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  269.884969][   T34] 1 lock held by syz-executor/8116:
[  269.886605][   T34]  #0: ffffffff8f5327c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  269.889484][   T34] 1 lock held by syz-executor/8121:
[  269.891115][   T34]  #0: ffffffff8f5327c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  269.895350][   T34] 1 lock held by syz-executor/8126:
[  269.896947][   T34]  #0: ffffffff8f5327c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  269.899865][   T34] 
[  269.900628][   T34] =============================================
[  269.900628][   T34] 
[  269.903659][   T34] NMI backtrace for cpu 1
[  269.903668][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-syzkaller-11113-gf3af62b6cee8-dirty #0 PREEMPT(full) 
[  269.903678][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  269.903683][   T34] Call Trace:
[  269.903687][   T34]  <TASK>
[  269.903691][   T34]  dump_stack_lvl+0x189/0x250
[  269.903707][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  269.903716][   T34]  ? __pfx__printk+0x10/0x10
[  269.903733][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  269.903747][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  269.903758][   T34]  ? __pfx__printk+0x10/0x10
[  269.903771][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  269.903784][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  269.903796][   T34]  watchdog+0xf93/0xfe0
[  269.903810][   T34]  ? watchdog+0x1de/0xfe0
[  269.903822][   T34]  kthread+0x711/0x8a0
[  269.903834][   T34]  ? __pfx_watchdog+0x10/0x10
[  269.903844][   T34]  ? __pfx_kthread+0x10/0x10
[  269.903854][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  269.903867][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  269.903873][   T34]  ? __pfx_kthread+0x10/0x10
[  269.903883][   T34]  ret_from_fork+0x3fc/0x770
[  269.903893][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  269.903903][   T34]  ? __switch_to_asm+0x39/0x70
[  269.903912][   T34]  ? __switch_to_asm+0x33/0x70
[  269.903921][   T34]  ? __pfx_kthread+0x10/0x10
[  269.903930][   T34]  ret_from_fork_asm+0x1a/0x30
[  269.903947][   T34]  </TASK>
[  269.903951][   T34] Sending NMI from CPU 1 to CPUs 0:
[  269.949938][    C0] NMI backtrace for cpu 0
[  269.949954][    C0] CPU: 0 UID: 0 PID: 8071 Comm: syz.1.664 Not tainted 6.16.0-syzkaller-11113-gf3af62b6cee8-dirty #0 PREEMPT(full) 
[  269.949965][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  269.949971][    C0] RIP: 0010:hrtimer_interrupt+0x620/0xaa0
[  269.949986][    C0] Code: 24 18 42 0f b6 04 30 84 c0 0f 85 c9 01 00 00 80 63 4c fd 48 89 df 48 8b 74 24 30 e8 2a 40 cc 09 4c 89 ef 31 f6 e8 40 c8 03 00 <41> 89 c4 31 ff 89 c6 e8 e4 fd 11 00 45 85 e4 0f 84 4f 02 00 00 48
[  269.949993][    C0] RSP: 0018:ffffc90000006a48 EFLAGS: 00000092
[  269.950021][    C0] RAX: 0000000000000000 RBX: ffff88804b027a80 RCX: ffff888026460000
[  269.950027][    C0] RDX: 0000000000010100 RSI: 0000000000000000 RDI: 0000000000000000
[  269.950032][    C0] RBP: ffff88804b027ad4 R08: 0000000000000000 R09: ffffffff81adfebe
[  269.950037][    C0] R10: 0000000000000003 R11: ffffffff81703490 R12: ffff88804b027ae0
[  269.950042][    C0] R13: 0000003ed429c207 R14: dffffc0000000000 R15: 0000000000000008
[  269.950047][    C0] FS:  00007f01b952c6c0(0000) GS:ffff8880b862a000(0000) knlGS:0000000000000000
[  269.950053][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  269.950058][    C0] CR2: 000055c08617f778 CR3: 000000011f99a000 CR4: 00000000000006f0
[  269.950081][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000082
[  269.950091][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  269.950095][    C0] Call Trace:
[  269.950099][    C0]  <IRQ>
[  269.950112][    C0]  __sysvec_apic_timer_interrupt+0x10b/0x410
[  269.950125][    C0]  sysvec_apic_timer_interrupt+0x52/0xc0
[  269.950138][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  269.950147][    C0] RIP: 0010:__pi___x86_indirect_thunk_r11+0x0/0x20
