last executing test programs:

16.916970078s ago: executing program 1 (id=653):
r0 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x72, &(0x7f0000000000), 0xc)

16.916814094s ago: executing program 1 (id=654):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e1209001b0000000401a80016000a0004", 0x37}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a4", 0x35}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a1180015000600149b000000120800030043000040a8002b", 0x33}], 0x1}, 0x20000880)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33)

16.80664763s ago: executing program 1 (id=655):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081)
recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000a00)=""/129, 0x81}], 0x1}, 0x2)

16.11680874s ago: executing program 2 (id=673):
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2')
close(r0)

16.11673768s ago: executing program 2 (id=674):
perf_event_open(&(0x7f00000004c0)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x10000, 0x3, 0x5, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8ac}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

16.067158914s ago: executing program 2 (id=675):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x1, 0x8, 0x0, 0x0)

16.066695044s ago: executing program 2 (id=677):
bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x1082, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x202, 0x400, 0x6, 0x0, 0x0, 0x0, 0xa9e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x6, 0x1, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x42, 0xfffffffe, 0x9, 0xfffffffffff7fffc}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x30044889)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x11082, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x40, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(r2)
r3 = socket$kcm(0x2, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20)
recvmsg(r3, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0)
close(r5)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d0800090002", 0x17}], 0x1}, 0x24004880)
ioctl$SIOCSIFHWADDR(r5, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})

15.997208589s ago: executing program 0 (id=678):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300", @ANYRES8=r0], 0xfe33)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000280)=@alg, 0x80, 0x0, 0x0, &(0x7f0000000580)=""/183, 0xb7}, 0x142)

15.99704985s ago: executing program 1 (id=679):
r0 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef400000000e3bd6efb440013030e001b000d000008ba8000001201", 0x2e}], 0x1}, 0x0)

15.947265756s ago: executing program 2 (id=680):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x30, 0x4, 0x2}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, &(0x7f0000000200), 0x0}, 0x20)

15.946949105s ago: executing program 2 (id=681):
perf_event_open(&(0x7f0000000040)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80, 0xffffffffffffffff}, 0x10000, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000002c0)="1400000029000b92d25a80648c2594070224fc60", 0x14}], 0x1}, 0x4000000)
socket$kcm(0x10, 0x100000000002, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getpid()
socket$kcm(0x21, 0x2, 0x2)
r3 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r3, 0x84, 0x84, &(0x7f0000000000), 0x90)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={0x0, 0x3}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r4 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r4, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast2}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001040)="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", 0x2cb}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x4)

15.946819056s ago: executing program 1 (id=682):
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x801, 0x2, 0x10, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x10)
r4 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x84, 0x23, &(0x7f0000000000)=r7, 0x8)

15.88565822s ago: executing program 0 (id=683):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000900), &(0x7f0000000940)=r0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r2, &(0x7f0000000500), 0x0}, 0x20)

15.885468277s ago: executing program 0 (id=684):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

15.858569885s ago: executing program 0 (id=685):
r0 = socket$kcm(0x15, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0)

429.774µs ago: executing program 0 (id=686):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000a1f70000000000000000000085000000270000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a3312779a", 0x0, 0x2f00, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x48)

225.808µs ago: executing program 0 (id=687):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000780)="d8000000100081044e81f782db44b904021d080005000000e8fe552603600e1209000d0000000401a80016000a00144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e4dc3b90317008e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db7010000e006dcdf63951f215ce3bb9ad809d5e1cace140efdc0272ae6089ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701000000000000000000", 0xd8}], 0x1}, 0x0)

46.546µs ago: executing program 1 (id=688):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)

18.84µs ago: executing program 32 (id=687):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000780)="d8000000100081044e81f782db44b904021d080005000000e8fe552603600e1209000d0000000401a80016000a00144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e4dc3b90317008e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db7010000e006dcdf63951f215ce3bb9ad809d5e1cace140efdc0272ae6089ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701000000000000000000", 0xd8}], 0x1}, 0x0)

