last executing test programs:

1m25.948791028s ago: executing program 1 (id=1645):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3000000000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)

1m25.881610649s ago: executing program 1 (id=1646):
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xb, 0x6}, 0x100904, 0x401, 0x25, 0x0, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="bb00000031000b63ddd2806c8c6f94f903f4b76ffa24fc60100003000a00020005358ac137800500026ced000300", 0x2e}, {&(0x7f0000000140)="c512603b5c247ac97270d2d9f9e3a774644b37ffa4c38bc5ac41e6569c22f21809625db64973a31646a005a85e988285af8f70ec763129dac5d3c4e5e28b003aec39da77a70fcc3aec02c9d2148fa6edc37169089bf94207176394", 0x5b}, {&(0x7f0000000380)="e166186d6cb0b5b1d6ffadb2be01b8263d3abab0c802ff3938203ba118ca79aec5641d631a209c4a807a66d32c93d6258379", 0x32}], 0x3}, 0x0)

1m25.811936853s ago: executing program 2 (id=1649):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000080)=""/17, 0x2}, 0x20)

1m25.811685411s ago: executing program 2 (id=1650):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000095000000000000004be98911ed523cf4451d51e400cbd30efbb0a73ceb2b050a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868162ff933958cb6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e281ef0b7a1a97b2c8c5617bff8c9441a45fd951df19a9c6e933500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0xfffff000, 0xfe71, 0xffffffffffffff40, &(0x7f0000000080)="85d77444c5a569f1e21b08c0f264", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x3b)

1m25.752414597s ago: executing program 1 (id=1651):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2}, [@call={0x85, 0x0, 0x0, 0x13}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

1m25.752195393s ago: executing program 2 (id=1652):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0xfffffffd, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000700))
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0)
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="18020000e2ffffff00000000000000c685000000360000009500001800000000922ae83713ab9600010000801b10fb54a8cb72d232ad558c46fff4208d4990ec11ce9413ac30e00bd0081f8504e19a5183d769676520e98a263345e44d5ad12bca35510100c4d86abeb12303ff1c9fe0d0020000d60400000007d3670000008aff66d6b3181ffc1d62a3954c1198bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d24538556e5e57bee3b8cf464ef3c6a7def8bad3ca6e3abdb21696e340bb8e2a093add57196b40def3858ef569147fa4108328392d322ab5df10a2f69a6bdf72ee7944e810d0223917c3d042410f57466f59544047d6d8ac44060000000000ee16c729300d2301800000000000002b5a8b05fcc154ad5290a8cdb97c343f454ff69dd6cbde49b28a6cb5f4fc0001745cff6e00e7ffffff0000acf3209a08439f1ff01779b6f6df7e02aa6d7760525b595fe1f697bc114ed1778e97a3f0395f946974cfb458be2a34cf924dc37b5592bf17956f3547497aba814382ff67b345b677a9d6523d87008000000400000000003fe8613ca29ff92be0d8deffff7b68136b0046d535dd39c0f35408869e9b342b953f91447e6b9eab304f134306320600a44095254b45a6c1312a13696c7202df5f764713504facc532c5a6d44d99ec7530ed7b0311000000000000e54e9072a22d911f4a2c2e2fa806e63c5cd98a8569a6d6bcfb000064885117e2ad910eae67e0ebe380d0f648713e68153579e02d71c58d147b00821ab9a6475b31e1ebf1369a04000000fbf3983f283f2f00000000992774814d63c933912d000006000000a66acb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483bd4bd287c83dd998a74694d18bdd8ad0983bc90770bbd26a82b9d99d5fc04563b523c47ef8c33400e90d02000000000000000edf1147a7afe772cd45af8aeffe2753088e02ca6bb2feec446ce7dbce66f0a93a03371320980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b5062809a7418b165dd0336d226bac1e1223be1c97b15175d0e664beb126000e96549e1a1228c686edb475b705eaa9515c96f4fc6b3c925ea404e0f1de61026dc6c6618580fd6ce9eac602c1756f6d1056712412131ed9925989e01eae489ec7052e0ed72c326c7a8aa63999e2297c54ce1822d14b7c7699a9d0600f11f2e7f474cffbc35bc8623cd5eb68af82275a940be0400000000423346da092cbe220de96d6a8e9f32f18d1f606b381e4903b500000000000000000000004a2357ba5f03000000000000005dcf4f2aaee86d4802000000000000007cdb686d5da2a42e4b5024b6535811f362201d4f82012e6af704973d04ea923c19e6cb723c1923b3eea2d73e176dff383c9fbbac53dfdcb1a68c98e96fe39eec23963faf3ebed3409144c7c53d6318ced678a621450a9b01e9f2772e5f2999d3435da02556e36c3215d2bd4e96c93bff3ad04a82ff3cfadcf65eb92adc6c68d66b11cb2d7556414a86dfa94bb7aa52c7febb1e9b2efcbbc5bccf9d39bed802f4f056976a9a362ee9cc624ec454b90200fd9603f96908bddc14500000000000000000000000000044d917c62b27679913075731e8fddb07c10c82002d60181588ae63a440454287de9e340f611267f37bdd0f2d21cb06fcaf45a0a297e396f428d43371424b307eef82c5d6d19f3ef0d3b8f7fa51957e3099caab31133b34a1d3eebc0f0c9056df2e9667ba0b55695c7894010079b07e7aef7785e248deb8c83ab6eb2c72c484241dc3b66da78260f800fffd39368b952f6f4a10295c50c887a31d8b543c5d10f2dbd4d0b84eaad43feb6e169a9f2fcff7000000000000000000e011bc6366f56fa787f212c1f8c0f47f5078191c8a02ad436725771738a2a98891971e3b932352896e1ea10f62e8ef7a87e16151b39d6c27575714540d8c293a3fa4b5a825360423c1cbc8b5d19167152823ed853140edda002c16c842b168bb55f6bb713deb57d0aa78d6d4e5fc5be2c402bd77125d98120358900000892b135a92e8c844938aa98ba4839a1408a696454d40e5eed4d4dce481ca86bfac54c330331b7f2cde17cbaeb0377696faf546ecbe742d73d47d726a50f6e752f3325255bd7e8b5923aa3cfb6f7e06494f21ca450139c558000000000000000000000800000000000000000075aa0000000000000000000000005560bd9eb81e839e4992e64b074a66cccccf00334fa94da8477be7d99b558ec6a5b1596ac1e7617c6b32eed0cc70286caf2c5189a103f4b0b04aff171c4d388ccf67fea37e782f025c94c853cde330a193a967d907a8c88fcb033e680f559a72150cb900bafcd536f48797915a2fe9922ce27300009e1b36aa4730117d9b00000000003c630000000000008fbbd11b015c415ca04192fbfb1a8b0e3460af35771dbac10062835c9bab3ad09f7a022c52d8000000000000000000004000000000000000000000000000000000000000000400000000000000000000000000006ec473c54399b7b8aa1ee46132fc45da8292631178cecf19550108b8b8423de4295777a17bf4dfdfee5de0f3e4dadf51ab9562827b762fa611ba5f32861c19dffe1dc9fd5c41cd46cf131fd6b0c2ddad90ac33f768f9ecc70327c59918fa5a249befe98262f53c8182d95f6da3698a6a88c2c31d801a8f1f5e0ce05138d5422da0a6a62b9dfe1f39775d1d0c9186096415f544aaf76b0a1c877a6c826a5adcfb22c4a0e5a46271caa3eaf4f389dd5f3c20dbddc0377a4266d7b9fd61b9287e9b4be0a413ee31be0ddecab0ef7b25cba1fb3654ddf291ecb7768ac1e177042cb4c452fa6b3966950000000000000000c187da23d6855500fe8510b51e13a890e394b84a6ea2cc8d42b97c697c29122298d55e2e1cca8e07abda2606a3f381c64b9fec0000000a7965e4854e8e3572ad5149b3872342dea9252132860c9af1bd5fe263c0313dea5d6e0c11a466d6892ed65f34667dd79b07b5cbdd8aa7dd561a26b5562d4861a7e1b0f48930e0b696ea3bee7eb72794e163d7aeac9a0fa5403ac9cb421eae283b0550f1d0d339cd7b96e71d3ab48ad9d7975e0c9b117f71d3ab80a0c9b0284ecc469fa6181c9c71fce07a6ffb23296a107763138e8d9876291af2076890c47925ac773d95d2ca42acb3e5f3a1550665b898462c139ffd0106bc8a61b6117d252efcab7106b4c3a3c13a70ff452e9d2096142c517b0e91b5cf88332faca5b3ee96363065c3ce32d3d39ec36e20d597e05664f2526bd918090649da11f7299789d00f502cdf1e99d3efecb9b457642fe810370ba4fbe00fa60a28af966a27a1659e448bbe43a1dcd2ea760018b57a36ac41ef2051a7b703d55c0602540663016e20d50385766df4dac47802a55bd38dd767ee9960c6daa704fc5d01a14591f26b7b538c9bb22f6a2f7a34d1b9edfd125a9e25a110228c64253588ff420644dbc0854e69a7bdda72f93ceaccf92cfe7dd6296c950db10f6dd8a5ef9b73cf6a12a1ba16fdc7e35b805f4fd2fcff0a623722149c1465e4de2d53f0f10b14c21865027abc71a12cb1e9f8029c7a20000000eeb0d53a83e518c8d2052c08b515d9d0bde24ac4e798040c7db0bb03c019507d6377f3d5dd94a27abc6d6b120d61f772407e0d2cb50d29168b68aef9f176b4c3aa8b21279d4ea9c1f669aa8c2c17d5b3a8d1dda58d26f1019af04b7774c85d5bce8be010f27c5211938031c3404680b01279c778bd1fe1b48c4b5b8e0fe756e54a8d76b7cec5e3407d93b4eadc446440607de844acf5524a4657e33af2115547b735b57b5092d0bc8fa6acb832509abe0882d570ce400aaebd7baff88526608d6991aac95751671174129457e4a03aca69d82b64b89e6ad6ed1e275ec5002e48170e4c7b4f3971481098dedb88fba90770e44bf404d5a97fefe2fe8e459fe45933b78c7ab5fe985a480193a20fb07da1455fb283df68af569ac82aa6dc703e29bf158931fb79f2abfa6ff7eb8c4f381c9da58bea460e2ead969933e5391970ca4fddd64da2e5df9c4d82044068caaaab771b37bb06bbe673056d849825525f1120b2250f6b8520381f7a74b1c687781cb6b23e67b918844b83dbaeeb559ec8520d710dd6d6b4e64838bd434a36ed03fc0c488b24571032ffbc9f8ce97041e1bc4729d539358dc9599c1266b9ce2cb6dd0ad57a6e9d3d4a11a27f70b2934c96237e2ba09c58eeda678d4d08b6da99b7a86e946215afb1b48792fde54492e306cb5342e2589874b603a1de972b1f09cc350096f5c3e814118af9ba0793cfdf20c77b34eacfdf63ce59ec4d2f867bf884e941559b068d908325667672b5e1cf71f4829c0493e8b141399ed926b822becead7a0a2b4a4c008ab16b616d60f347e4da54f06443507efe57ea62399ef4eb11b2f559e1b056456a53998bf1c6d13c92e75136147f91ae3a75ca15eb1b51bf700b3c0bf54bc3745ff313c5e75dc66386897f6ee45429371b8d0878c442ad2fe9baf85c1390da13efc353ccbef950c29f39ddf436f0d9bf1be1515ed251d8b6f11ecb16b1e8d1ed04196e9b6c2f9e068b7749bb6c1f533e493f22c901662c65cb761dc2eeff2f698bd4dbae83e2dfdc4f1c7f918a00515c1bc189d10ec22b35c92725cbf0ba244fd029c4f026f68e000000060000ab0476c3fd7f7c1e5c000000000000000000000011e43e39d3f4394fbfa13c416b1c443c5e52eea726491ad75100ebad7c6d5a665c59a3fb158e43da904f19e7e8daa4e90390b8da945f6cd78536c0d2be07221f85ad46b180f256d4d84592691d15d65896b66b63a46705338b67b72dc1c3075fcdc5cbffb0366151632ba5be8ae815dfea9fadfd31c473a24a73d3e5116c3023b3563c72d26fbd59877132bde5ca4ef8d92fd3613c768b35223f6fd0b5e9a8b98cccf1e2b4612e620e3a159d6365c9045aaa826aa0ee6d26cf0397ce674c20824584b464ebdc2f3ea26a7aec4570b242a6677a4e9187f8591c3a9bdc0000001a002364bbd93964a8d0bdc802b9be2500"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
setsockopt$sock_attach_bpf(r0, 0x29, 0x22, &(0x7f0000000100)=r1, 0x120)

1m25.751903386s ago: executing program 1 (id=1654):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000100000009000000ae00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1e002803008c71ef288563"], 0xffdd)

1m25.69137898s ago: executing program 2 (id=1656):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x660}}, &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x2b, 0x0, 0x4000}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8610102c580aeeb1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="1400000024000b94f01013e175b7bd7d7edd", 0x12}, {&(0x7f0000000300)="e3a462464b53120fb0249be1a113737590d9d64385dde778742a3c6b81c2661096d431cc538d6a17a228b575b3c6d510ba24ac5a078cadc5db8995a8d5f1f837ed1257adb7106be4d573996bb66c4707228da724e65f3b292c447457b88da054cf7abdf437011666bb17bc3a3fd308767ce29607d4432b3e7d21a9783ddb24566988ff9a830dcd6683192b4b999101fb81786c108ac3c3894e8e257057872ef0e558b10e30f4bade0c93ce4de61665455fafd8635e55e8d4b3a5106e7b1ffae6d5f80230b6c44b36327f0d2aadd7f415", 0xd0}, {&(0x7f0000002980)="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", 0x106f}], 0x3}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034004000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83", 0xd4}, {&(0x7f00000014c0)="5c9ebe30", 0x4}], 0x2}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = getpid()
r6 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, r5, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x3, 0x0, 0x0, 0x8, 0x0, 0x5, 0x28030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x8000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000})
r7 = socket$kcm(0x10, 0x2, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000ac0)="d8000000180081064e81f782db4cb904021d0800fe027c05e8fe55a10a0005000140e90003600e41b0000900ac00060011000000a4000500000000000000035c3b61c1d6ddb2c124c2110e00367f6f94007174cf6efb8000a007a290eb49e2f11d457fbace2ee5a7cef4094200001b14d6d930dfe1d9d322fe7c4a50b5b9bd6ee6f61e59eb4edbb57a00e97a6f6e7b7e2720637a1e7892811eb64252f19e00360db798262f3d40fad95667e006dcdf61951f215ce3bb9ad809d5ad42ce81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43", 0xd9}], 0x1}, 0x0)

1m24.790436152s ago: executing program 1 (id=1660):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x6, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000580), 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

1m24.790322494s ago: executing program 1 (id=1661):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x5411, 0x0)

1m24.68267234s ago: executing program 32 (id=1661):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x5411, 0x0)

1m24.631638518s ago: executing program 2 (id=1664):
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x29, 0xb, 0x0, 0x42)

1m24.509567637s ago: executing program 2 (id=1669):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0)

1m24.307493869s ago: executing program 33 (id=1669):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0)

1m17.743324735s ago: executing program 0 (id=1713):
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000717c33ba830a6fda79cabe8eb53e6e00"/43], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
sendmsg$sock(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)="c260", 0x2}], 0x1}, 0x20000000)
close(0x4)
recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x42)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000060ec000000007d6e000000000000000000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000080000000000000000181100", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="aad2c3775f54d48e55d8d24caef592227cab90adfede4a5e1a525885a2f5aad6dbb05a3c931faae48dbdc264d8dd354e02c3d74802000000000000008a8731b88247a8daa9d3c56982c87d", @ANYBLOB="23eaf4ce6f10c7f48813df05f1320a7385f78d3114422db94f1145c43af8d4003c2da721199736c3727d52b10efa6bafa0fb37767247a599147ab720c317838f284e050d306e2083e64aa5b235f7ac036fc6c59df8806e3866591ee2dedede3873c05f1821f8449122a7f8a5cc2c40ec29557ce6ce2bad3439f4", @ANYRESOCT=r1], 0x48)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="1c0000001c008103e00f80ecdb4cb9f207c804a00d000000880802fb", 0x1c}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe99, 0x0, &(0x7f00000001c0)='N', 0x0}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r6}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={0x0, 0x4}, 0x6000, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/mnt\x00')
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x11, 0x3, 0x6, &(0x7f00000002c0))
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x58, &(0x7f0000000340)={0x0, <r7=>0x0}}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r7}, 0xc)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f00000001c0)="0a87441a4e89ad13ab1094cd85212a1c791c489733eb44a2d639a639d0ed0e3ceaf18abb", &(0x7f0000000640)=""/86, &(0x7f00000006c0)="7d61cce4537b35e479d0ef9cb350ab6e4e472ae1530857162ba8ce8dddc800e53562263c10a7b5ea90291e92786b68f1c3e291c03504774469e47d7960d77728d5d11d09fa0cfdf1ec448f67b6ceee5cac4ba318dd9891947fe6f8e6ac5e678cb54a20c1e64e29ba2aa99f50726afc9e997577e20f9dcfa8bf3de89218254029a7ec83373cf0b51dd1ddfbdcf995cfaf2527e14b46ff12d6b8152d7b0fb2e8c584cff2644a04b3cfcaadf96a931e38be569214f99306dbaf63f0120bac3783024d15045b585b1d001bad3f828aa86b8d20782badb009f21501c5d4bba0e9d39219ea4f47106d62b1abccd3ca999666eb32497fdc4868ecce42741f", &(0x7f00000007c0)="1c297bd154322999a665df894657642dcd7ae7e8378813890957a9345925ebe3f97dc59af9fd3eccd186bdc11ea593ddfe0757926f20f69dbef5ef842e10e55cb77f7aafd85828d5369b8d749e35bcdeb6648cf3856c314ec67841f778745a9d6b01e504ad95686a6d20099802a893ab493074de07cd2d5c9918fdab73b7d30b4e75a3fe7196b980b42d6e7d272a8747dbb85c8931217990d2df0a0308ac53f9ebaef657c87c10d7f280eeaef05631285fe92e4a72c1cf29df802b03fdcad9f4f2a19d", 0x6, 0xffffffffffffffff, 0x4}, 0x38)
getpid()

1m16.884506254s ago: executing program 0 (id=1722):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

1m16.821692594s ago: executing program 0 (id=1723):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x6, 0xa, 0x0, 0x0)

1m16.821456447s ago: executing program 0 (id=1724):
r0 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="d4", 0x1}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500924e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

1m16.518501062s ago: executing program 4 (id=1733):
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x300440f1)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2002, 0x0, @perf_bp={0x0, 0x4}, 0xa100, 0xc8, 0x3, 0x9, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200182f00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa35f088be"], 0xfdef)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0xffca}, 0x164)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfdef)

1m16.448306733s ago: executing program 4 (id=1736):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xa00, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb904021d0800fe007c05e8fe55a1bc001200020014260c600e12100015007f370401a8001000200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)

1m16.448226705s ago: executing program 4 (id=1737):
r0 = socket$kcm(0xa, 0x2, 0x73)
setsockopt$sock_attach_bpf(r0, 0x29, 0x19, 0x0, 0x0)

1m16.371433282s ago: executing program 4 (id=1739):
perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3542, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x0, 0x84)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10)
syz_clone(0x411, 0x0, 0x0, 0x0, 0x0, 0x0)

