last executing test programs:

16.703310477s ago: executing program 0 (id=126):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffff27, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x6d}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

16.703033284s ago: executing program 2 (id=127):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b907fa19ed4dd007049e0ff0888e", 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

16.642065014s ago: executing program 0 (id=129):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r3, r2})
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0)

16.641857751s ago: executing program 2 (id=130):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fff, 0x830e}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x1e, 0x3fc428c485168811, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(&(0x7f0000004cc0)={0x1, 0x59, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x605, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x4000006, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
syz_clone(0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$kcm(0xa, 0x3, 0x3a)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000007c0)="5c00000012006bab9e3fe3d8fd8978f45225d9ee000000007ea60860160af36504000100080ec000000002009ee517c356a7b0251e61e659ad3af435cf01c937e786a6d0bdd7fcf50e4509c5cc68b7ed9c232d786c35fe0000000000", 0x5c}, {0x0}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4088)

16.493731058s ago: executing program 1 (id=132):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x5, [@ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @func_proto, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5, 0xe}}, @fwd={0x3}]}, {0x0, [0x5f, 0x30, 0x4f]}}, 0x0, 0x59, 0x0, 0x1, 0xfffffff7}, 0x28)

16.416541524s ago: executing program 1 (id=133):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x17)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa4706, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x320, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000079"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40305829, &(0x7f0000000040)=0x12800)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r6, r5, 0x0, 0x0, 0x0}, 0x30)
r7 = socket$kcm(0x10, 0x400000002, 0x0)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000300)={0x5}, 0x8)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="2e0000003e0005", 0x7}], 0x1, 0x0, 0x0, 0x39c}, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1303000069"], 0xfe33)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

16.250613087s ago: executing program 2 (id=134):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')

16.250112847s ago: executing program 0 (id=135):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000040000000400000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

15.538227753s ago: executing program 2 (id=136):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x6, 0xfe, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x72bd1de2ad10d6f3, 0xfffffffffffffffc, 0xcfb5, 0x1, 0x0, 0x4, 0x0, 0x0, 0x84000, 0x0, 0x1}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305828, &(0x7f0000000040)=0x20000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)

15.537722974s ago: executing program 0 (id=137):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10)

15.450674152s ago: executing program 1 (id=138):
r0 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="0218030002000000e4a17c45c8d360c9", 0x10}], 0x1}, 0x0)

15.450330918s ago: executing program 2 (id=139):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x7}, 0x10}, 0x1d)

15.449720652s ago: executing program 0 (id=140):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x20000010)
setsockopt$sock_attach_bpf(r0, 0x6, 0x1f, &(0x7f0000000200), 0x4)
recvmsg$kcm(r0, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x2)

15.449566881s ago: executing program 1 (id=141):
r0 = socket$kcm(0x2, 0x3, 0x84)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000640))

15.331604677s ago: executing program 1 (id=142):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

15.331001477s ago: executing program 2 (id=143):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4977, 0x420a2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xc}, 0xa082, 0x0, 0x80000, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETTXFILTER(r2, 0x80111500, &(0x7f0000000100)=ANY=[])
recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r3, 0x1, 0x41, 0x0, 0x0)
sendmsg$kcm(r3, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080)
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0xce2, 0x82, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x7ffe}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x83, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, @perf_bp={&(0x7f0000000040), 0x1}, 0x1034c0, 0x0, 0x0, 0x0, 0xc360, 0xfffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f0000000080)=""/2, 0x0, 0x2, 0x1, 0x1000000}, 0x28)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$sock(0xffffffffffffffff, 0x0, 0x4040840)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x10000003, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
recvmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2042)

15.330454355s ago: executing program 1 (id=144):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f11"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

15.188264162s ago: executing program 0 (id=145):
r0 = socket$kcm(0x10, 0x3, 0x0)
write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
recvmsg$kcm(r0, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x0)

178.745128ms ago: executing program 32 (id=145):
r0 = socket$kcm(0x10, 0x3, 0x0)
write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
recvmsg$kcm(r0, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x0)

40.173753ms ago: executing program 33 (id=144):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f11"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