0s ago: executing program 33 (id=688):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:32016' (ED25519) to the list of known hosts.
syzkaller login: [   48.212165][ T5818] cgroup: Unknown subsys name 'net'
[   48.331647][ T5818] cgroup: Unknown subsys name 'cpuset'
[   48.336296][ T5818] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.773165][ T5818] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.663697][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.667301][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.677920][ T5219] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.681387][ T5219] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.687831][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.697903][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.707511][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.710575][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.713073][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.715853][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.759447][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.762994][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.766384][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.776171][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.780238][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.938328][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   53.983291][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   54.030551][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   54.115468][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.119757][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.122497][ T5830] bridge_slave_0: entered allmulticast mode
[   54.125608][ T5830] bridge_slave_0: entered promiscuous mode
[   54.136688][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.139345][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.141768][ T5826] bridge_slave_0: entered allmulticast mode
[   54.144615][ T5826] bridge_slave_0: entered promiscuous mode
[   54.155917][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.159460][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.161872][ T5830] bridge_slave_1: entered allmulticast mode
[   54.164576][ T5830] bridge_slave_1: entered promiscuous mode
[   54.168105][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.170513][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.173068][ T5826] bridge_slave_1: entered allmulticast mode
[   54.175794][ T5826] bridge_slave_1: entered promiscuous mode
[   54.185037][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.187361][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.190004][ T5834] bridge_slave_0: entered allmulticast mode
[   54.192754][ T5834] bridge_slave_0: entered promiscuous mode
[   54.217548][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.221971][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.224664][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.227295][ T5834] bridge_slave_1: entered allmulticast mode
[   54.230733][ T5834] bridge_slave_1: entered promiscuous mode
[   54.250291][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.255364][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.275062][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.292415][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.296563][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.339290][ T5826] team0: Port device team_slave_0 added
[   54.350983][ T5830] team0: Port device team_slave_0 added
[   54.354770][ T5834] team0: Port device team_slave_0 added
[   54.357764][ T5826] team0: Port device team_slave_1 added
[   54.361003][ T5830] team0: Port device team_slave_1 added
[   54.364002][ T5834] team0: Port device team_slave_1 added
[   54.408991][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.411332][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.420234][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.426321][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.429116][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.437449][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.442347][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.444695][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.454822][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.460173][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.462470][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.471926][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.476891][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.480211][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.490630][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.499464][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.502406][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.512496][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.540262][ T5826] hsr_slave_0: entered promiscuous mode
[   54.542583][ T5826] hsr_slave_1: entered promiscuous mode
[   54.570932][ T5830] hsr_slave_0: entered promiscuous mode
[   54.573376][ T5830] hsr_slave_1: entered promiscuous mode
[   54.575486][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.578510][ T5830] Cannot create hsr debugfs directory
[   54.614060][ T5834] hsr_slave_0: entered promiscuous mode
[   54.617129][ T5834] hsr_slave_1: entered promiscuous mode
[   54.620718][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.623775][ T5834] Cannot create hsr debugfs directory
[   54.839866][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.846107][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.850555][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.860068][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   54.894421][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.902941][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.922490][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.929135][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.976472][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.985267][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.993342][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.998310][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.014032][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.049779][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   55.067170][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.069733][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.096069][ T5826] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   55.100113][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.105690][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.108110][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.129363][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.138294][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.155011][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   55.161310][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.164015][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.175705][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   55.190395][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.192857][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.215755][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.218255][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.222384][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.225468][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.281597][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.349770][ T5826] veth0_vlan: entered promiscuous mode
[   55.355673][ T5826] veth1_vlan: entered promiscuous mode
[   55.381378][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.386557][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.406252][ T5826] veth0_macvtap: entered promiscuous mode
[   55.417467][ T5826] veth1_macvtap: entered promiscuous mode
[   55.432271][ T5830] veth0_vlan: entered promiscuous mode
[   55.443687][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.454371][ T5830] veth1_vlan: entered promiscuous mode
[   55.464204][ T5834] veth0_vlan: entered promiscuous mode
[   55.470696][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.481253][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.484184][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.487012][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.491471][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.498948][ T5834] veth1_vlan: entered promiscuous mode
[   55.531819][ T5830] veth0_macvtap: entered promiscuous mode
[   55.542693][ T5830] veth1_macvtap: entered promiscuous mode
[   55.571997][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.585094][ T5834] veth0_macvtap: entered promiscuous mode
[   55.590697][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.594010][ T3065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.596607][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.596639][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.596650][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.605716][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.608839][ T3065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.613170][ T5834] veth1_macvtap: entered promiscuous mode
[   55.636755][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.649694][ T3065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.654554][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.657272][ T3065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.673530][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.676547][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.680782][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.683652][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.725717][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.736285][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.749454][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   55.779866][ T5829] Bluetooth: hci0: command tx timeout
[   55.779871][ T5833] Bluetooth: hci1: command tx timeout
[   55.784784][ T3065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.789306][ T3065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.815215][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.825053][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.845162][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.849483][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.858683][ T5829] Bluetooth: hci2: command tx timeout
[   55.887025][ T5890] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2'.
[   56.182334][ T5901] Illegal XDP return value 216881401 on prog  (id 3) dev N/A, expect packet loss!
[   56.211431][ T5907] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   56.310085][ T5913] netlink: 'syz.2.11': attribute type 10 has an invalid length.
[   56.313592][ T5913] macvlan0: entered promiscuous mode
[   56.315360][ T5913] macvlan0: entered allmulticast mode
[   56.326251][ T5913] veth1_vlan: entered allmulticast mode
[   56.331594][ T5913] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[   56.371555][ T5913] syz.2.11 (5913) used greatest stack depth: 20696 bytes left
[   56.402405][ T5919] netlink: 'syz.2.14': attribute type 15 has an invalid length.
[   56.404790][ T5919] netlink: 'syz.2.14': attribute type 7 has an invalid length.
[   56.407186][ T5919] netlink: 52 bytes leftover after parsing attributes in process `syz.2.14'.
[   56.710583][ T5937] netlink: 10 bytes leftover after parsing attributes in process `syz.1.22'.
[   56.819446][ T5940] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.23'.
[   56.826297][    C0] hrtimer: interrupt took 24062 ns
[   56.935400][ T5949] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.26'.
[   56.999365][ T5953] tap0: tun_chr_ioctl cmd 1074025677
[   57.001403][ T5953] tap0: linktype set to 780
[   57.011971][ T5955] netlink: 17 bytes leftover after parsing attributes in process `syz.0.30'.
[   57.015663][ T5955] netlink: zone id is out of range
[   57.019077][ T5955] netlink: zone id is out of range
[   57.020881][ T5955] netlink: zone id is out of range
[   57.022642][ T5955] netlink: zone id is out of range
[   57.024391][ T5955] netlink: zone id is out of range
[   57.026131][ T5955] netlink: zone id is out of range
[   57.039651][ T5955] netlink: zone id is out of range
[   57.041439][ T5955] netlink: zone id is out of range
[   57.043179][ T5955] netlink: zone id is out of range
[   57.045017][ T5955] netlink: zone id is out of range
[   57.414674][ T5981] Zero length message leads to an empty skb
