last executing test programs:

19.55197817s ago: executing program 0 (id=132):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0xee, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000600), 0xb}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x4, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070004000523a608460400", @ANYRES16=r3], 0xfe33)
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, 0x0, 0x0)
sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum64={0xd, 0x0, 0x0, 0x13, 0x1, 0x2, [{0x8, 0xfff, 0x6}, {0x9, 0x7f}, {0xa, 0x1, 0x1}, {0xb, 0x4, 0x8}, {0x4, 0xaf5, 0x5}, {0x6, 0x9, 0x1}]}]}, {0x0, [0x5f, 0xd52bcbb38f4c74bc, 0x30]}}, 0x0, 0x26}, 0x64)
perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="eeb2000000e4ffffffffffffff00"/28], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r6, &(0x7f0000000780)}, 0x20)
r7 = gettid()
perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x5a, 0x12, 0xb7, 0x4, 0x0, 0x800000000000, 0x2000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_bp={&(0x7f0000000240), 0xe}, 0x102087, 0x8, 0x9, 0x0, 0x1, 0x9, 0x9, 0x0, 0x1000, 0x0, 0x40}, r7, 0xb, 0xffffffffffffffff, 0x8)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000200)={0x96}, 0x8)
sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x31}, 0x40814)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7968dd986c6a6700020006aa"], 0xfdef)
write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0xfdef)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r9=>0xffffffffffffffff})
recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

18.316907545s ago: executing program 0 (id=137):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000011000000000000040000008410b500000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

18.312813208s ago: executing program 0 (id=139):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000b40)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x94)
socket$kcm(0x2, 0x2, 0x73)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x8841)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x4a301, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x1400, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1802000071130000000000000000000085000000620000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$kcm(0x2, 0x1000000000000002, 0x0)
r4 = perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0xcf, 0x6, 0x4, 0x68, 0x0, 0x1ff, 0x0, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80, 0x2, @perf_bp={0x0, 0x1}, 0x30, 0xc, 0x401, 0x5, 0x5, 0x55c, 0x0, 0x0, 0xfffff36c, 0x0, 0xfffffffffffffffe}, 0x0, 0x4, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x1)
sendmsg$inet(r3, 0x0, 0xe990)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000340)={0x5, 0xff1f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4d2f, 0x20858, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0xb}, 0xa00, 0x6, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x19}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01)
sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000300)="1e", 0x1}], 0x1, 0x0, 0x0, 0x24000080}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x202, 0x40020, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x100009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socket$kcm(0x11, 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'ipvlan1\x00', 0x11})
r8 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r8, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x9f}, 0xffffffffffffffff, 0x0, r7, 0x0)

16.275642002s ago: executing program 1 (id=146):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a00000009000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000091b51e4a8d6b3687"], 0x48)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)={[{0x2d, 'pids'}, {0x2d, 'devices'}]}, 0xf)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000300)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000004c0)="00000400acb889eb4236759965bc", 0x0, 0xbffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50)

16.274701913s ago: executing program 1 (id=147):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000140), 0xfffffd26)

16.274449575s ago: executing program 1 (id=148):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x1, 0x0, 0x0, 0x0, 0x4, 0x100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x9, 0x1}, 0x11fd61, 0x0, 0x400000, 0x7, 0x0, 0xfffffe, 0xfffc, 0x0, 0x0, 0x0, 0x403}, 0x0, 0x0, 0xffffffffffffffff, 0xa)

15.604438895s ago: executing program 2 (id=149):
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f00000005c0)=r1, 0x12)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40305839, &(0x7f0000000040))
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r1, r4, 0x0, 0x3, &(0x7f0000000000)='\\@\x00'}, 0x30)
close(r0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000380)={<r5=>0x0, 0x0})
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000080), &(0x7f00000001c0)=r6}, 0x20)
close(r5)
socket$kcm(0x10, 0x2, 0x0)
setsockopt$sock_attach_bpf(r5, 0x10e, 0xb, &(0x7f0000000180), 0x4)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="d800000018007b18e00212ba0d8105040a3f1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000100000300014002000c0901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fba8cae8c9010000734d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="6000000068007f089e", 0x9}, {&(0x7f0000000640)="68cabf2dfb58fc021d6b689866f05d48000500000000000000258f2e6400b8f9e6aaeb88bea123dc2c6726e89b0ce24f89a565ee52dcd729cd3909bc510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0)
socket$kcm(0x10, 0x2, 0x4) (async)
syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) (async)
write$cgroup_pid(r3, &(0x7f00000005c0)=r1, 0x12) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40305839, &(0x7f0000000040)) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r1, r4, 0x0, 0x3, &(0x7f0000000000)='\\@\x00'}, 0x30) (async)
close(r0) (async)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000380)={0x0, 0x0}) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000080), &(0x7f00000001c0)=r6}, 0x20) (async)
close(r5) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
setsockopt$sock_attach_bpf(r5, 0x10e, 0xb, &(0x7f0000000180), 0x4) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="d800000018007b18e00212ba0d8105040a3f1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000100000300014002000c0901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fba8cae8c9010000734d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) (async)
sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="6000000068007f089e", 0x9}, {&(0x7f0000000640)="68cabf2dfb58fc021d6b689866f05d48000500000000000000258f2e6400b8f9e6aaeb88bea123dc2c6726e89b0ce24f89a565ee52dcd729cd3909bc510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0) (async)

15.60302335s ago: executing program 0 (id=150):
r0 = socket$kcm(0x10, 0x2, 0x4)
close(r0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000380)={<r1=>0x0, 0x0})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r3, 0x7, 0x0, 0x8, &(0x7f0000000180)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)
close(r1)
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x1, 0x4, 0x6d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3ffff}, 0x0, 0x4000000000000200, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x3}, 0x6000, 0x0, 0x4, 0x6, 0x0, 0x2000000a, 0xfffc, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0xd)
r4 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r4, 0x29, 0x23, &(0x7f0000000040), 0xcf)
sendmsg$kcm(r4, &(0x7f00000001c0)={&(0x7f0000000a00)=@in6={0xa, 0x4e23, 0xe, @empty, 0x7}, 0x80, 0x0}, 0x48084)
r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000700)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r7}, &(0x7f0000000440), &(0x7f0000000480)=r6}, 0x20)
bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000340)={r7, &(0x7f0000000400), 0x20000000}, 0x20)
r8 = socket$kcm(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7}, &(0x7f0000000080), &(0x7f0000000180)=r8}, 0x20)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r5, r7}, 0xc)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10e, 0xb, &(0x7f0000000180), 0x4)
sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="6000000068007f089e", 0x9}, {&(0x7f0000000640)="68cabf2dfb58fc021d6b689866f05d48000500000000000000258f2e6400b8f9e6aaeb88bea123dc2c6726e89b0ce24f89a565ee52dcd729cd3909bc510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x4040)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
close(r9)
recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}]}, 0x0)

15.546719528s ago: executing program 1 (id=151):
r0 = socket$kcm(0x2, 0x5, 0x84)
close(0x3)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0xd, 0x3}, {0x10000002, 0x0, 0x0, 0x6}]}, 0x94)
r2 = socket$kcm(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = syz_clone(0xc0008100, &(0x7f0000000500)="c60010b145cbdb0aa0814b69946778aeb7a759bc4fa9f83b5987bc4c8911695b6da4a16ea083db5af6e02ed074a0b062a95424b711996478e59956cda8e4469242b81af63bc0b9dd49e2fbdd9865386f5ecad58ea34df282c4df32baa3e37869e9d00e843773d566474ce31747b970fc3e262f4de599", 0x76, &(0x7f0000000580), &(0x7f0000000600), &(0x7f0000000640)="d5bbaf2cde8f7bf578f11c7eeeee8d546257686985170419eae68d5c42808568dbf5d34b17961ccc37c5d98af5dfd396fad7796e94818cef6a3d93b15f64614d0fae69abc83104f9c92ef73e38d9ef28785e6329882b81a6a825581696862fb9e9a7a58c837fcdf324e1fe30201b75fd77cd138632ef501111")
r7 = getpid()
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r8 = gettid()
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000700)='ns/cgroup\x00')
r11 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r13 = openat$cgroup_procs(r12, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r13, &(0x7f00000005c0)=r11, 0x12)
r14 = syz_clone(0x1008000, &(0x7f0000000740)="f271803674ada78c", 0x8, &(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)="a42af1cdaa2c5edfc4a4a8a821440ed0bfa81eff7c86567ba319ae2e7a8d")
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r15=>0xffffffffffffffff})
recvmsg$unix(r15, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r16=>0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}, 0x40)
r17 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x9b59}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003c00)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r16, @ANYRES32=r17, @ANYBLOB="0000000000000000b702000000000000850000"], &(0x7f00000006c0)='syzkaller\x00', 0x6, 0xc5, &(0x7f00000007c0)=""/197, 0x41100, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
r18 = getpid()
sendmsg$unix(r3, &(0x7f00000009c0)={&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000400)="d9aea4027a8bdf5293d9d7dd5f255546685349735777d70a3dec414c6aca485c15b45514838a46a919f607931ab04c57f24ac5f6072f403eb143ef23cc079d5d8f455b90117c40bf2c221bab2cd27c54c9c46a23e25643138dc9459aa85e4577fbe9745e59eeaecc32c6666f280c0a84d80257aa810f0aa82771292b4762538970080e2b6cff7cc768f75ca99cb7b595a13b0382f132637f9e95e9952454c5b52386c6b975ec2410fd2e96a3f9b0a75eacf8787df2442a9c417f4a29dcdfeb7d1e43ec12968aa2dddc7c8b605e40fd", 0xcf}, {&(0x7f0000000300)="344f87ac080bf2aae3cc33c145952d4a7ece149e28465f8901055967c0d05766b9c2f5f3c554239bd3e2b2d32ef69e333418dcc3e60cefbab4a3372df8629d8a7bb2867bf44862417f9abad7e356", 0x4e}, {&(0x7f0000001840)="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", 0x1000}], 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1000000000000000010000000100000034000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c000000000006000000000000000000", @ANYRES32=r8, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r14, @ANYRES32=r16, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r18, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00'], 0x158, 0x810}, 0x50050)
recvmsg$unix(r3, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r19=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r19, 0x10)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @broadcast}, 0xfffffffffffffedd, &(0x7f0000000140)}, 0x0)
sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x64)

15.451125245s ago: executing program 0 (id=152):
socket$kcm(0x10, 0x3, 0x10)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x2d55}, 0x8)
socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socketpair(0x2, 0xf, 0x80000000, &(0x7f0000000080))
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000001c0), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x1, 0x4, 0x2}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
socket$kcm(0x10, 0x2, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000001ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080))
r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x36, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0x20ae8}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x2000, 0x7d, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, r3, 0x1)

15.449203799s ago: executing program 2 (id=153):
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x8, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

15.448719053s ago: executing program 2 (id=154):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000040000008410b500000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

15.358698481s ago: executing program 2 (id=155):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80044, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x0, 0x4e1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) (async)
perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x40af1d, 0x1, @perf_config_ext={0xff, 0x7}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0x66, 0x8}, @initr0, @exit, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) (async)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14185, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (rerun: 32)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000280)='syzkaller\x00'}, 0x90) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)}, 0x4) (async)
recvmsg$unix(r3, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x20026) (async, rerun: 32)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
close(r5) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6}, &(0x7f00000000c0), &(0x7f0000000100)=r5}, 0x20) (async, rerun: 64)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x7}, 0x48) (rerun: 64)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r7, &(0x7f0000000100), &(0x7f0000000000)=""/95, 0x2}, 0x20) (async, rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r2}, 0x10) (rerun: 32)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0f00000004800000080100000800000000000000cb15e6e12ae4ace341dc59ad85b862c5e1536a23f7cca1a0d0ce90b884e96c4371d8a6687c7dd8386c58f8fecd9862927876ed5c73080000002f4aa0ab4b2e05edb24b2dbb7bdfb2daa9d29e4cb850c13554111c116b0173be59051435e985743095f7aca5236880077cd0834f4032b87637bffa42f892b84c0ad1446a7c82841d5d54e94a12b1368f0c709017c3d20b892930b995d6d44aeb212f95d8e33525036e65c48200cd98c1d4ab34d0fc3aed839afbe531e40440c06098c374f4516b9a6b60ac6c54e486273eb90f6bf3790825934f8f425dda186d514042d7ff6afdaa595c8b87baa4d3e5b7", @ANYRES32, @ANYBLOB="000000000000000000000000daba000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=r8, 0x7, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='syzkaller\x00'}, 0x90)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r9, 0x0, 0x180000}, 0x18)
close(r10) (async, rerun: 32)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='(pu&\"\"\t&&') (rerun: 32)
socket$kcm(0x10, 0x400000002, 0x0)
socket$kcm(0x2, 0x3, 0x2)