1m16.251951442s ago: executing program 4 (id=1742):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000008", @ANYRES32], 0x48)

1m16.071645893s ago: executing program 4 (id=1743):
r0 = socket$kcm(0x11, 0x200000000000003, 0x300)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000040), 0x4)
recvmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000000)=""/10, 0xa}], 0x2}, 0x0)

1m16.02239837s ago: executing program 34 (id=1743):
r0 = socket$kcm(0x11, 0x200000000000003, 0x300)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000040), 0x4)
recvmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000000)=""/10, 0xa}], 0x2}, 0x0)

1m15.600540631s ago: executing program 0 (id=1745):
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000000007000000441515"], 0x30}, 0x20)

1m15.334978744s ago: executing program 0 (id=1746):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xb}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000181c0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m15.334878273s ago: executing program 35 (id=1746):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xb}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000181c0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

46.1614558s ago: executing program 6 (id=2176):
r0 = socket$kcm(0xa, 0x1, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r3=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020692500000000002020207b1af8ff00000000bfa110000000be8214b00000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x3500000000000000)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c36505", 0x34}], 0x1}, 0x4)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@bloom_filter={0x1e, 0x8, 0x2, 0x7ff, 0x1300, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0xd, 0x17, &(0x7f0000000a80)=ANY=[@ANYBLOB="18110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000c68c3c9800020000000000000005000000183400000100000000000000000000007b3908000000000080b5040003000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000e40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6], 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r1}, 0x10)
close(0xffffffffffffffff)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000cb9aeee87910000000000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0xf, 0xc4, &(0x7f00000002c0)=""/196}, 0x94)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000001902a42ee37b967f95afea6c5762868e9cda66941b2c0e431207db6d2f2e545bf19fbf8ed8ed41071d90bf0b713c843c"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca)

45.821474917s ago: executing program 5 (id=2185):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

45.760919803s ago: executing program 5 (id=2186):
perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
r1 = socket$kcm(0x2c, 0x3, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x11b, 0x3, &(0x7f0000000040)=r2, 0x4)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000014006b030231a6080c000af32c0cae93000f00e5aa000017d34460bc24ea000007000000000000002756f475ce36c2d13b48df0000ecb8f6ec63c9f4d493803fd88635a6d10000f8ea56a52600e6657594f1817d00000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10)

45.559472323s ago: executing program 5 (id=2188):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ceb71c0010ec90db133c22a690ae7080000000000040875b0089"], 0xfe1b)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x0, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x30}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000080))

45.509831877s ago: executing program 5 (id=2190):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x33}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

45.451850071s ago: executing program 5 (id=2192):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f90d24fc60", 0x14}], 0x1}, 0x0)
socket$kcm(0xa, 0x2, 0x3a)

45.375998963s ago: executing program 5 (id=2194):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x9ce0c9a9c7376dd1, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8264, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000100000000001, 0x3}, 0x2018, 0x1, 0x2, 0x6, 0x0, 0x81, 0x7, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000001280), 0x56)
r3 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, 0x0}, 0x24000008)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r6 = perf_event_open$cgroup(&(0x7f00000003c0)={0x0, 0x80, 0x23, 0x5, 0x9, 0x9, 0x0, 0x8, 0x14000, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c98, 0x2, @perf_config_ext={0x1, 0x6}, 0x80, 0x4, 0x0, 0x0, 0x1, 0x18, 0x1ff, 0x0, 0x2, 0x0, 0x6e9}, r5, 0xd, r4, 0xc)
perf_event_open$cgroup(0x0, r5, 0x0, r6, 0x2)
openat$cgroup_devices(r5, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
openat$cgroup_devices(r5, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000004c0)}], 0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x1d}]}, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@union, @var={0x1, 0x0, 0x0, 0x11, 0x1}]}, {0x0, [0x5f]}}, 0x0, 0x37}, 0x20)
recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)

45.274803285s ago: executing program 6 (id=2196):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x10, 0x110, 0xb}}, @ip_tos_int={{0x14, 0x110}}], 0x20}, 0x0)
r0 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1}, 0x480c0)

45.18882124s ago: executing program 6 (id=2198):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x40047440, &(0x7f0000001200))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

45.122773756s ago: executing program 6 (id=2200):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61158c00000000006113660000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

45.040992319s ago: executing program 6 (id=2202):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94)

44.980034861s ago: executing program 6 (id=2204):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r0}, 0x18)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x33a, 0x82, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={&(0x7f0000000280)}, 0x14105, 0x101, 0xfffffbff, 0x3, 0x19, 0xfffffffc, 0x6, 0x0, 0xfffffffc, 0x0, 0xa9e2}, 0x0, 0xf, 0xffffffffffffffff, 0x9)
socket$kcm(0x28, 0x5, 0x0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x2, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0xfffffffd, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000700)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe8f)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x70}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = socket$kcm(0x25, 0x1, 0x0)
sendmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="cae2", 0x2}], 0x1}, 0x24040886)
r6 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$kcm(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="ad6be8", 0x3}], 0x1, &(0x7f0000000700)=[{0x10, 0x109}], 0x10}, 0x4040014)
syz_clone(0x40000400, 0x0, 0x0, 0x0, 0x0, 0x0)

44.827643218s ago: executing program 3 (id=2206):
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x20046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x102c9, 0x3, 0x9, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="030600005600911000dd00000000004a07"], 0xfe33)

44.827406631s ago: executing program 3 (id=2207):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94)
r1 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000040)=r0, 0x4)

44.72988222s ago: executing program 3 (id=2208):
bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48)

44.608167137s ago: executing program 3 (id=2209):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8000000000000001}, 0x30d319, 0x4, 0x0, 0x5, 0x2, 0x4, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8905, &(0x7f0000000340)={'syzkaller1\x00', @remote})

44.527081692s ago: executing program 3 (id=2210):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000010000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b7030000000000008500002dd10000001801000020786c250000000000202020db1af8ffa1000000bda100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

44.526777431s ago: executing program 3 (id=2211):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90324fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

329.75898ms ago: executing program 36 (id=2204):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r0}, 0x18)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x33a, 0x82, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={&(0x7f0000000280)}, 0x14105, 0x101, 0xfffffbff, 0x3, 0x19, 0xfffffffc, 0x6, 0x0, 0xfffffffc, 0x0, 0xa9e2}, 0x0, 0xf, 0xffffffffffffffff, 0x9)
socket$kcm(0x28, 0x5, 0x0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x2, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0xfffffffd, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000700)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe8f)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x70}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = socket$kcm(0x25, 0x1, 0x0)
sendmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="cae2", 0x2}], 0x1}, 0x24040886)
r6 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$kcm(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="ad6be8", 0x3}], 0x1, &(0x7f0000000700)=[{0x10, 0x109}], 0x10}, 0x4040014)
syz_clone(0x40000400, 0x0, 0x0, 0x0, 0x0, 0x0)

142.829µs ago: executing program 37 (id=2211):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90324fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

