last executing test programs:

18.152208141s ago: executing program 0 (id=789):
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="070000000400000008000000feffff7f00000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async, rerun: 64)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x0, 0x0], ""/16, <r0=>0x0, 0x0, 0x0, 0x0, 0x7, 0x4000000000000024, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], <r1=>0x0, 0x9b, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000500), &(0x7f00000003c0), 0x8, 0x9b, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) (rerun: 64)
r2 = socket$kcm(0x2, 0x922000000001, 0x106) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x12, &(0x7f00000002c0)=r3, 0x8) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000018000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x200000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f00000000c0), 0x12) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1, <r7=>0xffffffffffffffff}, 0x4)
bpf$PROG_BIND_MAP(0x23, &(0x7f00000002c0)={r4, r7}, 0xc)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) (async)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b60affff800080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) (async)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) (async)
r10 = getpid()
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={&(0x7f0000000240)}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r10, 0x1, 0xffffffffffffffff, 0x9)
write$cgroup_pid(r6, &(0x7f0000000740)=r10, 0x12)

18.075001733s ago: executing program 0 (id=791):
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @loopback}, 0x3, 0x1, 0x3, 0x3}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="a326e8292c49e0a83df32e96426706492aeebb620ce8029316532051a7ca1fccf1ad0e45c92f513cf0e6cbe23d97cb8b1629f19062ae0b47ad0df39ecc6313f568ca3959cdc73638509431cc2b28fa4d41f700cabf8542beea1ddf009c1234cf91828471761eaedff9ad9578b288f0087ad2b2dcd17bd1a00b8bb57a59db6b382d612c00fcefcbe7fa3c05daafc452e09576343efa9c8020adb65af425dbb3a027083cc2390903c1481fa3a3d03814d55400cdf3cb0be89562e49e1193f4bfe78b01fdc2e5effb729b49c14f81b12599cf7967774dc3d7b02d1824a7210e29ad", 0xe0}], 0x1, &(0x7f0000000280)=[{0x30, 0x38d449d9ce618fef, 0x6, "ed2e70dd301c7c49212c2757227595e3c575bdedf06444efb838"}, {0x30, 0x10e, 0x2, "c88928e9c4b05932f7623107609cd38eb59f21e3ace77e20e7c96178144e"}, {0x1010, 0x6, 0x81, "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"}, {0x108, 0x109, 0x2, "ea8ec616dbd5aa86f5d1b96cf90c3472692cc37f4afdce594b42cc532837e3978184839ecb27a9107c9c56f933c3e5d9a05822fe001c5cedd2ca1b4e385946959ec12e2672575d244da0ccbe30c9f29796b611a14833793ce9ba136d47d60d7243716ad788515df2f52e692198758709f89362b5fa8f1e95f64ce1fe39a7c562cfe39a9b308b5e76f7bd86cf4af406545805a193880cc4344a0e87fae6b1ff68938ec3ccf5bb1ae33af0381e2eed6bdc9d6a0bf835836f741f0e55684b666227f2715a4ec3c27969da28ef1982f7986cf650c84120fac05eb32ca68de5f2d92fe6a06010efa2a3c9c2a74bbeccc9ad38e58a9e"}, {0xd8, 0x1, 0x400, "52efc30b8ccf3d506bbede0dbfe1708b022b8211b7ab982bb0064f3bbc349303b0845272c28277ce46e991abfb2ff9c9f24f99c92aef1fa299e2d9f07f367c9d48d1c4e8f7ba22413314d220a4d5f216591b00aa01859716aa6147f1aee55b27586dbb258d34de17febce7be432a0b825aeeed24c08350265cb2798965bf5cb1533751fff602ddc2c2ab55c3d08c15f7ba03b6fb4d2f0d079bac8c82bbaefae577161e639270cd4da8ed9dcbe250ed86c0c7eb96472e5e77f839e9167308454787d0118919fe"}, {0x90, 0x0, 0x1, "ff71a5144c9269b5444ee6af06e9805b963a9dc6c2f1bb5162848b188d9d4923c2856dabea2269af704729414f9900d29b45cb3dd48f0d2c4cb17f672ff802b4200112d19be9b401916446895bf65f047413e47335c64caff458461238531dc94056fc33781e5714abc7bc8337b75247caf9a618cf5185bcbb"}, {0x68, 0x10f, 0xe3ab, "5486f164e68b6a74e600e8e21785d7301d0c7c1ab3ebbb19ce9185303b6f8a02386240883ae77a0ea203de718cf0e72d60a3f80973bc28a53652ac5a4f00125ecb948cc7a4fb29d2ab957b32dd6ea58c32543b794bb2"}, {0x100, 0x110, 0x1, "093662010a12b85e60c93232c31e988b506d26a30aafe8904e401b32c784a81c5c4363194d5863dd6849e30c4144d8f0e0ac02d4b5f9faf0d4b39cdb304eceb6f09c700b85fe3f9cb2b6504839a0a63c4dea6180476f3d04dc6f0551c37358ff824b5b06e7b2965b2aa6925b61945d631ddcb9535f0b538eccfbc5dc26933087aa6221fed3f82b2c4cb0e1b60d231bc121d753127a4f00648b2d5498d736b3d2cbe33a752d8ff8d2801ae1e1c8eb02fbc11365fe23c7fbf5761182f999c31e03e1245bb7d7e87ebfc952e3f7f3bee7594922f3eb846ae04401f19ca89c7b0f89c6437ce989aa38c6ed"}, {0x80, 0x112, 0x8, "79ee3f2cc69626336205bc37939b2d28300dacfaff3752b5f589dce7c51e2144341d3bb84fb656f2476ebfe803e7af08ca0b9ae486911a28ca616bdf079927ead96d5b976bffdf597052df8c8d39849064f4e067ebd2ff6da11b1c5edd393beed6ecc55d7aa2e79067ff1e35"}], 0x14c8}, 0x8)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f00000017c0))
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001880)={r2, 0x58, &(0x7f0000001800)}, 0x10)
r3 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r3, 0x29, 0x49, &(0x7f0000000000)=r2, 0x4)

18.073452669s ago: executing program 0 (id=792):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="f4000900062b3b25fe80000000000000dc8b850f238466cc00007a000000ad6e6f12eaa92d9076425f911b51818462b40030e17dcdead2dfb08b907443f0114edef0f0ce110ce5c2ba2d5f587752", 0x4e}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000010900a31f2cc81aa6"], 0x50)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100208, 0xca, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
r4 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff})
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r7 = openat$cgroup_devices(r6, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r7, &(0x7f0000000380)=ANY=[@ANYBLOB='c 1223', @ANYRESHEX], 0xa)
recvmsg$unix(r5, &(0x7f00000001c0)={0x0, 0x5b, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}, 0x18000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
socket$kcm(0xa, 0x2, 0x3a)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000180)=ANY=[@ANYRES8=r3, @ANYRES8=r9], 0x55)
close(r0)
syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNGETDEVNETNS(r0, 0x80087601, 0x500)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)="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", 0x10a}], 0x1}, 0x400a040)

17.649728158s ago: executing program 2 (id=795):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10)
r2 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r2, 0x29, 0x12, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001b001105142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0)
sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) (async)
socket$kcm(0xa, 0x5, 0x0) (async)
setsockopt$sock_attach_bpf(r2, 0x29, 0x12, 0x0, 0x0) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001b001105142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) (async)
sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async)

17.52088343s ago: executing program 2 (id=796):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5})
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfe, 0x0, 0x0, 0x82, 0x0, 0x0, 0x34000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x2, 0x6}, 0x0, 0xc8, 0x6, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x2, 0xffffffffffffffff, 0x1)
socket$kcm(0x2, 0x5, 0x84)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0xff, 0xdf3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
close(r2)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{0x6}, {0x3, 0x4, 0x2, 0xb}]})
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r2, 0x40107447, &(0x7f0000000180))
close(0x3)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6801, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x3, 0xea1, 0x0, 0x0, 0x7}, 0x0, 0x0, r1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r7, &(0x7f0000000000), 0x2a979d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x6000000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, &(0x7f0000000500)=""/5, 0x0, 0x5, 0x1}, 0x28)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x0, &(0x7f00000001c0)})
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xe)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x80000, 0x4, 0x8002, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r8, 0x0, 0x0}, 0x20)

17.280478349s ago: executing program 2 (id=797):
r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x2d, 'cpuset'}, {0x2d, 'cpuset'}]}, 0x10)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0216900294e74efd45f91984299b63e144a8a1a2898600561646374b3329ad17eb9722a4e8249304a823a9ab4ee0a80ff70cbcfcfa160980ac9efa85d77f7dadaae9520101000000000000003d367c07a0d90400000000000000a6ab280ccf4581b3356b6daf", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000000c0)='%-010d \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={r2}, 0x4) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00'}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004430000040000000a00000000000000", @ANYRES32=0x1], 0x48) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="611272000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x90) (async, rerun: 64)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400050404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) (async)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge_slave_0\x00'}) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) (async, rerun: 64)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1, 0x42, 0x40, 0xc2}, 0x48) (rerun: 64)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000ac0)="31140f62", &(0x7f0000000bc0), 0x4, r6}, 0x38)
r7 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x5, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x9) (async, rerun: 32)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r8}, 0x38) (async)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r8}, 0x38) (async, rerun: 32)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1810039000000090bf0ffffff00000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x800) (async, rerun: 32)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async, rerun: 64)
mkdir(&(0x7f0000000100)='./file0\x00', 0x38) (async, rerun: 64)
socketpair(0x22, 0x800, 0x7fff, 0x0) (async)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)

17.210229168s ago: executing program 2 (id=800):
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1303000056000528707b528e9a93a54a07"], 0xfe33)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x9b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x20, 0xfffff02c}, {0x6, 0x4, 0x0, 0x4000}]})
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async)
socket$kcm(0x10, 0x400000002, 0x0) (async)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1303000056000528707b528e9a93a54a07"], 0xfe33) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x9b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) (async)
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x20, 0xfffff02c}, {0x6, 0x4, 0x0, 0x4000}]}) (async)

17.110101876s ago: executing program 0 (id=801):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007b11606100003e00851000000200000085000000b500400095003300000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70)

16.950999788s ago: executing program 2 (id=802):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00008d00"})
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@ifindex, r0, 0x3}, 0x12)
socket$kcm(0x11, 0x2, 0x0)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d80)="170000007a006bcd9e3fe3dc6e08170007000054250000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x107, 0x13, 0x0, 0x0)

16.950318017s ago: executing program 0 (id=803):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={0xffffffffffffffff, 0x0, 0x53, 0x1000, &(0x7f0000000a80)="e891d04d3cb6832fb1f7438b0080a2c79ae0410cdee59eebe57c21a09453de7c7c31611921dcd1540e940ff9e1ff475bd403e927d149f20608d7c7d98b0ebbc38ea5d501d8f743b850afefff3eacf5729db07e", &(0x7f0000005340)=""/4096, 0xc, 0x0, 0xd0, 0xca, &(0x7f0000000b00)="2c17a8b0fcac59c6925632de364c37f07389dd8576191b644ab998f17b4784557b339e14de762146d6d5cce1054b4cdc4ea0013c02075e6f793012f6c9dd20c29df5cb888fbaf354b784a1f99ca28ade354f01d0b6cf532398fe4789fbe00e70d0d34866fb77aa8e6aa0ff2b1a72024674e4a242ec550ab8b801faa9ad3ede1f10e3d98f6928f59e894c675c75019f1a1aa94a3199af5d0391d7dda27e5161730e3824e0058135f703541ba84ded04a44462a7eb8f8799196bd69de9a0511f6ce1ee7d0433b3607c9a6bd7927e56b9d4", &(0x7f0000000c00)="d5729b58dc97064c7f88f798b4f68c4f2f96c8251595c68b232d2690d3c00911b35cd30f687a28544cdcc1336100df773ab7a36a3fbfec056fb19f6ecf392da538fb4c821a8b55591b5a6512f7a6c514f8a6df20fd90b3b94492a5c61d64298efc0148944cac7b2da127d2c01f247547eb561a41dd87bfa898d1b850ab0cef341df6e13de79d8e6b7e12f86a8f32cb20b2fd9e69333b647309a3fc4ddafe32bc1c39465f316a9f75e1bccc773fe2093465615ef90c1686eead39b961ccf40a7d44ec8deaf57e7ef59f0d", 0x1, 0x0, 0xb}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1a, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}}, 0x0, 0x58f4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @tracing=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x4, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x5, 0xffffffffffffffe0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000480)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, 0x4a0bcc19d1c7e604, r3, 0x8, &(0x7f0000000700)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x153ae, r3, 0x3, &(0x7f0000000740)=[0xffffffffffffffff], &(0x7f0000000780)=[{0x2, 0x1, 0x3, 0x1}, {0x2, 0x3, 0x8, 0x6}, {0x0, 0x3, 0x4, 0x5}], 0x10, 0x3}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000002500)={0x0, 0x0, 0x0}, 0x100)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000004340)=""/4096, 0x1000}], 0x1}, 0x10100)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000009000000dfa2bff372df8cdbeb318ab2bec8fc36903c0ec359caa1af3c914019395cc154010c693709800000000000000016a85adef34bf78c76e6222337923e1bea6ef682cc4375f594425d408ccc58187feb0e3d43347f989007a7c63f6dae2acb4af936461f34a8a32a50bbbb69ec85168947b86df9f2609bf93f7a1be259621818c3c75da31290bce645451b851111dd98ac4d8da9317c2c082020e0b2d634086785f3fe41a3053645cc413790faf7e229c782845b5bb774f7f154263178151ea93ff2cac4b181332c9c9a1c7d85616c8100000000000000d8300d19d585000000fc005774b56a7142047326f940e95b8489e1c5650f5c61299a295f39c88456391cffdef93e29f10f4a11f0cfbfc0ff976b20fef6033495b9b94777db9bb9b678ffc1130000009faa798226a080c01e47151268a02dc1a557cfdcf76305fbf6643df66b1b4d2d5e7bf698fc5a18d984ecb91e6683a5f522d536e2f3c43b89823659d1945258fc668950e5aacfffffffffffffff7f7a266c90e64efc8d8f730867202a9ee94e6a00"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r6, 0xe8, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0xfffffda6, 0x10, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f00000028c0)=ANY=[@ANYBLOB="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", @ANYBLOB="047f89", @ANYRES64=r1], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000002000018200000", @ANYRES32=r7, @ANYBLOB="00000000000000006200f8ff0000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x20}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030023000b02d25a806f8c6394f91d24fc60040f03", 0x17}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x5, 0x10002, 0x7, 0x0, 0x1}, 0x50)
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYRESOCT=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000440)=r8, 0x4)
syz_clone(0x1000000, &(0x7f0000000200)="106fae99cd8652e81cfe03c83b69dc68d9a0606941c1e3c9d47c653477d9067560a625fe4b671e3b407cd28b4e98a945fff8610a247af471b82085492a70b71a4e238d8bca2e2fb2f940c1d3876393e0d2e5d6d33254ab465335bb7f7c1282eddebec75f8b9191817d4ecf4cf6f7831994144c989cb62889ff25aa5ed9de6d9144f69527a67a09da9b25494aa7696529fccb6856a4e876e60f61d49a374a36e1b98c5e5ebd5aeb751062e8084f6f1d95ab8488eea568ee7cafd9802507856b540e6711b1f5a24dfbee4ef0ac2f68bc2b496265a7b2433efcd52e", 0xda, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000580)="b67a06f58ef54f9630f584c104f36ad945e4abba210f91f749ba3470b01cf5e8f7b0d002d325803dabbe2b502abb21987f5b8cacb743c929a7948799be3f1783e5e0ea4cf0d8030fc918f653fac098afb6ef2321b1121552d3d45f61093fc4dd51ca8175d0c9e28e56f1473080433f4686db0fbe59be3a5c62e7a6ebf15dc61fec3f27e324f2a78297fb80f2165db525")
write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)

16.85044134s ago: executing program 1 (id=804):
socketpair(0x2, 0x3, 0xff, &(0x7f0000000040))
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
socket$kcm(0x2, 0x1000000000000002, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5, 0x4, 0x0, 0x9}, {0x10000002, 0x5, 0x0, 0x1}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
close(r0)
r3 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0xc1)
setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40086602, 0x0)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800, 0xca, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
r8 = getpid()
perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x7, 0x2, 0x9, 0xde, 0x0, 0x1, 0x21140, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={0x0, 0x1}, 0x4080, 0x4, 0x7fff, 0x0, 0x7, 0x8, 0xad1a, 0x0, 0x8, 0x0, 0x4}, r8, 0x4, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"})
sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10, 0x0}, 0x4040800)

16.800472084s ago: executing program 2 (id=805):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x89a3, &(0x7f0000000900)={'bridge0\x00', @broadcast})
r1 = socket$kcm(0x15, 0x5, 0x0)
sendmsg$kcm(r1, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000000), 0x4)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x83549, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x65f8, 0x5}, 0x231c, 0x4, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
socket$kcm(0x10, 0x2, 0x4)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x2, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{}, {&(0x7f0000000500)}, {&(0x7f0000000440)="7137fc2cffcd6318d3b03cdd90ef215e91c9d611a61aca930c33ceca52691a4690185bc0c114bcfc1bc3de10acad7f98f1888ffaf61a63140c323e4c43fbf3e682fe95a32e4260e7c762961b5daa0157989788b463f6dd323f51bb8bb68ed0a251c3573d64c3b7f4835afbff053589b4515308dabcf1ffe6ed2b2f8b9de82cf028c775d8582a9ab39a5ff3cf1e887c20e145e5dd4e4633a2855cf4e49cd6a5255dc2ff223ab682e3b612b03b04c4b4d83d6a41e22e8b2e0885c2844a4280", 0xbe}, {&(0x7f0000000580)}], 0x4}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0xf5ff)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r6 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r6, &(0x7f0000000700)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="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", 0x154}, {&(0x7f0000000740)="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", 0x437}], 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r6], 0x48}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff)
r7 = socket$kcm(0x10, 0x400000002, 0x0)
setsockopt$sock_attach_bpf(r7, 0x10e, 0xb, &(0x7f00000001c0), 0x4)
r8 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000038000b63d25a8064c15494f90324fc60", 0x14}], 0x1}, 0x0)
write$cgroup_subtree(r7, 0x0, 0xfe33)
sendmsg$kcm(r2, &(0x7f0000000240)={&(0x7f0000000280)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80, 0x0}, 0x4000)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2})

16.710353019s ago: executing program 0 (id=806):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8916, &(0x7f0000000140)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX\xf73\xa1\xa2\'\x00\x00\x00\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d')
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90)
r2 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r2, 0x88, 0x64, &(0x7f0000000380)=r1, 0x4)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x32, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000480)=""/42, 0x2a}, {&(0x7f00000004c0)=""/33, 0x21}, {&(0x7f0000000500)=""/49, 0x31}, {&(0x7f0000000540)=""/143, 0x8f}, {&(0x7f0000000740)=""/70, 0x46}, {&(0x7f00000007c0)=""/171, 0xab}, {&(0x7f0000000880)=""/220, 0xdc}], 0x7, &(0x7f0000000a00)=""/181, 0xb5}, 0x40000000)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000a4c3b1"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='btrfs_transaction_commit\x00', r5, 0x0, 0xfffffffffffffff9}, 0x51)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x5411, &(0x7f0000000000))
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000640)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a10a0015000200142603600e12080002007a010401a8001600200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703", 0xd2}, {&(0x7f0000000cc0)="14a3546ac510", 0x6}], 0x2}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB='c *:* ]=\x00'], 0x9)
r8 = openat$cgroup_freezer_state(r7, &(0x7f0000000140), 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="13000000100000000800"/20, @ANYRES32=0x1, @ANYBLOB="0300"/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="004a0000000000200000000000000000000000000000000000000000e15f9a28259cde50e669488346170adcd93086ed6b8b05c1bb3a136e8e7f986e87943d93aeae70adbd6a97f6ff039a5c38abce269bcc3b4bcaccc6a04bb152810250f737ed5e2545e08299735b47236cbade623bbebcdfa6558325682c1ea89d303866fa2198241a0253bc22d85e75a8312277bb1701f787dc070c061d2494445537353805bfa3b16e8aa6e0aa67104929ae2ca5511cf47b6e3a25f6fdbd0fb462668c63d66f9e304b1227d2b6311b540dc4dc054bfb6c9701f258744d8454f8e3e57f66bc"], 0x50)
r9 = socket$kcm(0x2, 0x1, 0x84)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a80016002000014003", 0x39}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r10 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000055009155090893b31b71a54a07"], 0xfe33)
setsockopt$sock_attach_bpf(r9, 0x84, 0x9, &(0x7f0000000380), 0x98)
write$cgroup_freezer_state(r8, &(0x7f0000000400)='FROZEN\x00', 0x7)