15.124950197s ago: executing program 2 (id=156):
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r0=>0x0}}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18080f0000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000001580)=[{&(0x7f00000000c0)="96e68c7b166038a5d163bfbd48d2c4013ea0253e307fb3d2a190383b8b74b61eadd066", 0x23}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="9f984ac927be2d4996a9eaae68ece2bf2dc32055d940205ddba429acd3e5cb414247405452743fb6bfa98ac82f8706663b7c2ca4f9727d8da20f59c5e1800ccc59dac6c0212b5b6abfa77b279ec968efcb596dba7c7d828d70ac5596ce443ee982123579c67386a79acb099582e40b1da86107e4a545c7b9c8460701d5b74d62423e56fb7de3681b82d6dda7b0a0fb8be58d76a8c5fab4938c5aa6e344199023", 0xa0}, {&(0x7f0000001300)="1eb835a6c46e409e5d56bd304ce9869e674d6ac494a1b496fe12d1056d938c720d620ffda55ec6faea93c2b95f3ebfda953d7b4de89f24ab0aed5226f1d094da52dde58cde88466ebdeb61c29b81b3563a80e49d3643f8630b79b37cc80e42f679e921daf7bb7f80e8aee2d8ee34ffdde87cf4605affa4a4ee2a1fb494924dece8c8f6a5ad2685af4bc77c714ce4e08d4161896943a24b5dd76a64b5663c220fa43f782c0496df5ff89f8a4adee3f86ca7d6b4ae01c4838a2ec6838bb2c7e43ed40747b7b6e27e02dda549efd72dc67cde2f91", 0xd3}, {&(0x7f0000001400)="72f41a8c3ce0fd5040439eff84c90092a65d2c6e979e961b02d03999079db52daca908c77d360ecbdc82c2df9545e460c144ca81347c04c822faf92b2d54bdaa97", 0x41}, {&(0x7f0000001480)="2b3f7047196a3240e63f5764afad6de932e29b43a28e93860fa56bb3b30b1dba72ada37fbeb36243e529be7d31b3dad3abf4e7fbf7cf8c1fb77cb07a221e067f69633118e36133c034f9330d6e6f35336f31838f9a54c9023f96e59582f15a92f03795ac28d9ccdeba93f7b3b55535a0f5d754ac7cd589cd4ffdfe6bd1e3f174e1769ff537c2ba4f90f5bfcb88076af6b12527feee078c74138268c9c94f2cdcf52aea762ec1946503fd45aaaf32f31ba942b876e839181528a5925b0b2bd5c3718a321e6e1acf536f48cec6cb3a24a193a21b797ce53c107c116c0fec6c3ead7b63f771e1c3f265", 0xe8}], 0x6, &(0x7f0000001980)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="ac1e00017f00000100000000"], 0x2a0}, 0x20048010)
r3 = socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x29, 0x0, 0x0)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040a60090000bed7f95c0255a12a00090008000699e3ffffff14000500fe8081780c000567b8b7b940020000090a0016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0)

15.122954809s ago: executing program 0 (id=157):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0x4}, 0x14105, 0x2e, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000002800)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0x4}, 0x11411d, 0x32, 0xfffffbfd, 0x3, 0x8000, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0xff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, @perf_config_ext={0x8000000000000001, 0x99c}, 0x100004, 0x7, 0x8, 0x0, 0x201, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x0, 0x0, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0x10, 0x2, 0x0)
close(r1)
r2 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$inet(r2, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}, 0x8000)
sendmsg$inet(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000580)="914781cba1", 0xffe3}], 0x2}, 0x48800)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x4000002)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14143705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="98000000180081064e81f782db4cb9040a1d0800067c7c09e8fe0ba10a0004000100000000000000b7ac6b5e502e3896d408001e00400400027c035c0461c1d67f6f9c007134cf6efa8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d06a4683f5aeb4edbb57a5025ccce9e00360db798e84e", 0x98}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14065, 0x0, 0x0, 0x5f5f10e8e5bda32e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7cdd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x9)

15.046940236s ago: executing program 1 (id=158):
mkdir(&(0x7f0000000000)='./file0\x00', 0x16) (async)
r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x7f, 0x6, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x2000, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x1, @perf_config_ext={0xf, 0x6}, 0x8, 0xf7, 0x7fffffff, 0x5, 0x4, 0x8, 0xfff7, 0x0, 0x2}, 0x0, 0x9, 0xffffffffffffffff, 0x8)
r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6, 0x29, 0x1, 0x81, 0x0, 0x4, 0xc0510, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x4, 0x4}, 0x10040, 0xfdc, 0x6, 0x5, 0x6, 0x7, 0x4cb, 0x0, 0x8, 0x0, 0x100}, 0xffffffffffffffff, 0x3, r0, 0x2) (async)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x1, &(0x7f0000000180)=@raw=[@generic={0x0, 0x3, 0x7, 0x7, 0x9775}], &(0x7f00000001c0)='GPL\x00', 0x1, 0xb1, &(0x7f0000000200)=""/177, 0x41000, 0x68, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0xa, 0x4, 0x10}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000340)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000380)=[{0x5, 0x3, 0x6, 0x7}, {0x4, 0x1, 0x7, 0x9}, {0x5, 0x2, 0x8, 0xb}, {0x1, 0x2, 0x7, 0x6}, {0x5, 0x1, 0x1, 0xc}, {0x4, 0x2, 0xa, 0x7}], 0x10, 0x6}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0x1, <r3=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f00000004c0)=r2}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r3, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10) (async)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@int={0x8, 0x0, 0x0, 0x1, 0x0, 0xa, 0x0, 0x4c, 0x2}, @func={0x5, 0x0, 0x0, 0xc, 0x5}, @typedef={0x1, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0]}}, &(0x7f0000000740)=""/142, 0x43, 0x8e, 0x1, 0xd7, 0x10000}, 0x28)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, [@jmp={0x5, 0x0, 0xb, 0x5, 0x3, 0x1, 0xfffffffffffffff0}, @exit, @cb_func={0x18, 0x3, 0x4, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='syzkaller\x00', 0x21, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4, 0x25, r5, 0x8, &(0x7f0000000840)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000880)={0x3, 0x8, 0x8, 0xffffffff}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f00000008c0)=[{0x4, 0x4, 0x8, 0x6}, {0x2, 0x4, 0x4, 0x7}, {0x5, 0x2, 0x8}, {0x4, 0x3, 0xd, 0xc}, {0x0, 0x4, 0x1}, {0x0, 0x5, 0x6, 0x3}, {0x5, 0x2, 0xb, 0x6}, {0x1, 0x5, 0x1}], 0x10, 0x8}, 0x94) (async)
r7 = socket$kcm(0x29, 0x2, 0x0)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000a00), 0x10)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000a40)='*-,\x00') (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000bc0)=@o_path={&(0x7f0000000b80)='./file0/file0\x00', 0x0, 0x6008, r9}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xa, 0x5, &(0x7f0000000ac0)=@raw=[@exit, @ldst={0x0, 0x0, 0x2, 0x9, 0x2, 0xfffffffffffffff4, 0x10}, @generic={0xe, 0x2, 0x5, 0xa9ba, 0xaa2}, @alu={0x4, 0x6ccaeee9ca684a38, 0x3, 0xb, 0x8, 0xffffffffffffffff, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], &(0x7f0000000b00)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x1, '\x00', r4, @fallback=0x36, r5, 0x8, &(0x7f0000000b40)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, &(0x7f0000000c00)=[r3, r3, r3, r10, r3, r3], 0x0, 0x10, 0x886e}, 0x94) (async)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000d00), 0x410000, 0x0)
ioctl$TUNGETVNETLE(r11, 0x800454dd, &(0x7f0000000d40)) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r2) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r6)
r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ec0)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000d80)=@raw=[@generic={0xd, 0x1, 0xe, 0xff, 0x9}], &(0x7f0000000dc0)='GPL\x00', 0xc0, 0x23, &(0x7f0000000e00)=""/35, 0x40f00, 0x1a, '\x00', r4, 0x1a, r5, 0x8, &(0x7f0000000e40)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000e80)={0x5, 0xd, 0x7f, 0x3}, 0x10, 0x231d5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x300}, 0x94)
setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000f80)=r12, 0x4)
r13 = getpid()
perf_event_open(&(0x7f0000000fc0)={0x3, 0x80, 0x4, 0x10, 0x7, 0xa, 0x0, 0x6, 0x4f, 0xd, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x29fd0b91, 0xfff}, 0x18, 0x0, 0x7ee9, 0xd, 0x9, 0x2, 0x1, 0x0, 0x5, 0x0, 0x9}, r13, 0x0, r8, 0x1)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001040)={[{0x2d, 'perf_event'}, {0x2b, 'net_prio'}, {0x2b, 'net_cls'}, {0x2b, 'rdma'}, {0x2b, 'blkio'}]}, 0x2c) (async)
r14 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000001080), 0x2, 0x0)
close(r14) (async)
r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x2, '\x00', r4, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000011c0)={r15, 0x58, &(0x7f0000001140)}, 0x10) (async)
ioctl$TUNSETOFFLOAD(r11, 0x400454d0, 0xe) (async)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000001200)={'ip6_vti0\x00', 0x1000}) (async)
ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000001240)={r7, r6})

15.04653249s ago: executing program 2 (id=159):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/25, 0x19}], 0x1}, 0x142)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
write$cgroup_type(r7, &(0x7f0000000080), 0xfffffed8)
r8 = openat$cgroup_ro(r7, 0x0, 0x0, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50)
write$cgroup_int(r8, &(0x7f0000000200)=0x8, 0x12)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x18)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11800, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000004000000bb7f5a00c600feff0000000a9500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
openat$tun(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"})

14.987053324s ago: executing program 1 (id=160):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x2)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x6e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xf, 0x2, 0xff, 0x0, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x5, 0xdf1d, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r3], 0x9a)