0s ago: executing program 38 (id=2194):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x9ce0c9a9c7376dd1, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8264, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000100000000001, 0x3}, 0x2018, 0x1, 0x2, 0x6, 0x0, 0x81, 0x7, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000001280), 0x56)
r3 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, 0x0}, 0x24000008)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r6 = perf_event_open$cgroup(&(0x7f00000003c0)={0x0, 0x80, 0x23, 0x5, 0x9, 0x9, 0x0, 0x8, 0x14000, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c98, 0x2, @perf_config_ext={0x1, 0x6}, 0x80, 0x4, 0x0, 0x0, 0x1, 0x18, 0x1ff, 0x0, 0x2, 0x0, 0x6e9}, r5, 0xd, r4, 0xc)
perf_event_open$cgroup(0x0, r5, 0x0, r6, 0x2)
openat$cgroup_devices(r5, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
openat$cgroup_devices(r5, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000004c0)}], 0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x1d}]}, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@union, @var={0x1, 0x0, 0x0, 0x11, 0x1}]}, {0x0, [0x5f]}}, 0x0, 0x37}, 0x20)
recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:38203' (ED25519) to the list of known hosts.
syzkaller login: [   47.968745][ T5800] cgroup: Unknown subsys name 'net'
[   48.094766][ T5800] cgroup: Unknown subsys name 'cpuset'
[   48.098815][ T5800] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.577709][ T5800] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.352162][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.355312][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.358298][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.362404][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.365281][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.409494][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.412629][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.415425][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.418394][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.421120][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.444180][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.447392][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.450124][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.453413][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.457823][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.546302][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   53.662309][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.665354][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.668659][ T5826] bridge_slave_0: entered allmulticast mode
[   53.673425][ T5826] bridge_slave_0: entered promiscuous mode
[   53.684587][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   53.695423][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.698591][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.701826][ T5826] bridge_slave_1: entered allmulticast mode
[   53.705789][ T5826] bridge_slave_1: entered promiscuous mode
[   53.746478][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.767833][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.825275][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   53.835643][ T5826] team0: Port device team_slave_0 added
[   53.846826][ T5826] team0: Port device team_slave_1 added
[   53.849110][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.852292][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.854684][ T5831] bridge_slave_0: entered allmulticast mode
[   53.857425][ T5831] bridge_slave_0: entered promiscuous mode
[   53.879023][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.881454][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.884166][ T5831] bridge_slave_1: entered allmulticast mode
[   53.886907][ T5831] bridge_slave_1: entered promiscuous mode
[   53.925017][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.927860][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.938920][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.946055][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.949703][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.952744][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.963635][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.974906][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.012106][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.015159][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.017712][ T5834] bridge_slave_0: entered allmulticast mode
[   54.020491][ T5834] bridge_slave_0: entered promiscuous mode
[   54.024612][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.027116][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.029718][ T5834] bridge_slave_1: entered allmulticast mode
[   54.033439][ T5834] bridge_slave_1: entered promiscuous mode
[   54.047391][ T5831] team0: Port device team_slave_0 added
[   54.077015][ T5831] team0: Port device team_slave_1 added
[   54.108699][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.118270][ T5826] hsr_slave_0: entered promiscuous mode
[   54.120991][ T5826] hsr_slave_1: entered promiscuous mode
[   54.137374][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.139675][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.148338][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.153464][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.157266][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.159841][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.169104][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.226363][ T5834] team0: Port device team_slave_0 added
[   54.237193][ T5834] team0: Port device team_slave_1 added
[   54.276914][ T5831] hsr_slave_0: entered promiscuous mode
[   54.279294][ T5831] hsr_slave_1: entered promiscuous mode
[   54.281552][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.284682][ T5831] Cannot create hsr debugfs directory
[   54.286996][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.289416][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.299012][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.310727][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.313262][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.321862][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.400306][ T5834] hsr_slave_0: entered promiscuous mode
[   54.403054][ T5834] hsr_slave_1: entered promiscuous mode
[   54.405245][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.407718][ T5834] Cannot create hsr debugfs directory
[   54.506969][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.524063][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.539386][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.556521][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   54.619662][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.635672][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.642561][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.661422][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.711218][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.718929][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.725394][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.731490][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   54.829862][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.834789][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.859343][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.864634][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   54.868409][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   54.880028][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.883218][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.888847][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.891383][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.901064][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.903479][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.908927][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.911334][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.916324][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   54.936553][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.939231][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.944271][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.946682][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.101238][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.132744][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.169386][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.186994][ T5834] veth0_vlan: entered promiscuous mode
[   55.200283][ T5826] veth0_vlan: entered promiscuous mode
[   55.205793][ T5834] veth1_vlan: entered promiscuous mode
[   55.211388][ T5826] veth1_vlan: entered promiscuous mode
[   55.229033][ T5831] veth0_vlan: entered promiscuous mode
[   55.240348][ T5831] veth1_vlan: entered promiscuous mode
[   55.254301][ T5834] veth0_macvtap: entered promiscuous mode
[   55.259966][ T5826] veth0_macvtap: entered promiscuous mode
[   55.268622][ T5834] veth1_macvtap: entered promiscuous mode
[   55.280249][ T5826] veth1_macvtap: entered promiscuous mode
[   55.302686][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.306226][ T5831] veth0_macvtap: entered promiscuous mode
[   55.317948][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.322866][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.325784][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.328761][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.332859][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.339178][ T5831] veth1_macvtap: entered promiscuous mode
[   55.344365][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.356276][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.366101][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.370657][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.374895][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.378076][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.381010][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.389049][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.409024][ T5831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.414014][ T5831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.417683][ T5831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.421287][ T5831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.452261][   T55] Bluetooth: hci0: command tx timeout
[   55.462425][   T55] Bluetooth: hci1: command tx timeout
[   55.482329][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.485458][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.506175][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.508954][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.532090][   T55] Bluetooth: hci2: command tx timeout
[   55.540991][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.541199][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.546008][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.548034][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.578717][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.588674][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.633927][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   55.647320][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.650776][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.808898][ T5891] delete_channel: no stack
[   57.014158][ T5917] : renamed from hsr0 (while UP)
[   57.180536][ T5925] syzkaller0: entered promiscuous mode
[   57.190539][ T5925] syzkaller0: entered allmulticast mode
[   57.197635][ T5932] netlink: 'syz.1.22': attribute type 10 has an invalid length.
[   57.200758][ T5932] macvlan0: entered promiscuous mode
[   57.204346][ T5932] macvlan0: entered allmulticast mode
[   57.206651][ T5932] veth1_vlan: entered allmulticast mode
[   57.542718][   T55] Bluetooth: hci1: command tx timeout
[   57.543739][ T5827] Bluetooth: hci0: command tx timeout
[   57.621847][ T5827] Bluetooth: hci2: command tx timeout
[   57.882988][ T5927] pim6reg1: entered allmulticast mode
[   58.151303][ T5827] Bluetooth: hci1: unexpected event 0x3b length: 15 > 10
[   58.329324][ T5967] Dead loop on virtual device ip6_vti0, fix it urgently!
[   58.611729][    C0] hrtimer: interrupt took 47565 ns
[   58.685827][ T5979] netlink: 'syz.2.43': attribute type 16 has an invalid length.
[   58.688641][ T5979] netlink: 48 bytes leftover after parsing attributes in process `syz.2.43'.
[   58.700977][ T5979] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.769541][ T5983] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.45'.
[   58.833966][ T5987] netlink: 'syz.1.46': attribute type 10 has an invalid length.
[   58.836558][ T5987] netlink: 40 bytes leftover after parsing attributes in process `syz.1.46'.
[   58.840618][ T5987] batman_adv: batadv0: Adding interface: hsr_slave_1
[   58.857596][ T5987] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.871251][ T5987] batman_adv: batadv0: Interface activated: hsr_slave_1
[   59.339958][ T6018] Zero length message leads to an empty skb
[   59.343490][ T6018] netlink: 'syz.1.62': attribute type 10 has an invalid length.
[   59.347015][ T6018] bridge0: port 3(team0) entered blocking state
[   59.349781][ T6018] bridge0: port 3(team0) entered disabled state
[   59.354594][ T6018] team0: entered allmulticast mode
[   59.357339][ T6018] team_slave_0: entered allmulticast mode
[   59.360837][ T6018] team_slave_1: entered allmulticast mode
[   59.366475][ T6018] team0: entered promiscuous mode
[   59.368789][ T6018] team_slave_0: entered promiscuous mode
[   59.371559][ T6018] team_slave_1: entered promiscuous mode
[   59.379608][ T6018] bridge0: port 3(team0) entered blocking state
[   59.383023][ T6018] bridge0: port 3(team0) entered forwarding state
[   59.539544][ T6026] warning: `syz.1.66' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   59.612128][ T5827] Bluetooth: hci1: command tx timeout
[   59.612241][   T55] Bluetooth: hci0: command tx timeout
[   59.703371][   T55] Bluetooth: hci2: command tx timeout
[   59.717065][ T6030] netlink: 10 bytes leftover after parsing attributes in process `syz.0.68'.
[   59.996721][ T6050] netlink: 22 bytes leftover after parsing attributes in process `syz.2.77'.
[   60.406031][ T6086] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.426634][ T6086] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   60.709252][ T6111] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.104'.
[   61.692009][   T55] Bluetooth: hci0: command tx timeout
[   61.773823][   T55] Bluetooth: hci2: command tx timeout
[   62.081807][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1749769296 wd_nsec: 1749769307
[   62.092112][   T55] Bluetooth: hci1: command tx timeout
[   63.318459][ T6130] netlink: 'syz.1.113': attribute type 21 has an invalid length.
[   63.593810][ T6136] netlink: 'syz.1.115': attribute type 1 has an invalid length.
[   63.597316][ T6136] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.115'.
[   63.645330][ T6141] netlink: 'syz.2.117': attribute type 3 has an invalid length.
[   63.727080][ T6144] netlink: 132 bytes leftover after parsing attributes in process `syz.2.119'.
[   65.632867][ T6185] tap0: tun_chr_ioctl cmd 1074025675
[   65.635846][ T6185] tap0: persist disabled
[   66.011420][ T6206] netlink: 'syz.1.143': attribute type 10 has an invalid length.
[   69.062265][ T6211] netlink: 'syz.0.145': attribute type 39 has an invalid length.
[   69.099680][ T6214] netlink: 'syz.2.146': attribute type 6 has an invalid length.
[   69.103213][ T6214] netlink: 'syz.2.146': attribute type 1 has an invalid length.
[   69.106619][ T6214] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.146'.
[   69.339596][ T6225] netlink: 176 bytes leftover after parsing attributes in process `syz.2.151'.
[   69.558854][ T6233] netlink: 'syz.0.155': attribute type 16 has an invalid length.
[   69.568418][ T6233] netlink: 16 bytes leftover after parsing attributes in process `syz.0.155'.
[   70.124656][ T6259] netlink: 'syz.0.168': attribute type 2 has an invalid length.
[   70.127407][ T6259] netlink: 'syz.0.168': attribute type 1 has an invalid length.
[   70.129803][ T6259] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.168'.
[   70.133560][ T6259] nbd: couldn't find device at index 65542
[   70.280019][ T6274] syzkaller1: tun_chr_ioctl cmd 1074025673
[   70.833756][   T55] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30
[   70.836569][   T55] Bluetooth: hci0: Invalid handle: 0x85b0 > 0x0eff
[   70.896325][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.899221][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.451278][ T6323] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.198'.
[   71.639218][ T6331] netlink: 44 bytes leftover after parsing attributes in process `syz.0.202'.
[   71.646852][ T6331] netlink: 'syz.0.202': attribute type 3 has an invalid length.
[   71.789638][ T6337] netlink: 'syz.0.204': attribute type 16 has an invalid length.
[   71.799479][ T6337] netlink: 152 bytes leftover after parsing attributes in process `syz.0.204'.
[   72.480503][ T6358] IPv6: NLM_F_REPLACE set, but no existing node found!
[   72.613745][ T6363] netlink: 'syz.1.212': attribute type 4 has an invalid length.
[   72.894999][ T6386] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   72.897284][ T6386] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   73.050971][ T6398] netlink: 'syz.1.229': attribute type 10 has an invalid length.
[   73.055897][ T6398] netlink: 40 bytes leftover after parsing attributes in process `syz.1.229'.
[   73.061569][ T6398] ipvlan1: entered promiscuous mode
[   73.063999][ T6398] ipvlan1: entered allmulticast mode
[   73.065915][ T6398] veth0_vlan: entered allmulticast mode
[   73.069390][ T6398] bridge0: port 4(ipvlan1) entered blocking state
[   73.073517][ T6398] bridge0: port 4(ipvlan1) entered disabled state
[   73.078865][ T6398] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[   73.455301][ T6424] netlink: 56 bytes leftover after parsing attributes in process `syz.0.240'.
[   73.813177][ T6439] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.247'.
[   73.857227][ T6439] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.860302][ T6439] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.157551][ T6439] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.160555][ T6439] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.517342][ T6449] netlink: 763 bytes leftover after parsing attributes in process `syz.1.251'.
[   74.650316][ T6455] Driver unsupported XDP return value 0 on prog  (id 87) dev N/A, expect packet loss!
[   74.894361][   T55] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30
[   74.897724][   T55] Bluetooth: hci2: Invalid handle: 0x85b0 > 0x0eff
[   75.067752][ T6492] netlink: 60 bytes leftover after parsing attributes in process `syz.2.270'.
[   75.073776][ T6492] netlink: 60 bytes leftover after parsing attributes in process `syz.2.270'.
[   75.082031][ T6489] netlink: 60 bytes leftover after parsing attributes in process `syz.2.270'.
[   75.182865][ T6500] validate_nla: 1 callbacks suppressed
[   75.182979][ T6500] netlink: 'syz.2.275': attribute type 21 has an invalid length.
[   75.189336][ T6500] netlink: 176 bytes leftover after parsing attributes in process `syz.2.275'.
[   78.057051][ T5827] Bluetooth: hci1: Malformed LE Event: 0x0d
[   78.070751][ T6567] netlink: 'syz.1.304': attribute type 10 has an invalid length.
[   78.250760][ T6567] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   78.343966][ T6567] syz.1.304 (6567) used greatest stack depth: 19536 bytes left
[   78.589542][ T6593] netlink: 144 bytes leftover after parsing attributes in process `syz.0.316'.
[   78.712678][ T6598] netlink: 763 bytes leftover after parsing attributes in process `syz.1.317'.
[   78.826961][ T6602] netlink: 'syz.1.317': attribute type 10 has an invalid length.
[   78.829409][ T6602] netlink: 40 bytes leftover after parsing attributes in process `syz.1.317'.
[   78.843742][ T6605] netlink: 809 bytes leftover after parsing attributes in process `syz.0.321'.
[   78.848406][ T6605] netlink: 130160 bytes leftover after parsing attributes in process `syz.0.321'.
[   78.970226][ T6620] netlink: 'syz.2.328': attribute type 1 has an invalid length.
[   79.896434][ T6665] netlink: 'syz.1.349': attribute type 21 has an invalid length.
[   80.887529][ T6689] syzkaller0: entered promiscuous mode
[   80.889841][ T6689] syzkaller0: entered allmulticast mode
[   81.143283][  T970] cfg80211: failed to load regulatory.db
[   82.206365][ T6727] netlink: 'syz.1.378': attribute type 21 has an invalid length.
[   82.209609][ T6727] __nla_validate_parse: 1 callbacks suppressed
[   82.209620][ T6727] netlink: 168 bytes leftover after parsing attributes in process `syz.1.378'.
[   82.443931][ T6746] netlink: 14 bytes leftover after parsing attributes in process `syz.0.389'.
[   82.447731][ T6747] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.388'.
[   82.565174][ T6763] netlink: 40 bytes leftover after parsing attributes in process `syz.0.396'.
[   82.593215][ T6767] netlink: 'syz.2.398': attribute type 11 has an invalid length.
[   82.596208][ T6767] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.398'.
[   82.597051][ T6766] netdevsim netdevsim1: Direct firmware load for  failed with error -2
[   82.600363][ T6767] netlink: 'syz.2.398': attribute type 11 has an invalid length.
[   82.605547][ T6766] netdevsim netdevsim1: Falling back to sysfs fallback for: 
[   82.606448][ T6767] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.398'.
[   82.615531][ T6764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   82.710637][ T6776] macsec0: entered promiscuous mode
[   82.714394][ T6776] macsec0: entered allmulticast mode
[   82.716937][ T6776] veth1_macvtap: entered allmulticast mode
[   83.581932][ T6806] netlink: 5 bytes leftover after parsing attributes in process `syz.1.416'.
[   84.769842][ T5827] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4
[   85.601955][ T6865] netlink: 'syz.0.441': attribute type 5 has an invalid length.
[   85.926309][ T6881] netlink: 'syz.0.448': attribute type 6 has an invalid length.
[   85.929625][ T6881] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.448'.
[   86.091631][ T5827] Bluetooth: hci1: SCO packet too small
[   86.140825][ T6901] netlink: 'syz.2.458': attribute type 28 has an invalid length.
[   86.144736][ T6901] netlink: 'syz.2.458': attribute type 29 has an invalid length.
[   86.148267][ T6901] netlink: 132 bytes leftover after parsing attributes in process `syz.2.458'.
[   86.531292][ T5827] Bluetooth: hci0: unexpected event 0x23 length: 15 > 13
[   87.029713][ T6972] netlink: 60 bytes leftover after parsing attributes in process `syz.1.489'.
[   88.136162][ T7017] netlink: 'syz.1.511': attribute type 29 has an invalid length.
[   88.165974][ T7017] netlink: 'syz.1.511': attribute type 10 has an invalid length.
[   88.240563][ T7017] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.266446][ T7017] bond0: entered promiscuous mode
[   88.268532][ T7017] bond_slave_0: entered promiscuous mode
[   88.271424][ T7017] bond_slave_1: entered promiscuous mode
[   88.274420][ T7017] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   88.280510][ T7017] bond0: entered allmulticast mode
[   88.282696][ T7017] bond_slave_0: entered allmulticast mode
[   88.284984][ T7017] bond_slave_1: entered allmulticast mode
[   88.288009][ T7017] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   88.295910][ T7017] team0: Port device bond0 added
[   88.647789][ T7017] syz.1.511 (7017) used greatest stack depth: 19128 bytes left
[   88.716046][ T7035] netlink: 'syz.0.518': attribute type 21 has an invalid length.
[   90.205430][ T7125] netlink: 'syz.0.560': attribute type 25 has an invalid length.
[   90.362916][ T7139] __nla_validate_parse: 2 callbacks suppressed
[   90.362926][ T7139] netlink: 132 bytes leftover after parsing attributes in process `syz.0.568'.
[   90.688525][ T7156] netlink: 'syz.0.575': attribute type 10 has an invalid length.
[   90.691514][ T7156] netlink: 40 bytes leftover after parsing attributes in process `syz.0.575'.
[   90.702914][ T7156] dummy0: entered promiscuous mode
[   90.708012][ T7156] bridge0: port 3(dummy0) entered blocking state
[   90.712221][ T7156] bridge0: port 3(dummy0) entered disabled state
[   90.724734][ T7156] dummy0: entered allmulticast mode
[   90.731275][ T7156] bridge0: port 3(dummy0) entered blocking state
[   90.733589][ T7156] bridge0: port 3(dummy0) entered forwarding state
[   90.930996][ T7161] TCP: TCP_TX_DELAY enabled
[   91.129430][ T7168] netlink: 'syz.0.578': attribute type 39 has an invalid length.
[   91.908775][ T7189] netlink: 'syz.1.589': attribute type 13 has an invalid length.
[   91.912178][ T7189] netlink: 'syz.1.589': attribute type 58 has an invalid length.
[   91.915554][ T7189] netlink: 152 bytes leftover after parsing attributes in process `syz.1.589'.
[   91.962606][ T7191] netlink: 24032 bytes leftover after parsing attributes in process `syz.2.591'.
[   91.969896][ T7191] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.591'.
[   91.977302][ T7191] netlink: 24032 bytes leftover after parsing attributes in process `syz.2.591'.
[   92.421298][ T7216] netlink: 'syz.0.601': attribute type 8 has an invalid length.
[   92.424733][ T7216] netlink: 'syz.0.601': attribute type 3 has an invalid length.
[   92.428114][ T7216] netlink: 153952 bytes leftover after parsing attributes in process `syz.0.601'.
[   92.936372][ T7232] sit0: entered allmulticast mode
[   92.946388][ T7232] sit0: entered promiscuous mode
[   93.104770][ T7244] netlink: 763 bytes leftover after parsing attributes in process `syz.0.614'.
[   94.131859][ T7280] validate_nla: 1 callbacks suppressed
[   94.131874][ T7280] netlink: 'syz.1.630': attribute type 21 has an invalid length.
[   94.205212][ T5827] Bluetooth: hci2: unknown advertising packet type: 0x0c
[   94.237492][ T7288] syz.1.634 uses obsolete (PF_INET,SOCK_PACKET)
[   94.368383][ T7293] netlink: 17 bytes leftover after parsing attributes in process `syz.0.636'.
[   94.397232][ T7293] netlink: zone id is out of range
[   94.409876][ T7293] netlink: zone id is out of range
[   94.436175][ T7293] netlink: zone id is out of range
[   94.438525][ T7293] netlink: zone id is out of range
[   94.440816][ T7293] netlink: zone id is out of range
[   94.465822][ T7293] netlink: zone id is out of range
[   94.467638][ T7293] netlink: zone id is out of range
[   94.469703][ T7293] netlink: zone id is out of range
[   94.471869][ T7293] netlink: zone id is out of range
[   94.473642][ T7293] netlink: zone id is out of range
[   94.586105][ T7300] netlink: 'syz.2.637': attribute type 10 has an invalid length.
[   94.629729][ T7300] team0: Port device geneve1 added
[   94.938982][ T7315] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.644'.
[   95.451649][ T7351] lo: entered allmulticast mode
[   95.458874][ T7351] lo: entered promiscuous mode
[   95.461177][ T7351] lo: left allmulticast mode
[   95.734059][ T5827] Bluetooth: hci0: unexpected event 0x23 length: 15 > 13
[   95.854811][ T7369] __nla_validate_parse: 2 callbacks suppressed
[   95.854825][ T7369] netlink: 180 bytes leftover after parsing attributes in process `syz.1.668'.
[   96.363016][ T7394] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.679'.
[   96.391840][ T7396] C: renamed from team_slave_0 (while UP)
[   96.397537][ T7396] netlink: 'syz.1.680': attribute type 8 has an invalid length.
