last executing test programs:

16.762058913s ago: executing program 1 (id=1860):
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0xb)

16.571692015s ago: executing program 1 (id=1867):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x9, 0x3, 0x4c}, 0x48)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000600)={r0, r1}, 0xc)

16.52155509s ago: executing program 1 (id=1868):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0, 0x8}, 0x10000, 0xc8, 0xfff, 0x0, 0x0, 0x0, 0x400}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
socket$kcm(0x11, 0x200000000000002, 0x300)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000008100000081"], 0x48)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x55)

16.521225475s ago: executing program 1 (id=1870):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8990, &(0x7f0000000900)={'bond0\x00', @random="0600002000"})

16.462180367s ago: executing program 1 (id=1871):
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r1}, 0x18)
socketpair(0x3, 0x1, 0x8, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x3, 0x0, 0x100000001, 0x82e0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x3}, 0x2018, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8982, &(0x7f0000000080))

16.388531514s ago: executing program 1 (id=1875):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$kcm(0x10, 0x2, 0x0)
recvmsg$kcm(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40002100)
sendmsg$kcm(r3, 0x0, 0x0)
sendmsg$inet(r3, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0xb}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x60ff, 0x8cffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r6}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r7}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c)

16.243314172s ago: executing program 2 (id=1883):
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xa, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007ffffffff5000000b8"], 0xd0}, 0x480c4)

16.152237599s ago: executing program 2 (id=1885):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000640)=r0, 0x4)
sendmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc000090)

16.102204598s ago: executing program 2 (id=1886):
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000028000100c21400002fbd6c193d970000", 0x14}], 0x1}, 0x0)

16.041874731s ago: executing program 0 (id=1888):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)

16.041529289s ago: executing program 0 (id=1889):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020206b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000fcffff850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x18)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x800, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50)

15.971199307s ago: executing program 2 (id=1890):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)

15.971066046s ago: executing program 0 (id=1891):
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x100}], 0x10}, 0xfc00)

15.970951402s ago: executing program 2 (id=1892):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095000000d3031a006dd015836e4d27f5182b60bbb7c19e21eec859fe68f9428ac407630eac8eb682f5b2d86b4abf9e63ad263fec7db9338ca9eebf2218c8b9ca64bcdcdaa06fc4c7aa217fcecd9443c54143bde8ddcbc3b8ac619930206d8d0881af823d6d18c66f021c20b55013d7fb6ea7013c062d13176d71d7dad98eb976ed679fa639"], &(0x7f0000000000)='GPL\x00', 0x4, 0x29, &(0x7f0000000140)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x23, 0x0, 0x0, 0xff87}, 0x23)

15.970891193s ago: executing program 0 (id=1893):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000140)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b63d25a80648c2594", 0xf}, {&(0x7f0000000580)="3f192725e7", 0x5}], 0x2}, 0x0)

15.970701709s ago: executing program 2 (id=1894):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000940)=""/4, 0x1a, 0x4, 0x1, 0xab, 0x10000}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x66}, @jmp={0x5, 0x0, 0xd, 0x8, 0x4, 0xfffffffffffffffc, 0x10}]}, &(0x7f0000000240)='syzkaller\x00', 0x5f3c, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000009c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000a40)={0x0, 0x2, 0xcc72, 0x7f}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x70000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x7}, 0x9002, 0xc8, 0xfffffffc, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce220000000020010010000000000000ffff7fc5f603ff65ec5deb000071673fbcee4ec1539c2b6ba7"], 0xfdef)
r4 = getpid()
r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0xc2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x9, 0x2, 0x4, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20)
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x40010040)
r10 = socket$kcm(0x2c, 0x3, 0x0)
setsockopt$sock_attach_bpf(r10, 0x11b, 0x2, &(0x7f0000000900)=r9, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000c6000100250000008510000001000000950000000000000018400008ffffffff0000000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xf2, &(0x7f0000000140)=""/242, 0x0, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x836}, 0x94)

15.902585093s ago: executing program 0 (id=1895):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x4, 0xa, 0x40}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

15.902459639s ago: executing program 0 (id=1896):
r0 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x7ffcb000, &(0x7f0000000300)=[{&(0x7f00000000c0)='6', 0x18020}], 0x8}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x3)

1.069141162s ago: executing program 32 (id=1875):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$kcm(0x10, 0x2, 0x0)
recvmsg$kcm(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40002100)
sendmsg$kcm(r3, 0x0, 0x0)
sendmsg$inet(r3, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0xb}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x60ff, 0x8cffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r6}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r7}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c)

32.616081ms ago: executing program 33 (id=1896):
r0 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x7ffcb000, &(0x7f0000000300)=[{&(0x7f00000000c0)='6', 0x18020}], 0x8}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x3)