0s ago: executing program 34 (id=143):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4977, 0x420a2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xc}, 0xa082, 0x0, 0x80000, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETTXFILTER(r2, 0x80111500, &(0x7f0000000100)=ANY=[])
recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r3, 0x1, 0x41, 0x0, 0x0)
sendmsg$kcm(r3, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080)
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0xce2, 0x82, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x7ffe}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x83, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, @perf_bp={&(0x7f0000000040), 0x1}, 0x1034c0, 0x0, 0x0, 0x0, 0xc360, 0xfffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f0000000080)=""/2, 0x0, 0x2, 0x1, 0x1000000}, 0x28)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$sock(0xffffffffffffffff, 0x0, 0x4040840)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x10000003, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
recvmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2042)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:43208' (ED25519) to the list of known hosts.
syzkaller login: [   49.378228][ T5757] cgroup: Unknown subsys name 'net'
[   49.486821][ T5757] cgroup: Unknown subsys name 'cpuset'
[   49.494036][ T5757] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.714515][ T5757] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   57.487580][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   57.504620][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   57.508450][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   57.513711][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   57.516821][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   57.589371][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   57.593974][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   57.597586][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   57.601732][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   57.605543][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   57.657828][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   57.672963][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   57.677402][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   57.682125][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   57.685849][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   57.923738][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   57.993149][ T5825] chnl_net:caif_netlink_parms(): no params data found
[   58.070309][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.074547][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.077262][ T5832] bridge_slave_0: entered allmulticast mode
[   58.080233][ T5832] bridge_slave_0: entered promiscuous mode
[   58.123937][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.126873][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.129125][ T5832] bridge_slave_1: entered allmulticast mode
[   58.133228][ T5832] bridge_slave_1: entered promiscuous mode
[   58.197183][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.200095][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.203730][ T5825] bridge_slave_0: entered allmulticast mode
[   58.206965][ T5825] bridge_slave_0: entered promiscuous mode
[   58.212821][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.226143][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.229484][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   58.238231][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.242482][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.245600][ T5825] bridge_slave_1: entered allmulticast mode
[   58.249594][ T5825] bridge_slave_1: entered promiscuous mode
[   58.344610][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.351575][ T5832] team0: Port device team_slave_0 added
[   58.371817][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.377197][ T5832] team0: Port device team_slave_1 added
[   58.433435][ T5825] team0: Port device team_slave_0 added
[   58.463459][ T5825] team0: Port device team_slave_1 added
[   58.465786][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.469105][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.472970][ T5834] bridge_slave_0: entered allmulticast mode
[   58.476946][ T5834] bridge_slave_0: entered promiscuous mode
[   58.482251][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.485090][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.493793][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.514560][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.517538][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.520458][ T5834] bridge_slave_1: entered allmulticast mode
[   58.525943][ T5834] bridge_slave_1: entered promiscuous mode
[   58.530256][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.533577][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.544300][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.580880][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.584689][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.594159][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.613333][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.627996][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.630401][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.640515][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.646827][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.693553][ T5832] hsr_slave_0: entered promiscuous mode
[   58.696489][ T5832] hsr_slave_1: entered promiscuous mode
[   58.704411][ T5834] team0: Port device team_slave_0 added
[   58.738408][ T5834] team0: Port device team_slave_1 added
[   58.762773][ T5825] hsr_slave_0: entered promiscuous mode
[   58.765874][ T5825] hsr_slave_1: entered promiscuous mode
[   58.768060][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   58.771011][ T5825] Cannot create hsr debugfs directory
[   58.854136][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.857158][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.868034][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.874581][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.877530][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.888295][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.020571][ T5834] hsr_slave_0: entered promiscuous mode
[   59.027364][ T5834] hsr_slave_1: entered promiscuous mode
[   59.030657][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   59.034989][ T5834] Cannot create hsr debugfs directory
[   59.240456][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   59.270197][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   59.286777][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   59.305867][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   59.372720][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   59.396022][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   59.404342][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   59.415946][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   59.496447][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   59.504589][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   59.512358][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   59.518655][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   59.587329][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.593445][ T5220] Bluetooth: hci0: command tx timeout
[   59.628210][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   59.649204][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.651975][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.661658][ T5220] Bluetooth: hci1: command tx timeout
[   59.671824][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.675920][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.678263][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.718748][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.725746][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[   59.743399][ T3010] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.746210][ T3010] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.753105][ T5220] Bluetooth: hci2: command tx timeout
[   59.763221][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   59.779009][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.782344][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.802170][ T3010] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.804384][ T3010] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.830024][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.832925][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.860484][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   60.008726][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.066537][ T5825] veth0_vlan: entered promiscuous mode
[   60.073189][ T5825] veth1_vlan: entered promiscuous mode
[   60.080981][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.140454][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.157302][ T5825] veth0_macvtap: entered promiscuous mode
[   60.164019][ T5832] veth0_vlan: entered promiscuous mode
[   60.166863][ T5825] veth1_macvtap: entered promiscuous mode
[   60.174005][ T5832] veth1_vlan: entered promiscuous mode
[   60.197407][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.216248][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.224219][ T5825] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.227257][ T5825] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.229891][ T5825] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.233093][ T5825] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.271998][ T5834] veth0_vlan: entered promiscuous mode
[   60.275009][ T5832] veth0_macvtap: entered promiscuous mode
[   60.287233][ T5832] veth1_macvtap: entered promiscuous mode
[   60.294740][ T5834] veth1_vlan: entered promiscuous mode
[   60.325816][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.344349][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.361159][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.364290][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.367098][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.369806][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.390480][ T5834] veth0_macvtap: entered promiscuous mode
[   60.398949][ T5834] veth1_macvtap: entered promiscuous mode
[   60.401790][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.404469][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.433296][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.441830][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.444270][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.477995][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.498838][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.503734][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.506428][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   60.507086][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.515442][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.559926][ T5890] Driver unsupported XDP return value 0 on prog  (id 2) dev N/A, expect packet loss!
[   60.594651][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.597218][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.629436][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.639881][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.696468][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.699528][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.768361][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.770868][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.776472][ T5896] netlink: 'syz.2.3': attribute type 10 has an invalid length.
[   60.824495][ T5896] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   60.905749][ T5220] Bluetooth: hci0: Malformed LE Event: 0x0b
[   61.171119][    C0] hrtimer: interrupt took 45054 ns
[   61.663785][ T5220] Bluetooth: hci0: command tx timeout
[   61.694099][ T5915] netlink: 10 bytes leftover after parsing attributes in process `syz.1.11'.
[   61.751570][ T5220] Bluetooth: hci1: command tx timeout
[   61.821845][ T5220] Bluetooth: hci2: command tx timeout
[   63.323177][ T5973] netlink: 'syz.2.38': attribute type 25 has an invalid length.
[   63.567029][ T5981] netlink: 132 bytes leftover after parsing attributes in process `syz.1.42'.
[   63.741644][ T5220] Bluetooth: hci0: command tx timeout
[   63.822859][ T5220] Bluetooth: hci1: command tx timeout
[   63.844740][ T5992] netlink: 'syz.0.48': attribute type 10 has an invalid length.
[   63.853918][ T5992] veth0_vlan: entered allmulticast mode
[   63.901321][ T5220] Bluetooth: hci2: command tx timeout
[   63.940473][ T5992] veth0_vlan: left promiscuous mode
[   63.974008][ T5992] veth0_vlan: entered promiscuous mode
[   64.062282][ T5992] team0: Device veth0_vlan failed to register rx_handler
[   64.209367][ T5992] syz.0.48 (5992) used greatest stack depth: 17464 bytes left
[   65.351316][ T6028] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.64'.
[   65.526363][ T6037] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.67'.
[   65.569027][ T6037] warning: `syz.2.67' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   65.821663][ T5220] Bluetooth: hci0: command tx timeout
[   65.901841][ T5220] Bluetooth: hci1: command tx timeout
[   65.981458][ T5220] Bluetooth: hci2: command tx timeout
[   66.505878][ T6060] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.511666][ T6060] batman_adv: batadv0: Removing interface: batadv_slave_0