16.620007245s ago: executing program 1 (id=807):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111b7000000000085100000020000008500000019000058d0704f2f153d2ac3a41b4d3192009500"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70)

16.27981568s ago: executing program 1 (id=808):
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000006480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000014c0)=""/4089, 0xff9}, {&(0x7f00000024c0)=""/4081, 0xff1}, {&(0x7f0000000a00)=""/87, 0x57}, {&(0x7f0000000180)=""/235, 0xeb}, {&(0x7f0000000b80)=""/72, 0x48}, {&(0x7f00000000c0)=""/55, 0x37}], 0x6}, 0x10002)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0x1c}], 0x1}, 0x0)

16.279204976s ago: executing program 1 (id=809):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007b11606100004000851000000200000085000000b500400095003300000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70)

16.146535844s ago: executing program 1 (id=810):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000073119f000000000016000000000000009500740000000400"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
socketpair(0x15, 0x6, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
sendmsg$kcm(r1, &(0x7f0000000400)={&(0x7f0000000080)=@isdn={0x22, 0x5c, 0x5, 0x9, 0x7}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)="c05b408a7cfdf81a3b1db9bad08af230bb6dcc177be992064e9e831201e13350de6eb00ca3c92dbefaaa77ecce183bcee4cac82b12b95377cb9e0405cfc37a76e4bf26e817f32366e9d976bb02ac2c449a4ae41957a09828c668aeee77106f129590df2ba43e6be7335cadcfed4c656e561b3284ba1e997ba85c2f588eb269d8d2021601fd22d79bc4e4ae4ab3cf54498f89b9749072d3f12072e5ead4eb7a311e953a403b72f298c08d195aa0a5fd4ba99256da83bf391eae9c64193996f5e40fe76deb931cdb77f34f22490259bd4d620f23eea8bdd1059f3a068f6bcc318ef3e392d727713eeb5943630c", 0xec}], 0x1, &(0x7f0000000240)=[{0x100, 0x103, 0x7, "538eeed6a855ebed1cb11a1bc85bd1bbc5db02c7a83de8dd4a56c9cd029d95bf6d40027f700ac82429b20f6bf2ef2f76d801f732c84baaf8c7e6e0a72c24e8a0f414aa4cdb1b02b7b532f78dd0bcfa88fea13ac9c8e2adad863a7b8ffc1a8d46b6f6fea4a89a736f3ed4c130052cff1df91e74ca95f1db97c2d462ac885170c3b532df23e7a30df239560c121ef9cf01fc0f9c95ee0a3738a231431df8b08a0676572354bf46eb0fd98b4c65708162c68acb9a047ad46c1303a33d7c36e2a463057e4df66f67b9d7c8b3b835d1683f42377241df331b63c4e6e20581e75fdcfae4c20f20314c45d8d054d02c"}, {0xc0, 0x112, 0x401, "4da9dfaaacc93d68df31c2c8f504fc456b462dc6da11f3f63ba87b906b08dbe44286264010694f33fe7c19dc4e92669a3b318b289f8a458e2ab87e47a5ce243e6839b5f167848d407494d29081ef8ee7704794b4608b0f9ff35cc39bec957a95fa21e3e1df730fe9361c7026892323372a843396ca1ad4471641e82f5f15678beb2766c87ea4af121eda52c5a903a2e83a8b0221a732c85d91cd6eae08b16c3905f2aa83debcfdd4d0c08a1379"}], 0x1c0}, 0x90)

16.042046185s ago: executing program 1 (id=811):
r0 = socket$kcm(0x10, 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='devices.list\x00', 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0x2a, 0x2, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0xb}, 0x14107, 0x2c, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x60ff, 0x8cffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1000000000000183, 0x0, &(0x7f00000000c0)=[{0x0, 0x4, 0x4, 0x1}, {0x2, 0x0, 0x3}]}, 0x94)
r2 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x84, 0x17, &(0x7f0000000000)=r5, 0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r6, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x3500000000000000)
close(r1)
r7 = socket$kcm(0x2, 0x0, 0x0)
sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004081)
syz_clone(0xa2004000, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000000900)=""/223, 0xdf}], 0x1}, 0x102)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/216, 0xd8}, {&(0x7f0000000f40)=""/185, 0xb9}, {&(0x7f0000000380)=""/221, 0xdd}, {&(0x7f0000000580)=""/217, 0xd9}, {&(0x7f0000000480)=""/213, 0xd5}, {&(0x7f0000000a00)=""/189, 0xbd}, {&(0x7f00000006c0)=""/194, 0xc2}, {&(0x7f0000002a00)=""/4068, 0xfe4}, {&(0x7f0000000140)=""/127, 0x7f}], 0x9}, 0x0)

96.17076ms ago: executing program 32 (id=806):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8916, &(0x7f0000000140)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX\xf73\xa1\xa2\'\x00\x00\x00\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d')
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90)
r2 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r2, 0x88, 0x64, &(0x7f0000000380)=r1, 0x4)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x32, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000480)=""/42, 0x2a}, {&(0x7f00000004c0)=""/33, 0x21}, {&(0x7f0000000500)=""/49, 0x31}, {&(0x7f0000000540)=""/143, 0x8f}, {&(0x7f0000000740)=""/70, 0x46}, {&(0x7f00000007c0)=""/171, 0xab}, {&(0x7f0000000880)=""/220, 0xdc}], 0x7, &(0x7f0000000a00)=""/181, 0xb5}, 0x40000000)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000a4c3b1"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='btrfs_transaction_commit\x00', r5, 0x0, 0xfffffffffffffff9}, 0x51)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x5411, &(0x7f0000000000))
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000640)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a10a0015000200142603600e12080002007a010401a8001600200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703", 0xd2}, {&(0x7f0000000cc0)="14a3546ac510", 0x6}], 0x2}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB='c *:* ]=\x00'], 0x9)
r8 = openat$cgroup_freezer_state(r7, &(0x7f0000000140), 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="13000000100000000800"/20, @ANYRES32=0x1, @ANYBLOB="0300"/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="004a0000000000200000000000000000000000000000000000000000e15f9a28259cde50e669488346170adcd93086ed6b8b05c1bb3a136e8e7f986e87943d93aeae70adbd6a97f6ff039a5c38abce269bcc3b4bcaccc6a04bb152810250f737ed5e2545e08299735b47236cbade623bbebcdfa6558325682c1ea89d303866fa2198241a0253bc22d85e75a8312277bb1701f787dc070c061d2494445537353805bfa3b16e8aa6e0aa67104929ae2ca5511cf47b6e3a25f6fdbd0fb462668c63d66f9e304b1227d2b6311b540dc4dc054bfb6c9701f258744d8454f8e3e57f66bc"], 0x50)
r9 = socket$kcm(0x2, 0x1, 0x84)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a80016002000014003", 0x39}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r10 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000055009155090893b31b71a54a07"], 0xfe33)
setsockopt$sock_attach_bpf(r9, 0x84, 0x9, &(0x7f0000000380), 0x98)
write$cgroup_freezer_state(r8, &(0x7f0000000400)='FROZEN\x00', 0x7)

174.658µs ago: executing program 33 (id=811):
r0 = socket$kcm(0x10, 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='devices.list\x00', 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0x2a, 0x2, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0xb}, 0x14107, 0x2c, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x60ff, 0x8cffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1000000000000183, 0x0, &(0x7f00000000c0)=[{0x0, 0x4, 0x4, 0x1}, {0x2, 0x0, 0x3}]}, 0x94)
r2 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x84, 0x17, &(0x7f0000000000)=r5, 0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r6, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x3500000000000000)
close(r1)
r7 = socket$kcm(0x2, 0x0, 0x0)
sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004081)
syz_clone(0xa2004000, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000000900)=""/223, 0xdf}], 0x1}, 0x102)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/216, 0xd8}, {&(0x7f0000000f40)=""/185, 0xb9}, {&(0x7f0000000380)=""/221, 0xdd}, {&(0x7f0000000580)=""/217, 0xd9}, {&(0x7f0000000480)=""/213, 0xd5}, {&(0x7f0000000a00)=""/189, 0xbd}, {&(0x7f00000006c0)=""/194, 0xc2}, {&(0x7f0000002a00)=""/4068, 0xfe4}, {&(0x7f0000000140)=""/127, 0x7f}], 0x9}, 0x0)