0s ago: executing program 34 (id=1894):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000940)=""/4, 0x1a, 0x4, 0x1, 0xab, 0x10000}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x66}, @jmp={0x5, 0x0, 0xd, 0x8, 0x4, 0xfffffffffffffffc, 0x10}]}, &(0x7f0000000240)='syzkaller\x00', 0x5f3c, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000009c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000a40)={0x0, 0x2, 0xcc72, 0x7f}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x70000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x7}, 0x9002, 0xc8, 0xfffffffc, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce220000000020010010000000000000ffff7fc5f603ff65ec5deb000071673fbcee4ec1539c2b6ba7"], 0xfdef)
r4 = getpid()
r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0xc2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x9, 0x2, 0x4, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20)
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x40010040)
r10 = socket$kcm(0x2c, 0x3, 0x0)
setsockopt$sock_attach_bpf(r10, 0x11b, 0x2, &(0x7f0000000900)=r9, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000c6000100250000008510000001000000950000000000000018400008ffffffff0000000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xf2, &(0x7f0000000140)=""/242, 0x0, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x836}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:13190' (ED25519) to the list of known hosts.
syzkaller login: [   41.629012][ T5798] cgroup: Unknown subsys name 'net'
[   41.757929][ T5798] cgroup: Unknown subsys name 'cpuset'
[   41.761405][ T5798] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   43.033923][ T5798] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   46.124885][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   46.127933][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   46.130528][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   46.133505][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   46.136266][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   46.165297][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   46.168168][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   46.170828][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   46.174061][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   46.177309][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   46.189777][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   46.192820][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   46.195944][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   46.207569][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   46.212551][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.383842][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   46.432467][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   46.454554][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.457581][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.459881][ T5828] bridge_slave_0: entered allmulticast mode
[   46.462505][ T5828] bridge_slave_0: entered promiscuous mode
[   46.485801][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.488077][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.490306][ T5828] bridge_slave_1: entered allmulticast mode
[   46.492939][ T5828] bridge_slave_1: entered promiscuous mode
[   46.549313][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.575766][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.602254][ T5828] team0: Port device team_slave_0 added
[   46.604318][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.606821][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.609233][ T5832] bridge_slave_0: entered allmulticast mode
[   46.611895][ T5832] bridge_slave_0: entered promiscuous mode
[   46.616513][ T5828] team0: Port device team_slave_1 added
[   46.618648][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.621150][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.623834][ T5832] bridge_slave_1: entered allmulticast mode
[   46.626745][ T5832] bridge_slave_1: entered promiscuous mode
[   46.629379][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   46.667746][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.671608][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.673812][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.682106][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.692310][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.694483][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.702509][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.707954][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.776657][ T5832] team0: Port device team_slave_0 added
[   46.788657][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.791012][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.793368][ T5836] bridge_slave_0: entered allmulticast mode
[   46.796684][ T5836] bridge_slave_0: entered promiscuous mode
[   46.800673][ T5832] team0: Port device team_slave_1 added
[   46.806300][ T5828] hsr_slave_0: entered promiscuous mode
[   46.808690][ T5828] hsr_slave_1: entered promiscuous mode
[   46.811232][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.813585][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.816454][ T5836] bridge_slave_1: entered allmulticast mode
[   46.819151][ T5836] bridge_slave_1: entered promiscuous mode
[   46.850997][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.853622][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.862996][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.878910][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.881264][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.890358][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.903816][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.919911][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.954467][ T5836] team0: Port device team_slave_0 added
[   46.958182][ T5836] team0: Port device team_slave_1 added
[   46.989701][ T5832] hsr_slave_0: entered promiscuous mode
[   46.992419][ T5832] hsr_slave_1: entered promiscuous mode
[   46.994582][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.997499][ T5832] Cannot create hsr debugfs directory
[   47.010679][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.012945][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.021162][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.028486][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.030689][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.039654][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.116377][ T5836] hsr_slave_0: entered promiscuous mode
[   47.119041][ T5836] hsr_slave_1: entered promiscuous mode
[   47.121209][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.123660][ T5836] Cannot create hsr debugfs directory
[   47.196890][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   47.207044][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   47.221032][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   47.231763][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   47.271492][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   47.280496][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.296813][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.306228][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   47.312637][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.315074][ T5828] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.317958][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.320275][ T5828] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.340857][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   47.346329][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   47.353858][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   47.360515][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.378497][ T1025] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.381843][ T1025] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.436909][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.462519][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   47.473311][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.482108][ T1025] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.484523][ T1025] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.492094][ T1025] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.494761][ T1025] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.511117][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   47.523754][ T1025] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.526117][ T1025] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.534838][ T1025] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.537283][ T1025] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.547657][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.569760][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   47.581857][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.584156][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.603093][ T5832] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   47.609813][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   47.630243][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.632625][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.681013][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.732004][ T5828] veth0_vlan: entered promiscuous mode
[   47.738248][ T5828] veth1_vlan: entered promiscuous mode
[   47.763791][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.772781][ T5828] veth0_macvtap: entered promiscuous mode
[   47.781920][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.789114][ T5828] veth1_macvtap: entered promiscuous mode
[   47.806369][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.812056][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.821748][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.824518][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.828358][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.831099][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.838764][ T5832] veth0_vlan: entered promiscuous mode
[   47.854012][ T5832] veth1_vlan: entered promiscuous mode
[   47.879074][ T5836] veth0_vlan: entered promiscuous mode
[   47.893409][ T5836] veth1_vlan: entered promiscuous mode