[   66.515841][ T6060] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.518886][ T6060] batman_adv: batadv0: Removing interface: batadv_slave_1
[   66.582762][ T6062] netlink: 'syz.1.79': attribute type 2 has an invalid length.
[   66.913948][ T5220] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8
[   66.954174][ T6078] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.87'.
[   67.152971][ T6086] netlink: 'syz.2.91': attribute type 10 has an invalid length.
[   67.156095][ T6086] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.91'.
[   67.251301][ T6091] netlink: 'syz.1.93': attribute type 14 has an invalid length.
[   67.641379][ T5220] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4
[   67.661268][ T6100] delete_channel: no stack
[   67.891871][ T6134] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.899820][ T6134] sock: sock_timestamping_bind_phc: sock not bind to device
[   67.952667][ T6136] netlink: 'syz.1.115': attribute type 10 has an invalid length.
[   67.955797][ T6136] netlink: 55 bytes leftover after parsing attributes in process `syz.1.115'.
[   68.218907][ T6153] netlink: 'syz.1.122': attribute type 1 has an invalid length.
[   68.298533][ T6158] netlink: 'syz.1.125': attribute type 10 has an invalid length.
[   68.302562][ T6158] netlink: 40 bytes leftover after parsing attributes in process `syz.1.125'.
[   68.310033][ T6158] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[   68.325148][ T6158] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   68.475583][ T6167] netlink: 'syz.0.129': attribute type 10 has an invalid length.
[   68.478996][ T6167] netlink: 55 bytes leftover after parsing attributes in process `syz.0.129'.
[   69.322013][ T6183] netlink: 763 bytes leftover after parsing attributes in process `syz.1.133'.
[   69.325355][ T6183] netlink: 'syz.1.133': attribute type 10 has an invalid length.
[   69.327703][ T6183] netlink: 40 bytes leftover after parsing attributes in process `syz.1.133'.
[   69.332547][ T6183] team0: entered promiscuous mode
[   69.334282][ T6183] team_slave_0: entered promiscuous mode
[   69.336801][ T6183] team_slave_1: entered promiscuous mode
[   69.338668][ T6183] team0: entered allmulticast mode
[   69.341719][ T6183] team_slave_0: entered allmulticast mode
[   69.343466][ T6183] team_slave_1: entered allmulticast mode
[   69.345641][ T6183] bridge0: port 3(team0) entered blocking state
[   69.347865][ T6183] bridge0: port 3(team0) entered disabled state
[   69.352710][ T6183] bridge0: port 3(team0) entered blocking state
[   69.354776][ T6183] bridge0: port 3(team0) entered forwarding state
[   70.042833][ T6203] Zero length message leads to an empty skb
[   71.617154][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.617240][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   73.039482][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 2087346433 wd_nsec: 2087346541
[   81.274793][ T1844] cfg80211: failed to load regulatory.db
[   85.277508][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   85.278504][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   85.279020][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   85.279606][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   85.280170][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   85.617392][ T5220] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   85.619702][ T5220] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   85.620246][ T5220] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   85.620882][ T5220] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   85.622042][ T5220] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   85.675381][   T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   85.676375][   T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   85.676815][   T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   85.679073][   T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   85.680183][   T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   85.766031][ T6212] chnl_net:caif_netlink_parms(): no params data found
[   87.347101][   T54] Bluetooth: hci3: command tx timeout
[   87.663787][   T54] Bluetooth: hci4: command tx timeout
[   87.741438][   T54] Bluetooth: hci5: command tx timeout
[   89.421354][   T54] Bluetooth: hci3: command tx timeout
[   89.742189][   T54] Bluetooth: hci4: command tx timeout
[   89.821795][   T54] Bluetooth: hci5: command tx timeout
[   91.503888][   T54] Bluetooth: hci3: command tx timeout
[   91.821290][   T54] Bluetooth: hci4: command tx timeout
[   91.901381][   T54] Bluetooth: hci5: command tx timeout
[   93.581342][   T54] Bluetooth: hci3: command tx timeout
[   93.901269][   T54] Bluetooth: hci4: command tx timeout
[   93.981341][   T54] Bluetooth: hci5: command tx timeout
[  133.054883][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  133.055693][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  146.593573][ T5220] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  146.594363][ T5220] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  146.594765][ T5220] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  146.595413][ T5220] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  146.595816][ T5220] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  146.647076][   T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  146.647932][   T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  146.648306][   T54] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  146.649025][   T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  146.649722][   T54] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  146.713423][   T54] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  146.714258][   T54] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  146.714586][   T54] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  146.715289][   T54] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  146.715703][   T54] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  148.621599][ T5220] Bluetooth: hci6: command tx timeout
[  148.701423][ T5220] Bluetooth: hci7: command tx timeout
[  148.781445][ T5220] Bluetooth: hci8: command tx timeout
[  150.701397][ T5220] Bluetooth: hci6: command tx timeout
[  150.781227][ T5220] Bluetooth: hci7: command tx timeout
[  150.861319][ T5220] Bluetooth: hci8: command tx timeout
[  152.781347][ T5220] Bluetooth: hci6: command tx timeout
[  152.861276][ T5220] Bluetooth: hci7: command tx timeout
[  152.941352][ T5220] Bluetooth: hci8: command tx timeout
[  154.861397][ T5220] Bluetooth: hci6: command tx timeout
[  154.941347][ T5220] Bluetooth: hci7: command tx timeout
[  155.021306][ T5220] Bluetooth: hci8: command tx timeout
[  175.291103][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
[  175.291122][    C0] rcu: 	0-....: (10478 ticks this GP) idle=36fc/1/0x4000000000000000 softirq=15515/15833 fqs=5245
[  175.291429][    C0] rcu: 	         hardirqs   softirqs   csw/system
[  175.291440][    C0] rcu: 	 number:  1219094        854            0
[  175.291452][    C0] rcu: 	cputime:    33488      19005           44   ==> 52500(ms)
[  175.291464][    C0] rcu: 	(t=10501 jiffies g=9181 q=3280 ncpus=2)
[  175.291501][    C0] CPU: 0 UID: 0 PID: 6203 Comm: syz.2.143 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  175.291523][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  175.291532][    C0] RIP: 0010:lock_acquire+0x175/0x360
[  175.291589][    C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 9b d3 01 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e
[  175.291602][    C0] RSP: 0018:ffffc90000007558 EFLAGS: 00000206
[  175.291615][    C0] RAX: 24c5433c356c3c00 RBX: 0000000000000000 RCX: 24c5433c356c3c00
[  175.291625][    C0] RDX: 0000000000000000 RSI: ffffffff8db8655b RDI: ffffffff8be29f40
[  175.291634][    C0] RBP: ffffffff8172aae5 R08: 0000000000000000 R09: ffffffff8172aae5
[  175.291660][    C0] R10: ffffc90000007718 R11: ffffffff81ad0050 R12: 0000000000000002
[  175.291669][    C0] R13: ffffffff8e13f0e0 R14: 0000000000000000 R15: 0000000000000246
[  175.291678][    C0] FS:  00007f40525346c0(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
[  175.291688][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  175.291697][    C0] CR2: 00007f4052513d58 CR3: 0000000027282000 CR4: 00000000000006f0
[  175.291728][    C0] Call Trace:
[  175.291735][    C0]  <IRQ>
[  175.291746][    C0]  ? unwind_next_frame+0xa5/0x2390
[  175.291764][    C0]  ? __sanitizer_cov_trace_pc+0x5d/0x70
[  175.291784][    C0]  ? unwind_next_frame+0xa5/0x2390
[  175.291798][    C0]  unwind_next_frame+0xc2/0x2390
[  175.291811][    C0]  ? unwind_next_frame+0xa5/0x2390
[  175.291830][    C0]  ? unwind_next_frame+0xa5/0x2390
[  175.291845][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  175.291865][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  175.291883][    C0]  arch_stack_walk+0x11c/0x150
[  175.291904][    C0]  ? __sanitizer_cov_trace_pc+0x5d/0x70
[  175.291926][    C0]  stack_trace_save+0x9c/0xe0
[  175.291943][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  175.291971][    C0]  kasan_save_track+0x3e/0x80
[  175.291982][    C0]  ? kasan_save_track+0x3e/0x80
[  175.291992][    C0]  ? kasan_save_free_info+0x46/0x50
[  175.292007][    C0]  ? __kasan_slab_free+0x62/0x70
[  175.292019][    C0]  ? kmem_cache_free+0x18f/0x400
[  175.292030][    C0]  ? skb_release_data+0x62d/0x7c0
[  175.292044][    C0]  ? consume_skb+0x9e/0xf0
[  175.292055][    C0]  ? mac80211_hwsim_beacon_tx+0x3f0/0x860
[  175.292074][    C0]  ? __iterate_interfaces+0x2ab/0x590
[  175.292086][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  175.292099][    C0]  ? mac80211_hwsim_beacon+0xbb/0x1c0
[  175.292113][    C0]  ? __hrtimer_run_queues+0x52c/0xc60
[  175.292127][    C0]  ? hrtimer_run_softirq+0x187/0x2b0
[  175.292148][    C0]  ? handle_softirqs+0x286/0x870
[  175.292162][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  175.292175][    C0]  ? irq_exit_rcu+0x9/0x30
[  175.292187][    C0]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  175.292202][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  175.292214][    C0]  ? __sanitizer_cov_trace_pc+0x5d/0x70
[  175.292261][    C0]  ? skb_release_data+0x62d/0x7c0
[  175.292274][    C0]  kasan_save_free_info+0x46/0x50
[  175.292291][    C0]  __kasan_slab_free+0x62/0x70
[  175.292303][    C0]  kmem_cache_free+0x18f/0x400
[  175.292321][    C0]  skb_release_data+0x62d/0x7c0
[  175.292344][    C0]  consume_skb+0x9e/0xf0
[  175.292358][    C0]  mac80211_hwsim_beacon_tx+0x3f0/0x860
[  175.292378][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  175.292395][    C0]  __iterate_interfaces+0x2ab/0x590
[  175.292410][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  175.292428][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  175.292444][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  175.292461][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  175.292479][    C0]  mac80211_hwsim_beacon+0xbb/0x1c0
[  175.292495][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  175.292510][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  175.292581][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  175.292606][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  175.292625][    C0]  handle_softirqs+0x286/0x870
[  175.292643][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  175.292662][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  175.292680][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  175.292702][    C0]  __irq_exit_rcu+0xca/0x1f0
[  175.292717][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  175.292739][    C0]  irq_exit_rcu+0x9/0x30
[  175.292751][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  175.292767][    C0]  </IRQ>
[  175.292772][    C0]  <TASK>
[  175.292778][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  175.292791][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x5d/0x70
[  175.292809][    C0] Code: 18 16 00 00 83 fa 02 75 21 48 8b 91 20 16 00 00 48 8b 32 48 8d 7e 01 8b 89 1c 16 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 <e9> 4e 3a b1 09 cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90
[  175.292820][    C0] RSP: 0018:ffffc9000636f0d8 EFLAGS: 00000287
[  175.292831][    C0] RAX: ffffffff81a25575 RBX: 1ffff92000c6de7c RCX: 0000000000080000
[  175.292841][    C0] RDX: ffffc9000f4a1000 RSI: 00000000000027bd RDI: 00000000000027be
[  175.292850][    C0] RBP: ffffc9000636f260 R08: ffff888107791cc0 R09: 0000000000000003
[  175.292858][    C0] R10: 00000000ffffffff R11: 0000000000000002 R12: dffffc0000000000
[  175.292866][    C0] R13: 00000000ffffe9ab R14: ffffffff8e08c428 R15: ffffc9000636f270
[  175.292882][    C0]  ? _prb_read_valid+0x505/0xa90
[  175.292903][    C0]  _prb_read_valid+0x505/0xa90
[  175.292932][    C0]  ? __pfx__prb_read_valid+0x10/0x10
[  175.292960][    C0]  prb_read_valid+0x3c/0x60
[  175.292975][    C0]  printk_get_next_message+0x15c/0x7b0
[  175.292992][    C0]  ? irqentry_enter+0x3d/0x60
[  175.293009][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  175.293030][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  175.293048][    C0]  ? irqentry_exit+0x74/0x90
[  175.293064][    C0]  ? __pfx_printk_get_next_message+0x10/0x10
[  175.293108][    C0]  console_flush_all+0x4ca/0xc40
[  175.293125][    C0]  ? console_flush_all+0x861/0xc40
[  175.293149][    C0]  ? console_flush_all+0x13a/0xc40
[  175.293171][    C0]  ? __pfx_console_flush_all+0x10/0x10
[  175.293197][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  175.293219][    C0]  console_unlock+0xc4/0x270
[  175.293237][    C0]  ? __pfx_console_unlock+0x10/0x10
