last executing test programs:

17.032017645s ago: executing program 2 (id=692):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600), 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00'}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00'}, 0x90)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="3ee94451406f6f36f7a114ae545a92", @ANYRES32, @ANYBLOB="f0f605748aed0000000000000c00000045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="3ee94451406f6f36f7a114ae545a92", @ANYRES32, @ANYBLOB="f0f605748aed0000000000000c00000045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r4}, 0x10)
close(r1)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x14105, 0x32, 0xfffffbff, 0x5, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
socket$kcm(0x10, 0x2, 0x0) (async)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ipvlan1\x00'}) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ipvlan1\x00'})
socket$kcm(0xa, 0x2, 0x0) (async)
socket$kcm(0xa, 0x2, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'})
socketpair(0x1, 0x1, 0x6, &(0x7f0000000240)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f3, &(0x7f0000000080))

16.622801067s ago: executing program 2 (id=697):
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c0000031a00910c07a551559a257aac81800e004f3a0347743af67bf62d2f223c29530568685bd752fd74a70e34ad363706bed933565a2c3710f6a83192953360561a36794dc6a9d292070f22d6dd6e0075fb218d124675d747cd5fb94f3b2fb8c08e580323d1d326374838f11bf9"], 0xfe33)

16.619231485s ago: executing program 2 (id=700):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e0800000709004003000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup_netprio_ifpriomap(r1, &(0x7f00000000c0), 0x2, 0x0)

16.541668631s ago: executing program 2 (id=702):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, @perf_bp={0x0, 0x8}, 0x390, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240))
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0)

16.087936268s ago: executing program 0 (id=707):
socket$kcm(0xa, 0x2, 0x0) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="190000000400000004000000080c403434d65253869eb5200fad75446c782e54a90949c4bd3f6cb095617b1d21cbd3eda396f9435ae864705a3e55395fb4645de45421ac48581e0d49aeba8617ca5c3107c667d0a508f6dbfcadcb48edf5b1b645d6cb58f0d24e9c98efcf591f63798093b49aaaec2a33c9176c5901ba7ae5d8fd3b89b7c7ca17355a463c879c06985a50f643368f38bb39baff62000000000000000000"], 0x48) (async)
socket$kcm(0x2b, 0x1, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async, rerun: 64)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) (async)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xca}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1) (async)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x1589, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0, 0x1}, 0x3c, 0x1, 0x0, 0x4, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcf}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0000002071a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
write$cgroup_subtree(r2, &(0x7f0000000c00)=ANY=[@ANYRES8=r1, @ANYBLOB='>'], 0x12) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_1\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080))

16.042439391s ago: executing program 0 (id=708):
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c0000051a00910c07a551559a257aac81800e004f3a0347743af67bf62d2f223c29530568685bd752fd74a70e34ad363706bed933565a2c3710f6a83192953360561a36794dc6a9d292070f22d6dd6e0075fb218d124675d747cd5fb94f3b2fb8c08e580323d1d326374838f11bf9"], 0xfe33)

15.981964479s ago: executing program 0 (id=709):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg(0xffffffffffffffff, 0x0, 0x400c091)
r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080500000000000000000000000000180000005500"/33], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x29, 0x30, 0x0, 0x20000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000200)='syzkaller\x00')
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), 0x0}, 0x20)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r3, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000680)=[0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0], 0x0, 0x83, &(0x7f0000000700), 0x0, 0x10, &(0x7f0000000740), 0x0, 0x0, 0xe9, 0x8, 0x8, &(0x7f0000000440)}}, 0x10)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000e94c1fbdb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x14a80, 0x10, 0x38, &(0x7f00000002c0)="24006f20a01c2500", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0), 0x4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'syz_tun\x00', 0x2})

15.979355217s ago: executing program 2 (id=710):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001240)={0x1b, 0x0, 0x0, 0x3596, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f00000013c0)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000cd0bf3ab00000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
close(r1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001680)={&(0x7f0000001580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5f, 0x5f, 0x3, [@var={0x3, 0x0, 0x0, 0xe, 0x3, 0x2}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x2, 0x2}, @datasec={0x9, 0x4, 0x0, 0xf, 0x3, [{0x3}, {0x5, 0x10, 0xd81}, {0x1, 0x4, 0xfff}, {0x4, 0x1a, 0x7}], "c324c1"}]}, {0x0, [0x5f]}}, &(0x7f0000001600)=""/109, 0x7b, 0x6d, 0x1, 0x800000}, 0x28)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000019c0)={r2, 0xe0, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001700)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000001740)=[0x0], &(0x7f0000001780)=[0x0], <r5=>0x0, 0x86, &(0x7f00000017c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000001800), &(0x7f0000001840), 0x8, 0xf2, 0x8, 0x8, &(0x7f0000001880)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x9, 0x11, &(0x7f0000001400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}}, &(0x7f00000014c0)='syzkaller\x00', 0x88, 0x51, &(0x7f0000001500)=""/81, 0x0, 0x40, '\x00', 0x0, @cgroup_sock=0x31, r4, 0x8, &(0x7f00000016c0)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, r5, r2, 0x4, 0x0, &(0x7f0000001a00)=[{0x0, 0x1, 0x10, 0xb}, {0x3, 0x4, 0x5, 0x8}, {0x5, 0x5, 0xc, 0x2}, {0x4, 0x2, 0x8, 0xb}], 0x10, 0xfffffffa}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x1d, &(0x7f00000012c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x74}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x1, 0x2, 0xb, 0x6, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x8901, &(0x7f0000000040))
r8 = socket$kcm(0x28, 0x1, 0x0)
setsockopt$sock_attach_bpf(r8, 0x1, 0x3c, &(0x7f0000000000), 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001200)={&(0x7f0000001b00)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000300000000000000000000030000000005000000040000000400000002e83f7996000000000000120200000000000000edd7caeea7a14fbb7d88101e3b3b36e87801e4b9d94e6b929123ecd08271cd20b5de947dcd28ad9fb4e127dac3523485b445b06f558c0c15b285ddbdbf467a83d6f56c390afdec2cf19e0a27a8b1038cc889b5367ceda43b3f9810337f5e821282bc00e56e9eb243345eb4c637bb40cf61c523f292b944c98c84b613202daf2c7d74aecef085e273da44bab151b1107809d541ce0ccee89687fda384d7ff8d2d690ce9d61f00"/249], &(0x7f0000000200)=""/4096, 0x3f, 0x1000, 0x1, 0x60}, 0x28)
r9 = perf_event_open$cgroup(&(0x7f0000001c00)={0x3, 0x80, 0xf, 0x2, 0x9a, 0x0, 0x0, 0x3, 0xe0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x49da, 0x1, @perf_bp={&(0x7f00000001c0), 0x7}, 0x100, 0x1, 0x0, 0x1, 0x3, 0x80, 0xe, 0x0, 0xfdd, 0x0, 0x31}, r8, 0xc, 0xffffffffffffffff, 0x2)
r10 = socket$kcm(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r11=>0xffffffffffffffff})
recvmsg$unix(r11, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [<r12=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r10, 0x84, 0x25, &(0x7f0000000000)=r12, 0x20000010)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r12)
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4)

15.979203255s ago: executing program 1 (id=711):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x19, 0xe, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000000}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xbd0}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x53, &(0x7f0000000540)=""/83, 0x40f00, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, r3, r0, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x94)

15.892778337s ago: executing program 1 (id=712):
r0 = socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x1e202, 0x2e, 0xfffffbff, 0x3, 0xd4e, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0x83, &(0x7f0000000000), 0x8)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000001640)=@llc={0x1a, 0x0, 0x2, 0xd, 0x2, 0xcf, @random="364c62eb0f03"}, 0x80, &(0x7f00000029c0)=[{&(0x7f00000000c0)="83", 0x1}], 0x1}, 0x851)

15.892378139s ago: executing program 1 (id=713):
socket$kcm(0x10, 0x2, 0x0)
close(0xffffffffffffffff)
r0 = socket$kcm(0xa, 0x1, 0x106)
r1 = gettid()
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto, @func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @func_proto={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x40}, 0x20)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a0, &(0x7f0000000140)='%n\xf1\xfa\xbc$j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f')
perf_event_open(0x0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0xc2, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x7, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c000000050000e1000000000200000d000000000200000000000000000000000000000300305f1e00"], 0x0, 0x39, 0x0, 0x1}, 0x28)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), 0x0}, 0x20)
bpf$OBJ_GET_PROG(0x9, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06fe857c3d452cc0aa8f1800fc55150081000000ff0f", @ANYRES32], 0x48)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c064001", 0x19}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000a40)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc2261c238a5159ea98db9c00aeef644ae98a8cb8da3ff3b7ba14d7971910b559623af829524d83bf19f18628464076329140e0203fc75859185ccd019302afb784e41e16cf2d31db7aba83d0f500ce25fc2d7f524a04cfaa0015ea8a297477a5517f8a4ac167083a321c78070974afc897fb738fbcfeac369844fd7fc11fff502c02b7607007ead2007a18006a6ca8dc2d0119f01d7083c2ab5760ac7b24d7bf26b9030cf455a08385f9e662cbe0c3ca6e6fd4ac0c8566c0fca986c68ef7016a11d3e44253b6f2d07d53505ed58b8ad410f89425046321b4a9b27b5e767bdfa0ebf7abf3d91b319129c48853d8e5cbc4a2c5c560b007eafe03e3332f6017f3164c7f602180aad23dfe5e770fe8855f45925e342b7dfd7ddaa68b65065465cdf4d5b8d995d6e6a7042ebea", 0x239}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {0x4}, {}]}, 0x90)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0)
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)
r4 = socket$kcm(0xa, 0x3, 0x73)
sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0}, 0x0)

15.750065177s ago: executing program 1 (id=714):
socket$kcm(0x2, 0x1, 0x84)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000040)='GPL\x00'}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x48}, 0x2160)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0x66, 0x8}, @initr0, @exit, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)

15.652103104s ago: executing program 0 (id=715):
r0 = socket$kcm(0x10, 0x2, 0x4)
close(r0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0x0, 0x1}, {0x2}]}, 0x94)
r2 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x2040)
setsockopt$sock_attach_bpf(r2, 0x84, 0x18, &(0x7f0000000000)=r4, 0x8)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r4, <r5=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)=r1}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r4, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300), 0x0, 0x88, &(0x7f0000000340)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xb, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0xa, '\x00', r6, r4, 0x5, 0x1}, 0x50)
sendmsg$kcm(r0, &(0x7f0000000680)={&(0x7f0000000080)=@ll={0x11, 0x8, r6, 0x1, 0x8}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000100)="dd16249946f85e0357c81428b929f441f6f79059baef5917d9b7f44428c52e99ef3898d3bf26174e131b84aa0c7b663bdd6fd2c2e1304d", 0x37}, {&(0x7f00000001c0)="3ccd507677179e4620505292fb8284f40fc48be6409c9075517bdd83be944a55356b3dd0496531e248cf73fdcd711eda460a0537f4037d3e33386a970ee3d0a1", 0x40}, {&(0x7f0000000200)="be60de9b5948e2ff7d7a51715cca1da2f7c75d71c21a1c610c28c3c989c2f4b0893f3029e0e60397ac5fd8112bb0ec63d26d9c7b50b2bc5efb3f5753b514109228cd7fd506f71fb95a23f8856caf00fd5670cd27d820a21ee0a847ae48e560b5e3a1732c0aa25393a4351dfefec25bf0e7870f410cbfcedd983d676abe5d13a4613c04dc64d3cb93fb73dbc0dd3546a24e6a2bc286204fd8b693ec231ef8e9b692752d04bfc78eba7089cf6ce776f76a3dc28b87d3ed3fd2f4a462b2813b05905e0c47fe7d0060b28fbb13dff8b96a0101da53", 0xd3}, {&(0x7f0000000300)="123caa6aba441792956d8caca969294fc0c02c0d739a6b64ae026c2c329d90ab24359b74ba30d5c3feb555aaaf851d5e0d6cc6cafe935851a3cb57608a3cd38127c74ef246febee99070042011f4d5b30629e6b21e227058b77d7706b9d81c6b58a5b77433f119efd62700facc577b995ed40164c3b64fd3730798c14fa9badea1daafdf954391454b9d178ae9bf263cc65a5ec05cce3ddacda354fd6c54f878871a19f6c0d5d4798e73dca9fbbd323297a64533a556fd487d43827da378b9bc110e2b91cb50107b563a086d3c68322a458aca257c1444c4d731b17312a8", 0xde}], 0x4, &(0x7f0000000440)}, 0x4050)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006b7d373be35c6e17aa31046b876c1d0000007ea60864160af36508001dc0c3000200340031009ee517d34460bc24eab556a705251e618294ff0051f60a84c9f472736f67c5e73bb9e5c446fa30be62cbd4938037e786", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

15.65178423s ago: executing program 0 (id=716):
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c0000071a00910c07a551559a257aac81800e004f3a0347743af67bf62d2f223c29530568685bd752fd74a70e34ad363706bed933565a2c3710f6a83192953360561a36794dc6a9d292070f22d6dd6e0075fb218d124675d747cd5fb94f3b2fb8c08e580323d1d326374838f11bf9"], 0xfe33)

15.602682328s ago: executing program 0 (id=717):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x6000, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x9}, [@alu={0x4, 0x0, 0x7, 0x6, 0x7, 0xffffffffffffffc0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, 0x0}, 0x94) (async)
r2 = socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0xa, 0x1}, 0x20) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890c, &(0x7f0000000000)) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r3) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x2e, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x36)

15.601173553s ago: executing program 1 (id=718):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x19, 0xe, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000000}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xbd0}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x53, &(0x7f0000000540)=""/83, 0x40f00, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, r3, r0, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x94)

15.55208865s ago: executing program 1 (id=719):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffff, 0x101}, 0x1828a6, 0xca, 0x2, 0x0, 0x4, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca0d"], 0x9a)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000140)=""/254, 0xfe}, {&(0x7f0000000b00)=""/198, 0xc6}, {&(0x7f0000003180)=""/4080, 0xff0}, {&(0x7f0000000c00)=""/193, 0xc1}, {&(0x7f0000000d00)=""/184, 0xb8}, {&(0x7f0000000a00)=""/233, 0xe9}, {&(0x7f0000005100)=""/4077, 0xfed}, {&(0x7f0000000780)=""/233, 0xe9}, {&(0x7f0000000240)=""/164, 0xa4}, {&(0x7f0000000f00)=""/245, 0xf5}], 0xa}, 0x40002102)
recvmsg$kcm(r4, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8, 0x8, 0x0, 0x0, 0x5000000}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x1a}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

15.089647148s ago: executing program 2 (id=720):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x100002e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x2b, 0x1, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x17, 0x0, 0x1b, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5, <r6=>0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r6, 0x0, &(0x7f0000001780)=""/4096}, 0x20)
ioctl$TUNSETOFFLOAD(r4, 0x400454ce, 0xa)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
sendmsg$inet(r3, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818)
close(r1)
close(r3)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400", @ANYRES32=r8, @ANYBLOB="0000000000000000b705000000000000850000007b00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000014000000140000000a00000000000000010000060400000006000000000000000000000000005f"], 0x0, 0x36}, 0x28)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r9}, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
perf_event_open(&(0x7f0000004600)={0x2, 0x80, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x100000005, 0x82c0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x3}, 0xecf5, 0x3, 0x10000000, 0x0, 0xd6ae, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xffdfffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r10 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r10, &(0x7f00000001c0)={'b', ' *:* ', 'm\x00'}, 0x8)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0xfe33)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)

46.21711ms ago: executing program 32 (id=717):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x6000, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x9}, [@alu={0x4, 0x0, 0x7, 0x6, 0x7, 0xffffffffffffffc0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, 0x0}, 0x94) (async)
r2 = socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0xa, 0x1}, 0x20) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890c, &(0x7f0000000000)) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r3) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x2e, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x36)