[   47.901710][ T1025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.904730][ T1025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.909683][ T5832] veth0_macvtap: entered promiscuous mode
[   47.916364][ T5832] veth1_macvtap: entered promiscuous mode
[   47.944092][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.947352][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.951468][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.957853][ T5836] veth0_macvtap: entered promiscuous mode
[   47.961651][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.969612][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.972304][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.975423][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.978151][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.983265][ T5836] veth1_macvtap: entered promiscuous mode
[   47.999255][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   48.006145][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.010200][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.013877][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.018562][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.022616][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.026805][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.091794][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.099024][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.122835][ T5897] netlink: 'syz.2.5': attribute type 39 has an invalid length.
[   48.127790][ T1025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.130623][ T1025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.165917][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.172016][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.176736][   T55] Bluetooth: hci0: command tx timeout
[   48.176775][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.181871][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.252671][ T5900] netlink: 'syz.0.1': attribute type 4 has an invalid length.
[   48.256072][   T55] Bluetooth: hci1: command tx timeout
[   48.256981][ T5831] Bluetooth: hci2: command tx timeout
[   49.062337][ T5935] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   49.144722][ T5831] Bluetooth: hci1: SCO packet too small
[   49.429418][ T5961] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.34'.
[   49.542321][ T5967] netlink: 'syz.0.37': attribute type 49 has an invalid length.
[   49.681482][ T5976] Illegal XDP return value 342351872 on prog  (id 23) dev N/A, expect packet loss!
[   50.088644][    C0] hrtimer: interrupt took 31206 ns
[   50.298764][ T5831] Bluetooth: hci0: command tx timeout
[   50.335550][ T5831] Bluetooth: hci2: command tx timeout
[   50.353502][ T5831] Bluetooth: hci1: command tx timeout
[   50.884504][ T6014] warning: `syz.1.57' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   50.973015][ T6020] netlink: 'syz.2.60': attribute type 4 has an invalid length.
[   50.975927][ T6020] netlink: 140 bytes leftover after parsing attributes in process `syz.2.60'.
[   51.151091][ T6032] netlink: 3 bytes leftover after parsing attributes in process `syz.2.66'.
[   51.518736][ T6037] bridge0: port 3(ip6gretap0) entered blocking state
[   51.521276][ T6037] bridge0: port 3(ip6gretap0) entered disabled state
[   51.523557][ T6037] ip6gretap0: entered allmulticast mode
[   51.526446][ T6037] ip6gretap0: entered promiscuous mode
[   51.528708][ T6037] bridge0: port 3(ip6gretap0) entered blocking state
[   51.530923][ T6037] bridge0: port 3(ip6gretap0) entered forwarding state
[   51.624575][ T6040] Zero length message leads to an empty skb
[   51.732877][ T6042] syzkaller0: entered promiscuous mode
[   51.734866][ T6042] syzkaller0: entered allmulticast mode
[   52.337006][ T5831] Bluetooth: hci0: command tx timeout
[   52.392901][ T6050] netlink: 132 bytes leftover after parsing attributes in process `syz.0.73'.
[   52.416685][ T5831] Bluetooth: hci1: command tx timeout
[   52.416706][   T55] Bluetooth: hci2: command tx timeout
[   52.441829][ T6054] syzkaller0: entered promiscuous mode
[   52.444280][ T6054] syzkaller0: entered allmulticast mode
[   52.451574][ T6058] lo: entered allmulticast mode
[   52.993013][ T6058] lo: entered promiscuous mode
[   52.994612][ T6058] lo: left allmulticast mode
[   54.425097][   T55] Bluetooth: hci0: command tx timeout
[   54.498096][   T55] Bluetooth: hci2: command tx timeout
[   54.498231][ T5831] Bluetooth: hci1: command tx timeout
[   57.202474][ T6219] netlink: 40 bytes leftover after parsing attributes in process `syz.0.150'.
[   57.214378][ T6219] netlink: 'syz.0.150': attribute type 4 has an invalid length.
[   57.221006][ T6219] netlink: 1 bytes leftover after parsing attributes in process `syz.0.150'.
[   57.491964][ T6234] netlink: 'syz.2.156': attribute type 10 has an invalid length.
[   57.496542][ T6234] netlink: 55 bytes leftover after parsing attributes in process `syz.2.156'.
[   60.480605][ T6342] netlink: 'syz.0.204': attribute type 21 has an invalid length.
[   60.482979][ T6342] netlink: 156 bytes leftover after parsing attributes in process `syz.0.204'.
[   60.763507][ T6361] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.213'.
[   60.847956][ T6365] netlink: 132 bytes leftover after parsing attributes in process `syz.1.215'.
[   60.899874][ T5831] Bluetooth: hci0: unexpected subevent 0x1a length: 150 > 6
[   60.979733][ T6380] netlink: 'syz.2.223': attribute type 2 has an invalid length.
[   60.982560][ T6380] netlink: 137592 bytes leftover after parsing attributes in process `syz.2.223'.
[   61.021996][ T6384] netlink: 'syz.1.225': attribute type 10 has an invalid length.
[   61.024521][ T6384] netlink: 55 bytes leftover after parsing attributes in process `syz.1.225'.
[   62.641381][ T6488] syz.2.270 (6488) used obsolete PPPIOCDETACH ioctl
[   63.068395][ T6513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.282'.
[   64.412609][ T6545] netlink: 'syz.0.297': attribute type 6 has an invalid length.
[   64.415661][ T6545] netlink: 164 bytes leftover after parsing attributes in process `syz.0.297'.
[   65.324401][ T6583] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.314'.
[   65.567840][ T6592] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.318'.
[   66.426483][ T6669] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.355'.
[   66.429625][ T6669] netlink: get zone limit has 8 unknown bytes
[   66.586701][ T6677] netlink: 'syz.0.358': attribute type 11 has an invalid length.
[   66.589298][ T6677] netlink: 149476 bytes leftover after parsing attributes in process `syz.0.358'.
[   66.620885][ T6677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   66.993577][ T6695] syz.0.366 uses obsolete (PF_INET,SOCK_PACKET)
[   67.377997][ T6718] netlink: 'syz.2.378': attribute type 46 has an invalid length.
[   67.437251][ T6723] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.380'.
[   67.707519][ T6743] netlink: 'syz.2.390': attribute type 16 has an invalid length.
[   67.710205][ T6743] netlink: 156 bytes leftover after parsing attributes in process `syz.2.390'.
[   67.794175][ T6748] sit0: entered allmulticast mode
[   67.885781][ T6758] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.396'.
[   67.961001][ T6764] netlink: 830 bytes leftover after parsing attributes in process `syz.2.399'.
[   68.211567][ T6787] netlink: 'syz.0.410': attribute type 39 has an invalid length.
[   68.217927][ T6787] veth0_macvtap: left promiscuous mode
[   68.397496][ T6803] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.417'.
[   69.211423][ T6809] netlink: 'syz.0.420': attribute type 10 has an invalid length.
[   69.381583][ T6821] netlink: 132 bytes leftover after parsing attributes in process `syz.0.425'.
[   69.648630][ T6842] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.435'.
[   69.651715][ T6842] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   70.073620][ T6858] netlink: 'syz.1.443': attribute type 1 has an invalid length.
[   70.078683][ T6858] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.443'.
[   70.231827][ T6872] netlink: 'syz.1.449': attribute type 21 has an invalid length.
[   70.333429][ T6882] netlink: 'syz.1.454': attribute type 3 has an invalid length.
[   70.336132][ T6882] netlink: 'syz.1.454': attribute type 1 has an invalid length.
[   70.338630][ T6882] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.454'.
[   70.517169][ T6892] netlink: 60 bytes leftover after parsing attributes in process `syz.1.459'.
[   70.571776][ T6895] netlink: 'syz.0.460': attribute type 10 has an invalid length.
[   70.587886][ T6895] bridge0: port 4(netdevsim0) entered blocking state
[   70.590136][ T6895] bridge0: port 4(netdevsim0) entered disabled state
[   70.593032][ T6895] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   70.597673][ T6895] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   70.609833][ T6897] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.461'.
[   70.823310][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   70.826406][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.042704][ T6922] netlink: 'syz.0.472': attribute type 10 has an invalid length.
[   71.046163][ T6922] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[   71.050399][ T6922] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[   71.063353][ T6922] bridge0: port 4(netdevsim0) entered disabled state
[   71.236598][ T6922] syz.0.472 (6922) used greatest stack depth: 18232 bytes left
[   71.972746][ T6942] netlink: 'syz.1.481': attribute type 10 has an invalid length.
[   71.979951][ T6942] veth1_vlan: entered allmulticast mode
[   72.008154][ T6942] team0: Device veth1_vlan failed to register rx_handler
[   72.192833][ T5831] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[   72.204643][ T6963] netlink: 'syz.1.489': attribute type 21 has an invalid length.
[   74.255679][ T5831] Bluetooth: hci0: command tx timeout
[   74.497811][ T7012] netlink: 'syz.2.510': attribute type 29 has an invalid length.
[   74.501666][ T7012] netlink: 'syz.2.510': attribute type 29 has an invalid length.
[   74.707535][ T7029] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.518'.
[   78.064905][ T7105] netlink: 132 bytes leftover after parsing attributes in process `syz.0.552'.
[   78.123710][ T7107] validate_nla: 1 callbacks suppressed
[   78.123720][ T7107] netlink: 'syz.1.553': attribute type 2 has an invalid length.