[  175.293256][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  175.293278][    C0]  vprintk_emit+0x5b7/0x7a0
[  175.293296][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[  175.293313][    C0]  ? perf_trace_run_bpf_submit+0xee/0x170
[  175.293329][    C0]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  175.293357][    C0]  _printk+0xcf/0x120
[  175.293379][    C0]  ? __pfx__printk+0x10/0x10
[  175.293404][    C0]  netlink_sendmsg+0x8c2/0xb30
[  175.293419][    C0]  ? irqentry_exit+0x74/0x90
[  175.293434][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  175.293454][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  175.293467][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  175.293481][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  175.293499][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  175.293513][    C0]  __sock_sendmsg+0x21c/0x270
[  175.293559][    C0]  ____sys_sendmsg+0x505/0x830
[  175.293581][    C0]  ? __pfx_____sys_sendmsg+0x10/0x10
[  175.293603][    C0]  ? import_iovec+0x74/0xa0
[  175.293620][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  175.293637][    C0]  ? __pfx____sys_sendmsg+0x10/0x10
[  175.293681][    C0]  ? __fget_files+0x2a/0x420
[  175.293696][    C0]  ? __fget_files+0x3a0/0x420
[  175.293718][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  175.293735][    C0]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  175.293770][    C0]  do_syscall_64+0xfa/0x3b0
[  175.293789][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.293800][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  175.293817][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.293829][    C0] RIP: 0033:0x7f405178e9a9
[  175.293842][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  175.293852][    C0] RSP: 002b:00007f4052534038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  175.293865][    C0] RAX: ffffffffffffffda RBX: 00007f40519b5fa0 RCX: 00007f405178e9a9
[  175.293874][    C0] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009
[  175.293882][    C0] RBP: 00007f4051810d69 R08: 0000000000000000 R09: 0000000000000000
[  175.293890][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  175.293896][    C0] R13: 0000000000000000 R14: 00007f40519b5fa0 R15: 00007ffeaf010b68
[  175.293918][    C0]  </TASK>
[  180.946016][ T6243] Bluetooth: hci2: command 0x0406 tx timeout
[  180.946085][ T6243] Bluetooth: hci0: command 0x0406 tx timeout
[  180.946115][ T6243] Bluetooth: hci1: command 0x0406 tx timeout
[  194.675609][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  194.676618][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  204.145242][   T18] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 13385 jiffies s: 2649 root: 0x1/.
[  204.145285][   T18] rcu: blocking rcu_node structures (internal RCU debug):
[  204.145298][   T18] Sending NMI from CPU 1 to CPUs 0:
[  204.145376][    C0] NMI backtrace for cpu 0
[  204.145388][    C0] CPU: 0 UID: 0 PID: 6203 Comm: syz.2.143 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  204.145403][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  204.145410][    C0] RIP: 0010:deref_stack_reg+0x63/0x230
[  204.145430][    C0] Code: 48 89 df e8 9f 7b b0 00 4c 8b 04 24 48 be 00 00 00 00 00 fc ff df 48 89 5c 24 10 49 8b 5f 08 4d 8d 77 10 4d 89 f5 49 c1 ed 03 <41> 80 7c 35 00 00 74 16 4c 89 f7 e8 6d 7b b0 00 4c 8b 04 24 48 be
[  204.145440][    C0] RSP: 0018:ffffc90000006ba0 EFLAGS: 00000a02
[  204.145451][    C0] RAX: fffffffffffffff0 RBX: ffffc90006368000 RCX: 0000000000000000
[  204.145459][    C0] RDX: ffffc90000006d08 RSI: dffffc0000000000 RDI: ffffc90000006cc8
[  204.145468][    C0] RBP: dffffc0000000000 R08: ffffc9000636f9d0 R09: 0000000000000000
[  204.145476][    C0] R10: ffffc90000006d18 R11: fffff52000000da5 R12: 1ffff92000000d9a
[  204.145484][    C0] R13: 1ffff92000000d9b R14: ffffc90000006cd8 R15: ffffc90000006cc8
[  204.145493][    C0] FS:  00007f40525346c0(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
[  204.145502][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  204.145510][    C0] CR2: 00007f4052513d58 CR3: 0000000027282000 CR4: 00000000000006f0
[  204.145539][    C0] Call Trace:
[  204.145546][    C0]  <IRQ>
[  204.145553][    C0]  unwind_next_frame+0x17c4/0x2390
[  204.145570][    C0]  ? unwind_next_frame+0xa5/0x2390
[  204.145584][    C0]  ? netlink_sendmsg+0x8c2/0xb30
[  204.145599][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  204.145654][    C0]  arch_stack_walk+0x11c/0x150
[  204.145672][    C0]  ? __sock_sendmsg+0x21c/0x270
[  204.145690][    C0]  stack_trace_save+0x9c/0xe0
[  204.145705][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  204.145722][    C0]  ? __irq_exit_rcu+0xd8/0x1f0
[  204.145735][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  204.145749][    C0]  kasan_save_track+0x3e/0x80
[  204.145759][    C0]  ? kasan_save_track+0x3e/0x80
[  204.145768][    C0]  ? kasan_save_free_info+0x46/0x50
[  204.145783][    C0]  ? __kasan_slab_free+0x62/0x70
[  204.145793][    C0]  ? kfree+0x18e/0x440
[  204.145802][    C0]  ? ieee80211_inform_bss+0xbd9/0x10a0
[  204.145816][    C0]  ? cfg80211_inform_single_bss_data+0xd05/0x1ac0
[  204.145831][    C0]  ? cfg80211_inform_bss_data+0x1fb/0x3b20
[  204.145845][    C0]  ? cfg80211_inform_bss_frame_data+0x3d7/0x730
[  204.145859][    C0]  ? ieee80211_bss_info_update+0x746/0x9e0
[  204.145872][    C0]  ? ieee80211_scan_rx+0x593/0xa20
[  204.145885][    C0]  ? ieee80211_rx_list+0x22fc/0x2d80
[  204.145899][    C0]  ? ieee80211_rx_napi+0x1a8/0x3d0
[  204.145913][    C0]  ? ieee80211_handle_queued_frames+0xe8/0x1f0
[  204.145926][    C0]  ? tasklet_action_common+0x36c/0x580
[  204.145940][    C0]  ? handle_softirqs+0x286/0x870
[  204.145951][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  204.145963][    C0]  ? irq_exit_rcu+0x9/0x30
[  204.145974][    C0]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  204.145988][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  204.146000][    C0]  ? vsnprintf+0xad4/0xf00
[  204.146011][    C0]  ? snprintf+0xda/0x120
[  204.146021][    C0]  ? info_print_prefix+0x1e1/0x310
[  204.146038][    C0]  ? record_print_text+0x154/0x430
[  204.146052][    C0]  ? printk_get_next_message+0x26d/0x7b0
[  204.146067][    C0]  ? console_flush_all+0x4ca/0xc40
[  204.146081][    C0]  ? console_unlock+0xc4/0x270
[  204.146094][    C0]  ? vprintk_emit+0x5b7/0x7a0
[  204.146107][    C0]  ? _printk+0xcf/0x120
[  204.146121][    C0]  ? netlink_sendmsg+0x8c2/0xb30
[  204.146144][    C0]  kasan_save_free_info+0x46/0x50
[  204.146159][    C0]  __kasan_slab_free+0x62/0x70
[  204.146170][    C0]  ? ieee80211_inform_bss+0xbd9/0x10a0
[  204.146183][    C0]  kfree+0x18e/0x440
[  204.146195][    C0]  ieee80211_inform_bss+0xbd9/0x10a0
[  204.146212][    C0]  ? __pfx_ieee80211_inform_bss+0x10/0x10
[  204.146225][    C0]  ? do_raw_spin_lock+0x121/0x290
[  204.146243][    C0]  ? trace_kmalloc+0x1f/0xd0
[  204.146260][    C0]  ? __pfx_ieee80211_inform_bss+0x10/0x10
[  204.146274][    C0]  cfg80211_inform_single_bss_data+0xd05/0x1ac0
[  204.146293][    C0]  ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10
[  204.146317][    C0]  ? __lock_acquire+0xab9/0xd20
[  204.146330][    C0]  ? cfg80211_inform_bss_data+0x1e8/0x3b20
[  204.146346][    C0]  cfg80211_inform_bss_data+0x1fb/0x3b20
[  204.146363][    C0]  ? ktime_get+0x3e/0x1f0
[  204.146378][    C0]  ? ktime_get+0x3e/0x1f0
[  204.146392][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  204.146408][    C0]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  204.146426][    C0]  ? do_raw_spin_unlock+0x4d/0x240
[  204.146442][    C0]  ? __pfx_cfg80211_inform_bss_data+0x10/0x10
[  204.146457][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  204.146470][    C0]  ? sched_clock+0x3f/0x60
[  204.146486][    C0]  ? sched_clock_cpu+0x74/0x430
[  204.146499][    C0]  ? lapic_next_event+0x11/0x20
[  204.146511][    C0]  ? clockevents_program_event+0x24d/0x360
[  204.146530][    C0]  ? __pfx_sched_clock_cpu+0x10/0x10
[  204.146547][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  204.146565][    C0]  ? __irq_exit_rcu+0xd8/0x1f0
[  204.146577][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  204.146598][    C0]  cfg80211_inform_bss_frame_data+0x3d7/0x730
[  204.146639][    C0]  ? ieee80211_bss_info_update+0x2dc/0x9e0
[  204.146657][    C0]  ieee80211_bss_info_update+0x746/0x9e0
[  204.146673][    C0]  ? __pfx_ieee80211_bss_info_update+0x10/0x10
[  204.146694][    C0]  ? ieee80211_get_channel_khz+0x15b/0x8a0
[  204.146709][    C0]  ieee80211_scan_rx+0x593/0xa20
[  204.146725][    C0]  ieee80211_rx_list+0x22fc/0x2d80
[  204.146746][    C0]  ? __pfx_ieee80211_rx_list+0x10/0x10
[  204.146766][    C0]  ? ieee80211_rx_napi+0xca/0x3d0
[  204.146780][    C0]  ? ieee80211_rx_napi+0xca/0x3d0
[  204.146799][    C0]  ? ieee80211_rx_napi+0xca/0x3d0
[  204.146813][    C0]  ieee80211_rx_napi+0x1a8/0x3d0
[  204.146829][    C0]  ? __pfx_ieee80211_rx_napi+0x10/0x10
[  204.146845][    C0]  ? skb_dequeue+0x10e/0x150
[  204.146863][    C0]  ieee80211_handle_queued_frames+0xe8/0x1f0
[  204.146879][    C0]  tasklet_action_common+0x36c/0x580
[  204.146896][    C0]  ? __pfx_tasklet_action_common+0x10/0x10
[  204.146912][    C0]  ? workqueue_softirq_action+0x87/0x150
[  204.146927][    C0]  ? workqueue_softirq_action+0xd4/0x150
[  204.146943][    C0]  handle_softirqs+0x286/0x870
[  204.146957][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  204.146972][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  204.146987][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  204.147004][    C0]  __irq_exit_rcu+0xca/0x1f0
[  204.147017][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  204.147033][    C0]  irq_exit_rcu+0x9/0x30
[  204.147044][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  204.147058][    C0]  </IRQ>
[  204.147062][    C0]  <TASK>
[  204.147067][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  204.147079][    C0] RIP: 0010:vsnprintf+0xad4/0xf00
[  204.147090][    C0] Code: 9a b8 f6 eb bf e8 1c 77 55 f6 49 ff c7 4d 89 fd eb 0d e8 0f 77 55 f6 4d 89 fd 4c 8b 74 24 08 48 89 e8 48 c1 e8 03 0f b6 04 18 <84> c0 75 3d 80 7d 00 00 0f 84 f8 02 00 00 e8 e9 76 55 f6 49 89 ef
[  204.147100][    C0] RSP: 0018:ffffc9000636ef10 EFLAGS: 00000a03
[  204.147110][    C0] RAX: 0000000000000005 RBX: dffffc0000000000 RCX: 0000000000080000
[  204.147118][    C0] RDX: ffffc9000f4a1000 RSI: 0000000000003838 RDI: 0000000000003839
[  204.147125][    C0] RBP: ffffffff8b8b8964 R08: ffffc9000636ee77 R09: 0000000000000000
[  204.147133][    C0] R10: ffffc9000636ee60 R11: fffff52000c6ddcf R12: ffffc9000636f000
[  204.147141][    C0] R13: ffffc9000636f0e5 R14: 0000000000000401 R15: 0000000000000734
[  204.147161][    C0]  snprintf+0xda/0x120
[  204.147172][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  204.147192][    C0]  ? __pfx_snprintf+0x10/0x10
[  204.147209][    C0]  info_print_prefix+0x1e1/0x310
[  204.147227][    C0]  ? __pfx_info_print_prefix+0x10/0x10
[  204.147248][    C0]  record_print_text+0x154/0x430
[  204.147270][    C0]  ? irqentry_exit+0x74/0x90
[  204.147285][    C0]  ? __pfx_record_print_text+0x10/0x10
[  204.147304][    C0]  ? printk_get_next_message+0x218/0x7b0
[  204.147321][    C0]  printk_get_next_message+0x26d/0x7b0
[  204.147336][    C0]  ? perf_trace_preemptirq_template+0x280/0x340
[  204.147355][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  204.147373][    C0]  ? __pfx_printk_get_next_message+0x10/0x10
[  204.147401][    C0]  console_flush_all+0x4ca/0xc40
[  204.147416][    C0]  ? console_flush_all+0x861/0xc40
[  204.147432][    C0]  ? console_flush_all+0x13a/0xc40
[  204.147449][    C0]  ? __pfx_console_flush_all+0x10/0x10
[  204.147469][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  204.147487][    C0]  console_unlock+0xc4/0x270
[  204.147501][    C0]  ? __pfx_console_unlock+0x10/0x10
[  204.147517][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  204.147535][    C0]  vprintk_emit+0x5b7/0x7a0
[  204.147550][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[  204.147564][    C0]  ? perf_trace_run_bpf_submit+0xee/0x170
[  204.147579][    C0]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  204.147598][    C0]  _printk+0xcf/0x120
[  204.147637][    C0]  ? __pfx__printk+0x10/0x10
[  204.147659][    C0]  netlink_sendmsg+0x8c2/0xb30
[  204.147671][    C0]  ? irqentry_exit+0x74/0x90
[  204.147685][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  204.147701][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  204.147712][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  204.147724][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  204.147736][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  204.147748][    C0]  __sock_sendmsg+0x21c/0x270
[  204.147765][    C0]  ____sys_sendmsg+0x505/0x830
[  204.147781][    C0]  ? __pfx_____sys_sendmsg+0x10/0x10
[  204.147797][    C0]  ? import_iovec+0x74/0xa0
[  204.147811][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  204.147825][    C0]  ? __pfx____sys_sendmsg+0x10/0x10
[  204.147851][    C0]  ? __fget_files+0x2a/0x420
[  204.147864][    C0]  ? __fget_files+0x3a0/0x420
[  204.147881][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  204.147895][    C0]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  204.147917][    C0]  do_syscall_64+0xfa/0x3b0
[  204.147933][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.147944][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  204.147958][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.147969][    C0] RIP: 0033:0x7f405178e9a9