0s ago: executing program 34 (id=805):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x89a3, &(0x7f0000000900)={'bridge0\x00', @broadcast})
r1 = socket$kcm(0x15, 0x5, 0x0)
sendmsg$kcm(r1, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000000), 0x4)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x83549, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x65f8, 0x5}, 0x231c, 0x4, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
socket$kcm(0x10, 0x2, 0x4)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x2, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{}, {&(0x7f0000000500)}, {&(0x7f0000000440)="7137fc2cffcd6318d3b03cdd90ef215e91c9d611a61aca930c33ceca52691a4690185bc0c114bcfc1bc3de10acad7f98f1888ffaf61a63140c323e4c43fbf3e682fe95a32e4260e7c762961b5daa0157989788b463f6dd323f51bb8bb68ed0a251c3573d64c3b7f4835afbff053589b4515308dabcf1ffe6ed2b2f8b9de82cf028c775d8582a9ab39a5ff3cf1e887c20e145e5dd4e4633a2855cf4e49cd6a5255dc2ff223ab682e3b612b03b04c4b4d83d6a41e22e8b2e0885c2844a4280", 0xbe}, {&(0x7f0000000580)}], 0x4}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0xf5ff)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r6 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r6, &(0x7f0000000700)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="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", 0x154}, {&(0x7f0000000740)="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", 0x437}], 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r6], 0x48}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff)
r7 = socket$kcm(0x10, 0x400000002, 0x0)
setsockopt$sock_attach_bpf(r7, 0x10e, 0xb, &(0x7f00000001c0), 0x4)
r8 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000038000b63d25a8064c15494f90324fc60", 0x14}], 0x1}, 0x0)
write$cgroup_subtree(r7, 0x0, 0xfe33)
sendmsg$kcm(r2, &(0x7f0000000240)={&(0x7f0000000280)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80, 0x0}, 0x4000)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:3508' (ED25519) to the list of known hosts.
syzkaller login: [   48.847098][ T5771] cgroup: Unknown subsys name 'net'
[   48.976194][ T5771] cgroup: Unknown subsys name 'cpuset'
[   48.980041][ T5771] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.677312][ T5771] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.710390][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.724462][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.727689][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.730936][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.731108][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.737015][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.739997][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.744758][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.748444][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.753485][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.756743][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.758877][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.761917][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.765826][ T5224] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.773666][ T5224] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.084962][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   56.130258][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   56.266714][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   56.297849][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.300348][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.302720][ T5827] bridge_slave_0: entered allmulticast mode
[   56.306260][ T5827] bridge_slave_0: entered promiscuous mode
[   56.318195][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.321004][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.325194][ T5828] bridge_slave_0: entered allmulticast mode
[   56.327920][ T5828] bridge_slave_0: entered promiscuous mode
[   56.332417][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.335572][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.338619][ T5828] bridge_slave_1: entered allmulticast mode
[   56.342459][ T5828] bridge_slave_1: entered promiscuous mode
[   56.348511][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.351359][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.354528][ T5827] bridge_slave_1: entered allmulticast mode
[   56.358316][ T5827] bridge_slave_1: entered promiscuous mode
[   56.435053][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.440548][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.450677][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.456959][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.504087][ T5827] team0: Port device team_slave_0 added
[   56.530622][ T5827] team0: Port device team_slave_1 added
[   56.533759][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.536629][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.539929][ T5836] bridge_slave_0: entered allmulticast mode
[   56.544765][ T5836] bridge_slave_0: entered promiscuous mode
[   56.551457][ T5828] team0: Port device team_slave_0 added
[   56.570731][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.573953][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.577061][ T5836] bridge_slave_1: entered allmulticast mode
[   56.579797][ T5836] bridge_slave_1: entered promiscuous mode
[   56.586037][ T5828] team0: Port device team_slave_1 added
[   56.616041][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.618361][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.627310][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.666284][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.669091][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.680109][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.687084][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.690529][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.694026][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.704463][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.717863][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.722219][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.725504][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.735491][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.795925][ T5836] team0: Port device team_slave_0 added
[   56.829759][ T5836] team0: Port device team_slave_1 added
[   56.838309][ T5827] hsr_slave_0: entered promiscuous mode
[   56.841559][ T5827] hsr_slave_1: entered promiscuous mode
[   56.850356][ T5828] hsr_slave_0: entered promiscuous mode
[   56.854123][ T5828] hsr_slave_1: entered promiscuous mode
[   56.857310][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.860522][ T5828] Cannot create hsr debugfs directory
[   56.928149][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.930909][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.941812][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.963741][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.966682][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.977437][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.090460][ T5836] hsr_slave_0: entered promiscuous mode
[   57.094226][ T5836] hsr_slave_1: entered promiscuous mode
[   57.097122][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.100144][ T5836] Cannot create hsr debugfs directory
[   57.332034][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.351813][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.368332][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.385378][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.439273][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.447845][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.476077][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.482945][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.556920][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.573785][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.580596][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.590653][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.708858][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.718209][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.754800][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   57.762346][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   57.765751][ T5838] Bluetooth: hci1: command tx timeout
[   57.782124][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.785140][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.791838][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.794756][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.811310][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.814209][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.838360][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.841210][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.844419][ T5838] Bluetooth: hci0: command tx timeout
[   57.858037][ T5838] Bluetooth: hci2: command tx timeout
[   57.882080][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.937701][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   57.956530][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.959424][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.988584][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.991390][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.199367][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.228275][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.286429][ T5828] veth0_vlan: entered promiscuous mode
[   58.307011][ T5828] veth1_vlan: entered promiscuous mode
[   58.336446][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.350674][ T5827] veth0_vlan: entered promiscuous mode
[   58.366483][ T5828] veth0_macvtap: entered promiscuous mode
[   58.377664][ T5828] veth1_macvtap: entered promiscuous mode
[   58.392216][ T5827] veth1_vlan: entered promiscuous mode
[   58.415515][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.436908][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.452370][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.456246][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.459689][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.464269][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.472957][ T5836] veth0_vlan: entered promiscuous mode
[   58.482223][ T5827] veth0_macvtap: entered promiscuous mode
[   58.500926][ T5827] veth1_macvtap: entered promiscuous mode
[   58.508088][ T5836] veth1_vlan: entered promiscuous mode
[   58.549345][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.565764][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.577513][ T5827] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.580979][ T5827] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.587120][ T5827] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.590598][ T5827] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.629280][ T5836] veth0_macvtap: entered promiscuous mode
[   58.635719][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.638595][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.649439][ T5836] veth1_macvtap: entered promiscuous mode
[   58.690544][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.695272][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.700346][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.720912][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.736289][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.739725][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.743952][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.747050][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.779278][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.786075][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.798061][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.902528][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.907580][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.925124][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.935283][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.003948][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.008010][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.172511][ T5899] C: renamed from team_slave_0 (while UP)
[   59.193262][ T5905] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1'.
[   59.391440][ T5899] netlink: 'syz.1.2': attribute type 3 has an invalid length.
[   59.407408][ T5899] netlink: 'syz.1.2': attribute type 1 has an invalid length.
[   59.409756][ T5899] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2'.
[   59.426360][ T5899] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   59.500735][ T5901] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   59.512616][ T5914] netlink: 'syz.1.4': attribute type 29 has an invalid length.
[   59.854363][ T5838] Bluetooth: hci1: command tx timeout
[   59.924292][ T5838] Bluetooth: hci2: command tx timeout
[   59.924921][ T5224] Bluetooth: hci0: command tx timeout
[   60.107321][ T5937] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.750330][ T5946] netlink: 'syz.0.14': attribute type 29 has an invalid length.
[   60.947240][ T5955] netlink: 132 bytes leftover after parsing attributes in process `syz.2.18'.
[   60.948674][    C0] hrtimer: interrupt took 33232 ns
[   61.200604][ T5968] netlink: 'syz.1.20': attribute type 7 has an invalid length.
[   61.274896][ T5972] syzkaller0: entered promiscuous mode
[   61.275730][ T5972] syzkaller0: entered allmulticast mode
[   61.276710][ T5862] syzkaller0: tun_net_xmit 48
[   61.281379][ T5972] syzkaller0: tun_net_xmit 1280
[   61.289422][ T5972] syzkaller0: create flow: hash 3356892889 index 2
[   61.317536][ T5971] syzkaller0: delete flow: hash 3356892889 index 2
[   61.484911][ T5975] netlink: 'syz.1.22': attribute type 2 has an invalid length.
[   61.933722][ T5224] Bluetooth: hci1: command tx timeout
[   62.004380][ T5224] Bluetooth: hci0: command tx timeout
[   62.015237][ T5224] Bluetooth: hci2: command tx timeout
[   62.078908][ T5977] netlink: 'syz.1.23': attribute type 29 has an invalid length.
[   62.081915][ T5978] netlink: 'syz.1.23': attribute type 29 has an invalid length.
[   62.251485][ T5990] netlink: 'syz.1.28': attribute type 21 has an invalid length.
[   62.256139][ T5990] netlink: 156 bytes leftover after parsing attributes in process `syz.1.28'.
[   62.486590][ T6008] netlink: 'syz.1.31': attribute type 29 has an invalid length.
[   62.922905][ T6028] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.40'.
[   62.929158][ T6028] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   62.932437][ T6028] openvswitch: netlink: Key type 256 is out of range max 32
[   62.941324][ T6028] netlink: 160 bytes leftover after parsing attributes in process `syz.1.40'.
[   62.978979][ T6028] erspan0: refused to change device tx_queue_len
[   62.981573][ T6028] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[   63.003795][ T6031] netlink: 60 bytes leftover after parsing attributes in process `syz.2.41'.
[   63.012401][ T6028] syz.1.40 (6028) used greatest stack depth: 19112 bytes left
[   63.933350][ T6043] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.45'.
[   63.984547][ T6045] netlink: 132 bytes leftover after parsing attributes in process `syz.1.46'.
[   63.995622][ T6045] tun0: tun_chr_ioctl cmd 1074025677
[   63.997527][ T6045] tun0: linktype set to 774
[   64.004777][ T5224] Bluetooth: hci1: command tx timeout
[   64.045325][ T6049] netlink: 152 bytes leftover after parsing attributes in process `syz.2.48'.
[   64.099058][ T5838] Bluetooth: hci0: command tx timeout
[   64.101328][ T5224] Bluetooth: hci2: command tx timeout
[   64.560707][ T6084] netlink: 5 bytes leftover after parsing attributes in process `syz.1.59'.
[   64.782913][ T6096] syz.1.63 uses obsolete (PF_INET,SOCK_PACKET)
[   65.157422][ T6115] validate_nla: 7 callbacks suppressed
[   65.157457][ T6115] netlink: 'syz.0.70': attribute type 10 has an invalid length.
[   65.161845][ T6115] netlink: 'syz.0.70': attribute type 11 has an invalid length.
[   65.165581][ T6115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.70'.
[   65.175932][ T6115] netlink: 'syz.0.70': attribute type 29 has an invalid length.
[   65.184157][ T6115] netlink: 'syz.0.70': attribute type 29 has an invalid length.
[   65.311325][ T6120] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.71'.
[   65.527071][ T6129] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.76'.
[   65.660614][ T6134] syzkaller0: entered promiscuous mode
[   65.666220][ T6134] syzkaller0: entered allmulticast mode
[   65.676761][ T5701] syzkaller0: tun_net_xmit 48
[   65.681932][ T6134] syzkaller0: tun_net_xmit 1280
[   65.692475][ T6134] syzkaller0: create flow: hash 3356892889 index 1
[   65.722835][ T6133] syzkaller0: delete flow: hash 3356892889 index 1
[   66.275232][ T6156] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.83'.
[   66.667345][ T6158] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.84'.
[   67.218242][ T6181] netlink: 'syz.2.91': attribute type 2 has an invalid length.
[   67.279610][ T6181] netlink: 'syz.2.91': attribute type 2 has an invalid length.
[   67.438006][ T6189] netlink: 'syz.2.94': attribute type 29 has an invalid length.
[   67.441133][ T6189] netlink: 'syz.2.94': attribute type 29 has an invalid length.
[   68.249195][ T6222] netlink: 'syz.1.105': attribute type 29 has an invalid length.
[   68.257093][ T6222] netlink: 'syz.1.105': attribute type 29 has an invalid length.
[   68.395160][ T6230] netlink: 830 bytes leftover after parsing attributes in process `syz.0.108'.
[   68.587838][ T6242] netlink: 26 bytes leftover after parsing attributes in process `syz.0.112'.
[   69.291251][ T6267] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.120'.
[   69.654180][ T6282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.122'.
[   69.957834][ T6287] netlink: 132 bytes leftover after parsing attributes in process `syz.2.126'.
[   70.557383][ T6294] validate_nla: 5 callbacks suppressed
[   70.557394][ T6294] netlink: 'syz.1.128': attribute type 29 has an invalid length.
[   70.601488][ T6294] netlink: 'syz.1.128': attribute type 29 has an invalid length.
[   70.870481][ T6300] netlink: 10 bytes leftover after parsing attributes in process `syz.0.127'.
[   71.000945][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.006278][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.249137][ T6306] netlink: 'syz.2.131': attribute type 29 has an invalid length.
[   71.252655][ T6306] netlink: 'syz.2.131': attribute type 29 has an invalid length.
[   71.383419][ T6314] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.134'.
[   71.414872][ T6319] netlink: 'syz.2.135': attribute type 29 has an invalid length.
[   71.418147][ T6319] netlink: 'syz.2.135': attribute type 29 has an invalid length.
[   71.538987][ T6325] netlink: 'syz.2.138': attribute type 29 has an invalid length.
[   71.543889][ T6325] netlink: 'syz.2.138': attribute type 29 has an invalid length.
[   71.892384][ T6336] netlink: 'syz.1.143': attribute type 5 has an invalid length.
[   71.925797][ T6336] netlink: 176 bytes leftover after parsing attributes in process `syz.1.143'.
[   72.014906][ T6347] netlink: 'syz.0.145': attribute type 29 has an invalid length.
[   72.220457][ T6345] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.143'.
[   72.902628][ T6361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.151'.
[   73.369845][ T6377] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.154'.
[   73.458081][ T6383] netlink: 825 bytes leftover after parsing attributes in process `syz.2.155'.
[   73.465913][ T6383] netlink: 130144 bytes leftover after parsing attributes in process `syz.2.155'.
[   74.607058][ T6417] Zero length message leads to an empty skb
[   75.342398][ T6421] team0: Cannot enslave team device to itself
[   75.410443][ T6431] __nla_validate_parse: 1 callbacks suppressed
[   75.410453][ T6431] netlink: 140 bytes leftover after parsing attributes in process `syz.1.172'.
[   77.958331][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 2144695312 wd_nsec: 2144695188
[   79.003095][ T6441] validate_nla: 9 callbacks suppressed
[   79.003106][ T6441] netlink: 'syz.1.175': attribute type 29 has an invalid length.
[   79.246190][ T6465] Driver unsupported XDP return value 0 on prog  (id 107) dev N/A, expect packet loss!
[   79.252150][ T6465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.180'.
[   79.469207][ T6481] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.187'.
[   79.486531][ T6483] netlink: 'syz.0.188': attribute type 29 has an invalid length.
[   79.514888][ T6485] netlink: 'syz.2.189': attribute type 1 has an invalid length.
[   79.517349][ T6485] netlink: 176 bytes leftover after parsing attributes in process `syz.2.189'.
[   79.520642][ T6485] IPv6: NLM_F_REPLACE set, but no existing node found!
[   79.541773][ T6488] netlink: 'syz.0.190': attribute type 10 has an invalid length.
[   79.566938][ T6488] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.576151][ T6488] team0: Port device batadv0 added
[   79.772502][ T6499] netlink: 96168 bytes leftover after parsing attributes in process `syz.2.195'.
[   79.992734][ T6505] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.198'.
[   80.003948][ T6508] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.198'.
[   80.015305][ T6507] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   80.018109][ T6507] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   80.204131][ T6522] netlink: 'syz.1.202': attribute type 29 has an invalid length.