[   78.128311][ T7107] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.553'.
[   78.597724][ T7145] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   78.604083][ T7144] netlink: 128 bytes leftover after parsing attributes in process `syz.1.571'.
[   78.615476][ T7144] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   78.719978][ T7144] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   79.204968][ T7181] netlink: 'syz.2.588': attribute type 2 has an invalid length.
[   79.209604][ T7181] netlink: 137592 bytes leftover after parsing attributes in process `syz.2.588'.
[   79.295901][ T7184] netlink: 152 bytes leftover after parsing attributes in process `syz.1.589'.
[   79.299919][ T7184] netlink: 6 bytes leftover after parsing attributes in process `syz.1.589'.
[   79.339962][ T7186] netlink: 5 bytes leftover after parsing attributes in process `syz.1.590'.
[   79.702953][ T7208] netlink: 'syz.2.599': attribute type 25 has an invalid length.
[   80.996917][ T7274] netlink: 'syz.1.630': attribute type 49 has an invalid length.
[   81.070887][   T47] cfg80211: failed to load regulatory.db
[   81.300539][ T7308] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.647'.
[   81.303579][ T7308] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   81.419273][ T7315] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.651'.
[   82.906398][ T7372] netlink: 'syz.0.672': attribute type 21 has an invalid length.
[   82.950021][ T7378] netlink: 'syz.0.675': attribute type 1 has an invalid length.
[   83.111204][ T5831] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8
[   83.908526][ T7410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.690'.
[   84.012262][ T7424] netlink: 'syz.0.696': attribute type 39 has an invalid length.
[   84.526480][ T7451] Dead loop on virtual device ip6_vti0, fix it urgently!
[   85.026534][ T7470] netlink: 132 bytes leftover after parsing attributes in process `syz.2.718'.
[   85.204776][ T7478] netlink: 'syz.0.720': attribute type 10 has an invalid length.
[   85.217144][ T7478] bond0: (slave bond_slave_0): Releasing backup interface
[   86.211187][ T7520] netlink: 'syz.1.739': attribute type 1 has an invalid length.
[   86.213806][ T7520] netlink: 17 bytes leftover after parsing attributes in process `syz.1.739'.
[   86.282653][ T7524] netlink: 'syz.1.741': attribute type 4 has an invalid length.
[   86.563234][ T7534] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.746'.
[   86.584114][ T7534] netlink: zone id is out of range
[   86.586789][ T7534] netlink: zone id is out of range
[   86.588845][ T7534] netlink: zone id is out of range
[   86.590775][ T7534] netlink: get zone limit has 8 unknown bytes
[   87.091001][ T7568] netlink: 'syz.0.763': attribute type 14 has an invalid length.
[   87.093597][ T7568] netlink: 164 bytes leftover after parsing attributes in process `syz.0.763'.
[   87.159475][ T7572] netlink: 10 bytes leftover after parsing attributes in process `syz.0.765'.
[   87.712302][ T7597] netlink: 132 bytes leftover after parsing attributes in process `syz.0.774'.
[   87.926166][ T7608] netlink: 44 bytes leftover after parsing attributes in process `syz.0.778'.
[   87.929896][ T7606] netlink: 44 bytes leftover after parsing attributes in process `syz.0.778'.
[   87.952524][ T7606] netlink: 44 bytes leftover after parsing attributes in process `syz.0.778'.
[   88.107370][ T7619] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.784'.
[   88.322173][ T7634] netlink: 'syz.0.791': attribute type 10 has an invalid length.
[   88.340866][ T7634] team0: Device ipvlan1 failed to register rx_handler
[   89.134578][ T7644] netlink: 10 bytes leftover after parsing attributes in process `syz.1.793'.
[   89.939128][ T7701] @0: renamed from bond_slave_0 (while UP)
[   90.740134][ T7730] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   90.742576][ T7730] batman_adv: batadv0: Removing interface: batadv_slave_0
[   90.749732][ T7730] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   90.752230][ T7730] batman_adv: batadv0: Removing interface: batadv_slave_1
[   90.868034][ T7737] netlink: 5 bytes leftover after parsing attributes in process `syz.1.839'.
[   91.726076][ T7802] raw_sendmsg: syz.0.871 forgot to set AF_INET. Fix it!
[   92.184782][ T7831] netlink: 'syz.0.883': attribute type 1 has an invalid length.
[   92.188945][ T7831] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.883'.
[   92.285773][ T7839] netlink: 10 bytes leftover after parsing attributes in process `syz.0.886'.
[   92.372089][ T7846] netlink: 132 bytes leftover after parsing attributes in process `syz.2.890'.
[   92.493128][ T7855] netlink: 'syz.1.894': attribute type 7 has an invalid length.
[   92.574714][ T7863] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.898'.
[   92.875659][ T7871] netlink: 'syz.1.901': attribute type 17 has an invalid length.
[   92.886892][    C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   93.246375][ T7883] netlink: 'syz.0.907': attribute type 4 has an invalid length.
[   93.249115][ T7883] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.907'.
[   93.323910][ T7887] netlink: 'syz.1.909': attribute type 10 has an invalid length.
[   95.032679][ T7964] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode
[   95.035467][ T7964] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[   95.099753][ T7971] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.947'.
[   95.356472][ T8000] netlink: 'syz.1.962': attribute type 21 has an invalid length.
[   95.359075][ T8000] netlink: 128 bytes leftover after parsing attributes in process `syz.1.962'.
[   95.366365][ T8000] netlink: 'syz.1.962': attribute type 5 has an invalid length.
[   95.369139][ T8000] netlink: 'syz.1.962': attribute type 6 has an invalid length.
[   95.371672][ T8000] netlink: 3 bytes leftover after parsing attributes in process `syz.1.962'.
[   95.863751][ T8032] netlink: 132 bytes leftover after parsing attributes in process `syz.0.977'.
[   96.022910][ T8038] netlink: 60 bytes leftover after parsing attributes in process `syz.0.979'.
[   96.723865][ T8082] netlink: 'syz.2.1001': attribute type 10 has an invalid length.
[   96.734328][ T8082] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[   97.571923][ T8151] __nla_validate_parse: 5 callbacks suppressed
[   97.571934][ T8151] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1034'.
[   98.172533][ T8195] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1055'.
[   98.176707][ T8198] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.1056'.
[   98.179927][ T8198] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.1056'.
[   98.256124][ T8206] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1060'.
[   98.310792][ T8214] netlink: 'syz.1.1064': attribute type 21 has an invalid length.
[   98.313439][ T8214] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1064'.
[   98.437032][ T8224] netlink: 'syz.1.1069': attribute type 10 has an invalid length.
[   98.459463][ T8224] team0: Device ipvlan1 failed to register rx_handler
[   98.807500][ T8234] netlink: 'syz.1.1073': attribute type 5 has an invalid length.
[   99.219919][ T8255] netlink: 'syz.2.1083': attribute type 22 has an invalid length.
[   99.222658][ T8255] netlink: 'syz.2.1083': attribute type 1 has an invalid length.
[   99.226391][ T8255] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.1083'.
[   99.619465][ T8263] netlink: 'syz.1.1087': attribute type 21 has an invalid length.
[   99.804059][ T8272] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1091'.
[  101.837346][ T8365] netlink: 'syz.1.1133': attribute type 21 has an invalid length.
[  101.840009][ T8365] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1133'.
[  101.924749][ T8369] : port 1(vlan0) entered blocking state
[  101.930584][ T8369] : port 1(vlan0) entered disabled state
[  101.932994][ T8369] vlan0: entered allmulticast mode
[  101.934763][ T8369] veth0_vlan: entered allmulticast mode
[  101.941823][ T8369] vlan0: entered promiscuous mode
[  102.019115][ T8386] sock: sock_set_timeout: `syz.1.1143' (pid 8386) tries to set negative timeout
[  102.467472][ T8414] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1156'.
[  102.694788][ T8424] netlink: 'syz.0.1160': attribute type 2 has an invalid length.
[  102.698505][ T8424] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1160'.
[  102.854579][ T8442] netlink: 'syz.2.1170': attribute type 39 has an invalid length.
[  103.689100][ T8507] netlink: 'syz.2.1200': attribute type 4 has an invalid length.
[  103.691673][ T8507] netlink: 'syz.2.1200': attribute type 3 has an invalid length.
[  103.694216][ T8507] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1200'.
[  103.743247][ T8516] netlink: 'syz.2.1204': attribute type 21 has an invalid length.
[  103.747187][ T8516] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1204'.
[  103.750135][ T8516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1204'.
[  103.859777][ T8521] netlink: 'syz.2.1206': attribute type 6 has an invalid length.
[  103.863196][ T8521] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1206'.
[  104.179879][ T8538] netlink: 'syz.0.1212': attribute type 29 has an invalid length.
[  104.183831][ T8538] netlink: 'syz.0.1212': attribute type 29 has an invalid length.
[  104.884849][ T8578] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1232'.
[  106.307188][ T8632] delete_channel: no stack
[  107.521654][ T8672] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f
[  107.608014][ T8684] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1282'.
[  107.750763][ T8700] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1289'.
[  108.738204][ T8722] sctp: [Deprecated]: syz.1.1299 (pid 8722) Use of int in max_burst socket option deprecated.
[  108.738204][ T8722] Use struct sctp_assoc_value instead
[  108.841119][ T8732] netlink: 'syz.0.1304': attribute type 28 has an invalid length.
[  108.843703][ T8732] netlink: 'syz.0.1304': attribute type 29 has an invalid length.
[  108.847075][ T8732] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1304'.
[  109.271004][ T8754] netlink: 'syz.2.1313': attribute type 12 has an invalid length.
[  109.273678][ T8754] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1313'.
[  109.519228][ T8764] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1318'.