0s ago: executing program 33 (id=719):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffff, 0x101}, 0x1828a6, 0xca, 0x2, 0x0, 0x4, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca0d"], 0x9a)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000140)=""/254, 0xfe}, {&(0x7f0000000b00)=""/198, 0xc6}, {&(0x7f0000003180)=""/4080, 0xff0}, {&(0x7f0000000c00)=""/193, 0xc1}, {&(0x7f0000000d00)=""/184, 0xb8}, {&(0x7f0000000a00)=""/233, 0xe9}, {&(0x7f0000005100)=""/4077, 0xfed}, {&(0x7f0000000780)=""/233, 0xe9}, {&(0x7f0000000240)=""/164, 0xa4}, {&(0x7f0000000f00)=""/245, 0xf5}], 0xa}, 0x40002102)
recvmsg$kcm(r4, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8, 0x8, 0x0, 0x0, 0x5000000}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x1a}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:6030' (ED25519) to the list of known hosts.
syzkaller login: [   48.838559][ T5761] cgroup: Unknown subsys name 'net'
[   48.980021][ T5761] cgroup: Unknown subsys name 'cpuset'
[   48.985712][ T5761] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.620907][ T5761] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.176896][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.182162][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.185661][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.190266][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.193849][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.204109][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.208732][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.211853][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.215883][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.218793][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.256930][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.260242][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.262936][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.266170][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.268924][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.444877][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   55.565173][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.568361][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.570927][ T5829] bridge_slave_0: entered allmulticast mode
[   55.574324][ T5829] bridge_slave_0: entered promiscuous mode
[   55.578949][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.581445][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.585066][ T5829] bridge_slave_1: entered allmulticast mode
[   55.588015][ T5829] bridge_slave_1: entered promiscuous mode
[   55.621795][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.635245][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   55.642664][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.697611][ T5829] team0: Port device team_slave_0 added
[   55.703708][ T5829] team0: Port device team_slave_1 added
[   55.720802][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   55.750133][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.752614][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.762210][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.788204][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.791407][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.802740][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.845239][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.848584][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.852130][ T5833] bridge_slave_0: entered allmulticast mode
[   55.856580][ T5833] bridge_slave_0: entered promiscuous mode
[   55.860504][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.863117][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.866294][ T5833] bridge_slave_1: entered allmulticast mode
[   55.869363][ T5833] bridge_slave_1: entered promiscuous mode
[   55.908556][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.911639][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.914356][ T5838] bridge_slave_0: entered allmulticast mode
[   55.917337][ T5838] bridge_slave_0: entered promiscuous mode
[   55.941046][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.949755][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.954351][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.957009][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.959443][ T5838] bridge_slave_1: entered allmulticast mode
[   55.962282][ T5838] bridge_slave_1: entered promiscuous mode
[   55.969665][ T5829] hsr_slave_0: entered promiscuous mode
[   55.972713][ T5829] hsr_slave_1: entered promiscuous mode
[   56.019501][ T5833] team0: Port device team_slave_0 added
[   56.040188][ T5833] team0: Port device team_slave_1 added
[   56.045100][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.079432][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.090597][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.093913][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.106669][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.144181][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.147221][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.159915][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.169293][ T5838] team0: Port device team_slave_0 added
[   56.186295][ T5838] team0: Port device team_slave_1 added
[   56.270733][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.274086][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.283177][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.292419][ T5833] hsr_slave_0: entered promiscuous mode
[   56.297594][ T5833] hsr_slave_1: entered promiscuous mode
[   56.300686][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.305442][ T5833] Cannot create hsr debugfs directory
[   56.316414][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.319429][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.329752][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.394756][ T5838] hsr_slave_0: entered promiscuous mode
[   56.397223][ T5838] hsr_slave_1: entered promiscuous mode
[   56.399452][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.402029][ T5838] Cannot create hsr debugfs directory
[   56.490653][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.506955][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.526333][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.540435][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.663731][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.670090][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.676361][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.681798][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.735775][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.747602][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.758291][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.769071][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.775529][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.818034][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   56.839184][   T84] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.842181][   T84] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.855814][   T84] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.858305][   T84] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.880917][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.918105][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   56.936884][ T3721] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.939996][ T3721] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.958781][ T3721] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.962006][ T3721] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.996069][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.024997][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   57.038645][  T735] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.041584][  T735] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.068152][ T3721] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.071449][ T3721] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.116676][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.171154][ T5829] veth0_vlan: entered promiscuous mode
[   57.195092][ T5829] veth1_vlan: entered promiscuous mode
[   57.215693][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.236331][ T5829] veth0_macvtap: entered promiscuous mode
[   57.247565][ T5829] veth1_macvtap: entered promiscuous mode
[   57.270318][ T5835] Bluetooth: hci1: command tx timeout
[   57.271331][   T54] Bluetooth: hci0: command tx timeout
[   57.285207][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.296176][ T5833] veth0_vlan: entered promiscuous mode
[   57.304571][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.311454][ T5833] veth1_vlan: entered promiscuous mode
[   57.317122][ T5829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.320679][ T5829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.324818][ T5829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.328398][ T5829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.342626][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.353460][   T54] Bluetooth: hci2: command tx timeout
[   57.403183][ T5833] veth0_macvtap: entered promiscuous mode
[   57.425029][ T5833] veth1_macvtap: entered promiscuous mode
[   57.436732][ T3721] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.439268][ T5838] veth0_vlan: entered promiscuous mode
[   57.439612][ T3721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.458650][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.474477][ T5838] veth1_vlan: entered promiscuous mode
[   57.479285][ T3721] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.479885][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.482138][ T3721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.488147][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.491152][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.495135][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.498106][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.544270][ T5838] veth0_macvtap: entered promiscuous mode
[   57.556310][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.558831][ T5838] veth1_macvtap: entered promiscuous mode
[   57.617860][  T735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.621341][  T735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.626924][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.673002][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.676813][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.678202][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.708481][ T5838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.712212][ T5838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.730986][ T5894] Zero length message leads to an empty skb
[   57.733986][ T5838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.737478][ T5838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.846769][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.854930][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.861711][ T5897] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   57.929315][  T735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.932245][  T735] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.082801][ T5907] netlink: 'syz.1.6': attribute type 29 has an invalid length.
[   58.092961][ T5908] netlink: 'syz.1.6': attribute type 29 has an invalid length.
[   58.116997][ T5907] Driver unsupported XDP return value 0 on prog  (id 5) dev N/A, expect packet loss!
[   58.148811][ T5910] netlink: 'syz.0.1': attribute type 10 has an invalid length.
[   58.285117][ T5920] netlink: 'syz.0.1': attribute type 10 has an invalid length.
[   58.293398][ T5920] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1'.
[   59.051368][ T5910] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.056834][ T5910] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   59.065296][ T5917] bond0: entered promiscuous mode
[   59.067660][ T5917] bond_slave_0: entered promiscuous mode
[   59.070339][ T5917] bond_slave_1: entered promiscuous mode
[   59.073696][ T5917] batadv0: entered promiscuous mode
[   59.081659][ T5920] batadv0: entered allmulticast mode
[   59.092586][ T5920] bond0: (slave batadv0): Releasing backup interface
[   59.110741][ T5920] bridge0: port 3(batadv0) entered blocking state
[   59.114895][ T5920] bridge0: port 3(batadv0) entered disabled state
[   59.117758][ T5925] netlink: 'syz.1.9': attribute type 21 has an invalid length.
[   59.304839][   T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   59.308124][   T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   59.344618][   T54] Bluetooth: hci0: command tx timeout
[   59.344761][ T5835] Bluetooth: hci1: command tx timeout
[   59.423671][ T5835] Bluetooth: hci2: command tx timeout
[   60.012668][ T5938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14'.
[   60.062561][    C1] hrtimer: interrupt took 91072 ns
[   60.567040][ T5945] netlink: 'syz.2.16': attribute type 29 has an invalid length.
[   60.571956][ T5945] netlink: 'syz.2.16': attribute type 29 has an invalid length.
[   60.579180][ T5945] netlink: 'syz.2.16': attribute type 29 has an invalid length.
[   60.588341][ T5945] netlink: 'syz.2.16': attribute type 29 has an invalid length.
[   61.424448][ T5835] Bluetooth: hci0: command tx timeout
[   61.435913][ T5835] Bluetooth: hci1: command tx timeout
[   61.514082][ T5835] Bluetooth: hci2: command tx timeout
[   61.748426][ T5957] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21'.
[   61.752131][ T5957] netlink: 'syz.0.21': attribute type 10 has an invalid length.
[   61.757343][ T5957] veth1_macvtap: left promiscuous mode
[   61.803845][ T5960] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21'.
[   61.989045][ T5965] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.24'.
[   62.208241][ T5969] delete_channel: no stack
[   62.216295][ T5969] delete_channel: no stack
[   62.387866][ T5970] syz.2.25: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   62.473089][ T5970] CPU: 0 UID: 0 PID: 5970 Comm: syz.2.25 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[   62.473107][ T5970] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   62.473113][ T5970] Call Trace:
[   62.473118][ T5970]  <TASK>
[   62.473125][ T5970]  dump_stack_lvl+0x189/0x250
[   62.473151][ T5970]  ? __pfx_dump_stack_lvl+0x10/0x10
[   62.473166][ T5970]  ? __pfx__printk+0x10/0x10
[   62.473183][ T5970]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   62.473220][ T5970]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   62.473238][ T5970]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   62.473258][ T5970]  warn_alloc+0x214/0x310
[   62.473273][ T5970]  ? stack_depot_save_flags+0x429/0x900
[   62.473296][ T5970]  ? __pfx_warn_alloc+0x10/0x10
[   62.473314][ T5970]  ? kasan_save_track+0x4f/0x80
[   62.473325][ T5970]  ? xskq_create+0x56/0x170
[   62.473335][ T5970]  ? xsk_init_queue+0xb0/0x110
[   62.473342][ T5970]  ? xsk_setsockopt+0x4de/0x710
[   62.473349][ T5970]  ? do_sock_setsockopt+0x17c/0x1b0
[   62.473357][ T5970]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   62.473365][ T5970]  ? do_syscall_64+0xfa/0x3b0
[   62.473374][ T5970]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.473398][ T5970]  __vmalloc_node_range_noprof+0x125/0x12f0
[   62.473468][ T5970]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   62.473517][ T5970]  ? __kasan_kmalloc+0x93/0xb0
[   62.473537][ T5970]  vmalloc_user_noprof+0xad/0xf0
[   62.473549][ T5970]  ? xskq_create+0xbf/0x170
[   62.473564][ T5970]  xskq_create+0xbf/0x170
[   62.473583][ T5970]  xsk_init_queue+0xb0/0x110
[   62.473602][ T5970]  xsk_setsockopt+0x4de/0x710
[   62.473621][ T5970]  ? __pfx_xsk_setsockopt+0x10/0x10
[   62.473646][ T5970]  ? __fget_files+0x2a/0x420
[   62.473657][ T5970]  ? aa_sock_opt_perm+0x74/0x110
[   62.473676][ T5970]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   62.473688][ T5970]  ? __pfx_xsk_setsockopt+0x10/0x10
[   62.473703][ T5970]  do_sock_setsockopt+0x17c/0x1b0
[   62.473725][ T5970]  __x64_sys_setsockopt+0x13f/0x1b0
[   62.473747][ T5970]  do_syscall_64+0xfa/0x3b0
[   62.473759][ T5970]  ? lockdep_hardirqs_on+0x9c/0x150
[   62.473771][ T5970]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.473780][ T5970]  ? exc_page_fault+0x9f/0xf0
[   62.473798][ T5970]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.473806][ T5970] RIP: 0033:0x7f962af8e9a9
[   62.473817][ T5970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   62.473823][ T5970] RSP: 002b:00007f962be5a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   62.473833][ T5970] RAX: ffffffffffffffda RBX: 00007f962b1b6080 RCX: 00007f962af8e9a9
[   62.473838][ T5970] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009
[   62.473843][ T5970] RBP: 00007f962b010d69 R08: 0000000000000004 R09: 0000000000000000
[   62.473847][ T5970] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[   62.473851][ T5970] R13: 0000000000000000 R14: 00007f962b1b6080 R15: 00007fffc4d16238
[   62.473887][ T5970]  </TASK>
[   62.603706][ T5973] netlink: 17 bytes leftover after parsing attributes in process `syz.0.26'.
[   62.607476][ T5973] netlink: zone id is out of range
[   62.609427][ T5973] netlink: zone id is out of range
[   62.611165][ T5973] netlink: zone id is out of range
[   62.612901][ T5973] netlink: zone id is out of range
[   62.614900][ T5973] netlink: zone id is out of range
[   62.616688][ T5973] netlink: zone id is out of range
[   62.618410][ T5973] netlink: zone id is out of range
[   62.620518][ T5973] netlink: zone id is out of range
[   62.622387][ T5973] netlink: zone id is out of range
[   62.624421][ T5973] netlink: zone id is out of range
[   62.695055][ T5970] Mem-Info:
[   62.696654][ T5970] active_anon:5452 inactive_anon:0 isolated_anon:0
[   62.696654][ T5970]  active_file:866 inactive_file:38206 isolated_file:0
[   62.696654][ T5970]  unevictable:1768 dirty:1393 writeback:0
[   62.696654][ T5970]  slab_reclaimable:9035 slab_unreclaimable:52602
[   62.696654][ T5970]  mapped:18087 shmem:2434 pagetables:1008
[   62.696654][ T5970]  sec_pagetables:0 bounce:0
[   62.696654][ T5970]  kernel_misc_reclaimable:0
[   62.696654][ T5970]  free:305459 free_pcp:19129 free_cma:0
[   62.717224][ T5970] Node 0 active_anon:12148kB inactive_anon:0kB active_file:2304kB inactive_file:139272kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35164kB dirty:4272kB writeback:0kB shmem:4996kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6984kB pagetables:2664kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   62.734865][ T5970] Node 1 active_anon:9660kB inactive_anon:0kB active_file:1160kB inactive_file:13552kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:37184kB dirty:1300kB writeback:0kB shmem:4740kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4568kB pagetables:1300kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   62.749368][ T5970] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   62.762132][ T5970] lowmem_reserve[]: 0 812 812 812 812
[   62.765888][ T5970] Node 0 DMA32 free:279468kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12148kB inactive_anon:0kB active_file:2304kB inactive_file:139272kB unevictable:3536kB writepending:4272kB present:1556484kB managed:831912kB mlocked:0kB bounce:0kB free_pcp:48328kB local_pcp:19892kB free_cma:0kB
[   62.779829][ T5970] lowmem_reserve[]: 0 0 0 0 0
[   62.782142][ T5970] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[   62.795275][ T5970] lowmem_reserve[]: 0 0 854 854 854
[   62.797933][ T5970] Node 1 Normal free:468708kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9660kB inactive_anon:0kB active_file:1160kB inactive_file:13552kB unevictable:3536kB writepending:1300kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:30044kB local_pcp:9388kB free_cma:0kB
[   62.812790][ T5970] lowmem_reserve[]: 0 0 0 0 0
[   62.836830][ T5970] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   62.848265][ T5970] Node 0 DMA32: 7145*4kB (UM) 109*8kB (UM) 44*16kB (UM) 11*32kB (UE) 5*64kB (UM) 4*128kB (UME) 4*256kB (UM) 4*512kB (UME) 3*1024kB (UM) 2*2048kB (UM) 58*4096kB (M) = 279148kB