[   80.440318][ T6530] netlink: 'syz.0.206': attribute type 10 has an invalid length.
[   80.536375][ T6536] netlink: 132 bytes leftover after parsing attributes in process `syz.1.208'.
[   81.176595][    T9] cfg80211: failed to load regulatory.db
[   81.322947][ T6530] team0: Port device batadv0 removed
[   81.327345][ T6530] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.330855][ T6530] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   81.374938][ T6544] Dead loop on virtual device ip6_vti0, fix it urgently!
[   81.388875][ T6545] Dead loop on virtual device ip6_vti0, fix it urgently!
[   81.548845][ T6558] netlink: 'syz.1.215': attribute type 1 has an invalid length.
[   81.583347][ T6560] netlink: 'syz.0.216': attribute type 25 has an invalid length.
[   81.585834][ T6560] netlink: 'syz.0.216': attribute type 28 has an invalid length.
[   81.632441][ T6561] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.215'.
[   81.797965][ T6575] netlink: 'syz.2.222': attribute type 19 has an invalid length.
[   81.959851][ T6580] netlink: 40 bytes leftover after parsing attributes in process `syz.0.225'.
[   81.964866][ T6580] team0: entered promiscuous mode
[   81.967320][ T6580] team_slave_0: entered promiscuous mode
[   81.974587][ T6580] team_slave_1: entered promiscuous mode
[   81.978535][ T6580] team0: entered allmulticast mode
[   81.980778][ T6580] team_slave_0: entered allmulticast mode
[   81.983158][ T6580] team_slave_1: entered allmulticast mode
[   82.019667][ T6580] 8021q: adding VLAN 0 to HW filter on device team0
[   82.028031][ T6580] bridge0: port 3(team0) entered blocking state
[   82.035886][ T6580] bridge0: port 3(team0) entered disabled state
[   82.085057][ T6580] bridge0: port 3(team0) entered blocking state
[   82.088273][ T6580] bridge0: port 3(team0) entered forwarding state
[   82.306667][ T6596] netlink: 152 bytes leftover after parsing attributes in process `syz.2.230'.
[   82.311123][ T6596] netlink: 13047 bytes leftover after parsing attributes in process `syz.2.230'.
[   82.315652][ T6596] tc_dump_action: action bad kind
[   82.701720][ T6619] netlink: 168 bytes leftover after parsing attributes in process `syz.0.237'.
[   84.055377][ T6655] validate_nla: 9 callbacks suppressed
[   84.055445][ T6655] netlink: 'syz.0.247': attribute type 33 has an invalid length.
[   84.099565][ T6655] bridge0: port 3(team0) entered disabled state
[   84.917423][ T6675] netlink: 40 bytes leftover after parsing attributes in process `syz.2.254'.
[   85.090833][ T6667] netlink: 'syz.0.251': attribute type 29 has an invalid length.
[   85.095868][ T6668] netlink: 'syz.0.251': attribute type 29 has an invalid length.
[   85.101508][ T6675] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.149153][ T6675] bridge_slave_0 (unregistering): left allmulticast mode
[   85.152054][ T6675] bridge_slave_0 (unregistering): left promiscuous mode
[   85.160964][ T6675] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.210141][ T6679] netlink: 'syz.1.255': attribute type 3 has an invalid length.
[   85.216055][ T6679] netlink: 'syz.1.255': attribute type 10 has an invalid length.
[   85.269185][ T6682] netlink: 'syz.2.257': attribute type 6 has an invalid length.
[   85.468257][ T6695] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.260'.
[   85.568905][ T6708] netlink: 60 bytes leftover after parsing attributes in process `syz.1.264'.
[   85.574514][ T6708] netlink: 60 bytes leftover after parsing attributes in process `syz.1.264'.
[   85.578360][ T6708] netlink: 60 bytes leftover after parsing attributes in process `syz.1.264'.
[   85.828150][ T5224] Bluetooth: hci2: SCO packet for unknown connection handle 0
[   86.000696][ T6732] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.273'.
[   86.005387][ T6732] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.273'.
[   86.010298][ T6732] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.273'.
[   86.689572][ T6768] netlink: 'syz.1.285': attribute type 29 has an invalid length.
[   86.692724][ T6768] netlink: 'syz.1.285': attribute type 29 has an invalid length.
[   87.101060][ T6779] netlink: 'syz.0.289': attribute type 21 has an invalid length.
[   87.104843][ T6779] netlink: 128 bytes leftover after parsing attributes in process `syz.0.289'.
[   87.108557][ T6779] netlink: 'syz.0.289': attribute type 5 has an invalid length.
[   87.111782][ T6779] netlink: 3 bytes leftover after parsing attributes in process `syz.0.289'.
[   87.377341][ T6791] netlink: 140 bytes leftover after parsing attributes in process `syz.1.293'.
[   87.427442][ T6794] netlink: 180 bytes leftover after parsing attributes in process `syz.0.295'.
[   89.019142][ T6847] team0: Port device wlan1 added
[   89.228645][ T6875] validate_nla: 10 callbacks suppressed
[   89.228655][ T6875] netlink: 'syz.0.325': attribute type 10 has an invalid length.
[   89.235678][ T6875] vcan0: entered promiscuous mode
[   89.238159][ T6875] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check.
[   89.462701][ T6889] netlink: 'syz.1.330': attribute type 1 has an invalid length.
[   89.476194][ T5224] Bluetooth: hci2: unexpected event 0x35 length: 15 > 6
[   89.525075][ T6891] netlink: 'syz.2.331': attribute type 2 has an invalid length.
[   90.620002][ T5224] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4
[   90.620374][ T6934] netlink: 'syz.2.343': attribute type 6 has an invalid length.
[   91.058333][ T6944] netlink: 'syz.1.346': attribute type 39 has an invalid length.
[   91.061847][ T6943] netlink: 'syz.1.346': attribute type 39 has an invalid length.
[   91.099821][ T6944] hsr_slave_0 (unregistering): left promiscuous mode
[   91.807806][ T7000] __nla_validate_parse: 9 callbacks suppressed
[   91.807818][ T7000] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.356'.
[   91.814706][ T7000] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.356'.
[   93.086253][ T7082] netlink: 60 bytes leftover after parsing attributes in process `syz.0.367'.
[   93.090183][ T7078] netlink: 60 bytes leftover after parsing attributes in process `syz.0.367'.
[   93.095755][ T7082] netlink: 60 bytes leftover after parsing attributes in process `syz.0.367'.
[   93.100802][ T7082] netlink: 60 bytes leftover after parsing attributes in process `syz.0.367'.
[   93.475646][ T7110] raw_sendmsg: syz.0.377 forgot to set AF_INET. Fix it!
[   94.209346][ T7113] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.378'.
[   94.217795][ T7113] netlink: 7994 bytes leftover after parsing attributes in process `syz.0.378'.
[   94.276626][ T7116] netlink: 'syz.0.378': attribute type 2 has an invalid length.
[   94.278967][ T7116] netlink: 198064 bytes leftover after parsing attributes in process `syz.0.378'.
[   94.564533][ T7137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.387'.
[   95.057624][ T7161] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   96.316293][ T7192] netlink: 'syz.0.406': attribute type 10 has an invalid length.
[   96.828110][ T7204] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   98.529360][ T7253] __nla_validate_parse: 2 callbacks suppressed
[   98.529374][ T7253] netlink: 60 bytes leftover after parsing attributes in process `syz.1.423'.
[   98.537265][ T7253] netlink: 60 bytes leftover after parsing attributes in process `syz.1.423'.
[   98.541785][ T7253] netlink: 'syz.1.423': attribute type 29 has an invalid length.
[   98.547420][ T7253] netlink: 'syz.1.423': attribute type 29 has an invalid length.
[   98.796046][ T7257] netlink: 'syz.1.425': attribute type 10 has an invalid length.
[   98.831170][ T7257] team0: Cannot enslave team device to itself
[   99.787383][ T7296] netlink: 830 bytes leftover after parsing attributes in process `syz.0.438'.
[  100.027461][ T7307] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.442'.
[  100.136913][ T7315] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.443'.
[  100.679084][ T7331] netlink: 'syz.0.450': attribute type 10 has an invalid length.
[  100.681556][ T7331] netlink: 'syz.0.450': attribute type 19 has an invalid length.
[  100.684863][ T7331] netlink: 14536 bytes leftover after parsing attributes in process `syz.0.450'.
[  100.688675][ T7331] netlink: 'syz.0.450': attribute type 27 has an invalid length.
[  100.691199][ T7331] netlink: 'syz.0.450': attribute type 3 has an invalid length.
[  100.694765][ T7331] netlink: 132 bytes leftover after parsing attributes in process `syz.0.450'.
[  100.735569][ T7333] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.451'.
[  100.738705][ T7333] netlink: 'syz.0.451': attribute type 1 has an invalid length.
[  100.841647][ T7343] netlink: 'syz.0.454': attribute type 21 has an invalid length.
[  100.844982][ T7343] netlink: 'syz.0.454': attribute type 15 has an invalid length.
[  100.847577][ T7343] netlink: 156 bytes leftover after parsing attributes in process `syz.0.454'.
[  100.850424][ T7343] IPv6: NLM_F_CREATE should be specified when creating new route
[  100.853549][ T7343] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  100.855829][ T7343] IPv6: NLM_F_CREATE should be set when creating new route
[  100.858128][ T7343] IPv6: NLM_F_CREATE should be set when creating new route
[  100.860374][ T7343] IPv6: NLM_F_CREATE should be set when creating new route
[  100.953812][ T7347] syzkaller0: entered promiscuous mode
[  100.955656][ T7347] syzkaller0: entered allmulticast mode
[  101.306821][ T7369] netlink: 1042 bytes leftover after parsing attributes in process `syz.1.463'.
[  101.529710][ T7393] netlink: 'syz.0.469': attribute type 10 has an invalid length.
[  101.536972][ T7393] batman_adv: batadv0: Adding interface: vlan1
[  101.539519][ T7393] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.551463][ T7393] batman_adv: batadv0: Interface activated: vlan1
[  101.608770][ T7399] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  101.611538][ T7399] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  102.926732][ T7441] netlink: 'syz.0.484': attribute type 2 has an invalid length.
[  102.929492][ T7441] netlink: 'syz.0.484': attribute type 1 has an invalid length.
[  102.932169][ T7441] nbd: couldn't find a device at index 149
[  104.142066][ T7456] __nla_validate_parse: 4 callbacks suppressed
[  104.142082][ T7456] netlink: 132 bytes leftover after parsing attributes in process `syz.0.489'.
[  104.227632][ T7459] batman_adv: batadv0: Adding interface: netdevsim0
[  104.230092][ T7459] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  104.239666][ T7459] netlink: 51 bytes leftover after parsing attributes in process `syz.2.492'.
[  104.318207][ T7477] syz.1.498: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  104.322846][ T7477] CPU: 1 UID: 0 PID: 7477 Comm: syz.1.498 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  104.322858][ T7477] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  104.322864][ T7477] Call Trace:
[  104.322868][ T7477]  <TASK>
[  104.322873][ T7477]  dump_stack_lvl+0x189/0x250
[  104.322889][ T7477]  ? __pfx_dump_stack_lvl+0x10/0x10
[  104.322898][ T7477]  ? __pfx__printk+0x10/0x10
[  104.322910][ T7477]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  104.322922][ T7477]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  104.322933][ T7477]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  104.322944][ T7477]  warn_alloc+0x214/0x310
[  104.322954][ T7477]  ? stack_depot_save_flags+0x429/0x900
[  104.322967][ T7477]  ? __pfx_warn_alloc+0x10/0x10
[  104.322977][ T7477]  ? kasan_save_track+0x4f/0x80
[  104.322985][ T7477]  ? xskq_create+0x56/0x170
[  104.323011][ T7477]  ? xsk_init_queue+0xb0/0x110
[  104.323019][ T7477]  ? xsk_setsockopt+0x4de/0x710
[  104.323027][ T7477]  ? do_sock_setsockopt+0x17c/0x1b0
[  104.323036][ T7477]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  104.323043][ T7477]  ? do_syscall_64+0xfa/0x3b0
[  104.323054][ T7477]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.323066][ T7477]  __vmalloc_node_range_noprof+0x125/0x12f0
[  104.323088][ T7477]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  104.323100][ T7477]  ? __kasan_kmalloc+0x93/0xb0
[  104.323110][ T7477]  vmalloc_user_noprof+0xad/0xf0
[  104.323118][ T7477]  ? xskq_create+0xbf/0x170
[  104.323128][ T7477]  xskq_create+0xbf/0x170
[  104.323139][ T7477]  xsk_init_queue+0xb0/0x110
[  104.323149][ T7477]  xsk_setsockopt+0x4de/0x710
[  104.323182][ T7477]  ? __pfx_xsk_setsockopt+0x10/0x10
[  104.323192][ T7477]  ? __fget_files+0x2a/0x420
[  104.323201][ T7477]  ? aa_sock_opt_perm+0x74/0x110
[  104.323213][ T7477]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  104.323223][ T7477]  ? __pfx_xsk_setsockopt+0x10/0x10
[  104.323233][ T7477]  do_sock_setsockopt+0x17c/0x1b0
[  104.323243][ T7477]  __x64_sys_setsockopt+0x13f/0x1b0
[  104.323254][ T7477]  do_syscall_64+0xfa/0x3b0
[  104.323264][ T7477]  ? lockdep_hardirqs_on+0x9c/0x150
[  104.323274][ T7477]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.323282][ T7477]  ? exc_page_fault+0x9f/0xf0
[  104.323292][ T7477]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.323300][ T7477] RIP: 0033:0x7f8b4ef8e9a9
[  104.323308][ T7477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  104.323315][ T7477] RSP: 002b:00007f8b4fdaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  104.323325][ T7477] RAX: ffffffffffffffda RBX: 00007f8b4f1b5fa0 RCX: 00007f8b4ef8e9a9
[  104.323330][ T7477] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006
[  104.323335][ T7477] RBP: 00007f8b4f010d69 R08: 0000000000000004 R09: 0000000000000000
[  104.323340][ T7477] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  104.323345][ T7477] R13: 0000000000000000 R14: 00007f8b4f1b5fa0 R15: 00007ffe51a49548
[  104.323358][ T7477]  </TASK>
[  104.434421][ T7477] Mem-Info:
[  104.435555][ T7477] active_anon:5344 inactive_anon:0 isolated_anon:0
[  104.435555][ T7477]  active_file:13073 inactive_file:38225 isolated_file:0
[  104.435555][ T7477]  unevictable:1768 dirty:59 writeback:0
[  104.435555][ T7477]  slab_reclaimable:9475 slab_unreclaimable:52588
[  104.435555][ T7477]  mapped:18023 shmem:2442 pagetables:887
[  104.435555][ T7477]  sec_pagetables:0 bounce:0
[  104.435555][ T7477]  kernel_misc_reclaimable:0
[  104.435555][ T7477]  free:288494 free_pcp:18161 free_cma:0
[  104.450501][ T7477] Node 0 active_anon:12632kB inactive_anon:0kB active_file:17140kB inactive_file:134688kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:25936kB dirty:164kB writeback:0kB shmem:4920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7408kB pagetables:1716kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  104.466208][ T7477] Node 1 active_anon:8744kB inactive_anon:0kB active_file:35152kB inactive_file:18212kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:46156kB dirty:72kB writeback:0kB shmem:4848kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4176kB pagetables:1832kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  104.477678][ T7477] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  104.503422][ T7477] lowmem_reserve[]: 0 812 812 812 812
[  104.508619][ T7477] Node 0 DMA32 free:253108kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12700kB inactive_anon:0kB active_file:17140kB inactive_file:134688kB unevictable:3536kB writepending:164kB present:1556484kB managed:831912kB mlocked:0kB bounce:0kB free_pcp:47472kB local_pcp:26692kB free_cma:0kB
[  104.526006][ T7477] lowmem_reserve[]: 0 0 0 0 0
[  104.532458][ T7477] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  104.560708][ T7477] lowmem_reserve[]: 0 0 854 854 854
[  104.565700][ T7477] Node 1 Normal free:426764kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8744kB inactive_anon:0kB active_file:35152kB inactive_file:18212kB unevictable:3536kB writepending:72kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:25256kB local_pcp:9812kB free_cma:0kB
[  104.576829][ T7477] lowmem_reserve[]: 0 0 0 0 0
[  104.579110][ T7477] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  104.585368][ T7477] Node 0 DMA32: 447*4kB (UM) 482*8kB (UME) 185*16kB (UME) 61*32kB (ME) 314*64kB (UM) 148*128kB (UME) 71*256kB (UM) 44*512kB (UME) 29*1024kB (UM) 9*2048kB (U) 28*4096kB (UM) = 253116kB
[  104.593195][ T7477] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  104.600343][ T7477] Node 1 Normal: 569*4kB (ME) 561*8kB (UME) 956*16kB (UME) 719*32kB (UM) 277*64kB (UME) 67*128kB (UME) 24*256kB (UM) 16*512kB (UM) 5*1024kB (UME) 8*2048kB (UM) 78*4096kB (M) = 426700kB
[  104.608765][ T7477] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  104.613102][ T7477] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  104.617439][ T7477] 53740 total pagecache pages
[  104.619695][ T7477] 0 pages in swap cache
[  104.621797][ T7477] Free swap  = 124996kB
[  104.624029][ T7477] Total swap = 124996kB
[  104.626000][ T7477] 786301 pages RAM
[  104.627852][ T7477] 0 pages HighMem/MovableOnly
[  104.630173][ T7477] 241075 pages reserved
[  104.632206][ T7477] 0 pages cma reserved
[  105.597700][ T7515] syzkaller0: entered promiscuous mode
[  105.599793][ T7515] syzkaller0: entered allmulticast mode
[  107.669221][ T7549] validate_nla: 6 callbacks suppressed
[  107.669232][ T7549] netlink: 'syz.2.521': attribute type 10 has an invalid length.
[  107.676193][ T7549] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.686160][ T7549] batman_adv: batadv0: Removing interface: batadv_slave_0
[  107.693497][ T7549] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  107.858866][ T7554] netlink: 67 bytes leftover after parsing attributes in process `syz.2.523'.
[  107.921729][ T7561] netlink: 'syz.2.526': attribute type 7 has an invalid length.
[  107.939944][ T7561] netlink: 140 bytes leftover after parsing attributes in process `syz.2.526'.
[  107.971640][ T7561] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.526'.
[  108.115475][ T7572] netlink: 'syz.2.529': attribute type 10 has an invalid length.
[  108.411399][ T7572] team0: Port device geneve1 added
[  108.544675][ T7572] syz.2.529 (7572) used greatest stack depth: 18688 bytes left
[  108.725006][ T7601] @: renamed from bond_slave_0 (while UP)
[  108.744406][ T7599] delete_channel: no stack
[  108.811122][ T7610] netlink: 'syz.2.541': attribute type 4 has an invalid length.
[  108.814542][ T7610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.541'.
[  109.100453][ T7624] netlink: 'syz.0.546': attribute type 10 has an invalid length.
[  109.105451][ T7624] netlink: 40 bytes leftover after parsing attributes in process `syz.0.546'.
[  109.109372][ T7624] dummy0: entered promiscuous mode
[  109.114979][ T7624] bridge0: port 4(dummy0) entered blocking state
[  109.117818][ T7624] bridge0: port 4(dummy0) entered disabled state
[  109.120871][ T7624] dummy0: entered allmulticast mode
[  109.129404][ T7624] bridge0: port 4(dummy0) entered blocking state
[  109.132829][ T7624] bridge0: port 4(dummy0) entered forwarding state
[  109.302065][ T7629] netlink: 'syz.2.548': attribute type 1 has an invalid length.
[  109.305324][ T7629] netlink: 17 bytes leftover after parsing attributes in process `syz.2.548'.
[  109.365789][ T7631] netlink: 703 bytes leftover after parsing attributes in process `syz.2.550'.
[  109.520849][ T7639] netlink: 132 bytes leftover after parsing attributes in process `syz.2.551'.
[  109.576540][ T7644] netlink: 'syz.0.552': attribute type 21 has an invalid length.
[  109.579513][ T7644] netlink: 128 bytes leftover after parsing attributes in process `syz.0.552'.
[  109.583844][ T7644] netlink: 'syz.0.552': attribute type 4 has an invalid length.
[  109.997948][ T7652] netlink: 156 bytes leftover after parsing attributes in process `syz.0.555'.
[  110.052064][ T7652] netlink: 73116 bytes leftover after parsing attributes in process `syz.0.555'.
[  110.432341][ T7658] netlink: 1053 bytes leftover after parsing attributes in process `syz.0.557'.
[  110.526010][ T7660] netlink: 'syz.2.558': attribute type 1 has an invalid length.
[  110.529059][ T7660] netlink: 'syz.2.558': attribute type 4 has an invalid length.
[  110.531998][ T7660] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.558'.
[  110.544038][ T7660] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.558'.
[  110.567189][ T7660] netlink: 132 bytes leftover after parsing attributes in process `syz.2.558'.
[  111.184535][ T7682] veth0_vlan: left promiscuous mode
[  111.222939][ T7682] veth0_vlan: entered promiscuous mode
[  111.280525][ T7682] team0: Device veth0_vlan failed to register rx_handler
[  111.456565][ T7682] syz.2.564 (7682) used greatest stack depth: 17760 bytes left
[  114.968259][ T7713] validate_nla: 11 callbacks suppressed
[  114.968274][ T7713] netlink: 'syz.0.574': attribute type 21 has an invalid length.
[  115.024175][ T7716] netlink: 'syz.0.575': attribute type 21 has an invalid length.
[  115.141175][ T7720] __nla_validate_parse: 3 callbacks suppressed
[  115.141196][ T7720] netlink: 164 bytes leftover after parsing attributes in process `syz.0.577'.
[  115.582657][ T7732] netlink: 'syz.0.581': attribute type 4 has an invalid length.
[  115.585946][ T7732] netlink: 14345 bytes leftover after parsing attributes in process `syz.0.581'.
[  115.590424][ T7732] netlink: 'syz.0.581': attribute type 2 has an invalid length.
[  115.592889][ T7732] netlink: 198064 bytes leftover after parsing attributes in process `syz.0.581'.
[  115.710287][ T7736] netlink: 'syz.2.583': attribute type 6 has an invalid length.
[  115.715670][ T7736] netlink: 168 bytes leftover after parsing attributes in process `syz.2.583'.