[  110.554940][ T8807] netlink: 'syz.0.1337': attribute type 39 has an invalid length.
[  111.412447][ T8862] netlink: 'syz.0.1364': attribute type 2 has an invalid length.
[  111.415397][ T8862] netlink: 137592 bytes leftover after parsing attributes in process `syz.0.1364'.
[  111.677331][ T8872] syz.0.1368: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  111.684739][ T8872] CPU: 1 UID: 0 PID: 8872 Comm: syz.0.1368 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  111.684752][ T8872] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  111.684757][ T8872] Call Trace:
[  111.684761][ T8872]  <TASK>
[  111.684764][ T8872]  dump_stack_lvl+0x189/0x250
[  111.684780][ T8872]  ? __pfx_dump_stack_lvl+0x10/0x10
[  111.684791][ T8872]  ? __pfx__printk+0x10/0x10
[  111.684803][ T8872]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  111.684815][ T8872]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  111.684863][ T8872]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  111.684875][ T8872]  warn_alloc+0x214/0x310
[  111.684886][ T8872]  ? stack_depot_save_flags+0x445/0x900
[  111.684900][ T8872]  ? __pfx_warn_alloc+0x10/0x10
[  111.684910][ T8872]  ? kasan_save_track+0x4f/0x80
[  111.684922][ T8872]  ? xskq_create+0x56/0x170
[  111.684932][ T8872]  ? xsk_init_queue+0xb0/0x110
[  111.684943][ T8872]  ? xsk_setsockopt+0x4de/0x710
[  111.684976][ T8872]  ? do_sock_setsockopt+0x17c/0x1b0
[  111.684988][ T8872]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  111.684999][ T8872]  ? do_syscall_64+0xfa/0x3b0
[  111.685011][ T8872]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.685026][ T8872]  __vmalloc_node_range_noprof+0x125/0x12f0
[  111.685058][ T8872]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  111.685104][ T8872]  ? __kasan_kmalloc+0x93/0xb0
[  111.685120][ T8872]  vmalloc_user_noprof+0xad/0xf0
[  111.685133][ T8872]  ? xskq_create+0xbf/0x170
[  111.685143][ T8872]  xskq_create+0xbf/0x170
[  111.685155][ T8872]  xsk_init_queue+0xb0/0x110
[  111.685166][ T8872]  xsk_setsockopt+0x4de/0x710
[  111.685176][ T8872]  ? __pfx_xsk_setsockopt+0x10/0x10
[  111.685187][ T8872]  ? __fget_files+0x2a/0x420
[  111.685196][ T8872]  ? aa_sock_opt_perm+0x74/0x110
[  111.685207][ T8872]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  111.685216][ T8872]  ? __pfx_xsk_setsockopt+0x10/0x10
[  111.685226][ T8872]  do_sock_setsockopt+0x17c/0x1b0
[  111.685236][ T8872]  __x64_sys_setsockopt+0x13f/0x1b0
[  111.685247][ T8872]  do_syscall_64+0xfa/0x3b0
[  111.685256][ T8872]  ? lockdep_hardirqs_on+0x9c/0x150
[  111.685265][ T8872]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.685272][ T8872]  ? exc_page_fault+0x9f/0xf0
[  111.685282][ T8872]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.685290][ T8872] RIP: 0033:0x7f6b95d8eb69
[  111.685297][ T8872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  111.685303][ T8872] RSP: 002b:00007f6b96b41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  111.685312][ T8872] RAX: ffffffffffffffda RBX: 00007f6b95fb5fa0 RCX: 00007f6b95d8eb69
[  111.685317][ T8872] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007
[  111.685321][ T8872] RBP: 00007f6b95e11df1 R08: 0000000000000004 R09: 0000000000000000
[  111.685326][ T8872] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  111.685330][ T8872] R13: 0000000000000000 R14: 00007f6b95fb5fa0 R15: 00007ffc68282f68
[  111.685343][ T8872]  </TASK>
[  111.805315][ T8872] Mem-Info:
[  111.806751][ T8872] active_anon:5665 inactive_anon:0 isolated_anon:0
[  111.806751][ T8872]  active_file:11057 inactive_file:38230 isolated_file:0
[  111.806751][ T8872]  unevictable:1768 dirty:44 writeback:0
[  111.806751][ T8872]  slab_reclaimable:9491 slab_unreclaimable:53408
[  111.806751][ T8872]  mapped:18066 shmem:2442 pagetables:1030
[  111.806751][ T8872]  sec_pagetables:0 bounce:0
[  111.806751][ T8872]  kernel_misc_reclaimable:0
[  111.806751][ T8872]  free:284446 free_pcp:23789 free_cma:0
[  111.822807][ T8872] Node 0 active_anon:12992kB inactive_anon:0kB active_file:34272kB inactive_file:23152kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:37068kB dirty:116kB writeback:0kB shmem:4852kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6776kB pagetables:2212kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  111.834679][ T8872] Node 1 active_anon:9668kB inactive_anon:0kB active_file:9956kB inactive_file:129768kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35196kB dirty:60kB writeback:0kB shmem:4916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4400kB pagetables:1908kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  111.846116][ T8872] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  111.856487][ T8872] lowmem_reserve[]: 0 812 812 812 812
[  111.858677][ T8872] Node 0 DMA32 free:341068kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12992kB inactive_anon:0kB active_file:34272kB inactive_file:23152kB unevictable:3536kB writepending:116kB present:1556484kB managed:831912kB mlocked:0kB bounce:0kB free_pcp:54172kB local_pcp:17868kB free_cma:0kB
[  111.870491][ T8872] lowmem_reserve[]: 0 0 0 0 0
[  111.872713][ T8872] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  111.883270][ T8872] lowmem_reserve[]: 0 0 854 854 854
[  111.885368][ T8872] Node 1 Normal free:325668kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9532kB inactive_anon:0kB active_file:9956kB inactive_file:129768kB unevictable:3536kB writepending:60kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:36912kB local_pcp:18128kB free_cma:0kB
[  111.896656][ T8872] lowmem_reserve[]: 0 0 0 0 0
[  111.898584][ T8872] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  111.903300][ T8872] Node 0 DMA32: 2255*4kB (UME) 947*8kB (UME) 390*16kB (UME) 471*32kB (UM) 391*64kB (UME) 130*128kB (UME) 97*256kB (UME) 30*512kB (UME) 9*1024kB (UM) 13*2048kB (UME) 45*4096kB (UM) = 339924kB
[  111.911548][ T8872] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  111.918265][ T8872] Node 1 Normal: 192*4kB (ME) 239*8kB (ME) 381*16kB (UME) 100*32kB (UME) 243*64kB (UM) 89*128kB (UM) 34*256kB (UM) 19*512kB (UME) 18*1024kB (UM) 10*2048kB (UME) 56*4096kB (UM) = 325640kB
[  111.925217][ T8872] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  111.928504][ T8872] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  111.931851][ T8872] 51729 total pagecache pages
[  111.933515][ T8872] 0 pages in swap cache
[  111.941556][ T8872] Free swap  = 124996kB
[  111.944493][ T8872] Total swap = 124996kB
[  111.947249][ T8872] 786301 pages RAM
[  111.948649][ T8872] 0 pages HighMem/MovableOnly
[  111.953481][ T8872] 241075 pages reserved
[  111.959201][ T8872] 0 pages cma reserved
[  112.549518][ T8912] lo: entered allmulticast mode
[  112.553448][ T8912] lo: entered promiscuous mode
[  112.556120][ T8912] lo: left allmulticast mode
[  112.671000][ T8918] netlink: 'syz.2.1390': attribute type 10 has an invalid length.
[  112.673974][ T8918] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1390'.
[  113.211433][ T8927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1394'.
[  113.354523][ T8929] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  114.075165][ T8952] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1403'.
[  114.116745][ T8953] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1401'.
[  114.120884][ T8950] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1401'.
[  114.143077][ T8950] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1401'.
[  114.299555][ T8959] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1409'.
[  114.439928][ T8969] netlink: 'syz.2.1413': attribute type 10 has an invalid length.
[  114.448066][ T8969] 8021q: adding VLAN 0 to HW filter on device team0
[  114.451710][ T8969] bond0: (slave team0): Enslaving as an active interface with an up link
[  116.176886][ T9024] netlink: 'syz.1.1435': attribute type 1 has an invalid length.
[  116.180256][ T9024] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1435'.
[  117.816686][ T9079] TCP: TCP_TX_DELAY enabled
[  118.001568][ T9098] netlink: 'syz.1.1469': attribute type 10 has an invalid length.
[  118.014020][ T9098] batman_adv: batadv0: Adding interface: team0
[  118.031688][ T9098] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  118.040495][ T9098] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  118.044477][ T9107] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.1473'.
[  119.738778][ T9181] netlink: 'syz.0.1504': attribute type 21 has an invalid length.
[  119.741270][ T9181] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1504'.
[  119.979384][ T9208] netlink: 'syz.0.1517': attribute type 10 has an invalid length.
[  119.988945][ T9208] 8021q: adding VLAN 0 to HW filter on device team0
[  119.992995][ T9208] bond0: (slave team0): Enslaving as an active interface with an up link
[  120.377958][ T9227] netlink: 'syz.2.1525': attribute type 3 has an invalid length.
[  120.381181][ T9227] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1525'.
[  120.404536][ T9231] netlink: 'syz.2.1527': attribute type 13 has an invalid length.
[  120.603509][ T9255] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  121.546174][ T9279] C: renamed from team_slave_0 (while UP)
[  121.550331][ T9279] netlink: 'syz.0.1548': attribute type 1 has an invalid length.
[  121.553146][ T9279] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1548'.
[  121.559220][ T9279] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  122.667264][ T9318] netlink: 'syz.0.1565': attribute type 1 has an invalid length.
[  122.669903][ T9318] netlink: 'syz.0.1565': attribute type 4 has an invalid length.
[  122.672448][ T9318] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1565'.
[  122.752893][ T9326] netlink: 'syz.0.1569': attribute type 10 has an invalid length.
[  122.760983][ T9326] team0: Port device geneve1 added
[  122.892808][ T9336] netlink: 'syz.2.1574': attribute type 10 has an invalid length.
[  123.028642][ T9352] netlink: 'syz.2.1582': attribute type 29 has an invalid length.
[  123.103216][ T9359] team0: Device veth0_vlan failed to register rx_handler
[  123.406467][ T9359] syz.0.1586 (9359) used greatest stack depth: 17640 bytes left
[  123.589402][ T9384] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1596'.
[  123.962281][ T9403] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1605'.
[  124.162082][ T9416] dummy0: entered promiscuous mode
[  124.164067][ T9416] dummy0: entered allmulticast mode