[   62.866353][ T5970] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   62.875571][ T5970] Node 1 Normal: 1*4kB (E) 212*8kB (UE) 456*16kB (U) 138*32kB (UM) 48*64kB (UME) 17*128kB (UME) 8*256kB (UME) 4*512kB (UM) 5*1024kB (M) 3*2048kB (ME) 106*4096kB (M) = 468196kB
[   62.884045][ T5970] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   62.890454][ T5970] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   62.895119][ T5970] 41506 total pagecache pages
[   62.899922][ T5970] 0 pages in swap cache
[   62.901808][ T5970] Free swap  = 124996kB
[   62.904147][ T5970] Total swap = 124996kB
[   62.906093][ T5970] 786301 pages RAM
[   62.907805][ T5970] 0 pages HighMem/MovableOnly
[   62.910189][ T5970] 241075 pages reserved
[   62.912075][ T5970] 0 pages cma reserved
[   63.095209][ T5983] netlink: 60 bytes leftover after parsing attributes in process `syz.2.30'.
[   63.099141][ T5982] netlink: 60 bytes leftover after parsing attributes in process `syz.2.30'.
[   63.119625][ T5986] netlink: 60 bytes leftover after parsing attributes in process `syz.2.30'.
[   63.127590][ T5982] validate_nla: 1 callbacks suppressed
[   63.127644][ T5982] netlink: 'syz.2.30': attribute type 29 has an invalid length.
[   63.135877][ T5983] netlink: 'syz.2.30': attribute type 29 has an invalid length.
[   63.140356][ T5982] netlink: 'syz.2.30': attribute type 29 has an invalid length.
[   63.145938][ T5986] netlink: 'syz.2.30': attribute type 29 has an invalid length.
[   63.202035][ T5989] netlink: 60 bytes leftover after parsing attributes in process `syz.0.32'.
[   63.206736][ T5989] netlink: 'syz.0.32': attribute type 4 has an invalid length.
[   63.352736][ T6001] netlink: 'syz.1.36': attribute type 29 has an invalid length.
[   63.364892][ T6001] netlink: 'syz.1.36': attribute type 29 has an invalid length.
[   63.505338][ T5835] Bluetooth: hci1: command tx timeout
[   63.505397][   T54] Bluetooth: hci0: command tx timeout
[   63.584676][   T54] Bluetooth: hci2: command tx timeout
[   64.107221][ T6014] netlink: 'syz.1.39': attribute type 10 has an invalid length.
[   64.111524][ T6014] bridge0: port 3(macsec0) entered blocking state
[   64.116709][ T6014] bridge0: port 3(macsec0) entered disabled state
[   64.119916][ T6014] macsec0: entered allmulticast mode
[   64.122148][ T6014] veth1_macvtap: entered allmulticast mode
[   64.126827][ T6014] macsec0: entered promiscuous mode
[   64.129911][ T6014] bridge0: port 3(macsec0) entered blocking state
[   64.132993][ T6014] bridge0: port 3(macsec0) entered forwarding state
[   64.162720][ T6017] netlink: 'syz.0.40': attribute type 29 has an invalid length.
[   64.177448][ T6017] netlink: 'syz.0.40': attribute type 29 has an invalid length.
[   64.182738][ T6016] __nla_validate_parse: 1 callbacks suppressed
[   64.182829][ T6016] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.41'.
[   64.200132][ T6017] netlink: 48 bytes leftover after parsing attributes in process `syz.0.40'.
[   64.308871][ T6019] netlink: 144 bytes leftover after parsing attributes in process `syz.1.42'.
[   64.323187][ T6021] netlink: 60 bytes leftover after parsing attributes in process `syz.2.43'.
[   64.337720][ T6021] veth1_macvtap: left promiscuous mode
[   64.387015][ T6024] netlink: 60 bytes leftover after parsing attributes in process `syz.2.43'.
[   64.645685][ T6035] netlink: 48 bytes leftover after parsing attributes in process `syz.1.45'.
[   64.980756][ T6041] netlink: 44 bytes leftover after parsing attributes in process `syz.0.50'.
[   67.505779][ T6050] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.53'.
[   67.559224][ T6050] netlink: 2 bytes leftover after parsing attributes in process `syz.1.53'.
[   67.582171][ T6050] bond0: entered promiscuous mode
[   67.584781][ T6050] bond_slave_0: entered promiscuous mode
[   67.590412][ T6050] bond_slave_1: entered promiscuous mode
[   67.604967][ T6050] bridge0: port 4(bond0) entered blocking state
[   67.607592][ T6050] bridge0: port 4(bond0) entered disabled state
[   67.610444][ T6050] bond0: entered allmulticast mode
[   67.626888][ T6050] bond_slave_0: entered allmulticast mode
[   67.638118][ T6050] bond_slave_1: entered allmulticast mode
[   67.791996][ T6050] bridge0: port 4(bond0) entered blocking state
[   67.795333][ T6050] bridge0: port 4(bond0) entered forwarding state
[   67.816600][ T6068] netlink: 60 bytes leftover after parsing attributes in process `syz.2.58'.
[   67.891243][ T6072] tap0: tun_chr_ioctl cmd 1074025677
[   67.894735][ T6072] tap0: linktype set to 6
[   68.626547][ T6097] validate_nla: 7 callbacks suppressed
[   68.626646][ T6097] netlink: 'syz.2.69': attribute type 10 has an invalid length.
[   68.711156][ T6110] netlink: 'syz.0.73': attribute type 29 has an invalid length.
[   68.721357][ T6110] netlink: 'syz.0.73': attribute type 29 has an invalid length.
[   68.860340][ T6115] netlink: 'syz.0.76': attribute type 2 has an invalid length.
[   68.865297][ T6115] netlink: 'syz.0.76': attribute type 8 has an invalid length.
[   68.928163][ T6118] netlink: 'syz.0.77': attribute type 11 has an invalid length.
[   69.110469][ T6118] netlink: 'syz.0.77': attribute type 21 has an invalid length.
[   69.165787][ T6117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.404057][ T6126] __nla_validate_parse: 9 callbacks suppressed
[   69.404069][ T6126] netlink: 763 bytes leftover after parsing attributes in process `syz.1.79'.
[   69.644838][ T6134] netlink: 'syz.0.82': attribute type 29 has an invalid length.
[   69.672642][ T6134] netlink: 'syz.0.82': attribute type 29 has an invalid length.
[   69.789730][ T6138] netlink: 'syz.2.84': attribute type 29 has an invalid length.
[   69.792808][ T6138] netlink: 'syz.2.84': attribute type 29 has an invalid length.
[   69.955204][ T6145] netlink: 60 bytes leftover after parsing attributes in process `syz.2.87'.
[   69.958809][ T6145] netlink: 60 bytes leftover after parsing attributes in process `syz.2.87'.
[   70.437816][ T6154] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.91'.
[   70.623922][ T6163] net_ratelimit: 77 callbacks suppressed
[   70.624799][ T6163] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   70.646283][ T6169] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   70.751570][ T6176] netlink: 60 bytes leftover after parsing attributes in process `syz.1.95'.
[   70.779533][ T6176] veth1_macvtap: left allmulticast mode
[   70.781600][ T6176] veth1_macvtap: left promiscuous mode
[   70.791813][ T6176] bridge0: port 3(macsec0) entered disabled state
[   70.808133][ T6176] macsec0 (unregistering): left allmulticast mode
[   70.817404][ T6176] macsec0 (unregistering): left promiscuous mode
[   70.820331][ T6176] bridge0: port 3(macsec0) entered disabled state
[   70.838833][ T6178] netlink: 60 bytes leftover after parsing attributes in process `syz.1.95'.
[   70.965161][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.968228][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.268817][ T6196] netlink: 168 bytes leftover after parsing attributes in process `syz.0.102'.
[   71.376650][ T6203] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.771307][ T6218] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.779712][ T6218] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.788461][ T6218] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[   71.871936][ T6220] netlink: 14380 bytes leftover after parsing attributes in process `syz.2.110'.
[   72.444989][ T6241] netlink: 60 bytes leftover after parsing attributes in process `syz.0.116'.
[   72.517651][ T6242] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.117'.
[   73.748807][ T6255] tap0: tun_chr_ioctl cmd 21731
[   77.146314][ T6279] __nla_validate_parse: 4 callbacks suppressed
[   77.146327][ T6279] netlink: 60 bytes leftover after parsing attributes in process `syz.0.127'.
[   77.152146][ T6279] netlink: 60 bytes leftover after parsing attributes in process `syz.0.127'.
[   77.155987][ T6279] netlink: 60 bytes leftover after parsing attributes in process `syz.0.127'.
[   77.234931][ T6281] validate_nla: 14 callbacks suppressed
[   77.234948][ T6281] netlink: 'syz.1.128': attribute type 29 has an invalid length.
[   77.316222][   T54] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30
[   77.372773][ T6281] netlink: 'syz.1.128': attribute type 29 has an invalid length.
[   77.418917][ T6281] syz.1.128 (6281) used greatest stack depth: 19720 bytes left
[   77.452534][ T6285] netlink: 60 bytes leftover after parsing attributes in process `syz.1.129'.
[   77.457726][ T6286] netlink: 60 bytes leftover after parsing attributes in process `syz.1.129'.
[   77.530451][ T6291] netlink: 'syz.1.130': attribute type 29 has an invalid length.
[   77.535716][ T6291] netlink: 'syz.1.130': attribute type 29 has an invalid length.
[   78.754838][ T6320] netlink: 'syz.0.138': attribute type 2 has an invalid length.
[   78.757620][ T6320] netlink: 51 bytes leftover after parsing attributes in process `syz.0.138'.
[   78.818334][ T6327] netlink: 'syz.1.140': attribute type 29 has an invalid length.
[   78.855503][ T6327] netlink: 'syz.1.140': attribute type 29 has an invalid length.
[   78.892658][ T6333] netlink: 'syz.1.143': attribute type 3 has an invalid length.
[   78.895693][ T6333] netlink: 'syz.1.143': attribute type 1 has an invalid length.
[   78.898284][ T6333] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.143'.
[   79.343415][   T54] Bluetooth: hci2: command tx timeout
[   79.487344][ T6336] netlink: 'syz.1.144': attribute type 29 has an invalid length.
[   79.878640][ T6338] syzkaller0: entered promiscuous mode
[   79.880766][ T6338] syzkaller0: entered allmulticast mode
[   80.032514][ T6355] netlink: 212424 bytes leftover after parsing attributes in process `syz.1.149'.
[   80.061135][ T6355] raw_sendmsg: syz.1.149 forgot to set AF_INET. Fix it!
[   80.739423][ T6359] netlink: 164 bytes leftover after parsing attributes in process `syz.1.150'.
[   81.018326][ T6379] netlink: 60 bytes leftover after parsing attributes in process `syz.2.157'.
[   81.184568][   T51] cfg80211: failed to load regulatory.db
[   82.417020][ T6428] validate_nla: 9 callbacks suppressed
[   82.417031][ T6428] netlink: 'syz.0.172': attribute type 21 has an invalid length.
[   82.422370][ T6428] netlink: 'syz.0.172': attribute type 5 has an invalid length.
[   82.427215][ T6428] __nla_validate_parse: 8 callbacks suppressed
[   82.427224][ T6428] netlink: 14 bytes leftover after parsing attributes in process `syz.0.172'.
[   82.741553][ T6440] netlink: 495 bytes leftover after parsing attributes in process `syz.2.176'.
[   82.750300][ T6439] netlink: 128 bytes leftover after parsing attributes in process `syz.2.176'.
[   82.758909][ T6439] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   82.789368][ T6439] netlink: 'syz.2.176': attribute type 4 has an invalid length.
[   83.330746][ T6454] netlink: 'syz.2.181': attribute type 21 has an invalid length.
[   83.366492][ T6454] netlink: 'syz.2.181': attribute type 29 has an invalid length.
[   83.385185][ T6454] netlink: 'syz.2.181': attribute type 29 has an invalid length.
[   83.436150][ T6459] netlink: 'syz.1.183': attribute type 21 has an invalid length.
[   83.592943][ T6463] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.184'.
[   83.636983][ T6467] netlink: 60 bytes leftover after parsing attributes in process `syz.2.186'.
[   83.642568][ T6467] netlink: 60 bytes leftover after parsing attributes in process `syz.2.186'.
[   83.728928][ T6474] netlink: 'syz.1.188': attribute type 21 has an invalid length.
[   83.917101][ T6485] netlink: 'syz.1.192': attribute type 29 has an invalid length.
[   83.920134][ T6485] netlink: 'syz.1.192': attribute type 29 has an invalid length.
[   83.991510][ T6489] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.194'.
[   83.997405][ T6489] netlink: 60 bytes leftover after parsing attributes in process `syz.2.194'.
[   84.002556][ T6489] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.194'.
[   84.008155][ T6489] netlink: 60 bytes leftover after parsing attributes in process `syz.2.194'.
[   84.171238][ T6490] : renamed from bond0 (while UP)
[   84.200507][ T6490] bridge0: port 4() entered disabled state
[   84.808952][ T6528] delete_channel: no stack
[   84.862500][ T6527] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   84.868208][ T6527] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   84.883596][ T6490] syz.1.193 (6490) used greatest stack depth: 19168 bytes left
[   85.542847][ T6545] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   86.025707][   T54] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[   86.286370][ T6567] geneve0: entered promiscuous mode
[   86.329073][ T6567] geneve0: entered allmulticast mode
[   86.338723][ T6567] : (slave geneve0): Enslaving as an active interface with an up link
[   87.457545][ T6617] __nla_validate_parse: 19 callbacks suppressed
[   87.457563][ T6617] netlink: 60 bytes leftover after parsing attributes in process `syz.0.240'.
[   87.466233][ T6617] validate_nla: 11 callbacks suppressed
[   87.466244][ T6617] netlink: 'syz.0.240': attribute type 10 has an invalid length.
[   87.475906][ T6617] netlink: 60 bytes leftover after parsing attributes in process `syz.0.240'.
[   87.617501][ T6625] delete_channel: no stack
[   87.619702][ T6625] delete_channel: no stack
[   87.646838][ T6624] netlink: 'syz.1.245': attribute type 29 has an invalid length.
[   87.651920][ T6624] netlink: 'syz.1.245': attribute type 29 has an invalid length.
[   88.064193][   T54] Bluetooth: hci1: command tx timeout
[   88.597405][ T6638] netlink: 60 bytes leftover after parsing attributes in process `syz.2.249'.
[   88.600903][ T6638] netlink: 'syz.2.249': attribute type 10 has an invalid length.
[   88.604887][ T6638] netlink: 60 bytes leftover after parsing attributes in process `syz.2.249'.
[   88.712177][ T6640] netlink: 'syz.2.250': attribute type 2 has an invalid length.
[   88.755102][ T6640] : renamed from vlan0 (while UP)
[   88.821371][ T6643] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   88.897708][ T6654] netlink: 'syz.2.253': attribute type 10 has an invalid length.
[   88.947492][ T6654] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.972168][ T6654] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   89.003640][ T6648] bond0: entered promiscuous mode
[   89.006017][ T6648] bond_slave_0: entered promiscuous mode
[   89.012850][ T6648] bond_slave_1: entered promiscuous mode
[   89.018190][ T6648] batadv_slave_0: entered promiscuous mode
[   89.020960][ T6648] batadv0: entered promiscuous mode
[   89.038179][ T6648] netlink: 'syz.2.253': attribute type 10 has an invalid length.
[   89.041675][ T6648] netlink: 40 bytes leftover after parsing attributes in process `syz.2.253'.
[   89.064651][ T6648] batadv0: entered allmulticast mode
[   89.072405][ T6648] bond0: (slave batadv0): Releasing backup interface
[   89.086776][ T6648] bridge0: port 3(batadv0) entered blocking state
[   89.089842][ T6648] bridge0: port 3(batadv0) entered disabled state
[   89.175699][   T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   89.179704][   T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   89.218194][ T6657] syzkaller0: entered promiscuous mode
[   89.220577][ T6657] syzkaller0: entered allmulticast mode
[   89.230399][ T6659] netlink: 60 bytes leftover after parsing attributes in process `syz.0.256'.
[   89.264457][ T6659] netlink: 'syz.0.256': attribute type 10 has an invalid length.
[   89.293488][ T6663] netlink: 132 bytes leftover after parsing attributes in process `syz.2.257'.
[   89.358157][   T54] Bluetooth: hci1: ISO packet for unknown connection handle 2366
[   90.094075][ T6664] netlink: 60 bytes leftover after parsing attributes in process `syz.0.256'.
[   90.196493][ T6669] netlink: 60 bytes leftover after parsing attributes in process `syz.1.258'.
[   90.200511][ T6668] netlink: 60 bytes leftover after parsing attributes in process `syz.1.258'.
[   90.670574][ T6684] @: renamed from veth0_vlan (while UP)
[   90.883129][ T6697] netlink: 'syz.1.268': attribute type 10 has an invalid length.
[   91.253042][   T54] Bluetooth: hci2: unexpected event 0x30 length: 15 > 3
[   91.318250][ T6717] net veth1_virt_wifi : renamed from virt_wifi0
[   91.362005][ T6719] netlink: 'syz.0.276': attribute type 10 has an invalid length.
[   92.240867][ T5829] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   92.416266][ T6753] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[   92.425802][ T6755] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   93.162480][ T6770] validate_nla: 5 callbacks suppressed
[   93.162492][ T6770] netlink: 'syz.2.291': attribute type 21 has an invalid length.
[   93.176052][ T6770] __nla_validate_parse: 47 callbacks suppressed
[   93.176063][ T6770] netlink: 128 bytes leftover after parsing attributes in process `syz.2.291'.
[   93.181294][ T6770] netlink: 3 bytes leftover after parsing attributes in process `syz.2.291'.
[   93.190936][ T6770] netlink: 67 bytes leftover after parsing attributes in process `syz.2.291'.
[   93.196364][ T6772] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.243761][ T6775] netlink: 60 bytes leftover after parsing attributes in process `syz.1.293'.
[   93.255477][ T6775] netlink: 'syz.1.293': attribute type 10 has an invalid length.
[   93.263601][ T6775] netlink: 60 bytes leftover after parsing attributes in process `syz.1.293'.
[   93.291703][ T6779] netlink: 60 bytes leftover after parsing attributes in process `syz.0.294'.
[   93.299119][ T6779] netlink: 60 bytes leftover after parsing attributes in process `syz.0.294'.
[   93.344058][ T6783] : port 1(veth0_to_bridge) entered blocking state
[   93.346687][ T6783] : port 1(veth0_to_bridge) entered disabled state
[   93.351450][ T6783] veth0_to_bridge: entered allmulticast mode
[   93.365703][ T6783] veth0_to_bridge: entered promiscuous mode
[   93.378322][ T6783] : port 2(erspan0) entered blocking state
[   93.380449][ T6783] : port 2(erspan0) entered disabled state
[   93.382690][ T6783] erspan0: entered allmulticast mode
[   93.389837][ T6783] erspan0: entered promiscuous mode
[   94.104861][ T6802] netlink: 60 bytes leftover after parsing attributes in process `syz.0.304'.
[   94.109630][ T6802] netlink: 'syz.0.304': attribute type 10 has an invalid length.
[   94.115864][ T6802] netlink: 60 bytes leftover after parsing attributes in process `syz.0.304'.
[   94.478353][ T6819] netlink: 60 bytes leftover after parsing attributes in process `syz.1.310'.
[   94.543882][ T6823] netlink: 'syz.1.312': attribute type 29 has an invalid length.
[   94.552417][ T6823] netlink: 'syz.1.312': attribute type 29 has an invalid length.
[   94.593176][ T6826] netlink: 'syz.2.313': attribute type 4 has an invalid length.
[   94.607942][ T6826] .`: renamed from bond0
[   94.913805][ T6853] netlink: 'syz.2.321': attribute type 4 has an invalid length.
[   94.961635][ T6860] netlink: 'syz.2.323': attribute type 10 has an invalid length.
[   95.019204][ T6857] syzkaller0: entered promiscuous mode
[   95.021126][ T6857] syzkaller0: entered allmulticast mode
[   95.022654][ T6864] syz.2.324 uses obsolete (PF_INET,SOCK_PACKET)
[   95.354903][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[   96.000322][ T6888] netlink: 'syz.0.330': attribute type 4 has an invalid length.
[   96.009116][ T6888] .`: renamed from bond0
[   96.710726][ T6903] netlink: 'syz.0.335': attribute type 29 has an invalid length.
[   97.044857][ T6922] cgroup: fork rejected by pids controller in /syz2
[   97.097044][ T6925] team0: Port device wlan1 added
[   97.131551][ T6922] syzkaller0: entered promiscuous mode
[   97.136988][ T6922] syzkaller0: entered allmulticast mode
[   98.438242][ T7045] __nla_validate_parse: 16 callbacks suppressed
[   98.438256][ T7045] netlink: 60 bytes leftover after parsing attributes in process `syz.1.351'.
[   98.445268][ T7045] validate_nla: 5 callbacks suppressed
[   98.445278][ T7045] netlink: 'syz.1.351': attribute type 10 has an invalid length.
[   98.450173][ T7045] netlink: 60 bytes leftover after parsing attributes in process `syz.1.351'.
[   98.529583][ T7053] openvswitch: netlink: Flow key attr not present in new flow.