[  115.990936][ T7734] netlink: 132 bytes leftover after parsing attributes in process `syz.0.582'.
[  117.050819][ T7770] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.591'.
[  117.066342][ T7770] netlink: 'syz.2.591': attribute type 29 has an invalid length.
[  117.082979][ T7770] netlink: 'syz.2.591': attribute type 29 has an invalid length.
[  117.095446][ T7770] netlink: 'syz.2.591': attribute type 29 has an invalid length.
[  117.105117][ T7770] netlink: 'syz.2.591': attribute type 29 has an invalid length.
[  118.188279][ T7817] netlink: 60 bytes leftover after parsing attributes in process `syz.1.603'.
[  118.207514][ T7817] netlink: 60 bytes leftover after parsing attributes in process `syz.1.603'.
[  118.491510][ T7819] netlink: 10 bytes leftover after parsing attributes in process `syz.1.604'.
[  118.662575][ T7826] netlink: 'syz.1.607': attribute type 6 has an invalid length.
[  118.668443][ T7826] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.607'.
[  118.839349][ T7840] IPv6: : Disabled Multicast RS
[  118.866876][ T7833] bridge0: port 1(veth1_to_team) entered blocking state
[  118.870574][ T7833] bridge0: port 1(veth1_to_team) entered disabled state
[  118.874674][ T7833] veth1_to_team: entered allmulticast mode
[  118.879323][ T7833] veth1_to_team: entered promiscuous mode
[  118.882368][ T7833] bridge0: port 1(veth1_to_team) entered blocking state
[  118.885563][ T7833] bridge0: port 1(veth1_to_team) entered forwarding state
[  119.880889][ T7863] veth0_macvtap: left promiscuous mode
[  120.059720][ T7872] validate_nla: 2 callbacks suppressed
[  120.059740][ T7872] netlink: 'syz.1.621': attribute type 10 has an invalid length.
[  120.347459][ T7897] __nla_validate_parse: 4 callbacks suppressed
[  120.347472][ T7897] netlink: 17 bytes leftover after parsing attributes in process `syz.2.631'.
[  120.352493][ T7897] netlink: zone id is out of range
[  120.354211][ T7897] netlink: zone id is out of range
[  120.355866][ T7897] netlink: zone id is out of range
[  120.357453][ T7897] netlink: zone id is out of range
[  120.359114][ T7897] netlink: zone id is out of range
[  120.360701][ T7897] netlink: zone id is out of range
[  120.362358][ T7897] netlink: zone id is out of range
[  120.367160][ T7897] netlink: zone id is out of range
[  120.368864][ T7897] netlink: zone id is out of range
[  120.370552][ T7897] netlink: zone id is out of range
[  120.416161][ T7900] netlink: 'syz.2.632': attribute type 10 has an invalid length.
[  120.420335][ T7900] bridge0: port 3(macsec0) entered blocking state
[  120.427154][ T7900] bridge0: port 3(macsec0) entered disabled state
[  120.430055][ T7900] macsec0: entered allmulticast mode
[  120.432330][ T7900] veth1_macvtap: entered allmulticast mode
[  120.441831][ T7900] macsec0: entered promiscuous mode
[  120.445706][ T7900] bridge0: port 3(macsec0) entered blocking state
[  120.448262][ T7900] bridge0: port 3(macsec0) entered forwarding state
[  120.649546][ T7914] C: renamed from team_slave_0 (while UP)
[  120.657397][ T7914] netlink: 'syz.2.635': attribute type 3 has an invalid length.
[  120.660025][ T7914] netlink: 'syz.2.635': attribute type 1 has an invalid length.
[  120.662495][ T7914] netlink: 116 bytes leftover after parsing attributes in process `syz.2.635'.
[  121.157630][ T5224] Bluetooth: hci0: ISO packet for unknown connection handle 33
[  121.195660][ T7928] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.640'.
[  121.205163][ T7929] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.640'.
[  121.237596][ T7928] hsr0: entered promiscuous mode
[  121.260486][ T7931] : renamed from pim6reg1
[  121.457518][ T7940] netlink: 'syz.1.644': attribute type 2 has an invalid length.
[  121.461066][ T7940] netlink: 'syz.1.644': attribute type 1 has an invalid length.
[  121.464698][ T7940] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.644'.
[  121.469208][ T7940] nbd: must specify at least one socket
[  121.481388][ T7940] netlink: 'syz.1.644': attribute type 21 has an invalid length.
[  121.490191][ T7940] netlink: 156 bytes leftover after parsing attributes in process `syz.1.644'.
[  121.832605][ T7948] netlink: 'syz.0.648': attribute type 1 has an invalid length.
[  122.590635][ T7969] netlink: 'syz.2.653': attribute type 1 has an invalid length.
[  122.595967][ T7969] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.653'.
[  123.930001][ T7962] pim6reg1: entered allmulticast mode
[  123.955682][ T7963] pim6reg1: left allmulticast mode
[  124.111498][ T7981] netlink: 'syz.2.657': attribute type 33 has an invalid length.
[  124.141640][ T7981] netlink: 152 bytes leftover after parsing attributes in process `syz.2.657'.
[  124.147825][ T7981] mac80211_hwsim hwsim5 : renamed from wlan1
[  124.236540][ T7992] netlink: 40 bytes leftover after parsing attributes in process `syz.0.658'.
[  124.316304][ T7997] warn_alloc: 2 callbacks suppressed
[  124.316323][ T7997] syz.2.660: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null)
[  124.316429][ T7988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.658'.
[  124.318512][ T7997] ,cpuset=/,mems_allowed=0-1
[  124.336868][ T7997] CPU: 0 UID: 0 PID: 7997 Comm: syz.2.660 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  124.336907][ T7997] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  124.336919][ T7997] Call Trace:
[  124.336928][ T7997]  <TASK>
[  124.336937][ T7997]  dump_stack_lvl+0x189/0x250
[  124.336964][ T7997]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  124.336993][ T7997]  ? __pfx_dump_stack_lvl+0x10/0x10
[  124.337013][ T7997]  ? __pfx__printk+0x10/0x10
[  124.337034][ T7997]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  124.337054][ T7997]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  124.337081][ T7997]  warn_alloc+0x214/0x310
[  124.337100][ T7997]  ? stack_depot_save_flags+0x40/0x900
[  124.337125][ T7997]  ? __pfx_warn_alloc+0x10/0x10
[  124.337176][ T7997]  ? kasan_save_track+0x4f/0x80
[  124.337193][ T7997]  ? xskq_create+0x56/0x170
[  124.337212][ T7997]  ? xsk_init_queue+0xb0/0x110
[  124.337229][ T7997]  ? xsk_setsockopt+0x4de/0x710
[  124.337245][ T7997]  ? do_sock_setsockopt+0x17c/0x1b0
[  124.337260][ T7997]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  124.337273][ T7997]  ? do_syscall_64+0xfa/0x3b0
[  124.337292][ T7997]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.337314][ T7997]  __vmalloc_node_range_noprof+0x125/0x12f0
[  124.337360][ T7997]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  124.337384][ T7997]  ? __kasan_kmalloc+0x93/0xb0
[  124.337403][ T7997]  vmalloc_user_noprof+0xad/0xf0
[  124.337419][ T7997]  ? xskq_create+0xbf/0x170
[  124.337438][ T7997]  xskq_create+0xbf/0x170
[  124.337460][ T7997]  xsk_init_queue+0xb0/0x110
[  124.337481][ T7997]  xsk_setsockopt+0x4de/0x710
[  124.337502][ T7997]  ? __pfx_xsk_setsockopt+0x10/0x10
[  124.337522][ T7997]  ? __fget_files+0x2a/0x420
[  124.337539][ T7997]  ? aa_sock_opt_perm+0x74/0x110
[  124.337560][ T7997]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  124.337579][ T7997]  ? __pfx_xsk_setsockopt+0x10/0x10
[  124.337599][ T7997]  do_sock_setsockopt+0x17c/0x1b0
[  124.337624][ T7997]  __x64_sys_setsockopt+0x13f/0x1b0
[  124.337646][ T7997]  do_syscall_64+0xfa/0x3b0
[  124.337665][ T7997]  ? lockdep_hardirqs_on+0x9c/0x150
[  124.337697][ T7997]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.337715][ T7997]  ? exc_page_fault+0x9f/0xf0
[  124.337738][ T7997]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.337752][ T7997] RIP: 0033:0x7f0e8638e9a9
[  124.337768][ T7997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  124.337783][ T7997] RSP: 002b:00007f0e872c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  124.337801][ T7997] RAX: ffffffffffffffda RBX: 00007f0e865b5fa0 RCX: 00007f0e8638e9a9
[  124.337813][ T7997] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007
[  124.337823][ T7997] RBP: 00007f0e86410d69 R08: 0000000000000004 R09: 0000000000000000
[  124.337834][ T7997] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  124.337844][ T7997] R13: 0000000000000000 R14: 00007f0e865b5fa0 R15: 00007ffc64a9b218
[  124.337870][ T7997]  </TASK>
[  124.337904][ T7997] Mem-Info:
[  124.449885][ T7997] active_anon:13431 inactive_anon:0 isolated_anon:0
[  124.449885][ T7997]  active_file:15025 inactive_file:38231 isolated_file:0
[  124.449885][ T7997]  unevictable:1768 dirty:48 writeback:0
[  124.449885][ T7997]  slab_reclaimable:9583 slab_unreclaimable:53184
[  124.449885][ T7997]  mapped:18034 shmem:2448 pagetables:921
[  124.449885][ T7997]  sec_pagetables:0 bounce:0
[  124.449885][ T7997]  kernel_misc_reclaimable:0
[  124.449885][ T7997]  free:272984 free_pcp:22630 free_cma:0
[  124.463920][ T7997] Node 0 active_anon:15936kB inactive_anon:0kB active_file:17140kB inactive_file:134712kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:25980kB dirty:140kB writeback:0kB shmem:4936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7280kB pagetables:1608kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  124.476235][ T7997] Node 1 active_anon:37856kB inactive_anon:0kB active_file:42960kB inactive_file:18212kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:46156kB dirty:52kB writeback:0kB shmem:4856kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4304kB pagetables:2076kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  124.488692][ T7997] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  124.500758][ T7997] lowmem_reserve[]: 0 812 812 812 812
[  124.503808][ T7997] Node 0 DMA32 free:265520kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15936kB inactive_anon:0kB active_file:17140kB inactive_file:134712kB unevictable:3536kB writepending:140kB present:1556484kB managed:831912kB mlocked:0kB bounce:0kB free_pcp:38372kB local_pcp:20704kB free_cma:0kB
[  124.516430][ T7997] lowmem_reserve[]: 0 0 0 0 0
[  124.517974][ T7997] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  124.530275][ T7997] lowmem_reserve[]: 0 0 854 854 854
[  124.532481][ T7997] Node 1 Normal free:352440kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37924kB inactive_anon:0kB active_file:42960kB inactive_file:18212kB unevictable:3536kB writepending:52kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:52932kB local_pcp:21916kB free_cma:0kB
[  124.545602][ T7997] lowmem_reserve[]: 0 0 0 0 0
[  124.547610][ T7997] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  124.552682][ T7997] Node 0 DMA32: 338*4kB (UM) 311*8kB (UM) 244*16kB (UM) 1068*32kB (UM) 615*64kB (UME) 157*128kB (UM) 75*256kB (UM) 33*512kB (UME) 19*1024kB (UM) 7*2048kB (UM) 23*4096kB (UM) = 265472kB
[  124.559821][ T7997] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  124.565967][ T7997] Node 1 Normal: 415*4kB (UME) 513*8kB (UME) 366*16kB (UM) 184*32kB (UME) 274*64kB (UME) 28*128kB (UME) 8*256kB (UM) 5*512kB (UM) 4*1024kB (UME) 3*2048kB (UM) 73*4096kB (UM) = 352484kB
[  124.572254][ T7997] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  124.589826][ T7997] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  124.592775][ T7997] 55704 total pagecache pages
[  124.594894][ T7997] 0 pages in swap cache
[  124.596272][ T7997] Free swap  = 124996kB
[  124.597613][ T7997] Total swap = 124996kB
[  124.598947][ T7997] 786301 pages RAM
[  124.600159][ T7997] 0 pages HighMem/MovableOnly
[  124.601641][ T7997] 241075 pages reserved
[  124.696863][ T7997] 0 pages cma reserved
[  125.365414][ T8029] validate_nla: 4 callbacks suppressed
[  125.365435][ T8029] netlink: 'syz.1.668': attribute type 21 has an invalid length.
[  125.366418][ T8026] netlink: 'syz.1.668': attribute type 29 has an invalid length.
[  125.372749][ T8029] __nla_validate_parse: 3 callbacks suppressed
[  125.372766][ T8029] netlink: 132 bytes leftover after parsing attributes in process `syz.1.668'.
[  125.381440][ T8028] netlink: 'syz.1.668': attribute type 29 has an invalid length.
[  125.545753][ T8037] netlink: 'syz.2.671': attribute type 5 has an invalid length.
[  125.583967][ T8039] net_ratelimit: 74 callbacks suppressed
[  125.583994][ T8039] netlink: zone id is out of range
[  125.587639][ T8039] netlink: zone id is out of range
[  125.589494][ T8039] netlink: zone id is out of range
[  125.591263][ T8039] netlink: zone id is out of range
[  125.593878][ T8039] netlink: zone id is out of range
[  125.595656][ T8039] netlink: zone id is out of range
[  125.597477][ T8039] netlink: zone id is out of range
[  125.599228][ T8039] netlink: zone id is out of range
[  125.601092][ T8039] netlink: zone id is out of range
[  125.602812][ T8039] netlink: zone id is out of range
[  125.743244][ T8051] netlink: 'syz.2.675': attribute type 29 has an invalid length.
[  125.746334][ T8051] netlink: 'syz.2.675': attribute type 29 has an invalid length.
[  126.148169][ T8060] netlink: 132 bytes leftover after parsing attributes in process `syz.1.678'.
[  126.209384][ T8065] netlink: 'syz.1.680': attribute type 29 has an invalid length.
[  126.217066][ T8065] netlink: 'syz.1.680': attribute type 29 has an invalid length.
[  126.221097][ T8065] netlink: 'syz.1.680': attribute type 29 has an invalid length.
[  126.718369][ T8076] netlink: 60 bytes leftover after parsing attributes in process `syz.2.684'.
[  126.721658][ T8074] netlink: 60 bytes leftover after parsing attributes in process `syz.2.684'.
[  126.729192][ T8074] netlink: 60 bytes leftover after parsing attributes in process `syz.2.684'.
[  127.000551][ T8087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.688'.
[  127.114706][ T8089] netlink: 'syz.0.689': attribute type 2 has an invalid length.
[  127.572941][ T8115] syzkaller0: entered promiscuous mode
[  127.578620][ T8115] syzkaller0: entered allmulticast mode
[  127.785010][ T8119] netlink: 156 bytes leftover after parsing attributes in process `syz.1.697'.
[  127.839992][ T8122] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.699'.
[  128.045232][ T5224] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30
[  128.049376][ T5224] Bluetooth: hci1: Invalid handle: 0x85b0 > 0x0eff
[  128.065365][ T8129] netlink: 40 bytes leftover after parsing attributes in process `syz.1.702'.
[  128.112409][ T8129] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.702'.
[  128.119283][ T8129] nbd: must specify at least one socket
[  129.351530][ T8175] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  129.356047][ T8175] batman_adv: batadv0: Removing interface: batadv_slave_0
[  129.369504][ T8175] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  129.372982][ T8175] batman_adv: batadv0: Removing interface: batadv_slave_1
[  131.480753][ T8232] validate_nla: 8 callbacks suppressed
[  131.480763][ T8232] netlink: 'syz.2.737': attribute type 22 has an invalid length.
[  131.488128][ T8232] __nla_validate_parse: 3 callbacks suppressed
[  131.488140][ T8232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.737'.
[  131.519954][ T8233] netlink: 60 bytes leftover after parsing attributes in process `syz.1.736'.
[  131.527475][ T8230] netlink: 60 bytes leftover after parsing attributes in process `syz.1.736'.
[  131.531745][ T8233] netlink: 60 bytes leftover after parsing attributes in process `syz.1.736'.
[  131.758440][ T8240] netlink: 26 bytes leftover after parsing attributes in process `syz.1.740'.
[  132.288820][ T8242] TCP: TCP_TX_DELAY enabled
[  132.338107][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.340289][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  132.370975][ T8245] netlink: 60 bytes leftover after parsing attributes in process `syz.1.742'.
[  132.383808][ T8245] netlink: 'syz.1.742': attribute type 1 has an invalid length.
[  132.389094][ T8245] netlink: 1053 bytes leftover after parsing attributes in process `syz.1.742'.
[  132.586802][ T8257] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.746'.
[  132.715273][ T8262] netlink: 188 bytes leftover after parsing attributes in process `syz.1.748'.
[  132.985841][ T8270] netlink: 'syz.1.749': attribute type 16 has an invalid length.
[  132.988546][ T8270] netlink: 48 bytes leftover after parsing attributes in process `syz.1.749'.
[  133.094168][ T8270] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.510197][ T8279] netlink: 'syz.0.751': attribute type 2 has an invalid length.
[  133.510240][ T8277] netlink: 'syz.0.751': attribute type 2 has an invalid length.
[  133.514010][ T8279] netlink: 'syz.0.751': attribute type 8 has an invalid length.
[  133.525121][ T8277] netlink: 'syz.0.751': attribute type 8 has an invalid length.
[  136.939712][ T8299] __nla_validate_parse: 2 callbacks suppressed
[  136.939731][ T8299] netlink: 132 bytes leftover after parsing attributes in process `syz.0.758'.
[  137.137083][ T8312] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.760'.
[  137.140345][ T8310] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.760'.
[  137.148521][ T8310] netlink: 'syz.2.760': attribute type 16 has an invalid length.
[  137.151042][ T8310] netlink: 'syz.2.760': attribute type 3 has an invalid length.
[  137.153558][ T8310] netlink: 132 bytes leftover after parsing attributes in process `syz.2.760'.
[  137.195129][ T8308] netlink: 132 bytes leftover after parsing attributes in process `syz.1.756'.
[  137.630342][ T8332] netlink: 60 bytes leftover after parsing attributes in process `syz.0.766'.
[  137.635679][ T8331] netlink: 60 bytes leftover after parsing attributes in process `syz.0.766'.
[  138.279697][ T8349] netlink: 'syz.0.771': attribute type 21 has an invalid length.
[  138.288605][ T8349] netlink: 'syz.0.771': attribute type 6 has an invalid length.
[  138.298161][ T8349] netlink: 132 bytes leftover after parsing attributes in process `syz.0.771'.
[  138.939059][ T8357] blkio.reset_stats is deprecated
[  138.962218][ T8359] netlink: 'syz.1.774': attribute type 21 has an invalid length.
[  138.999282][ T8361] netlink: 'syz.2.772': attribute type 10 has an invalid length.
[  139.162962][ T8361] veth0_macvtap: left promiscuous mode
[  139.267159][ T8361] veth0_macvtap: entered promiscuous mode
[  139.271741][ T8361] team0: Device macvtap0 failed to register rx_handler
[  139.678470][ T8361] veth0_macvtap: left promiscuous mode
[  141.810169][ T8373] netlink: 10 bytes leftover after parsing attributes in process `syz.2.777'.
[  141.814559][ T8374] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.777'.
[  142.779454][ T8423] netlink: 'syz.2.793': attribute type 33 has an invalid length.
[  142.808076][ T8423] netlink: 'syz.2.793': attribute type 13 has an invalid length.
[  142.810953][ T8423] netlink: 152 bytes leftover after parsing attributes in process `syz.2.793'.
[  142.815862][ T8419] netlink: 'syz.0.792': attribute type 21 has an invalid length.
[  142.818372][ T8419] netlink: 156 bytes leftover after parsing attributes in process `syz.0.792'.
[  142.828414][ T8421] netlink: 132 bytes leftover after parsing attributes in process `syz.2.793'.
[  143.070761][ T8428] netlink: 'syz.2.795': attribute type 27 has an invalid length.
[  143.076807][ T8428] netlink: 'syz.2.795': attribute type 3 has an invalid length.
[  143.080072][ T8428] netlink: 132 bytes leftover after parsing attributes in process `syz.2.795'.
[  143.086109][ T8428] netlink: 132 bytes leftover after parsing attributes in process `syz.2.795'.
[  144.102457][ T8472] netlink: 'syz.0.806': attribute type 21 has an invalid length.
[  144.145949][ T8472] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  144.632602][ T8480] netlink: 'syz.1.811': attribute type 29 has an invalid length.
[  161.250886][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  161.255299][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  161.260072][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  161.266563][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  161.269650][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  161.274034][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  161.279643][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  161.296503][ T5224] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  161.300275][ T5224] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  161.303850][ T5224] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  161.335152][ T5224] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  161.339314][ T5224] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  161.342721][ T5224] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  161.349374][ T5224] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  161.352839][ T5224] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  163.364523][ T5224] Bluetooth: hci3: command tx timeout
[  163.368472][ T5839] Bluetooth: hci4: command tx timeout
[  163.443411][ T5839] Bluetooth: hci5: command tx timeout
[  164.413792][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 18940655531 wd_nsec: 18940654864
[  165.444943][ T5839] Bluetooth: hci4: command tx timeout
[  165.445015][ T5839] Bluetooth: hci3: command tx timeout
[  165.523475][ T5224] Bluetooth: hci5: command tx timeout
[  167.523334][ T5224] Bluetooth: hci3: command tx timeout
[  167.523381][ T5224] Bluetooth: hci4: command tx timeout
[  167.603399][ T5839] Bluetooth: hci5: command tx timeout
[  169.603305][ T5839] Bluetooth: hci4: command tx timeout
[  169.603358][ T5839] Bluetooth: hci3: command tx timeout
[  169.683300][ T5224] Bluetooth: hci5: command tx timeout
[  180.484243][ T5838] Bluetooth: hci0: command 0x0406 tx timeout
[  180.489612][ T5834] Bluetooth: hci1: command 0x0406 tx timeout