[  124.439659][ T9430] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.1618'.
[  124.470108][ T9432] netlink: 198000 bytes leftover after parsing attributes in process `syz.0.1619'.
[  124.709889][ T9450] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1628'.
[  124.922509][ T9467] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1636'.
[  124.991038][ T9473] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1639'.
[  125.047493][ T9474] validate_nla: 8 callbacks suppressed
[  125.047502][ T9474] netlink: 'syz.1.1637': attribute type 10 has an invalid length.
[  125.051982][ T9474] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1637'.
[  125.064093][ T9474] team0: entered promiscuous mode
[  125.067360][ T9474] team_slave_0: entered promiscuous mode
[  125.069574][ T9474] team_slave_1: entered promiscuous mode
[  125.074469][ T9474] team0: entered allmulticast mode
[  125.080018][ T9474] team_slave_0: entered allmulticast mode
[  125.081979][ T9474] team_slave_1: entered allmulticast mode
[  125.086541][ T9474] 8021q: adding VLAN 0 to HW filter on device team0
[  125.089543][ T9474] batman_adv: batadv0: Interface activated: team0
[  125.092156][ T9474] batman_adv: batadv0: Interface deactivated: team0
[  125.094328][ T9474] batman_adv: batadv0: Removing interface: team0
[  125.106340][ T9474] bridge0: port 3(team0) entered blocking state
[  125.109754][ T9474] bridge0: port 3(team0) entered disabled state
[  126.117454][ T9515] netlink: 'syz.0.1658': attribute type 31 has an invalid length.
[  126.120372][ T9515] netlink: 'syz.0.1658': attribute type 1 has an invalid length.
[  126.123174][ T9515] bridge0: port 1(bridge_slave_0) entered learning state
[  126.433241][ T9541] pim6reg1: entered promiscuous mode
[  126.441742][ T9541] pim6reg1: entered allmulticast mode
[  127.642620][ T9587] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1691'.
[  127.654377][ T9587] netlink: zone id is out of range
[  127.656135][ T9587] netlink: zone id is out of range
[  127.657784][ T9587] netlink: zone id is out of range
[  127.660012][ T9587] netlink: zone id is out of range
[  127.661656][ T9587] netlink: zone id is out of range
[  127.663305][ T9587] netlink: zone id is out of range
[  127.665599][ T9587] netlink: zone id is out of range
[  127.667260][ T9587] netlink: zone id is out of range
[  127.668889][ T9587] netlink: zone id is out of range
[  127.670598][ T9587] netlink: zone id is out of range
[  128.064508][ T9614] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1704'.
[  128.112421][ T9621] netlink: 'syz.0.1707': attribute type 1 has an invalid length.
[  128.116414][ T9622] netlink: 'syz.2.1708': attribute type 21 has an invalid length.
[  128.119617][ T9621] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1707'.
[  128.151773][ T9626] netlink: 'syz.0.1710': attribute type 4 has an invalid length.
[  130.572239][ T9696] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.1742'.
[  130.823638][ T9694] netlink: 'syz.0.1741': attribute type 27 has an invalid length.
[  130.835469][ T9694] netlink: 'syz.0.1741': attribute type 3 has an invalid length.
[  130.845873][ T9694] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1741'.
[  131.126525][ T9711] netlink: 'syz.1.1746': attribute type 21 has an invalid length.
[  131.129149][ T9711] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1746'.
[  132.172428][ T9767] syzkaller0: entered promiscuous mode
[  132.174711][ T9767] syzkaller0: entered allmulticast mode
[  132.267804][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  132.269990][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  133.779063][ T9855] net_ratelimit: 74 callbacks suppressed
[  133.779072][ T9855] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  133.904082][ T9866] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.1817'.
[  135.762267][ T9895] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1829'.
[  135.862527][ T9899] netlink: 'syz.0.1836': attribute type 1 has an invalid length.
[  135.869421][ T9901] netlink: 'syz.1.1831': attribute type 4 has an invalid length.
[  135.989375][ T9919] netlink: 'syz.1.1840': attribute type 21 has an invalid length.
[  136.046714][ T9931] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1847'.
[  136.065436][ T9933] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1848'.
[  136.188098][ T9939] netlink: 'syz.2.1851': attribute type 1 has an invalid length.
[  136.190592][ T9939] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1851'.
[  136.289213][ T9956] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1858'.
[  136.331960][ T9960] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1861'.
[  136.694876][ T9995] netlink: 'syz.2.1878': attribute type 29 has an invalid length.
[  137.142782][T10031] warn_alloc: 1 callbacks suppressed
[  137.142846][T10031] syz.2.1894: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  137.151006][T10031] CPU: 0 UID: 0 PID: 10031 Comm: syz.2.1894 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  137.151017][T10031] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  137.151022][T10031] Call Trace:
[  137.151026][T10031]  <TASK>
[  137.151030][T10031]  dump_stack_lvl+0x189/0x250
[  137.151045][T10031]  ? __pfx_dump_stack_lvl+0x10/0x10
[  137.151054][T10031]  ? __pfx__printk+0x10/0x10
[  137.151066][T10031]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  137.151078][T10031]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  137.151088][T10031]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  137.151099][T10031]  warn_alloc+0x214/0x310
[  137.151108][T10031]  ? stack_depot_save_flags+0x40/0x900
[  137.151118][T10031]  ? perf_trace_run_bpf_submit+0x41/0x170
[  137.151129][T10031]  ? __pfx_warn_alloc+0x10/0x10
[  137.151138][T10031]  ? kasan_save_track+0x4f/0x80
[  137.151149][T10031]  ? xskq_create+0x56/0x170
[  137.151158][T10031]  ? xsk_init_queue+0xb0/0x110
[  137.151165][T10031]  ? xsk_setsockopt+0x4de/0x710
[  137.151173][T10031]  ? do_sock_setsockopt+0x17c/0x1b0
[  137.151180][T10031]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  137.151187][T10031]  ? do_syscall_64+0xfa/0x3b0
[  137.151196][T10031]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.151206][T10031]  __vmalloc_node_range_noprof+0x125/0x12f0
[  137.151227][T10031]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  137.151239][T10031]  ? __kasan_kmalloc+0x93/0xb0
[  137.151248][T10031]  vmalloc_user_noprof+0xad/0xf0
[  137.151256][T10031]  ? xskq_create+0xbf/0x170
[  137.151267][T10031]  xskq_create+0xbf/0x170
[  137.151277][T10031]  xsk_init_queue+0xb0/0x110
[  137.151287][T10031]  xsk_setsockopt+0x4de/0x710
[  137.151297][T10031]  ? __pfx_xsk_setsockopt+0x10/0x10
[  137.151307][T10031]  ? aa_sock_opt_perm+0x74/0x110
[  137.151318][T10031]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  137.151327][T10031]  ? __pfx_xsk_setsockopt+0x10/0x10
[  137.151336][T10031]  do_sock_setsockopt+0x17c/0x1b0
[  137.151346][T10031]  __x64_sys_setsockopt+0x13f/0x1b0
[  137.151356][T10031]  do_syscall_64+0xfa/0x3b0
[  137.151366][T10031]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.151373][T10031]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  137.151382][T10031]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.151389][T10031] RIP: 0033:0x7fc69d18eb69
[  137.151397][T10031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  137.151402][T10031] RSP: 002b:00007fc69e02d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  137.151411][T10031] RAX: ffffffffffffffda RBX: 00007fc69d3b5fa0 RCX: 00007fc69d18eb69
[  137.151416][T10031] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008
[  137.151420][T10031] RBP: 00007fc69d211df1 R08: 0000000000000004 R09: 0000000000000000
[  137.151425][T10031] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  137.151429][T10031] R13: 0000000000000000 R14: 00007fc69d3b5fa0 R15: 00007ffcc3b21088
[  137.151440][T10031]  </TASK>
[  137.151481][T10031] Mem-Info:
[  143.324993][    C0] sched: DL replenish lagged too much
[  152.135189][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  152.135900][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  152.136157][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  152.136878][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  152.137343][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  152.252642][T10039] chnl_net:caif_netlink_parms(): no params data found
[  153.280692][   T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  153.281365][   T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  153.281686][   T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  153.282265][   T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  153.282632][   T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  153.323354][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  153.324071][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  153.324362][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  153.324861][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  153.325640][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  154.175315][   T55] Bluetooth: hci3: command tx timeout
[  155.305365][   T55] Bluetooth: hci4: command tx timeout
[  155.385244][   T55] Bluetooth: hci5: command tx timeout
[  156.257774][   T55] Bluetooth: hci3: command tx timeout
[  157.375229][   T55] Bluetooth: hci4: command tx timeout
[  157.455311][   T55] Bluetooth: hci5: command tx timeout
[  158.338032][   T55] Bluetooth: hci3: command tx timeout
[  159.455231][   T55] Bluetooth: hci4: command tx timeout
[  159.535128][   T55] Bluetooth: hci5: command tx timeout
[  160.415207][   T55] Bluetooth: hci3: command tx timeout
[  161.545180][   T55] Bluetooth: hci4: command tx timeout
[  161.615168][   T55] Bluetooth: hci5: command tx timeout
[  170.182211][T10052] Bluetooth: hci1: command 0x0406 tx timeout
[  170.182242][T10052] Bluetooth: hci2: command 0x0406 tx timeout
[  193.699005][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  193.699075][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  212.305836][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 54059372775 wd_nsec: 54059374040
[  212.576537][T10052] Bluetooth: hci0: command 0x0406 tx timeout