0s ago: executing program 32 (id=157):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0x4}, 0x14105, 0x2e, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000002800)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0x4}, 0x11411d, 0x32, 0xfffffbfd, 0x3, 0x8000, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0xff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, @perf_config_ext={0x8000000000000001, 0x99c}, 0x100004, 0x7, 0x8, 0x0, 0x201, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x0, 0x0, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0x10, 0x2, 0x0)
close(r1)
r2 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$inet(r2, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}, 0x8000)
sendmsg$inet(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000580)="914781cba1", 0xffe3}], 0x2}, 0x48800)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x4000002)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14143705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="98000000180081064e81f782db4cb9040a1d0800067c7c09e8fe0ba10a0004000100000000000000b7ac6b5e502e3896d408001e00400400027c035c0461c1d67f6f9c007134cf6efa8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d06a4683f5aeb4edbb57a5025ccce9e00360db798e84e", 0x98}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14065, 0x0, 0x0, 0x5f5f10e8e5bda32e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7cdd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x9)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:16033' (ED25519) to the list of known hosts.
syzkaller login: [   48.831300][ T5787] cgroup: Unknown subsys name 'net'
[   48.961751][ T5787] cgroup: Unknown subsys name 'cpuset'
[   48.967539][ T5787] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.381954][ T5787] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.665103][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.686790][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.689802][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.693610][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.697004][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.701866][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.705185][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.706977][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.709857][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.711449][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.717851][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.718883][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.726343][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.742390][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.748091][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.058635][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   56.116501][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   56.143313][ T5825] chnl_net:caif_netlink_parms(): no params data found
[   56.184338][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.187176][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.189741][ T5829] bridge_slave_0: entered allmulticast mode
[   56.192548][ T5829] bridge_slave_0: entered promiscuous mode
[   56.217125][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.219558][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.221934][ T5829] bridge_slave_1: entered allmulticast mode
[   56.224656][ T5829] bridge_slave_1: entered promiscuous mode
[   56.273067][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.294987][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.343755][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.346857][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.349625][ T5834] bridge_slave_0: entered allmulticast mode
[   56.352443][ T5834] bridge_slave_0: entered promiscuous mode
[   56.355560][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.359604][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.362923][ T5825] bridge_slave_0: entered allmulticast mode
[   56.366907][ T5825] bridge_slave_0: entered promiscuous mode
[   56.386814][ T5829] team0: Port device team_slave_0 added
[   56.389857][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.392833][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.397147][ T5834] bridge_slave_1: entered allmulticast mode
[   56.401034][ T5834] bridge_slave_1: entered promiscuous mode
[   56.404218][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.407943][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.411274][ T5825] bridge_slave_1: entered allmulticast mode
[   56.415182][ T5825] bridge_slave_1: entered promiscuous mode
[   56.433210][ T5829] team0: Port device team_slave_1 added
[   56.487307][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.490251][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.502125][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.522672][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.527350][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.530443][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.541253][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.568890][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.588022][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.594586][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.603644][ T5829] hsr_slave_0: entered promiscuous mode
[   56.607502][ T5829] hsr_slave_1: entered promiscuous mode
[   56.650704][ T5825] team0: Port device team_slave_0 added
[   56.673809][ T5825] team0: Port device team_slave_1 added
[   56.679430][ T5834] team0: Port device team_slave_0 added
[   56.702301][ T5834] team0: Port device team_slave_1 added
[   56.728917][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.731480][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.740691][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.758070][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.760689][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.770839][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.774921][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.777591][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.786540][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.797902][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.800770][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.812070][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.896142][ T5834] hsr_slave_0: entered promiscuous mode
[   56.899314][ T5834] hsr_slave_1: entered promiscuous mode
[   56.902266][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.905715][ T5834] Cannot create hsr debugfs directory
[   56.933224][ T5825] hsr_slave_0: entered promiscuous mode
[   56.937300][ T5825] hsr_slave_1: entered promiscuous mode
[   56.940214][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.943345][ T5825] Cannot create hsr debugfs directory
[   57.150340][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.168106][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.184239][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.203075][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.258666][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.263926][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.272865][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.285216][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.335167][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.346804][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.351579][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.362847][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.407730][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.431522][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   57.451866][ T3802] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.455183][ T3802] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.477701][ T3802] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.481119][ T3802] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.492255][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.531354][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   57.544746][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.547983][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.572340][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.578546][ T3802] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.581654][ T3802] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.627338][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[   57.655515][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.658841][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.665591][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.669105][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.774233][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.789506][ T5833] Bluetooth: hci2: command tx timeout
[   57.796022][ T5833] Bluetooth: hci0: command tx timeout
[   57.798060][ T5835] Bluetooth: hci1: command tx timeout
[   57.848465][ T5829] veth0_vlan: entered promiscuous mode
[   57.861944][ T5829] veth1_vlan: entered promiscuous mode
[   57.914252][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.928891][ T5829] veth0_macvtap: entered promiscuous mode
[   57.941116][ T5829] veth1_macvtap: entered promiscuous mode
[   57.968091][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.997606][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.003319][ T5825] veth0_vlan: entered promiscuous mode
[   58.012732][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.024081][ T5825] veth1_vlan: entered promiscuous mode
[   58.031622][ T5829] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.035279][ T5829] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.040414][ T5829] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.044115][ T5829] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.097153][ T5834] veth0_vlan: entered promiscuous mode
[   58.109863][ T5825] veth0_macvtap: entered promiscuous mode
[   58.125702][ T5825] veth1_macvtap: entered promiscuous mode
[   58.130232][ T5834] veth1_vlan: entered promiscuous mode
[   58.180421][ T3802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.184874][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.188636][ T3802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.205519][ T5834] veth0_macvtap: entered promiscuous mode
[   58.225314][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.233372][ T5834] veth1_macvtap: entered promiscuous mode
[   58.244240][ T5825] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.249242][ T5825] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.253006][ T5825] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.259298][ T5825] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.270333][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.273077][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.276615][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.284140][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.304302][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.307798][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.310745][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.313543][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.332491][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.408599][ T5896] Zero length message leads to an empty skb
[   58.425538][ T5896] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   58.622411][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.624920][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.663673][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.673115][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.684149][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.688997][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.743888][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.749406][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.811965][    C0] hrtimer: interrupt took 62637 ns
[   58.821946][ T5903] netlink: 'syz.1.2': attribute type 3 has an invalid length.
[   58.824555][ T5903] netlink: 'syz.1.2': attribute type 2 has an invalid length.
[   58.834069][ T5903] netlink: 198000 bytes leftover after parsing attributes in process `syz.1.2'.
[   58.881832][ T5903] netlink: 'syz.1.2': attribute type 29 has an invalid length.
[   59.139079][ T5912] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6'.
[   59.142255][ T5912] netlink: 6 bytes leftover after parsing attributes in process `syz.2.6'.
[   59.399791][ T5923] netlink: 'syz.2.10': attribute type 21 has an invalid length.
[   59.866161][ T5835] Bluetooth: hci0: command tx timeout
[   59.866276][ T5833] Bluetooth: hci2: command tx timeout
[   59.881346][ T5833] Bluetooth: hci1: command tx timeout
[   59.895544][ T5923] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10'.
[   59.911928][ T5929] Illegal XDP return value 839960971 on prog  (id 14) dev N/A, expect packet loss!
[   60.034747][ T5939] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.13'.
[   60.044049][ T5933] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.13'.
[   60.051710][ T5933] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.13'.
[   60.060882][ T5941] wg2: entered promiscuous mode
[   60.062538][ T5941] wg2: entered allmulticast mode
[   60.070805][ T5942] wg2: left promiscuous mode
[   60.077153][ T5942] wg2: left allmulticast mode
[   60.661680][ T5963] netlink: 144 bytes leftover after parsing attributes in process `syz.2.23'.
[   60.991975][ T5974] netlink: 16182 bytes leftover after parsing attributes in process `syz.1.27'.
[   61.005254][ T5974] netlink: 'syz.1.27': attribute type 10 has an invalid length.
[   61.338786][ T5994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.32'.
[   61.484712][ T5992] syzkaller0: tun_chr_ioctl cmd 1074025681
[   61.560978][ T5974] syz.1.27 (5974) used greatest stack depth: 20888 bytes left
[   61.947449][ T5835] Bluetooth: hci2: command tx timeout
[   61.950029][ T5835] Bluetooth: hci0: command tx timeout
[   61.952531][ T5833] Bluetooth: hci1: command tx timeout
[   63.045926][ T6029] syz.0.41 uses obsolete (PF_INET,SOCK_PACKET)
[   64.027529][ T5828] Bluetooth: hci0: command tx timeout
[   64.029541][ T5828] Bluetooth: hci1: command tx timeout
[   64.031494][ T5828] Bluetooth: hci2: command tx timeout
[   64.746079][ T6047] __nla_validate_parse: 4 callbacks suppressed
[   64.746091][ T6047] netlink: 60 bytes leftover after parsing attributes in process `syz.1.47'.
[   65.482950][ T6058] netlink: 'syz.1.50': attribute type 1 has an invalid length.
[   65.485525][ T6058] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.50'.
[   65.861385][ T6072] netlink: 'syz.2.55': attribute type 2 has an invalid length.
[   65.863853][ T6072] netlink: 137592 bytes leftover after parsing attributes in process `syz.2.55'.