[   97.493495][ T5827] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30
[   97.496727][ T5827] Bluetooth: hci0: Invalid handle: 0x85b0 > 0x0eff
[   97.802889][ T7461] netlink: 208080 bytes leftover after parsing attributes in process `syz.0.705'.
[   97.806071][ T7461] netlink: 'syz.0.705': attribute type 1 has an invalid length.
[   97.877250][ T7468] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.709'.
[   97.966634][ T7470] netlink: 40 bytes leftover after parsing attributes in process `syz.2.710'.
[   97.971421][ T7470] netlink: 'syz.2.710': attribute type 4 has an invalid length.
[   97.977041][ T7470] netlink: 1 bytes leftover after parsing attributes in process `syz.2.710'.
[   98.839599][ T7533] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.737'.
[   99.811512][ T7553] netlink: 'syz.0.746': attribute type 29 has an invalid length.
[   99.815205][ T7553] netlink: 'syz.0.746': attribute type 29 has an invalid length.
[   99.850411][ T7555] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.748'.
[  100.315512][ T7588] netlink: 60 bytes leftover after parsing attributes in process `syz.0.763'.
[  100.326617][ T7588] caif0: entered promiscuous mode
[  100.327426][ T7584] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  100.328347][ T7588] caif0: entered allmulticast mode
[  100.329103][ T7588] netlink: 10 bytes leftover after parsing attributes in process `syz.0.763'.
[  100.331613][ T7584] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  100.505280][ T7592] netlink: 'syz.1.765': attribute type 29 has an invalid length.
[  100.510889][ T7592] netlink: 'syz.1.765': attribute type 29 has an invalid length.
[  100.516328][ T7592] netlink: 'syz.1.765': attribute type 29 has an invalid length.
[  100.519943][ T7592] netlink: 'syz.1.765': attribute type 29 has an invalid length.
[  100.535588][ T7594] veth0_vlan: entered allmulticast mode
[  100.673119][ T7598] veth0_vlan: left promiscuous mode
[  100.675313][ T7598] veth0_vlan: entered promiscuous mode
[  100.955076][ T7608] netlink: 'syz.0.771': attribute type 10 has an invalid length.
[  100.969459][ T7608] team0: Port device geneve1 added
[  101.174475][ T7616] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.775'.
[  101.179054][ T7616] netlink: 'syz.2.775': attribute type 1 has an invalid length.
[  101.252222][ T5827] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10
[  101.664587][ T7640] netlink: 144 bytes leftover after parsing attributes in process `syz.0.786'.
[  102.047077][ T7656] netlink: 'syz.0.794': attribute type 2 has an invalid length.
[  102.179019][ T7668] dvmrp1: tun_chr_ioctl cmd 35108
[  102.330285][ T7679] netlink: 132 bytes leftover after parsing attributes in process `syz.0.802'.
[  102.371357][ T7684] netlink: 'syz.2.807': attribute type 29 has an invalid length.
[  102.845543][ T7688] netlink: 56429 bytes leftover after parsing attributes in process `syz.1.809'.
[  102.968956][ T7700] netlink: 809 bytes leftover after parsing attributes in process `syz.1.815'.
[  102.977488][ T7700] netlink: 130160 bytes leftover after parsing attributes in process `syz.1.815'.
[  102.981597][ T7700] netlink: 809 bytes leftover after parsing attributes in process `syz.1.815'.
[  103.063847][ T7708] net_ratelimit: 74 callbacks suppressed
[  103.063861][ T7708] openvswitch: netlink: Flow actions attr not present in new flow.
[  103.119283][ T7714] geneve0: entered promiscuous mode
[  103.164438][ T7714] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  103.291946][ T5827] Bluetooth: hci2: command tx timeout
[  104.226890][ T7735] netlink: 40 bytes leftover after parsing attributes in process `syz.2.831'.
[  104.543186][ T7746] lo: entered allmulticast mode
[  104.547611][ T7746] lo: entered promiscuous mode
[  104.549197][ T7746] lo: left allmulticast mode
[  104.564046][ T5827] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[  104.579666][ T7748] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.837'.
[  104.597421][ T7750] team0: Device ipvlan1 is up. Set it down before adding it as a team port
[  104.780694][ T7764] caif0: entered promiscuous mode
[  104.789958][ T7764] caif0: entered allmulticast mode
[  105.410436][ T7795] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.859'.
[  105.918679][ T7810] syzkaller0: entered promiscuous mode
[  105.920759][ T7810] syzkaller0: entered allmulticast mode
[  106.984820][ T7840] validate_nla: 8 callbacks suppressed
[  106.984834][ T7840] netlink: 'syz.2.880': attribute type 13 has an invalid length.
[  106.989519][ T7840] __nla_validate_parse: 1 callbacks suppressed
[  106.989525][ T7840] netlink: 14581 bytes leftover after parsing attributes in process `syz.2.880'.
[  107.177866][ T7864] netlink: 180 bytes leftover after parsing attributes in process `syz.1.892'.
[  107.262567][ T7872] syzkaller0: entered promiscuous mode
[  107.264421][ T7872] syzkaller0: entered allmulticast mode
[  107.364384][ T7876] netlink: 'syz.1.898': attribute type 39 has an invalid length.
[  107.450623][ T7890] netlink: 809 bytes leftover after parsing attributes in process `syz.2.905'.
[  107.454212][ T7890] netlink: 130160 bytes leftover after parsing attributes in process `syz.2.905'.
[  107.468427][ T7892] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.906'.
[  107.531638][ T7898] netlink: 'syz.2.909': attribute type 21 has an invalid length.
[  108.029750][ T7909] syzkaller0: entered promiscuous mode
[  108.034662][ T7909] syzkaller0: entered allmulticast mode
[  108.679090][ T7924] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.918'.
[  109.436987][ T7953] netlink: 731 bytes leftover after parsing attributes in process `syz.0.932'.
[  110.294616][ T7982] bridge0: port 3(ip6gretap0) entered blocking state
[  110.298844][ T7982] bridge0: port 3(ip6gretap0) entered disabled state
[  110.306829][ T7982] ip6gretap0: entered allmulticast mode
[  110.327934][ T7982] ip6gretap0: entered promiscuous mode
[  110.335516][ T7982] bridge0: port 3(ip6gretap0) entered blocking state
[  110.339291][ T7982] bridge0: port 3(ip6gretap0) entered forwarding state
[  110.860729][ T8019] netlink: 'syz.1.961': attribute type 10 has an invalid length.
[  110.863439][ T8019] netlink: 'syz.1.961': attribute type 19 has an invalid length.
[  110.866109][ T8019] netlink: 156 bytes leftover after parsing attributes in process `syz.1.961'.
[  110.944271][ T8026] netlink: 'syz.1.964': attribute type 7 has an invalid length.
[  111.023907][ T8032] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.967'.
[  111.027091][ T8032] netlink: 6200 bytes leftover after parsing attributes in process `syz.1.967'.
[  111.030298][ T8032] tc_dump_action: action bad kind
[  112.661492][ T8086] netlink: 'syz.1.993': attribute type 3 has an invalid length.
[  112.665298][ T8086] netlink: 'syz.1.993': attribute type 1 has an invalid length.
[  112.668584][ T8086] __nla_validate_parse: 2 callbacks suppressed
[  112.668595][ T8086] netlink: 116 bytes leftover after parsing attributes in process `syz.1.993'.
[  112.687459][ T8087] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.991'.
[  112.690778][ T8084] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.991'.
[  112.696044][ T8087] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.991'.
[  112.708476][ T8089] netlink: 'syz.1.994': attribute type 10 has an invalid length.
[  112.715692][ T8089] bridge0: port 3(team0) entered disabled state
[  112.718460][ T8089] team0: left allmulticast mode
[  112.720474][ T8089] C: left allmulticast mode
[  112.722430][ T8089] team_slave_1: left allmulticast mode
[  112.724351][ T8089] bond0: left allmulticast mode
[  112.726102][ T8089] bond_slave_0: left allmulticast mode
[  112.728189][ T8089] bond_slave_1: left allmulticast mode
[  112.730153][ T8089] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  112.733863][ T8089] team0: left promiscuous mode
[  112.735704][ T8089] C: left promiscuous mode
[  112.737752][ T8089] team_slave_1: left promiscuous mode
[  112.740185][ T8089] bond0: left promiscuous mode
[  112.742004][ T8089] bond_slave_0: left promiscuous mode
[  112.744062][ T8089] bond_slave_1: left promiscuous mode
[  112.746400][ T8089] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  112.749304][ T8089] bridge0: port 3(team0) entered disabled state
[  112.754944][ T8089] batman_adv: batadv0: Adding interface: team0
[  112.757112][ T8089] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.766435][ T8089] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  112.794046][ T8095] netlink: 'syz.2.997': attribute type 5 has an invalid length.
[  112.801786][ T8095] netlink: 'syz.2.997': attribute type 7 has an invalid length.
[  112.804441][ T8095] netlink: 137592 bytes leftover after parsing attributes in process `syz.2.997'.
[  112.870489][ T8103] raw_sendmsg: syz.2.1001 forgot to set AF_INET. Fix it!
[  113.081036][ T8105] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1002'.
[  113.367988][ T8140] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.1019'.
[  113.475265][ T8149] netlink: 22 bytes leftover after parsing attributes in process `syz.0.1020'.
[  113.601096][ T8158] netlink: 'syz.2.1027': attribute type 21 has an invalid length.
[  113.612952][ T8161] netlink: 'syz.0.1029': attribute type 2 has an invalid length.
[  113.615565][ T8161] netlink: 'syz.0.1029': attribute type 8 has an invalid length.
[  113.619216][ T8161] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1029'.
[  113.719583][ T8176] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1038'.
[  113.723715][ T8176] tc_dump_action: action bad kind
[  113.800359][ T8185] netlink: 'syz.1.1041': attribute type 2 has an invalid length.
[  113.997878][ T8187] netlink: 'syz.2.1042': attribute type 27 has an invalid length.
[  114.679489][ T5827] Bluetooth: hci2: unexpected event 0x1d length: 15 > 5
[  115.549849][ T8275] team0: Device veth1_macvtap failed to register rx_handler
[  117.447277][ T8373] openvswitch: netlink: Message has 4 unknown bytes.
[  117.461502][ T8373] netlink: zone id is out of range
[  117.466539][ T8373] netlink: zone id is out of range
[  117.471650][ T8373] netlink: zone id is out of range
[  117.474213][ T8373] netlink: zone id is out of range
[  117.476664][ T8373] netlink: zone id is out of range
[  117.479089][ T8373] netlink: zone id is out of range
[  117.481516][ T8373] netlink: zone id is out of range
[  117.494314][ T8373] netlink: zone id is out of range
[  117.502798][ T8373] netlink: zone id is out of range
[  117.779854][ T5827] Bluetooth: hci0: unexpected event 0x1c length: 151 > 5
[  119.246582][ T8414] validate_nla: 3 callbacks suppressed
[  119.246593][ T8414] netlink: 'syz.1.1141': attribute type 2 has an invalid length.
[  119.259383][ T8414] netlink: 'syz.1.1141': attribute type 8 has an invalid length.
[  119.263566][ T8414] __nla_validate_parse: 7 callbacks suppressed
[  119.263574][ T8414] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1141'.
[  119.363057][ T8427] IPv6: NLM_F_CREATE should be specified when creating new route
[  119.411431][ T8434] netlink: 495 bytes leftover after parsing attributes in process `syz.0.1149'.
[  120.042453][ T5278] udevd[5278]: worker [8190] terminated by signal 33 (Unknown signal 33)
[  120.090843][ T8468] netlink: 'syz.0.1166': attribute type 17 has an invalid length.
[  120.097402][ T8468] netlink: 'syz.0.1166': attribute type 16 has an invalid length.
[  120.100861][ T8468] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1166'.
[  120.450428][ T8495] netlink: 'syz.2.1179': attribute type 2 has an invalid length.
[  120.461893][ T8495] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1179'.
[  120.843950][ T8522] netlink: 'syz.2.1192': attribute type 1 has an invalid length.
[  121.833186][ T8552] delete_channel: no stack
[  121.835638][ T8552] delete_channel: no stack
[  121.845039][ T8552] netlink: 'syz.0.1205': attribute type 6 has an invalid length.
[  121.848338][ T8552] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1205'.
[  121.986650][ T8555] syzkaller0: entered promiscuous mode
[  121.991098][ T8555] syzkaller0: entered allmulticast mode
[  123.097412][ T8559] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1207'.
[  123.296176][ T8582] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.1217'.
[  123.300156][ T8582] bridge: RTM_NEWNEIGH with invalid state 0x1
[  123.385639][ T5827] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30
[  123.619982][ T8602] netlink: 'syz.0.1226': attribute type 10 has an invalid length.
[  123.629409][ T8602] team0: Cannot enslave team device to itself
[  124.158783][ T8615] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  124.167137][ T8615] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  124.479082][ T5827] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  124.892029][ T5827] Bluetooth: hci2: unexpected event 0x10 length: 15 > 1
[  124.892550][ T5827] Bluetooth: hci2: hardware error 0x00
[  125.058763][ T8655] netlink: 'syz.2.1249': attribute type 11 has an invalid length.
[  125.070576][ T8655] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1249'.
[  125.174894][ T8669] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1256'.
[  125.178953][ T8669] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.1256'.
[  125.187640][ T8669] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1256'.
[  125.329410][ T8680] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.1261'.
[  125.454066][   T55] Bluetooth: hci1: command tx timeout
[  125.488929][ T8694] syzkaller0: entered promiscuous mode
[  125.491317][ T8694] syzkaller0: entered allmulticast mode
[  125.839015][   T55] Bluetooth: hci1: unexpected event 0x30 length: 82 > 3
[  126.615775][ T8742] netlink: 'syz.0.1289': attribute type 8 has an invalid length.
[  126.624741][ T8742] netlink: 'syz.0.1289': attribute type 6 has an invalid length.
[  126.628060][ T8742] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.1289'.
[  126.765783][ T8752] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1294'.
[  126.828487][ T8758] netlink: 26 bytes leftover after parsing attributes in process `syz.1.1296'.
[  126.973495][ T5827] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  128.204917][ T8817] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  128.433230][ T8832] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1331'.
[  128.627247][ T8846] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1338'.
[  129.628533][ T8869] netlink: 'syz.2.1349': attribute type 2 has an invalid length.
[  129.632666][ T8869] netlink: 'syz.2.1349': attribute type 8 has an invalid length.
[  129.931840][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  130.388007][ T8904] netlink: 'syz.2.1364': attribute type 46 has an invalid length.
[  130.705210][ T8919] netlink: 'syz.1.1370': attribute type 39 has an invalid length.
[  130.709159][ T8919] veth0_macvtap: left promiscuous mode
[  130.800562][ T8929] netlink: 'syz.2.1371': attribute type 29 has an invalid length.
[  130.804404][ T8924] netlink: 'syz.2.1371': attribute type 29 has an invalid length.
[  131.648166][ T8970] __nla_validate_parse: 3 callbacks suppressed
[  131.648210][ T8970] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1395'.
[  131.736219][ T8972] syzkaller0: entered promiscuous mode
[  131.740673][ T8972] syzkaller0: entered allmulticast mode
[  132.333933][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.336492][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  133.176598][ T8981] C: renamed from team_slave_0 (while UP)
[  133.179740][ T8981] netlink: 'syz.2.1400': attribute type 3 has an invalid length.
[  133.185511][ T8981] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1400'.
[  133.188676][ T8981] net_ratelimit: 80 callbacks suppressed
[  133.188683][ T8981] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  133.210793][ T8983] netlink: 'syz.1.1401': attribute type 49 has an invalid length.
[  133.477076][ T9009] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.1414'.
[  133.545534][ T9017] syzkaller0: entered promiscuous mode
[  133.550002][ T9017] syzkaller0: entered allmulticast mode
[  134.003856][ T9047] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1431'.
[  134.011970][ T9047] batadv_slave_1: entered promiscuous mode
[  136.161838][ T9101] netlink: 'syz.0.1453': attribute type 39 has an invalid length.
[  137.624749][ T9155] sock: sock_timestamping_bind_phc: sock not bind to device
[  137.796669][ T9157] netlink: 'syz.0.1478': attribute type 11 has an invalid length.
[  137.800234][ T9157] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1478'.
[  137.833486][ T9157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  137.858959][ T9166] syzkaller1: tun_chr_ioctl cmd 1074025676
[  137.861398][ T9166] syzkaller1: owner set to 778
[  137.868599][ T9157] netlink: 'syz.0.1478': attribute type 21 has an invalid length.
[  137.872201][ T9157] netlink: 'syz.0.1478': attribute type 11 has an invalid length.
[  137.983806][ T9173] netlink: 'syz.0.1483': attribute type 6 has an invalid length.
[  137.986968][ T9173] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1483'.
[  138.597910][ T9194] netlink: 'syz.2.1495': attribute type 33 has an invalid length.
[  138.601166][ T9194] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1495'.
[  138.938030][ T9208] syzkaller0: entered promiscuous mode
[  138.940431][ T9208] syzkaller0: entered allmulticast mode
[  140.387963][ T9260] netlink: 209588 bytes leftover after parsing attributes in process `syz.2.1524'.
[  140.486802][ T9263] netlink: 'syz.1.1525': attribute type 64 has an invalid length.
[  140.627112][ T9238] netlink: 'syz.0.1513': attribute type 28 has an invalid length.
[  140.835230][ T9280] delete_channel: no stack
[  140.839493][ T9280] delete_channel: no stack
[  140.877118][ T9280] netlink: 'syz.1.1533': attribute type 6 has an invalid length.
[  140.880515][ T9280] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1533'.
[  142.172315][ T9313] netlink: 'syz.2.1548': attribute type 11 has an invalid length.
[  142.175314][ T9313] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1548'.
[  142.297653][ T9321] netlink: 'syz.1.1552': attribute type 11 has an invalid length.
[  142.300738][ T9321] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.1552'.
[  142.329208][ T9320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  143.566983][ T9358] netlink: 'syz.0.1566': attribute type 16 has an invalid length.
[  144.215876][ T9372] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1573'.
[  144.220253][ T9371] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1573'.
[  144.225968][ T9372] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1573'.
[  144.334746][ T9376] netlink: 'syz.2.1575': attribute type 21 has an invalid length.
[  144.376536][ T9378] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1576'.
[  144.418240][ T9380] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1577'.
[  144.964124][ T9406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1588'.
[  145.062329][ T9410] netlink: 'syz.2.1589': attribute type 10 has an invalid length.
[  145.074275][ T9410] batman_adv: batadv0: Adding interface: team0
[  145.077070][ T9410] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.087858][ T9410] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  145.164845][ T9416] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  145.516048][ T9415] bond0: entered promiscuous mode
[  145.527391][ T9415] bond_slave_0: entered promiscuous mode
[  146.301211][ T9415] bond_slave_1: entered promiscuous mode
[  146.781355][ T9445] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1604'.
[  146.785306][ T9445] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.1604'.
[  146.789215][ T9445] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1604'.
[  147.812227][ T9460] netlink: 'syz.2.1611': attribute type 2 has an invalid length.
[  147.814977][ T9460] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.1611'.
[  147.847345][ T9462] netlink: 'syz.1.1612': attribute type 2 has an invalid length.
[  148.616643][ T5827] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[  148.975166][ T9541] netlink: 'syz.0.1647': attribute type 1 has an invalid length.
[  149.162967][ T9557] syzkaller0: entered promiscuous mode
[  149.165105][ T9557] syzkaller0: entered allmulticast mode
[  149.289977][ T9566] netlink: 'syz.2.1656': attribute type 21 has an invalid length.
[  149.366572][ T9568] netlink: 'syz.2.1656': attribute type 5 has an invalid length.
[  149.980225][ T9566] __nla_validate_parse: 3 callbacks suppressed
[  149.980237][ T9566] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1656'.
[  149.981064][ T9561] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  149.991137][ T9561] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  150.379482][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  150.384717][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  150.389963][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  150.395145][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  150.399918][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  150.549539][ T9587] bond0: entered promiscuous mode
[  150.551662][ T9587] bond_slave_0: entered promiscuous mode
[  150.554648][ T9587] bond_slave_1: entered promiscuous mode
[  150.751601][ T9583] chnl_net:caif_netlink_parms(): no params data found
[  150.887083][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  150.890315][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  150.896353][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  150.899219][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  150.902293][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  150.960701][ T9583] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.964379][ T9583] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.967256][ T9583] bridge_slave_0: entered allmulticast mode
[  150.970175][ T9583] bridge_slave_0: entered promiscuous mode
[  150.976443][ T9583] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.978937][ T9583] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.981460][ T9583] bridge_slave_1: entered allmulticast mode
[  150.984609][ T9583] bridge_slave_1: entered promiscuous mode
[  151.019094][ T9583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  151.030581][ T9583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  151.092727][ T9583] team0: Port device team_slave_0 added
[  151.098310][ T9583] team0: Port device team_slave_1 added
[  151.109332][ T9597] netlink: 'syz.0.1671': attribute type 19 has an invalid length.
[  151.138207][ T9583] batman_adv: batadv0: Adding interface: batadv_slave_0
[  151.140534][ T9583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.153225][ T9583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  151.164989][ T9583] batman_adv: batadv0: Adding interface: batadv_slave_1
[  151.167310][ T9583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.176619][ T9583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  151.293895][ T9606] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1674'.
[  151.308325][ T9583] hsr_slave_0: entered promiscuous mode
[  151.310685][ T9583] hsr_slave_1: entered promiscuous mode
[  151.313940][ T9583] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  151.316467][ T9583] Cannot create hsr debugfs directory
[  151.319027][ T9591] chnl_net:caif_netlink_parms(): no params data found
[  151.399571][ T9591] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.402196][ T9591] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.404583][ T9591] bridge_slave_0: entered allmulticast mode
[  151.407279][ T9591] bridge_slave_0: entered promiscuous mode
[  151.415643][ T9591] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.418619][ T9591] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.421599][ T9591] bridge_slave_1: entered allmulticast mode
[  151.425240][ T9591] bridge_slave_1: entered promiscuous mode
[  151.453534][ T9591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  151.459512][ T9591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  151.512864][ T9591] team0: Port device team_slave_0 added
[  151.520238][ T9591] team0: Port device team_slave_1 added
[  151.549239][ T9591] batman_adv: batadv0: Adding interface: batadv_slave_0
[  151.551834][ T9591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.561482][ T9591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  151.566770][ T9591] batman_adv: batadv0: Adding interface: batadv_slave_1
[  151.569140][ T9591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.578330][ T9591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  151.619703][ T9591] hsr_slave_0: entered promiscuous mode
[  151.623450][ T9591] hsr_slave_1: entered promiscuous mode
[  151.627814][ T9591] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  151.631595][ T9591] Cannot create hsr debugfs directory
[  151.679528][ T9583] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  151.688805][ T9583] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  151.697747][ T9583] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  151.710358][ T9583] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  151.797862][ T9591] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  151.802917][ T9591] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  151.807758][ T9591] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  151.813763][ T9591] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  151.838904][ T9591] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.841751][ T9591] bridge0: port 2(bridge_slave_1) entered forwarding state
[  151.844338][ T9591] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.846808][ T9591] bridge0: port 1(bridge_slave_0) entered forwarding state
[  151.879940][ T9583] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.896548][ T1086] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.899869][ T1086] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.913550][ T9583] 8021q: adding VLAN 0 to HW filter on device team0
[  151.921650][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.924290][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[  151.933349][ T9591] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.947223][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.949692][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[  151.964165][ T9591] 8021q: adding VLAN 0 to HW filter on device team0
[  151.978925][ T6190] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.981462][ T6190] bridge0: port 1(bridge_slave_0) entered forwarding state
[  151.998976][ T6190] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.001526][ T6190] bridge0: port 2(bridge_slave_1) entered forwarding state
[  152.061340][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.126507][ T9583] 8021q: adding VLAN 0 to HW filter on device batadv0
[  152.140494][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.167944][ T9583] veth0_vlan: entered promiscuous mode
[  152.190525][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.214855][ T9583] veth1_vlan: entered promiscuous mode
[  152.224079][ T9591] 8021q: adding VLAN 0 to HW filter on device batadv0
[  152.240738][ T9583] veth0_macvtap: entered promiscuous mode
[  152.260990][   T12] bond0: (slave netdevsim0): Releasing backup interface
[  152.268285][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.277634][ T9583] veth1_macvtap: entered promiscuous mode
[  152.300399][ T9637] : port 1(veth0_to_bridge) entered blocking state
[  152.303376][ T9637] : port 1(veth0_to_bridge) entered disabled state