[  213.129028][T10058] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  213.129571][T10058] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  213.129829][T10058] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  213.130431][T10053] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  213.130737][T10053] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  214.281171][T10063] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  214.285448][T10063] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  214.286169][T10063] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  214.286895][T10063] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  214.287248][T10063] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  214.337136][T10067] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  214.337963][T10067] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  214.338318][T10067] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  214.338795][T10067] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  214.339379][T10067] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  242.145043][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
[  242.145055][    C0] rcu: 	0-....: (10499 ticks this GP) idle=4834/1/0x4000000000000000 softirq=30263/50244 fqs=4513
[  242.145321][    C0] rcu: 	         hardirqs   softirqs   csw/system
[  242.145326][    C0] rcu: 	 number:  1041459       5918            0
[  242.145331][    C0] rcu: 	cputime:    25212      27195          160   ==> 52490(ms)
[  242.145337][    C0] rcu: 	(t=10500 jiffies g=20217 q=2166 ncpus=2)
[  242.145345][    C0] CPU: 0 UID: 0 PID: 10031 Comm: syz.2.1894 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  242.145354][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  242.145358][    C0] RIP: 0010:handle_softirqs+0x1b0/0x870
[  242.145370][    C0] Code: 89 64 24 30 0f b7 db 48 c7 c7 00 ad 89 8b e8 17 ef e8 09 65 66 c7 05 f5 5b 1a 11 00 00 e8 98 f5 41 00 fb 49 c7 c7 c0 c0 e0 8d <b8> ff ff ff ff 0f bc c3 41 89 c5 41 ff c5 0f 84 c2 03 00 00 89 5c
[  242.145376][    C0] RSP: 0018:ffffc90000007e40 EFLAGS: 00000286
[  242.145383][    C0] RAX: 42bc194d6a2ead00 RBX: 0000000000000202 RCX: 42bc194d6a2ead00
[  242.145388][    C0] RDX: 0000000000000002 RSI: ffffffff8d998701 RDI: ffffffff8be29f80
[  242.145392][    C0] RBP: ffffc90000007f50 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  242.145397][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 000000000000000a
[  242.145401][    C0] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8de0c0c0
[  242.145405][    C0] FS:  00007fc69e02d6c0(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
[  242.145410][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  242.145415][    C0] CR2: 0000200000001000 CR3: 0000000124a80000 CR4: 00000000000006f0
[  242.145443][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000082
[  242.145448][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  242.145452][    C0] Call Trace:
[  242.145455][    C0]  <IRQ>
[  242.145460][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  242.145471][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  242.145478][    C0]  ? irq_work_single+0x1ac/0x240
[  242.145487][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  242.145499][    C0]  __irq_exit_rcu+0xca/0x1f0
[  242.145506][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  242.145516][    C0]  ? rcu_is_watching+0x15/0xb0
[  242.145525][    C0]  irq_exit_rcu+0x9/0x30
[  242.145531][    C0]  sysvec_irq_work+0xa3/0xc0
[  242.145538][    C0]  </IRQ>
[  242.145540][    C0]  <TASK>
[  242.145543][    C0]  asm_sysvec_irq_work+0x1a/0x20
[  242.145550][    C0] RIP: 0010:vsnprintf+0xac9/0xf00
[  242.145556][    C0] Code: e1 07 38 c1 7c c9 4c 89 ef e8 f3 8f b8 f6 eb bf e8 ec 6b 55 f6 49 ff c7 4d 89 fd eb 0d e8 df 6b 55 f6 4d 89 fd 4c 8b 74 24 08 <48> 89 e8 48 c1 e8 03 0f b6 04 18 84 c0 75 3d 80 7d 00 00 0f 84 f8
[  242.145561][    C0] RSP: 0018:ffffc90006776e10 EFLAGS: 00000286
[  242.145567][    C0] RAX: ffffc900067770e6 RBX: dffffc0000000000 RCX: 000000000000002e
[  242.145571][    C0] RDX: 0000000000000000 RSI: ffffffff8b8b8905 RDI: ffffc900067770e6
[  242.145575][    C0] RBP: ffffffff8b8b8906 R08: ffffc900067770e6 R09: 1ffff92000ceee1c
[  242.145579][    C0] R10: dffffc0000000000 R11: fffff52000ceee1d R12: ffffc90006776f00
[  242.145584][    C0] R13: ffffc900067770e7 R14: 0000000000000800 R15: ffffffff8b8b8905
[  242.145601][    C0]  sprintf+0xd9/0x120
[  242.145608][    C0]  ? data_push_tail+0x5d1/0x630
[  242.145619][    C0]  ? __pfx_sprintf+0x10/0x10
[  242.145626][    C0]  ? desc_read+0x208/0x3f0
[  242.145638][    C0]  info_print_prefix+0x155/0x310
[  242.145649][    C0]  ? __pfx_info_print_prefix+0x10/0x10
[  242.145658][    C0]  ? _prb_read_valid+0xa7b/0xa90
[  242.145669][    C0]  record_print_text+0x154/0x430
[  242.145718][    C0]  ? __pfx__prb_read_valid+0x10/0x10
[  242.145726][    C0]  ? __pfx_record_print_text+0x10/0x10
[  242.145736][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  242.145749][    C0]  printk_get_next_message+0x26d/0x7b0
[  242.145760][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  242.145771][    C0]  ? __pfx_printk_get_next_message+0x10/0x10
[  242.145779][    C0]  ? __lock_acquire+0xab9/0xd20
[  242.145796][    C0]  ? console_flush_all+0x476/0xc40
[  242.145806][    C0]  console_flush_all+0x4ca/0xc40
[  242.145815][    C0]  ? console_flush_all+0x891/0xc40
[  242.145824][    C0]  ? console_flush_all+0x13a/0xc40
[  242.145835][    C0]  ? __pfx_console_flush_all+0x10/0x10
[  242.145848][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  242.145859][    C0]  console_unlock+0xc4/0x270
[  242.145868][    C0]  ? __pfx_console_unlock+0x10/0x10
[  242.145878][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  242.145889][    C0]  vprintk_emit+0x5b7/0x7a0
[  242.145904][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[  242.145912][    C0]  ? __pfx_trace_call_bpf+0x10/0x10
[  242.145926][    C0]  _printk+0xcf/0x120
[  242.145938][    C0]  ? __pfx__printk+0x10/0x10
[  242.145952][    C0]  __show_mem+0x95/0x21b0
[  242.145961][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  242.145974][    C0]  ? dump_stack_lvl+0x1e7/0x250
[  242.145984][    C0]  ? __pfx___show_mem+0x10/0x10
[  242.145994][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  242.146002][    C0]  ? __pfx__printk+0x10/0x10
[  242.146011][    C0]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  242.146019][    C0]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  242.146028][    C0]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  242.146037][    C0]  warn_alloc+0x2dd/0x310
[  242.146046][    C0]  ? stack_depot_save_flags+0x40/0x900
[  242.146054][    C0]  ? perf_trace_run_bpf_submit+0x41/0x170
[  242.146064][    C0]  ? __pfx_warn_alloc+0x10/0x10
[  242.146072][    C0]  ? kasan_save_track+0x4f/0x80
[  242.146083][    C0]  ? xskq_create+0x56/0x170
[  242.146090][    C0]  ? xsk_init_queue+0xb0/0x110
[  242.146096][    C0]  ? xsk_setsockopt+0x4de/0x710
[  242.146103][    C0]  ? do_sock_setsockopt+0x17c/0x1b0
[  242.146110][    C0]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  242.146116][    C0]  ? do_syscall_64+0xfa/0x3b0
[  242.146124][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.146133][    C0]  __vmalloc_node_range_noprof+0x125/0x12f0
[  242.146154][    C0]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  242.146163][    C0]  ? __kasan_kmalloc+0x93/0xb0
[  242.146171][    C0]  vmalloc_user_noprof+0xad/0xf0
[  242.146179][    C0]  ? xskq_create+0xbf/0x170
[  242.146187][    C0]  xskq_create+0xbf/0x170
[  242.146196][    C0]  xsk_init_queue+0xb0/0x110
[  242.146205][    C0]  xsk_setsockopt+0x4de/0x710
[  242.146214][    C0]  ? __pfx_xsk_setsockopt+0x10/0x10
[  242.146224][    C0]  ? aa_sock_opt_perm+0x74/0x110
[  242.146234][    C0]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  242.146242][    C0]  ? __pfx_xsk_setsockopt+0x10/0x10
[  242.146250][    C0]  do_sock_setsockopt+0x17c/0x1b0
[  242.146259][    C0]  __x64_sys_setsockopt+0x13f/0x1b0
[  242.146268][    C0]  do_syscall_64+0xfa/0x3b0
[  242.146277][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.146283][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  242.146292][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.146297][    C0] RIP: 0033:0x7fc69d18eb69
[  242.146305][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  242.146309][    C0] RSP: 002b:00007fc69e02d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  242.146316][    C0] RAX: ffffffffffffffda RBX: 00007fc69d3b5fa0 RCX: 00007fc69d18eb69
[  242.146321][    C0] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008
[  242.146324][    C0] RBP: 00007fc69d211df1 R08: 0000000000000004 R09: 0000000000000000
[  242.146328][    C0] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  242.146332][    C0] R13: 0000000000000000 R14: 00007fc69d3b5fa0 R15: 00007ffcc3b21088
[  242.146343][    C0]  </TASK>
[  255.147899][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  255.147933][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  270.495394][   T18] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 13334 jiffies s: 13997 root: 0x1/.
[  270.495422][   T18] rcu: blocking rcu_node structures (internal RCU debug):
[  270.495459][   T18] Sending NMI from CPU 1 to CPUs 0:
[  270.495501][    C0] NMI backtrace for cpu 0
[  270.495512][    C0] CPU: 0 UID: 0 PID: 10031 Comm: syz.2.1894 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  270.495521][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  270.495525][    C0] RIP: 0010:native_apic_msr_eoi+0xf/0x20
[  270.495538][    C0] Code: f8 c3 cc cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa b9 0b 08 00 00 31 c0 31 d2 0f 30 <e9> 8c 14 00 0a cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90
[  270.495544][    C0] RSP: 0018:ffffc90000007d50 EFLAGS: 00000046
[  270.495550][    C0] RAX: 0000000000000000 RBX: ffffc90000007d98 RCX: 000000000000080b
[  270.495555][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  270.495559][    C0] RBP: 0000000000000000 R08: ffff88804b023b0f R09: 1ffff11009604761
[  270.495563][    C0] R10: dffffc0000000000 R11: ffffed1009604762 R12: dffffc0000000000
[  270.495568][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  270.495571][    C0] FS:  00007fc69e02d6c0(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
[  270.495577][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  270.495581][    C0] CR2: 0000200000001000 CR3: 0000000124a80000 CR4: 00000000000006f0