[   98.722562][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.790018][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.853158][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.947497][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.987864][ T7074] netlink: 'syz.0.361': attribute type 21 has an invalid length.
[   98.990783][ T7074] netlink: 132 bytes leftover after parsing attributes in process `syz.0.361'.
[   99.032840][ T7076] netlink: 'syz.0.362': attribute type 3 has an invalid length.
[   99.035824][ T7076] netlink: 'syz.0.362': attribute type 4 has an invalid length.
[   99.038583][ T7076] netlink: 9067 bytes leftover after parsing attributes in process `syz.0.362'.
[   99.114017][   T12] bridge0: port 3(batadv0) entered disabled state
[   99.128209][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   99.133047][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   99.136594][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   99.139758][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   99.144588][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   99.159836][   T12] bridge_slave_1: left allmulticast mode
[   99.162482][   T12] bridge_slave_1: left promiscuous mode
[   99.165249][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.171893][   T12] bridge_slave_0: left allmulticast mode
[   99.175861][   T12] bridge_slave_0: left promiscuous mode
[   99.178123][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.186119][   T12] erspan0: left allmulticast mode
[   99.194311][   T12] erspan0: left promiscuous mode
[   99.196245][   T12] : port 2(erspan0) entered disabled state
[   99.491399][   T12] veth0_to_bridge: left allmulticast mode
[   99.501710][   T12] veth0_to_bridge: left promiscuous mode
[   99.532876][   T12] : port 1(veth0_to_bridge) entered disabled state
[   99.865789][   T12] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[   99.869539][   T12] bond_slave_0: left promiscuous mode
[   99.872699][   T12] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[   99.876845][   T12] bond_slave_1: left promiscuous mode
[   99.880577][   T12] .` (unregistering): (slave batadv_slave_0): Releasing backup interface
[   99.884963][   T12] batadv_slave_0: left promiscuous mode
[   99.888858][   T12] .` (unregistering): Released all slaves
[   99.919290][ T7083] netlink: 'syz.0.363': attribute type 29 has an invalid length.
[   99.981301][ T7091] netlink: 'syz.0.363': attribute type 29 has an invalid length.
[  100.269144][   T12] hsr_slave_0: left promiscuous mode
[  100.272203][   T12] hsr_slave_1: left promiscuous mode
[  100.275575][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.278009][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  100.294075][   T12] veth0_macvtap: left promiscuous mode
[  100.296329][   T12] veth1_vlan: left promiscuous mode
[  100.298276][   T12] veth0_vlan: left promiscuous mode
[  100.825905][   T12] team0 (unregistering): Port device team_slave_1 removed
[  100.860860][   T12] team0 (unregistering): Port device team_slave_0 removed
[  101.193613][   T54] Bluetooth: hci1: command tx timeout
[  101.217294][ T7082] chnl_net:caif_netlink_parms(): no params data found
[  101.361736][ T7082] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.373526][ T7082] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.376352][ T7082] bridge_slave_0: entered allmulticast mode
[  101.448108][ T7082] bridge_slave_0: entered promiscuous mode
[  101.464581][ T7082] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.467378][ T7082] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.469880][ T7082] bridge_slave_1: entered allmulticast mode
[  101.478362][ T7082] bridge_slave_1: entered promiscuous mode
[  101.535003][ T7082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  101.560894][ T7082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  101.619843][ T7144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.372'.
[  101.678187][ T7082] team0: Port device team_slave_0 added
[  101.719630][ T7082] team0: Port device team_slave_1 added
[  101.961047][ T7082] batman_adv: batadv0: Adding interface: batadv_slave_0
[  101.964218][ T7082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.982715][ T7082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  101.992981][ T7082] batman_adv: batadv0: Adding interface: batadv_slave_1
[  102.008856][ T7082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.022173][ T7082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  102.062283][ T7155] netlink: 'syz.0.374': attribute type 4 has an invalid length.
[  102.065676][ T7155] netlink: 152 bytes leftover after parsing attributes in process `syz.0.374'.
[  102.311344][ T7082] hsr_slave_0: entered promiscuous mode
[  102.322894][ T7082] hsr_slave_1: entered promiscuous mode
[  102.332299][ T7082] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  102.336723][ T7082] Cannot create hsr debugfs directory
[  102.667783][ T7167] Q6\bY4: renamed from lo (while UP)
[  102.927451][ T7177] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.380'.
[  103.267297][   T54] Bluetooth: hci1: command tx timeout
[  103.278885][ T7201] netlink: 17 bytes leftover after parsing attributes in process `syz.0.385'.
[  103.282980][ T7201] netlink: zone id is out of range
[  103.295802][ T7201] netlink: zone id is out of range
[  103.299199][ T7201] netlink: zone id is out of range
[  103.301534][ T7201] netlink: zone id is out of range
[  103.304530][ T7201] netlink: zone id is out of range
[  103.307223][ T7201] netlink: zone id is out of range
[  103.309736][ T7201] netlink: zone id is out of range
[  103.312222][ T7201] netlink: zone id is out of range
[  103.317695][ T7201] netlink: zone id is out of range
[  103.520140][ T7082] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  103.531629][ T7082] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  103.544170][ T7082] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  103.555620][ T7082] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  103.666357][ T7082] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.695960][ T7082] 8021q: adding VLAN 0 to HW filter on device team0
[  103.707365][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.709812][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.730874][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.733725][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  103.887558][ T7082] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.907925][ T7231] netlink: 60 bytes leftover after parsing attributes in process `syz.0.388'.
[  103.912653][ T7231] netlink: 'syz.0.388': attribute type 10 has an invalid length.
[  103.920888][ T7231] netlink: 60 bytes leftover after parsing attributes in process `syz.0.388'.
[  103.974769][ T7082] veth0_vlan: entered promiscuous mode
[  104.006925][ T7082] veth1_vlan: entered promiscuous mode
[  104.101626][ T7082] veth0_macvtap: entered promiscuous mode
[  104.127806][ T7082] veth1_macvtap: entered promiscuous mode
[  104.168935][ T7082] batman_adv: batadv0: Interface activated: batadv_slave_0
[  104.202596][ T7082] batman_adv: batadv0: Interface activated: batadv_slave_1
[  104.237975][ T7082] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  104.255500][ T7082] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  104.259636][ T7082] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.269755][ T7082] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.446485][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.450074][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.525049][ T3721] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.528773][ T3721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.766512][ T7279] netlink: 60 bytes leftover after parsing attributes in process `syz.2.396'.
[  104.775631][ T7279] netlink: 'syz.2.396': attribute type 10 has an invalid length.
[  104.783007][ T7279] veth1_macvtap: left promiscuous mode
[  104.813590][ T7275] netlink: 'syz.1.395': attribute type 22 has an invalid length.
[  104.820643][ T7275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.395'.
[  104.840792][ T7281] netlink: 60 bytes leftover after parsing attributes in process `syz.2.396'.
[  104.930247][ T7289] netlink: 'syz.0.398': attribute type 4 has an invalid length.
[  104.938282][ T7289] netlink: 152 bytes leftover after parsing attributes in process `syz.0.398'.
[  104.998704][ T7294] netlink: 'syz.0.400': attribute type 29 has an invalid length.
[  105.084788][ T7298] netlink: 132 bytes leftover after parsing attributes in process `syz.0.402'.
[  105.362998][   T54] Bluetooth: hci1: command tx timeout
[  105.517013][ T7315] netlink: 'syz.0.407': attribute type 4 has an invalid length.
[  105.520392][ T7315] netlink: 152 bytes leftover after parsing attributes in process `syz.0.407'.
[  107.430167][   T54] Bluetooth: hci1: command tx timeout
[  108.222975][ T7342] netlink: 60 bytes leftover after parsing attributes in process `syz.2.415'.
[  108.229279][ T7342] netlink: 60 bytes leftover after parsing attributes in process `syz.2.415'.
[  112.159779][ T7380] netlink: 'syz.0.428': attribute type 10 has an invalid length.
[  112.162481][ T7380] team0: Device ip6_vti0 is of different type
[  112.437490][ T7392] netlink: 'syz.2.432': attribute type 29 has an invalid length.
[  112.446628][ T7392] netlink: 'syz.2.432': attribute type 29 has an invalid length.
[  112.546342][ T7398] net_ratelimit: 76 callbacks suppressed
[  112.546356][ T7398] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  112.550944][ T7398] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  112.561301][ T7399] __nla_validate_parse: 1 callbacks suppressed
[  112.561316][ T7399] netlink: 10 bytes leftover after parsing attributes in process `syz.2.433'.
[  112.691375][ T7403] netlink: 'syz.0.436': attribute type 29 has an invalid length.
[  112.695021][ T7403] netlink: 'syz.0.436': attribute type 29 has an invalid length.
[  112.927959][ T7416] netlink: 'syz.0.440': attribute type 29 has an invalid length.
[  112.932690][ T7416] netlink: 'syz.0.440': attribute type 29 has an invalid length.
[  113.149170][ T7423] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.443'.
[  114.242708][ T7440] netlink: 'syz.1.447': attribute type 33 has an invalid length.
[  114.245744][ T7440] netlink: 152 bytes leftover after parsing attributes in process `syz.1.447'.
[  114.250617][ T7440] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  114.342689][ T7442] netlink: 'syz.0.448': attribute type 29 has an invalid length.
[  114.347998][ T7442] netlink: 'syz.0.448': attribute type 29 has an invalid length.
[  114.358164][ T7444] netlink: 495 bytes leftover after parsing attributes in process `syz.1.449'.
[  115.299055][ T7450] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.450'.
[  115.302859][ T7457] macvlan0: entered promiscuous mode
[  115.312774][ T7457] macvlan0: entered allmulticast mode
[  115.315230][ T7457] veth1_vlan: entered allmulticast mode
[  115.452965][ T7467] netlink: 60 bytes leftover after parsing attributes in process `syz.1.455'.
[  115.458719][ T7467] netlink: 60 bytes leftover after parsing attributes in process `syz.1.455'.
[  115.463037][ T7467] netlink: 60 bytes leftover after parsing attributes in process `syz.1.455'.
[  116.506688][ T7506] netlink: 5886 bytes leftover after parsing attributes in process `syz.1.467'.
[  116.922422][ T7523] netlink: 132 bytes leftover after parsing attributes in process `syz.1.471'.
[  117.390943][ T7546] validate_nla: 9 callbacks suppressed
[  117.390957][ T7546] netlink: 'syz.2.479': attribute type 21 has an invalid length.
[  117.497659][ T7552] netlink: 'syz.1.482': attribute type 29 has an invalid length.
[  117.501122][ T7552] netlink: 'syz.1.482': attribute type 29 has an invalid length.
[  117.878076][   T54] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10
[  117.878099][   T54] Bluetooth: unknown link type 128
[  117.898633][ T7562] __nla_validate_parse: 1 callbacks suppressed
[  117.898644][ T7562] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.485'.
[  117.919091][ T7561] netlink: 132 bytes leftover after parsing attributes in process `syz.2.484'.
[  118.320169][ T7569] netlink: 10 bytes leftover after parsing attributes in process `syz.2.488'.
[  118.405356][ T7571] netlink: 'syz.0.489': attribute type 29 has an invalid length.
[  118.410766][ T7571] netlink: 'syz.0.489': attribute type 29 has an invalid length.
[  118.499672][ T7577] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.491'.
[  118.504184][ T7577] netlink: 5 bytes leftover after parsing attributes in process `syz.2.491'.
[  118.622335][ T7585] netlink: 'syz.1.494': attribute type 29 has an invalid length.
[  118.797640][ T7595] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  118.809870][ T7595] netlink: 'syz.1.496': attribute type 2 has an invalid length.
[  119.643986][   T54] Bluetooth: hci0: unexpected event 0x30 length: 15 > 3
[  119.687454][ T7612] netlink: 'syz.2.503': attribute type 2 has an invalid length.
[  119.706597][ T7612] netlink: 'syz.2.503': attribute type 3 has an invalid length.
[  119.709218][ T7612] netlink: 132 bytes leftover after parsing attributes in process `syz.2.503'.
[  119.903628][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  119.938989][   T54] Bluetooth: hci2: unexpected event 0x30 length: 15 > 3
[  119.999086][ T7631] netlink: 'syz.2.511': attribute type 10 has an invalid length.
[  120.070202][ T7631] team0: Port device geneve1 added
[  120.097652][ T7631] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.511'.
[  120.101857][ T7631] syz.2.511 (7631) used greatest stack depth: 17192 bytes left
[  120.300691][ T7647] netlink: 55 bytes leftover after parsing attributes in process `syz.0.517'.
[  120.343871][   T54] Bluetooth: hci1: ISO packet for unknown connection handle 5
[  120.616106][   T54] Bluetooth: hci1: unexpected event 0x30 length: 15 > 3
[  120.952582][   T54] Bluetooth: hci2: unexpected event 0x30 length: 15 > 3
[  121.314494][ T7695] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.534'.
[  121.439874][ T7703] netlink: 132 bytes leftover after parsing attributes in process `syz.1.536'.
[  121.704562][ T7719] : (slave bond_slave_0): Releasing backup interface
[  121.708186][ T7719] bond_slave_0: left promiscuous mode
[  121.710845][ T7719] bond_slave_0: left allmulticast mode
[  122.177226][   T54] Bluetooth: hci0: unexpected event 0x30 length: 15 > 3
[  122.282334][ T7747] ɺ^.: renamed from hsr0 (while UP)
[  122.469164][ T7757] mac80211_hwsim hwsim7 O3c: renamed from wlan1 (while UP)
[  122.615898][ T7759] validate_nla: 7 callbacks suppressed
[  122.615914][ T7759] netlink: 'syz.0.555': attribute type 4 has an invalid length.
[  124.179984][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1294779720 wd_nsec: 1294779554
[  124.544591][   T54] Bluetooth: hci0: unexpected event 0x30 length: 15 > 3
[  125.474939][ T7789] netlink: 'syz.1.567': attribute type 6 has an invalid length.
[  125.479758][ T7789] __nla_validate_parse: 1 callbacks suppressed
[  125.479765][ T7789] netlink: 140 bytes leftover after parsing attributes in process `syz.1.567'.
[  125.502590][ T7793] netlink: 'syz.0.568': attribute type 21 has an invalid length.
[  125.506377][ T7793] netlink: 156 bytes leftover after parsing attributes in process `syz.0.568'.
[  125.511847][ T7795] netlink: 'syz.0.568': attribute type 21 has an invalid length.
[  125.514862][ T7795] netlink: 156 bytes leftover after parsing attributes in process `syz.0.568'.
[  125.610466][   T54] Bluetooth: hci1: unexpected event 0x30 length: 15 > 3
[  125.634982][ T7805] netlink: 'syz.0.569': attribute type 1 has an invalid length.
[  125.639699][ T7805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.569'.
[  126.624516][ T7814] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.574'.
[  126.649931][ T7816] netlink: 'syz.0.576': attribute type 6 has an invalid length.
[  126.653184][ T7816] netlink: 168 bytes leftover after parsing attributes in process `syz.0.576'.
[  126.755160][ T7818] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.577'.
[  126.892738][   T54] Bluetooth: hci1: unexpected event 0x30 length: 15 > 3
[  127.062569][ T7833] syzkaller0: entered promiscuous mode
[  127.068309][ T7833] syzkaller0: entered allmulticast mode
[  127.217082][   T54] Bluetooth: hci1: unexpected event 0x30 length: 15 > 3
[  128.267090][   T54] Bluetooth: hci0: unexpected event 0x30 length: 15 > 3
[  128.796914][ T7878] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.600'.
[  129.248425][   T54] Bluetooth: hci0: unexpected event 0x30 length: 15 > 3
[  129.725291][ T7904] netlink: 'syz.0.609': attribute type 10 has an invalid length.
[  129.772065][ T7902] syzkaller0: entered promiscuous mode
[  129.774587][ T7902] syzkaller0: entered allmulticast mode
[  129.781147][ T7901] delete_channel: no stack
[  129.924722][   T54] Bluetooth: hci2: unexpected event 0x30 length: 15 > 3
[  130.242827][ T7926] netlink: 'syz.2.613': attribute type 21 has an invalid length.
[  130.249904][ T7926] netlink: 'syz.2.613': attribute type 15 has an invalid length.
[  130.252865][ T7926] netlink: 156 bytes leftover after parsing attributes in process `syz.2.613'.
[  130.256910][ T7926] IPv6: NLM_F_CREATE should be specified when creating new route
[  130.260653][ T7926] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  130.266184][ T7926] IPv6: NLM_F_CREATE should be set when creating new route
[  130.269139][ T7926] IPv6: NLM_F_CREATE should be set when creating new route
[  130.272063][ T7926] IPv6: NLM_F_CREATE should be set when creating new route
[  130.576672][ T7916] syzkaller0: entered promiscuous mode
[  130.579401][ T7916] syzkaller0: entered allmulticast mode
[  130.748896][ T7936] netlink: 60 bytes leftover after parsing attributes in process `syz.0.617'.
[  130.754940][ T7934] netlink: 60 bytes leftover after parsing attributes in process `syz.0.617'.
[  130.758304][ T7936] netlink: 60 bytes leftover after parsing attributes in process `syz.0.617'.
[  130.810623][ T7940] IPv6: NLM_F_REPLACE set, but no existing node found!
[  130.899233][   T54] Bluetooth: hci0: unexpected event 0x30 length: 15 > 3
[  130.935594][ T7948] netlink: 'syz.0.622': attribute type 29 has an invalid length.
[  130.942566][ T7948] netlink: 'syz.0.622': attribute type 29 has an invalid length.
[  131.307097][ T7959] netlink: 176 bytes leftover after parsing attributes in process `syz.0.627'.
[  131.391102][ T7962] @: renamed from bond_slave_0
[  131.505808][ T7966] netlink: 'syz.0.629': attribute type 29 has an invalid length.
[  131.512833][ T7966] netlink: 'syz.0.629': attribute type 29 has an invalid length.
[  131.555888][   T54] Bluetooth: hci2: unexpected event 0x30 length: 15 > 3
[  131.573879][ T7972] netlink: 'syz.1.631': attribute type 29 has an invalid length.
[  131.579654][ T7972] netlink: 'syz.1.631': attribute type 29 has an invalid length.
[  131.582785][ T7972] netlink: 'syz.1.631': attribute type 29 has an invalid length.
[  131.594571][ T7972] warn_alloc: 1 callbacks suppressed
[  131.594582][ T7972] syz.1.631: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  131.601220][ T7972] CPU: 0 UID: 0 PID: 7972 Comm: syz.1.631 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  131.601232][ T7972] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  131.601238][ T7972] Call Trace:
[  131.601242][ T7972]  <TASK>
[  131.601247][ T7972]  dump_stack_lvl+0x189/0x250
[  131.601262][ T7972]  ? __pfx_dump_stack_lvl+0x10/0x10
[  131.601271][ T7972]  ? __pfx__printk+0x10/0x10
[  131.601284][ T7972]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  131.601300][ T7972]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  131.601310][ T7972]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  131.601321][ T7972]  warn_alloc+0x214/0x310
[  131.601332][ T7972]  ? stack_depot_save_flags+0x40/0x900
[  131.601365][ T7972]  ? __pfx_warn_alloc+0x10/0x10
[  131.601375][ T7972]  ? kasan_save_track+0x4f/0x80
[  131.601383][ T7972]  ? xskq_create+0x56/0x170
[  131.601393][ T7972]  ? xsk_init_queue+0xb0/0x110
[  131.601401][ T7972]  ? xsk_setsockopt+0x4de/0x710
[  131.601409][ T7972]  ? do_sock_setsockopt+0x17c/0x1b0