[   65.891464][ T6072] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.55'.
[   65.944636][ T6073] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   66.992487][ T6107] netlink: 'syz.1.63': attribute type 27 has an invalid length.
[   66.995040][ T6107] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.63'.
[   67.010643][ T6115] C: renamed from team_slave_0 (while UP)
[   67.014412][ T6115] netlink: 'syz.2.66': attribute type 3 has an invalid length.
[   67.017891][ T6115] netlink: 92 bytes leftover after parsing attributes in process `syz.2.66'.
[   67.020716][ T6115] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   67.039413][ T6116] netlink: 44 bytes leftover after parsing attributes in process `syz.0.68'.
[   67.042503][ T6114] netlink: 44 bytes leftover after parsing attributes in process `syz.0.68'.
[   67.043086][ T6117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.68'.
[   67.049102][ T6116] netlink: 44 bytes leftover after parsing attributes in process `syz.0.68'.
[   67.271911][ T6133] netlink: 'syz.0.75': attribute type 10 has an invalid length.
[   67.294893][ T6133] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.299533][ T6133] team0: Port device bond0 added
[   67.341182][ T6135] netlink: 'syz.2.76': attribute type 10 has an invalid length.
[   67.353320][ T6135] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.357123][ T6135] team0: Port device bond0 added
[   67.362070][ T6133] syz.0.75 (6133) used greatest stack depth: 19232 bytes left
[   67.445481][ T6147] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.034649][ T6182] netlink: 'syz.0.87': attribute type 10 has an invalid length.
[   68.146943][ T6182] team0 (unregistering): Port device team_slave_0 removed
[   68.161290][ T6182] team0 (unregistering): Port device team_slave_1 removed
[   68.171606][ T6189] netlink: 'syz.2.91': attribute type 10 has an invalid length.
[   68.173453][ T6194] netlink: 'syz.1.93': attribute type 10 has an invalid length.
[   68.174219][ T6190] netlink: 'syz.2.91': attribute type 10 has an invalid length.
[   68.182085][ T6182] team0 (unregistering): Port device bond0 removed
[   68.202694][ T6194] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.207698][ T6194] batman_adv: batadv0: Removing interface: batadv_slave_0
[   68.212454][ T6194] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[   68.417612][ T6215] sctp: [Deprecated]: syz.2.98 (pid 6215) Use of struct sctp_assoc_value in delayed_ack socket option.
[   68.417612][ T6215] Use struct sctp_sack_info instead
[   69.058159][ T6244] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[   69.063982][ T6244] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   69.083218][ T6244] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[   70.344512][ T6269] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.355122][ T6269] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.986436][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   70.990500][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.352019][ T6279] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.355523][ T6279] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.361597][ T6279] bridge0: entered allmulticast mode
[   71.366872][ T6280] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.369177][ T6280] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.371900][ T6280] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.374683][ T6280] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.378024][ T6280] bridge0: entered promiscuous mode
[   72.556501][ T6301] IPv6: Can't replace route, no match found
[   73.683163][ T6309] validate_nla: 3 callbacks suppressed
[   73.683180][ T6309] netlink: 'syz.2.129': attribute type 10 has an invalid length.
[   73.693810][ T6309] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.698737][ T6309] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.713042][ T6309] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.715646][ T6309] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.718380][ T6309] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.720796][ T6309] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.727712][ T6309] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   75.538668][ T6316] __nla_validate_parse: 7 callbacks suppressed
[   75.538682][ T6316] netlink: 16182 bytes leftover after parsing attributes in process `syz.0.132'.
[   75.543101][ T6318] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.133'.
[   75.554080][ T6316] netlink: 'syz.0.132': attribute type 10 has an invalid length.
[   75.611216][ T6320] netlink: 'syz.1.134': attribute type 21 has an invalid length.
[   75.929306][ T6329] netlink: 'syz.1.136': attribute type 29 has an invalid length.
[   75.933301][ T6329] netlink: 'syz.1.136': attribute type 29 has an invalid length.
[   76.735095][ T6335] netlink: 'syz.2.138': attribute type 29 has an invalid length.
[   76.738370][ T6335] netlink: 'syz.2.138': attribute type 29 has an invalid length.
[   76.756237][ T6327] delete_channel: no stack
[   76.759656][ T6335] netlink: 'syz.2.138': attribute type 29 has an invalid length.
[   76.763694][ T6335] netlink: 'syz.2.138': attribute type 29 has an invalid length.
[   76.812795][ T6337] netlink: 10 bytes leftover after parsing attributes in process `syz.1.140'.
[   79.466688][ T6363] netlink: 'syz.2.149': attribute type 5 has an invalid length.
[   79.931933][ T6391] netlink: 144 bytes leftover after parsing attributes in process `syz.2.156'.
[   79.992273][ T6393] netlink: 'syz.0.157': attribute type 2 has an invalid length.
[   80.056000][ T5835] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30
[   80.060986][ T6402] netlink: 'syz.0.157': attribute type 4 has an invalid length.
[   80.060999][ T6402] netlink: 112 bytes leftover after parsing attributes in process `syz.0.157'.
[   82.106627][ T5828] Bluetooth: hci0: command tx timeout
[  105.126662][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  105.127497][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  105.128022][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  105.130313][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  105.131148][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  105.191765][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  105.192441][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  105.192685][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  105.193170][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  105.193510][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  105.206732][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  105.207366][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  105.207742][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  105.208376][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  105.208681][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  107.146696][ T5828] Bluetooth: hci3: command tx timeout
[  107.225991][ T5828] Bluetooth: hci5: command tx timeout
[  107.226263][ T5828] Bluetooth: hci4: command tx timeout
[  109.238606][ T5833] Bluetooth: hci3: command tx timeout
[  109.306014][ T5833] Bluetooth: hci4: command tx timeout
[  109.306055][ T5833] Bluetooth: hci5: command tx timeout
[  111.317310][ T5828] Bluetooth: hci3: command tx timeout
[  111.386155][ T5828] Bluetooth: hci5: command tx timeout
[  111.386196][ T5828] Bluetooth: hci4: command tx timeout
[  113.386024][ T5833] Bluetooth: hci3: command tx timeout
[  113.465962][ T5833] Bluetooth: hci4: command tx timeout
[  113.466003][ T5833] Bluetooth: hci5: command tx timeout
[  155.881050][ T5835] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  155.881714][ T5835] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  155.881957][ T5835] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  155.883674][ T5835] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  155.883986][ T5835] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  155.944535][ T5835] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  155.945351][ T5835] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  155.945868][ T5835] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  155.946778][ T5835] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  155.947089][ T5835] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  155.962683][ T5835] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  155.963342][ T5835] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  155.963616][ T5835] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  155.964074][ T5835] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  155.964617][ T5835] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  157.956557][ T5833] Bluetooth: hci7: command tx timeout
[  158.026107][ T5835] Bluetooth: hci6: command tx timeout
[  158.026578][ T5833] Bluetooth: hci8: command tx timeout
[  160.026035][ T5833] Bluetooth: hci7: command tx timeout
[  160.106113][ T5835] Bluetooth: hci6: command tx timeout
[  160.106231][ T5833] Bluetooth: hci8: command tx timeout
[  162.105940][ T5833] Bluetooth: hci7: command tx timeout
[  162.188894][ T5835] Bluetooth: hci6: command tx timeout
[  162.189070][ T5833] Bluetooth: hci8: command tx timeout
[  164.196065][ T5833] Bluetooth: hci7: command tx timeout
[  164.266123][ T5835] Bluetooth: hci6: command tx timeout
[  164.266180][ T5833] Bluetooth: hci8: command tx timeout
[  184.985733][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  184.985788][    C1] rcu: 	1-....: (10499 ticks this GP) idle=3ccc/1/0x4000000000000000 softirq=16335/16345 fqs=4692
[  184.986038][    C1] rcu: 	         hardirqs   softirqs   csw/system
[  184.986043][    C1] rcu: 	 number:   993737          0            0
[  184.986049][    C1] rcu: 	cputime:    25006      27462           92   ==> 52470(ms)
[  184.986055][    C1] rcu: 	(t=10500 jiffies g=8957 q=6430 ncpus=2)
[  184.986065][    C1] CPU: 1 UID: 0 PID: 6393 Comm: syz.0.157 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  184.986073][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  184.986078][    C1] RIP: 0010:rcu_read_unlock_special+0x87/0x4c0
[  184.986092][    C1] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 62 2c f8 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
[  184.986097][    C1] RSP: 0018:ffffc900001e05e0 EFLAGS: 00000206
[  184.986104][    C1] RAX: 58425e08fe9fd000 RBX: 1ffff9200003c0c4 RCX: 58425e08fe9fd000
[  184.986109][    C1] RDX: 0000000000000002 RSI: ffffffff8d998940 RDI: ffffffff8be29f40
[  184.986113][    C1] RBP: ffffc900001e06d8 R08: ffffffff8fa1e9f7 R09: 1ffffffff1f43d3e
[  184.986118][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d3f R12: ffffffff8e144400
[  184.986123][    C1] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000002
[  184.986127][    C1] FS:  00007f0c8564f6c0(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
[  184.986132][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  184.986137][    C1] CR2: 00007f327832afc8 CR3: 000000003a30a000 CR4: 00000000000006f0
[  184.986163][    C1] Call Trace:
[  184.986167][    C1]  <IRQ>
[  184.986170][    C1]  ? unwind_next_frame+0xa5/0x2390
[  184.986180][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  184.986190][    C1]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  184.986199][    C1]  ? lock_acquire+0x175/0x360
[  184.986207][    C1]  ? unwind_next_frame+0xa5/0x2390
[  184.986218][    C1]  __rcu_read_unlock+0x84/0xe0
[  184.986227][    C1]  ? unwind_next_frame+0xa5/0x2390
[  184.986234][    C1]  unwind_next_frame+0x19ae/0x2390
[  184.986243][    C1]  ? unwind_next_frame+0xa5/0x2390
[  184.986251][    C1]  ? kasan_save_track+0x3e/0x80
[  184.986259][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  184.986267][    C1]  arch_stack_walk+0x11c/0x150
[  184.986278][    C1]  ? kasan_save_free_info+0x46/0x50
[  184.986288][    C1]  stack_trace_save+0x9c/0xe0
[  184.986297][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  184.986310][    C1]  kasan_save_track+0x3e/0x80
[  184.986315][    C1]  ? kasan_save_track+0x3e/0x80
[  184.986343][    C1]  ? rcu_core+0xca8/0x1710
[  184.986350][    C1]  kasan_save_free_info+0x46/0x50
[  184.986365][    C1]  __kasan_slab_free+0x62/0x70
[  184.986371][    C1]  kmem_cache_free+0x18f/0x400
[  184.986379][    C1]  ? __pfx___d_free+0x10/0x10
[  184.986385][    C1]  ? rcu_core+0xc34/0x1710
[  184.986392][    C1]  rcu_core+0xca8/0x1710
[  184.986406][    C1]  ? __pfx_rcu_core+0x10/0x10
[  184.986415][    C1]  ? kvm_sched_clock_read+0x11/0x20
[  184.986425][    C1]  ? sched_clock_cpu+0x74/0x430
[  184.986432][    C1]  ? ktime_get+0x3e/0x1f0
[  184.986441][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  184.986449][    C1]  ? __pfx_sched_clock_cpu+0x10/0x10
[  184.986456][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  184.986471][    C1]  handle_softirqs+0x286/0x870
[  184.986480][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  184.986489][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  184.986499][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  184.986509][    C1]  __irq_exit_rcu+0xca/0x1f0
[  184.986516][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  184.986527][    C1]  irq_exit_rcu+0x9/0x30
[  184.986533][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  184.986541][    C1]  </IRQ>
[  184.986543][    C1]  <TASK>
[  184.986546][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  184.986553][    C1] RIP: 0010:its_return_thunk+0x0/0x10
[  184.986560][    C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc <c3> cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e9 cb da c1 f5 cc
[  184.986565][    C1] RSP: 0018:ffffc90007926970 EFLAGS: 00000297
[  184.986570][    C1] RAX: ffffffff81a24907 RBX: 0000000000000000 RCX: ffff888024789cc0
[  184.986575][    C1] RDX: 0000000000000002 RSI: 00000000ffffe000 RDI: 0000000000000000
[  184.986579][    C1] RBP: ffffffff8e01b0e0 R08: ffffffff8e01b0e7 R09: 1ffffffff1c0361c
[  184.986583][    C1] R10: dffffc0000000000 R11: fffffbfff1c0361d R12: 00000000ffffe000
[  184.986587][    C1] R13: 00000000ffffffff R14: 00000000ffffe000 R15: 80000000ffffe000
[  184.986595][    C1]  ? desc_read+0x157/0x3f0
[  184.986606][    C1]  desc_read+0x157/0x3f0
[  184.986616][    C1]  _prb_read_valid+0x26a/0xa90
[  184.986632][    C1]  ? __pfx__prb_read_valid+0x10/0x10
[  184.986643][    C1]  ? trace_call_bpf+0x5ba/0x850
[  184.986652][    C1]  prb_read_valid+0x3c/0x60
[  184.986660][    C1]  printk_get_next_message+0x15c/0x7b0
[  184.986669][    C1]  ? perf_trace_preemptirq_template+0x280/0x340
[  184.986680][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  184.986690][    C1]  ? __pfx_printk_get_next_message+0x10/0x10
[  184.986699][    C1]  ? __lock_acquire+0xab9/0xd20
[  184.986711][    C1]  ? console_flush_all+0x13a/0xc40
[  184.986721][    C1]  ? console_flush_all+0x476/0xc40