[  269.950157][    C0] Code: 00 00 00 0f 1f 80 00 00 00 00 e8 01 00 00 00 cc 4c 89 14 24 e9 d1 0a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 <e8> 01 00 00 00 cc 4c 89 1c 24 c3 cc cc cc cc 66 2e 0f 1f 84 00 00
[  269.950163][    C0] RSP: 0018:ffffc90000006c60 EFLAGS: 00000282
[  269.950170][    C0] RAX: ffffffff8aca5a3b RBX: ffffc90000006d20 RCX: ab6b15b4082f5c00
[  269.950175][    C0] RDX: 0000000000000001 RSI: ffffffff8aca5a3b RDI: ffffc90000006d20
[  269.950180][    C0] RBP: ffffc90000006cf0 R08: ffffc900000073f0 R09: 0000000000000000
[  269.950185][    C0] R10: ffffc90000006cb8 R11: ffffffff81ac34b0 R12: ffff888026460000
[  269.950190][    C0] R13: ffffc90000007280 R14: ffffffff81ac34b0 R15: ffffc90000006c68
[  269.950196][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  269.950206][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  269.950214][    C0]  ? cfg80211_inform_bss_data+0x1fb/0x3b30
[  269.950226][    C0]  ? cfg80211_inform_bss_data+0x1fb/0x3b30
[  269.950237][    C0]  ? arch_stack_walk+0x110/0x150
[  269.950248][    C0]  ? cfg80211_inform_bss_data+0x1fb/0x3b30
[  269.950258][    C0]  ? stack_trace_save+0x9c/0xe0
[  269.950266][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  269.950274][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  269.950287][    C0]  ? kasan_save_stack+0x3e/0x60
[  269.950297][    C0]  ? kasan_save_stack+0x3e/0x60
[  269.950305][    C0]  ? kasan_record_aux_stack+0xbd/0xd0
[  269.950312][    C0]  ? kvfree_call_rcu+0xbb/0x410
[  269.950323][    C0]  ? cfg80211_update_known_bss+0x634/0x1330
[  269.950333][    C0]  ? __cfg80211_bss_update+0x147/0x2120
[  269.950341][    C0]  ? cfg80211_inform_single_bss_data+0xba9/0x1ac0
[  269.950366][    C0]  ? kasan_record_aux_stack+0xbd/0xd0
[  269.950373][    C0]  ? kvfree_call_rcu+0xbb/0x410
[  269.950385][    C0]  ? cfg80211_update_known_bss+0x634/0x1330
[  269.950394][    C0]  ? cmp_bss+0x8b3/0xe80
[  269.950405][    C0]  ? cmp_bss+0x8b3/0xe80
[  269.950414][    C0]  ? __cfg80211_bss_update+0x147/0x2120
[  269.950423][    C0]  ? irqentry_exit+0x74/0x90
[  269.950430][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  269.950443][    C0]  ? cfg80211_inform_single_bss_data+0xba9/0x1ac0
[  269.950456][    C0]  ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10
[  269.950471][    C0]  ? __pfx_perf_trace_lock+0x10/0x10
[  269.950479][    C0]  ? ktime_get+0x3e/0x1f0
[  269.950488][    C0]  ? cfg80211_inform_bss_data+0x1e8/0x3b30
[  269.950499][    C0]  ? cfg80211_inform_bss_data+0x1fb/0x3b30
[  269.950508][    C0]  ? ktime_get+0x3e/0x1f0
[  269.950515][    C0]  ? ktime_get+0x3e/0x1f0
[  269.950523][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  269.950531][    C0]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  269.950543][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  269.950553][    C0]  ? sched_clock+0x3f/0x60
[  269.950564][    C0]  ? sched_clock_cpu+0x74/0x430
[  269.950576][    C0]  ? __pfx_cfg80211_inform_bss_data+0x10/0x10
[  269.950584][    C0]  ? lapic_next_event+0x11/0x20
[  269.950591][    C0]  ? clockevents_program_event+0x24d/0x360
[  269.950602][    C0]  ? __pfx_sched_clock_cpu+0x10/0x10
[  269.950612][    C0]  ? hrtimer_interrupt+0x889/0xaa0
[  269.950622][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  269.950631][    C0]  ? __irq_exit_rcu+0xd8/0x1f0
[  269.950640][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  269.950649][    C0]  ? irqentry_exit+0x74/0x90
[  269.950662][    C0]  ? cfg80211_inform_bss_frame_data+0x3d7/0x730
[  269.950673][    C0]  ? ieee80211_bss_info_update+0x2dc/0x9e0
[  269.950685][    C0]  ? ieee80211_bss_info_update+0x746/0x9e0
[  269.950697][    C0]  ? __pfx_ieee80211_bss_info_update+0x10/0x10
[  269.950707][    C0]  ? irqentry_exit+0x74/0x90
[  269.950715][    C0]  ? kcov_remote_start+0x97/0x7f0
[  269.950726][    C0]  ? ieee80211_get_channel_khz+0x15b/0x8a0
[  269.950736][    C0]  ? ieee80211_scan_rx+0x593/0xa20
[  269.950748][    C0]  ? ieee80211_rx_list+0x201c/0x2a90