[  131.601418][ T7972]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  131.601425][ T7972]  ? do_syscall_64+0xfa/0x3b0
[  131.601437][ T7972]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.601449][ T7972]  __vmalloc_node_range_noprof+0x125/0x12f0
[  131.601470][ T7972]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  131.601480][ T7972]  ? __kasan_kmalloc+0x93/0xb0
[  131.601489][ T7972]  vmalloc_user_noprof+0xad/0xf0
[  131.601499][ T7972]  ? xskq_create+0xbf/0x170
[  131.601508][ T7972]  xskq_create+0xbf/0x170
[  131.601519][ T7972]  xsk_init_queue+0xb0/0x110
[  131.601529][ T7972]  xsk_setsockopt+0x4de/0x710
[  131.601538][ T7972]  ? __pfx_xsk_setsockopt+0x10/0x10
[  131.601547][ T7972]  ? __fget_files+0x2a/0x420
[  131.601555][ T7972]  ? aa_sock_opt_perm+0x74/0x110
[  131.601566][ T7972]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  131.601576][ T7972]  ? __pfx_xsk_setsockopt+0x10/0x10
[  131.601584][ T7972]  do_sock_setsockopt+0x17c/0x1b0
[  131.601594][ T7972]  __x64_sys_setsockopt+0x13f/0x1b0
[  131.601603][ T7972]  do_syscall_64+0xfa/0x3b0
[  131.601613][ T7972]  ? lockdep_hardirqs_on+0x9c/0x150
[  131.601621][ T7972]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.601628][ T7972]  ? exc_page_fault+0x9f/0xf0
[  131.601637][ T7972]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.601644][ T7972] RIP: 0033:0x7f2740f8e9a9
[  131.601652][ T7972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  131.601658][ T7972] RSP: 002b:00007f2741e76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  131.601667][ T7972] RAX: ffffffffffffffda RBX: 00007f27411b5fa0 RCX: 00007f2740f8e9a9
[  131.601672][ T7972] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005
[  131.601676][ T7972] RBP: 00007f2741010d69 R08: 0000000000000004 R09: 0000000000000000
[  131.601680][ T7972] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  131.601685][ T7972] R13: 0000000000000000 R14: 00007f27411b5fa0 R15: 00007ffc24e30848
[  131.601696][ T7972]  </TASK>
[  131.601699][ T7972] Mem-Info:
[  131.711163][ T7972] active_anon:7022 inactive_anon:0 isolated_anon:0
[  131.711163][ T7972]  active_file:15164 inactive_file:38239 isolated_file:0
[  131.711163][ T7972]  unevictable:1768 dirty:141 writeback:0
[  131.711163][ T7972]  slab_reclaimable:9254 slab_unreclaimable:52788
[  131.711163][ T7972]  mapped:18301 shmem:2454 pagetables:1086
[  131.711163][ T7972]  sec_pagetables:0 bounce:0
[  131.711163][ T7972]  kernel_misc_reclaimable:0
[  131.711163][ T7972]  free:286810 free_pcp:19728 free_cma:0
[  131.737328][ T7972] Node 0 active_anon:16696kB inactive_anon:0kB active_file:18700kB inactive_file:139284kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:52012kB dirty:236kB writeback:0kB shmem:5036kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6832kB pagetables:2760kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  131.775272][ T7972] Node 1 active_anon:11256kB inactive_anon:0kB active_file:41956kB inactive_file:13672kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:21192kB dirty:328kB writeback:0kB shmem:4780kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4648kB pagetables:1380kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  131.791033][ T7972] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  131.800913][ T7972] lowmem_reserve[]: 0 812 812 812 812
[  131.807734][ T7972] Node 0 DMA32 free:232688kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16424kB inactive_anon:0kB active_file:18700kB inactive_file:139284kB unevictable:3536kB writepending:236kB present:1556484kB managed:831912kB mlocked:0kB bounce:0kB free_pcp:33824kB local_pcp:19764kB free_cma:0kB
[  131.818842][ T7972] lowmem_reserve[]: 0 0 0 0 0
[  131.820438][ T7972] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  131.869788][ T7972] lowmem_reserve[]: 0 0 854 854 854
[  131.872192][ T7972] Node 1 Normal free:440428kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11256kB inactive_anon:0kB active_file:41956kB inactive_file:13672kB unevictable:3536kB writepending:328kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:45832kB local_pcp:23744kB free_cma:0kB
[  131.897825][ T7972] lowmem_reserve[]: 0 0 0 0 0
[  131.900451][ T7972] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  131.906161][ T7972] Node 0 DMA32: 1718*4kB (M) 415*8kB (UME) 224*16kB (UME) 138*32kB (UME) 72*64kB (UME) 38*128kB (UM) 14*256kB (UME) 39*512kB (UM) 34*1024kB (UM) 8*2048kB (UM) 31*4096kB (UM) = 229392kB
[  131.923511][ T7972] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  131.943420][ T7972] Node 1 Normal: 1057*4kB (UME) 771*8kB (UME) 1011*16kB (UM) 625*32kB (UME) 256*64kB (UME) 59*128kB (UM) 37*256kB (UME) 16*512kB (UME) 16*1024kB (UE) 8*2048kB (UM) 78*4096kB (UM) = 440428kB
[  131.949577][ T7972] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  131.952671][ T7972] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  131.956655][ T7972] 55857 total pagecache pages
[  131.958262][ T7972] 0 pages in swap cache
[  131.959867][ T7972] Free swap  = 124996kB
[  131.961376][ T7972] Total swap = 124996kB
[  131.962886][ T7972] 786301 pages RAM
[  131.964804][ T7972] 0 pages HighMem/MovableOnly
[  131.966439][ T7972] 241075 pages reserved
[  131.968074][ T7972] 0 pages cma reserved
[  132.070776][   T54] Bluetooth: hci0: unexpected event 0x30 length: 15 > 3
[  132.388241][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.395568][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  133.482132][   T54] Bluetooth: hci0: unexpected event 0x30 length: 15 > 3
[  133.513642][ T8020] netlink: 132 bytes leftover after parsing attributes in process `syz.0.649'.
[  133.604707][ T8025] netlink: 40 bytes leftover after parsing attributes in process `syz.1.651'.
[  133.609523][ T8026] netlink: 40 bytes leftover after parsing attributes in process `syz.1.651'.
[  133.935535][   T54] Bluetooth: hci1: unexpected event 0x30 length: 15 > 3
[  134.468634][   T54] Bluetooth: hci2: unexpected event 0x30 length: 15 > 3
[  134.816125][   T54] Bluetooth: hci2: ISO packet for unknown connection handle 2622
[  134.932619][ T8071] syzkaller0: entered promiscuous mode
[  135.087911][   T54] Bluetooth: hci1: unexpected event 0x30 length: 15 > 3
[  135.389671][ T8091] netlink: 10 bytes leftover after parsing attributes in process `syz.1.678'.
[  135.565423][ T8099] validate_nla: 9 callbacks suppressed
[  135.565433][ T8099] netlink: 'syz.0.682': attribute type 29 has an invalid length.
[  135.570584][ T8099] netlink: 'syz.0.682': attribute type 29 has an invalid length.
[  135.614025][ T8100] netlink: 'syz.2.679': attribute type 29 has an invalid length.
[  135.617517][ T8100] netlink: 'syz.2.679': attribute type 29 has an invalid length.
[  135.617678][   T54] Bluetooth: hci0: unexpected event 0x30 length: 15 > 3
[  135.726203][ T8114] netlink: 132 bytes leftover after parsing attributes in process `syz.2.687'.
[  135.733679][ T8113] netlink: 'syz.1.686': attribute type 10 has an invalid length.
[  135.738494][ T8114] netlink: 'syz.2.687': attribute type 29 has an invalid length.
[  135.742398][ T8114] netlink: 'syz.2.687': attribute type 29 has an invalid length.
[  135.746621][ T8114] netlink: 'syz.2.687': attribute type 29 has an invalid length.
[  135.840106][ T8122] netlink: 'syz.1.690': attribute type 29 has an invalid length.
[  135.844308][ T8122] netlink: 'syz.1.690': attribute type 29 has an invalid length.
[  135.909386][ T5835] Bluetooth: hci0: unexpected event 0x30 length: 15 > 3
[  136.144096][ T8135] netlink: 172 bytes leftover after parsing attributes in process `syz.1.693'.
[  136.266528][ T8139] netlink: 22 bytes leftover after parsing attributes in process `syz.1.695'.
[  136.374902][ T8154] netlink: 24032 bytes leftover after parsing attributes in process `syz.0.701'.
[  136.378318][ T8154] netlink: 104088 bytes leftover after parsing attributes in process `syz.0.701'.
[  136.393513][ T8154] netlink: 24032 bytes leftover after parsing attributes in process `syz.0.701'.
[  136.472262][ T8161] netlink: 55 bytes leftover after parsing attributes in process `syz.2.702'.
[  136.791415][ T8171] can: request_module (can-proto-5) failed.
[  136.825276][ T8174] netlink: 166 bytes leftover after parsing attributes in process `syz.1.706'.
[  136.830598][ T8174] netlink: 40 bytes leftover after parsing attributes in process `syz.1.706'.
[  136.842252][ T8174] ipvlan1: entered promiscuous mode
[  136.844914][ T8174] ipvlan1: entered allmulticast mode
[  136.847290][ T8174] veth0_vlan: entered allmulticast mode
[  136.852772][ T8174] bridge0: port 3(ipvlan1) entered blocking state
[  136.864847][ T8174] bridge0: port 3(ipvlan1) entered disabled state
[  136.870114][ T8174] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  137.135421][ T8195] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.713'.
[  137.432850][ T5835] Bluetooth: hci0: Malformed LE Event: 0x0d
[  153.213505][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  153.217030][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  153.219771][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  153.222861][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  153.226718][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  153.471466][ T5220] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  153.476061][ T5220] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  153.478945][ T5220] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  153.482067][ T5220] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  153.485548][ T5220] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  153.510619][ T5220] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  153.515253][ T5220] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  153.517963][ T5220] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  153.521061][ T5220] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  153.523998][ T5220] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  155.263456][ T5220] Bluetooth: hci3: command tx timeout
[  155.503437][ T5220] Bluetooth: hci5: command tx timeout
[  155.583499][ T5220] Bluetooth: hci4: command tx timeout
[  157.343834][ T5220] Bluetooth: hci3: command tx timeout
[  157.583491][ T5220] Bluetooth: hci5: command tx timeout
[  157.663513][ T5220] Bluetooth: hci4: command tx timeout
[  159.423638][ T5220] Bluetooth: hci3: command tx timeout
[  159.667169][ T5220] Bluetooth: hci5: command tx timeout
[  159.743568][ T5220] Bluetooth: hci4: command tx timeout
[  161.503647][ T5220] Bluetooth: hci3: command tx timeout
[  161.747117][ T5220] Bluetooth: hci5: command tx timeout
[  161.823919][ T5220] Bluetooth: hci4: command tx timeout
[  180.547291][ T5220] Bluetooth: hci0: command 0x0406 tx timeout
[  193.829945][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  193.832751][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  214.094533][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 76400989975 wd_nsec: 76400992057
[  214.144859][ T5832] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  214.145598][ T5832] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  214.145910][ T5832] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  214.146435][ T5832] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  214.147053][ T5832] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  214.176937][   T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  214.178299][   T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  214.178746][   T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  214.179252][   T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  214.179585][   T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  221.506879][ T8240] Bluetooth: hci1: command 0x0406 tx timeout
[  243.083282][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  243.083298][    C1] rcu: 	1-....: (10494 ticks this GP) idle=c284/1/0x4000000000000000 softirq=28505/28506 fqs=5247
[  243.083660][    C1] rcu: 	         hardirqs   softirqs   csw/system
[  243.083666][    C1] rcu: 	 number:   955796          2            0
[  243.083674][    C1] rcu: 	cputime:    24397      28092          122   ==> 52490(ms)
[  243.083680][    C1] rcu: 	(t=10500 jiffies g=19541 q=7580 ncpus=2)
[  243.083690][    C1] CPU: 1 UID: 0 PID: 8215 Comm: syz.2.720 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  243.083698][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  243.083703][    C1] RIP: 0010:console_flush_all+0x7f7/0xc40
[  243.083717][    C1] Code: 48 21 c3 0f 85 e9 01 00 00 e8 75 e7 1e 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 66 e7 1e 00 eb 06 e8 5f e7 1e 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 8a 0a 82 00 48 8b 1b 48 8b 44 24
[  243.083723][    C1] RSP: 0018:ffffc900001e0620 EFLAGS: 00000246
[  243.083729][    C1] RAX: 1ffffffff1d36927 RBX: ffffffff8e9b4938 RCX: ffff88810f891cc0
[  243.083734][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  243.083738][    C1] RBP: ffffc900001e0770 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  243.083743][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: dffffc0000000000
[  243.083747][    C1] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8e9b48e0
[  243.083751][    C1] FS:  00007f177f3b46c0(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
[  243.083756][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  243.083761][    C1] CR2: 00007f177f393d58 CR3: 0000000119f72000 CR4: 00000000000006f0
[  243.083792][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  243.083797][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  243.083801][    C1] Call Trace:
[  243.083804][    C1]  <IRQ>
[  243.083809][    C1]  ? console_flush_all+0x13a/0xc40
[  243.083822][    C1]  ? __pfx_console_flush_all+0x10/0x10
[  243.083835][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  243.083846][    C1]  console_unlock+0xc4/0x270
[  243.083855][    C1]  ? __pfx_console_unlock+0x10/0x10
[  243.083865][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  243.083875][    C1]  vprintk_emit+0x5b7/0x7a0
[  243.083884][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  243.083891][    C1]  ? irq_work_single+0x1ac/0x240
[  243.083901][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  243.083912][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  243.083928][    C1]  _printk+0xcf/0x120
[  243.083945][    C1]  ? __pfx__printk+0x10/0x10
[  243.083968][    C1]  clocksource_watchdog+0xdca/0x11c0
[  243.083977][    C1]  ? __lock_acquire+0xab9/0xd20
[  243.083990][    C1]  ? __pfx_clocksource_watchdog+0x10/0x10
[  243.083998][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  243.084008][    C1]  call_timer_fn+0x17e/0x5f0
[  243.084014][    C1]  ? __pfx_clocksource_watchdog+0x10/0x10
[  243.084020][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  243.084029][    C1]  ? call_timer_fn+0xbe/0x5f0
[  243.084037][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  243.084048][    C1]  ? __pfx_clocksource_watchdog+0x10/0x10
[  243.084056][    C1]  __run_timer_base+0x61a/0x860
[  243.084073][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  243.084140][    C1]  run_timer_softirq+0x67/0x180
[  243.084156][    C1]  handle_softirqs+0x286/0x870
[  243.084170][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  243.084187][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  243.084196][    C1]  ? irq_work_single+0x1ac/0x240
[  243.084204][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  243.084214][    C1]  __irq_exit_rcu+0xca/0x1f0
[  243.084222][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  243.084236][    C1]  ? rcu_is_watching+0x15/0xb0
[  243.084251][    C1]  irq_exit_rcu+0x9/0x30
[  243.084261][    C1]  sysvec_irq_work+0xa3/0xc0
[  243.084271][    C1]  </IRQ>
[  243.084274][    C1]  <TASK>
[  243.084285][    C1]  asm_sysvec_irq_work+0x1a/0x20
[  243.084296][    C1] RIP: 0010:preempt_schedule_irq+0xb0/0x150
[  243.084309][    C1] Code: 24 20 f6 44 24 21 02 74 0c 90 0f 0b 48 f7 03 08 00 00 00 74 64 bf 01 00 00 00 e8 8b 2d 21 f6 e8 c6 00 58 f6 fb bf 01 00 00 00 <e8> 1b ab ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24
[  243.084317][    C1] RSP: 0018:ffffc9000c66f0a0 EFLAGS: 00000286
[  243.084326][    C1] RAX: 734e7fa31b7bd700 RBX: 0000000000000000 RCX: 734e7fa31b7bd700
[  243.084333][    C1] RDX: 0000000000000007 RSI: ffffffff8d99883e RDI: 0000000000000001
[  243.084339][    C1] RBP: ffffc9000c66f140 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  243.084346][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 0000000000000000
[  243.084352][    C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920018cde14
[  243.084364][    C1]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  243.084376][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  243.084386][    C1]  irqentry_exit+0x6f/0x90
[  243.084398][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  243.084408][    C1] RIP: 0010:save_stack+0x4c/0x1f0
[  243.084419][    C1] Code: 8b 05 c8 72 73 10 48 89 84 24 e0 00 00 00 49 bc 00 00 00 00 00 fc ff df 48 c7 44 24 20 b3 8a b5 41 48 c7 44 24 28 e8 3a 9d 8d <48> c7 44 24 30 30 9d 2c 82 4c 8d 6c 24 20 49 c1 ed 03 43 c7 44 25
[  243.084426][    C1] RSP: 0018:ffffc9000c66f200 EFLAGS: 00000286
[  243.084434][    C1] RAX: 734e7fa31b7bd700 RBX: 00000000020203a5 RCX: 734e7fa31b7bd700
[  243.084441][    C1] RDX: 0000000000000003 RSI: ffffffff8db8655b RDI: 0000000000002000
[  243.084448][    C1] RBP: ffffc9000c66f338 R08: 0000000000000000 R09: ffffffff822e5af2
[  243.084454][    C1] R10: dffffc0000000000 R11: fffff940008d64c7 R12: dffffc0000000000
[  243.084462][    C1] R13: ffffea00046b2608 R14: ffffea00046b2600 R15: 0000002026fd5bbe
[  243.084470][    C1]  ? page_ext_get+0x22/0x2f0
[  243.084484][    C1]  ? page_ext_get+0x22/0x2f0
[  243.084496][    C1]  ? page_ext_put+0x97/0xc0
[  243.084505][    C1]  __reset_page_owner+0x71/0x1f0
[  243.084512][    C1]  __free_frozen_pages+0xc71/0xe70
[  243.084524][    C1]  __put_partials+0x161/0x1c0
[  243.084535][    C1]  put_cpu_partial+0x17c/0x250
[  243.084543][    C1]  ? put_cpu_partial+0x6d/0x250
[  243.084552][    C1]  __slab_free+0x2f7/0x400
[  243.084562][    C1]  ? __phys_addr+0xd3/0x180
[  243.084572][    C1]  qlist_free_all+0x97/0x140
[  243.084584][    C1]  kasan_quarantine_reduce+0x148/0x160
[  243.084601][    C1]  __kasan_slab_alloc+0x22/0x80
[  243.084613][    C1]  __kmalloc_cache_noprof+0x1be/0x3d0
[  243.084624][    C1]  ? tcp_sendmsg_fastopen+0x1de/0x5e0
[  243.084643][    C1]  tcp_sendmsg_fastopen+0x1de/0x5e0
[  243.084664][    C1]  tcp_sendmsg_locked+0x4dc7/0x5650
[  243.084681][    C1]  ? tcp_sendmsg_locked+0x4f1/0x5650
[  243.084701][    C1]  ? perf_trace_preemptirq_template+0x280/0x340
[  243.084718][    C1]  ? irqentry_enter+0x3d/0x60
[  243.084732][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  243.084758][    C1]  ? irqentry_exit+0x74/0x90
[  243.084770][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  243.084780][    C1]  ? tcp_sendmsg+0x21/0x50
[  243.084790][    C1]  ? __pfx_tcp_sendmsg_locked+0x10/0x10
[  243.084807][    C1]  tcp_sendmsg+0x2f/0x50
[  243.084816][    C1]  smc_sendmsg+0x250/0x4d0
[  243.084825][    C1]  ? __pfx_smc_sendmsg+0x10/0x10
[  243.084833][    C1]  __sock_sendmsg+0x21c/0x270
[  243.084844][    C1]  ____sys_sendmsg+0x505/0x830
[  243.084854][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[  243.084866][    C1]  ? import_iovec+0x74/0xa0
[  243.084875][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  243.084883][    C1]  ? __pfx____sys_sendmsg+0x10/0x10
[  243.084906][    C1]  ? __fget_files+0x2a/0x420
[  243.084913][    C1]  ? __fget_files+0x3a0/0x420
[  243.084925][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  243.084931][    C1]  ? perf_trace_run_bpf_submit+0x100/0x170
[  243.084941][    C1]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  243.084953][    C1]  ? rcu_is_watching+0x15/0xb0
[  243.084963][    C1]  ? do_syscall_64+0xbe/0x3b0
[  243.084973][    C1]  do_syscall_64+0xfa/0x3b0
[  243.084982][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.084987][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  243.084996][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.085002][    C1] RIP: 0033:0x7f177e58e9a9