[  193.767164][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  193.767215][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  221.314657][ T5838] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  221.319598][ T5838] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  221.320028][ T5838] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  221.320626][ T5838] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  221.321100][ T5838] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  221.360659][ T5833] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  221.361402][ T5833] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  221.361795][ T5833] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  221.362372][ T5833] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  221.362964][ T5833] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  221.375798][ T5833] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  221.376718][ T5833] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  221.377267][ T5833] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  221.377857][ T5833] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  221.378222][ T5833] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  250.103077][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  250.103098][    C1] rcu: 	1-....: (10500 ticks this GP) idle=8aa4/1/0x4000000000000000 softirq=25779/25779 fqs=5246
[  250.103479][    C1] rcu: 	         hardirqs   softirqs   csw/system
[  250.103488][    C1] rcu: 	 number:  1112528          0            0
[  250.103497][    C1] rcu: 	cputime:    25453      27046           85   ==> 52500(ms)
[  250.103507][    C1] rcu: 	(t=10501 jiffies g=18789 q=1943 ncpus=2)
[  250.103524][    C1] CPU: 1 UID: 0 PID: 8464 Comm: syz.2.805 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  250.103538][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  250.103546][    C1] RIP: 0010:console_flush_all+0x7f7/0xc40
[  250.103572][    C1] Code: 48 21 c3 0f 85 e9 01 00 00 e8 75 e7 1e 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 66 e7 1e 00 eb 06 e8 5f e7 1e 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 8a 0a 82 00 48 8b 1b 48 8b 44 24
[  250.103584][    C1] RSP: 0018:ffffc900001e0620 EFLAGS: 00000246
[  250.103598][    C1] RAX: 1ffffffff1d902ff RBX: ffffffff8ec817f8 RCX: ffff88801bfeb980
[  250.103609][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  250.103616][    C1] RBP: ffffc900001e0770 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  250.103626][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: dffffc0000000000
[  250.103635][    C1] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8ec817a0
[  250.103644][    C1] FS:  00007f0e872c26c0(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
[  250.103654][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  250.103663][    C1] CR2: 000000110c354921 CR3: 000000002b110000 CR4: 00000000000006f0
[  250.103697][    C1] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000
[  250.103707][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  250.103714][    C1] Call Trace:
[  250.103720][    C1]  <IRQ>
[  250.103730][    C1]  ? console_flush_all+0x13a/0xc40
[  250.103756][    C1]  ? __pfx_console_flush_all+0x10/0x10
[  250.103786][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  250.103809][    C1]  console_unlock+0xc4/0x270
[  250.103829][    C1]  ? __pfx_console_unlock+0x10/0x10
[  250.103849][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  250.103873][    C1]  vprintk_emit+0x5b7/0x7a0
[  250.103893][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  250.103911][    C1]  ? perf_trace_preemptirq_template+0xa3/0x340
[  250.103931][    C1]  ? irqentry_exit+0x74/0x90
[  250.103958][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  250.103980][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  250.104003][    C1]  _printk+0xcf/0x120
[  250.104028][    C1]  ? __pfx__printk+0x10/0x10
[  250.104059][    C1]  clocksource_watchdog+0xdca/0x11c0
[  250.104074][    C1]  ? __lock_acquire+0xab9/0xd20
[  250.104103][    C1]  ? __pfx_clocksource_watchdog+0x10/0x10
[  250.104119][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  250.104141][    C1]  call_timer_fn+0x17e/0x5f0
[  250.104154][    C1]  ? __pfx_clocksource_watchdog+0x10/0x10
[  250.104167][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  250.104183][    C1]  ? call_timer_fn+0xbe/0x5f0
[  250.104196][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  250.104221][    C1]  ? __pfx_clocksource_watchdog+0x10/0x10
[  250.104238][    C1]  __run_timer_base+0x61a/0x860
[  250.104273][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  250.104308][    C1]  run_timer_softirq+0x67/0x180
[  250.104328][    C1]  handle_softirqs+0x286/0x870
[  250.104348][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  250.104369][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  250.104383][    C1]  ? irq_work_single+0x1ac/0x240
[  250.104400][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  250.104462][    C1]  __irq_exit_rcu+0xca/0x1f0
[  250.104478][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  250.104497][    C1]  ? rcu_is_watching+0x15/0xb0
[  250.104515][    C1]  irq_exit_rcu+0x9/0x30
[  250.104528][    C1]  sysvec_irq_work+0xa3/0xc0
[  250.104541][    C1]  </IRQ>
[  250.104546][    C1]  <TASK>
[  250.104552][    C1]  asm_sysvec_irq_work+0x1a/0x20
[  250.104565][    C1] RIP: 0010:__list_add_valid_or_report+0x44/0x130
[  250.104581][    C1] Code: 48 85 d2 0f 84 93 00 00 00 49 89 f6 49 89 ff 49 bd 00 00 00 00 00 fc ff df 4c 8d 63 08 4c 89 e5 48 c1 ed 03 42 80 7c 2d 00 00 <74> 08 4c 89 e7 e8 42 c4 5b fd 4d 39 34 24 75 71 4d 89 f4 49 c1 ec
[  250.104592][    C1] RSP: 0018:ffffc9000323fa48 EFLAGS: 00000246
[  250.104603][    C1] RAX: 0000000000000009 RBX: ffffea0000e8d608 RCX: 0000000000000003
[  250.104612][    C1] RDX: ffffea0000e8d608 RSI: ffff88813663fe30 RDI: ffffea00010fd808
[  250.104621][    C1] RBP: 1ffffd40001d1ac2 R08: 0000000000000003 R09: 0000000000000000
[  250.104628][    C1] R10: dffffc0000000000 R11: fffff52000647f4c R12: ffffea0000e8d610
[  250.104638][    C1] R13: dffffc0000000000 R14: ffff88813663fe30 R15: ffffea00010fd808
[  250.104670][    C1]  free_frozen_page_commit+0xe2/0x1070
[  250.104698][    C1]  __free_frozen_pages+0x78b/0xe70
[  250.104722][    C1]  __put_partials+0x161/0x1c0
[  250.104745][    C1]  put_cpu_partial+0x17c/0x250
[  250.104762][    C1]  ? put_cpu_partial+0x6d/0x250
[  250.104783][    C1]  __slab_free+0x2f7/0x400
[  250.104804][    C1]  ? __phys_addr+0xd3/0x180
[  250.104825][    C1]  qlist_free_all+0x97/0x140
[  250.104849][    C1]  kasan_quarantine_reduce+0x148/0x160
[  250.104872][    C1]  __kasan_slab_alloc+0x22/0x80
[  250.104887][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  250.104901][    C1]  ? getname_flags+0xb8/0x540
[  250.104922][    C1]  getname_flags+0xb8/0x540
[  250.104942][    C1]  do_sys_openat2+0xbc/0x1c0
[  250.104968][    C1]  ? __pfx_do_sys_openat2+0x10/0x10
[  250.104984][    C1]  ? irqentry_exit+0x74/0x90
[  250.105015][    C1]  __x64_sys_openat+0x138/0x170
[  250.105038][    C1]  do_syscall_64+0xfa/0x3b0
[  250.105058][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.105069][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  250.105085][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.105096][    C1] RIP: 0033:0x7f0e8638e9a9
[  250.105109][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  250.105118][    C1] RSP: 002b:00007f0e872c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  250.105129][    C1] RAX: ffffffffffffffda RBX: 00007f0e865b5fa0 RCX: 00007f0e8638e9a9
[  250.105136][    C1] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  250.105141][    C1] RBP: 00007f0e86410d69 R08: 0000000000000000 R09: 0000000000000000
[  250.105145][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  250.105149][    C1] R13: 0000000000000000 R14: 00007f0e865b5fa0 R15: 00007ffc64a9b218
[  250.105163][    C1]  </TASK>
[  255.210216][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  255.210278][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  280.803262][   T18] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 13570 jiffies s: 14005 root: 0x2/.
[  280.803348][   T18] rcu: blocking rcu_node structures (internal RCU debug):
[  280.803367][   T18] Sending NMI from CPU 0 to CPUs 1:
[  280.803444][    C1] NMI backtrace for cpu 1
[  280.803461][    C1] CPU: 1 UID: 0 PID: 8464 Comm: syz.2.805 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  280.803472][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  280.803478][    C1] RIP: 0010:pvclock_clocksource_read_nowd+0x44/0xf0
[  280.803495][    C1] Code: 89 f1 48 d3 e0 83 e5 fe 4c 89 3c 24 48 f7 24 24 48 0f ac d0 20 48 8b 4f 10 0f b6 57 1d 8b 37 39 f5 89 f5 74 70 0f ae e8 0f 31 <48> 89 c1 48 89 d0 48 c1 e0 20 48 09 c8 48 2b 47 08 44 8b 7f 18 0f
[  280.803502][    C1] RSP: 0018:ffffc900001dfc38 EFLAGS: 00000006
[  280.803510][    C1] RAX: 00000000a144b8c6 RBX: ffffffff8dfa9400 RCX: ffff88801bfeb980
[  280.803515][    C1] RDX: 00000000000000b8 RSI: 0000000000000000 RDI: ffffffff92a64040
[  280.803520][    C1] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffff81aec9fe
[  280.803525][    C1] R10: dffffc0000000000 R11: ffffffff81723a40 R12: 00000041501b5add
[  280.803530][    C1] R13: dffffc0000000000 R14: 0000000000000001 R15: dffffc0000000000
[  280.803535][    C1] FS:  00007f0e872c26c0(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
[  280.803541][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  280.803546][    C1] CR2: 000000110c354921 CR3: 000000002b110000 CR4: 00000000000006f0
[  280.803570][    C1] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000
[  280.803576][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  280.803580][    C1] Call Trace:
[  280.803585][    C1]  <IRQ>
[  280.803589][    C1]  ? kvm_clock_get_cycles+0xb/0x60
[  280.803604][    C1]  kvm_clock_get_cycles+0x1f/0x60
[  280.803615][    C1]  ktime_get+0x90/0x1f0
[  280.803625][    C1]  perf_swevent_hrtimer+0x442/0x550
[  280.803635][    C1]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  280.803642][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  280.803658][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  280.803668][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  280.803678][    C1]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  280.803684][    C1]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  280.803691][    C1]  __hrtimer_run_queues+0x4e0/0xc60
[  280.803699][    C1]  ? ktime_get_update_offsets_now+0x60/0x3d0
[  280.803713][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  280.803721][    C1]  ? ktime_get_update_offsets_now+0x3ab/0x3d0
[  280.803731][    C1]  ? sched_clock_cpu+0x74/0x430
[  280.803741][    C1]  hrtimer_interrupt+0x45b/0xaa0
[  280.803755][    C1]  __sysvec_apic_timer_interrupt+0x10b/0x410
[  280.803765][    C1]  sysvec_apic_timer_interrupt+0x52/0xc0
[  280.803774][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  280.803783][    C1] RIP: 0010:_prb_read_valid+0x500/0xa90
[  280.803791][    C1] Code: c0 0f 84 4a 05 00 00 48 89 c3 48 c1 eb 03 42 80 3c 23 00 74 0f 48 8b 7c 24 48 e8 cb f6 80 00 48 8b 44 24 48 48 83 38 00 74 2b <e8> 7b d3 1d 00 42 80 3c 23 00 48 8b 5c 24 48 74 08 48 89 df e8 a7
[  280.803798][    C1] RSP: 0018:ffffc900001e0280 EFLAGS: 00000286
[  280.803804][    C1] RAX: ffffc900001e0580 RBX: 1ffff9200003c0b0 RCX: ffff88801bfeb980
[  280.803809][    C1] RDX: 0000000000000100 RSI: ffffffffffff48b8 RDI: 0000000000000001
[  280.803814][    C1] RBP: ffffc900001e0400 R08: ffff88801bfeb980 R09: 0000000000000003
[  280.803818][    C1] R10: 00000000ffffffff R11: 0000000000000100 R12: dffffc0000000000
[  280.803823][    C1] R13: 00000000ffffec02 R14: ffffffff8e099210 R15: ffffc900001e0410
[  280.803837][    C1]  ? __pfx__prb_read_valid+0x10/0x10
[  280.803846][    C1]  ? kvm_sched_clock_read+0x11/0x20
[  280.803858][    C1]  ? sched_clock+0x3f/0x60
[  280.803869][    C1]  ? sched_clock_cpu+0x74/0x430
[  280.803877][    C1]  ? lapic_next_event+0x11/0x20
[  280.803884][    C1]  ? clockevents_program_event+0x24d/0x360
[  280.803897][    C1]  prb_read_valid+0x3c/0x60
[  280.803905][    C1]  printk_get_next_message+0x15c/0x7b0
[  280.803917][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  280.803928][    C1]  ? __pfx_printk_get_next_message+0x10/0x10
[  280.803937][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  280.803945][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  280.803958][    C1]  ? console_flush_all+0x476/0xc40
[  280.803969][    C1]  console_flush_all+0x4ca/0xc40
[  280.803978][    C1]  ? console_flush_all+0x861/0xc40
[  280.803988][    C1]  ? console_flush_all+0x13a/0xc40
[  280.803998][    C1]  ? __pfx_console_flush_all+0x10/0x10
[  280.804010][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  280.804021][    C1]  console_unlock+0xc4/0x270
[  280.804030][    C1]  ? __pfx_console_unlock+0x10/0x10
[  280.804040][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  280.804050][    C1]  vprintk_emit+0x5b7/0x7a0
[  280.804059][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  280.804068][    C1]  ? perf_trace_preemptirq_template+0xa3/0x340
[  280.804078][    C1]  ? irqentry_exit+0x74/0x90
[  280.804087][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  280.804097][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  280.804106][    C1]  _printk+0xcf/0x120
[  280.804117][    C1]  ? __pfx__printk+0x10/0x10
[  280.804129][    C1]  clocksource_watchdog+0xdca/0x11c0
[  280.804136][    C1]  ? __lock_acquire+0xab9/0xd20
[  280.804146][    C1]  ? __pfx_clocksource_watchdog+0x10/0x10
[  280.804154][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  280.804163][    C1]  call_timer_fn+0x17e/0x5f0
[  280.804170][    C1]  ? __pfx_clocksource_watchdog+0x10/0x10
[  280.804177][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  280.804185][    C1]  ? call_timer_fn+0xbe/0x5f0
[  280.804192][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  280.804201][    C1]  ? __pfx_clocksource_watchdog+0x10/0x10
[  280.804209][    C1]  __run_timer_base+0x61a/0x860
[  280.804223][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  280.804236][    C1]  run_timer_softirq+0x67/0x180
[  280.804247][    C1]  handle_softirqs+0x286/0x870
[  280.804255][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  280.804264][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  280.804272][    C1]  ? irq_work_single+0x1ac/0x240
[  280.804280][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  280.804291][    C1]  __irq_exit_rcu+0xca/0x1f0
[  280.804328][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  280.804338][    C1]  ? rcu_is_watching+0x15/0xb0
[  280.804347][    C1]  irq_exit_rcu+0x9/0x30
[  280.804354][    C1]  sysvec_irq_work+0xa3/0xc0
[  280.804361][    C1]  </IRQ>
[  280.804364][    C1]  <TASK>
[  280.804367][    C1]  asm_sysvec_irq_work+0x1a/0x20
[  280.804374][    C1] RIP: 0010:__list_add_valid_or_report+0x44/0x130
[  280.804383][    C1] Code: 48 85 d2 0f 84 93 00 00 00 49 89 f6 49 89 ff 49 bd 00 00 00 00 00 fc ff df 4c 8d 63 08 4c 89 e5 48 c1 ed 03 42 80 7c 2d 00 00 <74> 08 4c 89 e7 e8 42 c4 5b fd 4d 39 34 24 75 71 4d 89 f4 49 c1 ec
[  280.804389][    C1] RSP: 0018:ffffc9000323fa48 EFLAGS: 00000246
[  280.804395][    C1] RAX: 0000000000000009 RBX: ffffea0000e8d608 RCX: 0000000000000003
[  280.804400][    C1] RDX: ffffea0000e8d608 RSI: ffff88813663fe30 RDI: ffffea00010fd808
[  280.804405][    C1] RBP: 1ffffd40001d1ac2 R08: 0000000000000003 R09: 0000000000000000
[  280.804410][    C1] R10: dffffc0000000000 R11: fffff52000647f4c R12: ffffea0000e8d610
[  280.804415][    C1] R13: dffffc0000000000 R14: ffff88813663fe30 R15: ffffea00010fd808
[  280.804425][    C1]  free_frozen_page_commit+0xe2/0x1070
[  280.804437][    C1]  __free_frozen_pages+0x78b/0xe70
[  280.804447][    C1]  __put_partials+0x161/0x1c0
[  280.804457][    C1]  put_cpu_partial+0x17c/0x250
[  280.804466][    C1]  ? put_cpu_partial+0x6d/0x250
[  280.804475][    C1]  __slab_free+0x2f7/0x400
[  280.804485][    C1]  ? __phys_addr+0xd3/0x180
[  280.804495][    C1]  qlist_free_all+0x97/0x140
[  280.804506][    C1]  kasan_quarantine_reduce+0x148/0x160
[  280.804517][    C1]  __kasan_slab_alloc+0x22/0x80
[  280.804525][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  280.804532][    C1]  ? getname_flags+0xb8/0x540
[  280.804542][    C1]  getname_flags+0xb8/0x540
[  280.804551][    C1]  do_sys_openat2+0xbc/0x1c0
[  280.804562][    C1]  ? __pfx_do_sys_openat2+0x10/0x10
[  280.804570][    C1]  ? irqentry_exit+0x74/0x90
[  280.804582][    C1]  __x64_sys_openat+0x138/0x170
[  280.804592][    C1]  do_syscall_64+0xfa/0x3b0
[  280.804602][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.804609][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  280.804618][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.804625][    C1] RIP: 0033:0x7f0e8638e9a9
[  280.804632][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  280.804638][    C1] RSP: 002b:00007f0e872c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  280.804645][    C1] RAX: ffffffffffffffda RBX: 00007f0e865b5fa0 RCX: 00007f0e8638e9a9
[  280.804650][    C1] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  280.804654][    C1] RBP: 00007f0e86410d69 R08: 0000000000000000 R09: 0000000000000000
[  280.804659][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  280.804663][    C1] R13: 0000000000000000 R14: 00007f0e865b5fa0 R15: 00007ffc64a9b218
[  280.804671][    C1]  </TASK>
[  281.887466][ T8526] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  281.889824][ T8526] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  281.891334][ T8526] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  281.891962][ T8526] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  281.893128][ T8526] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  281.893811][ T8526] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  281.943786][ T5838] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  281.945732][ T5838] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  281.946963][ T5838] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  281.947393][ T5838] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  281.950605][ T5838] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  281.951338][ T5838] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  281.951571][ T5838] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  281.953404][ T8521] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  281.955153][ T8521] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  288.010999][ T8531] Bluetooth: hci3: command 0x0406 tx timeout
[  288.011062][ T8531] Bluetooth: hci4: command 0x0406 tx timeout
[  288.011095][ T8531] Bluetooth: hci5: command 0x0406 tx timeout
[  294.243222][   T34] INFO: task kworker/u9:0:26 blocked for more than 143 seconds.
[  294.243260][   T34]       Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0
[  294.243274][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  294.243285][   T34] task:kworker/u9:0    state:D stack:23288 pid:26    tgid:26    ppid:2      task_flags:0x4208060 flags:0x00004000
[  294.243337][   T34] Workqueue: events_unbound cfg80211_wiphy_work
[  294.243376][   T34] Call Trace:
[  294.243386][   T34]  <TASK>
[  294.243401][   T34]  __schedule+0x16f5/0x4d00
[  294.243436][   T34]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  294.243461][   T34]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  294.243487][   T34]  ? do_raw_spin_lock+0x121/0x290
[  294.243513][   T34]  ? schedule+0x165/0x360
[  294.243534][   T34]  ? __lock_acquire+0xab9/0xd20
[  294.243554][   T34]  ? __pfx___schedule+0x10/0x10
[  294.243587][   T34]  ? schedule+0x91/0x360
[  294.243611][   T34]  schedule+0x165/0x360
[  294.243641][   T34]  synchronize_rcu_expedited+0x5f5/0x730
[  294.243669][   T34]  ? __pfx_synchronize_rcu_expedited+0x10/0x10
[  294.243692][   T34]  ? __pfx_autoremove_wake_function+0x10/0x10
[  294.243730][   T34]  ? __pfx___might_resched+0x10/0x10
[  294.243752][   T34]  ? trace_drv_return_void+0x7a/0x1f0
[  294.243772][   T34]  ? __sta_info_destroy_part1+0xe46/0x15c0
[  294.243807][   T34]  __sta_info_destroy+0x37/0x50
[  294.243832][   T34]  ieee80211_ibss_work+0x81f/0x1060
[  294.243857][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  294.243878][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  294.243900][   T34]  ? __pfx_ieee80211_ibss_work+0x10/0x10
[  294.243919][   T34]  ? perf_trace_preemptirq_template+0xa3/0x340
[  294.243977][   T34]  ? skb_dequeue+0x10e/0x150
[  294.244001][   T34]  ? ieee80211_iface_work+0xcdb/0xfe0
[  294.244026][   T34]  ? ieee80211_iface_work+0xf39/0xfe0
[  294.244050][   T34]  ? rcu_is_watching+0x15/0xb0
[  294.244074][   T34]  cfg80211_wiphy_work+0x2df/0x460
[  294.244101][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  294.244123][   T34]  process_scheduled_works+0xae1/0x17b0
[  294.244167][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  294.244201][   T34]  worker_thread+0x8a0/0xda0
[  294.244244][   T34]  kthread+0x711/0x8a0
[  294.244271][   T34]  ? __pfx_worker_thread+0x10/0x10
[  294.244292][   T34]  ? __pfx_kthread+0x10/0x10
[  294.244316][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  294.244337][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  294.244357][   T34]  ? __pfx_kthread+0x10/0x10
[  294.244381][   T34]  ret_from_fork+0x3fc/0x770
[  294.244404][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  294.244428][   T34]  ? __switch_to_asm+0x39/0x70