[  269.950757][    C0]  ? hrtimer_interrupt+0x889/0xaa0
[  269.950767][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  269.950776][    C0]  ? __pfx_ieee80211_rx_list+0x10/0x10
[  269.950790][    C0]  ? ieee80211_rx_napi+0xca/0x3d0
[  269.950800][    C0]  ? ieee80211_rx_napi+0xca/0x3d0
[  269.950813][    C0]  ? ieee80211_rx_napi+0xca/0x3d0
[  269.950823][    C0]  ? ieee80211_rx_napi+0x1a8/0x3d0
[  269.950833][    C0]  ? __pfx_ieee80211_rx_napi+0x10/0x10
[  269.950845][    C0]  ? skb_dequeue+0x10e/0x150
[  269.950857][    C0]  ? ieee80211_handle_queued_frames+0xe8/0x1f0
[  269.950868][    C0]  ? tasklet_action_common+0x36c/0x580
[  269.950878][    C0]  ? __pfx_tasklet_action_common+0x10/0x10
[  269.950887][    C0]  ? workqueue_softirq_action+0x94/0x150
[  269.950895][    C0]  ? workqueue_softirq_action+0xd4/0x150
[  269.950904][    C0]  ? handle_softirqs+0x286/0x870
[  269.950912][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  269.950920][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  269.950929][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  269.950938][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  269.950944][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  269.950954][    C0]  ? irq_exit_rcu+0x9/0x30
[  269.950960][    C0]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  269.950970][    C0]  </IRQ>
[  269.950972][    C0]  <TASK>
[  269.950975][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  269.950986][    C0]  ? preempt_schedule_irq+0xb0/0x150
[  269.950998][    C0]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  269.951040][    C0]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  269.951048][    C0]  ? irqentry_exit+0x6f/0x90
[  269.951054][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  269.951065][    C0]  ? preempt_schedule+0xf/0xc0
[  269.951076][    C0]  ? preempt_schedule_thunk+0x16/0x30
[  269.951094][    C0]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  269.951106][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  269.951120][    C0]  ? __put_partials+0x118/0x1a0
[  269.951132][    C0]  ? put_cpu_partial+0x17c/0x250
[  269.951139][    C0]  ? put_cpu_partial+0x6d/0x250
[  269.951146][    C0]  ? __slab_free+0x2d5/0x3c0
[  269.951154][    C0]  ? __phys_addr+0xd3/0x180
[  269.951165][    C0]  ? qlist_free_all+0x97/0x140
[  269.951175][    C0]  ? kasan_quarantine_reduce+0x148/0x160
[  269.951184][    C0]  ? __kasan_slab_alloc+0x22/0x80
[  269.951193][    C0]  ? kmem_cache_alloc_noprof+0x1c1/0x3c0
[  269.951202][    C0]  ? __kernfs_new_node+0xd7/0x7e0
[  269.951212][    C0]  ? __kernfs_new_node+0xd7/0x7e0
[  269.951220][    C0]  ? __pfx_perf_trace_lock+0x10/0x10
[  269.951228][    C0]  ? __pfx___kernfs_new_node+0x10/0x10
[  269.951236][    C0]  ? kernfs_root+0x1c/0x230
[  269.951245][    C0]  ? kernfs_root+0x1c/0x230
[  269.951251][    C0]  ? kernfs_root+0x1c/0x230
[  269.951257][    C0]  ? kernfs_root+0x1c/0x230
[  269.951266][    C0]  ? kernfs_new_node+0x102/0x210
[  269.951275][    C0]  ? __kernfs_create_file+0x4b/0x2e0
[  269.951285][    C0]  ? sysfs_add_file_mode_ns+0x238/0x300
[  269.951297][    C0]  ? internal_create_group+0x66d/0x1110
[  269.951309][    C0]  ? __pfx_internal_create_group+0x10/0x10
[  269.951320][    C0]  ? sysfs_create_groups+0x59/0x120
[  269.951329][    C0]  ? device_add_attrs+0xe0/0x5a0
[  269.951340][    C0]  ? __pfx_device_add_attrs+0x10/0x10
[  269.951350][    C0]  ? device_add_class_symlinks+0x21f/0x240
[  269.951359][    C0]  ? device_add+0x496/0xb50
[  269.951368][    C0]  ? netdev_register_kobject+0x178/0x310
[  269.951382][    C0]  ? register_netdevice+0x126c/0x1ae0
[  269.951397][    C0]  ? __pfx_register_netdevice+0x10/0x10
[  269.951412][    C0]  ? tun_set_iff+0x844/0xef0
[  269.951424][    C0]  ? __tun_chr_ioctl+0x788/0x1df0
[  269.951434][    C0]  ? __pfx___tun_chr_ioctl+0x10/0x10
[  269.951444][    C0]  ? __pfx_tun_chr_ioctl+0x10/0x10
[  269.951452][    C0]  ? __pfx_tun_chr_ioctl+0x10/0x10