[  152.306005][ T9637] veth0_to_bridge: entered allmulticast mode
[  152.309280][ T9637] veth0_to_bridge: entered promiscuous mode
[  152.327769][ T9583] batman_adv: batadv0: Interface activated: batadv_slave_0
[  152.331150][ T9637] : port 2(erspan0) entered blocking state
[  152.335149][ T9637] : port 2(erspan0) entered disabled state
[  152.337665][ T9637] erspan0: entered allmulticast mode
[  152.340870][ T9637] erspan0: entered promiscuous mode
[  152.352758][ T9583] batman_adv: batadv0: Interface activated: batadv_slave_1
[  152.368140][ T9583] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  152.371084][ T9583] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  152.376192][ T9583] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  152.379334][ T9583] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  152.415134][ T5827] Bluetooth: hci0: command tx timeout
[  152.487408][   T12] bridge_slave_1: left allmulticast mode
[  152.489992][   T12] bridge_slave_1: left promiscuous mode
[  152.494146][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.500229][   T12] bridge_slave_0: left allmulticast mode
[  152.503646][   T12] bridge_slave_0: left promiscuous mode
[  152.505751][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.800956][   T12] team0: Port device bond0 removed
[  152.804613][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  152.809319][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  152.815207][   T12] bond0 (unregistering): Released all slaves
[  152.857618][ T9591] veth0_vlan: entered promiscuous mode
[  152.888500][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.900747][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.908164][ T9591] veth1_vlan: entered promiscuous mode
[  152.967220][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.969816][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.974541][ T9591] veth0_macvtap: entered promiscuous mode
[  152.982772][ T5827] Bluetooth: hci2: command tx timeout
[  152.983158][ T9591] veth1_macvtap: entered promiscuous mode
[  153.029316][ T9591] batman_adv: batadv0: Interface activated: batadv_slave_0
[  153.040913][ T9591] batman_adv: batadv0: Interface activated: batadv_slave_1
[  153.088370][ T9591] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  153.092357][ T9591] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  153.095868][ T9591] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  153.098884][ T9591] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  153.175276][   T12] hsr_slave_0: left promiscuous mode
[  153.178122][ T9687] netlink: 'syz.3.1662': attribute type 1 has an invalid length.
[  153.180751][ T9687] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1662'.
[  153.192135][   T12] hsr_slave_1: left promiscuous mode
[  153.194435][   T12] batman_adv: batadv0: Removing interface: team0
[  153.197737][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  153.201150][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  153.206423][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  153.209417][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  153.214467][   T12] batman_adv: batadv0: Interface deactivated: hsr_slave_1
[  153.217009][   T12] batman_adv: batadv0: Removing interface: hsr_slave_1
[  153.254276][   T12] veth1_macvtap: left promiscuous mode
[  153.257387][   T12] veth0_vlan: left promiscuous mode
[  153.837915][   T12] team0 (unregistering): Port device team_slave_1 removed
[  153.864913][   T12] team0 (unregistering): Port device C removed
[  154.301846][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.305039][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.357585][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.363778][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.496647][ T5827] Bluetooth: hci0: command tx timeout
[  154.734535][ T9783] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  155.055858][ T5827] Bluetooth: hci2: command tx timeout
[  156.572026][ T5827] Bluetooth: hci0: command tx timeout
[  156.847485][ T9859] netlink: 'syz.4.1706': attribute type 10 has an invalid length.
[  156.915496][ T9859] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  157.136775][ T5827] Bluetooth: hci2: command tx timeout
[  157.157656][ T9873] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  158.652116][ T5827] Bluetooth: hci0: command tx timeout
[  159.357422][ T9629] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.449146][ T9629] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.514705][ T9629] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.722029][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  159.726508][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  159.730290][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  159.743383][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  159.747589][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  159.850276][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  159.857727][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  159.862870][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  159.868192][ T9962] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  159.871136][ T9962] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  160.394093][ T9629] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.486970][ T9957] chnl_net:caif_netlink_parms(): no params data found
[  161.040544][ T9972] mac80211_hwsim hwsim10 .3c: renamed from wlan1 (while UP)
[  161.387555][ T9957] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.392605][ T9957] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.395282][ T9957] bridge_slave_0: entered allmulticast mode
[  161.398263][ T9957] bridge_slave_0: entered promiscuous mode
[  161.416339][ T9957] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.420570][ T9957] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.423773][ T9957] bridge_slave_1: entered allmulticast mode
[  161.426625][ T9957] bridge_slave_1: entered promiscuous mode
[  161.451556][ T9957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  161.458326][ T9957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  161.461530][ T9629] dummy0: left allmulticast mode
[  161.473417][ T9629] bridge0: port 3(dummy0) entered disabled state
[  161.478207][ T9629] bridge_slave_1: left allmulticast mode
[  161.480663][ T9629] bridge_slave_1: left promiscuous mode
[  161.483565][ T9629] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.488183][ T9629] bridge_slave_0: left promiscuous mode
[  161.493282][ T9629] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.526725][ T9629] erspan0: left allmulticast mode
[  161.528581][ T9629] erspan0: left promiscuous mode
[  161.530581][ T9629] : port 2(erspan0) entered disabled state
[  161.536221][ T9629] veth0_to_bridge: left allmulticast mode
[  161.538145][ T9629] veth0_to_bridge: left promiscuous mode
[  161.540115][ T9629] : port 1(veth0_to_bridge) entered disabled state
[  161.546957][ T9962] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4
[  161.599618][ T9984] netlink: 'syz.3.1753': attribute type 21 has an invalid length.
[  161.676569][ T9629] team0: Port device geneve1 removed
[  161.685190][ T9629] bond0 (unregistering): (slave geneve0): Releasing backup interface
[  161.772153][ T5827] Bluetooth: hci1: command tx timeout
[  161.859459][ T9629] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  161.862563][ T9629] bond_slave_0: left promiscuous mode
[  161.865753][ T9629] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  161.868675][ T9629] bond_slave_1: left promiscuous mode
[  161.871148][ T9629] bond0 (unregistering): Released all slaves
[  161.935372][ T5827] Bluetooth: hci2: command tx timeout
[  161.980639][ T9957] team0: Port device team_slave_0 added
[  162.009394][ T9957] team0: Port device team_slave_1 added
[  162.055557][ T9996] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1756'.
[  162.058452][ T9996] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1756'.
[  162.061609][ T9957] batman_adv: batadv0: Adding interface: batadv_slave_0
[  162.065999][ T9957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.075251][ T9957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  162.108521][ T9957] batman_adv: batadv0: Adding interface: batadv_slave_1
[  162.110789][ T9957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.120532][ T9957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  162.217594][ T9959] chnl_net:caif_netlink_parms(): no params data found
[  162.296663][ T9957] hsr_slave_0: entered promiscuous mode
[  162.299024][ T9957] hsr_slave_1: entered promiscuous mode
[  162.402089][ T9629] hsr_slave_0: left promiscuous mode
[  162.404579][ T9629] hsr_slave_1: left promiscuous mode
[  162.423214][ T9629] veth0_macvtap: left promiscuous mode
[  162.425152][ T9629] veth1_vlan: left promiscuous mode
[  162.705123][ T9629] team0 (unregistering): Port device team_slave_1 removed
[  162.728083][ T9629] team0 (unregistering): Port device team_slave_0 removed
[  163.045474][ T9959] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.047887][ T9959] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.050295][ T9959] bridge_slave_0: entered allmulticast mode
[  163.060655][ T9959] bridge_slave_0: entered promiscuous mode
[  163.084777][ T9959] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.087695][ T9959] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.090317][ T9959] bridge_slave_1: entered allmulticast mode
[  163.094205][ T9959] bridge_slave_1: entered promiscuous mode
[  163.213795][ T9959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  163.235584][ T9959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  163.295696][ T9959] team0: Port device team_slave_0 added
[  163.335745][ T9959] team0: Port device team_slave_1 added
[  163.480997][ T9959] batman_adv: batadv0: Adding interface: batadv_slave_0
[  163.501440][ T9959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.513062][ T9959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  163.518596][ T9959] batman_adv: batadv0: Adding interface: batadv_slave_1
[  163.521392][ T9959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.530524][ T9959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  163.575683][ T9957] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  163.591174][ T9957] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  163.600921][ T9957] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  163.608478][ T9957] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  163.612086][ T5827] Bluetooth: hci0: command 0x0406 tx timeout
[  163.649056][ T9959] hsr_slave_0: entered promiscuous mode
[  163.651470][ T9959] hsr_slave_1: entered promiscuous mode
[  163.660783][ T9959] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  163.672628][ T9959] Cannot create hsr debugfs directory
[  163.863998][ T9962] Bluetooth: hci1: command tx timeout
[  163.916681][ T9959] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  163.945613][ T9959] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  163.970482][ T9957] 8021q: adding VLAN 0 to HW filter on device bond0
[  163.990319][ T9959] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  164.014097][ T9962] Bluetooth: hci2: command tx timeout
[  164.043511][ T9959] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  164.071259][ T9957] 8021q: adding VLAN 0 to HW filter on device team0
[  164.106135][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.109088][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[  164.125996][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.128463][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[  164.235340][ T9959] 8021q: adding VLAN 0 to HW filter on device bond0
[  164.283246][ T9959] 8021q: adding VLAN 0 to HW filter on device team0
[  164.316917][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.319906][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[  164.353048][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.356039][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[  164.407540][T10085] netlink: 'syz.3.1776': attribute type 11 has an invalid length.
[  164.410729][T10085] netlink: 149476 bytes leftover after parsing attributes in process `syz.3.1776'.
[  164.447553][ T9957] 8021q: adding VLAN 0 to HW filter on device batadv0
[  164.495462][T10091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  164.615525][ T9959] 8021q: adding VLAN 0 to HW filter on device batadv0
[  164.766120][ T9957] veth0_vlan: entered promiscuous mode
[  164.786728][ T9957] veth1_vlan: entered promiscuous mode
[  164.817106][ T9957] veth0_macvtap: entered promiscuous mode
[  164.825326][ T9957] veth1_macvtap: entered promiscuous mode
[  164.870710][ T9957] batman_adv: batadv0: Interface activated: batadv_slave_0
[  164.917815][ T9957] batman_adv: batadv0: Interface activated: batadv_slave_1
[  164.930266][ T9957] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  164.938275][ T9957] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  164.941587][ T9957] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  164.945490][ T9957] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  164.965304][ T9959] veth0_vlan: entered promiscuous mode
[  164.984642][ T9959] veth1_vlan: entered promiscuous mode
[  165.078567][ T1839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  165.081216][ T1839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.162519][ T9959] veth0_macvtap: entered promiscuous mode
[  165.167458][ T9959] veth1_macvtap: entered promiscuous mode
[  165.173704][ T9716] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  165.176765][ T9716] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.227615][ T9959] batman_adv: batadv0: Interface activated: batadv_slave_0
[  165.269369][ T9959] batman_adv: batadv0: Interface activated: batadv_slave_1
[  165.317002][ T9959] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  165.320179][ T9959] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  165.334789][ T9959] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  165.337545][ T9959] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  165.476938][ T1839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  165.479508][ T1839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.527035][ T9716] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  165.530264][ T9716] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.932180][ T9962] Bluetooth: hci1: command tx timeout
[  165.986089][T10148] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.1786'.
[  166.096360][ T9962] Bluetooth: hci2: command tx timeout
[  166.307850][ T9962] Bluetooth: hci1: ISO packet for unknown connection handle 3849
[  166.490020][    C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  166.491528][T10174] netlink: 'syz.5.1793': attribute type 17 has an invalid length.
[  166.523795][T10176] netlink: 137592 bytes leftover after parsing attributes in process `syz.6.1796'.
[  166.541856][T10176] nbd: must specify a size in bytes for the device
[  166.651352][T10188] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1799'.
[  166.963469][T10207] netlink: 'syz.3.1806': attribute type 3 has an invalid length.
[  166.966134][T10207] netlink: 'syz.3.1806': attribute type 1 has an invalid length.
[  166.968896][T10207] netlink: 5886 bytes leftover after parsing attributes in process `syz.3.1806'.
[  167.014696][ T9962] Bluetooth: hci1: Unable to find connection for big 0x00
[  167.877556][T10254] netlink: 'syz.5.1821': attribute type 2 has an invalid length.
[  167.880251][T10254] netlink: 17267 bytes leftover after parsing attributes in process `syz.5.1821'.
[  167.933037][T10257] netlink: 172 bytes leftover after parsing attributes in process `syz.6.1823'.
[  168.012008][ T9962] Bluetooth: hci1: command tx timeout
[  168.332586][ T9962] Bluetooth: hci2: command tx timeout
[  168.845831][T10311] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1838'.
[  169.387902][T10351] netlink: 'syz.5.1852': attribute type 39 has an invalid length.
[  169.766756][T10377] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.1863'.
[  169.791516][T10381] netlink: 15999 bytes leftover after parsing attributes in process `syz.6.1864'.
[  169.817348][T10384] sctp: [Deprecated]: syz.5.1865 (pid 10384) Use of struct sctp_assoc_value in delayed_ack socket option.
[  169.817348][T10384] Use struct sctp_sack_info instead
[  170.582946][T10438] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1891'.
[  171.418025][T10467] delete_channel: no stack
[  171.798869][T10491] netlink: 'syz.6.1912': attribute type 25 has an invalid length.
[  172.190573][T10506] netlink: 'syz.5.1920': attribute type 2 has an invalid length.
[  172.194598][T10506] netlink: 'syz.5.1920': attribute type 1 has an invalid length.
[  172.197831][T10506] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.1920'.
[  172.201190][T10506] block nbd5: not configured, cannot reconfigure
[  172.402045][T10514] GPL: port 1(erspan0) entered blocking state
[  172.404524][T10514] GPL: port 1(erspan0) entered disabled state
[  172.417287][T10514] erspan0: entered allmulticast mode
[  172.433534][T10514] erspan0: entered promiscuous mode
[  172.444612][T10514] GPL: port 1(erspan0) entered blocking state
[  172.446791][T10514] GPL: port 1(erspan0) entered forwarding state
[  172.484648][T10520] netlink: 'syz.6.1926': attribute type 2 has an invalid length.
[  172.487279][T10520] netlink: 17267 bytes leftover after parsing attributes in process `syz.6.1926'.
[  172.861029][T10550] veth0_vlan: entered allmulticast mode
[  172.917773][T10550] veth0_vlan: left promiscuous mode
[  172.928758][T10550] veth0_vlan: entered promiscuous mode
[  173.287757][T10562] netlink: 'syz.3.1946': attribute type 10 has an invalid length.
[  173.291681][T10562] veth1_vlan: entered allmulticast mode
[  173.506777][T10562] team0: Device veth1_vlan failed to register rx_handler
[  173.558241][T10562] syz.3.1946 (10562) used greatest stack depth: 18680 bytes left
[  173.727195][T10581] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1953'.
[  174.151617][T10606] netlink: 'syz.6.1963': attribute type 13 has an invalid length.
[  174.449258][T10622] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  174.452518][T10622] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  176.024561][T10668] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1987'.
[  176.036578][T10661] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1987'.
[  176.046868][T10668] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1987'.
[  176.062323][T10670] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.1991'.
[  176.610155][T10715] netlink: 'syz.3.2011': attribute type 1 has an invalid length.
[  176.728948][T10720] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2011'.
[  176.948058][T10729] netlink: 'syz.6.2014': attribute type 27 has an invalid length.
[  176.951106][T10729] netlink: 164 bytes leftover after parsing attributes in process `syz.6.2014'.
[  177.259794][T10745] lo: entered promiscuous mode
[  177.441203][T10748] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2020'.
[  177.483539][T10752] C: renamed from team_slave_0 (while UP)
[  177.719390][T10752] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2020'.
[  177.870901][T10768] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.2029'.
[  177.881780][T10768] tc_dump_action: action bad kind
[  177.910635][T10771] netlink: 'syz.6.2028': attribute type 39 has an invalid length.
[  177.938753][T10771] netlink: 'syz.6.2028': attribute type 4 has an invalid length.
[  178.021251][T10782] netlink: 'syz.3.2033': attribute type 2 has an invalid length.
[  178.058503][T10782] netlink: 'syz.3.2033': attribute type 2 has an invalid length.
[  178.492858][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.666360][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.916657][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.990050][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.019320][T10855] netlink: 'syz.6.2060': attribute type 37 has an invalid length.
[  179.119519][T10858] netlink: 'syz.5.2062': attribute type 25 has an invalid length.
[  179.124195][T10858] netlink: 'syz.5.2062': attribute type 1 has an invalid length.
[  179.143985][T10858] bridge0: port 1(bridge_slave_0) entered learning state
[  179.181375][   T12] ip6gretap0: left allmulticast mode
[  179.187682][   T12] ip6gretap0: left promiscuous mode
[  179.201523][   T12] bridge0: port 3(ip6gretap0) entered disabled state
[  179.240341][   T12] bridge_slave_1: left allmulticast mode
[  179.245766][   T12] bridge_slave_1: left promiscuous mode
[  179.247990][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.253543][   T12] bridge_slave_0: left promiscuous mode
[  179.255481][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.478565][   T12] team0: Port device geneve1 removed
[  179.593749][ T9962] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3
[  179.693762][    C0] bridge0: port 1(bridge_slave_0) entered forwarding state
[  179.757379][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  179.765499][   T12] bond_slave_0: left promiscuous mode
[  179.770553][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  179.785652][   T12] bond_slave_1: left promiscuous mode
[  179.793614][   T12] bond0 (unregistering): Released all slaves
[  179.830490][T10893] openvswitch: netlink: Flow actions attr not present in new flow.
[  179.834940][T10893] syzkaller0: entered promiscuous mode
[  179.937126][ T9962] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8
[  180.306475][T10918] netlink: 'syz.3.2084': attribute type 2 has an invalid length.
[  180.416173][   T12] hsr_slave_0: left promiscuous mode
[  180.430331][   T12] hsr_slave_1: left promiscuous mode
[  180.442141][   T12] batman_adv: batadv0: Removing interface: team0
[  180.450754][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  180.454411][T10927] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  180.458532][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  180.464409][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  180.469244][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  180.494520][   T12] veth1_macvtap: left allmulticast mode
[  180.501041][   T12] veth1_macvtap: left promiscuous mode
[  180.504120][   T12] veth0_macvtap: left promiscuous mode
[  180.506755][   T12] veth1_vlan: left promiscuous mode
[  180.509175][   T12] veth0_vlan: left promiscuous mode
[  181.180825][   T12] team0 (unregistering): Port device team_slave_1 removed
[  181.207054][   T12] team0 (unregistering): Port device C removed
[  181.509863][T10935] __nla_validate_parse: 6 callbacks suppressed
[  181.510007][T10935] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2091'.
[  181.522660][T10932] delete_channel: no stack
[  181.722285][T10944] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2093'.
[  181.818301][T10955] netlink: 5175 bytes leftover after parsing attributes in process `syz.5.2093'.
[  182.719606][T10992] blkio.reset_stats is deprecated
[  183.079864][T11003] delete_channel: no stack
[  184.190658][T11043] netlink: 'syz.5.2124': attribute type 39 has an invalid length.
[  184.195821][T11037] syzkaller0: entered promiscuous mode
[  184.197656][T11037] syzkaller0: entered allmulticast mode
[  186.754845][T11101] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2141'.
[  186.762172][T11101] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2141'.
[  186.773765][T11101] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2141'.
[  186.807400][T11107] netlink: 'syz.3.2144': attribute type 21 has an invalid length.
[  186.836716][T11107] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2144'.
[  186.852084][T11104] delete_channel: no stack
[  187.009916][T11118] netlink: 'syz.5.2149': attribute type 29 has an invalid length.
[  187.018564][T11118] netlink: 'syz.5.2149': attribute type 29 has an invalid length.
[  187.481395][T11140] netlink: 'syz.5.2158': attribute type 6 has an invalid length.
[  187.485172][T11140] netlink: 'syz.5.2158': attribute type 7 has an invalid length.
[  187.487977][T11140] netlink: 'syz.5.2158': attribute type 7 has an invalid length.
[  187.491329][T11140] netlink: 12902 bytes leftover after parsing attributes in process `syz.5.2158'.
[  187.625341][T11145] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2160'.
[  187.629086][T11145] hsr0: entered promiscuous mode
[  187.631178][T11145] hsr0: entered allmulticast mode
[  187.661050][T11145] hsr_slave_0: entered allmulticast mode
[  187.683568][T11145] hsr_slave_1: entered allmulticast mode
[  187.686769][T11149] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2162'.
[  188.359784][T11166] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2169'.
[  188.724597][T11182] netlink: 'syz.5.2177': attribute type 10 has an invalid length.
[  189.738628][T11232] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.741454][T11232] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.757872][T11232] bridge0: entered allmulticast mode
[  189.765925][T11232] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.768989][T11232] bridge0: port 2(bridge_slave_1) entered forwarding state
[  189.772279][T11232] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.775154][T11232] bridge0: port 1(bridge_slave_0) entered forwarding state
[  189.786215][T11232] bridge0: entered promiscuous mode
[  189.835897][T11236] netlink: 'syz.3.2201': attribute type 29 has an invalid length.
[  189.839746][T11236] netlink: 'syz.3.2201': attribute type 29 has an invalid length.
[  190.424090][T11258] netlink: 'syz.3.2211': attribute type 3 has an invalid length.
[  190.426741][T11258] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2211'.
[  235.136705][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 45024851168 wd_nsec: 45024851963
[  235.148931][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  235.150524][   T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  235.152259][   T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  235.153073][   T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  235.153410][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  235.153717][   T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  235.154085][   T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  235.154402][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  235.154997][   T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  235.156549][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  235.156709][   T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  235.156897][   T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  235.157721][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  235.157918][   T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  235.158097][   T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  235.496749][T11343] chnl_net:caif_netlink_parms(): no params data found
[  237.212141][T11346] Bluetooth: hci3: command tx timeout
[  237.212532][T11346] Bluetooth: hci4: command tx timeout
[  237.214699][T11347] Bluetooth: hci5: command tx timeout
[  239.292060][ T5219] Bluetooth: hci4: command tx timeout
[  239.292102][ T5219] Bluetooth: hci3: command tx timeout
[  239.292987][T11347] Bluetooth: hci5: command tx timeout
[  241.373155][T11346] Bluetooth: hci3: command tx timeout
[  241.373183][T11346] Bluetooth: hci4: command tx timeout
[  241.377659][T11347] Bluetooth: hci5: command tx timeout
[  243.453024][ T5219] Bluetooth: hci4: command tx timeout