[  204.147980][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  204.147990][    C0] RSP: 002b:00007f4052534038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  204.148001][    C0] RAX: ffffffffffffffda RBX: 00007f40519b5fa0 RCX: 00007f405178e9a9
[  204.148009][    C0] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009
[  204.148038][    C0] RBP: 00007f4051810d69 R08: 0000000000000000 R09: 0000000000000000
[  204.148045][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  204.148052][    C0] R13: 0000000000000000 R14: 00007f40519b5fa0 R15: 00007ffeaf010b68
[  204.148066][    C0]  </TASK>
[  207.699824][ T6252] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  207.700643][ T6252] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  207.701076][ T6252] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  207.703187][ T6252] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  207.705462][ T6252] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  207.771648][ T6243] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  207.773102][ T6243] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  207.773517][ T6243] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  207.774025][ T6243] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  207.774624][ T6243] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  207.852885][ T6257] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  207.853707][ T6257] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  207.854404][ T6257] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  207.854862][ T6257] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  207.855484][ T6257] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  211.343384][ T6261] Bluetooth: hci5: command 0x0406 tx timeout
[  211.343446][ T6261] Bluetooth: hci3: command 0x0406 tx timeout
[  211.343477][ T6261] Bluetooth: hci4: command 0x0406 tx timeout
[  233.581535][   T34] INFO: task rcu_tasks_trace:32 blocked for more than 143 seconds.
[  233.581568][   T34]       Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0
[  233.581578][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  233.581586][   T34] task:rcu_tasks_trace state:D stack:26640 pid:32    tgid:32    ppid:2      task_flags:0x208040 flags:0x00004000
[  233.581632][   T34] Call Trace:
[  233.581679][   T34]  <TASK>
[  233.581693][   T34]  __schedule+0x16f5/0x4d00
[  233.581730][   T34]  ? __lock_acquire+0xab9/0xd20
[  233.581750][   T34]  ? schedule+0x165/0x360
[  233.581770][   T34]  ? __pfx___schedule+0x10/0x10
[  233.581799][   T34]  ? schedule+0x91/0x360
[  233.581819][   T34]  schedule+0x165/0x360
[  233.581837][   T34]  schedule_preempt_disabled+0x13/0x30
[  233.581854][   T34]  __mutex_lock+0x724/0xe80
[  233.581875][   T34]  ? __mutex_lock+0x51b/0xe80
[  233.581897][   T34]  ? synchronize_rcu_expedited+0x3b9/0x730
[  233.581919][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  233.581948][   T34]  ? do_raw_spin_unlock+0x4d/0x240
[  233.581971][   T34]  synchronize_rcu_expedited+0x3b9/0x730
[  233.581991][   T34]  ? __pfx_synchronize_rcu_expedited+0x10/0x10
[  233.582025][   T34]  ? __pfx___might_resched+0x10/0x10
[  233.582057][   T34]  ? rcu_tasks_trace_pregp_step+0xe2a/0xe70
[  233.582100][   T34]  synchronize_rcu+0x11a/0x310
[  233.582135][   T34]  ? __pfx_synchronize_rcu+0x10/0x10
[  233.582152][   T34]  ? __pfx_rcu_tasks_trace_pregp_step+0x10/0x10
[  233.582170][   T34]  ? rcu_is_watching+0x15/0xb0
[  233.582185][   T34]  ? trace_contention_end+0x39/0x120
[  233.582204][   T34]  ? __mutex_lock+0x330/0xe80
[  233.582224][   T34]  rcu_tasks_wait_gp+0x490/0xac0
[  233.582251][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  233.582267][   T34]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  233.582284][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.582303][   T34]  ? __pfx_rcu_tasks_wait_gp+0x10/0x10
[  233.582357][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  233.582383][   T34]  rcu_tasks_one_gp+0xc19/0xdf0
[  233.582413][   T34]  ? rcu_tasks_one_gp+0xe9/0xdf0
[  233.582439][   T34]  rcu_tasks_kthread+0x195/0x1c0
[  233.582463][   T34]  kthread+0x711/0x8a0
[  233.582485][   T34]  ? __pfx_rcu_tasks_kthread+0x10/0x10
[  233.582503][   T34]  ? __pfx_kthread+0x10/0x10
[  233.582521][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  233.582535][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.582550][   T34]  ? __pfx_kthread+0x10/0x10
[  233.582567][   T34]  ret_from_fork+0x3fc/0x770
[  233.582583][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  233.582602][   T34]  ? __switch_to_asm+0x39/0x70
[  233.582618][   T34]  ? __switch_to_asm+0x33/0x70
[  233.582632][   T34]  ? __pfx_kthread+0x10/0x10
[  233.582682][   T34]  ret_from_fork_asm+0x1a/0x30
[  233.582710][   T34]  </TASK>
[  233.582784][   T34] INFO: task kworker/u10:4:2269 blocked for more than 143 seconds.
[  233.582796][   T34]       Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0
[  233.582806][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  233.582813][   T34] task:kworker/u10:4   state:D stack:21872 pid:2269  tgid:2269  ppid:2      task_flags:0x4208060 flags:0x00004000
[  233.582854][   T34] Workqueue: events_unbound linkwatch_event
[  233.582875][   T34] Call Trace:
[  233.582880][   T34]  <TASK>
[  233.582890][   T34]  __schedule+0x16f5/0x4d00
[  233.582920][   T34]  ? __lock_acquire+0xab9/0xd20
[  233.582938][   T34]  ? schedule+0x165/0x360
[  233.582959][   T34]  ? __pfx___schedule+0x10/0x10
[  233.582987][   T34]  ? schedule+0x91/0x360
[  233.583006][   T34]  schedule+0x165/0x360
[  233.583024][   T34]  schedule_preempt_disabled+0x13/0x30
[  233.583039][   T34]  __mutex_lock+0x724/0xe80
[  233.583060][   T34]  ? __mutex_lock+0x51b/0xe80
[  233.583081][   T34]  ? linkwatch_event+0xe/0x60
[  233.583108][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  233.583135][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  233.583150][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  233.583164][   T34]  linkwatch_event+0xe/0x60
[  233.583178][   T34]  process_scheduled_works+0xae1/0x17b0
[  233.583212][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  233.583238][   T34]  worker_thread+0x8a0/0xda0
[  233.583255][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  233.583277][   T34]  ? __kthread_parkme+0x7b/0x200
[  233.583298][   T34]  kthread+0x711/0x8a0
[  233.583317][   T34]  ? __pfx_worker_thread+0x10/0x10
[  233.583331][   T34]  ? __pfx_kthread+0x10/0x10
[  233.583350][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  233.583364][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.583381][   T34]  ? __pfx_kthread+0x10/0x10
[  233.583401][   T34]  ret_from_fork+0x3fc/0x770
[  233.583418][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  233.583438][   T34]  ? __switch_to_asm+0x39/0x70
[  233.583456][   T34]  ? __switch_to_asm+0x33/0x70
[  233.583472][   T34]  ? __pfx_kthread+0x10/0x10
[  233.583492][   T34]  ret_from_fork_asm+0x1a/0x30
[  233.583522][   T34]  </TASK>
[  233.583622][   T34] INFO: task kworker/1:5:5888 blocked for more than 143 seconds.
[  233.583633][   T34]       Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0
[  233.583678][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  233.583685][   T34] task:kworker/1:5     state:D stack:24152 pid:5888  tgid:5888  ppid:2      task_flags:0x4208060 flags:0x00004000
[  233.583727][   T34] Workqueue: events_power_efficient crda_timeout_work
[  233.583748][   T34] Call Trace:
[  233.583754][   T34]  <TASK>
[  233.583764][   T34]  __schedule+0x16f5/0x4d00
[  233.583794][   T34]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  233.583814][   T34]  ? schedule+0x165/0x360
[  233.583833][   T34]  ? __pfx___schedule+0x10/0x10
[  233.583862][   T34]  ? schedule+0x91/0x360
[  233.583881][   T34]  schedule+0x165/0x360
[  233.583899][   T34]  schedule_preempt_disabled+0x13/0x30
[  233.583915][   T34]  __mutex_lock+0x724/0xe80
[  233.583936][   T34]  ? __mutex_lock+0x51b/0xe80
[  233.583957][   T34]  ? crda_timeout_work+0x15/0x50
[  233.583973][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  233.583999][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  233.584014][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  233.584027][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  233.584043][   T34]  crda_timeout_work+0x15/0x50
[  233.584056][   T34]  process_scheduled_works+0xae1/0x17b0
[  233.584104][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  233.584132][   T34]  worker_thread+0x8a0/0xda0
[  233.584150][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  233.584172][   T34]  ? __kthread_parkme+0x7b/0x200
[  233.584196][   T34]  kthread+0x711/0x8a0
[  233.584216][   T34]  ? __pfx_worker_thread+0x10/0x10
[  233.584231][   T34]  ? __pfx_kthread+0x10/0x10
[  233.584250][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  233.584265][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.584280][   T34]  ? __pfx_kthread+0x10/0x10
[  233.584299][   T34]  ret_from_fork+0x3fc/0x770
[  233.584315][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  233.584334][   T34]  ? __switch_to_asm+0x39/0x70
[  233.584351][   T34]  ? __switch_to_asm+0x33/0x70
[  233.584366][   T34]  ? __pfx_kthread+0x10/0x10
[  233.584385][   T34]  ret_from_fork_asm+0x1a/0x30
[  233.584413][   T34]  </TASK>
[  233.584421][   T34] INFO: task syz.1.144:6200 blocked for more than 143 seconds.
[  233.584430][   T34]       Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0
[  233.584439][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  233.584445][   T34] task:syz.1.144       state:D stack:26920 pid:6200  tgid:6200  ppid:5825   task_flags:0x400040 flags:0x00004004
[  233.584484][   T34] Call Trace:
[  233.584489][   T34]  <TASK>
[  233.584498][   T34]  __schedule+0x16f5/0x4d00
[  233.584523][   T34]  ? __lock_acquire+0xab9/0xd20
[  233.584540][   T34]  ? schedule+0x165/0x360
[  233.584560][   T34]  ? __pfx___schedule+0x10/0x10
[  233.584588][   T34]  ? schedule+0x91/0x360
[  233.584606][   T34]  schedule+0x165/0x360
[  233.584623][   T34]  schedule_preempt_disabled+0x13/0x30
[  233.584638][   T34]  __mutex_lock+0x724/0xe80
[  233.584696][   T34]  ? __mutex_lock+0x51b/0xe80
[  233.584718][   T34]  ? perf_trace_destroy+0x2e/0x150
[  233.584735][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  233.584758][   T34]  ? security_perf_event_free+0x40/0x70
[  233.584777][   T34]  ? rcu_is_watching+0x15/0xb0
[  233.584796][   T34]  ? rcu_is_watching+0x15/0xb0
[  233.584810][   T34]  ? __pfx_tp_perf_event_destroy+0x10/0x10
[  233.584828][   T34]  perf_trace_destroy+0x2e/0x150
[  233.584843][   T34]  ? __pfx_tp_perf_event_destroy+0x10/0x10
[  233.584858][   T34]  __free_event+0x316/0x7b0
[  233.584874][   T34]  ? __pfx_perf_release+0x10/0x10
[  233.584891][   T34]  perf_event_release_kernel+0x45b/0x510
[  233.584907][   T34]  ? __pfx_perf_release+0x10/0x10
[  233.584925][   T34]  perf_release+0x38/0x50
[  233.584975][   T34]  __fput+0x44c/0xa70
[  233.585024][   T34]  task_work_run+0x1d4/0x260
[  233.585063][   T34]  ? __pfx_task_work_run+0x10/0x10
[  233.585087][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  233.585110][   T34]  exit_to_user_mode_loop+0xec/0x110
[  233.585125][   T34]  do_syscall_64+0x2bd/0x3b0
[  233.585146][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.585159][   T34]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  233.585177][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.585191][   T34] RIP: 0033:0x7f1c4158e9a9
[  233.585203][   T34] RSP: 002b:00007fffb1df6208 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  233.585218][   T34] RAX: 0000000000000000 RBX: 00007f1c417b7ba0 RCX: 00007f1c4158e9a9
[  233.585227][   T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  233.585236][   T34] RBP: 00007f1c417b7ba0 R08: 0000000000000074 R09: 00000006b1df64ff
[  233.585245][   T34] R10: 00007f1c417b7ac0 R11: 0000000000000246 R12: 0000000000011363
[  233.585254][   T34] R13: 00007fffb1df6300 R14: ffffffffffffffff R15: 00007fffb1df6320
[  233.585277][   T34]  </TASK>
[  233.585284][   T34] INFO: task syz.1.144:6201 blocked for more than 143 seconds.
[  233.585293][   T34]       Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0
[  233.585301][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  233.585308][   T34] task:syz.1.144       state:D stack:23352 pid:6201  tgid:6200  ppid:5825   task_flags:0x400140 flags:0x00004006
[  233.585344][   T34] Call Trace:
[  233.585350][   T34]  <TASK>
[  233.585359][   T34]  __schedule+0x16f5/0x4d00
[  233.585386][   T34]  ? do_raw_spin_lock+0x121/0x290
[  233.585405][   T34]  ? schedule+0x165/0x360
[  233.585421][   T34]  ? __lock_acquire+0xab9/0xd20
[  233.585435][   T34]  ? __pfx___schedule+0x10/0x10
[  233.585464][   T34]  ? schedule+0x91/0x360
[  233.585487][   T34]  schedule+0x165/0x360
[  233.585504][   T34]  synchronize_rcu_expedited+0x583/0x730
[  233.585522][   T34]  ? irqentry_enter+0x3d/0x60
[  233.585540][   T34]  ? __pfx_synchronize_rcu_expedited+0x10/0x10
[  233.585570][   T34]  ? irqentry_exit+0x74/0x90
[  233.585586][   T34]  ? __pfx_wait_rcu_exp_gp+0x10/0x10
[  233.585604][   T34]  ? __pfx___might_resched+0x10/0x10
[  233.585620][   T34]  ? __pfx_autoremove_wake_function+0x10/0x10
[  233.585683][   T34]  synchronize_rcu+0x11a/0x310
[  233.585701][   T34]  ? __pfx_synchronize_rcu+0x10/0x10
[  233.585715][   T34]  ? bpf_prog_put+0xdc/0x270
[  233.585744][   T34]  bpf_dispatcher_change_prog+0xa51/0xc90
[  233.585769][   T34]  ? __pfx_bpf_dispatcher_change_prog+0x10/0x10
[  233.585788][   T34]  ? perf_trace_preemptirq_template+0x280/0x340
[  233.585809][   T34]  ? irqentry_enter+0x3d/0x60
[  233.585826][   T34]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  233.585846][   T34]  ? rcu_is_watching+0x15/0xb0