[   57.859543][ T5829] Bluetooth: hci1: command tx timeout
[   57.859594][ T5833] Bluetooth: hci0: command tx timeout
[   57.939775][ T5833] Bluetooth: hci2: command tx timeout
[   58.568503][ T6057] netlink: 'syz.2.78': attribute type 21 has an invalid length.
[   58.712378][ T6057] netlink: 156 bytes leftover after parsing attributes in process `syz.2.78'.
[   59.696948][ T6086] bridge0: port 3(hsr_slave_1) entered blocking state
[   59.703256][ T6086] bridge0: port 3(hsr_slave_1) entered disabled state
[   59.705475][ T6086] hsr_slave_1: entered allmulticast mode
[   59.708862][ T6086] hsr_slave_1: left allmulticast mode
[   59.938431][ T5833] Bluetooth: hci1: command tx timeout
[   59.948265][ T5833] Bluetooth: hci0: command tx timeout
[   60.018149][ T5833] Bluetooth: hci2: command tx timeout
[   60.111269][ T6120] netlink: 160 bytes leftover after parsing attributes in process `syz.2.105'.
[   60.455454][ T6146] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.117'.
[   62.018185][ T5833] Bluetooth: hci0: command tx timeout
[   62.018977][ T5829] Bluetooth: hci1: command tx timeout
[   62.108233][ T5829] Bluetooth: hci2: command tx timeout
[   62.627986][ T6176] syz.0.130: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   62.632822][ T6176] CPU: 1 UID: 0 PID: 6176 Comm: syz.0.130 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[   62.632834][ T6176] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   62.632839][ T6176] Call Trace:
[   62.632843][ T6176]  <TASK>
[   62.632847][ T6176]  dump_stack_lvl+0x189/0x250
[   62.632861][ T6176]  ? __pfx_dump_stack_lvl+0x10/0x10
[   62.632872][ T6176]  ? __pfx__printk+0x10/0x10
[   62.632883][ T6176]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   62.632894][ T6176]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   62.632905][ T6176]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   62.632915][ T6176]  warn_alloc+0x214/0x310
[   62.632925][ T6176]  ? stack_depot_save_flags+0x429/0x900
[   62.632937][ T6176]  ? __pfx_warn_alloc+0x10/0x10
[   62.632946][ T6176]  ? kasan_save_track+0x4f/0x80
[   62.632958][ T6176]  ? xskq_create+0x56/0x170
[   62.632968][ T6176]  ? xsk_init_queue+0xb0/0x110
[   62.632976][ T6176]  ? xsk_setsockopt+0x4de/0x710
[   62.632984][ T6176]  ? do_sock_setsockopt+0x17c/0x1b0
[   62.632992][ T6176]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   62.633005][ T6176]  ? do_syscall_64+0xfa/0x3b0
[   62.633014][ T6176]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.633025][ T6176]  __vmalloc_node_range_noprof+0x125/0x12f0
[   62.633045][ T6176]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   62.633056][ T6176]  ? __kasan_kmalloc+0x93/0xb0
[   62.633065][ T6176]  vmalloc_user_noprof+0xad/0xf0
[   62.633089][ T6176]  ? xskq_create+0xbf/0x170
[   62.633102][ T6176]  xskq_create+0xbf/0x170
[   62.633113][ T6176]  xsk_init_queue+0xb0/0x110
[   62.633123][ T6176]  xsk_setsockopt+0x4de/0x710
[   62.633134][ T6176]  ? __pfx_xsk_setsockopt+0x10/0x10
[   62.633144][ T6176]  ? __fget_files+0x2a/0x420
[   62.633171][ T6176]  ? aa_sock_opt_perm+0x74/0x110
[   62.633185][ T6176]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   62.633195][ T6176]  ? __pfx_xsk_setsockopt+0x10/0x10
[   62.633204][ T6176]  do_sock_setsockopt+0x17c/0x1b0
[   62.633215][ T6176]  __x64_sys_setsockopt+0x13f/0x1b0
[   62.633225][ T6176]  do_syscall_64+0xfa/0x3b0
[   62.633234][ T6176]  ? lockdep_hardirqs_on+0x9c/0x150
[   62.633244][ T6176]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.633252][ T6176]  ? exc_page_fault+0x9f/0xf0
[   62.633263][ T6176]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.633271][ T6176] RIP: 0033:0x7fba9f98e9a9
[   62.633280][ T6176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   62.633287][ T6176] RSP: 002b:00007fbaa077d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   62.633296][ T6176] RAX: ffffffffffffffda RBX: 00007fba9fbb5fa0 RCX: 00007fba9f98e9a9
[   62.633301][ T6176] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006
[   62.633306][ T6176] RBP: 00007fba9fa10d69 R08: 0000000000000004 R09: 0000000000000000
[   62.633311][ T6176] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[   62.633316][ T6176] R13: 0000000000000000 R14: 00007fba9fbb5fa0 R15: 00007ffeedfb7248
[   62.633327][ T6176]  </TASK>
[   62.681936][ T6176] Mem-Info:
[   62.737422][ T6176] active_anon:5431 inactive_anon:0 isolated_anon:0
[   62.737422][ T6176]  active_file:913 inactive_file:38206 isolated_file:0
[   62.737422][ T6176]  unevictable:1768 dirty:1407 writeback:0
[   62.737422][ T6176]  slab_reclaimable:9020 slab_unreclaimable:52501
[   62.737422][ T6176]  mapped:18033 shmem:2435 pagetables:951
[   62.737422][ T6176]  sec_pagetables:0 bounce:0
[   62.737422][ T6176]  kernel_misc_reclaimable:0
[   62.737422][ T6176]  free:297535 free_pcp:21362 free_cma:0
[   62.753871][ T6176] Node 0 active_anon:14108kB inactive_anon:0kB active_file:3064kB inactive_file:128780kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:33568kB dirty:5432kB writeback:0kB shmem:4540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5460kB pagetables:1808kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   62.766821][ T6176] Node 1 active_anon:7616kB inactive_anon:0kB active_file:588kB inactive_file:24044kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38564kB dirty:196kB writeback:0kB shmem:5200kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5796kB pagetables:1996kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   62.779717][ T6176] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   62.789029][ T6176] lowmem_reserve[]: 0 812 812 812 812
[   62.791081][ T6176] Node 0 DMA32 free:287536kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14108kB inactive_anon:0kB active_file:3064kB inactive_file:128780kB unevictable:3536kB writepending:5432kB present:1556484kB managed:831912kB mlocked:0kB bounce:0kB free_pcp:43812kB local_pcp:28972kB free_cma:0kB
[   62.803289][ T6176] lowmem_reserve[]: 0 0 0 0 0
[   62.804899][ T6176] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[   62.814620][ T6176] lowmem_reserve[]: 0 0 854 854 854
[   62.816394][ T6176] Node 1 Normal free:428752kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7616kB inactive_anon:0kB active_file:588kB inactive_file:24044kB unevictable:3536kB writepending:196kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:41476kB local_pcp:22544kB free_cma:0kB
[   62.828223][ T6176] lowmem_reserve[]: 0 0 0 0 0
[   62.829894][ T6176] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   62.833909][ T6176] Node 0 DMA32: 1170*4kB (UME) 243*8kB (UM) 159*16kB (UM) 133*32kB (UME) 50*64kB (UME) 8*128kB (UM) 6*256kB (UME) 4*512kB (M) 4*1024kB (UM) 4*2048kB (UM) 62*4096kB (M) = 287472kB
[   62.841208][ T6176] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   62.846883][ T6176] Node 1 Normal: 96*4kB (ME) 128*8kB (UME) 99*16kB (UM) 46*32kB (ME) 25*64kB (UM) 16*128kB (UM) 7*256kB (UME) 2*512kB (ME) 6*1024kB (UM) 3*2048kB (UME) 99*4096kB (UM) = 428720kB
[   62.853302][ T6176] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   62.856264][ T6176] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   62.859606][ T6176] 41554 total pagecache pages
[   62.861460][ T6176] 0 pages in swap cache
[   62.863243][ T6176] Free swap  = 124996kB
[   62.864856][ T6176] Total swap = 124996kB
[   62.866222][ T6176] 786301 pages RAM
[   62.867425][ T6176] 0 pages HighMem/MovableOnly
[   62.869684][ T6176] 241075 pages reserved
[   62.871092][ T6176] 0 pages cma reserved
[   63.612352][ T6181] netlink: 60 bytes leftover after parsing attributes in process `syz.1.132'.
[   63.615440][ T6180] netlink: 60 bytes leftover after parsing attributes in process `syz.1.132'.
[   63.620679][ T6180] netlink: 60 bytes leftover after parsing attributes in process `syz.1.132'.
[   63.777514][ T6195] netlink: 'syz.2.139': attribute type 3 has an invalid length.
[   63.784471][ T6195] netlink: 'syz.2.139': attribute type 1 has an invalid length.
[   63.786956][ T6195] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.139'.
[   63.847134][ T6196] net_ratelimit: 72 callbacks suppressed
[   63.847169][ T6196] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   64.031168][ T6201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.141'.
[   64.036873][ T6196] syz.1.137 (6196) used greatest stack depth: 20136 bytes left
[   64.040536][ T6201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.141'.
[   64.043889][ T6201] netlink: 33 bytes leftover after parsing attributes in process `syz.0.141'.
[   64.047132][ T6201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.141'.
[   64.051368][ T6201] netlink: 33 bytes leftover after parsing attributes in process `syz.0.141'.
[   64.255491][ T6222] netlink: 'syz.1.151': attribute type 10 has an invalid length.
[   64.258501][ T6222] netlink: 40 bytes leftover after parsing attributes in process `syz.1.151'.
[   64.262218][ T6220] wg2: entered promiscuous mode
[   64.263846][ T6220] wg2: entered allmulticast mode
[   64.270124][ T6222] veth0_vlan: entered allmulticast mode
[   64.273927][ T6222] bridge0: port 3(veth0_vlan) entered blocking state
[   64.279385][ T6222] bridge0: port 3(veth0_vlan) entered disabled state
[   64.288982][ T6222] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[   64.304244][ T6224] netlink: 'syz.0.152': attribute type 1 has an invalid length.
[   68.516470][ T6265] netlink: 'syz.1.171': attribute type 1 has an invalid length.
[   69.563810][ T6284] netlink: 'syz.1.180': attribute type 10 has an invalid length.
[   69.601468][ T6284] team0: Device hsr_slave_0 failed to register rx_handler
[   69.806233][ T6284] syz.1.180 (6284) used greatest stack depth: 20048 bytes left
[   69.809763][ T6300] __nla_validate_parse: 1 callbacks suppressed
[   69.809771][ T6300] netlink: 2 bytes leftover after parsing attributes in process `syz.2.186'.
[   69.900734][ T6312] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.193'.
[   70.094784][ T6322] netlink: 'syz.0.196': attribute type 1 has an invalid length.
[   70.097306][ T6322] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.196'.
[   70.241986][ T6333] netlink: 'syz.0.201': attribute type 5 has an invalid length.
[   70.276601][ T6335] netlink: 'syz.1.202': attribute type 5 has an invalid length.
[   70.279270][ T6335] netlink: 168 bytes leftover after parsing attributes in process `syz.1.202'.
[   70.388154][ T5829] Bluetooth: hci2: unexpected subevent 0x19 length: 150 > 28
[   70.390874][ T5829] Bluetooth: hci2: Unable to find connection with handle 0x0000
[   70.910102][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   70.912220][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.296534][ T6353] netlink: 'syz.0.211': attribute type 3 has an invalid length.
[   71.299296][ T6353] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.211'.
[   71.441979][ T6363] syzkaller0: entered promiscuous mode
[   71.443858][ T6363] syzkaller0: entered allmulticast mode
[   71.826821][ T6382] netlink: 'syz.2.224': attribute type 10 has an invalid length.
[   71.970475][ T6386] netlink: 'syz.1.225': attribute type 10 has an invalid length.
[   71.973180][ T6386] netlink: 2 bytes leftover after parsing attributes in process `syz.1.225'.
[   72.160254][ T6382] batman_adv: batadv0: Adding interface: team0
[   72.162330][ T6382] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.171612][ T6382] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[   72.175287][ T6386] team0: entered promiscuous mode
[   72.178429][ T6386] team_slave_0: entered promiscuous mode
[   72.180883][ T6386] team_slave_1: entered promiscuous mode
[   72.187508][ T6386] bridge0: port 3(team0) entered blocking state
[   72.193951][ T6386] bridge0: port 3(team0) entered disabled state
[   72.196859][ T6386] team0: entered allmulticast mode
[   72.199971][ T6386] team_slave_0: entered allmulticast mode
[   72.202355][ T6386] team_slave_1: entered allmulticast mode
[   72.222215][ T6386] bridge0: port 3(team0) entered blocking state
[   72.225164][ T6386] bridge0: port 3(team0) entered forwarding state
[   72.828844][ T6425] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.243'.
[   73.054993][ T6448] sock: sock_timestamping_bind_phc: sock not bind to device
[   73.283489][ T6462] netlink: 128 bytes leftover after parsing attributes in process `syz.2.261'.
[   73.286504][ T6462] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   74.125650][ T6485] netlink: 'syz.0.272': attribute type 31 has an invalid length.
[   74.823719][ T6550] netlink: 68 bytes leftover after parsing attributes in process `syz.1.304'.
[   78.747286][ T6618] netlink: 16 bytes leftover after parsing attributes in process `syz.0.335'.