[  243.453051][ T5219] Bluetooth: hci3: command tx timeout
[  243.453080][T11347] Bluetooth: hci5: command tx timeout
[  282.894780][ T9962] Bluetooth: hci1: command 0x0406 tx timeout
[  282.894847][T11347] Bluetooth: hci2: command 0x0406 tx timeout
[  295.401693][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  295.401711][    C1] rcu: 	1-....: (1 GPs behind) idle=9294/1/0x4000000000000000 softirq=39267/39269 fqs=4769
[  295.402116][    C1] rcu: 	         hardirqs   softirqs   csw/system
[  295.402125][    C1] rcu: 	 number:   983497          0            0
[  295.402133][    C1] rcu: 	cputime:    24386      28102           92   ==> 52490(ms)
[  295.402142][    C1] rcu: 	(t=10500 jiffies g=28893 q=15348 ncpus=2)
[  295.402157][    C1] CPU: 1 UID: 0 PID: 11245 Comm: syz.6.2204 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  295.402169][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  295.402175][    C1] RIP: 0010:console_flush_all+0x7f7/0xc40
[  295.402198][    C1] Code: 48 21 c3 0f 85 e9 01 00 00 e8 75 e7 1e 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 66 e7 1e 00 eb 06 e8 5f e7 1e 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 ea 0a 82 00 48 8b 1b 48 8b 44 24
[  295.402206][    C1] RSP: 0018:ffffc900001e0620 EFLAGS: 00000246
[  295.402217][    C1] RAX: 1ffffffff1d36927 RBX: ffffffff8e9b4938 RCX: ffff88810760d640
[  295.402225][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  295.402231][    C1] RBP: ffffc900001e0770 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  295.402238][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: dffffc0000000000
[  295.402247][    C1] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8e9b48e0
[  295.402253][    C1] FS:  00007f621783a6c0(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
[  295.402262][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  295.402269][    C1] CR2: 00007fca7d83bfc8 CR3: 000000011e966000 CR4: 00000000000006f0
[  295.402304][    C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
[  295.402311][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  295.402318][    C1] Call Trace:
[  295.402322][    C1]  <IRQ>
[  295.402331][    C1]  ? console_flush_all+0x13a/0xc40
[  295.402351][    C1]  ? __pfx_console_flush_all+0x10/0x10
[  295.402375][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  295.402394][    C1]  console_unlock+0xc4/0x270
[  295.402411][    C1]  ? __pfx_console_unlock+0x10/0x10
[  295.402430][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  295.402450][    C1]  vprintk_emit+0x5b7/0x7a0
[  295.402466][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  295.402480][    C1]  ? irq_work_single+0x1ac/0x240
[  295.402496][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  295.402523][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  295.402542][    C1]  _printk+0xcf/0x120
[  295.402562][    C1]  ? __pfx__printk+0x10/0x10
[  295.402588][    C1]  clocksource_watchdog+0xdca/0x11c0
[  295.402600][    C1]  ? __lock_acquire+0xab9/0xd20
[  295.402624][    C1]  ? __pfx_clocksource_watchdog+0x10/0x10
[  295.402637][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  295.402655][    C1]  call_timer_fn+0x17e/0x5f0
[  295.402667][    C1]  ? __pfx_clocksource_watchdog+0x10/0x10
[  295.402676][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  295.402688][    C1]  ? call_timer_fn+0xbe/0x5f0
[  295.402697][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  295.402716][    C1]  ? __pfx_clocksource_watchdog+0x10/0x10
[  295.402730][    C1]  __run_timer_base+0x61a/0x860
[  295.402758][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  295.402786][    C1]  run_timer_softirq+0x67/0x180
[  295.402802][    C1]  handle_softirqs+0x286/0x870
[  295.402818][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  295.402836][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  295.402848][    C1]  ? irq_work_single+0x1ac/0x240
[  295.402863][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  295.402881][    C1]  __irq_exit_rcu+0xca/0x1f0
[  295.402932][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  295.402947][    C1]  ? rcu_is_watching+0x15/0xb0
[  295.402961][    C1]  irq_exit_rcu+0x9/0x30
[  295.402971][    C1]  sysvec_irq_work+0xa3/0xc0
[  295.402982][    C1]  </IRQ>
[  295.402986][    C1]  <TASK>
[  295.402990][    C1]  asm_sysvec_irq_work+0x1a/0x20
[  295.403001][    C1] RIP: 0010:preempt_schedule_irq+0xb0/0x150
[  295.403014][    C1] Code: 24 20 f6 44 24 21 02 74 0c 90 0f 0b 48 f7 03 08 00 00 00 74 64 bf 01 00 00 00 e8 5b 22 21 f6 e8 96 f5 57 f6 fb bf 01 00 00 00 <e8> 1b ab ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24
[  295.403022][    C1] RSP: 0018:ffffc900045ef4e0 EFLAGS: 00000282
[  295.403033][    C1] RAX: 3969a91ac3697000 RBX: 0000000000000000 RCX: 3969a91ac3697000
[  295.403040][    C1] RDX: 0000000000000007 RSI: ffffffff8d998701 RDI: 0000000000000001
[  295.403047][    C1] RBP: ffffc900045ef590 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  295.403054][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 0000000000000000
[  295.403061][    C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920008bde9c
[  295.403086][    C1]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  295.403109][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  295.403124][    C1]  irqentry_exit+0x6f/0x90
[  295.403137][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  295.403147][    C1] RIP: 0010:__slab_free+0x33/0x400
[  295.403162][    C1] Code: 53 48 83 ec 48 48 89 54 24 10 48 89 3c 24 65 48 8b 05 f1 0d 87 10 48 89 44 24 40 44 89 44 24 0c 48 89 4c 24 18 0f 1f 44 00 00 <31> ed 48 bf 00 00 00 00 ff ff ff ff 45 31 e4 45 31 d2 48 85 ed 0f
[  295.403170][    C1] RSP: 0018:ffffc900045ef658 EFLAGS: 00000292
[  295.403179][    C1] RAX: 3969a91ac3697000 RBX: ffffc900045ef710 RCX: ffff8880253ac480
[  295.403187][    C1] RDX: ffff8880253ac480 RSI: ffffea000094eb00 RDI: ffff88801a4418c0
[  295.403195][    C1] RBP: ffff888131d88000 R08: 0000000000000001 R09: ffffffff822353cc
[  295.403203][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffff88801a4418c0
[  295.403210][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880253ac480
[  295.403222][    C1]  ? qlist_free_all+0x8c/0x140
[  295.403245][    C1]  ? __slab_free+0x2f7/0x400
[  295.403260][    C1]  ? __phys_addr+0xd3/0x180
[  295.403278][    C1]  qlist_free_all+0x97/0x140
[  295.403297][    C1]  kasan_quarantine_reduce+0x148/0x160
[  295.403316][    C1]  __kasan_slab_alloc+0x22/0x80
[  295.403329][    C1]  __kmalloc_noprof+0x224/0x4f0
[  295.403340][    C1]  ? ops_init+0x7b/0x5c0
[  295.403355][    C1]  ops_init+0x7b/0x5c0
[  295.403372][    C1]  setup_net+0x219/0x4b0
[  295.403388][    C1]  ? __pfx_setup_net+0x10/0x10
[  295.403403][    C1]  ? copy_net_ns+0x304/0x4d0
[  295.403416][    C1]  ? down_read_killable+0x1d1/0x350
[  295.403438][    C1]  copy_net_ns+0x31b/0x4d0
[  295.403456][    C1]  create_new_namespaces+0x3f3/0x720
[  295.403472][    C1]  ? security_capable+0x7e/0x2e0
[  295.403491][    C1]  ? copy_namespaces+0x5c/0x4b0
[  295.403511][    C1]  copy_namespaces+0x438/0x4b0
[  295.403526][    C1]  ? copy_process+0x978/0x3b80
[  295.403539][    C1]  copy_process+0x1700/0x3b80
[  295.403561][    C1]  ? copy_process+0x978/0x3b80
[  295.403588][    C1]  ? __pfx_copy_process+0x10/0x10
[  295.403604][    C1]  ? trace_call_bpf+0xb7/0x850
[  295.403615][    C1]  ? trace_call_bpf+0x5ba/0x850
[  295.403632][    C1]  kernel_clone+0x21e/0x870
[  295.403646][    C1]  ? __pfx_trace_call_bpf+0x10/0x10
[  295.403660][    C1]  ? __pfx_kernel_clone+0x10/0x10
[  295.403689][    C1]  __x64_sys_clone+0x18b/0x1e0
[  295.403707][    C1]  ? __pfx___x64_sys_clone+0x10/0x10
[  295.403749][    C1]  do_syscall_64+0xfa/0x3b0
[  295.403765][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.403775][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  295.403790][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.403801][    C1] RIP: 0033:0x7f621698eb69
[  295.403813][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  295.403822][    C1] RSP: 002b:00007f6217839fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  295.403833][    C1] RAX: ffffffffffffffda RBX: 00007f6216bb6080 RCX: 00007f621698eb69
[  295.403841][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000400
[  295.403848][    C1] RBP: 00007f6216a11df1 R08: 0000000000000000 R09: 0000000000000000
[  295.403855][    C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  295.403862][    C1] R13: 0000000000000000 R14: 00007f6216bb6080 R15: 00007ffd88261208
[  295.403881][    C1]  </TASK>
[  295.603441][ T9962] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  295.605710][ T9962] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  295.606185][ T9962] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  295.606668][ T9962] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  295.607007][ T9962] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  296.101802][   T55] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  296.102993][   T55] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  296.103706][   T55] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  296.104223][   T55] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  296.104674][   T55] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  321.779582][   T18] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 13138 jiffies s: 30561 root: 0x2/.
[  321.779628][   T18] rcu: blocking rcu_node structures (internal RCU debug):
[  321.779643][   T18] Sending NMI from CPU 0 to CPUs 1:
[  321.779702][    C1] NMI backtrace for cpu 1
[  321.779714][    C1] CPU: 1 UID: 0 PID: 11245 Comm: syz.6.2204 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  321.779722][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  321.779726][    C1] RIP: 0010:native_apic_msr_write+0x39/0x50
[  321.779741][    C1] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 cc cc cc cc cc f3 0f 1e fa 89 f6 31 d2 e9 e2 d0 86 03 66
[  321.779746][    C1] RSP: 0018:ffffc900001e03b8 EFLAGS: 00000046
[  321.779758][    C1] RAX: 00000000000002b6 RBX: ffff888136623900 RCX: 0000000000000838
[  321.779763][    C1] RDX: 0000000000000000 RSI: 00000000000002b6 RDI: 0000000000000838
[  321.779767][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff81aebece
[  321.779772][    C1] R10: 0000000000000003 R11: ffffffff81702490 R12: 000000000ffff94a
[  321.779776][    C1] R13: dffffc0000000000 R14: 00000000000002b6 R15: 0000000000000020
[  321.779780][    C1] FS:  00007f621783a6c0(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
[  321.779786][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  321.779790][    C1] CR2: 00007fca7d83bfc8 CR3: 000000011e966000 CR4: 00000000000006f0
[  321.779816][    C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
[  321.779822][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  321.779825][    C1] Call Trace:
[  321.779829][    C1]  <IRQ>
[  321.779832][    C1]  lapic_next_event+0x11/0x20
[  321.779847][    C1]  clockevents_program_event+0x1cf/0x360
[  321.779859][    C1]  hrtimer_interrupt+0x620/0xaa0
[  321.779871][    C1]  __sysvec_apic_timer_interrupt+0x10b/0x410
[  321.779879][    C1]  sysvec_apic_timer_interrupt+0x52/0xc0
[  321.779888][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  321.779895][    C1] RIP: 0010:console_flush_all+0x7f7/0xc40
[  321.779905][    C1] Code: 48 21 c3 0f 85 e9 01 00 00 e8 75 e7 1e 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 66 e7 1e 00 eb 06 e8 5f e7 1e 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 ea 0a 82 00 48 8b 1b 48 8b 44 24
[  321.779910][    C1] RSP: 0018:ffffc900001e0620 EFLAGS: 00000246
[  321.779915][    C1] RAX: 1ffffffff1d36927 RBX: ffffffff8e9b4938 RCX: ffff88810760d640
[  321.779920][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  321.779923][    C1] RBP: ffffc900001e0770 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  321.779928][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: dffffc0000000000
[  321.779933][    C1] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8e9b48e0
[  321.779941][    C1]  ? console_flush_all+0x13a/0xc40
[  321.779951][    C1]  ? __pfx_console_flush_all+0x10/0x10
[  321.779961][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  321.779970][    C1]  console_unlock+0xc4/0x270
[  321.779979][    C1]  ? __pfx_console_unlock+0x10/0x10
[  321.779987][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  321.779997][    C1]  vprintk_emit+0x5b7/0x7a0
[  321.780005][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  321.780012][    C1]  ? irq_work_single+0x1ac/0x240
[  321.780019][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  321.780028][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  321.780037][    C1]  _printk+0xcf/0x120
[  321.780047][    C1]  ? __pfx__printk+0x10/0x10
[  321.780062][    C1]  clocksource_watchdog+0xdca/0x11c0
[  321.780069][    C1]  ? __lock_acquire+0xab9/0xd20
[  321.780078][    C1]  ? __pfx_clocksource_watchdog+0x10/0x10
[  321.780085][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  321.780092][    C1]  call_timer_fn+0x17e/0x5f0
[  321.780098][    C1]  ? __pfx_clocksource_watchdog+0x10/0x10
[  321.780104][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  321.780111][    C1]  ? call_timer_fn+0xbe/0x5f0
[  321.780117][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  321.780124][    C1]  ? __pfx_clocksource_watchdog+0x10/0x10
[  321.780131][    C1]  __run_timer_base+0x61a/0x860
[  321.780143][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  321.780154][    C1]  run_timer_softirq+0x67/0x180
[  321.780164][    C1]  handle_softirqs+0x286/0x870
[  321.780171][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  321.780179][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  321.780186][    C1]  ? irq_work_single+0x1ac/0x240
[  321.780192][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  321.780201][    C1]  __irq_exit_rcu+0xca/0x1f0
[  321.780208][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  321.780216][    C1]  ? rcu_is_watching+0x15/0xb0
[  321.780224][    C1]  irq_exit_rcu+0x9/0x30
[  321.780230][    C1]  sysvec_irq_work+0xa3/0xc0
[  321.780236][    C1]  </IRQ>
[  321.780239][    C1]  <TASK>
[  321.780241][    C1]  asm_sysvec_irq_work+0x1a/0x20
[  321.780248][    C1] RIP: 0010:preempt_schedule_irq+0xb0/0x150
[  321.780258][    C1] Code: 24 20 f6 44 24 21 02 74 0c 90 0f 0b 48 f7 03 08 00 00 00 74 64 bf 01 00 00 00 e8 5b 22 21 f6 e8 96 f5 57 f6 fb bf 01 00 00 00 <e8> 1b ab ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24
[  321.780263][    C1] RSP: 0018:ffffc900045ef4e0 EFLAGS: 00000282
[  321.780268][    C1] RAX: 3969a91ac3697000 RBX: 0000000000000000 RCX: 3969a91ac3697000
[  321.780273][    C1] RDX: 0000000000000007 RSI: ffffffff8d998701 RDI: 0000000000000001
[  321.780276][    C1] RBP: ffffc900045ef590 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  321.780281][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 0000000000000000
[  321.780285][    C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920008bde9c
[  321.780293][    C1]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  321.780302][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  321.780310][    C1]  irqentry_exit+0x6f/0x90
[  321.780318][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  321.780324][    C1] RIP: 0010:__slab_free+0x33/0x400
[  321.780333][    C1] Code: 53 48 83 ec 48 48 89 54 24 10 48 89 3c 24 65 48 8b 05 f1 0d 87 10 48 89 44 24 40 44 89 44 24 0c 48 89 4c 24 18 0f 1f 44 00 00 <31> ed 48 bf 00 00 00 00 ff ff ff ff 45 31 e4 45 31 d2 48 85 ed 0f
[  321.780338][    C1] RSP: 0018:ffffc900045ef658 EFLAGS: 00000292
[  321.780343][    C1] RAX: 3969a91ac3697000 RBX: ffffc900045ef710 RCX: ffff8880253ac480
[  321.780347][    C1] RDX: ffff8880253ac480 RSI: ffffea000094eb00 RDI: ffff88801a4418c0
[  321.780351][    C1] RBP: ffff888131d88000 R08: 0000000000000001 R09: ffffffff822353cc
[  321.780355][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffff88801a4418c0
[  321.780360][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880253ac480
[  321.780365][    C1]  ? qlist_free_all+0x8c/0x140
[  321.780376][    C1]  ? __slab_free+0x2f7/0x400
[  321.780385][    C1]  ? __phys_addr+0xd3/0x180
[  321.780393][    C1]  qlist_free_all+0x97/0x140
[  321.780403][    C1]  kasan_quarantine_reduce+0x148/0x160
[  321.780412][    C1]  __kasan_slab_alloc+0x22/0x80
[  321.780419][    C1]  __kmalloc_noprof+0x224/0x4f0
[  321.780425][    C1]  ? ops_init+0x7b/0x5c0
[  321.780433][    C1]  ops_init+0x7b/0x5c0
[  321.780441][    C1]  setup_net+0x219/0x4b0
[  321.780451][    C1]  ? __pfx_setup_net+0x10/0x10
[  321.780460][    C1]  ? copy_net_ns+0x304/0x4d0
[  321.780469][    C1]  ? down_read_killable+0x1d1/0x350
[  321.780479][    C1]  copy_net_ns+0x31b/0x4d0
[  321.780488][    C1]  create_new_namespaces+0x3f3/0x720
[  321.780528][    C1]  ? security_capable+0x7e/0x2e0
[  321.780538][    C1]  ? copy_namespaces+0x5c/0x4b0
[  321.780544][    C1]  copy_namespaces+0x438/0x4b0
[  321.780552][    C1]  ? copy_process+0x978/0x3b80
[  321.780560][    C1]  copy_process+0x1700/0x3b80
[  321.780569][    C1]  ? copy_process+0x978/0x3b80
[  321.780579][    C1]  ? __pfx_copy_process+0x10/0x10
[  321.780586][    C1]  ? trace_call_bpf+0xb7/0x850
[  321.780593][    C1]  ? trace_call_bpf+0x5ba/0x850
[  321.780600][    C1]  kernel_clone+0x21e/0x870
[  321.780608][    C1]  ? __pfx_trace_call_bpf+0x10/0x10
[  321.780615][    C1]  ? __pfx_kernel_clone+0x10/0x10
[  321.780626][    C1]  __x64_sys_clone+0x18b/0x1e0
[  321.780636][    C1]  ? __pfx___x64_sys_clone+0x10/0x10
[  321.780649][    C1]  do_syscall_64+0xfa/0x3b0
[  321.780659][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  321.780668][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  321.780679][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  321.780688][    C1] RIP: 0033:0x7f621698eb69
[  321.780697][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  321.780704][    C1] RSP: 002b:00007f6217839fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  321.780714][    C1] RAX: ffffffffffffffda RBX: 00007f6216bb6080 RCX: 00007f621698eb69
[  321.780721][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000400
[  321.780725][    C1] RBP: 00007f6216a11df1 R08: 0000000000000000 R09: 0000000000000000
[  321.780729][    C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  321.780733][    C1] R13: 0000000000000000 R14: 00007f6216bb6080 R15: 00007ffd88261208
[  321.780740][    C1]  </TASK>
[  330.369220][T11370] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  330.370746][T11370] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  330.371208][T11370] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  330.372596][T11370] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  330.373294][T11370] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  334.572003][   T34] INFO: task rcu_tasks_trace:31 blocked for more than 143 seconds.
[  334.572021][   T34]       Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0
[  334.572028][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  334.572033][   T34] task:rcu_tasks_trace state:D stack:26360 pid:31    tgid:31    ppid:2      task_flags:0x208040 flags:0x00004000
[  334.572059][   T34] Call Trace:
[  334.572064][   T34]  <TASK>
[  334.572071][   T34]  __schedule+0x16f5/0x4d00
[  334.572092][   T34]  ? do_raw_spin_lock+0x121/0x290
[  334.572106][   T34]  ? schedule+0x165/0x360
[  334.572117][   T34]  ? __lock_acquire+0xab9/0xd20
[  334.572126][   T34]  ? __pfx___schedule+0x10/0x10
[  334.572144][   T34]  ? schedule+0x91/0x360
[  334.572156][   T34]  schedule+0x165/0x360
[  334.572168][   T34]  synchronize_rcu_expedited+0x583/0x730
[  334.572181][   T34]  ? __pfx_synchronize_rcu_expedited+0x10/0x10
[  334.572199][   T34]  ? __pfx_wait_rcu_exp_gp+0x10/0x10
[  334.572211][   T34]  ? __pfx___might_resched+0x10/0x10
[  334.572222][   T34]  ? __pfx_autoremove_wake_function+0x10/0x10
[  334.572240][   T34]  synchronize_rcu+0x11a/0x310
[  334.572251][   T34]  ? __pfx_synchronize_rcu+0x10/0x10
[  334.572262][   T34]  ? __pfx_rcu_tasks_trace_pregp_step+0x10/0x10
[  334.572275][   T34]  ? rcu_is_watching+0x15/0xb0
[  334.572286][   T34]  ? trace_contention_end+0x39/0x120
[  334.572297][   T34]  ? __mutex_lock+0x330/0xe80
[  334.572337][   T34]  rcu_tasks_wait_gp+0x490/0xac0
[  334.572354][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  334.572365][   T34]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  334.572376][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  334.572388][   T34]  ? __pfx_rcu_tasks_wait_gp+0x10/0x10
[  334.572401][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  334.572416][   T34]  rcu_tasks_one_gp+0xc19/0xdf0
[  334.572434][   T34]  ? rcu_tasks_one_gp+0xe9/0xdf0
[  334.572450][   T34]  rcu_tasks_kthread+0x195/0x1c0
[  334.572465][   T34]  kthread+0x711/0x8a0
[  334.572479][   T34]  ? __pfx_rcu_tasks_kthread+0x10/0x10
[  334.572492][   T34]  ? __pfx_kthread+0x10/0x10
[  334.572505][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  334.572515][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  334.572525][   T34]  ? __pfx_kthread+0x10/0x10
[  334.572538][   T34]  ret_from_fork+0x3fc/0x770
[  334.572561][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  334.572573][   T34]  ? __switch_to_asm+0x39/0x70
[  334.572585][   T34]  ? __switch_to_asm+0x33/0x70
[  334.572596][   T34]  ? __pfx_kthread+0x10/0x10
[  334.572609][   T34]  ret_from_fork_asm+0x1a/0x30
[  334.572631][   T34]  </TASK>
[  334.572698][   T34] INFO: task syz.5.2194:11220 blocked for more than 143 seconds.
[  334.572705][   T34]       Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0
[  334.572712][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  334.572716][   T34] task:syz.5.2194      state:D stack:26920 pid:11220 tgid:11220 ppid:9957   task_flags:0x400040 flags:0x00004006
[  334.572740][   T34] Call Trace:
[  334.572744][   T34]  <TASK>
[  334.572750][   T34]  __schedule+0x16f5/0x4d00
[  334.572763][   T34]  ? trace_call_bpf+0xb7/0x850
[  334.572776][   T34]  ? perf_trace_run_bpf_submit+0x100/0x170
[  334.572788][   T34]  ? schedule+0x165/0x360
[  334.572799][   T34]  ? __lock_acquire+0xab9/0xd20
[  334.572808][   T34]  ? __pfx___schedule+0x10/0x10
[  334.572825][   T34]  ? schedule+0x91/0x360
[  334.572837][   T34]  schedule+0x165/0x360
[  334.572848][   T34]  schedule_timeout+0x9a/0x270
[  334.572858][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  334.572872][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  334.572883][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  334.572895][   T34]  __wait_for_common+0x3da/0x710
[  334.572914][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  334.572923][   T34]  ? __pfx___wait_for_common+0x10/0x10
[  334.572936][   T34]  ? __raw_spin_lock_init+0x45/0x100
[  334.572949][   T34]  ? __init_swait_queue_head+0xa9/0x150
[  334.572962][   T34]  wait_for_completion_state+0x1c/0x40
[  334.572974][   T34]  __wait_rcu_gp+0x24c/0x280
[  334.572988][   T34]  synchronize_rcu_tasks_generic+0x132/0x220
[  334.573000][   T34]  ? __pfx_synchronize_rcu_tasks_generic+0x10/0x10
[  334.573011][   T34]  ? rcu_read_lock_any_held+0xb3/0x120
[  334.573021][   T34]  ? __pfx_call_rcu_tasks_trace+0x10/0x10
[  334.573034][   T34]  ? __pfx_wakeme_after_rcu+0x10/0x10
[  334.573054][   T34]  perf_trace_event_unreg+0xbe/0x1b0
[  334.573065][   T34]  perf_trace_destroy+0xa4/0x150
[  334.573075][   T34]  ? __pfx_tp_perf_event_destroy+0x10/0x10
[  334.573086][   T34]  __free_event+0x316/0x7b0
[  334.573096][   T34]  ? __pfx_perf_release+0x10/0x10
[  334.573109][   T34]  perf_event_release_kernel+0x45b/0x510
[  334.573123][   T34]  ? __pfx_perf_release+0x10/0x10
[  334.573135][   T34]  perf_release+0x38/0x50
[  334.573146][   T34]  __fput+0x44c/0xa70
[  334.573164][   T34]  task_work_run+0x1d4/0x260
[  334.573179][   T34]  ? __pfx_task_work_run+0x10/0x10
[  334.573194][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  334.573205][   T34]  exit_to_user_mode_loop+0xec/0x110
[  334.573215][   T34]  do_syscall_64+0x2bd/0x3b0
[  334.573227][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  334.573238][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.573247][   T34]  ? exc_page_fault+0x9f/0xf0
[  334.573259][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.573268][   T34] RIP: 0033:0x7f84c6f8eb69
[  334.573277][   T34] RSP: 002b:00007ffcf2f8ca28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  334.573289][   T34] RAX: 0000000000000000 RBX: 00007f84c71b7ba0 RCX: 00007f84c6f8eb69
[  334.573296][   T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  334.573327][   T34] RBP: 00007f84c71b7ba0 R08: 00000000000001c0 R09: 00000018f2f8cd1f
[  334.573335][   T34] R10: 00007f84c71b7ac0 R11: 0000000000000246 R12: 000000000002e712
[  334.573342][   T34] R13: 00007ffcf2f8cb20 R14: ffffffffffffffff R15: 00007ffcf2f8cb40
[  334.573355][   T34]  </TASK>
[  334.573360][   T34] INFO: task syz.6.2204:11241 blocked for more than 143 seconds.
[  334.573367][   T34]       Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0
[  334.573373][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  334.573378][   T34] task:syz.6.2204      state:D stack:25040 pid:11241 tgid:11241 ppid:9959   task_flags:0x400040 flags:0x00004004
[  334.573400][   T34] Call Trace:
[  334.573404][   T34]  <TASK>
[  334.573411][   T34]  __schedule+0x16f5/0x4d00
[  334.573427][   T34]  ? do_raw_spin_lock+0x121/0x290
[  334.573440][   T34]  ? schedule+0x165/0x360
[  334.573451][   T34]  ? __lock_acquire+0xab9/0xd20
[  334.573460][   T34]  ? __pfx___schedule+0x10/0x10
[  334.573477][   T34]  ? schedule+0x91/0x360
[  334.573489][   T34]  schedule+0x165/0x360
[  334.573500][   T34]  synchronize_rcu_expedited+0x5f5/0x730
[  334.573513][   T34]  ? __pfx_synchronize_rcu_expedited+0x10/0x10
[  334.573525][   T34]  ? __pfx_autoremove_wake_function+0x10/0x10
[  334.573544][   T34]  ? __pfx___might_resched+0x10/0x10
[  334.573563][   T34]  ? __pfx___dynamic_pr_debug+0x10/0x10
[  334.573581][   T34]  synchronize_rcu+0x11a/0x310
[  334.573592][   T34]  ? __pfx_synchronize_rcu+0x10/0x10
[  334.573606][   T34]  ? cfctrl_cancel_req+0x239/0x250
[  334.573617][   T34]  ? net_generic+0x1f4/0x240
[  334.573631][   T34]  caif_disconnect_client+0x14a/0x200
[  334.573642][   T34]  caif_release+0x166/0x350
[  334.573657][   T34]  sock_close+0xc3/0x240
[  334.573671][   T34]  ? __pfx_sock_close+0x10/0x10
[  334.573683][   T34]  __fput+0x44c/0xa70
[  334.573699][   T34]  task_work_run+0x1d4/0x260
[  334.573713][   T34]  ? __pfx_task_work_run+0x10/0x10
[  334.573729][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  334.573740][   T34]  exit_to_user_mode_loop+0xec/0x110
[  334.573749][   T34]  do_syscall_64+0x2bd/0x3b0
[  334.573761][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  334.573772][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.573782][   T34]  ? exc_page_fault+0x9f/0xf0
[  334.573794][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.573802][   T34] RIP: 0033:0x7f621698eb69
[  334.573810][   T34] RSP: 002b:00007ffd88261368 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  334.573821][   T34] RAX: 0000000000000000 RBX: 00007f6216bb7ba0 RCX: 00007f621698eb69
[  334.573828][   T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  334.573835][   T34] RBP: 00007f6216bb7ba0 R08: 00000000000001cc R09: 000000188826165f
[  334.573842][   T34] R10: 00007f6216bb7ac0 R11: 0000000000000246 R12: 000000000002e8a4
[  334.573848][   T34] R13: 00007ffd88261460 R14: ffffffffffffffff R15: 00007ffd88261480
[  334.573862][   T34]  </TASK>