[  243.085009][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  243.085014][    C1] RSP: 002b:00007f177f3b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  243.085020][    C1] RAX: ffffffffffffffda RBX: 00007f177e7b6080 RCX: 00007f177e58e9a9
[  243.085025][    C1] RDX: 0000000020044818 RSI: 00002000000009c0 RDI: 0000000000000008
[  243.085029][    C1] RBP: 00007f177e610d69 R08: 0000000000000000 R09: 0000000000000000
[  243.085034][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  243.085037][    C1] R13: 0000000000000000 R14: 00007f177e7b6080 R15: 00007ffdf1302658
[  243.085049][    C1]  </TASK>
[  255.267829][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  255.267898][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  270.626285][   T18] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 13248 jiffies s: 19897 root: 0x2/.
[  270.626339][   T18] rcu: blocking rcu_node structures (internal RCU debug):
[  270.626356][   T18] Sending NMI from CPU 0 to CPUs 1:
[  270.626407][    C1] NMI backtrace for cpu 1
[  270.626421][    C1] CPU: 1 UID: 0 PID: 8215 Comm: syz.2.720 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  270.626431][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  270.626435][    C1] RIP: 0010:native_apic_msr_write+0x39/0x50
[  270.626450][    C1] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 cc cc cc cc cc f3 0f 1e fa 89 f6 31 d2 e9 e2 db 86 03 66
[  270.626455][    C1] RSP: 0018:ffffc900001e00a8 EFLAGS: 00000046
[  270.626462][    C1] RAX: 00000000000000f6 RBX: 0000000000000200 RCX: 000000000000083f
[  270.626467][    C1] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f
[  270.626470][    C1] RBP: ffffc900001e0178 R08: ffffc900001e0107 R09: 1ffff9200003c020
[  270.626475][    C1] R10: dffffc0000000000 R11: fffff5200003c021 R12: ffff88813663af01
[  270.626479][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8881366314f0
[  270.626483][    C1] FS:  00007f177f3b46c0(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
[  270.626489][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  270.626493][    C1] CR2: 00007f177f393d58 CR3: 0000000119f72000 CR4: 00000000000006f0
[  270.626519][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  270.626524][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  270.626528][    C1] Call Trace:
[  270.626532][    C1]  <IRQ>
[  270.626535][    C1]  arch_irq_work_raise+0x6d/0x80
[  270.626543][    C1]  __irq_work_queue_local+0x1d7/0x550
[  270.626551][    C1]  ? __pfx___irq_work_queue_local+0x10/0x10
[  270.626558][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  270.626566][    C1]  ? __phys_addr+0xd3/0x180
[  270.626574][    C1]  irq_work_queue_on+0x122/0x230
[  270.626580][    C1]  rcu_read_unlock_special+0x3ab/0x4c0
[  270.626590][    C1]  ? __lock_acquire+0xab9/0xd20
[  270.626598][    C1]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  270.626606][    C1]  ? trace_call_bpf+0xb7/0x850
[  270.626615][    C1]  __rcu_read_unlock+0x84/0xe0
[  270.626624][    C1]  ? trace_call_bpf+0xb7/0x850
[  270.626630][    C1]  trace_call_bpf+0x5ae/0x850
[  270.626636][    C1]  ? trace_call_bpf+0xb7/0x850
[  270.626643][    C1]  ? __pfx_trace_call_bpf+0x10/0x10
[  270.626648][    C1]  ? kvm_sched_clock_read+0x11/0x20
[  270.626657][    C1]  ? sched_clock_cpu+0x74/0x430
[  270.626664][    C1]  ? lapic_next_event+0x11/0x20
[  270.626671][    C1]  ? clockevents_program_event+0x24d/0x360
[  270.626681][    C1]  perf_trace_run_bpf_submit+0x78/0x170
[  270.626691][    C1]  perf_trace_preemptirq_template+0x280/0x340
[  270.626700][    C1]  ? irqentry_enter+0x3d/0x60
[  270.626708][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  270.626717][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  270.626725][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  270.626731][    C1]  ? irqentry_enter+0x3d/0x60
[  270.626739][    C1]  trace_irq_disable+0xee/0x110
[  270.626747][    C1]  irqentry_enter+0x3d/0x60
[  270.626755][    C1]  sysvec_apic_timer_interrupt+0xe/0xc0
[  270.626763][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  270.626769][    C1] RIP: 0010:console_flush_all+0x7f7/0xc40
[  270.626778][    C1] Code: 48 21 c3 0f 85 e9 01 00 00 e8 75 e7 1e 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 66 e7 1e 00 eb 06 e8 5f e7 1e 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 8a 0a 82 00 48 8b 1b 48 8b 44 24
[  270.626783][    C1] RSP: 0018:ffffc900001e0620 EFLAGS: 00000246
[  270.626788][    C1] RAX: 1ffffffff1d36927 RBX: ffffffff8e9b4938 RCX: ffff88810f891cc0
[  270.626793][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  270.626797][    C1] RBP: ffffc900001e0770 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  270.626801][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: dffffc0000000000
[  270.626805][    C1] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8e9b48e0
[  270.626813][    C1]  ? console_flush_all+0x13a/0xc40
[  270.626822][    C1]  ? __pfx_console_flush_all+0x10/0x10
[  270.626832][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  270.626841][    C1]  console_unlock+0xc4/0x270
[  270.626849][    C1]  ? __pfx_console_unlock+0x10/0x10
[  270.626857][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  270.626866][    C1]  vprintk_emit+0x5b7/0x7a0
[  270.626873][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  270.626880][    C1]  ? irq_work_single+0x1ac/0x240
[  270.626887][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  270.626896][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  270.626903][    C1]  _printk+0xcf/0x120
[  270.626913][    C1]  ? __pfx__printk+0x10/0x10
[  270.626923][    C1]  clocksource_watchdog+0xdca/0x11c0
[  270.626930][    C1]  ? __lock_acquire+0xab9/0xd20
[  270.626938][    C1]  ? __pfx_clocksource_watchdog+0x10/0x10
[  270.626945][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  270.626952][    C1]  call_timer_fn+0x17e/0x5f0
[  270.626959][    C1]  ? __pfx_clocksource_watchdog+0x10/0x10
[  270.626964][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  270.626971][    C1]  ? call_timer_fn+0xbe/0x5f0
[  270.626977][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  270.626985][    C1]  ? __pfx_clocksource_watchdog+0x10/0x10
[  270.626991][    C1]  __run_timer_base+0x61a/0x860
[  270.627003][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  270.627016][    C1]  run_timer_softirq+0x67/0x180
[  270.627066][    C1]  handle_softirqs+0x286/0x870
[  270.627077][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  270.627087][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  270.627097][    C1]  ? irq_work_single+0x1ac/0x240
[  270.627105][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  270.627114][    C1]  __irq_exit_rcu+0xca/0x1f0
[  270.627120][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  270.627128][    C1]  ? rcu_is_watching+0x15/0xb0
[  270.627135][    C1]  irq_exit_rcu+0x9/0x30
[  270.627141][    C1]  sysvec_irq_work+0xa3/0xc0
[  270.627148][    C1]  </IRQ>
[  270.627150][    C1]  <TASK>
[  270.627153][    C1]  asm_sysvec_irq_work+0x1a/0x20
[  270.627159][    C1] RIP: 0010:preempt_schedule_irq+0xb0/0x150
[  270.627168][    C1] Code: 24 20 f6 44 24 21 02 74 0c 90 0f 0b 48 f7 03 08 00 00 00 74 64 bf 01 00 00 00 e8 8b 2d 21 f6 e8 c6 00 58 f6 fb bf 01 00 00 00 <e8> 1b ab ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24
[  270.627172][    C1] RSP: 0018:ffffc9000c66f0a0 EFLAGS: 00000286
[  270.627178][    C1] RAX: 734e7fa31b7bd700 RBX: 0000000000000000 RCX: 734e7fa31b7bd700
[  270.627183][    C1] RDX: 0000000000000007 RSI: ffffffff8d99883e RDI: 0000000000000001
[  270.627186][    C1] RBP: ffffc9000c66f140 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  270.627190][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 0000000000000000
[  270.627195][    C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920018cde14
[  270.627202][    C1]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  270.627211][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  270.627219][    C1]  irqentry_exit+0x6f/0x90
[  270.627226][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  270.627232][    C1] RIP: 0010:save_stack+0x4c/0x1f0
[  270.627238][    C1] Code: 8b 05 c8 72 73 10 48 89 84 24 e0 00 00 00 49 bc 00 00 00 00 00 fc ff df 48 c7 44 24 20 b3 8a b5 41 48 c7 44 24 28 e8 3a 9d 8d <48> c7 44 24 30 30 9d 2c 82 4c 8d 6c 24 20 49 c1 ed 03 43 c7 44 25
[  270.627243][    C1] RSP: 0018:ffffc9000c66f200 EFLAGS: 00000286
[  270.627247][    C1] RAX: 734e7fa31b7bd700 RBX: 00000000020203a5 RCX: 734e7fa31b7bd700
[  270.627252][    C1] RDX: 0000000000000003 RSI: ffffffff8db8655b RDI: 0000000000002000
[  270.627260][    C1] RBP: ffffc9000c66f338 R08: 0000000000000000 R09: ffffffff822e5af2
[  270.627264][    C1] R10: dffffc0000000000 R11: fffff940008d64c7 R12: dffffc0000000000
[  270.627269][    C1] R13: ffffea00046b2608 R14: ffffea00046b2600 R15: 0000002026fd5bbe
[  270.627274][    C1]  ? page_ext_get+0x22/0x2f0
[  270.627284][    C1]  ? page_ext_get+0x22/0x2f0
[  270.627292][    C1]  ? page_ext_put+0x97/0xc0
[  270.627298][    C1]  __reset_page_owner+0x71/0x1f0
[  270.627305][    C1]  __free_frozen_pages+0xc71/0xe70
[  270.627314][    C1]  __put_partials+0x161/0x1c0
[  270.627323][    C1]  put_cpu_partial+0x17c/0x250
[  270.627330][    C1]  ? put_cpu_partial+0x6d/0x250
[  270.627338][    C1]  __slab_free+0x2f7/0x400
[  270.627346][    C1]  ? __phys_addr+0xd3/0x180
[  270.627355][    C1]  qlist_free_all+0x97/0x140
[  270.627365][    C1]  kasan_quarantine_reduce+0x148/0x160
[  270.627374][    C1]  __kasan_slab_alloc+0x22/0x80
[  270.627381][    C1]  __kmalloc_cache_noprof+0x1be/0x3d0
[  270.627387][    C1]  ? tcp_sendmsg_fastopen+0x1de/0x5e0
[  270.627397][    C1]  tcp_sendmsg_fastopen+0x1de/0x5e0
[  270.627407][    C1]  tcp_sendmsg_locked+0x4dc7/0x5650
[  270.627416][    C1]  ? tcp_sendmsg_locked+0x4f1/0x5650
[  270.627426][    C1]  ? perf_trace_preemptirq_template+0x280/0x340
[  270.627435][    C1]  ? irqentry_enter+0x3d/0x60
[  270.627442][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  270.627453][    C1]  ? irqentry_exit+0x74/0x90
[  270.627460][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  270.627469][    C1]  ? tcp_sendmsg+0x21/0x50
[  270.627477][    C1]  ? __pfx_tcp_sendmsg_locked+0x10/0x10
[  270.627489][    C1]  tcp_sendmsg+0x2f/0x50
[  270.627497][    C1]  smc_sendmsg+0x250/0x4d0
[  270.627505][    C1]  ? __pfx_smc_sendmsg+0x10/0x10
[  270.627512][    C1]  __sock_sendmsg+0x21c/0x270
[  270.627522][    C1]  ____sys_sendmsg+0x505/0x830
[  270.627531][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[  270.627539][    C1]  ? import_iovec+0x74/0xa0
[  270.627547][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  270.627554][    C1]  ? __pfx____sys_sendmsg+0x10/0x10
[  270.627567][    C1]  ? __fget_files+0x2a/0x420
[  270.627574][    C1]  ? __fget_files+0x3a0/0x420
[  270.627582][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  270.627589][    C1]  ? perf_trace_run_bpf_submit+0x100/0x170
[  270.627597][    C1]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  270.627605][    C1]  ? rcu_is_watching+0x15/0xb0
[  270.627613][    C1]  ? do_syscall_64+0xbe/0x3b0
[  270.627621][    C1]  do_syscall_64+0xfa/0x3b0
[  270.627630][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.627635][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  270.627642][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.627648][    C1] RIP: 0033:0x7f177e58e9a9
[  270.627655][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  270.627660][    C1] RSP: 002b:00007f177f3b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  270.627666][    C1] RAX: ffffffffffffffda RBX: 00007f177e7b6080 RCX: 00007f177e58e9a9
[  270.627671][    C1] RDX: 0000000020044818 RSI: 00002000000009c0 RDI: 0000000000000008
[  270.627675][    C1] RBP: 00007f177e610d69 R08: 0000000000000000 R09: 0000000000000000
[  270.627678][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  270.627682][    C1] R13: 0000000000000000 R14: 00007f177e7b6080 R15: 00007ffdf1302658
[  270.627689][    C1]  </TASK>
[  277.834408][ T8252] Bluetooth: hci3: command 0x0406 tx timeout
[  277.834483][ T8252] Bluetooth: hci5: command 0x0406 tx timeout
[  277.834516][ T8252] Bluetooth: hci4: command 0x0406 tx timeout
[  304.775555][ T8262] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  304.777170][ T8262] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  304.777482][ T8262] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  304.777990][ T8262] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  304.778306][ T8262] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  304.806304][ T8250] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  304.807365][ T8250] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  304.808006][ T8250] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  304.808570][ T8250] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  304.809100][ T8250] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  304.809297][ T8250] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  304.810044][ T8250] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  304.810234][ T8250] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  304.813320][ T8257] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  304.813647][ T8257] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  316.708295][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  316.708327][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  362.189085][ T8263] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  362.190612][ T8263] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  362.191089][ T8263] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  362.195755][ T8263] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  362.196155][ T8263] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  362.312355][ T8274] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  362.313888][ T8274] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  362.315181][ T8274] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  362.315522][ T8274] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  362.316439][ T8274] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  362.316993][ T8274] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  362.317686][ T8274] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  362.318145][ T8274] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  362.319314][ T8274] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  362.351907][ T8263] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  378.147725][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  378.147763][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  395.473190][ T8280] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  395.475789][ T8280] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  395.476332][ T8280] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  395.477096][ T8280] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  395.477413][ T8280] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  395.938563][ T8289] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  395.939646][ T8289] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  395.940957][ T8289] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  395.942349][ T8289] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  395.942941][ T8289] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  396.361377][ T8293] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  396.362522][ T8293] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  396.362965][ T8293] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  396.364314][ T8293] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  396.364797][ T8293] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  419.883533][    C1] watchdog: BUG: soft lockup - CPU#1 stuck for 267s! [syz.2.720:8215]
[  419.883547][    C1] Modules linked in:
[  419.883553][    C1] irq event stamp: 10154953
[  419.883556][    C1] hardirqs last  enabled at (10154952): [<ffffffff8b6e9424>] irqentry_exit+0x74/0x90
[  419.883570][    C1] hardirqs last disabled at (10154953): [<ffffffff8b6e7f6e>] sysvec_apic_timer_interrupt+0xe/0xc0
[  419.883580][    C1] softirqs last  enabled at (2786738): [<ffffffff8185bdba>] __irq_exit_rcu+0xca/0x1f0
[  419.883595][    C1] softirqs last disabled at (2786741): [<ffffffff8185bdba>] __irq_exit_rcu+0xca/0x1f0
[  419.883606][    C1] CPU: 1 UID: 0 PID: 8215 Comm: syz.2.720 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  419.883614][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  419.883618][    C1] RIP: 0010:memmove+0x126/0x1b0
[  419.883628][    C1] Code: 4e e8 4c 8b 46 e0 48 8d 76 e0 4c 89 5f f8 4c 89 57 f0 4c 89 4f e8 4c 89 47 e0 48 8d 7f e0 73 d2 48 83 c2 20 48 29 d6 48 29 d7 <48> 83 fa 10 72 24 4c 8b 1e 4c 8b 56 08 4c 8b 4c 16 f0 4c 8b 44 16
[  419.883634][    C1] RSP: 0018:ffffc900001e0038 EFLAGS: 00000283
[  419.883640][    C1] RAX: ffffc900001e0392 RBX: ffffc900001e038f RCX: ffffffff8b6b3a1d
[  419.883645][    C1] RDX: 0000000000000003 RSI: ffffc900001e038f RDI: ffffc900001e0392
[  419.883650][    C1] RBP: 0000000000000003 R08: ffffc900001e0392 R09: 1ffff9200003c072
[  419.883654][    C1] R10: dffffc0000000000 R11: fffff5200003c073 R12: 000000007ffffffb
[  419.883658][    C1] R13: 0000000000000000 R14: 0000000000000003 R15: 000000007ffffffe
[  419.883663][    C1] FS:  00007f177f3b46c0(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
[  419.883668][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  419.883672][    C1] CR2: 00007f177f393d58 CR3: 0000000119f72000 CR4: 00000000000006f0
[  419.883714][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  419.883721][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  419.883726][    C1] Call Trace:
[  419.883731][    C1]  <IRQ>
[  419.883735][    C1]  move_right+0x5d/0xa0
[  419.883749][    C1]  widen_string+0x85/0x2a0
[  419.883759][    C1]  ? string+0x279/0x2b0
[  419.883767][    C1]  vsnprintf+0x739/0xf00
[  419.883779][    C1]  sprintf+0xd9/0x120
[  419.883786][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  419.883796][    C1]  ? __pfx_sprintf+0x10/0x10
[  419.883803][    C1]  ? desc_read+0x208/0x3f0
[  419.883815][    C1]  info_print_prefix+0x1f3/0x310
[  419.883826][    C1]  ? __pfx_info_print_prefix+0x10/0x10
[  419.883834][    C1]  ? _prb_read_valid+0xa7b/0xa90
[  419.883848][    C1]  record_print_text+0x154/0x430
[  419.883859][    C1]  ? __pfx__prb_read_valid+0x10/0x10
[  419.883867][    C1]  ? __pfx_record_print_text+0x10/0x10
[  419.883874][    C1]  ? kvm_sched_clock_read+0x11/0x20
[  419.883883][    C1]  ? lapic_next_event+0x11/0x20
[  419.883890][    C1]  ? clockevents_program_event+0x24d/0x360
[  419.883905][    C1]  printk_get_next_message+0x26d/0x7b0
[  419.883912][    C1]  ? irq_work_single+0x1ac/0x240
[  419.883923][    C1]  ? __pfx_printk_get_next_message+0x10/0x10
[  419.883931][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  419.883938][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  419.883954][    C1]  ? console_flush_all+0x476/0xc40
[  419.883964][    C1]  console_flush_all+0x4ca/0xc40
[  419.883972][    C1]  ? console_flush_all+0x861/0xc40
[  419.883981][    C1]  ? console_flush_all+0x13a/0xc40
[  419.883992][    C1]  ? __pfx_console_flush_all+0x10/0x10
[  419.884004][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  419.884015][    C1]  console_unlock+0xc4/0x270
[  419.884025][    C1]  ? __pfx_console_unlock+0x10/0x10
[  419.884034][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  419.884044][    C1]  vprintk_emit+0x5b7/0x7a0
[  419.884053][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  419.884060][    C1]  ? irq_work_single+0x1ac/0x240
[  419.884068][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  419.884080][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  419.884090][    C1]  _printk+0xcf/0x120
[  419.884101][    C1]  ? __pfx__printk+0x10/0x10
[  419.884115][    C1]  clocksource_watchdog+0xdca/0x11c0
[  419.884122][    C1]  ? __lock_acquire+0xab9/0xd20
[  419.884135][    C1]  ? __pfx_clocksource_watchdog+0x10/0x10
[  419.884142][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  419.884152][    C1]  call_timer_fn+0x17e/0x5f0
[  419.884159][    C1]  ? __pfx_clocksource_watchdog+0x10/0x10