[   78.760717][ T6618] netlink: 'syz.0.335': attribute type 3 has an invalid length.
[   78.763176][ T6618] netlink: 152 bytes leftover after parsing attributes in process `syz.0.335'.
[   78.794923][ T6626] IPv6: Can't replace route, no match found
[   78.842724][ T6632] syz.2.343 uses obsolete (PF_INET,SOCK_PACKET)
[   78.941969][ T6642] netlink: 17 bytes leftover after parsing attributes in process `syz.1.348'.
[   78.945086][ T6642] netlink: zone id is out of range
[   78.946810][ T6642] netlink: zone id is out of range
[   78.948619][ T6642] netlink: zone id is out of range
[   78.951207][ T6642] netlink: zone id is out of range
[   78.952943][ T6642] netlink: zone id is out of range
[   78.954598][ T6642] netlink: zone id is out of range
[   78.956490][ T6642] netlink: zone id is out of range
[   78.966239][ T6642] netlink: zone id is out of range
[   78.973850][ T6642] netlink: zone id is out of range
[   78.975520][ T6642] netlink: zone id is out of range
[   79.323086][ T6669] netlink: 2451 bytes leftover after parsing attributes in process `syz.1.360'.
[   79.351245][ T6671] netlink: 'syz.1.361': attribute type 10 has an invalid length.
[   79.363250][ T6671] bridge0: port 3(team0) entered disabled state
[   79.365749][ T6671] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.370690][ T6671] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.393281][ T6671] bridge0: port 3(team0) entered blocking state
[   79.395650][ T6671] bridge0: port 3(team0) entered forwarding state
[   79.398395][ T6671] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.400911][ T6671] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.403630][ T6671] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.406101][ T6671] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.421398][ T6671] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   79.947319][ T6701] netlink: 60 bytes leftover after parsing attributes in process `syz.0.374'.
[   80.133439][ T6723] netlink: 'syz.2.385': attribute type 1 has an invalid length.
[   80.134529][ T6721] netlink: 'syz.1.384': attribute type 10 has an invalid length.
[   80.182660][ T6721] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   81.140766][  T971] cfg80211: failed to load regulatory.db
[   81.475444][ T6784] netlink: 'syz.2.415': attribute type 10 has an invalid length.
[   81.532827][ T6784] team0: Device veth1_vlan failed to register rx_handler
[   81.562481][ T6784] syz.2.415 (6784) used greatest stack depth: 19344 bytes left
[   81.614327][ T6790] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.416'.
[   81.682040][ T6794] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   82.289026][ T6819] netlink: 830 bytes leftover after parsing attributes in process `syz.2.430'.
[   82.843266][ T6829] netlink: 'syz.0.434': attribute type 10 has an invalid length.
[   83.609809][ T6884] netlink: 'syz.0.460': attribute type 29 has an invalid length.
[   83.634790][ T6886] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.461'.
[   85.066483][ T6919] netlink: 830 bytes leftover after parsing attributes in process `syz.0.477'.
[   85.271837][ T6931] netlink: 'syz.2.482': attribute type 21 has an invalid length.
[   85.317229][ T6937] netlink: 132 bytes leftover after parsing attributes in process `syz.1.485'.
[   85.359732][ T6939] netlink: 'syz.2.487': attribute type 4 has an invalid length.
[   85.922161][ T6976] netlink: 'syz.1.503': attribute type 21 has an invalid length.
[   85.924661][ T6976] netlink: 'syz.1.503': attribute type 6 has an invalid length.
[   85.927012][ T6976] netlink: 132 bytes leftover after parsing attributes in process `syz.1.503'.
[   87.114926][ T6990] warning: `syz.1.508' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   87.540845][ T7026] netlink: 'syz.2.526': attribute type 39 has an invalid length.
[   87.598837][ T7033] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.529'.
[   87.693861][ T7041] netlink: 'syz.1.533': attribute type 2 has an invalid length.
[   87.696331][ T7041] netlink: 'syz.1.533': attribute type 8 has an invalid length.
[   87.700466][ T7041] netlink: 132 bytes leftover after parsing attributes in process `syz.1.533'.
[   87.951443][ T5829] Bluetooth: hci1: unexpected event 0x30 length: 15 > 3
[   87.962589][ T7049] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   88.027340][ T7053] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   88.032149][ T7053] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   88.968232][ T7053] syz.1.538 (7053) used greatest stack depth: 18448 bytes left
[   89.011364][ T7102] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.561'.
[   89.014344][ T7102] net_ratelimit: 78 callbacks suppressed
[   89.014352][ T7102] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   89.018758][ T7102] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   89.096572][ T7104] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   89.102970][ T7104] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   89.151482][ T7108] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   89.670393][ T5829] Bluetooth: hci0: unknown advertising packet type: 0xff
[   89.670432][ T5829] Bluetooth: hci0: unknown advertising packet type: 0x80
[   89.673112][ T5829] Bluetooth: hci0: unknown advertising packet type: 0x09
[   89.675335][ T5829] Bluetooth: hci0: Malformed LE Event: 0x02
[   90.166518][ T7169] netlink: 'syz.2.593': attribute type 21 has an invalid length.
[   90.419598][   T26] wlan1: Trigger new scan to find an IBSS to join
[   91.101508][ T7239] netlink: 'syz.0.623': attribute type 11 has an invalid length.
[   91.170990][ T7243] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.625'.
[   92.661593][ T7278] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.640'.
[   92.762074][ T7282] netlink: 14 bytes leftover after parsing attributes in process `syz.0.642'.
[   92.877527][ T7282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   92.885574][ T7282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   92.890949][ T7282] bond0 (unregistering): Released all slaves
[   92.929836][ T7285] netlink: 'syz.2.643': attribute type 39 has an invalid length.
[   93.213756][ T7307] C: renamed from team_slave_0 (while UP)
[   93.246076][ T7307] netlink: 'syz.1.654': attribute type 4 has an invalid length.
[   93.249089][ T7307] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   93.397203][ T7314] delete_channel: no stack
[   93.542964][ T7328] netlink: 'syz.2.663': attribute type 2 has an invalid length.
[   93.713662][ T7335] netlink: 'syz.2.666': attribute type 6 has an invalid length.
[   93.716234][ T7335] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.666'.
[   94.005427][ T7350] netlink: 'syz.0.672': attribute type 9 has an invalid length.
[   94.008487][ T7350] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.672'.
[   94.113853][ T7360] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.678'.
[   94.151456][ T7362] netlink: 'syz.1.679': attribute type 27 has an invalid length.
[   94.195507][ T7366] nbd: must specify an index to disconnect
[   94.417717][ T6250] wlan1: Trigger new scan to find an IBSS to join
[   94.486040][ T7381] netlink: 'syz.0.687': attribute type 13 has an invalid length.
[   94.486060][ T7381] netlink: 160 bytes leftover after parsing attributes in process `syz.0.687'.
[  180.498498][ T5832] Bluetooth: hci1: command 0x0406 tx timeout
[  180.498566][ T5832] Bluetooth: hci0: command 0x0406 tx timeout
[  199.197580][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  199.197646][    C1] rcu: 	1-....: (10500 ticks this GP) idle=1ac4/1/0x4000000000000000 softirq=19687/19687 fqs=5249
[  199.197930][    C1] rcu: 	         hardirqs   softirqs   csw/system
[  199.197937][    C1] rcu: 	 number:  1021961          0            0
[  199.197944][    C1] rcu: 	cputime:    24054      28444           83   ==> 52500(ms)
[  199.197952][    C1] rcu: 	(t=10501 jiffies g=11089 q=1598 ncpus=2)
[  199.197964][    C1] CPU: 1 UID: 0 PID: 7366 Comm: syz.2.681 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  199.197973][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  199.197977][    C1] RIP: 0010:__rcu_read_unlock+0x84/0xe0
[  199.197992][    C1] Code: b6 04 3c 84 c0 75 41 8b 03 3d 00 00 00 40 73 0f 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc cc 90 0f 0b 90 eb eb e8 6c 00 00 00 <eb> d2 89 d9 80 e1 07 80 c1 03 38 c1 7c a5 49 89 fe 48 89 df e8 63
[  199.197998][    C1] RSP: 0018:ffffc900001e0c38 EFLAGS: 00000246
[  199.198005][    C1] RAX: 64e67e56e638ed00 RBX: ffff888020042104 RCX: 64e67e56e638ed00
[  199.198010][    C1] RDX: 0000000000000002 RSI: ffffffff8d998701 RDI: ffffffff8be29f80
[  199.198014][    C1] RBP: 0000000000019000 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  199.198018][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 1ffff11004008420
[  199.198023][    C1] R13: dffffc0000000000 R14: ffff888020042108 R15: dffffc0000000000
[  199.198027][    C1] FS:  00007f4733e566c0(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
[  199.198033][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  199.198037][    C1] CR2: 0000000000000004 CR3: 000000002294a000 CR4: 00000000000006f0
[  199.198065][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  199.198070][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  199.198074][    C1] Call Trace:
[  199.198077][    C1]  <IRQ>
[  199.198082][    C1]  mac80211_hwsim_beacon+0xbb/0x1c0
[  199.198093][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  199.198100][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  199.198117][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  199.198129][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  199.198138][    C1]  handle_softirqs+0x286/0x870
[  199.198148][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  199.198158][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  199.198167][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  199.198178][    C1]  __irq_exit_rcu+0xca/0x1f0
[  199.198185][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  199.198197][    C1]  irq_exit_rcu+0x9/0x30
[  199.198203][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  199.198212][    C1]  </IRQ>
[  199.198214][    C1]  <TASK>
[  199.198217][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  199.198224][    C1] RIP: 0010:console_flush_all+0x7f7/0xc40
[  199.198233][    C1] Code: 48 21 c3 0f 85 e9 01 00 00 e8 75 e7 1e 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 66 e7 1e 00 eb 06 e8 5f e7 1e 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 ea 0a 82 00 48 8b 1b 48 8b 44 24
[  199.198238][    C1] RSP: 0018:ffffc9000398ef40 EFLAGS: 00000283
[  199.198243][    C1] RAX: 1ffffffff1d36927 RBX: ffffffff8e9b4938 RCX: 0000000000080000
[  199.198248][    C1] RDX: ffffc9000912d000 RSI: 00000000000005e9 RDI: 00000000000005ea
[  199.198252][    C1] RBP: ffffc9000398f090 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  199.198256][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: dffffc0000000000
[  199.198260][    C1] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8e9b48e0
[  199.198274][    C1]  ? console_flush_all+0x13a/0xc40
[  199.198285][    C1]  ? __pfx_console_flush_all+0x10/0x10
[  199.198298][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  199.198310][    C1]  console_unlock+0xc4/0x270
[  199.198319][    C1]  ? __pfx_console_unlock+0x10/0x10
[  199.198329][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  199.198340][    C1]  vprintk_emit+0x5b7/0x7a0
[  199.198349][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  199.198361][    C1]  ? vprintk_default+0x12/0x30
[  199.198372][    C1]  _printk+0xcf/0x120
[  199.198383][    C1]  ? __pfx__printk+0x10/0x10
[  199.198391][    C1]  ? apparmor_capable+0x137/0x1b0
[  199.198399][    C1]  ? bpf_lsm_capable+0x9/0x20
[  199.198405][    C1]  ? security_capable+0x7e/0x2e0
[  199.198417][    C1]  nbd_genl_disconnect+0x46e/0x570
[  199.198427][    C1]  ? __nla_parse+0x40/0x60
[  199.198437][    C1]  ? __pfx_nbd_genl_disconnect+0x10/0x10
[  199.198447][    C1]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  199.198460][    C1]  genl_family_rcv_msg_doit+0x215/0x300
[  199.198471][    C1]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  199.198489][    C1]  genl_rcv_msg+0x60e/0x790
[  199.198500][    C1]  ? __pfx_genl_rcv_msg+0x10/0x10
[  199.198507][    C1]  ? ref_tracker_free+0x63a/0x7d0
[  199.198515][    C1]  ? __pfx_nbd_genl_disconnect+0x10/0x10
[  199.198525][    C1]  ? __pfx_ref_tracker_free+0x10/0x10
[  199.198538][    C1]  netlink_rcv_skb+0x208/0x470