[  334.573867][   T34] INFO: task syz.3.2211:11257 blocked for more than 143 seconds.
[  334.573874][   T34]       Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0
[  334.573880][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  334.573884][   T34] task:syz.3.2211      state:D stack:26936 pid:11257 tgid:11256 ppid:9583   task_flags:0x400140 flags:0x00004004
[  334.573906][   T34] Call Trace:
[  334.573911][   T34]  <TASK>
[  334.573917][   T34]  __schedule+0x16f5/0x4d00
[  334.573932][   T34]  ? __lock_acquire+0xab9/0xd20
[  334.573943][   T34]  ? schedule+0x165/0x360
[  334.573955][   T34]  ? __pfx___schedule+0x10/0x10
[  334.573973][   T34]  ? schedule+0x91/0x360
[  334.573985][   T34]  schedule+0x165/0x360
[  334.573996][   T34]  schedule_preempt_disabled+0x13/0x30
[  334.574007][   T34]  __mutex_lock+0x724/0xe80
[  334.574019][   T34]  ? __mutex_lock+0x51b/0xe80
[  334.574034][   T34]  ? perf_trace_init+0x50/0x2d0
[  334.574044][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  334.574062][   T34]  ? __pfx_perf_trace_lock+0x10/0x10
[  334.574074][   T34]  perf_trace_init+0x50/0x2d0
[  334.574083][   T34]  ? perf_tp_event_init+0x7c/0x120
[  334.574094][   T34]  perf_tp_event_init+0x8d/0x120
[  334.574106][   T34]  perf_try_init_event+0x17f/0x870
[  334.574118][   T34]  ? perf_event_alloc+0xf6b/0x2bb0
[  334.574131][   T34]  ? perf_event_alloc+0xf6b/0x2bb0
[  334.574142][   T34]  perf_event_alloc+0x1357/0x2bb0
[  334.574155][   T34]  ? perf_event_alloc+0xf6b/0x2bb0
[  334.574169][   T34]  ? __pfx_perf_trace_lock+0x10/0x10
[  334.574183][   T34]  ? __pfx_perf_event_alloc+0x10/0x10
[  334.574197][   T34]  ? find_lively_task_by_vpid+0x19/0x290
[  334.574209][   T34]  ? find_lively_task_by_vpid+0x19/0x290
[  334.574220][   T34]  ? find_lively_task_by_vpid+0x19/0x290
[  334.574233][   T34]  __se_sys_perf_event_open+0x772/0x1d70
[  334.574247][   T34]  ? __bpf_trace_bpf_trace_printk+0xa1/0x100
[  334.574259][   T34]  ? __pfx___se_sys_perf_event_open+0x10/0x10
[  334.574277][   T34]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  334.574291][   T34]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  334.574327][   T34]  ? do_syscall_64+0xbe/0x3b0
[  334.574340][   T34]  ? __x64_sys_perf_event_open+0x20/0xc0
[  334.574352][   T34]  do_syscall_64+0xfa/0x3b0
[  334.574364][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  334.574375][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.574384][   T34]  ? exc_page_fault+0x9f/0xf0
[  334.574397][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.574405][   T34] RIP: 0033:0x7fca7c98eb69
[  334.574413][   T34] RSP: 002b:00007fca7d83c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  334.574425][   T34] RAX: ffffffffffffffda RBX: 00007fca7cbb5fa0 RCX: 00007fca7c98eb69
[  334.574432][   T34] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000100
[  334.574438][   T34] RBP: 00007fca7ca11df1 R08: 0000000000000000 R09: 0000000000000000
[  334.574445][   T34] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  334.574452][   T34] R13: 0000000000000001 R14: 00007fca7cbb5fa0 R15: 00007ffefee73208
[  334.574465][   T34]  </TASK>
[  334.574470][   T34] INFO: task dhcpcd:11259 blocked for more than 143 seconds.
[  334.574477][   T34]       Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0
[  334.574483][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  334.574488][   T34] task:dhcpcd          state:D stack:27568 pid:11259 tgid:11259 ppid:5575   task_flags:0x400140 flags:0x00004002
[  334.574511][   T34] Call Trace:
[  334.574515][   T34]  <TASK>
[  334.574521][   T34]  __schedule+0x16f5/0x4d00
[  334.574536][   T34]  ? __lock_acquire+0xab9/0xd20
[  334.574553][   T34]  ? schedule+0x165/0x360
[  334.574565][   T34]  ? __pfx___schedule+0x10/0x10
[  334.574582][   T34]  ? schedule+0x91/0x360
[  334.574594][   T34]  schedule+0x165/0x360
[  334.574606][   T34]  schedule_preempt_disabled+0x13/0x30
[  334.574616][   T34]  __mutex_lock+0x724/0xe80
[  334.574629][   T34]  ? __mutex_lock+0x51b/0xe80
[  334.574643][   T34]  ? synchronize_rcu_expedited+0x3b9/0x730
[  334.574656][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  334.574673][   T34]  ? do_raw_spin_unlock+0x4d/0x240
[  334.574686][   T34]  synchronize_rcu_expedited+0x3b9/0x730
[  334.574698][   T34]  ? kasan_save_track+0x4f/0x80
[  334.574712][   T34]  ? __pfx_synchronize_rcu_expedited+0x10/0x10
[  334.574731][   T34]  ? __pfx___might_resched+0x10/0x10
[  334.574748][   T34]  synchronize_rcu+0x11a/0x310
[  334.574759][   T34]  ? __pfx_synchronize_rcu+0x10/0x10
[  334.574776][   T34]  __unregister_prot_hook+0x503/0x6e0
[  334.574786][   T34]  ? packet_do_bind+0x98/0xcd0
[  334.574798][   T34]  ? packet_do_bind+0x98/0xcd0
[  334.574808][   T34]  packet_do_bind+0x536/0xcd0
[  334.574820][   T34]  ? packet_do_bind+0x98/0xcd0
[  334.574832][   T34]  __sys_bind+0x2c6/0x3e0
[  334.574847][   T34]  ? __pfx___sys_bind+0x10/0x10
[  334.574869][   T34]  __x64_sys_bind+0x7a/0x90
[  334.574883][   T34]  do_syscall_64+0xfa/0x3b0
[  334.574894][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  334.574905][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.574914][   T34]  ? exc_page_fault+0x9f/0xf0
[  334.574926][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.574935][   T34] RIP: 0033:0x7f11a554d677
[  334.574943][   T34] RSP: 002b:00007ffde7ca0478 EFLAGS: 00000217 ORIG_RAX: 0000000000000031
[  334.574953][   T34] RAX: ffffffffffffffda RBX: 000055d469596c9e RCX: 00007f11a554d677
[  334.574961][   T34] RDX: 0000000000000014 RSI: 00007ffde7ca0488 RDI: 0000000000000005
[  334.574967][   T34] RBP: 000055d472fe4edc R08: 000055d472fe4740 R09: 0000000002000000
[  334.574974][   T34] R10: 000000000000006d R11: 0000000000000217 R12: 000055d472fdf3c0
[  334.574980][   T34] R13: 000055d472fe4f28 R14: 00007ffde7cc0d6c R15: 000055d472fe4ef4
[  334.574994][   T34]  </TASK>
[  334.575008][   T34] 
[  334.575008][   T34] Showing all locks held in the system:
[  334.575014][   T34] 2 locks held by kworker/0:0/9:
[  334.575020][   T34]  #0: ffff88801a482148 ((wq_completion)events_freezable_pwr_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  334.575052][   T34]  #1: ffffc900000c7bc0 ((work_completion)(&(&ev->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  334.575082][   T34] 2 locks held by kworker/0:0H/11:
[  334.575088][   T34]  #0: ffff8881016fa948 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  334.575118][   T34]  #1: ffffc900000e7bc0 ((work_completion)(&q->timeout_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  334.575148][   T34] 3 locks held by kworker/u9:0/26:
[  334.575154][   T34]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  334.575183][   T34]  #1: ffffc900001efbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  334.575212][   T34]  #2: ffff88803f7e0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x460
[  334.575245][   T34] 2 locks held by rcu_tasks_trace/31:
[  334.575251][   T34]  #0: ffffffff8e13fdd0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{4:4}, at: rcu_tasks_one_gp+0xaf9/0xdf0
[  334.575283][   T34]  #1: ffffffff8e144bb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  334.575335][   T34] 1 lock held by khungtaskd/34:
[  334.575341][   T34]  #0: ffffffff8e13f0a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  334.575375][   T34] 4 locks held by kworker/u11:0/55:
[  334.575380][   T34]  #0: ffff88803bb1e148 ((wq_completion)hci8#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  334.575414][   T34]  #1: ffffc900007dfbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  334.575443][   T34]  #2: ffff888043c480b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0
[  334.575474][   T34]  #3: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0
[  334.575506][   T34] 2 locks held by kworker/0:1H/61:
[  334.575512][   T34]  #0: ffff8881016fa948 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  334.575541][   T34]  #1: ffffc90000eefbc0 ((work_completion)(&q->timeout_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  334.575581][   T34] 3 locks held by kworker/u9:8/1092:
[  334.575587][   T34]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  334.575617][   T34]  #1: ffffc90007077bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  334.575646][   T34]  #2: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  334.575690][   T34] 6 locks held by kworker/u11:1/5219:
[  334.575696][   T34]  #0: ffff88810a6bb948 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  334.575725][   T34]  #1: ffffc90022ff7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  334.575755][   T34]  #2: ffff88811f100dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  334.575784][   T34]  #3: ffff88811f1000b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  334.575816][   T34]  #4: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  334.575844][   T34]  #5: ffff8881109e8b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  334.575877][   T34] 2 locks held by getty/5657:
[  334.575883][   T34]  #0: ffff88802228a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  334.575911][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  334.575944][   T34] 3 locks held by kworker/u8:4/9629:
[  334.575950][   T34]  #0: ffff888108815948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  334.575980][   T34]  #1: ffffc9000279fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  334.576009][   T34]  #2: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  334.576039][   T34] 4 locks held by kworker/u11:3/9962:
[  334.576045][   T34]  #0: ffff888115a70148 ((wq_completion)hci6#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  334.576100][   T34]  #1: ffffc90007457bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  334.576130][   T34]  #2: ffff8881166300b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0
[  334.576160][   T34]  #3: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0
[  334.576193][   T34] 1 lock held by syz.5.2194/11220:
[  334.576199][   T34]  #0: ffffffff8e1a2c68 (event_mutex){+.+.}-{4:4}, at: perf_trace_destroy+0x2e/0x150
[  334.576227][   T34] 2 locks held by syz.6.2204/11241:
[  334.576233][   T34]  #0: ffff88802c3b3808 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  334.576267][   T34]  #1: ffff88803d938258 (sk_lock-AF_CAIF){+.+.}-{0:0}, at: caif_release+0xf9/0x350
[  334.576316][   T34] 6 locks held by syz.6.2204/11245:
[  334.576325][   T34] 3 locks held by syz.3.2211/11257:
[  334.576331][   T34]  #0: ffffffff99b075d0 (&pmus_srcu){.+.+}-{0:0}, at: class_srcu_constructor+0x2c/0x60
[  334.576363][   T34]  #1: ffffffff99b075d0 (&pmus_srcu){.+.+}-{0:0}, at: perf_event_alloc+0xf6b/0x2bb0
[  334.576394][   T34]  #2: ffffffff8e1a2c68 (event_mutex){+.+.}-{4:4}, at: perf_trace_init+0x50/0x2d0
[  334.576422][   T34] 2 locks held by dhcpcd/11259:
[  334.576428][   T34]  #0: ffff88803eb70258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  334.576457][   T34]  #1: ffffffff8e144bb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  334.576487][   T34] 1 lock held by dhcpcd/11260:
[  334.576493][   T34]  #0: ffff88803c2c8258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  334.576522][   T34] 1 lock held by dhcpcd/11261:
[  334.576528][   T34]  #0: ffff88806a68c258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  334.576576][   T34] 1 lock held by dhcpcd/11262:
[  334.576582][   T34]  #0: ffff88803f4e4258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  334.576611][   T34] 1 lock held by dhcpcd/11263:
[  334.576617][   T34]  #0: ffff88803af96258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  334.576647][   T34] 1 lock held by dhcpcd/11264:
[  334.576652][   T34]  #0: ffff888023ccc258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  334.576681][   T34] 1 lock held by dhcpcd/11265:
[  334.576687][   T34]  #0: ffff88803cfca258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  334.576716][   T34] 1 lock held by dhcpcd/11266:
[  334.576722][   T34]  #0: ffff88803fffc258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  334.576751][   T34] 1 lock held by dhcpcd/11315:
[  334.576757][   T34]  #0: ffff88803eb2c258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  334.576786][   T34] 1 lock held by dhcpcd/11316:
[  334.576792][   T34]  #0: ffff888113bda258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  334.576821][   T34] 1 lock held by dhcpcd/11317:
[  334.576826][   T34]  #0: ffff8880413e6258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  334.576856][   T34] 1 lock held by dhcpcd/11318:
[  334.576862][   T34]  #0: ffff888041a9c258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  334.576891][   T34] 1 lock held by dhcpcd/11319:
[  334.576896][   T34]  #0: ffff888020ad8258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  334.576926][   T34] 1 lock held by dhcpcd/11320:
[  334.576931][   T34]  #0: ffff88804201a258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  334.576960][   T34] 1 lock held by dhcpcd/11321:
[  334.576966][   T34]  #0: ffff88802a7c6258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  334.576995][   T34] 1 lock held by dhcpcd/11322:
[  334.577001][   T34]  #0: ffff888043258258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  334.577029][   T34] 1 lock held by dhcpcd/11323:
[  334.577035][   T34]  #0: ffff888043746258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  334.577064][   T34] 1 lock held by dhcpcd/11324:
[  334.577070][   T34]  #0: ffff888043b46258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  334.577099][   T34] 1 lock held by dhcpcd/11325:
[  334.577104][   T34]  #0: ffff888040d36258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  334.577134][   T34] 1 lock held by dhcpcd/11326:
[  334.577140][   T34]  #0: ffff888044038258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  334.577169][   T34] 1 lock held by dhcpcd/11327:
[  334.577175][   T34]  #0: ffff88804361c258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  334.577204][   T34] 1 lock held by dhcpcd/11328:
[  334.577210][   T34]  #0: ffff88810a098258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  334.577238][   T34] 1 lock held by dhcpcd/11329:
[  334.577244][   T34]  #0: ffff88804166c258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  334.577274][   T34] 1 lock held by dhcpcd/11330:
[  334.577280][   T34]  #0: ffff8881166c4258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  334.577330][   T34] 1 lock held by dhcpcd/11331:
[  334.577336][   T34]  #0: ffff88810dde6258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  334.577367][   T34] 1 lock held by syz-executor/11336:
[  334.577373][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  334.577405][   T34] 1 lock held by syz-executor/11340:
[  334.577411][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  334.577443][   T34] 2 locks held by syz-executor/11343:
[  334.577449][   T34]  #0: ffffffff8eca43a0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  334.577481][   T34]  #1: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  334.577512][   T34] 5 locks held by kworker/u11:4/11346:
[  334.577518][   T34]  #0: ffff888115396948 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  334.577551][   T34]  #1: ffffc9000369fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  334.577581][   T34]  #2: ffff888108e9cdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  334.577610][   T34]  #3: ffff888108e9c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  334.577641][   T34]  #4: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  334.577669][   T34] 4 locks held by kworker/u11:5/11347:
[  334.577675][   T34]  #0: ffff88803dae7148 ((wq_completion)hci7#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  334.577707][   T34]  #1: ffffc900036afbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  334.577736][   T34]  #2: ffff888043e680b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0
[  334.577766][   T34]  #3: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0
[  334.577797][   T34] 1 lock held by dhcpcd/11358:
[  334.577803][   T34]  #0: ffff8880434a4258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  334.577833][   T34] 1 lock held by syz-executor/11362:
[  334.577838][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  334.577869][   T34] 1 lock held by syz-executor/11365:
[  334.577875][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  334.577904][   T34] 1 lock held by syz-executor/11368:
[  334.577910][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  334.577941][   T34] 
[  334.577947][   T34] =============================================
[  334.577947][   T34] 
[  334.577956][   T34] NMI backtrace for cpu 0
[  334.577965][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  334.577977][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  334.577983][   T34] Call Trace:
[  334.577988][   T34]  <TASK>
[  334.577992][   T34]  dump_stack_lvl+0x189/0x250
[  334.578006][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  334.578018][   T34]  ? __pfx__printk+0x10/0x10
[  334.578040][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  334.578056][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  334.578065][   T34]  ? _printk+0xcf/0x120
[  334.578082][   T34]  ? __pfx__printk+0x10/0x10
[  334.578097][   T34]  ? debug_show_all_locks+0x2e/0x180
[  334.578109][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  334.578123][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  334.578137][   T34]  watchdog+0xfee/0x1030
[  334.578155][   T34]  ? watchdog+0x1de/0x1030
[  334.578176][   T34]  kthread+0x711/0x8a0
[  334.578194][   T34]  ? __pfx_watchdog+0x10/0x10
[  334.578211][   T34]  ? __pfx_kthread+0x10/0x10
[  334.578229][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  334.578243][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  334.578257][   T34]  ? __pfx_kthread+0x10/0x10
[  334.578274][   T34]  ret_from_fork+0x3fc/0x770
[  334.578289][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  334.578332][   T34]  ? __switch_to_asm+0x39/0x70
[  334.578348][   T34]  ? __switch_to_asm+0x33/0x70
[  334.578362][   T34]  ? __pfx_kthread+0x10/0x10
[  334.578379][   T34]  ret_from_fork_asm+0x1a/0x30
[  334.578405][   T34]  </TASK>
[  334.578411][   T34] Sending NMI from CPU 0 to CPUs 1:
[  334.578473][    C1] NMI backtrace for cpu 1
[  334.578484][    C1] CPU: 1 UID: 0 PID: 11245 Comm: syz.6.2204 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  334.578493][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  334.578497][    C1] RIP: 0010:console_flush_all+0x7f7/0xc40
[  334.578510][    C1] Code: 48 21 c3 0f 85 e9 01 00 00 e8 75 e7 1e 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 66 e7 1e 00 eb 06 e8 5f e7 1e 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 ea 0a 82 00 48 8b 1b 48 8b 44 24
[  334.578515][    C1] RSP: 0018:ffffc900001e0620 EFLAGS: 00000246
[  334.578522][    C1] RAX: 1ffffffff1d36927 RBX: ffffffff8e9b4938 RCX: ffff88810760d640
[  334.578527][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  334.578532][    C1] RBP: ffffc900001e0770 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  334.578536][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: dffffc0000000000
[  334.578541][    C1] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8e9b48e0
[  334.578545][    C1] FS:  00007f621783a6c0(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
[  334.578551][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  334.578555][    C1] CR2: 00007fca7d83bfc8 CR3: 000000011e966000 CR4: 00000000000006f0
[  334.578580][    C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
[  334.578586][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  334.578590][    C1] Call Trace:
[  334.578594][    C1]  <IRQ>
[  334.578600][    C1]  ? console_flush_all+0x13a/0xc40
[  334.578610][    C1]  ? __pfx_console_flush_all+0x10/0x10
[  334.578620][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  334.578631][    C1]  console_unlock+0xc4/0x270
[  334.578639][    C1]  ? __pfx_console_unlock+0x10/0x10
[  334.578647][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  334.578656][    C1]  vprintk_emit+0x5b7/0x7a0
[  334.578664][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  334.578671][    C1]  ? irq_work_single+0x1ac/0x240
[  334.578678][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  334.578688][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  334.578697][    C1]  _printk+0xcf/0x120
[  334.578707][    C1]  ? __pfx__printk+0x10/0x10
[  334.578717][    C1]  clocksource_watchdog+0xdca/0x11c0
[  334.578725][    C1]  ? __lock_acquire+0xab9/0xd20
[  334.578733][    C1]  ? __pfx_clocksource_watchdog+0x10/0x10
[  334.578740][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  334.578748][    C1]  call_timer_fn+0x17e/0x5f0
[  334.578754][    C1]  ? __pfx_clocksource_watchdog+0x10/0x10
[  334.578761][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  334.578768][    C1]  ? call_timer_fn+0xbe/0x5f0
[  334.578774][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  334.578782][    C1]  ? __pfx_clocksource_watchdog+0x10/0x10
[  334.578789][    C1]  __run_timer_base+0x61a/0x860
[  334.578801][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  334.578812][    C1]  run_timer_softirq+0x67/0x180
[  334.578822][    C1]  handle_softirqs+0x286/0x870
[  334.578830][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  334.578838][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  334.578849][    C1]  ? irq_work_single+0x1ac/0x240
[  334.578856][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  334.578865][    C1]  __irq_exit_rcu+0xca/0x1f0
[  334.578873][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  334.578880][    C1]  ? rcu_is_watching+0x15/0xb0
[  334.578888][    C1]  irq_exit_rcu+0x9/0x30
[  334.578894][    C1]  sysvec_irq_work+0xa3/0xc0
[  334.578901][    C1]  </IRQ>
[  334.578903][    C1]  <TASK>
[  334.578906][    C1]  asm_sysvec_irq_work+0x1a/0x20
[  334.578913][    C1] RIP: 0010:preempt_schedule_irq+0xb0/0x150
[  334.578921][    C1] Code: 24 20 f6 44 24 21 02 74 0c 90 0f 0b 48 f7 03 08 00 00 00 74 64 bf 01 00 00 00 e8 5b 22 21 f6 e8 96 f5 57 f6 fb bf 01 00 00 00 <e8> 1b ab ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24
[  334.578926][    C1] RSP: 0018:ffffc900045ef4e0 EFLAGS: 00000282
[  334.578932][    C1] RAX: 3969a91ac3697000 RBX: 0000000000000000 RCX: 3969a91ac3697000
[  334.578936][    C1] RDX: 0000000000000007 RSI: ffffffff8d998701 RDI: 0000000000000001
[  334.578940][    C1] RBP: ffffc900045ef590 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  334.578945][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 0000000000000000
[  334.578949][    C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920008bde9c
[  334.578957][    C1]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  334.578966][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  334.578974][    C1]  irqentry_exit+0x6f/0x90
[  334.578982][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  334.578988][    C1] RIP: 0010:__slab_free+0x33/0x400
[  334.578997][    C1] Code: 53 48 83 ec 48 48 89 54 24 10 48 89 3c 24 65 48 8b 05 f1 0d 87 10 48 89 44 24 40 44 89 44 24 0c 48 89 4c 24 18 0f 1f 44 00 00 <31> ed 48 bf 00 00 00 00 ff ff ff ff 45 31 e4 45 31 d2 48 85 ed 0f
[  334.579002][    C1] RSP: 0018:ffffc900045ef658 EFLAGS: 00000292
[  334.579007][    C1] RAX: 3969a91ac3697000 RBX: ffffc900045ef710 RCX: ffff8880253ac480
[  334.579012][    C1] RDX: ffff8880253ac480 RSI: ffffea000094eb00 RDI: ffff88801a4418c0
[  334.579016][    C1] RBP: ffff888131d88000 R08: 0000000000000001 R09: ffffffff822353cc
[  334.579020][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffff88801a4418c0
[  334.579025][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880253ac480
[  334.579030][    C1]  ? qlist_free_all+0x8c/0x140
[  334.579041][    C1]  ? __slab_free+0x2f7/0x400
[  334.579049][    C1]  ? __phys_addr+0xd3/0x180
[  334.579059][    C1]  qlist_free_all+0x97/0x140
[  334.579069][    C1]  kasan_quarantine_reduce+0x148/0x160
[  334.579079][    C1]  __kasan_slab_alloc+0x22/0x80
[  334.579086][    C1]  __kmalloc_noprof+0x224/0x4f0
[  334.579092][    C1]  ? ops_init+0x7b/0x5c0
[  334.579100][    C1]  ops_init+0x7b/0x5c0
[  334.579107][    C1]  setup_net+0x219/0x4b0
[  334.579118][    C1]  ? __pfx_setup_net+0x10/0x10
[  334.579127][    C1]  ? copy_net_ns+0x304/0x4d0
[  334.579136][    C1]  ? down_read_killable+0x1d1/0x350
[  334.579146][    C1]  copy_net_ns+0x31b/0x4d0
[  334.579156][    C1]  create_new_namespaces+0x3f3/0x720
[  334.579164][    C1]  ? security_capable+0x7e/0x2e0
[  334.579174][    C1]  ? copy_namespaces+0x5c/0x4b0
[  334.579180][    C1]  copy_namespaces+0x438/0x4b0
[  334.579187][    C1]  ? copy_process+0x978/0x3b80
[  334.579196][    C1]  copy_process+0x1700/0x3b80
[  334.579205][    C1]  ? copy_process+0x978/0x3b80
[  334.579216][    C1]  ? __pfx_copy_process+0x10/0x10
[  334.579224][    C1]  ? trace_call_bpf+0xb7/0x850
[  334.579230][    C1]  ? trace_call_bpf+0x5ba/0x850
[  334.579238][    C1]  kernel_clone+0x21e/0x870
[  334.579246][    C1]  ? __pfx_trace_call_bpf+0x10/0x10
[  334.579253][    C1]  ? __pfx_kernel_clone+0x10/0x10
[  334.579265][    C1]  __x64_sys_clone+0x18b/0x1e0
[  334.579275][    C1]  ? __pfx___x64_sys_clone+0x10/0x10
[  334.579289][    C1]  do_syscall_64+0xfa/0x3b0
[  334.579333][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.579344][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  334.579355][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.579364][    C1] RIP: 0033:0x7f621698eb69
[  334.579375][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  334.579380][    C1] RSP: 002b:00007f6217839fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  334.579388][    C1] RAX: ffffffffffffffda RBX: 00007f6216bb6080 RCX: 00007f621698eb69
[  334.579393][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000400
[  334.579397][    C1] RBP: 00007f6216a11df1 R08: 0000000000000000 R09: 0000000000000000
[  334.579401][    C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  334.579405][    C1] R13: 0000000000000000 R14: 00007f6216bb6080 R15: 00007ffd88261208
[  334.579412][    C1]  </TASK>
[  334.579452][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  334.579460][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  334.579485][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  334.579490][   T34] Call Trace:
[  334.579494][   T34]  <TASK>
[  334.579497][   T34]  dump_stack_lvl+0x99/0x250
[  334.579507][   T34]  ? __asan_memcpy+0x40/0x70
[  334.579518][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  334.579527][   T34]  ? __pfx__printk+0x10/0x10
[  334.579541][   T34]  panic+0x2db/0x790
[  334.579556][   T34]  ? __pfx_panic+0x10/0x10
[  334.579565][   T34]  ? nmi_backtrace_stall_check+0x433/0x440
[  334.579576][   T34]  ? irq_work_queue+0xc3/0x140
[  334.579586][   T34]  watchdog+0x102d/0x1030
[  334.579599][   T34]  ? watchdog+0x1de/0x1030
[  334.579613][   T34]  kthread+0x711/0x8a0
[  334.579624][   T34]  ? __pfx_watchdog+0x10/0x10
[  334.579635][   T34]  ? __pfx_kthread+0x10/0x10
[  334.579646][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  334.579655][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  334.579664][   T34]  ? __pfx_kthread+0x10/0x10
[  334.579675][   T34]  ret_from_fork+0x3fc/0x770
[  334.579684][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  334.579693][   T34]  ? __switch_to_asm+0x39/0x70
[  334.579703][   T34]  ? __switch_to_asm+0x33/0x70
[  334.579712][   T34]  ? __pfx_kthread+0x10/0x10
[  334.579723][   T34]  ret_from_fork_asm+0x1a/0x30
[  334.579738][   T34]  </TASK>
[  334.580440][   T34] Kernel Offset: disabled