[  233.585861][   T34]  ? trace_bpf_test_finish+0x7a/0x1d0
[  233.585881][   T34]  ? irqentry_exit+0x74/0x90
[  233.585896][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.585928][   T34]  bpf_prog_test_run_xdp+0x84a/0x1000
[  233.585975][   T34]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  233.585993][   T34]  ? __fget_files+0x2a/0x420
[  233.586014][   T34]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  233.586029][   T34]  bpf_prog_test_run+0x2c7/0x340
[  233.586048][   T34]  __sys_bpf+0x581/0x870
[  233.586063][   T34]  ? __pfx___sys_bpf+0x10/0x10
[  233.586097][   T34]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  233.586127][   T34]  __x64_sys_bpf+0x7c/0x90
[  233.586147][   T34]  do_syscall_64+0xfa/0x3b0
[  233.586167][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.586180][   T34]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  233.586198][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.586211][   T34] RIP: 0033:0x7f1c4158e9a9
[  233.586223][   T34] RSP: 002b:00007f1c42394038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  233.586238][   T34] RAX: ffffffffffffffda RBX: 00007f1c417b5fa0 RCX: 00007f1c4158e9a9
[  233.586248][   T34] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  233.586257][   T34] RBP: 00007f1c41610d69 R08: 0000000000000000 R09: 0000000000000000
[  233.586266][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  233.586275][   T34] R13: 0000000000000000 R14: 00007f1c417b5fa0 R15: 00007fffb1df60a8
[  233.586299][   T34]  </TASK>
[  233.586307][   T34] INFO: task syz.2.143:6202 blocked for more than 143 seconds.
[  233.586316][   T34]       Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0
[  233.586325][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  233.586332][   T34] task:syz.2.143       state:D stack:24976 pid:6202  tgid:6202  ppid:5832   task_flags:0x400040 flags:0x00004004
[  233.586402][   T34] Call Trace:
[  233.586408][   T34]  <TASK>
[  233.586418][   T34]  __schedule+0x16f5/0x4d00
[  233.586445][   T34]  ? __lock_acquire+0xab9/0xd20
[  233.586462][   T34]  ? schedule+0x165/0x360
[  233.586481][   T34]  ? __pfx___schedule+0x10/0x10
[  233.586511][   T34]  ? schedule+0x91/0x360
[  233.586529][   T34]  schedule+0x165/0x360
[  233.586547][   T34]  schedule_preempt_disabled+0x13/0x30
[  233.586563][   T34]  __mutex_lock+0x724/0xe80
[  233.586582][   T34]  ? __mutex_lock+0x51b/0xe80
[  233.586604][   T34]  ? perf_trace_destroy+0x2e/0x150
[  233.586623][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  233.586678][   T34]  ? security_perf_event_free+0x40/0x70
[  233.586699][   T34]  ? rcu_is_watching+0x15/0xb0
[  233.586717][   T34]  ? rcu_is_watching+0x15/0xb0
[  233.586733][   T34]  ? __pfx_tp_perf_event_destroy+0x10/0x10
[  233.586751][   T34]  perf_trace_destroy+0x2e/0x150
[  233.586768][   T34]  ? __pfx_tp_perf_event_destroy+0x10/0x10
[  233.586783][   T34]  __free_event+0x316/0x7b0
[  233.586799][   T34]  ? __pfx_perf_release+0x10/0x10
[  233.586817][   T34]  perf_event_release_kernel+0x45b/0x510
[  233.586833][   T34]  ? __pfx_perf_release+0x10/0x10
[  233.586851][   T34]  perf_release+0x38/0x50
[  233.586868][   T34]  __fput+0x44c/0xa70
[  233.586896][   T34]  task_work_run+0x1d4/0x260
[  233.586920][   T34]  ? __pfx_task_work_run+0x10/0x10
[  233.586945][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  233.586963][   T34]  exit_to_user_mode_loop+0xec/0x110
[  233.586979][   T34]  do_syscall_64+0x2bd/0x3b0
[  233.586997][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.587013][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.587027][   T34]  ? exc_page_fault+0x9f/0xf0
[  233.587045][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.587059][   T34] RIP: 0033:0x7f405178e9a9
[  233.587071][   T34] RSP: 002b:00007ffeaf010cc8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  233.587086][   T34] RAX: 0000000000000000 RBX: 00007f40519b7ba0 RCX: 00007f405178e9a9
[  233.587118][   T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  233.587128][   T34] RBP: 00007f40519b7ba0 R08: 00000000000001e4 R09: 0000001aaf010fbf
[  233.587137][   T34] R10: 00007f40519b7ac0 R11: 0000000000000246 R12: 0000000000011383
[  233.587147][   T34] R13: 00007f40519b6080 R14: ffffffffffffffff R15: 00007ffeaf010de0
[  233.587171][   T34]  </TASK>
[  233.587178][   T34] INFO: task syz.0.145:6204 blocked for more than 143 seconds.
[  233.587189][   T34]       Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0
[  233.587197][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  233.587204][   T34] task:syz.0.145       state:D stack:26680 pid:6204  tgid:6204  ppid:5834   task_flags:0x400040 flags:0x00004004
[  233.587246][   T34] Call Trace:
[  233.587252][   T34]  <TASK>
[  233.587262][   T34]  __schedule+0x16f5/0x4d00
[  233.587283][   T34]  ? is_bpf_text_address+0x26/0x2b0
[  233.587304][   T34]  ? is_bpf_text_address+0x292/0x2b0
[  233.587318][   T34]  ? is_bpf_text_address+0x26/0x2b0
[  233.587334][   T34]  ? schedule+0x165/0x360
[  233.587352][   T34]  ? __lock_acquire+0xab9/0xd20
[  233.587368][   T34]  ? __pfx___schedule+0x10/0x10
[  233.587399][   T34]  ? schedule+0x91/0x360
[  233.587419][   T34]  schedule+0x165/0x360
[  233.587437][   T34]  schedule_timeout+0x9a/0x270
[  233.587453][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  233.587479][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  233.587495][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.587516][   T34]  __wait_for_common+0x3da/0x710
[  233.587549][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  233.587564][   T34]  ? __pfx___wait_for_common+0x10/0x10
[  233.587585][   T34]  ? __raw_spin_lock_init+0x45/0x100
[  233.587606][   T34]  ? __init_swait_queue_head+0xa9/0x150
[  233.587629][   T34]  wait_for_completion_state+0x1c/0x40
[  233.587648][   T34]  __wait_rcu_gp+0x24c/0x280
[  233.587702][   T34]  synchronize_rcu_tasks_generic+0x132/0x220
[  233.587722][   T34]  ? __pfx_synchronize_rcu_tasks_generic+0x10/0x10
[  233.587739][   T34]  ? rcu_read_lock_any_held+0xb3/0x120
[  233.587754][   T34]  ? __pfx_call_rcu_tasks_trace+0x10/0x10
[  233.587774][   T34]  ? __pfx_wakeme_after_rcu+0x10/0x10
[  233.587811][   T34]  perf_trace_event_unreg+0xbe/0x1b0
[  233.587829][   T34]  perf_trace_destroy+0xa4/0x150
[  233.587846][   T34]  ? __pfx_tp_perf_event_destroy+0x10/0x10
[  233.587865][   T34]  __free_event+0x316/0x7b0
[  233.587882][   T34]  ? __pfx_perf_release+0x10/0x10
[  233.587901][   T34]  perf_event_release_kernel+0x45b/0x510
[  233.587917][   T34]  ? __pfx_perf_release+0x10/0x10
[  233.587936][   T34]  perf_release+0x38/0x50
[  233.587954][   T34]  __fput+0x44c/0xa70
[  233.587983][   T34]  task_work_run+0x1d4/0x260
[  233.588006][   T34]  ? __pfx_task_work_run+0x10/0x10
[  233.588031][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  233.588050][   T34]  exit_to_user_mode_loop+0xec/0x110
[  233.588064][   T34]  do_syscall_64+0x2bd/0x3b0
[  233.588083][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.588109][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.588123][   T34]  ? exc_page_fault+0x9f/0xf0
[  233.588142][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.588156][   T34] RIP: 0033:0x7f32eb18e9a9
[  233.588169][   T34] RSP: 002b:00007ffd0e04e468 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  233.588185][   T34] RAX: 0000000000000000 RBX: 0000000000011051 RCX: 00007f32eb18e9a9
[  233.588195][   T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  233.588203][   T34] RBP: 00007f32eb3b7ba0 R08: 0000000000000001 R09: 000000060e04e75f
[  233.588214][   T34] R10: 00007f32eb000000 R11: 0000000000000246 R12: 00007f32eb3b5fac
[  233.588223][   T34] R13: 00007f32eb3b5fa0 R14: ffffffffffffffff R15: 00007ffd0e04e580
[  233.588249][   T34]  </TASK>
[  233.588256][   T34] INFO: task syz-executor:6212 blocked for more than 143 seconds.
[  233.588266][   T34]       Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0
[  233.588275][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  233.588283][   T34] task:syz-executor    state:D stack:22760 pid:6212  tgid:6212  ppid:1      task_flags:0x400140 flags:0x00004004
[  233.588321][   T34] Call Trace:
[  233.588327][   T34]  <TASK>
[  233.588338][   T34]  __schedule+0x16f5/0x4d00
[  233.588367][   T34]  ? do_raw_spin_lock+0x121/0x290
[  233.588389][   T34]  ? schedule+0x165/0x360
[  233.588406][   T34]  ? __lock_acquire+0xab9/0xd20
[  233.588421][   T34]  ? __pfx___schedule+0x10/0x10
[  233.588453][   T34]  ? schedule+0x91/0x360
[  233.588473][   T34]  schedule+0x165/0x360
[  233.588491][   T34]  synchronize_rcu_expedited+0x5f5/0x730
[  233.588514][   T34]  ? __pfx_synchronize_rcu_expedited+0x10/0x10
[  233.588533][   T34]  ? __pfx_autoremove_wake_function+0x10/0x10
[  233.588566][   T34]  ? __pfx___might_resched+0x10/0x10
[  233.588582][   T34]  ? net_shaper_set_real_num_tx_queues+0x10e/0x450
[  233.588617][   T34]  netif_set_real_num_tx_queues+0x644/0xac0
[  233.588679][   T34]  veth_newlink+0x67b/0xa50
[  233.588704][   T34]  ? __pfx_veth_newlink+0x10/0x10
[  233.588720][   T34]  ? alloc_netdev_mqs+0xc9e/0x11e0
[  233.588739][   T34]  ? rtnl_newlink_create+0x25c/0xb00
[  233.588754][   T34]  ? rtnl_newlink+0x16d6/0x1c70
[  233.588766][   T34]  ? rtnetlink_rcv_msg+0x7cf/0xb70
[  233.588786][   T34]  ? netlink_unicast+0x75c/0x8e0
[  233.588806][   T34]  ? netlink_sendmsg+0x805/0xb30
[  233.588819][   T34]  ? __sock_sendmsg+0x21c/0x270
[  233.588840][   T34]  ? do_syscall_64+0xfa/0x3b0
[  233.588856][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.588919][   T34]  ? validate_linkmsg+0x765/0x950
[  233.588947][   T34]  ? __pfx_veth_newlink+0x10/0x10
[  233.588966][   T34]  rtnl_newlink_create+0x310/0xb00
[  233.588986][   T34]  ? __mutex_lock+0x51b/0xe80
[  233.589008][   T34]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  233.589023][   T34]  ? rtnl_newlink+0x8db/0x1c70
[  233.589038][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  233.589065][   T34]  ? ns_capable+0x8a/0xf0
[  233.589086][   T34]  rtnl_newlink+0x16d6/0x1c70
[  233.589122][   T34]  ? __pfx_rtnl_newlink+0x10/0x10
[  233.589143][   T34]  ? __lock_acquire+0xab9/0xd20
[  233.589215][   T34]  ? __lock_acquire+0xab9/0xd20
[  233.589251][   T34]  ? __pfx_rtnl_newlink+0x10/0x10
[  233.589264][   T34]  rtnetlink_rcv_msg+0x7cf/0xb70
[  233.589289][   T34]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  233.589308][   T34]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  233.589342][   T34]  netlink_rcv_skb+0x208/0x470
[  233.589360][   T34]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  233.589382][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  233.589408][   T34]  ? netlink_deliver_tap+0x2e/0x1b0
[  233.589423][   T34]  ? netlink_deliver_tap+0x2e/0x1b0
[  233.589442][   T34]  netlink_unicast+0x75c/0x8e0
[  233.589473][   T34]  netlink_sendmsg+0x805/0xb30
[  233.589496][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  233.589514][   T34]  ? aa_sock_msg_perm+0x94/0x160
[  233.589537][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  233.589556][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  233.589572][   T34]  __sock_sendmsg+0x21c/0x270
[  233.589595][   T34]  __sys_sendto+0x3bd/0x520
[  233.589613][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  233.589671][   T34]  ? blkcg_maybe_throttle_current+0x1ab/0xb40
[  233.589702][   T34]  ? do_syscall_64+0xb7/0x3b0
[  233.589719][   T34]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  233.589743][   T34]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  233.589764][   T34]  ? rcu_is_watching+0x15/0xb0
[  233.589786][   T34]  __x64_sys_sendto+0xde/0x100
[  233.589804][   T34]  do_syscall_64+0xfa/0x3b0
[  233.589822][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.589839][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.589853][   T34]  ? exc_page_fault+0x9f/0xf0
[  233.589872][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.589886][   T34] RIP: 0033:0x7f2f26d9083c
[  233.589898][   T34] RSP: 002b:00007ffdf6ab9d10 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  233.589914][   T34] RAX: ffffffffffffffda RBX: 00007f2f27ae4620 RCX: 00007f2f26d9083c
[  233.589925][   T34] RDX: 000000000000002c RSI: 00007f2f27ae4670 RDI: 0000000000000003
[  233.589934][   T34] RBP: 0000000000000000 R08: 00007ffdf6ab9d64 R09: 000000000000000c
[  233.589944][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  233.589952][   T34] R13: 0000000000000000 R14: 00007f2f27ae4670 R15: 0000000000000000
[  233.589975][   T34]  </TASK>
[  233.589985][   T34] INFO: task syz-executor:6216 blocked for more than 143 seconds.
[  233.589995][   T34]       Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0
[  233.590003][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  233.590010][   T34] task:syz-executor    state:D stack:24008 pid:6216  tgid:6216  ppid:1      task_flags:0x400140 flags:0x00004006
[  233.590049][   T34] Call Trace:
[  233.590067][   T34]  <TASK>
[  233.590077][   T34]  __schedule+0x16f5/0x4d00
[  233.590119][   T34]  ? __lock_acquire+0xab9/0xd20
[  233.590137][   T34]  ? schedule+0x165/0x360
[  233.590158][   T34]  ? __pfx___schedule+0x10/0x10
[  233.590190][   T34]  ? schedule+0x91/0x360
[  233.590211][   T34]  schedule+0x165/0x360
[  233.590231][   T34]  schedule_preempt_disabled+0x13/0x30
[  233.590247][   T34]  __mutex_lock+0x724/0xe80
[  233.590267][   T34]  ? __mutex_lock+0x51b/0xe80
[  233.590291][   T34]  ? ip_tunnel_init_net+0x2ab/0x800
[  233.590315][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  233.590340][   T34]  ? net_generic+0x1e/0x240
[  233.590375][   T34]  ? net_generic+0x1e/0x240
[  233.590399][   T34]  ip_tunnel_init_net+0x2ab/0x800