[  199.198545][    C1]  ? __pfx_genl_rcv_msg+0x10/0x10
[  199.198554][    C1]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  199.198568][    C1]  ? down_read+0x1ad/0x2e0
[  199.198580][    C1]  genl_rcv+0x28/0x40
[  199.198589][    C1]  netlink_unicast+0x75c/0x8e0
[  199.198603][    C1]  netlink_sendmsg+0x805/0xb30
[  199.198613][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  199.198622][    C1]  ? aa_sock_msg_perm+0x94/0x160
[  199.198631][    C1]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  199.198640][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  199.198647][    C1]  __sock_sendmsg+0x21c/0x270
[  199.198658][    C1]  ____sys_sendmsg+0x505/0x830
[  199.198669][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[  199.198680][    C1]  ? import_iovec+0x74/0xa0
[  199.198689][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  199.198698][    C1]  ? __pfx____sys_sendmsg+0x10/0x10
[  199.198720][    C1]  ? __fget_files+0x2a/0x420
[  199.198729][    C1]  ? __fget_files+0x3a0/0x420
[  199.198773][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  199.198782][    C1]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  199.198791][    C1]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  199.198806][    C1]  ? do_syscall_64+0xbe/0x3b0
[  199.198817][    C1]  do_syscall_64+0xfa/0x3b0
[  199.198826][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.198837][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  199.198846][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.198852][    C1] RIP: 0033:0x7f4732f8e9a9
[  199.198859][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  199.198864][    C1] RSP: 002b:00007f4733e56038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  199.198871][    C1] RAX: ffffffffffffffda RBX: 00007f47331b5fa0 RCX: 00007f4732f8e9a9
[  199.198875][    C1] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000007
[  199.198879][    C1] RBP: 00007f4733010d69 R08: 0000000000000000 R09: 0000000000000000
[  199.198883][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  199.198887][    C1] R13: 0000000000000000 R14: 00007f47331b5fa0 R15: 00007ffceb7e64e8
[  199.198898][    C1]  </TASK>
[  229.618215][   T18] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 13541 jiffies s: 5149 root: 0x2/.
[  229.618242][   T18] rcu: blocking rcu_node structures (internal RCU debug):
[  229.618251][   T18] Sending NMI from CPU 0 to CPUs 1:
[  229.618305][    C1] NMI backtrace for cpu 1
[  229.618315][    C1] CPU: 1 UID: 0 PID: 7366 Comm: syz.2.681 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  229.618324][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  229.618329][    C1] RIP: 0010:native_apic_msr_write+0x39/0x50
[  229.618342][    C1] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 cc cc cc cc cc f3 0f 1e fa 89 f6 31 d2 e9 e2 d0 86 03 66
[  229.618348][    C1] RSP: 0018:ffffc900001e06a8 EFLAGS: 00000046
[  229.618355][    C1] RAX: 00000000000000f6 RBX: 0000000000000200 RCX: 000000000000083f
[  229.618360][    C1] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f
[  229.618364][    C1] RBP: ffffc900001e0778 R08: ffffc900001e0707 R09: 1ffff9200003c0e0
[  229.618368][    C1] R10: dffffc0000000000 R11: fffff5200003c0e1 R12: ffff88813663af01
[  229.618373][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8881366314f0
[  229.618377][    C1] FS:  00007f4733e566c0(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
[  229.618382][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  229.618387][    C1] CR2: 0000000000000004 CR3: 000000002294a000 CR4: 00000000000006f0
[  229.618411][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  229.618417][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  229.618454][    C1] Call Trace:
[  229.618458][    C1]  <IRQ>
[  229.618461][    C1]  arch_irq_work_raise+0x6d/0x80
[  229.618469][    C1]  __irq_work_queue_local+0x1d7/0x550
[  229.618477][    C1]  ? __pfx___irq_work_queue_local+0x10/0x10
[  229.618483][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  229.618491][    C1]  ? __phys_addr+0xd3/0x180
[  229.618500][    C1]  irq_work_queue_on+0x122/0x230
[  229.618506][    C1]  rcu_read_unlock_special+0x3ab/0x4c0
[  229.618516][    C1]  ? __lock_acquire+0xab9/0xd20
[  229.618523][    C1]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  229.618532][    C1]  ? trace_call_bpf+0xb7/0x850
[  229.618543][    C1]  __rcu_read_unlock+0x84/0xe0
[  229.618552][    C1]  ? trace_call_bpf+0xb7/0x850
[  229.618558][    C1]  trace_call_bpf+0x5ae/0x850
[  229.618564][    C1]  ? trace_call_bpf+0xb7/0x850
[  229.618570][    C1]  ? do_raw_spin_unlock+0x4d/0x240
[  229.618579][    C1]  ? __pfx_trace_call_bpf+0x10/0x10
[  229.618585][    C1]  ? kvm_sched_clock_read+0x11/0x20
[  229.618593][    C1]  ? sched_clock_cpu+0x74/0x430
[  229.618601][    C1]  perf_trace_run_bpf_submit+0x78/0x170
[  229.618610][    C1]  perf_trace_preemptirq_template+0x280/0x340
[  229.618621][    C1]  ? irqentry_enter+0x3d/0x60
[  229.618628][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  229.618638][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  229.618645][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  229.618652][    C1]  ? irqentry_enter+0x3d/0x60
[  229.618665][    C1]  trace_irq_disable+0xee/0x110
[  229.618678][    C1]  irqentry_enter+0x3d/0x60
[  229.618690][    C1]  sysvec_apic_timer_interrupt+0xe/0xc0
[  229.618701][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  229.618709][    C1] RIP: 0010:__rcu_read_unlock+0x84/0xe0
[  229.618718][    C1] Code: b6 04 3c 84 c0 75 41 8b 03 3d 00 00 00 40 73 0f 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc cc 90 0f 0b 90 eb eb e8 6c 00 00 00 <eb> d2 89 d9 80 e1 07 80 c1 03 38 c1 7c a5 49 89 fe 48 89 df e8 63
[  229.618723][    C1] RSP: 0018:ffffc900001e0c38 EFLAGS: 00000246
[  229.618729][    C1] RAX: 64e67e56e638ed00 RBX: ffff888020042104 RCX: 64e67e56e638ed00
[  229.618734][    C1] RDX: 0000000000000002 RSI: ffffffff8d998701 RDI: ffffffff8be29f80
[  229.618738][    C1] RBP: 0000000000019000 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  229.618742][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 1ffff11004008420
[  229.618746][    C1] R13: dffffc0000000000 R14: ffff888020042108 R15: dffffc0000000000
[  229.618754][    C1]  ? __rcu_read_unlock+0x84/0xe0
[  229.618763][    C1]  mac80211_hwsim_beacon+0xbb/0x1c0
[  229.618771][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  229.618778][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  229.618789][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  229.618798][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  229.618806][    C1]  handle_softirqs+0x286/0x870
[  229.618814][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  229.618822][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  229.618829][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  229.618839][    C1]  __irq_exit_rcu+0xca/0x1f0
[  229.618845][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  229.618854][    C1]  irq_exit_rcu+0x9/0x30
[  229.618860][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  229.618868][    C1]  </IRQ>
[  229.618870][    C1]  <TASK>
[  229.618872][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  229.618879][    C1] RIP: 0010:console_flush_all+0x7f7/0xc40
[  229.618887][    C1] Code: 48 21 c3 0f 85 e9 01 00 00 e8 75 e7 1e 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 66 e7 1e 00 eb 06 e8 5f e7 1e 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 ea 0a 82 00 48 8b 1b 48 8b 44 24
[  229.618892][    C1] RSP: 0018:ffffc9000398ef40 EFLAGS: 00000283
[  229.618897][    C1] RAX: 1ffffffff1d36927 RBX: ffffffff8e9b4938 RCX: 0000000000080000
[  229.618901][    C1] RDX: ffffc9000912d000 RSI: 00000000000005e9 RDI: 00000000000005ea
[  229.618906][    C1] RBP: ffffc9000398f090 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  229.618910][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: dffffc0000000000
[  229.618914][    C1] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8e9b48e0
[  229.618922][    C1]  ? console_flush_all+0x13a/0xc40
[  229.618931][    C1]  ? __pfx_console_flush_all+0x10/0x10
[  229.618941][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  229.618951][    C1]  console_unlock+0xc4/0x270
[  229.618959][    C1]  ? __pfx_console_unlock+0x10/0x10
[  229.618967][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  229.618976][    C1]  vprintk_emit+0x5b7/0x7a0
[  229.618984][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  229.618993][    C1]  ? vprintk_default+0x12/0x30
[  229.619002][    C1]  _printk+0xcf/0x120
[  229.619012][    C1]  ? __pfx__printk+0x10/0x10
[  229.619019][    C1]  ? apparmor_capable+0x137/0x1b0
[  229.619026][    C1]  ? bpf_lsm_capable+0x9/0x20
[  229.619032][    C1]  ? security_capable+0x7e/0x2e0
[  229.619042][    C1]  nbd_genl_disconnect+0x46e/0x570
[  229.619052][    C1]  ? __nla_parse+0x40/0x60
[  229.619061][    C1]  ? __pfx_nbd_genl_disconnect+0x10/0x10
[  229.619070][    C1]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  229.619080][    C1]  genl_family_rcv_msg_doit+0x215/0x300
[  229.619090][    C1]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  229.619102][    C1]  genl_rcv_msg+0x60e/0x790
[  229.619110][    C1]  ? __pfx_genl_rcv_msg+0x10/0x10
[  229.619117][    C1]  ? ref_tracker_free+0x63a/0x7d0
[  229.619125][    C1]  ? __pfx_nbd_genl_disconnect+0x10/0x10
[  229.619134][    C1]  ? __pfx_ref_tracker_free+0x10/0x10
[  229.619144][    C1]  netlink_rcv_skb+0x208/0x470
[  229.619150][    C1]  ? __pfx_genl_rcv_msg+0x10/0x10
[  229.619158][    C1]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  229.619167][    C1]  ? down_read+0x1ad/0x2e0
[  229.619176][    C1]  genl_rcv+0x28/0x40
[  229.619183][    C1]  netlink_unicast+0x75c/0x8e0
[  229.619194][    C1]  netlink_sendmsg+0x805/0xb30
[  229.619202][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  229.619209][    C1]  ? aa_sock_msg_perm+0x94/0x160
[  229.619218][    C1]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  229.619225][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  229.619231][    C1]  __sock_sendmsg+0x21c/0x270
[  229.619241][    C1]  ____sys_sendmsg+0x505/0x830
[  229.619250][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[  229.619258][    C1]  ? import_iovec+0x74/0xa0
[  229.619265][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  229.619272][    C1]  ? __pfx____sys_sendmsg+0x10/0x10
[  229.619290][    C1]  ? __fget_files+0x2a/0x420
[  229.619297][    C1]  ? __fget_files+0x3a0/0x420
[  229.619306][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  229.619312][    C1]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  229.619320][    C1]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  229.619330][    C1]  ? do_syscall_64+0xbe/0x3b0
[  229.619339][    C1]  do_syscall_64+0xfa/0x3b0
[  229.619347][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.619353][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  229.619360][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.619366][    C1] RIP: 0033:0x7f4732f8e9a9
[  229.619373][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  229.619378][    C1] RSP: 002b:00007f4733e56038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  229.619385][    C1] RAX: ffffffffffffffda RBX: 00007f47331b5fa0 RCX: 00007f4732f8e9a9
[  229.619389][    C1] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000007
[  229.619393][    C1] RBP: 00007f4733010d69 R08: 0000000000000000 R09: 0000000000000000
[  229.619396][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  229.619400][    C1] R13: 0000000000000000 R14: 00007f47331b5fa0 R15: 00007ffceb7e64e8
[  229.619407][    C1]  </TASK>
[  252.657698][   T34] INFO: task kworker/u9:0:26 blocked for more than 143 seconds.
[  252.657721][   T34]       Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0
[  252.657730][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  252.657737][   T34] task:kworker/u9:0    state:D stack:23752 pid:26    tgid:26    ppid:2      task_flags:0x4208060 flags:0x00004000
[  252.657775][   T34] Workqueue: events_unbound bpf_map_free_deferred
[  252.657799][   T34] Call Trace:
[  252.657805][   T34]  <TASK>
[  252.657816][   T34]  __schedule+0x16f5/0x4d00
[  252.657840][   T34]  ? __lock_acquire+0xab9/0xd20
[  252.657855][   T34]  ? schedule+0x165/0x360
[  252.657872][   T34]  ? __pfx___schedule+0x10/0x10
[  252.657895][   T34]  ? schedule+0x91/0x360
[  252.657911][   T34]  schedule+0x165/0x360
[  252.657927][   T34]  schedule_preempt_disabled+0x13/0x30
[  252.657940][   T34]  __mutex_lock+0x724/0xe80