VM DIAGNOSIS:
09:36:09  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff33bf460 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99dfa470 RSP=ffffc9000068f750
R8 =ffff888107a80237 R9 =1ffff11020f50046 R10=dffffc0000000000 R11=ffffffff85471ed0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff85471f47 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000561d80913e08 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f0336187d20
XMM02=0009900300000015 8803000800000000 XMM03=080003000409a003 0e08000998030008
XMM04=0000000000000000 0000000000000014 XMM05=0000000000000000 000000000003bf12
XMM06=031a080007800300 0400028000000017 XMM07=000401c700000000 49ac601000098004
XMM08=281000060102ae00 70756f7200000016 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81680ea6 RBX=0000000000000000 RCX=ffff88810760d640 RDX=0000000000010100
RSI=0000000000000008 RDI=ffffffff92a52460 RBP=ffffc900001e0548 RSP=ffffc900001e04c0
R8 =ffffffff92a52467 R9 =1ffffffff254a48c R10=dffffc0000000000 R11=fffffbfff254a48d
R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff81680ea7 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f621783a6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fca7d83bfc8 CR3=000000011e966000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f6216b87498 00007f6216b87470 XMM03=00007f6216b874a8 00007f6216b874a0
XMM04=00007f62176ed100 00007f6216b87460 XMM05=00007f6216b87478 00007f6216b874c0
XMM06=00007f6216b874b8 00007f6216b874b0 XMM07=00007f6216b874a8 00007f6216b874a0
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f6216a12f89
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