[  294.244451][   T34]  ? __switch_to_asm+0x33/0x70
[  294.244472][   T34]  ? __pfx_kthread+0x10/0x10
[  294.244496][   T34]  ret_from_fork_asm+0x1a/0x30
[  294.244531][   T34]  </TASK>
[  294.244599][   T34] INFO: task kworker/u9:4:1087 blocked for more than 143 seconds.
[  294.244614][   T34]       Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0
[  294.244626][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  294.244647][   T34] task:kworker/u9:4    state:D stack:23216 pid:1087  tgid:1087  ppid:2      task_flags:0x4208060 flags:0x00004000
[  294.244695][   T34] Workqueue: events_unbound bpf_map_free_deferred
[  294.244724][   T34] Call Trace:
[  294.244734][   T34]  <TASK>
[  294.244747][   T34]  __schedule+0x16f5/0x4d00
[  294.244776][   T34]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  294.244799][   T34]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  294.244823][   T34]  ? do_raw_spin_lock+0x121/0x290
[  294.244848][   T34]  ? schedule+0x165/0x360
[  294.244869][   T34]  ? __lock_acquire+0xab9/0xd20
[  294.244888][   T34]  ? __pfx___schedule+0x10/0x10
[  294.244922][   T34]  ? schedule+0x91/0x360
[  294.244973][   T34]  schedule+0x165/0x360
[  294.244994][   T34]  synchronize_rcu_expedited+0x5f5/0x730
[  294.245019][   T34]  ? __pfx_synchronize_rcu_expedited+0x10/0x10
[  294.245042][   T34]  ? __pfx_autoremove_wake_function+0x10/0x10
[  294.245080][   T34]  ? __pfx___might_resched+0x10/0x10
[  294.245115][   T34]  synchronize_rcu+0x11a/0x310
[  294.245137][   T34]  ? __pfx_synchronize_rcu+0x10/0x10
[  294.245158][   T34]  ? percpu_ref_put+0x1e/0x230
[  294.245188][   T34]  ? percpu_ref_put+0x1e/0x230
[  294.245212][   T34]  cpu_map_free+0x29/0x190
[  294.245237][   T34]  bpf_map_free_deferred+0xed/0x110
[  294.245259][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  294.245279][   T34]  process_scheduled_works+0xae1/0x17b0
[  294.245324][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  294.245358][   T34]  worker_thread+0x8a0/0xda0
[  294.245397][   T34]  kthread+0x711/0x8a0
[  294.245487][   T34]  ? __pfx_worker_thread+0x10/0x10
[  294.245510][   T34]  ? __pfx_kthread+0x10/0x10
[  294.245535][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  294.245558][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  294.245580][   T34]  ? __pfx_kthread+0x10/0x10
[  294.245604][   T34]  ret_from_fork+0x3fc/0x770
[  294.245627][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  294.245652][   T34]  ? __switch_to_asm+0x39/0x70
[  294.245674][   T34]  ? __switch_to_asm+0x33/0x70
[  294.245694][   T34]  ? __pfx_kthread+0x10/0x10
[  294.245718][   T34]  ret_from_fork_asm+0x1a/0x30
[  294.245755][   T34]  </TASK>
[  294.245875][   T34] INFO: task syz.1.790:8435 blocked for more than 143 seconds.
[  294.245891][   T34]       Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0
[  294.245904][   T34]       Blocked by coredump.
[  294.245913][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  294.245929][   T34] task:syz.1.790       state:D stack:22672 pid:8435  tgid:8435  ppid:5828   task_flags:0x40064c flags:0x00004002
[  294.246021][   T34] Call Trace:
[  294.246031][   T34]  <TASK>
[  294.246046][   T34]  __schedule+0x16f5/0x4d00
[  294.246080][   T34]  ? __lock_acquire+0xab9/0xd20
[  294.246100][   T34]  ? schedule+0x165/0x360
[  294.246121][   T34]  ? __pfx___schedule+0x10/0x10
[  294.246152][   T34]  ? schedule+0x91/0x360
[  294.246174][   T34]  schedule+0x165/0x360
[  294.246198][   T34]  schedule_preempt_disabled+0x13/0x30
[  294.246219][   T34]  __mutex_lock+0x724/0xe80
[  294.246243][   T34]  ? __mutex_lock+0x51b/0xe80
[  294.246270][   T34]  ? perf_trace_destroy+0x2e/0x150
[  294.246293][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  294.246321][   T34]  ? security_perf_event_free+0x40/0x70
[  294.246358][   T34]  ? rcu_is_watching+0x15/0xb0
[  294.246382][   T34]  ? rcu_is_watching+0x15/0xb0
[  294.246404][   T34]  ? __pfx_tp_perf_event_destroy+0x10/0x10
[  294.246433][   T34]  perf_trace_destroy+0x2e/0x150
[  294.246456][   T34]  ? __pfx_tp_perf_event_destroy+0x10/0x10
[  294.246476][   T34]  __free_event+0x316/0x7b0
[  294.246497][   T34]  ? __pfx_perf_release+0x10/0x10
[  294.246521][   T34]  perf_event_release_kernel+0x45b/0x510
[  294.246542][   T34]  ? __pfx_perf_release+0x10/0x10
[  294.246565][   T34]  perf_release+0x38/0x50
[  294.246588][   T34]  __fput+0x44c/0xa70
[  294.246622][   T34]  task_work_run+0x1d4/0x260
[  294.246652][   T34]  ? __pfx_task_work_run+0x10/0x10
[  294.246685][   T34]  do_exit+0x6b5/0x22e0
[  294.246722][   T34]  ? __pfx_do_exit+0x10/0x10
[  294.246745][   T34]  ? proc_coredump_connector+0x172/0x4b0
[  294.246765][   T34]  ? __pfx_proc_coredump_connector+0x10/0x10
[  294.246789][   T34]  do_group_exit+0x21c/0x2d0
[  294.246812][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  294.246838][   T34]  get_signal+0x1286/0x1340
[  294.246870][   T34]  arch_do_signal_or_restart+0x9a/0x750
[  294.246903][   T34]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  294.246936][   T34]  ? local_irq_enable_exit_to_user+0x5/0x10
[  294.246997][   T34]  irqentry_exit_to_user_mode+0x81/0x120
[  294.247022][   T34]  exc_general_protection+0x171/0x200
[  294.247050][   T34]  ? exc_page_fault+0x9f/0xf0
[  294.247071][   T34]  asm_exc_general_protection+0x26/0x30
[  294.247088][   T34] RIP: 0033:0x7f8b4ef8e9b1
[  294.247105][   T34] RSP: 002b:0000200000000220 EFLAGS: 00010217
[  294.247125][   T34] RAX: 0000000000000000 RBX: 00007f8b4f1b5fa0 RCX: 00007f8b4ef8e9a9
[  294.247138][   T34] RDX: 0000200000000240 RSI: 0000200000000220 RDI: 0000000000200000
[  294.247150][   T34] RBP: 00007f8b4f010d69 R08: 00002000000002c0 R09: 00002000000002c0
[  294.247162][   T34] R10: 0000200000000280 R11: 0000000000000206 R12: 0000000000000000
[  294.247175][   T34] R13: 0000000000000000 R14: 00007f8b4f1b5fa0 R15: 00007ffe51a49548
[  294.247201][   T34]  </TASK>
[  294.247213][   T34] INFO: task syz.2.805:8462 blocked for more than 143 seconds.
[  294.247228][   T34]       Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0
[  294.247241][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  294.247252][   T34] task:syz.2.805       state:D stack:25096 pid:8462  tgid:8462  ppid:5827   task_flags:0x400040 flags:0x00004004
[  294.247299][   T34] Call Trace:
[  294.247309][   T34]  <TASK>
[  294.247321][   T34]  __schedule+0x16f5/0x4d00
[  294.247351][   T34]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  294.247372][   T34]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  294.247396][   T34]  ? do_raw_spin_lock+0x121/0x290
[  294.247431][   T34]  ? schedule+0x165/0x360
[  294.247454][   T34]  ? __lock_acquire+0xab9/0xd20
[  294.247471][   T34]  ? __pfx___schedule+0x10/0x10
[  294.247502][   T34]  ? schedule+0x91/0x360
[  294.247526][   T34]  schedule+0x165/0x360
[  294.247546][   T34]  synchronize_rcu_expedited+0x583/0x730
[  294.247570][   T34]  ? __pfx_synchronize_rcu_expedited+0x10/0x10
[  294.247602][   T34]  ? __pfx_wait_rcu_exp_gp+0x10/0x10
[  294.247625][   T34]  ? __pfx___might_resched+0x10/0x10
[  294.247646][   T34]  ? __pfx_autoremove_wake_function+0x10/0x10
[  294.247671][   T34]  ? __pfx_device_del+0x10/0x10
[  294.247692][   T34]  ? netdev_unregister_kobject+0x344/0x450
[  294.247721][   T34]  unregister_netdevice_many_notify+0x1f75/0x2320
[  294.247758][   T34]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  294.247783][   T34]  ? __lock_acquire+0xab9/0xd20
[  294.247800][   T34]  ? skb_queue_purge_reason+0x203/0x360
[  294.247828][   T34]  ? __pfx_skb_queue_purge_reason+0x10/0x10
[  294.247860][   T34]  unregister_netdevice_queue+0x33c/0x380
[  294.247880][   T34]  ? tun_queue_purge+0x47c/0x4d0
[  294.247898][   T34]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  294.247926][   T34]  __tun_detach+0xda4/0x1560
[  294.247984][   T34]  ? __pfx_tun_chr_close+0x10/0x10
[  294.248013][   T34]  tun_chr_close+0x10a/0x1c0
[  294.248039][   T34]  __fput+0x44c/0xa70
[  294.248069][   T34]  task_work_run+0x1d4/0x260
[  294.248096][   T34]  ? __pfx_task_work_run+0x10/0x10
[  294.248124][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  294.248148][   T34]  exit_to_user_mode_loop+0xec/0x110
[  294.248167][   T34]  do_syscall_64+0x2bd/0x3b0
[  294.248194][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.248212][   T34]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  294.248235][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.248254][   T34] RIP: 0033:0x7f0e8638e9a9
[  294.248270][   T34] RSP: 002b:00007ffc64a9b378 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  294.248293][   T34] RAX: 0000000000000000 RBX: 00007f0e865b7ba0 RCX: 00007f0e8638e9a9
[  294.248307][   T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  294.248320][   T34] RBP: 00007f0e865b7ba0 R08: 0000000000000214 R09: 0000001e64a9b66f
[  294.248333][   T34] R10: 00007f0e865b7ac0 R11: 0000000000000246 R12: 00000000000234f1
[  294.248346][   T34] R13: 00007f0e865b6080 R14: ffffffffffffffff R15: 00007ffc64a9b490
[  294.248374][   T34]  </TASK>
[  294.248386][   T34] INFO: task syz.0.803:8466 blocked for more than 143 seconds.
[  294.248400][   T34]       Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0
[  294.248420][   T34]       Blocked by coredump.
[  294.248428][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  294.248439][   T34] task:syz.0.803       state:D stack:22928 pid:8466  tgid:8466  ppid:5836   task_flags:0x40064c flags:0x00004002
[  294.248486][   T34] Call Trace:
[  294.248496][   T34]  <TASK>
[  294.248509][   T34]  __schedule+0x16f5/0x4d00
[  294.248542][   T34]  ? __lock_acquire+0xab9/0xd20
[  294.248563][   T34]  ? schedule+0x165/0x360
[  294.248588][   T34]  ? __pfx___schedule+0x10/0x10
[  294.248621][   T34]  ? schedule+0x91/0x360
[  294.248645][   T34]  schedule+0x165/0x360
[  294.248667][   T34]  schedule_preempt_disabled+0x13/0x30
[  294.248688][   T34]  __mutex_lock+0x724/0xe80
[  294.248712][   T34]  ? __mutex_lock+0x51b/0xe80
[  294.248740][   T34]  ? perf_trace_destroy+0x2e/0x150
[  294.248763][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  294.248791][   T34]  ? security_perf_event_free+0x40/0x70
[  294.248817][   T34]  ? rcu_is_watching+0x15/0xb0
[  294.248839][   T34]  ? rcu_is_watching+0x15/0xb0
[  294.248860][   T34]  ? __pfx_tp_perf_event_destroy+0x10/0x10
[  294.248883][   T34]  perf_trace_destroy+0x2e/0x150
[  294.248904][   T34]  ? __pfx_tp_perf_event_destroy+0x10/0x10
[  294.248935][   T34]  __free_event+0x316/0x7b0
[  294.248986][   T34]  ? __pfx_perf_release+0x10/0x10
[  294.249010][   T34]  perf_event_release_kernel+0x45b/0x510
[  294.249030][   T34]  ? __pfx_perf_release+0x10/0x10
[  294.249054][   T34]  perf_release+0x38/0x50
[  294.249076][   T34]  __fput+0x44c/0xa70
[  294.249107][   T34]  task_work_run+0x1d4/0x260
[  294.249135][   T34]  ? __pfx_task_work_run+0x10/0x10
[  294.249169][   T34]  do_exit+0x6b5/0x22e0
[  294.249203][   T34]  ? __pfx_do_exit+0x10/0x10
[  294.249228][   T34]  ? proc_coredump_connector+0x172/0x4b0
[  294.249246][   T34]  ? __pfx_proc_coredump_connector+0x10/0x10
[  294.249274][   T34]  do_group_exit+0x21c/0x2d0
[  294.249298][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  294.249322][   T34]  get_signal+0x1286/0x1340
[  294.249360][   T34]  arch_do_signal_or_restart+0x9a/0x750
[  294.249393][   T34]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  294.249434][   T34]  ? local_irq_enable_exit_to_user+0x5/0x10
[  294.249458][   T34]  irqentry_exit_to_user_mode+0x81/0x120
[  294.249482][   T34]  exc_general_protection+0x171/0x200
[  294.249510][   T34]  ? exc_page_fault+0x9f/0xf0
[  294.249534][   T34]  asm_exc_general_protection+0x26/0x30
[  294.249552][   T34] RIP: 0033:0x7fa1f8d8e9b1
[  294.249568][   T34] RSP: 002b:00002000000002d0 EFLAGS: 00010217
[  294.249588][   T34] RAX: 0000000000000000 RBX: 00007fa1f8fb6080 RCX: 00007fa1f8d8e9a9
[  294.249602][   T34] RDX: 0000200000000300 RSI: 00002000000002d0 RDI: 0000000001000000
[  294.249616][   T34] RBP: 00007fa1f8e10d69 R08: 0000200000000580 R09: 0000200000000580
[  294.249630][   T34] R10: 0000200000000340 R11: 0000000000000206 R12: 0000000000000000
[  294.249642][   T34] R13: 0000000000000000 R14: 00007fa1f8fb6080 R15: 00007ffc4337ec78
[  294.249669][   T34]  </TASK>
[  294.249680][   T34] INFO: task syz.0.806:8468 blocked for more than 143 seconds.
[  294.249694][   T34]       Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0
[  294.249706][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  294.249715][   T34] task:syz.0.806       state:D stack:25096 pid:8468  tgid:8468  ppid:5836   task_flags:0x400040 flags:0x00004004
[  294.249763][   T34] Call Trace:
[  294.249771][   T34]  <TASK>
[  294.249785][   T34]  __schedule+0x16f5/0x4d00
[  294.249816][   T34]  ? __lock_acquire+0xab9/0xd20
[  294.249837][   T34]  ? schedule+0x165/0x360
[  294.249861][   T34]  ? __pfx___schedule+0x10/0x10
[  294.249895][   T34]  ? schedule+0x91/0x360
[  294.249918][   T34]  schedule+0x165/0x360
[  294.249968][   T34]  schedule_preempt_disabled+0x13/0x30
[  294.249991][   T34]  __mutex_lock+0x724/0xe80
[  294.250015][   T34]  ? __mutex_lock+0x51b/0xe80
[  294.250042][   T34]  ? synchronize_rcu_expedited+0x3b9/0x730
[  294.250067][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  294.250100][   T34]  ? do_raw_spin_unlock+0x4d/0x240
[  294.250128][   T34]  synchronize_rcu_expedited+0x3b9/0x730
[  294.250153][   T34]  ? __pfx_synchronize_rcu_expedited+0x10/0x10
[  294.250192][   T34]  ? __pfx___might_resched+0x10/0x10
[  294.250226][   T34]  synchronize_rcu+0x11a/0x310
[  294.250248][   T34]  ? __pfx_synchronize_rcu+0x10/0x10
[  294.250281][   T34]  perf_trace_event_unreg+0xc3/0x1b0
[  294.250302][   T34]  perf_trace_destroy+0xa4/0x150
[  294.250323][   T34]  ? __pfx_tp_perf_event_destroy+0x10/0x10
[  294.250344][   T34]  __free_event+0x316/0x7b0
[  294.250363][   T34]  ? __pfx_perf_release+0x10/0x10
[  294.250387][   T34]  perf_event_release_kernel+0x45b/0x510
[  294.250406][   T34]  ? __pfx_perf_release+0x10/0x10
[  294.250435][   T34]  perf_release+0x38/0x50
[  294.250457][   T34]  __fput+0x44c/0xa70
[  294.250489][   T34]  task_work_run+0x1d4/0x260
[  294.250517][   T34]  ? __pfx_task_work_run+0x10/0x10
[  294.250547][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  294.250568][   T34]  exit_to_user_mode_loop+0xec/0x110
[  294.250588][   T34]  do_syscall_64+0x2bd/0x3b0
[  294.250611][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  294.250632][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.250651][   T34]  ? exc_page_fault+0x9f/0xf0
[  294.250674][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.250692][   T34] RIP: 0033:0x7fa1f8d8e9a9
[  294.250707][   T34] RSP: 002b:00007ffc4337edd8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  294.250728][   T34] RAX: 0000000000000000 RBX: 00007fa1f8fb7ba0 RCX: 00007fa1f8d8e9a9
[  294.250742][   T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  294.250754][   T34] RBP: 00007fa1f8fb7ba0 R08: 000000000000023c R09: 0000001e4337f0cf
[  294.250768][   T34] R10: 00007fa1f8fb7ac0 R11: 0000000000000246 R12: 0000000000023560
[  294.250781][   T34] R13: 00007fa1f8fb6080 R14: ffffffffffffffff R15: 00007ffc4337eef0
[  294.250809][   T34]  </TASK>
[  294.250820][   T34] INFO: task syz.1.811:8479 blocked for more than 143 seconds.
[  294.250833][   T34]       Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0
[  294.250845][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  294.250855][   T34] task:syz.1.811       state:D stack:25040 pid:8479  tgid:8479  ppid:5828   task_flags:0x400040 flags:0x00004004
[  294.250903][   T34] Call Trace:
[  294.250912][   T34]  <TASK>
[  294.250924][   T34]  __schedule+0x16f5/0x4d00
[  294.250981][   T34]  ? __lock_acquire+0xab9/0xd20
[  294.251003][   T34]  ? schedule+0x165/0x360
[  294.251028][   T34]  ? __pfx___schedule+0x10/0x10
[  294.251061][   T34]  ? schedule+0x91/0x360
[  294.251086][   T34]  schedule+0x165/0x360
[  294.251109][   T34]  schedule_preempt_disabled+0x13/0x30
[  294.251129][   T34]  __mutex_lock+0x724/0xe80
[  294.251153][   T34]  ? __mutex_lock+0x51b/0xe80
[  294.251180][   T34]  ? perf_trace_destroy+0x2e/0x150
[  294.251202][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  294.251230][   T34]  ? security_perf_event_free+0x40/0x70
[  294.251253][   T34]  ? rcu_is_watching+0x15/0xb0
[  294.251274][   T34]  ? rcu_is_watching+0x15/0xb0
[  294.251295][   T34]  ? __pfx_tp_perf_event_destroy+0x10/0x10
[  294.251316][   T34]  perf_trace_destroy+0x2e/0x150
[  294.251337][   T34]  ? __pfx_tp_perf_event_destroy+0x10/0x10
[  294.251357][   T34]  __free_event+0x316/0x7b0
[  294.251377][   T34]  ? __pfx_perf_release+0x10/0x10
[  294.251400][   T34]  perf_event_release_kernel+0x45b/0x510
[  294.251426][   T34]  ? __pfx_perf_release+0x10/0x10
[  294.251450][   T34]  perf_release+0x38/0x50
[  294.251471][   T34]  __fput+0x44c/0xa70
[  294.251504][   T34]  task_work_run+0x1d4/0x260
[  294.251531][   T34]  ? __pfx_task_work_run+0x10/0x10
[  294.251560][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  294.251582][   T34]  exit_to_user_mode_loop+0xec/0x110
[  294.251601][   T34]  do_syscall_64+0x2bd/0x3b0
[  294.251623][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  294.251645][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.251662][   T34]  ? exc_page_fault+0x9f/0xf0
[  294.251685][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.251703][   T34] RIP: 0033:0x7f8b4ef8e9a9
[  294.251717][   T34] RSP: 002b:00007ffe51a496a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  294.251739][   T34] RAX: 0000000000000000 RBX: 00007f8b4f1b7ba0 RCX: 00007f8b4ef8e9a9
[  294.251752][   T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  294.251764][   T34] RBP: 00007f8b4f1b7ba0 R08: 0000000000000230 R09: 0000001e51a4999f
[  294.251777][   T34] R10: 00007f8b4f1b7ac0 R11: 0000000000000246 R12: 00000000000237be
[  294.251790][   T34] R13: 00007ffe51a497a0 R14: ffffffffffffffff R15: 00007ffe51a497c0
[  294.251818][   T34]  </TASK>
[  294.251828][   T34] INFO: task syz.1.811:8480 blocked for more than 143 seconds.
[  294.251841][   T34]       Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0
[  294.251853][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  294.251862][   T34] task:syz.1.811       state:D stack:24872 pid:8480  tgid:8479  ppid:5828   task_flags:0x400140 flags:0x00004004
[  294.251909][   T34] Call Trace:
[  294.251917][   T34]  <TASK>
[  294.251930][   T34]  __schedule+0x16f5/0x4d00
[  294.251987][   T34]  ? __lock_acquire+0xab9/0xd20
[  294.252009][   T34]  ? schedule+0x165/0x360
[  294.252034][   T34]  ? __pfx___schedule+0x10/0x10
[  294.252068][   T34]  ? schedule+0x91/0x360
[  294.252091][   T34]  schedule+0x165/0x360
[  294.252114][   T34]  schedule_preempt_disabled+0x13/0x30
[  294.252134][   T34]  __mutex_lock+0x724/0xe80
[  294.252159][   T34]  ? __mutex_lock+0x51b/0xe80
[  294.252186][   T34]  ? rtnl_dumpit+0x92/0x200
[  294.252207][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  294.252240][   T34]  ? __build_skb_around+0x257/0x3e0
[  294.252260][   T34]  ? __pfx_rtnl_dump_ifinfo+0x10/0x10
[  294.252278][   T34]  rtnl_dumpit+0x92/0x200
[  294.252299][   T34]  netlink_dump+0x6de/0xe60
[  294.252329][   T34]  ? __pfx_netlink_dump+0x10/0x10
[  294.252358][   T34]  ? kmem_cache_free+0x18f/0x400
[  294.252383][   T34]  netlink_recvmsg+0x676/0xa30
[  294.252415][   T34]  ? __pfx_netlink_recvmsg+0x10/0x10
[  294.252439][   T34]  ? aa_sock_msg_perm+0x94/0x160
[  294.252465][   T34]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  294.252487][   T34]  ? security_socket_recvmsg+0x7e/0x2e0
[  294.252505][   T34]  ? __pfx_netlink_recvmsg+0x10/0x10
[  294.252524][   T34]  sock_recvmsg+0x22c/0x270
[  294.252553][   T34]  ____sys_recvmsg+0x1c9/0x460
[  294.252583][   T34]  ? __pfx_____sys_recvmsg+0x10/0x10
[  294.252615][   T34]  ? import_iovec+0x74/0xa0
[  294.252637][   T34]  ___sys_recvmsg+0x1b5/0x510
[  294.252662][   T34]  ? __pfx____sys_recvmsg+0x10/0x10
[  294.252703][   T34]  ? __fget_files+0x3a0/0x420
[  294.252733][   T34]  __x64_sys_recvmsg+0x198/0x260
[  294.252753][   T34]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  294.252777][   T34]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  294.252796][   T34]  ? perf_trace_preemptirq_template+0xa3/0x340
[  294.252829][   T34]  ? irqentry_exit_to_user_mode+0xd1/0x120
[  294.252857][   T34]  ? do_syscall_64+0xbe/0x3b0
[  294.252883][   T34]  do_syscall_64+0xfa/0x3b0
[  294.252907][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.252925][   T34]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  294.252974][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.264837][   T34] RIP: 0033:0x7f8b4ef8e9a9
[  294.264871][   T34] RSP: 002b:00007f8b4fdaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  294.264896][   T34] RAX: ffffffffffffffda RBX: 00007f8b4f1b5fa0 RCX: 00007f8b4ef8e9a9
[  294.264910][   T34] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  294.264923][   T34] RBP: 00007f8b4f010d69 R08: 0000000000000000 R09: 0000000000000000
[  294.264962][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  294.264975][   T34] R13: 0000000000000000 R14: 00007f8b4f1b5fa0 R15: 00007ffe51a49548
[  294.264998][   T34]  </TASK>
[  294.265036][   T34] 
[  294.265036][   T34] Showing all locks held in the system:
[  294.265051][   T34] 3 locks held by kworker/u9:0/26:
[  294.265064][   T34]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  294.265166][   T34]  #1: ffffc900001efbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  294.265222][   T34]  #2: ffff888111e88768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x460