[  252.657957][   T34]  ? __mutex_lock+0x51b/0xe80
[  252.657975][   T34]  ? synchronize_rcu_expedited+0x3b9/0x730
[  252.657993][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  252.658016][   T34]  ? do_raw_spin_unlock+0x4d/0x240
[  252.658040][   T34]  synchronize_rcu_expedited+0x3b9/0x730
[  252.658056][   T34]  ? __pfx_synchronize_rcu_expedited+0x10/0x10
[  252.658082][   T34]  ? __pfx___might_resched+0x10/0x10
[  252.658107][   T34]  synchronize_rcu+0x11a/0x310
[  252.658121][   T34]  ? __pfx_synchronize_rcu+0x10/0x10
[  252.658143][   T34]  sock_hash_free+0x86/0x7d0
[  252.658159][   T34]  ? percpu_ref_put+0x1e/0x230
[  252.658200][   T34]  ? __pfx_sock_hash_free+0x10/0x10
[  252.658217][   T34]  ? percpu_ref_put+0x1e/0x230
[  252.658239][   T34]  bpf_map_free_deferred+0xed/0x110
[  252.658255][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  252.658270][   T34]  process_scheduled_works+0xae1/0x17b0
[  252.658301][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  252.658325][   T34]  worker_thread+0x8a0/0xda0
[  252.658355][   T34]  kthread+0x711/0x8a0
[  252.658373][   T34]  ? __pfx_worker_thread+0x10/0x10
[  252.658387][   T34]  ? __pfx_kthread+0x10/0x10
[  252.658404][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  252.658418][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  252.658432][   T34]  ? __pfx_kthread+0x10/0x10
[  252.658448][   T34]  ret_from_fork+0x3fc/0x770
[  252.658463][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  252.658480][   T34]  ? __switch_to_asm+0x39/0x70
[  252.658494][   T34]  ? __switch_to_asm+0x33/0x70
[  252.658508][   T34]  ? __pfx_kthread+0x10/0x10
[  252.658525][   T34]  ret_from_fork_asm+0x1a/0x30
[  252.658550][   T34]  </TASK>
[  252.658557][   T34] INFO: task kworker/u9:1:28 blocked for more than 143 seconds.
[  252.658566][   T34]       Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0
[  252.658574][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  252.658580][   T34] task:kworker/u9:1    state:D stack:23096 pid:28    tgid:28    ppid:2      task_flags:0x4208060 flags:0x00004000
[  252.658613][   T34] Workqueue: events_unbound bpf_map_free_deferred
[  252.658632][   T34] Call Trace:
[  252.658637][   T34]  <TASK>
[  252.658646][   T34]  __schedule+0x16f5/0x4d00
[  252.658668][   T34]  ? do_raw_spin_lock+0x121/0x290
[  252.658685][   T34]  ? schedule+0x165/0x360
[  252.658700][   T34]  ? __lock_acquire+0xab9/0xd20
[  252.658712][   T34]  ? __pfx___schedule+0x10/0x10
[  252.658736][   T34]  ? schedule+0x91/0x360
[  252.658752][   T34]  schedule+0x165/0x360
[  252.658767][   T34]  synchronize_rcu_expedited+0x583/0x730
[  252.658784][   T34]  ? __pfx_synchronize_rcu_expedited+0x10/0x10
[  252.658808][   T34]  ? __pfx_wait_rcu_exp_gp+0x10/0x10
[  252.658822][   T34]  ? __pfx___might_resched+0x10/0x10
[  252.658836][   T34]  ? __pfx_autoremove_wake_function+0x10/0x10
[  252.658861][   T34]  synchronize_rcu+0x11a/0x310
[  252.658875][   T34]  ? __pfx_synchronize_rcu+0x10/0x10
[  252.658897][   T34]  sock_hash_free+0x86/0x7d0
[  252.658912][   T34]  ? percpu_ref_put+0x1e/0x230
[  252.658931][   T34]  ? __pfx_sock_hash_free+0x10/0x10
[  252.658944][   T34]  ? percpu_ref_put+0x1e/0x230
[  252.658966][   T34]  bpf_map_free_deferred+0xed/0x110
[  252.658981][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  252.658996][   T34]  process_scheduled_works+0xae1/0x17b0
[  252.659031][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  252.659055][   T34]  worker_thread+0x8a0/0xda0
[  252.659084][   T34]  kthread+0x711/0x8a0
[  252.659102][   T34]  ? __pfx_worker_thread+0x10/0x10
[  252.659115][   T34]  ? __pfx_kthread+0x10/0x10
[  252.659133][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  252.659146][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  252.659160][   T34]  ? __pfx_kthread+0x10/0x10
[  252.659176][   T34]  ret_from_fork+0x3fc/0x770
[  252.659215][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  252.659232][   T34]  ? __switch_to_asm+0x39/0x70
[  252.659246][   T34]  ? __switch_to_asm+0x33/0x70
[  252.659260][   T34]  ? __pfx_kthread+0x10/0x10
[  252.659277][   T34]  ret_from_fork_asm+0x1a/0x30
[  252.659301][   T34]  </TASK>
[  252.659373][   T34] INFO: task syz.2.681:7365 blocked for more than 143 seconds.
[  252.659381][   T34]       Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0
[  252.659389][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  252.659396][   T34] task:syz.2.681       state:D stack:25096 pid:7365  tgid:7365  ppid:5834   task_flags:0x400040 flags:0x00004004
[  252.659429][   T34] Call Trace:
[  252.659435][   T34]  <TASK>
[  252.659444][   T34]  __schedule+0x16f5/0x4d00
[  252.659461][   T34]  ? trace_call_bpf+0xb7/0x850
[  252.659477][   T34]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  252.659492][   T34]  ? schedule+0x165/0x360
[  252.659507][   T34]  ? __lock_acquire+0xab9/0xd20
[  252.659519][   T34]  ? __pfx___schedule+0x10/0x10
[  252.659543][   T34]  ? schedule+0x91/0x360
[  252.659559][   T34]  schedule+0x165/0x360
[  252.659574][   T34]  schedule_timeout+0x9a/0x270
[  252.659587][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  252.659607][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  252.659620][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  252.659636][   T34]  __wait_for_common+0x3da/0x710
[  252.659662][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  252.659674][   T34]  ? __pfx___wait_for_common+0x10/0x10
[  252.659691][   T34]  ? __raw_spin_lock_init+0x45/0x100
[  252.659708][   T34]  ? __init_swait_queue_head+0xa9/0x150
[  252.659725][   T34]  wait_for_completion_state+0x1c/0x40
[  252.659740][   T34]  __wait_rcu_gp+0x24c/0x280
[  252.659759][   T34]  synchronize_rcu_tasks_generic+0x132/0x220
[  252.659775][   T34]  ? __pfx_synchronize_rcu_tasks_generic+0x10/0x10
[  252.659790][   T34]  ? rcu_read_lock_any_held+0xb3/0x120
[  252.659803][   T34]  ? __pfx_call_rcu_tasks_trace+0x10/0x10
[  252.659820][   T34]  ? __pfx_wakeme_after_rcu+0x10/0x10
[  252.659847][   T34]  perf_trace_event_unreg+0xbe/0x1b0
[  252.659862][   T34]  perf_trace_destroy+0xa4/0x150
[  252.659876][   T34]  ? __pfx_tp_perf_event_destroy+0x10/0x10
[  252.659890][   T34]  __free_event+0x316/0x7b0
[  252.659903][   T34]  ? __pfx_perf_release+0x10/0x10
[  252.659919][   T34]  perf_event_release_kernel+0x45b/0x510
[  252.659937][   T34]  ? __pfx_perf_release+0x10/0x10
[  252.659953][   T34]  perf_release+0x38/0x50
[  252.659968][   T34]  __fput+0x44c/0xa70
[  252.659991][   T34]  task_work_run+0x1d4/0x260
[  252.660011][   T34]  ? __pfx_task_work_run+0x10/0x10
[  252.660036][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  252.660051][   T34]  exit_to_user_mode_loop+0xec/0x110
[  252.660064][   T34]  do_syscall_64+0x2bd/0x3b0
[  252.660079][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  252.660093][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.660105][   T34]  ? exc_page_fault+0x9f/0xf0
[  252.660121][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.660133][   T34] RIP: 0033:0x7f4732f8e9a9
[  252.660144][   T34] RSP: 002b:00007ffceb7e6648 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  252.660159][   T34] RAX: 0000000000000000 RBX: 00007f47331b7ba0 RCX: 00007f4732f8e9a9
[  252.660169][   T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  252.660177][   T34] RBP: 00007f47331b7ba0 R08: 00000000000001a4 R09: 00000017eb7e693f
[  252.660212][   T34] R10: 00007f47331b7ac0 R11: 0000000000000246 R12: 00000000000172ab
[  252.660221][   T34] R13: 00007f47331b6080 R14: ffffffffffffffff R15: 00007ffceb7e6760
[  252.660240][   T34]  </TASK>
[  252.660247][   T34] INFO: task syz.0.687:7381 blocked for more than 143 seconds.
[  252.660256][   T34]       Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0
[  252.660264][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  252.660271][   T34] task:syz.0.687       state:D stack:23648 pid:7381  tgid:7380  ppid:5830   task_flags:0x400140 flags:0x00004004
[  252.660303][   T34] Call Trace:
[  252.660309][   T34]  <TASK>
[  252.660318][   T34]  __schedule+0x16f5/0x4d00
[  252.660340][   T34]  ? do_raw_spin_lock+0x121/0x290
[  252.660357][   T34]  ? schedule+0x165/0x360
[  252.660371][   T34]  ? __lock_acquire+0xab9/0xd20
[  252.660383][   T34]  ? __pfx___schedule+0x10/0x10
[  252.660407][   T34]  ? schedule+0x91/0x360
[  252.660423][   T34]  schedule+0x165/0x360
[  252.660438][   T34]  synchronize_rcu_expedited+0x5f5/0x730
[  252.660455][   T34]  ? __pfx_synchronize_rcu_expedited+0x10/0x10
[  252.660470][   T34]  ? __pfx_autoremove_wake_function+0x10/0x10
[  252.660496][   T34]  ? __pfx___might_resched+0x10/0x10
[  252.660510][   T34]  ? __local_bh_enable_ip+0x12d/0x1c0
[  252.660524][   T34]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  252.660544][   T34]  dev_deactivate_many+0x67f/0xd40
[  252.660561][   T34]  ? dev_deactivate_many+0x258/0xd40
[  252.660577][   T34]  __dev_close_many+0x162/0x6f0
[  252.660598][   T34]  ? __pfx___dev_close_many+0x10/0x10
[  252.660621][   T34]  __dev_change_flags+0x2c7/0x6d0
[  252.660637][   T34]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  252.660653][   T34]  ? __pfx___dev_change_flags+0x10/0x10
[  252.660670][   T34]  ? netif_set_alias+0x88/0x1e0
[  252.660687][   T34]  netif_change_flags+0x88/0x1a0
[  252.660703][   T34]  do_setlink+0xc55/0x41c0
[  252.660726][   T34]  ? __pfx_do_setlink+0x10/0x10
[  252.660738][   T34]  ? _printk+0xcf/0x120
[  252.660754][   T34]  ? __pfx____ratelimit+0x10/0x10
[  252.660776][   T34]  ? __lock_acquire+0xab9/0xd20
[  252.660793][   T34]  ? __mutex_trylock_common+0x153/0x260
[  252.660809][   T34]  ? __pfx___mutex_trylock_common+0x10/0x10
[  252.660827][   T34]  ? rcu_is_watching+0x15/0xb0
[  252.660840][   T34]  ? trace_contention_end+0x39/0x120
[  252.660855][   T34]  ? __mutex_lock+0x330/0xe80
[  252.660872][   T34]  ? __pfx_aa_get_newest_label+0x10/0x10
[  252.660890][   T34]  ? rtnl_newlink+0x8db/0x1c70
[  252.660907][   T34]  ? rcu_is_watching+0x15/0xb0
[  252.660921][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  252.660942][   T34]  ? ns_capable+0x8a/0xf0
[  252.660957][   T34]  ? rtnl_link_get_net_capable+0x16a/0x350
[  252.660971][   T34]  rtnl_newlink+0x160b/0x1c70
[  252.660996][   T34]  ? __pfx_rtnl_newlink+0x10/0x10
[  252.661015][   T34]  ? __pfx_trace_call_bpf+0x10/0x10
[  252.661034][   T34]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  252.661054][   T34]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  252.661071][   T34]  ? perf_trace_preemptirq_template+0x280/0x340
[  252.661089][   T34]  ? __local_bh_enable_ip+0xce/0x1c0
[  252.661103][   T34]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  252.661120][   T34]  ? nlmon_xmit+0xb0/0x100
[  252.661136][   T34]  ? kmem_cache_free+0x18f/0x400
[  252.661153][   T34]  ? __local_bh_enable_ip+0x12d/0x1c0
[  252.661166][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  252.661204][   T34]  ? __local_bh_enable_ip+0x12d/0x1c0
[  252.661219][   T34]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  252.661235][   T34]  ? __dev_queue_xmit+0x27e/0x3a70
[  252.661257][   T34]  ? __lock_acquire+0xab9/0xd20
[  252.661285][   T34]  ? __pfx_rtnl_newlink+0x10/0x10
[  252.661301][   T34]  rtnetlink_rcv_msg+0x7cf/0xb70
[  252.661321][   T34]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  252.661337][   T34]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  252.661353][   T34]  ? ref_tracker_free+0x63a/0x7d0
[  252.661368][   T34]  ? __copy_skb_header+0xa7/0x550
[  252.661383][   T34]  ? __pfx_ref_tracker_free+0x10/0x10
[  252.661398][   T34]  ? __skb_clone+0x63/0x7a0
[  252.661417][   T34]  netlink_rcv_skb+0x208/0x470
[  252.661431][   T34]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  252.661449][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  252.661469][   T34]  ? netlink_deliver_tap+0x2e/0x1b0
[  252.661481][   T34]  ? netlink_deliver_tap+0x2e/0x1b0
[  252.661497][   T34]  netlink_unicast+0x75c/0x8e0
[  252.661521][   T34]  netlink_sendmsg+0x805/0xb30
[  252.661539][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  252.661554][   T34]  ? aa_sock_msg_perm+0x94/0x160
[  252.661570][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  252.661585][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  252.661598][   T34]  __sock_sendmsg+0x21c/0x270
[  252.661617][   T34]  ____sys_sendmsg+0x505/0x830
[  252.661635][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  252.661654][   T34]  ? import_iovec+0x74/0xa0
[  252.661669][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  252.661685][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  252.661720][   T34]  ? __fget_files+0x2a/0x420