[  269.951460][    C0]  ? __se_sys_ioctl+0xea/0x170
[  269.951469][    C0]  ? __pfx_tun_chr_ioctl+0x10/0x10
[  269.951477][    C0]  ? __se_sys_ioctl+0xfc/0x170
[  269.951485][    C0]  ? do_syscall_64+0xfa/0x3b0
[  269.951493][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.951500][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  269.951509][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.951521][    C0]  </TASK>
[  270.239714][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  270.241885][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-syzkaller-11113-gf3af62b6cee8-dirty #0 PREEMPT(full) 
[  270.245556][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  270.248542][   T34] Call Trace:
[  270.249600][   T34]  <TASK>
[  270.250533][   T34]  dump_stack_lvl+0x99/0x250
[  270.251991][   T34]  ? __asan_memcpy+0x40/0x70
[  270.253398][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  270.254965][   T34]  ? __pfx__printk+0x10/0x10
[  270.256447][   T34]  vpanic+0x27a/0x730
[  270.257705][   T34]  ? __pfx_vpanic+0x10/0x10
[  270.259126][   T34]  ? preempt_schedule+0xae/0xc0
[  270.260635][   T34]  ? preempt_schedule_common+0x83/0xd0
[  270.262328][   T34]  panic+0xb9/0xc0
[  270.263501][   T34]  ? __pfx_panic+0x10/0x10
[  270.264894][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  270.266550][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  270.268456][   T34]  watchdog+0xfd2/0xfe0
[  270.269762][   T34]  ? watchdog+0x1de/0xfe0
[  270.271128][   T34]  kthread+0x711/0x8a0
[  270.272400][   T34]  ? __pfx_watchdog+0x10/0x10
[  270.273864][   T34]  ? __pfx_kthread+0x10/0x10
[  270.275287][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  270.276857][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  270.278494][   T34]  ? __pfx_kthread+0x10/0x10
[  270.279932][   T34]  ret_from_fork+0x3fc/0x770
[  270.281402][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  270.283025][   T34]  ? __switch_to_asm+0x39/0x70
[  270.284559][   T34]  ? __switch_to_asm+0x33/0x70
[  270.286055][   T34]  ? __pfx_kthread+0x10/0x10
[  270.287519][   T34]  ret_from_fork_asm+0x1a/0x30
[  270.289048][   T34]  </TASK>
[  270.290593][   T34] Kernel Offset: disabled
[  270.291939][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
01:37:57  Registers:
info registers vcpu 0

CPU#0
RAX=ab6b15b4082f5c00 RBX=ffff88804b0269c0 RCX=ab6b15b4082f5c00 RDX=0000000000000003
RSI=ffffffff8d9b1631 RDI=0000000000000001 RBP=ffffc90000007e10 RSP=ffffc90000007c90
R8 =ffffffff8fa32437 R9 =1ffffffff1f46486 R10=dffffc0000000000 R11=fffffbfff1f46487
R12=ffff88804b0269c0 R13=1ffff92000000fac R14=ffffffff99fe3740 R15=ffffc90000007d60
RIP=ffffffff8b79e6a9 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f01b952c6c0 ffffffff 00c00000
GS =0000 ffff8880b862a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055c08617f778 CR3=000000011f99a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000082 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f620fd87d20
XMM02=0000000500000007 0000555500000001 XMM03=000055558531a1a0 000055558531a0f0
XMM04=0000000000000000 0000000000000016 XMM05=0000000000000000 000000000003bf12
XMM06=000055558531e960 0000555500000007 XMM07=0000555500000000 000055558531e810
XMM08=000055558531e760 0000555500000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffffffff8b79e347 RCX=bc7d2e2e443bf300 RDX=0000000000000000
RSI=ffffffff8b79e347 RDI=1ffffffff33998f5 RBP=ffffffff84ce40ea RSP=ffffc900089d7320
R8 =0000000000000001 R9 =0000000000000000 R10=dffffc0000000000 R11=fffffbfff1f46487
R12=0000000000000000 R13=ffffffff99ccc7a8 R14=ffffffff99ccc7a8 R15=0000000000000001
RIP=ffffffff8222dac6 RFL=00000806 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fee505b4380 ffffffff 00c00000
GS =0000 ffff8881a3c2a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055c086175df8 CR3=000000010c392000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000200000000300 DR3=0000200000000300 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