[  419.884164][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  419.884171][    C1]  ? call_timer_fn+0xbe/0x5f0
[  419.884177][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  419.884189][    C1]  ? __pfx_clocksource_watchdog+0x10/0x10
[  419.884196][    C1]  __run_timer_base+0x61a/0x860
[  419.884212][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  419.884228][    C1]  run_timer_softirq+0x67/0x180
[  419.884237][    C1]  handle_softirqs+0x286/0x870
[  419.884246][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  419.884255][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  419.884262][    C1]  ? irq_work_single+0x1ac/0x240
[  419.884270][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  419.884279][    C1]  __irq_exit_rcu+0xca/0x1f0
[  419.884286][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  419.884295][    C1]  ? rcu_is_watching+0x15/0xb0
[  419.884304][    C1]  irq_exit_rcu+0x9/0x30
[  419.884310][    C1]  sysvec_irq_work+0xa3/0xc0
[  419.884317][    C1]  </IRQ>
[  419.884319][    C1]  <TASK>
[  419.884322][    C1]  asm_sysvec_irq_work+0x1a/0x20
[  419.884328][    C1] RIP: 0010:preempt_schedule_irq+0xb0/0x150
[  419.884337][    C1] Code: 24 20 f6 44 24 21 02 74 0c 90 0f 0b 48 f7 03 08 00 00 00 74 64 bf 01 00 00 00 e8 8b 2d 21 f6 e8 c6 00 58 f6 fb bf 01 00 00 00 <e8> 1b ab ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24
[  419.884342][    C1] RSP: 0018:ffffc9000c66f0a0 EFLAGS: 00000286
[  419.884348][    C1] RAX: 734e7fa31b7bd700 RBX: 0000000000000000 RCX: 734e7fa31b7bd700
[  419.884352][    C1] RDX: 0000000000000007 RSI: ffffffff8d99883e RDI: 0000000000000001
[  419.884356][    C1] RBP: ffffc9000c66f140 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  419.884360][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 0000000000000000
[  419.884364][    C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920018cde14
[  419.884376][    C1]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  419.884388][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  419.884396][    C1]  irqentry_exit+0x6f/0x90
[  419.884407][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  419.884416][    C1] RIP: 0010:save_stack+0x4c/0x1f0
[  419.884427][    C1] Code: 8b 05 c8 72 73 10 48 89 84 24 e0 00 00 00 49 bc 00 00 00 00 00 fc ff df 48 c7 44 24 20 b3 8a b5 41 48 c7 44 24 28 e8 3a 9d 8d <48> c7 44 24 30 30 9d 2c 82 4c 8d 6c 24 20 49 c1 ed 03 43 c7 44 25
[  419.884433][    C1] RSP: 0018:ffffc9000c66f200 EFLAGS: 00000286
[  419.884440][    C1] RAX: 734e7fa31b7bd700 RBX: 00000000020203a5 RCX: 734e7fa31b7bd700
[  419.884446][    C1] RDX: 0000000000000003 RSI: ffffffff8db8655b RDI: 0000000000002000
[  419.884453][    C1] RBP: ffffc9000c66f338 R08: 0000000000000000 R09: ffffffff822e5af2
[  419.884459][    C1] R10: dffffc0000000000 R11: fffff940008d64c7 R12: dffffc0000000000
[  419.884466][    C1] R13: ffffea00046b2608 R14: ffffea00046b2600 R15: 0000002026fd5bbe
[  419.884474][    C1]  ? page_ext_get+0x22/0x2f0
[  419.884488][    C1]  ? page_ext_get+0x22/0x2f0
[  419.884499][    C1]  ? page_ext_put+0x97/0xc0
[  419.884508][    C1]  __reset_page_owner+0x71/0x1f0
[  419.884516][    C1]  __free_frozen_pages+0xc71/0xe70
[  419.884528][    C1]  __put_partials+0x161/0x1c0
[  419.884539][    C1]  put_cpu_partial+0x17c/0x250
[  419.884546][    C1]  ? put_cpu_partial+0x6d/0x250
[  419.884556][    C1]  __slab_free+0x2f7/0x400
[  419.884565][    C1]  ? __phys_addr+0xd3/0x180
[  419.884575][    C1]  qlist_free_all+0x97/0x140
[  419.884586][    C1]  kasan_quarantine_reduce+0x148/0x160
[  419.884602][    C1]  __kasan_slab_alloc+0x22/0x80
[  419.884610][    C1]  __kmalloc_cache_noprof+0x1be/0x3d0
[  419.884616][    C1]  ? tcp_sendmsg_fastopen+0x1de/0x5e0
[  419.884628][    C1]  tcp_sendmsg_fastopen+0x1de/0x5e0
[  419.884641][    C1]  tcp_sendmsg_locked+0x4dc7/0x5650
[  419.884651][    C1]  ? tcp_sendmsg_locked+0x4f1/0x5650
[  419.884663][    C1]  ? perf_trace_preemptirq_template+0x280/0x340
[  419.884673][    C1]  ? irqentry_enter+0x3d/0x60
[  419.884723][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  419.884747][    C1]  ? irqentry_exit+0x74/0x90
[  419.884758][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  419.884774][    C1]  ? tcp_sendmsg+0x21/0x50
[  419.884784][    C1]  ? __pfx_tcp_sendmsg_locked+0x10/0x10
[  419.884801][    C1]  tcp_sendmsg+0x2f/0x50
[  419.884810][    C1]  smc_sendmsg+0x250/0x4d0
[  419.884819][    C1]  ? __pfx_smc_sendmsg+0x10/0x10
[  419.884827][    C1]  __sock_sendmsg+0x21c/0x270
[  419.884840][    C1]  ____sys_sendmsg+0x505/0x830
[  419.884851][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[  419.884862][    C1]  ? import_iovec+0x74/0xa0
[  419.884871][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  419.884880][    C1]  ? __pfx____sys_sendmsg+0x10/0x10
[  419.884902][    C1]  ? __fget_files+0x2a/0x420
[  419.884909][    C1]  ? __fget_files+0x3a0/0x420
[  419.884921][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  419.884927][    C1]  ? perf_trace_run_bpf_submit+0x100/0x170
[  419.884936][    C1]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  419.884948][    C1]  ? rcu_is_watching+0x15/0xb0
[  419.884957][    C1]  ? do_syscall_64+0xbe/0x3b0
[  419.884968][    C1]  do_syscall_64+0xfa/0x3b0
[  419.884977][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.884983][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  419.884991][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.884997][    C1] RIP: 0033:0x7f177e58e9a9
[  419.885005][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  419.885010][    C1] RSP: 002b:00007f177f3b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  419.885017][    C1] RAX: ffffffffffffffda RBX: 00007f177e7b6080 RCX: 00007f177e58e9a9
[  419.885022][    C1] RDX: 0000000020044818 RSI: 00002000000009c0 RDI: 0000000000000008
[  419.885026][    C1] RBP: 00007f177e610d69 R08: 0000000000000000 R09: 0000000000000000
[  419.885029][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  419.885033][    C1] R13: 0000000000000000 R14: 00007f177e7b6080 R15: 00007ffdf1302658
[  419.885044][    C1]  </TASK>
[  419.885048][    C1] Sending NMI from CPU 1 to CPUs 0:
[  419.885092][    C0] NMI backtrace for cpu 0
[  419.885106][    C0] CPU: 0 UID: 0 PID: 7149 Comm: kworker/u8:4 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  419.885120][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  419.885128][    C0] Workqueue: bat_events batadv_nc_worker
[  419.885145][    C0] RIP: 0010:validate_chain+0x14/0x2140
[  419.885160][    C0] Code: 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 41 55 41 54 53 48 81 ec e0 00 00 00 49 89 cf <65> 48 8b 05 24 8e 01 11 48 89 84 24 d8 00 00 00 8b 46 20 89 c1 81
[  419.885169][    C0] RSP: 0018:ffffc90007ccf7d8 EFLAGS: 00000086
[  419.885178][    C0] RAX: ffffffff9348c868 RBX: 0000000000000002 RCX: de4b11e69e9c141f
[  419.885186][    C0] RDX: 0000000000000000 RSI: ffff88810826c4c0 RDI: ffff88810826b980
[  419.885194][    C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8b3c5582
[  419.885200][    C0] R10: dffffc0000000000 R11: ffffffff8b3c54b0 R12: 00000000f44d3fe0
[  419.885208][    C0] R13: ffff88810826c470 R14: ffff88810826c4c0 R15: de4b11e69e9c141f
[  419.885216][    C0] FS:  0000000000000000(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
[  419.885225][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  419.885232][    C0] CR2: 000055a7ba450e08 CR3: 000000000df38000 CR4: 00000000000006f0
[  419.885265][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  419.885274][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  419.885281][    C0] Call Trace:
[  419.885285][    C0]  <TASK>
[  419.885291][    C0]  ? __pfx_trace_call_bpf+0x10/0x10
[  419.885306][    C0]  ? __lock_acquire+0xab9/0xd20
[  419.885320][    C0]  __lock_acquire+0xab9/0xd20
[  419.885332][    C0]  ? batadv_nc_worker+0xd2/0x610
[  419.885344][    C0]  lock_acquire+0x120/0x360
[  419.885354][    C0]  ? batadv_nc_worker+0xd2/0x610
[  419.885368][    C0]  ? batadv_nc_worker+0xd2/0x610
[  419.885380][    C0]  ? batadv_nc_worker+0xd2/0x610
[  419.885391][    C0]  batadv_nc_worker+0xef/0x610
[  419.885403][    C0]  ? batadv_nc_worker+0xd2/0x610
[  419.885415][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  419.885428][    C0]  process_scheduled_works+0xae1/0x17b0
[  419.885447][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  419.885463][    C0]  worker_thread+0x8a0/0xda0
[  419.885476][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  419.885492][    C0]  ? __kthread_parkme+0x7b/0x200
[  419.885507][    C0]  kthread+0x711/0x8a0
[  419.885522][    C0]  ? __pfx_worker_thread+0x10/0x10
[  419.885534][    C0]  ? __pfx_kthread+0x10/0x10
[  419.885548][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  419.885560][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  419.885573][    C0]  ? __pfx_kthread+0x10/0x10
[  419.885587][    C0]  ret_from_fork+0x3fc/0x770
[  419.885600][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  419.885613][    C0]  ? __switch_to_asm+0x39/0x70
[  419.885626][    C0]  ? __switch_to_asm+0x33/0x70
[  419.885638][    C0]  ? __pfx_kthread+0x10/0x10
[  419.885652][    C0]  ret_from_fork_asm+0x1a/0x30
[  419.885671][    C0]  </TASK>
[  419.886078][    C1] Kernel panic - not syncing: softlockup: hung tasks
[  419.886088][    C1] CPU: 1 UID: 0 PID: 8215 Comm: syz.2.720 Tainted: G             L      6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  419.886099][    C1] Tainted: [L]=SOFTLOCKUP
[  419.886102][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  419.886106][    C1] Call Trace:
[  419.886109][    C1]  <IRQ>
[  419.886113][    C1]  dump_stack_lvl+0x99/0x250
[  419.886122][    C1]  ? __asan_memcpy+0x40/0x70
[  419.886132][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  419.886140][    C1]  ? __pfx__printk+0x10/0x10
[  419.886154][    C1]  panic+0x2db/0x790
[  419.886166][    C1]  ? __pfx_panic+0x10/0x10
[  419.886173][    C1]  ? nmi_backtrace_stall_check+0x433/0x440
[  419.886189][    C1]  watchdog_timer_fn+0x862/0x870
[  419.886199][    C1]  ? __pfx_watchdog_timer_fn+0x10/0x10
[  419.886207][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  419.886215][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  419.886225][    C1]  ? __pfx_watchdog_timer_fn+0x10/0x10
[  419.886232][    C1]  ? __pfx_watchdog_timer_fn+0x10/0x10
[  419.886239][    C1]  __hrtimer_run_queues+0x4e0/0xc60
[  419.886255][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  419.886263][    C1]  ? ktime_get_update_offsets_now+0x3ab/0x3d0
[  419.886277][    C1]  hrtimer_interrupt+0x45b/0xaa0
[  419.886296][    C1]  __sysvec_apic_timer_interrupt+0x10b/0x410
[  419.886307][    C1]  sysvec_apic_timer_interrupt+0x52/0xc0
[  419.886316][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  419.886322][    C1] RIP: 0010:memmove+0x126/0x1b0
[  419.886332][    C1] Code: 4e e8 4c 8b 46 e0 48 8d 76 e0 4c 89 5f f8 4c 89 57 f0 4c 89 4f e8 4c 89 47 e0 48 8d 7f e0 73 d2 48 83 c2 20 48 29 d6 48 29 d7 <48> 83 fa 10 72 24 4c 8b 1e 4c 8b 56 08 4c 8b 4c 16 f0 4c 8b 44 16
[  419.886337][    C1] RSP: 0018:ffffc900001e0038 EFLAGS: 00000283
[  419.886344][    C1] RAX: ffffc900001e0392 RBX: ffffc900001e038f RCX: ffffffff8b6b3a1d
[  419.886349][    C1] RDX: 0000000000000003 RSI: ffffc900001e038f RDI: ffffc900001e0392
[  419.886353][    C1] RBP: 0000000000000003 R08: ffffc900001e0392 R09: 1ffff9200003c072
[  419.886358][    C1] R10: dffffc0000000000 R11: fffff5200003c073 R12: 000000007ffffffb
[  419.886362][    C1] R13: 0000000000000000 R14: 0000000000000003 R15: 000000007ffffffe
[  419.886370][    C1]  ? move_right+0x5d/0xa0
[  419.886380][    C1]  move_right+0x5d/0xa0
[  419.886389][    C1]  widen_string+0x85/0x2a0
[  419.886396][    C1]  ? string+0x279/0x2b0
[  419.886404][    C1]  vsnprintf+0x739/0xf00
[  419.886416][    C1]  sprintf+0xd9/0x120
[  419.886423][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  419.886433][    C1]  ? __pfx_sprintf+0x10/0x10
[  419.886441][    C1]  ? desc_read+0x208/0x3f0
[  419.886452][    C1]  info_print_prefix+0x1f3/0x310
[  419.886464][    C1]  ? __pfx_info_print_prefix+0x10/0x10
[  419.886472][    C1]  ? _prb_read_valid+0xa7b/0xa90
[  419.886484][    C1]  record_print_text+0x154/0x430
[  419.886495][    C1]  ? __pfx__prb_read_valid+0x10/0x10
[  419.886503][    C1]  ? __pfx_record_print_text+0x10/0x10
[  419.886511][    C1]  ? kvm_sched_clock_read+0x11/0x20
[  419.886520][    C1]  ? lapic_next_event+0x11/0x20
[  419.886527][    C1]  ? clockevents_program_event+0x24d/0x360
[  419.886541][    C1]  printk_get_next_message+0x26d/0x7b0
[  419.886549][    C1]  ? irq_work_single+0x1ac/0x240
[  419.886559][    C1]  ? __pfx_printk_get_next_message+0x10/0x10
[  419.886568][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  419.886576][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  419.886598][    C1]  ? console_flush_all+0x476/0xc40
[  419.886610][    C1]  console_flush_all+0x4ca/0xc40
[  419.886618][    C1]  ? console_flush_all+0x861/0xc40
[  419.886627][    C1]  ? console_flush_all+0x13a/0xc40
[  419.886639][    C1]  ? __pfx_console_flush_all+0x10/0x10
[  419.886652][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  419.886663][    C1]  console_unlock+0xc4/0x270
[  419.886672][    C1]  ? __pfx_console_unlock+0x10/0x10
[  419.886707][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  419.886726][    C1]  vprintk_emit+0x5b7/0x7a0
[  419.886740][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  419.886752][    C1]  ? irq_work_single+0x1ac/0x240
[  419.886763][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  419.886774][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  419.886784][    C1]  _printk+0xcf/0x120
[  419.886796][    C1]  ? __pfx__printk+0x10/0x10
[  419.886810][    C1]  clocksource_watchdog+0xdca/0x11c0
[  419.886817][    C1]  ? __lock_acquire+0xab9/0xd20
[  419.886830][    C1]  ? __pfx_clocksource_watchdog+0x10/0x10
[  419.886838][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  419.886848][    C1]  call_timer_fn+0x17e/0x5f0
[  419.886856][    C1]  ? __pfx_clocksource_watchdog+0x10/0x10
[  419.886862][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  419.886870][    C1]  ? call_timer_fn+0xbe/0x5f0
[  419.886876][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  419.886888][    C1]  ? __pfx_clocksource_watchdog+0x10/0x10
[  419.886896][    C1]  __run_timer_base+0x61a/0x860
[  419.886912][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  419.886929][    C1]  run_timer_softirq+0x67/0x180
[  419.886939][    C1]  handle_softirqs+0x286/0x870
[  419.886948][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  419.886958][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  419.886965][    C1]  ? irq_work_single+0x1ac/0x240
[  419.886974][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  419.886985][    C1]  __irq_exit_rcu+0xca/0x1f0
[  419.886992][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  419.887002][    C1]  ? rcu_is_watching+0x15/0xb0
[  419.887011][    C1]  irq_exit_rcu+0x9/0x30
[  419.887018][    C1]  sysvec_irq_work+0xa3/0xc0
[  419.887025][    C1]  </IRQ>
[  419.887028][    C1]  <TASK>
[  419.887031][    C1]  asm_sysvec_irq_work+0x1a/0x20
[  419.887038][    C1] RIP: 0010:preempt_schedule_irq+0xb0/0x150
[  419.887047][    C1] Code: 24 20 f6 44 24 21 02 74 0c 90 0f 0b 48 f7 03 08 00 00 00 74 64 bf 01 00 00 00 e8 8b 2d 21 f6 e8 c6 00 58 f6 fb bf 01 00 00 00 <e8> 1b ab ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24
[  419.887053][    C1] RSP: 0018:ffffc9000c66f0a0 EFLAGS: 00000286
[  419.887060][    C1] RAX: 734e7fa31b7bd700 RBX: 0000000000000000 RCX: 734e7fa31b7bd700
[  419.887065][    C1] RDX: 0000000000000007 RSI: ffffffff8d99883e RDI: 0000000000000001
[  419.887069][    C1] RBP: ffffc9000c66f140 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  419.887074][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 0000000000000000
[  419.887079][    C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920018cde14
[  419.887092][    C1]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  419.887104][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  419.887113][    C1]  irqentry_exit+0x6f/0x90
[  419.887120][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  419.887127][    C1] RIP: 0010:save_stack+0x4c/0x1f0
[  419.887134][    C1] Code: 8b 05 c8 72 73 10 48 89 84 24 e0 00 00 00 49 bc 00 00 00 00 00 fc ff df 48 c7 44 24 20 b3 8a b5 41 48 c7 44 24 28 e8 3a 9d 8d <48> c7 44 24 30 30 9d 2c 82 4c 8d 6c 24 20 49 c1 ed 03 43 c7 44 25
[  419.887139][    C1] RSP: 0018:ffffc9000c66f200 EFLAGS: 00000286
[  419.887145][    C1] RAX: 734e7fa31b7bd700 RBX: 00000000020203a5 RCX: 734e7fa31b7bd700
[  419.887150][    C1] RDX: 0000000000000003 RSI: ffffffff8db8655b RDI: 0000000000002000
[  419.887155][    C1] RBP: ffffc9000c66f338 R08: 0000000000000000 R09: ffffffff822e5af2
[  419.887160][    C1] R10: dffffc0000000000 R11: fffff940008d64c7 R12: dffffc0000000000
[  419.887164][    C1] R13: ffffea00046b2608 R14: ffffea00046b2600 R15: 0000002026fd5bbe
[  419.887172][    C1]  ? page_ext_get+0x22/0x2f0
[  419.887187][    C1]  ? page_ext_get+0x22/0x2f0
[  419.887198][    C1]  ? page_ext_put+0x97/0xc0
[  419.887208][    C1]  __reset_page_owner+0x71/0x1f0
[  419.887216][    C1]  __free_frozen_pages+0xc71/0xe70
[  419.887228][    C1]  __put_partials+0x161/0x1c0
[  419.887239][    C1]  put_cpu_partial+0x17c/0x250
[  419.887248][    C1]  ? put_cpu_partial+0x6d/0x250
[  419.887258][    C1]  __slab_free+0x2f7/0x400
[  419.887268][    C1]  ? __phys_addr+0xd3/0x180
[  419.887279][    C1]  qlist_free_all+0x97/0x140
[  419.887290][    C1]  kasan_quarantine_reduce+0x148/0x160
[  419.887301][    C1]  __kasan_slab_alloc+0x22/0x80
[  419.887309][    C1]  __kmalloc_cache_noprof+0x1be/0x3d0
[  419.887316][    C1]  ? tcp_sendmsg_fastopen+0x1de/0x5e0
[  419.887328][    C1]  tcp_sendmsg_fastopen+0x1de/0x5e0
[  419.887340][    C1]  tcp_sendmsg_locked+0x4dc7/0x5650
[  419.887351][    C1]  ? tcp_sendmsg_locked+0x4f1/0x5650
[  419.887364][    C1]  ? perf_trace_preemptirq_template+0x280/0x340
[  419.887374][    C1]  ? irqentry_enter+0x3d/0x60
[  419.887383][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  419.887398][    C1]  ? irqentry_exit+0x74/0x90
[  419.887406][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  419.887416][    C1]  ? tcp_sendmsg+0x21/0x50
[  419.887427][    C1]  ? __pfx_tcp_sendmsg_locked+0x10/0x10
[  419.887444][    C1]  tcp_sendmsg+0x2f/0x50
[  419.887455][    C1]  smc_sendmsg+0x250/0x4d0
[  419.887463][    C1]  ? __pfx_smc_sendmsg+0x10/0x10
[  419.887472][    C1]  __sock_sendmsg+0x21c/0x270
[  419.887483][    C1]  ____sys_sendmsg+0x505/0x830
[  419.887493][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[  419.887505][    C1]  ? import_iovec+0x74/0xa0
[  419.887514][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  419.887523][    C1]  ? __pfx____sys_sendmsg+0x10/0x10
[  419.887546][    C1]  ? __fget_files+0x2a/0x420
[  419.887555][    C1]  ? __fget_files+0x3a0/0x420
[  419.887566][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  419.887574][    C1]  ? perf_trace_run_bpf_submit+0x100/0x170
[  419.887583][    C1]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  419.887602][    C1]  ? rcu_is_watching+0x15/0xb0
[  419.887612][    C1]  ? do_syscall_64+0xbe/0x3b0
[  419.887623][    C1]  do_syscall_64+0xfa/0x3b0
[  419.887633][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.887639][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  419.887649][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.887655][    C1] RIP: 0033:0x7f177e58e9a9
[  419.887662][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  419.887668][    C1] RSP: 002b:00007f177f3b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  419.887676][    C1] RAX: ffffffffffffffda RBX: 00007f177e7b6080 RCX: 00007f177e58e9a9
[  419.887681][    C1] RDX: 0000000020044818 RSI: 00002000000009c0 RDI: 0000000000000008
[  419.887711][    C1] RBP: 00007f177e610d69 R08: 0000000000000000 R09: 0000000000000000
[  419.887717][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  419.887723][    C1] R13: 0000000000000000 R14: 00007f177e7b6080 R15: 00007ffdf1302658
[  419.887741][    C1]  </TASK>
[  419.888517][    C1] Kernel Offset: disabled