[  233.590424][   T34]  ? __pfx_ip_tunnel_init_net+0x10/0x10
[  233.590458][   T34]  vti_init_net+0x2f/0x100
[  233.590474][   T34]  ops_init+0x35c/0x5c0
[  233.590499][   T34]  setup_net+0x219/0x4b0
[  233.590516][   T34]  ? __pfx_setup_net+0x10/0x10
[  233.590532][   T34]  ? copy_net_ns+0x304/0x4d0
[  233.590553][   T34]  ? down_read_killable+0x1d1/0x350
[  233.590577][   T34]  copy_net_ns+0x31b/0x4d0
[  233.590602][   T34]  create_new_namespaces+0x3f3/0x720
[  233.590624][   T34]  ? security_capable+0x7e/0x2e0
[  233.590650][   T34]  unshare_nsproxy_namespaces+0x11c/0x170
[  233.590707][   T34]  ksys_unshare+0x4c8/0x8c0
[  233.590734][   T34]  ? __pfx_ksys_unshare+0x10/0x10
[  233.590765][   T34]  __x64_sys_unshare+0x38/0x50
[  233.590784][   T34]  do_syscall_64+0xfa/0x3b0
[  233.590802][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.590821][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.590835][   T34]  ? exc_page_fault+0x9f/0xf0
[  233.590855][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.590870][   T34] RIP: 0033:0x7f6bd23901a7
[  233.590883][   T34] RSP: 002b:00007ffc07f1aea8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
[  233.590899][   T34] RAX: ffffffffffffffda RBX: 00007f6bd25b5f40 RCX: 00007f6bd23901a7
[  233.590910][   T34] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  233.590920][   T34] RBP: 00007f6bd25b6738 R08: 0000000000000000 R09: 0000000000000000
[  233.590929][   T34] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008
[  233.590938][   T34] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  233.590962][   T34]  </TASK>
[  233.590970][   T34] INFO: task syz-executor:6219 blocked for more than 143 seconds.
[  233.590981][   T34]       Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0
[  233.590990][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  233.590997][   T34] task:syz-executor    state:D stack:24008 pid:6219  tgid:6219  ppid:1      task_flags:0x400140 flags:0x00004006
[  233.591037][   T34] Call Trace:
[  233.591043][   T34]  <TASK>
[  233.591053][   T34]  __schedule+0x16f5/0x4d00
[  233.591076][   T34]  ? is_bpf_text_address+0x26/0x2b0
[  233.601342][   T34]  ? __lock_acquire+0xab9/0xd20
[  233.601373][   T34]  ? schedule+0x165/0x360
[  233.601397][   T34]  ? __pfx___schedule+0x10/0x10
[  233.601425][   T34]  ? schedule+0x91/0x360
[  233.601458][   T34]  schedule+0x165/0x360
[  233.601476][   T34]  schedule_preempt_disabled+0x13/0x30
[  233.601493][   T34]  __mutex_lock+0x724/0xe80
[  233.601513][   T34]  ? __mutex_lock+0x51b/0xe80
[  233.601535][   T34]  ? ip_tunnel_init_net+0x2ab/0x800
[  233.601575][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  233.601600][   T34]  ? net_generic+0x1e/0x240
[  233.601616][   T34]  ? net_generic+0x1e/0x240
[  233.601638][   T34]  ip_tunnel_init_net+0x2ab/0x800
[  233.601663][   T34]  ? __pfx_ip_tunnel_init_net+0x10/0x10
[  233.601730][   T34]  ops_init+0x35c/0x5c0
[  233.601755][   T34]  setup_net+0x219/0x4b0
[  233.601771][   T34]  ? __pfx_setup_net+0x10/0x10
[  233.601786][   T34]  ? copy_net_ns+0x304/0x4d0
[  233.601806][   T34]  ? down_read_killable+0x1d1/0x350
[  233.601829][   T34]  copy_net_ns+0x31b/0x4d0
[  233.601853][   T34]  create_new_namespaces+0x3f3/0x720
[  233.601875][   T34]  ? security_capable+0x7e/0x2e0
[  233.601900][   T34]  unshare_nsproxy_namespaces+0x11c/0x170
[  233.601919][   T34]  ksys_unshare+0x4c8/0x8c0
[  233.601945][   T34]  ? __pfx_ksys_unshare+0x10/0x10
[  233.601964][   T34]  ? rcu_is_watching+0x15/0xb0
[  233.601990][   T34]  __x64_sys_unshare+0x38/0x50
[  233.602008][   T34]  do_syscall_64+0xfa/0x3b0
[  233.602027][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.602046][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.602062][   T34]  ? exc_page_fault+0x9f/0xf0
[  233.602081][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.602105][   T34] RIP: 0033:0x7fa76d3901a7
[  233.602121][   T34] RSP: 002b:00007ffc849a1de8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
[  233.602139][   T34] RAX: ffffffffffffffda RBX: 00007fa76d5b5f40 RCX: 00007fa76d3901a7
[  233.602150][   T34] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  233.602159][   T34] RBP: 00007fa76d5b6738 R08: 0000000000000000 R09: 0000000000000000
[  233.602168][   T34] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008
[  233.602176][   T34] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  233.602198][   T34]  </TASK>
[  233.602206][   T34] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  233.602233][   T34] 
[  233.602233][   T34] Showing all locks held in the system:
[  233.602245][   T34] 3 locks held by kworker/u8:0/12:
[  233.602255][   T34]  #0: ffff888107387148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  233.602325][   T34]  #1: ffffc900000f7bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  233.602363][   T34]  #2: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  233.602405][   T34] 2 locks held by rcu_tasks_trace/32:
[  233.602413][   T34]  #0: ffffffff8e13fe10 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{4:4}, at: rcu_tasks_one_gp+0xaf9/0xdf0
[  233.602457][   T34]  #1: ffffffff8e144bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  233.602497][   T34] 1 lock held by khungtaskd/34:
[  233.602505][   T34]  #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  233.602549][   T34] 5 locks held by kworker/u11:0/54:
[  233.602557][   T34]  #0: ffff888109eb0948 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  233.602593][   T34]  #1: ffffc900007cfbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  233.602630][   T34]  #2: ffff888028b3cdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  233.602703][   T34]  #3: ffff888028b3c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  233.602744][   T34]  #4: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  233.602796][   T34] 3 locks held by kworker/1:3/1844:
[  233.602805][   T34]  #0: ffff88801a481d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  233.602842][   T34]  #1: ffffc900096a7bc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  233.602880][   T34]  #2: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf00
[  233.602916][   T34] 3 locks held by kworker/u10:4/2269:
[  233.602925][   T34]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  233.602962][   T34]  #1: ffffc9000a7a7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  233.603012][   T34]  #2: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  233.603071][   T34] 6 locks held by kworker/u11:1/5220:
[  233.603080][   T34]  #0: ffff8880292ed148 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  233.603126][   T34]  #1: ffffc9000613fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  233.603164][   T34]  #2: ffff8881081a0dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  233.603201][   T34]  #3: ffff8881081a00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  233.603244][   T34]  #4: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  233.603279][   T34]  #5: ffff88810a420338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  233.603325][   T34] 2 locks held by getty/5655:
[  233.603335][   T34]  #0: ffff8880208800a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  233.603373][   T34]  #1: ffffc900029032f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  233.603415][   T34] 5 locks held by kworker/u11:2/5828:
[  233.603423][   T34]  #0: ffff88811ce3e148 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  233.603462][   T34]  #1: ffffc900037ffbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  233.603500][   T34]  #2: ffff88811dab8dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  233.603539][   T34]  #3: ffff88811dab80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  233.603580][   T34]  #4: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  233.603623][   T34] 3 locks held by kworker/1:5/5888:
[  233.603632][   T34]  #0: ffff88801a481d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  233.603704][   T34]  #1: ffffc900043dfbc0 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  233.603742][   T34]  #2: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: crda_timeout_work+0x15/0x50
[  233.603781][   T34] 1 lock held by syz.1.144/6200:
[  233.603790][   T34]  #0: ffffffff8e1a2ca8 (event_mutex){+.+.}-{4:4}, at: perf_trace_destroy+0x2e/0x150
[  233.603826][   T34] 2 locks held by syz.1.144/6201:
[  233.603834][   T34]  #0: ffffffff8f520048 (bpf_dispatcher_xdp.mutex){+.+.}-{4:4}, at: bpf_dispatcher_change_prog+0x9c/0xc90
[  233.603871][   T34]  #1: ffffffff8e144bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  233.603909][   T34] 1 lock held by syz.2.143/6202:
[  233.603916][   T34]  #0: ffffffff8e1a2ca8 (event_mutex){+.+.}-{4:4}, at: perf_trace_destroy+0x2e/0x150
[  233.603950][   T34] 3 locks held by syz.2.143/6203:
[  233.603957][   T34] 1 lock held by syz.0.145/6204:
[  233.603965][   T34]  #0: ffffffff8e1a2ca8 (event_mutex){+.+.}-{4:4}, at: perf_trace_destroy+0x2e/0x150
[  233.603998][   T34] 2 locks held by syz-executor/6212:
[  233.604006][   T34]  #0: ffffffff8eca43a0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  233.604046][   T34]  #1: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  233.604080][   T34] 2 locks held by syz-executor/6216:
[  233.604095][   T34]  #0: ffffffff8f5101d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  233.604138][   T34]  #1: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800
[  233.604178][   T34] 2 locks held by syz-executor/6219:
[  233.604186][   T34]  #0: ffffffff8f5101d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  233.604229][   T34]  #1: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800
[  233.604269][   T34] 1 lock held by dhcpcd/6222:
[  233.604278][   T34]  #0: ffff888127f64258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  233.604321][   T34] 1 lock held by dhcpcd/6223:
[  233.604329][   T34]  #0: ffff8880274d2258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  233.604367][   T34] 1 lock held by dhcpcd/6224:
[  233.604376][   T34]  #0: ffff88811f14e258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  233.604417][   T34] 1 lock held by dhcpcd/6225:
[  233.604425][   T34]  #0: ffff88811f31a258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  233.604464][   T34] 1 lock held by dhcpcd/6226:
[  233.604472][   T34]  #0: ffff88811f4fc258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  233.604512][   T34] 1 lock held by dhcpcd/6227:
[  233.604521][   T34]  #0: ffff888112a5e258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  233.604561][   T34] 1 lock held by syz-executor/6232:
[  233.604569][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  233.604612][   T34] 1 lock held by syz-executor/6235:
[  233.604620][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  233.604695][   T34] 1 lock held by syz-executor/6240:
[  233.604703][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  233.604738][   T34] 5 locks held by kworker/u11:3/6242:
[  233.604746][   T34]  #0: ffff888107382148 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  233.604783][   T34]  #1: ffffc90006f17bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  233.604817][   T34]  #2: ffff888109c20dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  233.604853][   T34]  #3: ffff888109c200b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  233.604893][   T34]  #4: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  233.604929][   T34] 4 locks held by kworker/u11:4/6243:
[  233.604938][   T34]  #0: ffff888114ede148 ((wq_completion)hci10#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  233.604984][   T34]  #1: ffffc90006ea7bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  233.605051][   T34]  #2: ffff8880665380b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0
[  233.605099][   T34]  #3: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0
[  233.605144][   T34] 1 lock held by syz-executor/6248:
[  233.605153][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  233.605194][   T34] 1 lock held by syz-executor/6250:
[  233.605202][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  233.605247][   T34] 4 locks held by kworker/u11:5/6252:
[  233.605255][   T34]  #0: ffff88813152e948 ((wq_completion)hci9#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  233.605300][   T34]  #1: ffffc90006f77bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  233.605340][   T34]  #2: ffff88812827c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0
[  233.605379][   T34]  #3: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0
[  233.605422][   T34] 5 locks held by kworker/u11:6/6255:
[  233.605431][   T34]  #0: ffff888106f9c948 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  233.605471][   T34]  #1: ffffc90006f97bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  233.605512][   T34]  #2: ffff8881106c0dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  233.605551][   T34]  #3: ffff8881106c00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  233.605591][   T34]  #4: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  233.605625][   T34] 1 lock held by syz-executor/6256:
[  233.605633][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  233.605709][   T34] 4 locks held by kworker/u11:7/6257:
[  233.605717][   T34]  #0: ffff8881298c7148 ((wq_completion)hci11#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  233.605758][   T34]  #1: ffffc90006f87bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  233.605794][   T34]  #2: ffff8880671840b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0
[  233.605832][   T34]  #3: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0