[  184.986732][    C1]  console_flush_all+0x4ca/0xc40
[  184.986740][    C1]  ? console_flush_all+0x861/0xc40
[  184.986748][    C1]  ? console_flush_all+0x13a/0xc40
[  184.986760][    C1]  ? __pfx_console_flush_all+0x10/0x10
[  184.986772][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  184.986783][    C1]  console_unlock+0xc4/0x270
[  184.986793][    C1]  ? __pfx_console_unlock+0x10/0x10
[  184.986802][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  184.986813][    C1]  vprintk_emit+0x5b7/0x7a0
[  184.986822][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  184.986828][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  184.986869][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  184.986885][    C1]  _printk+0xcf/0x120
[  184.986894][    C1]  ? __pfx____ratelimit+0x10/0x10
[  184.986904][    C1]  ? __pfx__printk+0x10/0x10
[  184.986914][    C1]  ? __nla_validate_parse+0x4e6/0x2d40
[  184.986927][    C1]  __nla_validate_parse+0x1719/0x2d40
[  184.986936][    C1]  ? irqentry_enter+0x3d/0x60
[  184.986951][    C1]  ? __pfx___nla_validate_parse+0x10/0x10
[  184.986959][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  184.986969][    C1]  ? __dev_queue_xmit+0x27e/0x3a70
[  184.986982][    C1]  ? __local_bh_enable_ip+0x135/0x1c0
[  184.986990][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  184.987000][    C1]  __nla_parse+0x40/0x60
[  184.987011][    C1]  inet_rtm_newaddr+0x16f/0x18b0
[  184.987021][    C1]  ? __lock_acquire+0xab9/0xd20
[  184.987030][    C1]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  184.987045][    C1]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  184.987053][    C1]  rtnetlink_rcv_msg+0x7cf/0xb70
[  184.987064][    C1]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  184.987073][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  184.987081][    C1]  ? ref_tracker_free+0x63a/0x7d0
[  184.987089][    C1]  ? __copy_skb_header+0xa7/0x550
[  184.987097][    C1]  ? __pfx_ref_tracker_free+0x10/0x10
[  184.987105][    C1]  ? __skb_clone+0x63/0x7a0
[  184.987116][    C1]  netlink_rcv_skb+0x208/0x470
[  184.987124][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  184.987134][    C1]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  184.987146][    C1]  ? netlink_deliver_tap+0x2e/0x1b0
[  184.987153][    C1]  ? netlink_deliver_tap+0x2e/0x1b0
[  184.987161][    C1]  netlink_unicast+0x75c/0x8e0
[  184.987175][    C1]  netlink_sendmsg+0x805/0xb30
[  184.987186][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  184.987194][    C1]  ? aa_sock_msg_perm+0x94/0x160
[  184.987204][    C1]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  184.987212][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  184.987219][    C1]  __sock_sendmsg+0x21c/0x270
[  184.987230][    C1]  ____sys_sendmsg+0x505/0x830
[  184.987240][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[  184.987251][    C1]  ? import_iovec+0x74/0xa0
[  184.987260][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  184.987269][    C1]  ? __pfx____sys_sendmsg+0x10/0x10
[  184.987292][    C1]  ? __fget_files+0x2a/0x420
[  184.987298][    C1]  ? __fget_files+0x3a0/0x420
[  184.987310][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  184.987316][    C1]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  184.987326][    C1]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  184.987341][    C1]  ? do_syscall_64+0xbe/0x3b0
[  184.987351][    C1]  do_syscall_64+0xfa/0x3b0
[  184.987364][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.987370][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  184.987379][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.987385][    C1] RIP: 0033:0x7f0c8478e9a9
[  184.987392][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  184.987397][    C1] RSP: 002b:00007f0c8564f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  184.987403][    C1] RAX: ffffffffffffffda RBX: 00007f0c849b5fa0 RCX: 00007f0c8478e9a9
[  184.987408][    C1] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000009
[  184.987411][    C1] RBP: 00007f0c84810d69 R08: 0000000000000000 R09: 0000000000000000
[  184.987415][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  184.987418][    C1] R13: 0000000000000000 R14: 00007f0c849b5fa0 R15: 00007fff24a563d8
[  184.987430][    C1]  </TASK>
[  214.276860][   T18] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 13423 jiffies s: 2625 root: 0x2/.
[  214.276904][   T18] rcu: blocking rcu_node structures (internal RCU debug):
[  214.276919][   T18] Sending NMI from CPU 0 to CPUs 1:
[  214.276997][    C1] NMI backtrace for cpu 1
[  214.277013][    C1] CPU: 1 UID: 0 PID: 6393 Comm: syz.0.157 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  214.277026][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  214.277033][    C1] RIP: 0010:native_apic_msr_write+0x39/0x50
[  214.277054][    C1] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 cc cc cc cc cc f3 0f 1e fa 89 f6 31 d2 e9 e2 db 86 03 66
[  214.277063][    C1] RSP: 0018:ffffc900001e0378 EFLAGS: 00000046
[  214.277074][    C1] RAX: 000000000000022a RBX: ffff888136623900 RCX: 0000000000000838
[  214.277083][    C1] RDX: 0000000000000000 RSI: 000000000000022a RDI: 0000000000000838
[  214.277090][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff81aec9fe
[  214.277097][    C1] R10: 0000000000000003 R11: ffffffff81702490 R12: 000000001000192a
[  214.277104][    C1] R13: dffffc0000000000 R14: 000000000000022a R15: 0000000000000020
[  214.277111][    C1] FS:  00007f0c8564f6c0(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
[  214.277121][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  214.277129][    C1] CR2: 00007f327832afc8 CR3: 000000003a30a000 CR4: 00000000000006f0
[  214.277164][    C1] Call Trace:
[  214.277171][    C1]  <IRQ>
[  214.277176][    C1]  lapic_next_event+0x11/0x20
[  214.277190][    C1]  clockevents_program_event+0x1cf/0x360
[  214.277210][    C1]  hrtimer_interrupt+0x620/0xaa0
[  214.277233][    C1]  __sysvec_apic_timer_interrupt+0x10b/0x410
[  214.277247][    C1]  sysvec_apic_timer_interrupt+0x52/0xc0
[  214.277263][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  214.277283][    C1] RIP: 0010:rcu_read_unlock_special+0x87/0x4c0
[  214.277300][    C1] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 62 2c f8 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
[  214.277308][    C1] RSP: 0018:ffffc900001e05e0 EFLAGS: 00000206
[  214.277318][    C1] RAX: 58425e08fe9fd000 RBX: 1ffff9200003c0c4 RCX: 58425e08fe9fd000
[  214.277326][    C1] RDX: 0000000000000002 RSI: ffffffff8d998940 RDI: ffffffff8be29f40
[  214.277334][    C1] RBP: ffffc900001e06d8 R08: ffffffff8fa1e9f7 R09: 1ffffffff1f43d3e
[  214.277341][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d3f R12: ffffffff8e144400
[  214.277349][    C1] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000002
[  214.277364][    C1]  ? unwind_next_frame+0xa5/0x2390
[  214.277376][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  214.277392][    C1]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  214.277408][    C1]  ? lock_acquire+0x175/0x360
[  214.277420][    C1]  ? unwind_next_frame+0xa5/0x2390
[  214.277435][    C1]  __rcu_read_unlock+0x84/0xe0
[  214.277451][    C1]  ? unwind_next_frame+0xa5/0x2390
[  214.277462][    C1]  unwind_next_frame+0x19ae/0x2390
[  214.277529][    C1]  ? unwind_next_frame+0xa5/0x2390
[  214.277543][    C1]  ? kasan_save_track+0x3e/0x80
[  214.277555][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  214.277569][    C1]  arch_stack_walk+0x11c/0x150
[  214.277582][    C1]  ? kasan_save_free_info+0x46/0x50
[  214.277596][    C1]  stack_trace_save+0x9c/0xe0
[  214.277608][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  214.277624][    C1]  kasan_save_track+0x3e/0x80
[  214.277634][    C1]  ? kasan_save_track+0x3e/0x80
[  214.277658][    C1]  ? rcu_core+0xca8/0x1710
[  214.277669][    C1]  kasan_save_free_info+0x46/0x50
[  214.277682][    C1]  __kasan_slab_free+0x62/0x70
[  214.277692][    C1]  kmem_cache_free+0x18f/0x400
[  214.277705][    C1]  ? __pfx___d_free+0x10/0x10
[  214.277714][    C1]  ? rcu_core+0xc34/0x1710
[  214.277725][    C1]  rcu_core+0xca8/0x1710
[  214.277742][    C1]  ? __pfx_rcu_core+0x10/0x10
[  214.277755][    C1]  ? kvm_sched_clock_read+0x11/0x20
[  214.277768][    C1]  ? sched_clock_cpu+0x74/0x430
[  214.277778][    C1]  ? ktime_get+0x3e/0x1f0
[  214.277791][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  214.277804][    C1]  ? __pfx_sched_clock_cpu+0x10/0x10
[  214.277814][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  214.277828][    C1]  handle_softirqs+0x286/0x870
[  214.277840][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  214.277852][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  214.277865][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  214.277880][    C1]  __irq_exit_rcu+0xca/0x1f0
[  214.277890][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  214.277902][    C1]  irq_exit_rcu+0x9/0x30
[  214.277909][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  214.277916][    C1]  </IRQ>
[  214.277919][    C1]  <TASK>
[  214.277921][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  214.277928][    C1] RIP: 0010:its_return_thunk+0x0/0x10
[  214.277935][    C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc <c3> cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e9 cb da c1 f5 cc
[  214.277940][    C1] RSP: 0018:ffffc90007926970 EFLAGS: 00000297
[  214.277947][    C1] RAX: ffffffff81a24907 RBX: 0000000000000000 RCX: ffff888024789cc0
[  214.277951][    C1] RDX: 0000000000000002 RSI: 00000000ffffe000 RDI: 0000000000000000
[  214.277955][    C1] RBP: ffffffff8e01b0e0 R08: ffffffff8e01b0e7 R09: 1ffffffff1c0361c
[  214.277960][    C1] R10: dffffc0000000000 R11: fffffbfff1c0361d R12: 00000000ffffe000
[  214.277964][    C1] R13: 00000000ffffffff R14: 00000000ffffe000 R15: 80000000ffffe000
[  214.277970][    C1]  ? desc_read+0x157/0x3f0
[  214.277979][    C1]  desc_read+0x157/0x3f0
[  214.277987][    C1]  _prb_read_valid+0x26a/0xa90
[  214.277997][    C1]  ? __pfx__prb_read_valid+0x10/0x10
[  214.278005][    C1]  ? trace_call_bpf+0x5ba/0x850
[  214.278013][    C1]  prb_read_valid+0x3c/0x60
[  214.278020][    C1]  printk_get_next_message+0x15c/0x7b0
[  214.278029][    C1]  ? perf_trace_preemptirq_template+0x280/0x340
[  214.278039][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  214.278048][    C1]  ? __pfx_printk_get_next_message+0x10/0x10
[  214.278056][    C1]  ? __lock_acquire+0xab9/0xd20
[  214.278064][    C1]  ? console_flush_all+0x13a/0xc40
[  214.278073][    C1]  ? console_flush_all+0x476/0xc40
[  214.278082][    C1]  console_flush_all+0x4ca/0xc40
[  214.278089][    C1]  ? console_flush_all+0x861/0xc40
[  214.278097][    C1]  ? console_flush_all+0x13a/0xc40
[  214.278106][    C1]  ? __pfx_console_flush_all+0x10/0x10
[  214.278116][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  214.278125][    C1]  console_unlock+0xc4/0x270
[  214.278133][    C1]  ? __pfx_console_unlock+0x10/0x10
[  214.278141][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  214.278150][    C1]  vprintk_emit+0x5b7/0x7a0
[  214.278158][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  214.278164][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  214.278175][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  214.278185][    C1]  _printk+0xcf/0x120
[  214.278193][    C1]  ? __pfx____ratelimit+0x10/0x10
[  214.278202][    C1]  ? __pfx__printk+0x10/0x10
[  214.278210][    C1]  ? __nla_validate_parse+0x4e6/0x2d40
[  214.278221][    C1]  __nla_validate_parse+0x1719/0x2d40
[  214.278229][    C1]  ? irqentry_enter+0x3d/0x60
[  214.278240][    C1]  ? __pfx___nla_validate_parse+0x10/0x10
[  214.278248][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  214.278256][    C1]  ? __dev_queue_xmit+0x27e/0x3a70
[  214.278266][    C1]  ? __local_bh_enable_ip+0x135/0x1c0
[  214.278281][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  214.278289][    C1]  __nla_parse+0x40/0x60
[  214.278298][    C1]  inet_rtm_newaddr+0x16f/0x18b0
[  214.278307][    C1]  ? __lock_acquire+0xab9/0xd20
[  214.278314][    C1]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  214.278324][    C1]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  214.278331][    C1]  rtnetlink_rcv_msg+0x7cf/0xb70
[  214.278342][    C1]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  214.278350][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  214.278358][    C1]  ? ref_tracker_free+0x63a/0x7d0
[  214.278367][    C1]  ? __copy_skb_header+0xa7/0x550
[  214.278379][    C1]  ? __pfx_ref_tracker_free+0x10/0x10
[  214.278390][    C1]  ? __skb_clone+0x63/0x7a0
[  214.278402][    C1]  netlink_rcv_skb+0x208/0x470
[  214.278413][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  214.278427][    C1]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  214.278440][    C1]  ? netlink_deliver_tap+0x2e/0x1b0
[  214.278449][    C1]  ? netlink_deliver_tap+0x2e/0x1b0
[  214.278461][    C1]  netlink_unicast+0x75c/0x8e0
[  214.278504][    C1]  netlink_sendmsg+0x805/0xb30
[  214.278520][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  214.278532][    C1]  ? aa_sock_msg_perm+0x94/0x160
[  214.278546][    C1]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  214.278560][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  214.278570][    C1]  __sock_sendmsg+0x21c/0x270
[  214.278586][    C1]  ____sys_sendmsg+0x505/0x830
[  214.278600][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[  214.278615][    C1]  ? import_iovec+0x74/0xa0
[  214.278628][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  214.278640][    C1]  ? __pfx____sys_sendmsg+0x10/0x10
[  214.278664][    C1]  ? __fget_files+0x2a/0x420
[  214.278674][    C1]  ? __fget_files+0x3a0/0x420
[  214.278688][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  214.278699][    C1]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  214.278713][    C1]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  214.278729][    C1]  ? do_syscall_64+0xbe/0x3b0
[  214.278745][    C1]  do_syscall_64+0xfa/0x3b0
[  214.278759][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.278769][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  214.278781][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.278791][    C1] RIP: 0033:0x7f0c8478e9a9
[  214.278802][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  214.278811][    C1] RSP: 002b:00007f0c8564f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  214.278822][    C1] RAX: ffffffffffffffda RBX: 00007f0c849b5fa0 RCX: 00007f0c8478e9a9
[  214.278829][    C1] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000009
[  214.278836][    C1] RBP: 00007f0c84810d69 R08: 0000000000000000 R09: 0000000000000000
[  214.278842][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  214.278847][    C1] R13: 0000000000000000 R14: 00007f0c849b5fa0 R15: 00007fff24a563d8