[  252.661733][   T34]  ? __fget_files+0x3a0/0x420
[  252.661753][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  252.661766][   T34]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  252.661781][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  252.661801][   T34]  ? rcu_is_watching+0x15/0xb0
[  252.661821][   T34]  ? do_syscall_64+0xbe/0x3b0
[  252.661841][   T34]  do_syscall_64+0xfa/0x3b0
[  252.661860][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  252.661878][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.661892][   T34]  ? exc_page_fault+0x9f/0xf0
[  252.661910][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.661922][   T34] RIP: 0033:0x7fba9f98e9a9
[  252.661933][   T34] RSP: 002b:00007fbaa077d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  252.661947][   T34] RAX: ffffffffffffffda RBX: 00007fba9fbb5fa0 RCX: 00007fba9f98e9a9
[  252.661957][   T34] RDX: 0000000000000000 RSI: 0000200000000880 RDI: 0000000000000003
[  252.661965][   T34] RBP: 00007fba9fa10d69 R08: 0000000000000000 R09: 0000000000000000
[  252.661974][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  252.661982][   T34] R13: 0000000000000000 R14: 00007fba9fbb5fa0 R15: 00007ffeedfb7248
[  252.662001][   T34]  </TASK>
[  252.662007][   T34] INFO: task kworker/u9:5:7382 blocked for more than 143 seconds.
[  252.662016][   T34]       Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0
[  252.662030][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  252.662036][   T34] task:kworker/u9:5    state:D stack:25928 pid:7382  tgid:7382  ppid:2      task_flags:0x4208060 flags:0x00004000
[  252.662071][   T34] Workqueue: events_unbound cfg80211_wiphy_work
[  252.662091][   T34] Call Trace:
[  252.662097][   T34]  <TASK>
[  252.662106][   T34]  __schedule+0x16f5/0x4d00
[  252.662128][   T34]  ? do_raw_spin_lock+0x121/0x290
[  252.662145][   T34]  ? schedule+0x165/0x360
[  252.662159][   T34]  ? __lock_acquire+0xab9/0xd20
[  252.662171][   T34]  ? __pfx___schedule+0x10/0x10
[  252.662220][   T34]  ? schedule+0x91/0x360
[  252.662236][   T34]  schedule+0x165/0x360
[  252.662252][   T34]  synchronize_rcu_expedited+0x5f5/0x730
[  252.662266][   T34]  ? trace_call_bpf+0xb7/0x850
[  252.662280][   T34]  ? __pfx_synchronize_rcu_expedited+0x10/0x10
[  252.662295][   T34]  ? __pfx_autoremove_wake_function+0x10/0x10
[  252.662321][   T34]  ? __pfx___might_resched+0x10/0x10
[  252.662337][   T34]  ? __lock_acquire+0xab9/0xd20
[  252.662355][   T34]  synchronize_rcu+0x11a/0x310
[  252.662370][   T34]  ? __pfx_synchronize_rcu+0x10/0x10
[  252.662384][   T34]  ? __ieee80211_scan_completed+0x3fa/0xb40
[  252.662406][   T34]  __ieee80211_scan_completed+0x4f8/0xb40
[  252.662426][   T34]  cfg80211_wiphy_work+0x2df/0x460
[  252.662444][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  252.662459][   T34]  process_scheduled_works+0xae1/0x17b0
[  252.662489][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  252.662513][   T34]  worker_thread+0x8a0/0xda0
[  252.662529][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  252.662548][   T34]  ? __kthread_parkme+0x7b/0x200
[  252.662568][   T34]  kthread+0x711/0x8a0
[  252.662586][   T34]  ? __pfx_worker_thread+0x10/0x10
[  252.662599][   T34]  ? __pfx_kthread+0x10/0x10
[  252.662616][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  252.662630][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  252.662643][   T34]  ? __pfx_kthread+0x10/0x10
[  252.662660][   T34]  ret_from_fork+0x3fc/0x770
[  252.662675][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  252.662691][   T34]  ? __switch_to_asm+0x39/0x70
[  252.662706][   T34]  ? __switch_to_asm+0x33/0x70
[  252.662720][   T34]  ? __pfx_kthread+0x10/0x10
[  252.662736][   T34]  ret_from_fork_asm+0x1a/0x30
[  252.662761][   T34]  </TASK>
[  252.662768][   T34] INFO: task syz.1.688:7384 blocked for more than 143 seconds.
[  252.662776][   T34]       Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0
[  252.662784][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  252.662791][   T34] task:syz.1.688       state:D stack:28032 pid:7384  tgid:7383  ppid:5826   task_flags:0x400140 flags:0x00004004
[  252.662825][   T34] Call Trace:
[  252.662830][   T34]  <TASK>
[  252.662839][   T34]  __schedule+0x16f5/0x4d00
[  252.662860][   T34]  ? __lock_acquire+0xab9/0xd20
[  252.662874][   T34]  ? schedule+0x165/0x360
[  252.662890][   T34]  ? __pfx___schedule+0x10/0x10
[  252.662914][   T34]  ? schedule+0x91/0x360
[  252.662930][   T34]  schedule+0x165/0x360
[  252.662945][   T34]  schedule_preempt_disabled+0x13/0x30
[  252.662959][   T34]  __mutex_lock+0x724/0xe80
[  252.662975][   T34]  ? __mutex_lock+0x51b/0xe80
[  252.662994][   T34]  ? perf_trace_init+0x50/0x2d0
[  252.663008][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  252.663035][   T34]  ? __lock_acquire+0xab9/0xd20
[  252.663052][   T34]  perf_trace_init+0x50/0x2d0
[  252.663063][   T34]  ? perf_tp_event_init+0x7c/0x120
[  252.663079][   T34]  perf_tp_event_init+0x8d/0x120
[  252.663093][   T34]  perf_try_init_event+0x17f/0x870
[  252.663109][   T34]  ? perf_event_alloc+0xf6b/0x2bb0
[  252.663126][   T34]  ? perf_event_alloc+0xf6b/0x2bb0
[  252.663140][   T34]  perf_event_alloc+0x1357/0x2bb0
[  252.663155][   T34]  ? __lock_acquire+0xab9/0xd20
[  252.663167][   T34]  ? perf_event_alloc+0xf6b/0x2bb0
[  252.663215][   T34]  ? __pfx_perf_event_alloc+0x10/0x10
[  252.663235][   T34]  ? find_lively_task_by_vpid+0x19/0x290
[  252.663250][   T34]  ? find_lively_task_by_vpid+0x19/0x290
[  252.663264][   T34]  ? find_lively_task_by_vpid+0x19/0x290
[  252.663281][   T34]  __se_sys_perf_event_open+0x772/0x1d70
[  252.663300][   T34]  ? __bpf_trace_bpf_trace_printk+0xa1/0x100
[  252.663317][   T34]  ? __pfx___se_sys_perf_event_open+0x10/0x10
[  252.663340][   T34]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  252.663357][   T34]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  252.663377][   T34]  ? do_syscall_64+0xbe/0x3b0
[  252.663392][   T34]  ? __x64_sys_perf_event_open+0x20/0xc0
[  252.663408][   T34]  do_syscall_64+0xfa/0x3b0
[  252.663423][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  252.663437][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.663449][   T34]  ? exc_page_fault+0x9f/0xf0
[  252.663465][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.663477][   T34] RIP: 0033:0x7f98e3f8e9a9
[  252.663487][   T34] RSP: 002b:00007f98e4e40038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  252.663501][   T34] RAX: ffffffffffffffda RBX: 00007f98e41b5fa0 RCX: 00007f98e3f8e9a9
[  252.663511][   T34] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000500
[  252.663520][   T34] RBP: 00007f98e4010d69 R08: 0000000000000009 R09: 0000000000000000
[  252.663528][   T34] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  252.663537][   T34] R13: 0000000000000001 R14: 00007f98e41b5fa0 R15: 00007fff7a6ea598
[  252.663555][   T34]  </TASK>
[  252.663567][   T34] 
[  252.663567][   T34] Showing all locks held in the system:
[  252.663576][   T34] 3 locks held by kworker/u8:1/13:
[  252.663584][   T34]  #0: ffff88810906c948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  252.663625][   T34]  #1: ffffc90000107bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  252.663664][   T34]  #2: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  252.663704][   T34] 3 locks held by kworker/u9:0/26:
[  252.663712][   T34]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  252.663751][   T34]  #1: ffffc900001efbc0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  252.663790][   T34]  #2: ffffffff8e144bb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  252.663830][   T34] 3 locks held by kworker/u9:1/28:
[  252.663838][   T34]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  252.663876][   T34]  #1: ffffc9000061fbc0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  252.663915][   T34]  #2: ffffffff8e144bb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  252.663955][   T34] 1 lock held by khungtaskd/34:
[  252.663963][   T34]  #0: ffffffff8e13f0a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  252.664006][   T34] 2 locks held by kworker/0:1H/128:
[  252.664014][   T34]  #0: ffff8881012db548 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  252.664058][   T34]  #1: ffffc9000253fbc0 ((work_completion)(&q->timeout_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  252.664110][   T34] 3 locks held by kworker/u9:3/3065:
[  252.664118][   T34]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  252.664156][   T34]  #1: ffffc900222c7bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  252.664220][   T34]  #2: ffff888038d80768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x460
[  252.664265][   T34] 2 locks held by getty/5655:
[  252.664273][   T34]  #0: ffff88801edf50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  252.664311][   T34]  #1: ffffc900029032f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  252.664351][   T34] 5 locks held by kworker/u11:2/5829:
[  252.664359][   T34]  #0: ffff88802986e948 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  252.664398][   T34]  #1: ffffc9000353fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  252.664438][   T34]  #2: ffff8880121e4dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  252.664477][   T34]  #3: ffff8880121e40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  252.664520][   T34]  #4: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  252.664557][   T34] 6 locks held by kworker/u11:4/5833:
[  252.664565][   T34]  #0: ffff888011c57148 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  252.664604][   T34]  #1: ffffc9000355fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  252.664642][   T34]  #2: ffff88810e754dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  252.664681][   T34]  #3: ffff88810e7540b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  252.664723][   T34]  #4: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  252.664759][   T34]  #5: ffff88802986e338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  252.664805][   T34] 2 locks held by kworker/0:3/5875:
[  252.664813][   T34]  #0: ffff88801a482148 ((wq_completion)events_freezable_pwr_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  252.664852][   T34]  #1: ffffc90003c1fbc0 ((work_completion)(&(&ev->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  252.664891][   T34] 1 lock held by syz.2.681/7365:
[  252.664899][   T34]  #0: ffffffff8e1a2c68 (event_mutex){+.+.}-{4:4}, at: perf_trace_destroy+0x2e/0x150
[  252.664936][   T34] 4 locks held by syz.2.681/7366:
[  252.664944][   T34] 1 lock held by syz.0.687/7381:
[  252.664951][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  252.664993][   T34] 3 locks held by kworker/u9:5/7382:
[  252.665001][   T34]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  252.665044][   T34]  #1: ffffc9000382fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  252.665082][   T34]  #2: ffff888038ee0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x460
[  252.665124][   T34] 3 locks held by syz.1.688/7384:
[  252.665132][   T34]  #0: ffffffff99b075d0 (&pmus_srcu){.+.+}-{0:0}, at: class_srcu_constructor+0x2c/0x60
[  252.665172][   T34]  #1: ffffffff99b075d0 (&pmus_srcu){.+.+}-{0:0}, at: perf_event_alloc+0xf6b/0x2bb0
[  252.665236][   T34]  #2: ffffffff8e1a2c68 (event_mutex){+.+.}-{4:4}, at: perf_trace_init+0x50/0x2d0
[  252.665275][   T34] 3 locks held by kworker/u9:6/7385:
[  252.665283][   T34]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  252.665321][   T34]  #1: ffffc9000384fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  252.665360][   T34]  #2: ffff88811b0c8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x460
[  252.665402][   T34] 1 lock held by dhcpcd/7391:
[  252.665410][   T34]  #0: ffff88803e634258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  252.665450][   T34] 1 lock held by dhcpcd/7392:
[  252.665457][   T34]  #0: ffff888039f9a258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  252.665496][   T34] 1 lock held by dhcpcd/7393:
[  252.665504][   T34]  #0: ffff88803ea9e258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  252.665543][   T34] 1 lock held by dhcpcd/7394:
[  252.665550][   T34]  #0: ffff88803dc90258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  252.665589][   T34] 1 lock held by dhcpcd/7395:
[  252.665596][   T34]  #0: ffff888011fa6258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  252.665635][   T34] 1 lock held by dhcpcd/7396:
[  252.665643][   T34]  #0: ffff88803d8f8258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  252.665682][   T34] 