[  294.265288][   T34] 1 lock held by khungtaskd/34:
[  294.265300][   T34]  #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  294.265365][   T34] 4 locks held by kworker/u11:0/54:
[  294.265377][   T34]  #0: ffff88803aa43948 ((wq_completion)hci8#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  294.265449][   T34]  #1: ffffc900007cfbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  294.265500][   T34]  #2: ffff888125ad80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0
[  294.265558][   T34]  #3: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0
[  294.265633][   T34] 2 locks held by kworker/u9:4/1087:
[  294.265645][   T34]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  294.265697][   T34]  #1: ffffc90006fe7bc0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  294.265774][   T34] 5 locks held by kworker/u11:1/5224:
[  294.265786][   T34]  #0: ffff888020143148 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  294.265844][   T34]  #1: ffffc90006ce7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  294.265902][   T34]  #2: ffff88802a264dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  294.265993][   T34]  #3: ffff88802a2640b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  294.266054][   T34]  #4: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  294.266110][   T34] 3 locks held by syslogd/5261:
[  294.266121][   T34] 1 lock held by klogd/5268:
[  294.266135][   T34] 2 locks held by getty/5653:
[  294.266147][   T34]  #0: ffff8880211600a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  294.266203][   T34]  #1: ffffc900029032f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  294.266266][   T34] 4 locks held by kworker/u11:2/5833:
[  294.266277][   T34]  #0: ffff88803aa45948 ((wq_completion)hci7#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  294.266358][   T34]  #1: ffffc9000450fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  294.266421][   T34]  #2: ffff8880217a80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0
[  294.266481][   T34]  #3: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0
[  294.266541][   T34] 4 locks held by kworker/u11:3/5834:
[  294.266552][   T34]  #0: ffff888039709948 ((wq_completion)hci6#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  294.266616][   T34]  #1: ffffc9000451fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  294.266673][   T34]  #2: ffff888028ed00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0
[  294.266732][   T34]  #3: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0
[  294.266793][   T34] 6 locks held by kworker/u11:5/5839:
[  294.266804][   T34]  #0: ffff88802b0e2948 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  294.266860][   T34]  #1: ffffc9000456fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  294.266918][   T34]  #2: ffff888108494dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  294.267000][   T34]  #3: ffff8881084940b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  294.267060][   T34]  #4: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  294.267116][   T34]  #5: ffff888023d44338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  294.267180][   T34] 4 locks held by kworker/u11:6/5840:
[  294.267192][   T34]  #0: ffff88803ac4f948 ((wq_completion)hci10#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  294.267255][   T34]  #1: ffffc9000457fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  294.267313][   T34]  #2: ffff888124f300b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0
[  294.267372][   T34]  #3: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0
[  294.267448][   T34] 1 lock held by syz.1.790/8435:
[  294.267460][   T34]  #0: ffffffff8e1a2ca8 (event_mutex){+.+.}-{4:4}, at: perf_trace_destroy+0x2e/0x150
[  294.267519][   T34] 2 locks held by syz.2.805/8462:
[  294.267530][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  294.267591][   T34]  #1: ffffffff8e144bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  294.267651][   T34] 6 locks held by syz.2.805/8464:
[  294.267662][   T34] 1 lock held by syz.0.803/8466:
[  294.267674][   T34]  #0: ffffffff8e1a2ca8 (event_mutex){+.+.}-{4:4}, at: perf_trace_destroy+0x2e/0x150
[  294.267730][   T34] 2 locks held by syz.0.806/8468:
[  294.267742][   T34]  #0: ffffffff8e1a2ca8 (event_mutex){+.+.}-{4:4}, at: perf_trace_destroy+0x2e/0x150
[  294.267798][   T34]  #1: ffffffff8e144bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  294.267857][   T34] 1 lock held by syz.1.811/8479:
[  294.267868][   T34]  #0: ffffffff8e1a2ca8 (event_mutex){+.+.}-{4:4}, at: perf_trace_destroy+0x2e/0x150
[  294.267924][   T34] 2 locks held by syz.1.811/8480:
[  294.267962][   T34]  #0: ffff888039ace6d0 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xb7/0xe60
[  294.268020][   T34]  #1: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200
[  294.268075][   T34] 1 lock held by syz-executor/8489:
[  294.268087][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  294.268147][   T34] 1 lock held by syz-executor/8492:
[  294.268159][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  294.268217][   T34] 1 lock held by syz-executor/8494:
[  294.268229][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  294.268287][   T34] 1 lock held by syz-executor/8501:
[  294.268299][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  294.268357][   T34] 1 lock held by syz-executor/8504:
[  294.268369][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  294.268433][   T34] 1 lock held by syz-executor/8505:
[  294.268445][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  294.268503][   T34] 1 lock held by dhcpcd/8509:
[  294.268514][   T34]  #0: ffff888125eb4258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  294.268575][   T34] 1 lock held by dhcpcd/8510:
[  294.268587][   T34]  #0: ffff888126180258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  294.268645][   T34] 1 lock held by dhcpcd/8511:
[  294.268656][   T34]  #0: ffff888126764258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  294.268714][   T34] 1 lock held by dhcpcd/8512:
[  294.268725][   T34]  #0: ffff888126b68258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  294.268782][   T34] 1 lock held by dhcpcd/8513:
[  294.268794][   T34]  #0: ffff888126acc258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  294.268851][   T34] 1 lock held by dhcpcd/8514:
[  294.268863][   T34]  #0: ffff888126e20258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  294.268922][   T34] 1 lock held by syz-executor/8518:
[  294.268933][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  294.269016][   T34] 4 locks held by kworker/u11:7/8521:
[  294.269028][   T34]  #0: ffff88803ac4d148 ((wq_completion)hci11#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  294.269094][   T34]  #1: ffffc90001dbfbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  294.269151][   T34]  #2: ffff888124f340b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0
[  294.269210][   T34]  #3: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0
[  294.269270][   T34] 1 lock held by syz-executor/8522:
[  294.269282][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  294.269340][   T34] 1 lock held by syz-executor/8524:
[  294.269352][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  294.269415][   T34] 4 locks held by kworker/u11:8/8526:
[  294.269427][   T34]  #0: ffff88803ac4f148 ((wq_completion)hci9#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  294.269492][   T34]  #1: ffffc90001c7fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  294.269549][   T34]  #2: ffff888125aac0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0
[  294.269608][   T34]  #3: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0
[  294.269668][   T34] 5 locks held by kworker/u11:9/8527:
[  294.269680][   T34]  #0: ffff88811b460948 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  294.269737][   T34]  #1: ffffc90008e07bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  294.269794][   T34]  #2: ffff888112028dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  294.269854][   T34]  #3: ffff8881120280b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  294.269915][   T34]  #4: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  294.269995][   T34] 5 locks held by kworker/u11:10/8528:
[  294.270007][   T34]  #0: ffff88811b462148 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  294.270063][   T34]  #1: ffffc90008e77bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  294.270117][   T34]  #2: ffff88811b75cdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  294.270174][   T34]  #3: ffff88811b75c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  294.270236][   T34]  #4: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  294.270291][   T34] 5 locks held by kworker/u11:11/8530:
[  294.270303][   T34]  #0: ffff88811b466948 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  294.270360][   T34]  #1: ffffc90001dcfbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  294.270423][   T34]  #2: ffff88811c3a8dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  294.270481][   T34]  #3: ffff88811c3a80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  294.270543][   T34]  #4: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  294.270599][   T34] 
[  294.270607][   T34] =============================================
[  294.270607][   T34] 
[  294.270619][   T34] NMI backtrace for cpu 0
[  294.270633][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  294.270649][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  294.270657][   T34] Call Trace:
[  294.270665][   T34]  <TASK>
[  294.270673][   T34]  dump_stack_lvl+0x189/0x250
[  294.270694][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  294.270710][   T34]  ? __pfx__printk+0x10/0x10
[  294.270739][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  294.270759][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  294.270772][   T34]  ? _printk+0xcf/0x120
[  294.270794][   T34]  ? __pfx__printk+0x10/0x10
[  294.270813][   T34]  ? debug_show_all_locks+0x2e/0x180
[  294.270828][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  294.270844][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  294.270862][   T34]  watchdog+0xfee/0x1030
[  294.270877][   T34]  ? watchdog+0x1de/0x1030
[  294.270896][   T34]  kthread+0x711/0x8a0
[  294.270918][   T34]  ? __pfx_watchdog+0x10/0x10
[  294.270930][   T34]  ? __pfx_kthread+0x10/0x10
[  294.270973][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  294.270990][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  294.271007][   T34]  ? __pfx_kthread+0x10/0x10
[  294.271025][   T34]  ret_from_fork+0x3fc/0x770
[  294.271043][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  294.271063][   T34]  ? __switch_to_asm+0x39/0x70
[  294.271080][   T34]  ? __switch_to_asm+0x33/0x70
[  294.271096][   T34]  ? __pfx_kthread+0x10/0x10
[  294.271115][   T34]  ret_from_fork_asm+0x1a/0x30
[  294.271145][   T34]  </TASK>
[  294.271152][   T34] Sending NMI from CPU 0 to CPUs 1:
[  294.271223][    C1] NMI backtrace for cpu 1
[  294.271247][    C1] CPU: 1 UID: 0 PID: 8464 Comm: syz.2.805 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  294.271261][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  294.271269][    C1] RIP: 0010:native_apic_msr_write+0x39/0x50
[  294.271296][    C1] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 cc cc cc cc cc f3 0f 1e fa 89 f6 31 d2 e9 e2 db 86 03 66
[  294.271307][    C1] RSP: 0018:ffffc900001e03b8 EFLAGS: 00000046
[  294.271316][    C1] RAX: 0000000000000116 RBX: ffff888136623900 RCX: 0000000000000838
[  294.271324][    C1] RDX: 0000000000000000 RSI: 0000000000000116 RDI: 0000000000000838
[  294.271330][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff81aec9fe
[  294.271337][    C1] R10: 0000000000000003 R11: ffffffff81702490 R12: 00000000100064a9
[  294.271345][    C1] R13: dffffc0000000000 R14: 0000000000000116 R15: 0000000000000020
[  294.271352][    C1] FS:  00007f0e872c26c0(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
[  294.271362][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  294.271369][    C1] CR2: 000000110c354921 CR3: 000000002b110000 CR4: 00000000000006f0
[  294.271402][    C1] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000
[  294.271410][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  294.271417][    C1] Call Trace:
[  294.271424][    C1]  <IRQ>
[  294.271430][    C1]  lapic_next_event+0x11/0x20
[  294.271442][    C1]  clockevents_program_event+0x1cf/0x360
[  294.271457][    C1]  hrtimer_interrupt+0x620/0xaa0
[  294.271483][    C1]  __sysvec_apic_timer_interrupt+0x10b/0x410
[  294.271498][    C1]  sysvec_apic_timer_interrupt+0x52/0xc0
[  294.271515][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  294.271530][    C1] RIP: 0010:console_flush_all+0x7f7/0xc40
[  294.271547][    C1] Code: 48 21 c3 0f 85 e9 01 00 00 e8 75 e7 1e 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 66 e7 1e 00 eb 06 e8 5f e7 1e 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 8a 0a 82 00 48 8b 1b 48 8b 44 24
[  294.271558][    C1] RSP: 0018:ffffc900001e0620 EFLAGS: 00000246
[  294.271569][    C1] RAX: 1ffffffff1d36927 RBX: ffffffff8e9b4938 RCX: ffff88801bfeb980
[  294.271578][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  294.271587][    C1] RBP: ffffc900001e0770 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  294.271595][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: dffffc0000000000
[  294.271605][    C1] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8e9b48e0
[  294.271622][    C1]  ? console_flush_all+0x13a/0xc40
[  294.271639][    C1]  ? __pfx_console_flush_all+0x10/0x10
[  294.271660][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  294.271677][    C1]  console_unlock+0xc4/0x270
[  294.271690][    C1]  ? __pfx_console_unlock+0x10/0x10
[  294.271705][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  294.271722][    C1]  vprintk_emit+0x5b7/0x7a0
[  294.271736][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  294.271751][    C1]  ? perf_trace_preemptirq_template+0xa3/0x340
[  294.271769][    C1]  ? irqentry_exit+0x74/0x90
[  294.271785][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  294.271801][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  294.271816][    C1]  _printk+0xcf/0x120
[  294.271835][    C1]  ? __pfx__printk+0x10/0x10
[  294.271855][    C1]  clocksource_watchdog+0xdca/0x11c0
[  294.271868][    C1]  ? __lock_acquire+0xab9/0xd20
[  294.271884][    C1]  ? __pfx_clocksource_watchdog+0x10/0x10
[  294.271898][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  294.271911][    C1]  call_timer_fn+0x17e/0x5f0
[  294.271922][    C1]  ? __pfx_clocksource_watchdog+0x10/0x10
[  294.271979][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  294.271995][    C1]  ? call_timer_fn+0xbe/0x5f0
[  294.272007][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  294.272026][    C1]  ? __pfx_clocksource_watchdog+0x10/0x10
[  294.272039][    C1]  __run_timer_base+0x61a/0x860
[  294.272064][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  294.272091][    C1]  run_timer_softirq+0x67/0x180
[  294.272110][    C1]  handle_softirqs+0x286/0x870
[  294.272126][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  294.272140][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  294.272153][    C1]  ? irq_work_single+0x1ac/0x240
[  294.272167][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  294.272186][    C1]  __irq_exit_rcu+0xca/0x1f0
[  294.272199][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  294.272214][    C1]  ? rcu_is_watching+0x15/0xb0
[  294.272232][    C1]  irq_exit_rcu+0x9/0x30
[  294.272245][    C1]  sysvec_irq_work+0xa3/0xc0
[  294.272258][    C1]  </IRQ>
[  294.272263][    C1]  <TASK>
[  294.272268][    C1]  asm_sysvec_irq_work+0x1a/0x20
[  294.272283][    C1] RIP: 0010:__list_add_valid_or_report+0x44/0x130
[  294.272299][    C1] Code: 48 85 d2 0f 84 93 00 00 00 49 89 f6 49 89 ff 49 bd 00 00 00 00 00 fc ff df 4c 8d 63 08 4c 89 e5 48 c1 ed 03 42 80 7c 2d 00 00 <74> 08 4c 89 e7 e8 42 c4 5b fd 4d 39 34 24 75 71 4d 89 f4 49 c1 ec
[  294.272310][    C1] RSP: 0018:ffffc9000323fa48 EFLAGS: 00000246
[  294.272322][    C1] RAX: 0000000000000009 RBX: ffffea0000e8d608 RCX: 0000000000000003
[  294.272331][    C1] RDX: ffffea0000e8d608 RSI: ffff88813663fe30 RDI: ffffea00010fd808
[  294.272340][    C1] RBP: 1ffffd40001d1ac2 R08: 0000000000000003 R09: 0000000000000000
[  294.272348][    C1] R10: dffffc0000000000 R11: fffff52000647f4c R12: ffffea0000e8d610
[  294.272357][    C1] R13: dffffc0000000000 R14: ffff88813663fe30 R15: ffffea00010fd808
[  294.272375][    C1]  free_frozen_page_commit+0xe2/0x1070
[  294.272397][    C1]  __free_frozen_pages+0x78b/0xe70
[  294.272415][    C1]  __put_partials+0x161/0x1c0
[  294.272434][    C1]  put_cpu_partial+0x17c/0x250
[  294.272450][    C1]  ? put_cpu_partial+0x6d/0x250
[  294.272476][    C1]  __slab_free+0x2f7/0x400
[  294.272494][    C1]  ? __phys_addr+0xd3/0x180
[  294.272512][    C1]  qlist_free_all+0x97/0x140
[  294.272532][    C1]  kasan_quarantine_reduce+0x148/0x160
[  294.272553][    C1]  __kasan_slab_alloc+0x22/0x80
[  294.272567][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  294.272580][    C1]  ? getname_flags+0xb8/0x540
[  294.272599][    C1]  getname_flags+0xb8/0x540
[  294.272616][    C1]  do_sys_openat2+0xbc/0x1c0
[  294.272634][    C1]  ? __pfx_do_sys_openat2+0x10/0x10
[  294.272650][    C1]  ? irqentry_exit+0x74/0x90
[  294.272671][    C1]  __x64_sys_openat+0x138/0x170
[  294.272691][    C1]  do_syscall_64+0xfa/0x3b0
[  294.272709][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.272720][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  294.272735][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.272746][    C1] RIP: 0033:0x7f0e8638e9a9
[  294.272759][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  294.272770][    C1] RSP: 002b:00007f0e872c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  294.272783][    C1] RAX: ffffffffffffffda RBX: 00007f0e865b5fa0 RCX: 00007f0e8638e9a9
[  294.272792][    C1] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  294.272800][    C1] RBP: 00007f0e86410d69 R08: 0000000000000000 R09: 0000000000000000
[  294.272808][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  294.272816][    C1] R13: 0000000000000000 R14: 00007f0e865b5fa0 R15: 00007ffc64a9b218
[  294.272832][    C1]  </TASK>
[  294.286387][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  294.286414][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  294.286433][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  294.286443][   T34] Call Trace:
[  294.286450][   T34]  <TASK>
[  294.286458][   T34]  dump_stack_lvl+0x99/0x250
[  294.286482][   T34]  ? __asan_memcpy+0x40/0x70
[  294.286504][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  294.286521][   T34]  ? __pfx__printk+0x10/0x10
[  294.286551][   T34]  panic+0x2db/0x790
[  294.286571][   T34]  ? __pfx_panic+0x10/0x10
[  294.286587][   T34]  ? __pfx_delay_tsc+0x10/0x10
[  294.286601][   T34]  ? nmi_backtrace_stall_check+0x433/0x440
[  294.286623][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  294.286638][   T34]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  294.286660][   T34]  watchdog+0x102d/0x1030
[  294.286677][   T34]  ? watchdog+0x1de/0x1030
[  294.286697][   T34]  kthread+0x711/0x8a0
[  294.286719][   T34]  ? __pfx_watchdog+0x10/0x10
[  294.286732][   T34]  ? __pfx_kthread+0x10/0x10
[  294.286752][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  294.286770][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  294.286798][   T34]  ? __pfx_kthread+0x10/0x10
[  294.286818][   T34]  ret_from_fork+0x3fc/0x770
[  294.286838][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  294.286857][   T34]  ? __switch_to_asm+0x39/0x70
[  294.286875][   T34]  ? __switch_to_asm+0x33/0x70
[  294.286893][   T34]  ? __pfx_kthread+0x10/0x10
[  294.286912][   T34]  ret_from_fork_asm+0x1a/0x30
[  294.286973][   T34]  </TASK>
[  294.287722][   T34] Kernel Offset: disabled

VM DIAGNOSIS:
09:52:03  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000006f RBX=000000000000006f RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f7b0
R8 =ffff888020ff8237 R9 =1ffff110041ff046 R10=dffffc0000000000 R11=ffffffff85472aa0
R12=dffffc0000000000 R13=ffffffff99af58dc R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff85472b1c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000559bfcc8b028 CR3=0000000029932000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81680ea6 RBX=0000000000000000 RCX=ffff88801bfeb980 RDX=0000000000010100
RSI=0000000000000008 RDI=ffffffff92a52460 RBP=ffffc900001e0548 RSP=ffffc900001e04c0
R8 =ffffffff92a52467 R9 =1ffffffff254a48c R10=dffffc0000000000 R11=fffffbfff254a48d
R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff81680ea7 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f0e872c26c0 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c354921 CR3=000000002b110000 CR4=000006f0
DR0=0000000000000000 DR1=0000200000000300 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f0e86586478 00007f0e86586450 XMM03=00007f0e86586488 00007f0e86586480
XMM04=00007f0e870ed100 00007f0e86586440 XMM05=00007f0e86586458 00007f0e865864a0
XMM06=00007f0e86586498 00007f0e86586490 XMM07=00007f0e86586488 00007f0e86586480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f0e86411ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