[  214.278859][    C1]  </TASK>
[  216.150347][ T5835] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  216.151120][ T5835] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  216.151799][ T5835] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  216.152711][ T5835] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  216.153284][ T5835] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  216.486434][ T5835] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  216.496036][ T5835] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  216.497019][ T5835] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  216.497982][ T5835] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  216.498890][ T5835] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  216.644492][ T5833] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  216.645148][ T5833] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  216.645395][ T5833] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  216.647013][ T5833] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  216.647495][ T5833] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  218.187417][ T5835] Bluetooth: hci9: command tx timeout
[  218.381562][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 138535414112 wd_nsec: 138535417241
[  218.505969][ T5835] Bluetooth: hci10: command tx timeout
[  218.665959][ T5835] Bluetooth: hci11: command tx timeout
[  220.266031][ T5835] Bluetooth: hci9: command tx timeout
[  220.586041][ T5835] Bluetooth: hci10: command tx timeout
[  220.756788][ T5835] Bluetooth: hci11: command tx timeout
[  222.345938][ T5835] Bluetooth: hci9: command tx timeout
[  222.665997][ T5835] Bluetooth: hci10: command tx timeout
[  222.827565][ T5835] Bluetooth: hci11: command tx timeout
[  224.437328][ T5835] Bluetooth: hci9: command tx timeout
[  224.745932][ T5835] Bluetooth: hci10: command tx timeout
[  224.907316][ T5835] Bluetooth: hci11: command tx timeout
[  231.724587][ T5833] Bluetooth: hci4: command 0x0406 tx timeout
[  231.724635][ T5833] Bluetooth: hci5: command 0x0406 tx timeout
[  231.724665][ T5833] Bluetooth: hci3: command 0x0406 tx timeout
[  232.826064][   T34] INFO: task pool_workqueue_:3 blocked for more than 143 seconds.
[  232.826090][   T34]       Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0
[  232.826101][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  232.826111][   T34] task:pool_workqueue_ state:D stack:26648 pid:3     tgid:3     ppid:2      task_flags:0x208040 flags:0x00004000
[  232.826160][   T34] Call Trace:
[  232.826169][   T34]  <TASK>
[  232.826180][   T34]  __schedule+0x16f5/0x4d00
[  232.826212][   T34]  ? __lock_acquire+0xab9/0xd20
[  232.826232][   T34]  ? schedule+0x165/0x360
[  232.826277][   T34]  ? __pfx___schedule+0x10/0x10
[  232.826309][   T34]  ? schedule+0x91/0x360
[  232.826329][   T34]  schedule+0x165/0x360
[  232.826348][   T34]  schedule_preempt_disabled+0x13/0x30
[  232.826366][   T34]  __mutex_lock+0x724/0xe80
[  232.826386][   T34]  ? __mutex_lock+0x51b/0xe80
[  232.826409][   T34]  ? synchronize_rcu_expedited+0x3b9/0x730
[  232.826431][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  232.826460][   T34]  ? do_raw_spin_unlock+0x4d/0x240
[  232.826483][   T34]  synchronize_rcu_expedited+0x3b9/0x730
[  232.826504][   T34]  ? __pfx_synchronize_rcu_expedited+0x10/0x10
[  232.826530][   T34]  ? perf_trace_preemptirq_template+0x280/0x340
[  232.826556][   T34]  ? __pfx___might_resched+0x10/0x10
[  232.826572][   T34]  ? trace_irq_disable+0x37/0x110
[  232.826592][   T34]  ? preempt_schedule_irq+0xde/0x150
[  232.826611][   T34]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  232.826636][   T34]  synchronize_rcu+0x11a/0x310
[  232.826653][   T34]  ? __pfx_synchronize_rcu+0x10/0x10
[  232.826675][   T34]  ? __is_module_percpu_address+0x28/0x3f0
[  232.826698][   T34]  lockdep_unregister_key+0x29b/0x310
[  232.826719][   T34]  pwq_release_workfn+0x6d5/0x870
[  232.826744][   T34]  kthread_worker_fn+0x507/0xb60
[  232.826767][   T34]  ? kthread_worker_fn+0xe4/0xb60
[  232.826789][   T34]  ? __pfx_pwq_release_workfn+0x10/0x10
[  232.826809][   T34]  kthread+0x711/0x8a0
[  232.826831][   T34]  ? __pfx_kthread_worker_fn+0x10/0x10
[  232.826851][   T34]  ? __pfx_kthread+0x10/0x10
[  232.826871][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  232.826888][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  232.826906][   T34]  ? __pfx_kthread+0x10/0x10
[  232.826926][   T34]  ret_from_fork+0x3fc/0x770
[  232.826946][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  232.826966][   T34]  ? __switch_to_asm+0x39/0x70
[  232.826985][   T34]  ? __switch_to_asm+0x33/0x70
[  232.827003][   T34]  ? __pfx_kthread+0x10/0x10
[  232.827023][   T34]  ret_from_fork_asm+0x1a/0x30
[  232.827053][   T34]  </TASK>
[  232.827063][   T34] INFO: task kworker/u8:1:13 blocked for more than 143 seconds.
[  232.827074][   T34]       Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0
[  232.827084][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  232.827092][   T34] task:kworker/u8:1    state:D stack:24392 pid:13    tgid:13    ppid:2      task_flags:0x4208060 flags:0x00004000
[  232.827139][   T34] Workqueue: netns cleanup_net
[  232.827157][   T34] Call Trace:
[  232.827166][   T34]  <TASK>
[  232.827176][   T34]  __schedule+0x16f5/0x4d00
[  232.827204][   T34]  ? do_raw_spin_lock+0x121/0x290
[  232.827226][   T34]  ? schedule+0x165/0x360
[  232.827244][   T34]  ? __lock_acquire+0xab9/0xd20
[  232.827286][   T34]  ? __pfx___schedule+0x10/0x10
[  232.827316][   T34]  ? schedule+0x91/0x360
[  232.827336][   T34]  schedule+0x165/0x360
[  232.827356][   T34]  synchronize_rcu_expedited+0x583/0x730
[  232.827377][   T34]  ? __pfx_synchronize_rcu_expedited+0x10/0x10
[  232.827406][   T34]  ? __pfx_wait_rcu_exp_gp+0x10/0x10
[  232.827423][   T34]  ? __pfx___might_resched+0x10/0x10
[  232.827442][   T34]  ? __pfx_autoremove_wake_function+0x10/0x10
[  232.827465][   T34]  ? unregister_netdevice_many_notify+0xce9/0x2320
[  232.827486][   T34]  ? kfree+0x23e/0x440
[  232.827506][   T34]  unregister_netdevice_many_notify+0xd76/0x2320
[  232.827535][   T34]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  232.827563][   T34]  ? unregister_netdevice_queue+0x1b3/0x380
[  232.827593][   T34]  default_device_exit_batch+0x819/0x890
[  232.827614][   T34]  ? __pfx___might_resched+0x10/0x10
[  232.827632][   T34]  ? __pfx_default_device_exit_batch+0x10/0x10
[  232.827646][   T34]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[  232.827666][   T34]  ? net_generic+0x1e/0x240
[  232.827692][   T34]  ? __pfx_default_device_exit_batch+0x10/0x10
[  232.827705][   T34]  ops_undo_list+0x525/0x990
[  232.827726][   T34]  ? __pfx_ops_undo_list+0x10/0x10
[  232.827750][   T34]  cleanup_net+0x4c5/0x800
[  232.827768][   T34]  ? __pfx_cleanup_net+0x10/0x10
[  232.827785][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  232.827803][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  232.827817][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  232.827837][   T34]  process_scheduled_works+0xae1/0x17b0
[  232.827873][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  232.827902][   T34]  worker_thread+0x8a0/0xda0
[  232.827939][   T34]  kthread+0x711/0x8a0
[  232.827961][   T34]  ? __pfx_worker_thread+0x10/0x10
[  232.827978][   T34]  ? __pfx_kthread+0x10/0x10
[  232.827998][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  232.828016][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  232.828033][   T34]  ? __pfx_kthread+0x10/0x10
[  232.828053][   T34]  ret_from_fork+0x3fc/0x770
[  232.828071][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  232.828092][   T34]  ? __switch_to_asm+0x39/0x70
[  232.828110][   T34]  ? __switch_to_asm+0x33/0x70
[  232.828133][   T34]  ? __pfx_kthread+0x10/0x10
[  232.828153][   T34]  ret_from_fork_asm+0x1a/0x30
[  232.828183][   T34]  </TASK>
[  232.828195][   T34] INFO: task rcu_tasks_trace:31 blocked for more than 143 seconds.
[  232.828205][   T34]       Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0
[  232.828216][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  232.828224][   T34] task:rcu_tasks_trace state:D stack:26536 pid:31    tgid:31    ppid:2      task_flags:0x208040 flags:0x00004000
[  232.828291][   T34] Call Trace:
[  232.828298][   T34]  <TASK>
[  232.828309][   T34]  __schedule+0x16f5/0x4d00
[  232.828336][   T34]  ? do_raw_spin_lock+0x121/0x290
[  232.828357][   T34]  ? schedule+0x165/0x360
[  232.828376][   T34]  ? __lock_acquire+0xab9/0xd20
[  232.828391][   T34]  ? __pfx___schedule+0x10/0x10
[  232.828421][   T34]  ? schedule+0x91/0x360
[  232.828441][   T34]  schedule+0x165/0x360
[  232.828461][   T34]  synchronize_rcu_expedited+0x5f5/0x730
[  232.828482][   T34]  ? __pfx_synchronize_rcu_expedited+0x10/0x10
[  232.828501][   T34]  ? __pfx_autoremove_wake_function+0x10/0x10
[  232.828534][   T34]  ? __pfx___might_resched+0x10/0x10
[  232.828552][   T34]  ? rcu_tasks_trace_pregp_step+0xe2a/0xe70
[  232.828582][   T34]  synchronize_rcu+0x11a/0x310
[  232.828602][   T34]  ? __pfx_synchronize_rcu+0x10/0x10
[  232.828619][   T34]  ? __pfx_rcu_tasks_trace_pregp_step+0x10/0x10
[  232.828639][   T34]  ? rcu_is_watching+0x15/0xb0
[  232.828658][   T34]  ? trace_contention_end+0x39/0x120
[  232.828676][   T34]  ? __mutex_lock+0x330/0xe80
[  232.828697][   T34]  rcu_tasks_wait_gp+0x490/0xac0
[  232.828725][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  232.828744][   T34]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  232.828762][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  232.828779][   T34]  ? __pfx_rcu_tasks_wait_gp+0x10/0x10
[  232.828801][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  232.828826][   T34]  rcu_tasks_one_gp+0xc19/0xdf0
[  232.828855][   T34]  ? rcu_tasks_one_gp+0xe9/0xdf0
[  232.828883][   T34]  rcu_tasks_kthread+0x195/0x1c0
[  232.828907][   T34]  kthread+0x711/0x8a0
[  232.828930][   T34]  ? __pfx_rcu_tasks_kthread+0x10/0x10
[  232.828950][   T34]  ? __pfx_kthread+0x10/0x10
[  232.828972][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  232.828989][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  232.829005][   T34]  ? __pfx_kthread+0x10/0x10
[  232.829026][   T34]  ret_from_fork+0x3fc/0x770
[  232.829044][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  232.829063][   T34]  ? __switch_to_asm+0x39/0x70
[  232.829084][   T34]  ? __switch_to_asm+0x33/0x70
[  232.829102][   T34]  ? __pfx_kthread+0x10/0x10
[  232.829121][   T34]  ret_from_fork_asm+0x1a/0x30
[  232.829157][   T34]  </TASK>
[  232.829240][   T34] INFO: task syz.0.157:6392 blocked for more than 143 seconds.
[  232.829252][   T34]       Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0
[  232.829287][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  232.829297][   T34] task:syz.0.157       state:D stack:25096 pid:6392  tgid:6392  ppid:5834   task_flags:0x400040 flags:0x00004004
[  232.829336][   T34] Call Trace:
[  232.829343][   T34]  <TASK>
[  232.829354][   T34]  __schedule+0x16f5/0x4d00
[  232.829380][   T34]  ? __lock_acquire+0xab9/0xd20
[  232.829398][   T34]  ? schedule+0x165/0x360
[  232.829419][   T34]  ? __pfx___schedule+0x10/0x10
[  232.829447][   T34]  ? schedule+0x91/0x360
[  232.829468][   T34]  schedule+0x165/0x360
[  232.829487][   T34]  schedule_preempt_disabled+0x13/0x30
[  232.829505][   T34]  __mutex_lock+0x724/0xe80
[  232.829524][   T34]  ? __mutex_lock+0x51b/0xe80
[  232.829548][   T34]  ? perf_trace_destroy+0x2e/0x150
[  232.829566][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  232.829589][   T34]  ? security_perf_event_free+0x40/0x70
[  232.829608][   T34]  ? rcu_is_watching+0x15/0xb0
[  232.829627][   T34]  ? rcu_is_watching+0x15/0xb0
[  232.829644][   T34]  ? __pfx_tp_perf_event_destroy+0x10/0x10
[  232.829663][   T34]  perf_trace_destroy+0x2e/0x150
[  232.829681][   T34]  ? __pfx_tp_perf_event_destroy+0x10/0x10
[  232.829698][   T34]  __free_event+0x316/0x7b0
[  232.829716][   T34]  ? __pfx_perf_release+0x10/0x10
[  232.829736][   T34]  perf_event_release_kernel+0x45b/0x510
[  232.829753][   T34]  ? __pfx_perf_release+0x10/0x10
[  232.829773][   T34]  perf_release+0x38/0x50
[  232.829792][   T34]  __fput+0x44c/0xa70
[  232.829820][   T34]  task_work_run+0x1d4/0x260
[  232.829844][   T34]  ? __pfx_task_work_run+0x10/0x10
[  232.829869][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  232.829888][   T34]  exit_to_user_mode_loop+0xec/0x110
[  232.829905][   T34]  do_syscall_64+0x2bd/0x3b0
[  232.829924][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  232.829942][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.829957][   T34]  ? exc_page_fault+0x9f/0xf0
[  232.829976][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.829993][   T34] RIP: 0033:0x7f0c8478e9a9
[  232.830007][   T34] RSP: 002b:00007fff24a56538 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  232.830025][   T34] RAX: 0000000000000000 RBX: 00007f0c849b7ba0 RCX: 00007f0c8478e9a9
[  232.830038][   T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  232.830048][   T34] RBP: 00007f0c849b7ba0 R08: 0000000000000184 R09: 0000001624a5682f
[  232.830060][   T34] R10: 00007f0c849b7ac0 R11: 0000000000000246 R12: 0000000000013afe
[  232.830071][   T34] R13: 00007f0c849b6080 R14: ffffffffffffffff R15: 00007fff24a56650
[  232.830095][   T34]  </TASK>
[  232.830104][   T34] INFO: task syz.2.159:6406 blocked for more than 143 seconds.
[  232.830116][   T34]       Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0
[  232.830132][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  232.830140][   T34] task:syz.2.159       state:D stack:28352 pid:6406  tgid:6399  ppid:5829   task_flags:0x400140 flags:0x00004004
[  232.830182][   T34] Call Trace:
[  232.830188][   T34]  <TASK>
[  232.830200][   T34]  __schedule+0x16f5/0x4d00
[  232.830227][   T34]  ? __lock_acquire+0xab9/0xd20
[  232.830244][   T34]  ? schedule+0x165/0x360
[  232.830290][   T34]  ? __pfx___schedule+0x10/0x10
[  232.830320][   T34]  ? schedule+0x91/0x360
[  232.830339][   T34]  schedule+0x165/0x360
[  232.830360][   T34]  schedule_preempt_disabled+0x13/0x30
[  232.830378][   T34]  __mutex_lock+0x724/0xe80
[  232.830398][   T34]  ? __mutex_lock+0x51b/0xe80
[  232.830421][   T34]  ? dev_ioctl+0x7a4/0x1150
[  232.830445][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  232.830471][   T34]  ? dev_load+0x21/0x1f0
[  232.830493][   T34]  ? dev_load+0x21/0x1f0
[  232.830515][   T34]  dev_ioctl+0x7a4/0x1150
[  232.830539][   T34]  sock_do_ioctl+0x22c/0x300
[  232.830562][   T34]  ? __pfx_sock_do_ioctl+0x10/0x10
[  232.830580][   T34]  ? __lock_acquire+0xab9/0xd20
[  232.830605][   T34]  sock_ioctl+0x576/0x790
[  232.830627][   T34]  ? __pfx_sock_ioctl+0x10/0x10
[  232.830645][   T34]  ? __fget_files+0x2a/0x420
[  232.830663][   T34]  ? __fget_files+0x3a0/0x420
[  232.830679][   T34]  ? __fget_files+0x2a/0x420