[  252.665687][   T34] =============================================
[  252.665687][   T34] 
[  252.665694][   T34] NMI backtrace for cpu 0
[  252.665701][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  252.665711][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  252.665716][   T34] Call Trace:
[  252.665721][   T34]  <TASK>
[  252.665724][   T34]  dump_stack_lvl+0x189/0x250
[  252.665737][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  252.665748][   T34]  ? __pfx__printk+0x10/0x10
[  252.665767][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  252.665779][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  252.665788][   T34]  ? _printk+0xcf/0x120
[  252.665803][   T34]  ? __pfx__printk+0x10/0x10
[  252.665816][   T34]  ? debug_show_all_locks+0x2e/0x180
[  252.665826][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  252.665837][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  252.665848][   T34]  watchdog+0xfee/0x1030
[  252.665864][   T34]  ? watchdog+0x1de/0x1030
[  252.665882][   T34]  kthread+0x711/0x8a0
[  252.665896][   T34]  ? __pfx_watchdog+0x10/0x10
[  252.665909][   T34]  ? __pfx_kthread+0x10/0x10
[  252.665923][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  252.665933][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  252.665944][   T34]  ? __pfx_kthread+0x10/0x10
[  252.665957][   T34]  ret_from_fork+0x3fc/0x770
[  252.665969][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  252.665982][   T34]  ? __switch_to_asm+0x39/0x70
[  252.665993][   T34]  ? __switch_to_asm+0x33/0x70
[  252.666003][   T34]  ? __pfx_kthread+0x10/0x10
[  252.666016][   T34]  ret_from_fork_asm+0x1a/0x30
[  252.666041][   T34]  </TASK>
[  252.666046][   T34] Sending NMI from CPU 0 to CPUs 1:
[  252.666106][    C1] NMI backtrace for cpu 1
[  252.666116][    C1] CPU: 1 UID: 0 PID: 7366 Comm: syz.2.681 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  252.666125][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  252.666129][    C1] RIP: 0010:native_apic_msr_eoi+0xf/0x20
[  252.666141][    C1] Code: f8 c3 cc cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa b9 0b 08 00 00 31 c0 31 d2 0f 30 <e9> 8c 14 00 0a cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90
[  252.666147][    C1] RSP: 0018:ffffc900001e0b50 EFLAGS: 00000046
[  252.666154][    C1] RAX: 0000000000000000 RBX: ffffc900001e0b88 RCX: 000000000000080b
[  252.666158][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  252.666162][    C1] RBP: 0000000000000000 R08: ffff888136623b0f R09: 1ffff11026cc4761
[  252.666166][    C1] R10: dffffc0000000000 R11: ffffed1026cc4762 R12: 0000000000000000
[  252.666171][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  252.666174][    C1] FS:  00007f4733e566c0(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
[  252.666199][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  252.666203][    C1] CR2: 0000000000000004 CR3: 000000002294a000 CR4: 00000000000006f0
[  252.666228][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  252.666233][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  252.666237][    C1] Call Trace:
[  252.666240][    C1]  <IRQ>
[  252.666243][    C1]  __sysvec_irq_work+0x11/0x3d0
[  252.666251][    C1]  sysvec_irq_work+0x4f/0xc0
[  252.666258][    C1]  asm_sysvec_irq_work+0x1a/0x20
[  252.666264][    C1] RIP: 0010:__rcu_read_unlock+0x84/0xe0
[  252.666278][    C1] Code: b6 04 3c 84 c0 75 41 8b 03 3d 00 00 00 40 73 0f 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc cc 90 0f 0b 90 eb eb e8 6c 00 00 00 <eb> d2 89 d9 80 e1 07 80 c1 03 38 c1 7c a5 49 89 fe 48 89 df e8 63
[  252.666283][    C1] RSP: 0018:ffffc900001e0c38 EFLAGS: 00000246
[  252.666289][    C1] RAX: 64e67e56e638ed00 RBX: ffff888020042104 RCX: 64e67e56e638ed00
[  252.666293][    C1] RDX: 0000000000000002 RSI: ffffffff8d998701 RDI: ffffffff8be29f80
[  252.666297][    C1] RBP: 0000000000019000 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  252.666301][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 1ffff11004008420
[  252.666306][    C1] R13: dffffc0000000000 R14: ffff888020042108 R15: dffffc0000000000
[  252.666314][    C1]  ? __rcu_read_unlock+0x84/0xe0
[  252.666323][    C1]  mac80211_hwsim_beacon+0xbb/0x1c0
[  252.666331][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  252.666338][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  252.666349][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  252.666358][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  252.666366][    C1]  handle_softirqs+0x286/0x870
[  252.666374][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  252.666382][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  252.666390][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  252.666401][    C1]  __irq_exit_rcu+0xca/0x1f0
[  252.666408][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  252.666416][    C1]  irq_exit_rcu+0x9/0x30
[  252.666422][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  252.666431][    C1]  </IRQ>
[  252.666433][    C1]  <TASK>
[  252.666435][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  252.666442][    C1] RIP: 0010:console_flush_all+0x7f7/0xc40
[  252.666450][    C1] Code: 48 21 c3 0f 85 e9 01 00 00 e8 75 e7 1e 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 66 e7 1e 00 eb 06 e8 5f e7 1e 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 ea 0a 82 00 48 8b 1b 48 8b 44 24
[  252.666455][    C1] RSP: 0018:ffffc9000398ef40 EFLAGS: 00000283
[  252.666460][    C1] RAX: 1ffffffff1d36927 RBX: ffffffff8e9b4938 RCX: 0000000000080000
[  252.666464][    C1] RDX: ffffc9000912d000 RSI: 00000000000005e9 RDI: 00000000000005ea
[  252.666468][    C1] RBP: ffffc9000398f090 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  252.666473][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: dffffc0000000000
[  252.666477][    C1] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8e9b48e0
[  252.666485][    C1]  ? console_flush_all+0x13a/0xc40
[  252.666494][    C1]  ? __pfx_console_flush_all+0x10/0x10
[  252.666504][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  252.666514][    C1]  console_unlock+0xc4/0x270
[  252.666522][    C1]  ? __pfx_console_unlock+0x10/0x10
[  252.666530][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  252.666540][    C1]  vprintk_emit+0x5b7/0x7a0
[  252.666547][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  252.666557][    C1]  ? vprintk_default+0x12/0x30
[  252.666565][    C1]  _printk+0xcf/0x120
[  252.666574][    C1]  ? __pfx__printk+0x10/0x10
[  252.666582][    C1]  ? apparmor_capable+0x137/0x1b0
[  252.666588][    C1]  ? bpf_lsm_capable+0x9/0x20
[  252.666595][    C1]  ? security_capable+0x7e/0x2e0
[  252.666605][    C1]  nbd_genl_disconnect+0x46e/0x570
[  252.666614][    C1]  ? __nla_parse+0x40/0x60
[  252.666623][    C1]  ? __pfx_nbd_genl_disconnect+0x10/0x10
[  252.666632][    C1]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  252.666643][    C1]  genl_family_rcv_msg_doit+0x215/0x300
[  252.666652][    C1]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  252.666664][    C1]  genl_rcv_msg+0x60e/0x790
[  252.666673][    C1]  ? __pfx_genl_rcv_msg+0x10/0x10
[  252.666680][    C1]  ? ref_tracker_free+0x63a/0x7d0
[  252.666688][    C1]  ? __pfx_nbd_genl_disconnect+0x10/0x10
[  252.666697][    C1]  ? __pfx_ref_tracker_free+0x10/0x10
[  252.666706][    C1]  netlink_rcv_skb+0x208/0x470
[  252.666713][    C1]  ? __pfx_genl_rcv_msg+0x10/0x10
[  252.666720][    C1]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  252.666729][    C1]  ? down_read+0x1ad/0x2e0
[  252.666739][    C1]  genl_rcv+0x28/0x40
[  252.666745][    C1]  netlink_unicast+0x75c/0x8e0
[  252.666757][    C1]  netlink_sendmsg+0x805/0xb30
[  252.666764][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  252.666771][    C1]  ? aa_sock_msg_perm+0x94/0x160
[  252.666779][    C1]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  252.666787][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  252.666793][    C1]  __sock_sendmsg+0x21c/0x270
[  252.666803][    C1]  ____sys_sendmsg+0x505/0x830
[  252.666811][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[  252.666819][    C1]  ? import_iovec+0x74/0xa0
[  252.666826][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  252.666833][    C1]  ? __pfx____sys_sendmsg+0x10/0x10
[  252.666846][    C1]  ? __fget_files+0x2a/0x420
[  252.666853][    C1]  ? __fget_files+0x3a0/0x420
[  252.666862][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  252.666868][    C1]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  252.666876][    C1]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  252.666886][    C1]  ? do_syscall_64+0xbe/0x3b0
[  252.666895][    C1]  do_syscall_64+0xfa/0x3b0
[  252.666904][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.666909][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  252.666917][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.666922][    C1] RIP: 0033:0x7f4732f8e9a9
[  252.666929][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  252.666933][    C1] RSP: 002b:00007f4733e56038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  252.666940][    C1] RAX: ffffffffffffffda RBX: 00007f47331b5fa0 RCX: 00007f4732f8e9a9
[  252.666944][    C1] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000007
[  252.666948][    C1] RBP: 00007f4733010d69 R08: 0000000000000000 R09: 0000000000000000
[  252.666952][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  252.666955][    C1] R13: 0000000000000000 R14: 00007f47331b5fa0 R15: 00007ffceb7e64e8
[  252.666962][    C1]  </TASK>
[  252.671445][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  252.671457][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  252.671470][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  252.671476][   T34] Call Trace:
[  252.671480][   T34]  <TASK>
[  252.671485][   T34]  dump_stack_lvl+0x99/0x250
[  252.671500][   T34]  ? __asan_memcpy+0x40/0x70
[  252.671514][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  252.671525][   T34]  ? __pfx__printk+0x10/0x10
[  252.671545][   T34]  panic+0x2db/0x790
[  252.671558][   T34]  ? __pfx_panic+0x10/0x10
[  252.671569][   T34]  ? __pfx_delay_tsc+0x10/0x10
[  252.671578][   T34]  ? nmi_backtrace_stall_check+0x433/0x440
[  252.671591][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  252.671607][   T34]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  252.671621][   T34]  watchdog+0x102d/0x1030
[  252.671637][   T34]  ? watchdog+0x1de/0x1030
[  252.671655][   T34]  kthread+0x711/0x8a0
[  252.671671][   T34]  ? __pfx_watchdog+0x10/0x10
[  252.671684][   T34]  ? __pfx_kthread+0x10/0x10
[  252.671698][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  252.671710][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  252.671722][   T34]  ? __pfx_kthread+0x10/0x10
[  252.671735][   T34]  ret_from_fork+0x3fc/0x770
[  252.671747][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  252.671760][   T34]  ? __switch_to_asm+0x39/0x70
[  252.671771][   T34]  ? __switch_to_asm+0x33/0x70
[  252.671783][   T34]  ? __pfx_kthread+0x10/0x10
[  252.671797][   T34]  ret_from_fork_asm+0x1a/0x30
[  252.671820][   T34]  </TASK>
[  252.672532][   T34] Kernel Offset: disabled

VM DIAGNOSIS:
17:47:58  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000069 RBX=0000000000000069 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f7b0
R8 =ffff88801fda8237 R9 =1ffff11003fb5046 R10=dffffc0000000000 R11=ffffffff85471fa0
R12=dffffc0000000000 R13=ffffffff99af58b5 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff8547201c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f70d89506c0 CR3=0000000111426000 CR4=000006f0
DR0=0000200000000300 DR1=0000200000000300 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81680ea6 RBX=0000000000000000 RCX=ffff888020041cc0 RDX=0000000000010100
RSI=0000000000000008 RDI=ffffffff92a52460 RBP=ffffc900001e0b58 RSP=ffffc900001e0ac0
R8 =ffffffff92a52467 R9 =1ffffffff254a48c R10=dffffc0000000000 R11=fffffbfff254a48d
R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff81680ea7 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f4733e566c0 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000004 CR3=000000002294a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f4733186478 00007f4733186450 XMM03=00007f4733186488 00007f4733186480
XMM04=00007f4733ced100 00007f4733186440 XMM05=00007f4733186458 00007f47331864a0
XMM06=00007f4733186498 00007f4733186490 XMM07=00007f4733186488 00007f4733186480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f4733011ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