[  233.605870][   T34] 5 locks held by kworker/u11:8/6259:
[  233.605878][   T34]  #0: ffff88811e260948 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  233.605914][   T34]  #1: ffffc90006fd7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  233.605950][   T34]  #2: ffff88811e864dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  233.605986][   T34]  #3: ffff88811e8640b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  233.606025][   T34]  #4: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  233.606061][   T34] 
[  233.606067][   T34] =============================================
[  233.606067][   T34] 
[  233.606076][   T34] NMI backtrace for cpu 1
[  233.606097][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  233.606112][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  233.606120][   T34] Call Trace:
[  233.606127][   T34]  <TASK>
[  233.606133][   T34]  dump_stack_lvl+0x189/0x250
[  233.606153][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  233.606168][   T34]  ? __pfx__printk+0x10/0x10
[  233.606194][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  233.606212][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  233.606223][   T34]  ? _printk+0xcf/0x120
[  233.606242][   T34]  ? __pfx__printk+0x10/0x10
[  233.606258][   T34]  ? debug_show_all_locks+0x2e/0x180
[  233.606272][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  233.606286][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  233.606302][   T34]  watchdog+0xfee/0x1030
[  233.606316][   T34]  ? watchdog+0x1de/0x1030
[  233.606333][   T34]  kthread+0x711/0x8a0
[  233.606353][   T34]  ? __pfx_watchdog+0x10/0x10
[  233.606364][   T34]  ? __pfx_kthread+0x10/0x10
[  233.606381][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  233.606397][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.606412][   T34]  ? __pfx_kthread+0x10/0x10
[  233.606428][   T34]  ret_from_fork+0x3fc/0x770
[  233.606445][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  233.606462][   T34]  ? __switch_to_asm+0x39/0x70
[  233.606477][   T34]  ? __switch_to_asm+0x33/0x70
[  233.606490][   T34]  ? __pfx_kthread+0x10/0x10
[  233.606508][   T34]  ret_from_fork_asm+0x1a/0x30
[  233.606534][   T34]  </TASK>
[  233.606540][   T34] Sending NMI from CPU 1 to CPUs 0:
[  233.606592][    C0] NMI backtrace for cpu 0
[  233.606606][    C0] CPU: 0 UID: 0 PID: 6203 Comm: syz.2.143 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  233.606617][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  233.606623][    C0] RIP: 0010:unwind_next_frame+0x223/0x2390
[  233.606663][    C0] Code: 86 65 18 00 00 44 89 f8 4c 8d 2c 85 74 fb dd 90 4c 89 e8 48 c1 e8 03 0f b6 04 28 84 c0 48 89 eb 0f 85 1c 1c 00 00 45 8b 6d 00 <44> 89 f8 ff c0 48 8d 2c 85 74 fb dd 90 48 89 e8 48 c1 e8 03 0f b6
[  233.606674][    C0] RSP: 0018:ffffc90000006cd8 EFLAGS: 00000246
[  233.606684][    C0] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 24c5433c356c3c00
[  233.606692][    C0] RDX: 00000000000a724d RSI: ffffffff8be29f20 RDI: ffffffff8be29ee0
[  233.606699][    C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffffff8172aae5
[  233.606706][    C0] R10: ffffc90000006e58 R11: fffff52000000dcd R12: ffffffff81697ef3
[  233.606714][    C0] R13: 00000000000150a1 R14: ffffc90000006e08 R15: 000000000000697e
[  233.606723][    C0] FS:  00007f40525346c0(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
[  233.606729][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  233.606735][    C0] CR2: 00007f4052513d58 CR3: 0000000027282000 CR4: 00000000000006f0
[  233.606762][    C0] Call Trace:
[  233.606767][    C0]  <IRQ>
[  233.606773][    C0]  ? unwind_next_frame+0xa5/0x2390
[  233.606784][    C0]  ? arch_stack_walk+0xe4/0x150
[  233.606796][    C0]  __unwind_start+0x5b9/0x760
[  233.606806][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  233.606819][    C0]  arch_stack_walk+0xe4/0x150
[  233.606829][    C0]  ? arch_stack_walk+0xe4/0x150
[  233.606839][    C0]  stack_trace_save+0x9c/0xe0
[  233.606849][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  233.606858][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  233.606869][    C0]  ? sched_clock_cpu+0x74/0x430
[  233.606879][    C0]  ? lapic_next_event+0x11/0x20
[  233.606889][    C0]  ? clockevents_program_event+0x24d/0x360
[  233.606902][    C0]  kasan_save_track+0x3e/0x80
[  233.606924][    C0]  __kasan_kmalloc+0x93/0xb0
[  233.606933][    C0]  __kmalloc_noprof+0x27a/0x4f0
[  233.606943][    C0]  ? cfg80211_inform_single_bss_data+0x905/0x1ac0
[  233.606956][    C0]  cfg80211_inform_single_bss_data+0x905/0x1ac0
[  233.606973][    C0]  ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10
[  233.607002][    C0]  cfg80211_inform_bss_data+0x1fb/0x3b20
[  233.607017][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  233.607030][    C0]  ? __pfx_cfg80211_inform_bss_data+0x10/0x10
[  233.607041][    C0]  ? ktime_get+0x3e/0x1f0
[  233.607052][    C0]  ? ktime_get+0x3e/0x1f0
[  233.607063][    C0]  ? ktime_get+0x3e/0x1f0
[  233.607073][    C0]  ? ktime_get+0x3e/0x1f0
[  233.607083][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  233.607094][    C0]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  233.607106][    C0]  ? do_raw_spin_unlock+0x4d/0x240
[  233.607122][    C0]  ? ieee80211_bss_info_update+0x2dc/0x9e0
[  233.607134][    C0]  cfg80211_inform_bss_frame_data+0x3d7/0x730
[  233.607146][    C0]  ? ieee80211_bss_info_update+0x2dc/0x9e0
[  233.607163][    C0]  ieee80211_bss_info_update+0x746/0x9e0
[  233.607181][    C0]  ? __pfx_ieee80211_bss_info_update+0x10/0x10
[  233.607198][    C0]  ? irqentry_exit+0x74/0x90
[  233.607207][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.607220][    C0]  ? ieee80211_scan_rx+0x171/0xa20
[  233.607228][    C0]  ? ieee80211_scan_rx+0x1a8/0xa20
[  233.607237][    C0]  ? ieee80211_get_channel_khz+0x15b/0x8a0
[  233.607248][    C0]  ieee80211_scan_rx+0x593/0xa20
[  233.607259][    C0]  ieee80211_rx_list+0x22fc/0x2d80
[  233.607271][    C0]  ? hrtimer_interrupt+0x889/0xaa0
[  233.607282][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  233.607295][    C0]  ? __pfx_ieee80211_rx_list+0x10/0x10
[  233.607308][    C0]  ? ieee80211_rx_napi+0xca/0x3d0
[  233.607317][    C0]  ? ieee80211_rx_napi+0xca/0x3d0
[  233.607329][    C0]  ? ieee80211_rx_napi+0xca/0x3d0
[  233.607339][    C0]  ieee80211_rx_napi+0x1a8/0x3d0
[  233.607350][    C0]  ? __pfx_ieee80211_rx_napi+0x10/0x10
[  233.607361][    C0]  ? skb_dequeue+0x10e/0x150
[  233.607375][    C0]  ieee80211_handle_queued_frames+0xe8/0x1f0
[  233.607387][    C0]  tasklet_action_common+0x36c/0x580
[  233.607404][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  233.607415][    C0]  ? __pfx_tasklet_action_common+0x10/0x10
[  233.607427][    C0]  ? workqueue_softirq_action+0xd4/0x150
[  233.607439][    C0]  handle_softirqs+0x286/0x870
[  233.607449][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  233.607459][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  233.607469][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  233.607480][    C0]  __irq_exit_rcu+0xca/0x1f0
[  233.607489][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  233.607500][    C0]  irq_exit_rcu+0x9/0x30
[  233.607508][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  233.607518][    C0]  </IRQ>
[  233.607521][    C0]  <TASK>
[  233.607524][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  233.607534][    C0] RIP: 0010:its_return_thunk+0x0/0x10
[  233.607544][    C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc <c3> cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e9 cb ea c1 f5 cc
[  233.607551][    C0] RSP: 0018:ffffc9000636f478 EFLAGS: 00000286
[  233.607560][    C0] RAX: 24c5433c356c3c00 RBX: ffffffff81a13ada RCX: 24c5433c356c3c00
[  233.607566][    C0] RDX: 0000000000000001 RSI: ffffffff8db8655b RDI: ffffffff8be29f40
[  233.607571][    C0] RBP: ffffc9000636f5d0 R08: 0000000000000003 R09: 0000000000000004
[  233.607576][    C0] R10: dffffc0000000000 R11: fffffbfff1bfaa6c R12: dffffc0000000000
[  233.607582][    C0] R13: 0000000000000001 R14: 0000000081a14201 R15: 0000000000000000
[  233.607588][    C0]  ? console_flush_all+0x13a/0xc40
[  233.607603][    C0]  console_flush_all+0xb24/0xc40
[  233.607613][    C0]  ? console_flush_all+0x861/0xc40
[  233.607623][    C0]  ? console_flush_all+0x13a/0xc40
[  233.607672][    C0]  ? __pfx_console_flush_all+0x10/0x10
[  233.607693][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  233.607711][    C0]  console_unlock+0xc4/0x270
[  233.607725][    C0]  ? __pfx_console_unlock+0x10/0x10
[  233.607735][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  233.607747][    C0]  vprintk_emit+0x5b7/0x7a0
[  233.607757][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[  233.607767][    C0]  ? perf_trace_run_bpf_submit+0xee/0x170
[  233.607778][    C0]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  233.607792][    C0]  _printk+0xcf/0x120
[  233.607811][    C0]  ? __pfx__printk+0x10/0x10
[  233.607829][    C0]  netlink_sendmsg+0x8c2/0xb30
[  233.607843][    C0]  ? irqentry_exit+0x74/0x90
[  233.607856][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.607871][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  233.607882][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  233.607895][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  233.607911][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  233.607925][    C0]  __sock_sendmsg+0x21c/0x270
[  233.607945][    C0]  ____sys_sendmsg+0x505/0x830
[  233.607957][    C0]  ? __pfx_____sys_sendmsg+0x10/0x10
[  233.607968][    C0]  ? import_iovec+0x74/0xa0
[  233.607978][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  233.607986][    C0]  ? __pfx____sys_sendmsg+0x10/0x10
[  233.608003][    C0]  ? __fget_files+0x2a/0x420
[  233.608017][    C0]  ? __fget_files+0x3a0/0x420
[  233.608034][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  233.608051][    C0]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  233.608071][    C0]  do_syscall_64+0xfa/0x3b0
[  233.608083][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.608091][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  233.608101][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.608109][    C0] RIP: 0033:0x7f405178e9a9
[  233.608118][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  233.608126][    C0] RSP: 002b:00007f4052534038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  233.608139][    C0] RAX: ffffffffffffffda RBX: 00007f40519b5fa0 RCX: 00007f405178e9a9
[  233.608148][    C0] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009
[  233.608156][    C0] RBP: 00007f4051810d69 R08: 0000000000000000 R09: 0000000000000000
[  233.608163][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  233.608171][    C0] R13: 0000000000000000 R14: 00007f40519b5fa0 R15: 00007ffeaf010b68
[  233.608188][    C0]  </TASK>
[  233.608588][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  233.608605][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  233.608622][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  233.608630][   T34] Call Trace:
[  233.608669][   T34]  <TASK>
[  233.608677][   T34]  dump_stack_lvl+0x99/0x250
[  233.608699][   T34]  ? __asan_memcpy+0x40/0x70
[  233.608719][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  233.608733][   T34]  ? __pfx__printk+0x10/0x10
[  233.608760][   T34]  panic+0x2db/0x790
[  233.608779][   T34]  ? __pfx_panic+0x10/0x10
[  233.608793][   T34]  ? nmi_backtrace_stall_check+0x433/0x440
[  233.608814][   T34]  ? irq_work_queue+0xc3/0x140
[  233.608834][   T34]  watchdog+0x102d/0x1030
[  233.608849][   T34]  ? watchdog+0x1de/0x1030
[  233.608867][   T34]  kthread+0x711/0x8a0
[  233.608888][   T34]  ? __pfx_watchdog+0x10/0x10
[  233.608899][   T34]  ? __pfx_kthread+0x10/0x10
[  233.608918][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  233.608933][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.608948][   T34]  ? __pfx_kthread+0x10/0x10
[  233.608966][   T34]  ret_from_fork+0x3fc/0x770
[  233.608982][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  233.609000][   T34]  ? __switch_to_asm+0x39/0x70
[  233.609015][   T34]  ? __switch_to_asm+0x33/0x70
[  233.609031][   T34]  ? __pfx_kthread+0x10/0x10
[  233.609050][   T34]  ret_from_fork_asm+0x1a/0x30
[  233.609078][   T34]  </TASK>
[  233.609817][   T34] Kernel Offset: disabled

VM DIAGNOSIS:
08:36:12  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81680ea6 RBX=0000000000000000 RCX=ffff888107791cc0 RDX=0000000000010100
RSI=0000000000000008 RDI=ffffffff92a52460 RBP=ffffc90000006a18 RSP=ffffc90000006980
R8 =ffffffff92a52467 R9 =1ffffffff254a48c R10=dffffc0000000000 R11=fffffbfff254a48d
R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff81680ea7 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f40525346c0 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4052513d58 CR3=0000000027282000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f4051986478 00007f4051986450 XMM03=00007f4051986488 00007f4051986480
XMM04=00007f40524ed100 00007f4051986440 XMM05=00007f4051986458 00007f40519864a0
XMM06=00007f4051986498 00007f4051986490 XMM07=00007f4051986488 00007f4051986480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f4051811ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000066 RBX=0000000000000066 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f7b0
R8 =ffff888021308237 R9 =1ffff11004261046 R10=dffffc0000000000 R11=ffffffff85472aa0
R12=dffffc0000000000 R13=ffffffff99af58ef R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff85472b1c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f49d584e355 CR3=00000001094f0000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