[  232.830697][   T34]  ? bpf_lsm_file_ioctl+0x9/0x20
[  232.830718][   T34]  ? __pfx_sock_ioctl+0x10/0x10
[  232.830737][   T34]  __se_sys_ioctl+0xfc/0x170
[  232.830761][   T34]  do_syscall_64+0xfa/0x3b0
[  232.830779][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  232.830798][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.830811][   T34]  ? exc_page_fault+0x9f/0xf0
[  232.830832][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.830848][   T34] RIP: 0033:0x7f653d38e9a9
[  232.830860][   T34] RSP: 002b:00007f653e121038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  232.830878][   T34] RAX: ffffffffffffffda RBX: 00007f653d5b6240 RCX: 00007f653d38e9a9
[  232.830889][   T34] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000008
[  232.830900][   T34] RBP: 00007f653d410d69 R08: 0000000000000000 R09: 0000000000000000
[  232.830911][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  232.830920][   T34] R13: 0000000000000000 R14: 00007f653d5b6240 R15: 00007fffc8550fc8
[  232.830943][   T34]  </TASK>
[  232.830951][   T34] INFO: task syz.2.159:6407 blocked for more than 143 seconds.
[  232.830963][   T34]       Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0
[  232.830972][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  232.830980][   T34] task:syz.2.159       state:D stack:28656 pid:6407  tgid:6399  ppid:5829   task_flags:0x400140 flags:0x00004004
[  232.831022][   T34] Call Trace:
[  232.831028][   T34]  <TASK>
[  232.831039][   T34]  __schedule+0x16f5/0x4d00
[  232.831066][   T34]  ? __lock_acquire+0xab9/0xd20
[  232.831084][   T34]  ? schedule+0x165/0x360
[  232.831105][   T34]  ? __pfx___schedule+0x10/0x10
[  232.831141][   T34]  ? schedule+0x91/0x360
[  232.831163][   T34]  schedule+0x165/0x360
[  232.831182][   T34]  schedule_preempt_disabled+0x13/0x30
[  232.831198][   T34]  __mutex_lock+0x724/0xe80
[  232.831220][   T34]  ? __mutex_lock+0x51b/0xe80
[  232.831243][   T34]  ? dev_ioctl+0x7a4/0x1150
[  232.831314][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  232.831363][   T34]  ? dev_load+0x21/0x1f0
[  232.831384][   T34]  ? dev_load+0x21/0x1f0
[  232.831407][   T34]  dev_ioctl+0x7a4/0x1150
[  232.831432][   T34]  sock_do_ioctl+0x22c/0x300
[  232.831452][   T34]  ? __pfx_sock_do_ioctl+0x10/0x10
[  232.831471][   T34]  ? __lock_acquire+0xab9/0xd20
[  232.831497][   T34]  sock_ioctl+0x576/0x790
[  232.831519][   T34]  ? __pfx_sock_ioctl+0x10/0x10
[  232.831538][   T34]  ? __fget_files+0x2a/0x420
[  232.831553][   T34]  ? __fget_files+0x3a0/0x420
[  232.831570][   T34]  ? __fget_files+0x2a/0x420
[  232.831590][   T34]  ? bpf_lsm_file_ioctl+0x9/0x20
[  232.831610][   T34]  ? __pfx_sock_ioctl+0x10/0x10
[  232.831629][   T34]  __se_sys_ioctl+0xfc/0x170
[  232.831651][   T34]  do_syscall_64+0xfa/0x3b0
[  232.831669][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  232.831688][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.831702][   T34]  ? exc_page_fault+0x9f/0xf0
[  232.831723][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.831736][   T34] RIP: 0033:0x7f653d38e9a9
[  232.831750][   T34] RSP: 002b:00007f653a9f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  232.831781][   T34] RAX: ffffffffffffffda RBX: 00007f653d5b6320 RCX: 00007f653d38e9a9
[  232.831793][   T34] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000006
[  232.831803][   T34] RBP: 00007f653d410d69 R08: 0000000000000000 R09: 0000000000000000
[  232.831812][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  232.831823][   T34] R13: 0000000000000000 R14: 00007f653d5b6320 R15: 00007fffc8550fc8
[  232.831846][   T34]  </TASK>
[  232.831855][   T34] INFO: task syz.1.160:6401 blocked for more than 143 seconds.
[  232.831864][   T34]       Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0
[  232.831874][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  232.831883][   T34] task:syz.1.160       state:D stack:26776 pid:6401  tgid:6401  ppid:5825   task_flags:0x400040 flags:0x00004004
[  232.831922][   T34] Call Trace:
[  232.831929][   T34]  <TASK>
[  232.831941][   T34]  __schedule+0x16f5/0x4d00
[  232.831962][   T34]  ? trace_call_bpf+0xb7/0x850
[  232.831982][   T34]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  232.832002][   T34]  ? schedule+0x165/0x360
[  232.832021][   T34]  ? __lock_acquire+0xab9/0xd20
[  232.832036][   T34]  ? __pfx___schedule+0x10/0x10
[  232.832065][   T34]  ? schedule+0x91/0x360
[  232.832086][   T34]  schedule+0x165/0x360
[  232.832105][   T34]  schedule_timeout+0x9a/0x270
[  232.832122][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  232.832153][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  232.832172][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  232.832192][   T34]  __wait_for_common+0x3da/0x710
[  232.832222][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  232.832238][   T34]  ? __pfx___wait_for_common+0x10/0x10
[  232.832285][   T34]  ? __raw_spin_lock_init+0x45/0x100
[  232.832307][   T34]  ? __init_swait_queue_head+0xa9/0x150
[  232.832329][   T34]  wait_for_completion_state+0x1c/0x40
[  232.832349][   T34]  __wait_rcu_gp+0x24c/0x280
[  232.832372][   T34]  synchronize_rcu_tasks_generic+0x132/0x220
[  232.832392][   T34]  ? __pfx_synchronize_rcu_tasks_generic+0x10/0x10
[  232.832410][   T34]  ? rcu_read_lock_any_held+0xb3/0x120
[  232.832428][   T34]  ? __pfx_call_rcu_tasks_trace+0x10/0x10
[  232.832447][   T34]  ? __pfx_wakeme_after_rcu+0x10/0x10
[  232.832482][   T34]  perf_trace_event_unreg+0xbe/0x1b0
[  232.832499][   T34]  perf_trace_destroy+0xa4/0x150
[  232.832517][   T34]  ? __pfx_tp_perf_event_destroy+0x10/0x10
[  232.832535][   T34]  __free_event+0x316/0x7b0
[  232.832552][   T34]  ? __pfx_perf_release+0x10/0x10
[  232.832572][   T34]  perf_event_release_kernel+0x45b/0x510
[  232.832590][   T34]  ? __pfx_perf_release+0x10/0x10
[  232.832610][   T34]  perf_release+0x38/0x50
[  232.832629][   T34]  __fput+0x44c/0xa70
[  232.832656][   T34]  task_work_run+0x1d4/0x260
[  232.832681][   T34]  ? __pfx_task_work_run+0x10/0x10
[  232.832708][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  232.832726][   T34]  exit_to_user_mode_loop+0xec/0x110
[  232.832743][   T34]  do_syscall_64+0x2bd/0x3b0
[  232.832763][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  232.832781][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.832796][   T34]  ? exc_page_fault+0x9f/0xf0
[  232.832816][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.832832][   T34] RIP: 0033:0x7f327758e9a9
[  232.832844][   T34] RSP: 002b:00007ffd0b816d88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  232.832863][   T34] RAX: 0000000000000000 RBX: 000000000001383e RCX: 00007f327758e9a9
[  232.832873][   T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  232.832884][   T34] RBP: 00007f32777b7ba0 R08: 0000000000000001 R09: 0000000c0b81707f
[  232.832896][   T34] R10: 00007f3277400000 R11: 0000000000000246 R12: 00007f32777b5fac
[  232.832906][   T34] R13: 00007f32777b5fa0 R14: ffffffffffffffff R15: 00007ffd0b816ea0
[  232.832930][   T34]  </TASK>
[  232.832946][   T34] 
[  232.832946][   T34] Showing all locks held in the system:
[  232.832957][   T34] 1 lock held by pool_workqueue_/3:
[  232.832967][   T34]  #0: ffffffff8e144bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  232.833022][   T34] 5 locks held by kworker/u8:1/13:
[  232.833033][   T34]  #0: ffff88801b2f6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  232.833083][   T34]  #1: ffffc90000107bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  232.833138][   T34]  #2: ffffffff8f5101d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  232.833187][   T34]  #3: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xdc/0x890
[  232.833235][   T34]  #4: ffffffff8e144bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  232.833314][   T34] 3 locks held by kworker/u9:0/26:
[  232.833324][   T34]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  232.833375][   T34]  #1: ffffc900001efbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  232.833425][   T34]  #2: ffff88803a488768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x460
[  232.833478][   T34] 1 lock held by rcu_tasks_trace/31:
[  232.833490][   T34]  #0: ffffffff8e13fe10 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{4:4}, at: rcu_tasks_one_gp+0xaf9/0xdf0
[  232.833543][   T34] 1 lock held by khungtaskd/34:
[  232.833553][   T34]  #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  232.833607][   T34] 5 locks held by kworker/u11:0/54:
[  232.833616][   T34]  #0: ffff888024889148 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  232.833667][   T34]  #1: ffffc900007cfbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  232.833718][   T34]  #2: ffff88811acc4dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  232.833770][   T34]  #3: ffff88811acc40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  232.833823][   T34]  #4: ffffffff8f685008 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  232.833872][   T34] 2 locks held by kworker/0:1H/98:
[  232.833882][   T34]  #0: ffff88801bab6148 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  232.833932][   T34]  #1: ffffc90001c7fbc0 ((work_completion)(&q->timeout_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  232.834014][   T34] 3 locks held by kworker/1:2/790:
[  232.834024][   T34]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  232.834072][   T34]  #1: ffffc9000470fbc0 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  232.834122][   T34]  #2: ffffffff8dfe4850 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_lock_wait+0xff/0x210
[  232.834196][   T34] 2 locks held by getty/5659:
[  232.834206][   T34]  #0: ffff8880274aa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  232.834279][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  232.834332][   T34] 5 locks held by kworker/u11:2/5828:
[  232.834344][   T34]  #0: ffff88803db1d148 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  232.834392][   T34]  #1: ffffc9000332fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  232.834442][   T34]  #2: ffff8880285c4dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  232.834490][   T34]  #3: ffff8880285c40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  232.834544][   T34]  #4: ffffffff8f685008 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  232.834593][   T34] 6 locks held by kworker/u11:5/5835:
[  232.834602][   T34]  #0: ffff888028de6148 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  232.834652][   T34]  #1: ffffc900040efbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  232.834700][   T34]  #2: ffff888021bccdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  232.834750][   T34]  #3: ffff888021bcc0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  232.834804][   T34]  #4: ffffffff8f685008 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  232.834851][   T34]  #5: ffff88802488ab38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  232.834908][   T34] 3 locks held by kworker/u8:3/5859:
[  232.834917][   T34]  #0: ffff888023166948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  232.834968][   T34]  #1: ffffc9000420fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  232.835019][   T34]  #2: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  232.835070][   T34] 3 locks held by kworker/0:4/5894:
[  232.835080][   T34]  #0: ffff88801a481d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  232.835136][   T34]  #1: ffffc900043cfbc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  232.835184][   T34]  #2: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf00
[  232.835235][   T34] 2 locks held by kworker/0:5/5954:
[  232.835244][   T34]  #0: ffff88801a482148 ((wq_completion)events_freezable_pwr_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  232.835318][   T34]  #1: ffffc900043dfbc0 ((work_completion)(&(&ev->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  232.835369][   T34] 1 lock held by syz.0.157/6392:
[  232.835379][   T34]  #0: ffffffff8e1a2ca8 (event_mutex){+.+.}-{4:4}, at: perf_trace_destroy+0x2e/0x150
[  232.835428][   T34] 3 locks held by syz.0.157/6393:
[  232.835439][   T34] 1 lock held by syz.2.159/6406:
[  232.835449][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150
[  232.835502][   T34] 1 lock held by syz.2.159/6407:
[  232.835512][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150
[  232.835565][   T34] 1 lock held by syz.1.160/6401:
[  232.835575][   T34]  #0: ffffffff8e1a2ca8 (event_mutex){+.+.}-{4:4}, at: perf_trace_destroy+0x2e/0x150
[  232.835623][   T34] 1 lock held by dhcpcd/6411:
[  232.835633][   T34]  #0: ffff888020a7c258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  232.835684][   T34] 1 lock held by dhcpcd/6412:
[  232.835694][   T34]  #0: ffff88803c80a258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  232.845199][   T34] 1 lock held by dhcpcd/6413:
[  232.845213][   T34]  #0: ffff88803c53e258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  232.845295][   T34] 1 lock held by dhcpcd/6414:
[  232.845305][   T34]  #0: ffff88803cabe258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  232.845352][   T34] 1 lock held by dhcpcd/6415:
[  232.845361][   T34]  #0: ffff88803caba258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  232.845411][   T34] 1 lock held by dhcpcd/6416:
[  232.845419][   T34]  #0: ffff88802829a258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  232.845468][   T34] 1 lock held by syz-executor/6417:
[  232.845478][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  232.845529][   T34] 1 lock held by syz-executor/6418:
[  232.845539][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  232.845588][   T34] 1 lock held by syz-executor/6419:
[  232.845599][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  232.845647][   T34] 1 lock held by syz-executor/6431:
[  232.845658][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  232.845707][   T34] 1 lock held by syz-executor/6435:
[  232.845717][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  232.850209][   T34] 1 lock held by syz-executor/6436:
[  232.850220][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  232.850297][   T34] 1 lock held by syz-executor/6445:
[  232.850306][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  232.850357][   T34] 1 lock held by syz-executor/6448:
[  232.850366][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  232.850415][   T34] 1 lock held by syz-executor/6452:
[  232.850425][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  232.850990][   T34] 
[  232.850997][   T34] =============================================
[  232.850997][   T34] 
[  232.851008][   T34] NMI backtrace for cpu 0
[  232.851017][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  232.851031][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  232.851038][   T34] Call Trace:
[  232.851043][   T34]  <TASK>
[  232.851047][   T34]  dump_stack_lvl+0x189/0x250