VM DIAGNOSIS:
16:50:15  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81680ea6 RBX=0000000000000000 RCX=ffffffff8de95280 RDX=0000000000010000
RSI=0000000000000008 RDI=ffffffff92a52460 RBP=ffffc90000007fe0 RSP=ffffc90000007f60
R8 =ffffffff92a52467 R9 =1ffffffff254a48c R10=dffffc0000000000 R11=fffffbfff254a48d
R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff81680ea7 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055a7ba450e08 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007fea7b986d00
XMM02=ffffffff00000015 e003000800000000 XMM03=0000000000000000 0000000001ffffff
XMM04=0000000000000000 0000000000000011 XMM05=0000000000000000 000000000001df8a
XMM06=ff0403c003200800 03b8030000000017 XMM07=030fffff00000000 0403a00310080003
XMM08=9803010800039003 3a08000300000016 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000005 RBX=0000000000000005 RCX=0000000000000000 RDX=00000000000003f9
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f9 RSP=ffffc900001df670
R8 =ffff888020ce8237 R9 =1ffff1100419d046 R10=dffffc0000000000 R11=ffffffff85472aa0
R12=dffffc0000000000 R13=dffffc0000000000 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff85472b1c RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f177f3b46c0 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f177f393d58 CR3=0000000119f72000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f2741186478 00007f2741186450 XMM03=00007f2741186488 00007f2741186480
XMM04=00007f2741ced100 00007f2741186440 XMM05=00007f2741186458 00007f27411864a0
XMM06=00007f2741186498 00007f2741186490 XMM07=00007f2741186488 00007f2741186480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f2741011ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