[  232.851066][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  232.851080][   T34]  ? __pfx__printk+0x10/0x10
[  232.851103][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  232.851119][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  232.851139][   T34]  ? _printk+0xcf/0x120
[  232.851156][   T34]  ? __pfx__printk+0x10/0x10
[  232.851173][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  232.851186][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  232.851201][   T34]  watchdog+0xfee/0x1030
[  232.851213][   T34]  ? watchdog+0x1de/0x1030
[  232.851229][   T34]  kthread+0x711/0x8a0
[  232.851247][   T34]  ? __pfx_watchdog+0x10/0x10
[  232.851282][   T34]  ? __pfx_kthread+0x10/0x10
[  232.851300][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  232.851313][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  232.851328][   T34]  ? __pfx_kthread+0x10/0x10
[  232.851343][   T34]  ret_from_fork+0x3fc/0x770
[  232.851358][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  232.851373][   T34]  ? __switch_to_asm+0x39/0x70
[  232.851388][   T34]  ? __switch_to_asm+0x33/0x70
[  232.851400][   T34]  ? __pfx_kthread+0x10/0x10
[  232.851417][   T34]  ret_from_fork_asm+0x1a/0x30
[  232.851441][   T34]  </TASK>
[  232.851448][   T34] Sending NMI from CPU 0 to CPUs 1:
[  232.851511][    C1] NMI backtrace for cpu 1
[  232.851526][    C1] CPU: 1 UID: 0 PID: 6393 Comm: syz.0.157 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  232.851540][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  232.851546][    C1] RIP: 0010:rcu_is_watching+0x0/0xb0
[  232.851563][    C1] Code: c7 c7 20 40 14 8e e8 ef a9 4f 03 eb cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 41 57 41 56 53 65 ff 05 c0 e3 f8 10 e8 7b 85 c7 09 89
[  232.851572][    C1] RSP: 0018:ffffc900001e0420 EFLAGS: 00000002
[  232.851583][    C1] RAX: ffffffff8166406f RBX: 0000000000000001 RCX: 0000000000010100
[  232.851591][    C1] RDX: ffff888024789cc0 RSI: 0000000000000001 RDI: 0000000000000002
[  232.851598][    C1] RBP: 0000000000000000 R08: ffffffff8fa1e9f7 R09: 1ffffffff1f43d3e
[  232.851606][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d3f R12: 0000000000000000
[  232.851613][    C1] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000
[  232.851620][    C1] FS:  00007f0c8564f6c0(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
[  232.851629][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  232.851636][    C1] CR2: 00007f327832afc8 CR3: 000000003a30a000 CR4: 00000000000006f0
[  232.851670][    C1] Call Trace:
[  232.851680][    C1]  <IRQ>
[  232.851685][    C1]  __sysvec_irq_work+0x78/0x3d0
[  232.851698][    C1]  sysvec_irq_work+0x4f/0xc0
[  232.851710][    C1]  asm_sysvec_irq_work+0x1a/0x20
[  232.851722][    C1] RIP: 0010:rcu_read_unlock_special+0x87/0x4c0
[  232.851737][    C1] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 62 2c f8 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
[  232.851745][    C1] RSP: 0018:ffffc900001e0500 EFLAGS: 00000206
[  232.851754][    C1] RAX: 58425e08fe9fd000 RBX: 1ffff9200003c0a8 RCX: 58425e08fe9fd000
[  232.851778][    C1] RDX: 0000000000000002 RSI: ffffffff8d998940 RDI: ffffffff8be29f40
[  232.851785][    C1] RBP: ffffc900001e05f8 R08: ffffffff8fa1e9f7 R09: 1ffffffff1f43d3e
[  232.851793][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d3f R12: ffffffff8e144400
[  232.851801][    C1] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000002
[  232.851815][    C1]  ? __lock_acquire+0xab9/0xd20
[  232.851828][    C1]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  232.851853][    C1]  ? unwind_next_frame+0xa5/0x2390
[  232.851869][    C1]  __rcu_read_unlock+0x84/0xe0
[  232.851884][    C1]  ? unwind_next_frame+0xa5/0x2390
[  232.851895][    C1]  unwind_next_frame+0x19ae/0x2390
[  232.851909][    C1]  ? unwind_next_frame+0xa5/0x2390
[  232.851922][    C1]  ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  232.851935][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  232.851950][    C1]  arch_stack_walk+0x11c/0x150
[  232.851965][    C1]  ? __alloc_skb+0x112/0x2d0
[  232.851978][    C1]  stack_trace_save+0x9c/0xe0
[  232.851992][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  232.852005][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  232.852022][    C1]  ? __lock_acquire+0xab9/0xd20
[  232.852032][    C1]  kasan_save_track+0x3e/0x80
[  232.852042][    C1]  ? kasan_save_track+0x3e/0x80
[  232.852051][    C1]  ? __kasan_slab_alloc+0x6c/0x80
[  232.852061][    C1]  ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  232.852089][    C1]  __kasan_slab_alloc+0x6c/0x80
[  232.852100][    C1]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  232.852111][    C1]  ? __alloc_skb+0x112/0x2d0
[  232.852123][    C1]  __alloc_skb+0x112/0x2d0
[  232.852135][    C1]  wg_packet_send_keepalive+0x65/0x2c0
[  232.852154][    C1]  call_timer_fn+0x17e/0x5f0
[  232.852165][    C1]  ? __pfx_wg_expired_send_persistent_keepalive+0x10/0x10
[  232.852178][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  232.852192][    C1]  ? call_timer_fn+0xbe/0x5f0
[  232.852201][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  232.852216][    C1]  ? __pfx_wg_expired_send_persistent_keepalive+0x10/0x10
[  232.852233][    C1]  __run_timer_base+0x61a/0x860
[  232.852247][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  232.852315][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  232.852336][    C1]  run_timer_softirq+0xb7/0x180
[  232.852352][    C1]  handle_softirqs+0x286/0x870
[  232.852366][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  232.852380][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  232.852392][    C1]  ? irq_work_single+0x1ac/0x240
[  232.852404][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  232.852420][    C1]  __irq_exit_rcu+0xca/0x1f0
[  232.852432][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  232.852446][    C1]  ? rcu_is_watching+0x15/0xb0
[  232.852459][    C1]  irq_exit_rcu+0x9/0x30
[  232.852470][    C1]  sysvec_irq_work+0xa3/0xc0
[  232.852481][    C1]  </IRQ>
[  232.852484][    C1]  <TASK>
[  232.852488][    C1]  asm_sysvec_irq_work+0x1a/0x20
[  232.852498][    C1] RIP: 0010:its_return_thunk+0x0/0x10
[  232.852511][    C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc <c3> cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e9 cb da c1 f5 cc
[  232.852518][    C1] RSP: 0018:ffffc90007926970 EFLAGS: 00000297
[  232.852528][    C1] RAX: ffffffff81a24907 RBX: 0000000000000000 RCX: ffff888024789cc0
[  232.852536][    C1] RDX: 0000000000000002 RSI: 00000000ffffe000 RDI: 0000000000000000
[  232.852542][    C1] RBP: ffffffff8e01b0e0 R08: ffffffff8e01b0e7 R09: 1ffffffff1c0361c
[  232.852550][    C1] R10: dffffc0000000000 R11: fffffbfff1c0361d R12: 00000000ffffe000
[  232.852557][    C1] R13: 00000000ffffffff R14: 00000000ffffe000 R15: 80000000ffffe000
[  232.852568][    C1]  ? desc_read+0x157/0x3f0
[  232.852584][    C1]  desc_read+0x157/0x3f0
[  232.852599][    C1]  _prb_read_valid+0x26a/0xa90
[  232.852618][    C1]  ? __pfx__prb_read_valid+0x10/0x10
[  232.852633][    C1]  ? trace_call_bpf+0x5ba/0x850
[  232.852647][    C1]  prb_read_valid+0x3c/0x60
[  232.852659][    C1]  printk_get_next_message+0x15c/0x7b0
[  232.852674][    C1]  ? perf_trace_preemptirq_template+0x280/0x340
[  232.852691][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  232.852708][    C1]  ? __pfx_printk_get_next_message+0x10/0x10
[  232.852723][    C1]  ? __lock_acquire+0xab9/0xd20
[  232.852737][    C1]  ? console_flush_all+0x13a/0xc40
[  232.852753][    C1]  ? console_flush_all+0x476/0xc40
[  232.852769][    C1]  console_flush_all+0x4ca/0xc40
[  232.852783][    C1]  ? console_flush_all+0x861/0xc40
[  232.852797][    C1]  ? console_flush_all+0x13a/0xc40
[  232.852813][    C1]  ? __pfx_console_flush_all+0x10/0x10
[  232.852831][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  232.852854][    C1]  console_unlock+0xc4/0x270
[  232.852868][    C1]  ? __pfx_console_unlock+0x10/0x10
[  232.852883][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  232.852899][    C1]  vprintk_emit+0x5b7/0x7a0
[  232.852913][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  232.852925][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  232.852938][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  232.852957][    C1]  _printk+0xcf/0x120
[  232.852972][    C1]  ? __pfx____ratelimit+0x10/0x10
[  232.852986][    C1]  ? __pfx__printk+0x10/0x10
[  232.853001][    C1]  ? __nla_validate_parse+0x4e6/0x2d40
[  232.853019][    C1]  __nla_validate_parse+0x1719/0x2d40
[  232.853034][    C1]  ? irqentry_enter+0x3d/0x60
[  232.853053][    C1]  ? __pfx___nla_validate_parse+0x10/0x10
[  232.853068][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  232.853083][    C1]  ? __dev_queue_xmit+0x27e/0x3a70
[  232.853098][    C1]  ? __local_bh_enable_ip+0x135/0x1c0
[  232.853111][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  232.853126][    C1]  __nla_parse+0x40/0x60
[  232.853143][    C1]  inet_rtm_newaddr+0x16f/0x18b0
[  232.853158][    C1]  ? __lock_acquire+0xab9/0xd20
[  232.853170][    C1]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  232.853189][    C1]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  232.853202][    C1]  rtnetlink_rcv_msg+0x7cf/0xb70
[  232.853220][    C1]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  232.853236][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  232.853250][    C1]  ? ref_tracker_free+0x63a/0x7d0
[  232.853290][    C1]  ? __copy_skb_header+0xa7/0x550
[  232.853304][    C1]  ? __pfx_ref_tracker_free+0x10/0x10
[  232.853318][    C1]  ? __skb_clone+0x63/0x7a0
[  232.853333][    C1]  netlink_rcv_skb+0x208/0x470
[  232.853346][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  232.853363][    C1]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  232.853378][    C1]  ? netlink_deliver_tap+0x2e/0x1b0
[  232.853388][    C1]  ? netlink_deliver_tap+0x2e/0x1b0
[  232.853402][    C1]  netlink_unicast+0x75c/0x8e0
[  232.853421][    C1]  netlink_sendmsg+0x805/0xb30
[  232.853436][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  232.853449][    C1]  ? aa_sock_msg_perm+0x94/0x160
[  232.853464][    C1]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  232.853479][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  232.853491][    C1]  __sock_sendmsg+0x21c/0x270
[  232.853507][    C1]  ____sys_sendmsg+0x505/0x830
[  232.853522][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[  232.853537][    C1]  ? import_iovec+0x74/0xa0
[  232.853550][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  232.853563][    C1]  ? __pfx____sys_sendmsg+0x10/0x10
[  232.853587][    C1]  ? __fget_files+0x2a/0x420
[  232.853600][    C1]  ? __fget_files+0x3a0/0x420
[  232.853616][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  232.853627][    C1]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  232.853642][    C1]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  232.853661][    C1]  ? do_syscall_64+0xbe/0x3b0
[  232.853677][    C1]  do_syscall_64+0xfa/0x3b0
[  232.853692][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.853702][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  232.853715][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.853726][    C1] RIP: 0033:0x7f0c8478e9a9
[  232.853737][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  232.853746][    C1] RSP: 002b:00007f0c8564f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  232.853758][    C1] RAX: ffffffffffffffda RBX: 00007f0c849b5fa0 RCX: 00007f0c8478e9a9
[  232.853765][    C1] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000009
[  232.853772][    C1] RBP: 00007f0c84810d69 R08: 0000000000000000 R09: 0000000000000000
[  232.853778][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  232.853785][    C1] R13: 0000000000000000 R14: 00007f0c849b5fa0 R15: 00007fff24a563d8
[  232.853799][    C1]  </TASK>
[  232.854491][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  232.854505][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  232.854519][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  232.854526][   T34] Call Trace:
[  232.854533][   T34]  <TASK>
[  232.854538][   T34]  dump_stack_lvl+0x99/0x250
[  232.854554][   T34]  ? __asan_memcpy+0x40/0x70
[  232.854572][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  232.854585][   T34]  ? __pfx__printk+0x10/0x10
[  232.854609][   T34]  panic+0x2db/0x790
[  232.854627][   T34]  ? __pfx_panic+0x10/0x10
[  232.854640][   T34]  ? nmi_backtrace_stall_check+0x433/0x440
[  232.854659][   T34]  ? irq_work_queue+0xc3/0x140
[  232.854676][   T34]  watchdog+0x102d/0x1030
[  232.854689][   T34]  ? watchdog+0x1de/0x1030
[  232.854706][   T34]  kthread+0x711/0x8a0
[  232.854723][   T34]  ? __pfx_watchdog+0x10/0x10
[  232.854735][   T34]  ? __pfx_kthread+0x10/0x10
[  232.854752][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  232.854767][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  232.854779][   T34]  ? __pfx_kthread+0x10/0x10
[  232.854797][   T34]  ret_from_fork+0x3fc/0x770
[  232.854812][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  232.854828][   T34]  ? __switch_to_asm+0x39/0x70
[  232.854843][   T34]  ? __switch_to_asm+0x33/0x70
[  232.854856][   T34]  ? __pfx_kthread+0x10/0x10
[  232.854874][   T34]  ret_from_fork_asm+0x1a/0x30
[  232.854897][   T34]  </TASK>
[  232.855754][   T34] Kernel Offset: disabled

VM DIAGNOSIS:
13:27:50  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff33bf460 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99dfa470 RSP=ffffc9000068f750
R8 =ffff888021a18237 R9 =1ffff11004343046 R10=dffffc0000000000 R11=ffffffff854729d0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff85472a47 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000556395597e08 CR3=0000000106d44000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000082 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=000000ff00000000 0000000000000000 XMM03=0000000000000000 000000ff00000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81680ea6 RBX=0000000000000000 RCX=ffff888024789cc0 RDX=0000000000010100
RSI=0000000000000008 RDI=ffffffff92a52460 RBP=ffffc900001e0428 RSP=ffffc900001e03a0
R8 =ffffffff92a52467 R9 =1ffffffff254a48c R10=dffffc0000000000 R11=fffffbfff254a48d
R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff81680ea7 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f0c8564f6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f327832afc8 CR3=000000003a30a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f0c84986478 00007f0c84986450 XMM03=00007f0c84986488 00007f0c84986480
XMM04=00007f0c854ed100 00007f0c84986440 XMM05=00007f0c84986458 00007f0c849864a0
XMM06=00007f0c84986498 00007f0c84986490 XMM07=00007f0c84986488 00007f0c84986480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f0c84811ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