[  270.495607][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000082
[  270.495612][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  270.495616][    C0] Call Trace:
[  270.495619][    C0]  <IRQ>
[  270.495622][    C0]  __sysvec_apic_timer_interrupt+0x45/0x410
[  270.495633][    C0]  sysvec_apic_timer_interrupt+0x52/0xc0
[  270.495646][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  270.495653][    C0] RIP: 0010:handle_softirqs+0x1b0/0x870
[  270.495661][    C0] Code: 89 64 24 30 0f b7 db 48 c7 c7 00 ad 89 8b e8 17 ef e8 09 65 66 c7 05 f5 5b 1a 11 00 00 e8 98 f5 41 00 fb 49 c7 c7 c0 c0 e0 8d <b8> ff ff ff ff 0f bc c3 41 89 c5 41 ff c5 0f 84 c2 03 00 00 89 5c
[  270.495666][    C0] RSP: 0018:ffffc90000007e40 EFLAGS: 00000286
[  270.495671][    C0] RAX: 42bc194d6a2ead00 RBX: 0000000000000202 RCX: 42bc194d6a2ead00
[  270.495675][    C0] RDX: 0000000000000002 RSI: ffffffff8d998701 RDI: ffffffff8be29f80
[  270.495679][    C0] RBP: ffffc90000007f50 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  270.495684][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 000000000000000a
[  270.495688][    C0] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8de0c0c0
[  270.495696][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  270.495704][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  270.495711][    C0]  ? irq_work_single+0x1ac/0x240
[  270.495718][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  270.495728][    C0]  __irq_exit_rcu+0xca/0x1f0
[  270.495734][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  270.495742][    C0]  ? rcu_is_watching+0x15/0xb0
[  270.495750][    C0]  irq_exit_rcu+0x9/0x30
[  270.495756][    C0]  sysvec_irq_work+0xa3/0xc0
[  270.495763][    C0]  </IRQ>
[  270.495765][    C0]  <TASK>
[  270.495767][    C0]  asm_sysvec_irq_work+0x1a/0x20
[  270.495774][    C0] RIP: 0010:vsnprintf+0xac9/0xf00
[  270.495780][    C0] Code: e1 07 38 c1 7c c9 4c 89 ef e8 f3 8f b8 f6 eb bf e8 ec 6b 55 f6 49 ff c7 4d 89 fd eb 0d e8 df 6b 55 f6 4d 89 fd 4c 8b 74 24 08 <48> 89 e8 48 c1 e8 03 0f b6 04 18 84 c0 75 3d 80 7d 00 00 0f 84 f8
[  270.495785][    C0] RSP: 0018:ffffc90006776e10 EFLAGS: 00000286
[  270.495790][    C0] RAX: ffffc900067770e6 RBX: dffffc0000000000 RCX: 000000000000002e
[  270.495794][    C0] RDX: 0000000000000000 RSI: ffffffff8b8b8905 RDI: ffffc900067770e6
[  270.495798][    C0] RBP: ffffffff8b8b8906 R08: ffffc900067770e6 R09: 1ffff92000ceee1c
[  270.495803][    C0] R10: dffffc0000000000 R11: fffff52000ceee1d R12: ffffc90006776f00
[  270.495807][    C0] R13: ffffc900067770e7 R14: 0000000000000800 R15: ffffffff8b8b8905
[  270.495817][    C0]  sprintf+0xd9/0x120
[  270.495823][    C0]  ? data_push_tail+0x5d1/0x630
[  270.495832][    C0]  ? __pfx_sprintf+0x10/0x10
[  270.495838][    C0]  ? desc_read+0x208/0x3f0
[  270.495846][    C0]  info_print_prefix+0x155/0x310
[  270.495857][    C0]  ? __pfx_info_print_prefix+0x10/0x10
[  270.495865][    C0]  ? _prb_read_valid+0xa7b/0xa90
[  270.495874][    C0]  record_print_text+0x154/0x430
[  270.495883][    C0]  ? __pfx__prb_read_valid+0x10/0x10
[  270.495890][    C0]  ? __pfx_record_print_text+0x10/0x10
[  270.495898][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  270.495908][    C0]  printk_get_next_message+0x26d/0x7b0
[  270.495917][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  270.495927][    C0]  ? __pfx_printk_get_next_message+0x10/0x10
[  270.495934][    C0]  ? __lock_acquire+0xab9/0xd20
[  270.495944][    C0]  ? console_flush_all+0x476/0xc40
[  270.495953][    C0]  console_flush_all+0x4ca/0xc40
[  270.495961][    C0]  ? console_flush_all+0x891/0xc40
[  270.495969][    C0]  ? console_flush_all+0x13a/0xc40
[  270.495978][    C0]  ? __pfx_console_flush_all+0x10/0x10
[  270.495988][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  270.495998][    C0]  console_unlock+0xc4/0x270
[  270.496006][    C0]  ? __pfx_console_unlock+0x10/0x10
[  270.496013][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  270.496023][    C0]  vprintk_emit+0x5b7/0x7a0
[  270.496031][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[  270.496038][    C0]  ? __pfx_trace_call_bpf+0x10/0x10
[  270.496047][    C0]  _printk+0xcf/0x120
[  270.496057][    C0]  ? __pfx__printk+0x10/0x10
[  270.496067][    C0]  __show_mem+0x95/0x21b0
[  270.496075][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  270.496084][    C0]  ? dump_stack_lvl+0x1e7/0x250
[  270.496093][    C0]  ? __pfx___show_mem+0x10/0x10
[  270.496102][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  270.496109][    C0]  ? __pfx__printk+0x10/0x10
[  270.496117][    C0]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  270.496125][    C0]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  270.496133][    C0]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  270.496141][    C0]  warn_alloc+0x2dd/0x310
[  270.496149][    C0]  ? stack_depot_save_flags+0x40/0x900
[  270.496157][    C0]  ? perf_trace_run_bpf_submit+0x41/0x170
[  270.496165][    C0]  ? __pfx_warn_alloc+0x10/0x10
[  270.496172][    C0]  ? kasan_save_track+0x4f/0x80
[  270.496182][    C0]  ? xskq_create+0x56/0x170
[  270.496190][    C0]  ? xsk_init_queue+0xb0/0x110
[  270.496196][    C0]  ? xsk_setsockopt+0x4de/0x710
[  270.496203][    C0]  ? do_sock_setsockopt+0x17c/0x1b0
[  270.496209][    C0]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  270.496215][    C0]  ? do_syscall_64+0xfa/0x3b0
[  270.496223][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.496230][    C0]  __vmalloc_node_range_noprof+0x125/0x12f0
[  270.496243][    C0]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  270.496251][    C0]  ? __kasan_kmalloc+0x93/0xb0
[  270.496257][    C0]  vmalloc_user_noprof+0xad/0xf0
[  270.496264][    C0]  ? xskq_create+0xbf/0x170
[  270.496271][    C0]  xskq_create+0xbf/0x170
[  270.496279][    C0]  xsk_init_queue+0xb0/0x110
[  270.496287][    C0]  xsk_setsockopt+0x4de/0x710
[  270.496295][    C0]  ? __pfx_xsk_setsockopt+0x10/0x10
[  270.496302][    C0]  ? aa_sock_opt_perm+0x74/0x110
[  270.496312][    C0]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  270.496320][    C0]  ? __pfx_xsk_setsockopt+0x10/0x10
[  270.496327][    C0]  do_sock_setsockopt+0x17c/0x1b0
[  270.496334][    C0]  __x64_sys_setsockopt+0x13f/0x1b0
[  270.496342][    C0]  do_syscall_64+0xfa/0x3b0
[  270.496350][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.496356][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  270.496363][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.496369][    C0] RIP: 0033:0x7fc69d18eb69
[  270.496375][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  270.496380][    C0] RSP: 002b:00007fc69e02d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  270.496386][    C0] RAX: ffffffffffffffda RBX: 00007fc69d3b5fa0 RCX: 00007fc69d18eb69
[  270.496390][    C0] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008
[  270.496394][    C0] RBP: 00007fc69d211df1 R08: 0000000000000004 R09: 0000000000000000
[  270.496398][    C0] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  270.496401][    C0] R13: 0000000000000000 R14: 00007fc69d3b5fa0 R15: 00007ffcc3b21088
[  270.496408][    C0]  </TASK>
[  273.178795][T10078] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  273.179658][T10078] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  273.179964][T10078] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  273.180464][T10078] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  273.180777][T10078] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  274.186514][T10081] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  274.187262][T10081] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  274.188243][T10081] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  274.191456][T10081] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  274.191788][T10081] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  275.170080][T10085] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  275.170874][T10085] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  275.171289][T10085] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  275.172266][T10085] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  275.172613][T10085] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  277.705200][T10089] Bluetooth: hci3: command 0x0406 tx timeout
[  277.705264][T10089] Bluetooth: hci4: command 0x0406 tx timeout
[  277.705286][T10089] Bluetooth: hci5: command 0x0406 tx timeout
[  287.135448][   T34] INFO: task syz.1.1875:9989 blocked for more than 143 seconds.
[  287.135474][   T34]       Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0
[  287.135485][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  287.135495][   T34] task:syz.1.1875      state:D stack:25096 pid:9989  tgid:9989  ppid:5832   task_flags:0x400040 flags:0x00004004
[  287.135538][   T34] Call Trace:
[  287.135546][   T34]  <TASK>
[  287.135560][   T34]  __schedule+0x16f5/0x4d00
[  287.135592][   T34]  ? __lock_acquire+0xab9/0xd20
[  287.135612][   T34]  ? schedule+0x165/0x360
[  287.135634][   T34]  ? __pfx___schedule+0x10/0x10
[  287.135663][   T34]  ? schedule+0x91/0x360
[  287.135684][   T34]  schedule+0x165/0x360
[  287.135703][   T34]  schedule_preempt_disabled+0x13/0x30
[  287.135722][   T34]  __mutex_lock+0x724/0xe80
[  287.135752][   T34]  ? __mutex_lock+0x51b/0xe80
[  287.135777][   T34]  ? tracepoint_probe_unregister+0x30/0x9b0
[  287.135801][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  287.135821][   T34]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  287.135851][   T34]  ? __local_bh_enable_ip+0x12d/0x1c0
[  287.135869][   T34]  ? __pfx___bpf_trace_net_dev_start_xmit+0x10/0x10
[  287.135892][   T34]  tracepoint_probe_unregister+0x30/0x9b0
[  287.135913][   T34]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  287.135929][   T34]  ? __pfx_bpf_link_release+0x10/0x10
[  287.135952][   T34]  ? __pfx_bpf_link_release+0x10/0x10
[  287.135973][   T34]  bpf_raw_tp_link_release+0x43/0x70
[  287.135993][   T34]  bpf_link_free+0xed/0x330
[  287.136015][   T34]  ? __pfx_bpf_link_release+0x10/0x10
[  287.136036][   T34]  bpf_link_release+0x6b/0x80
[  287.136056][   T34]  __fput+0x44c/0xa70
[  287.136086][   T34]  task_work_run+0x1d4/0x260
[  287.136111][   T34]  ? __pfx_task_work_run+0x10/0x10
[  287.136136][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  287.136155][   T34]  exit_to_user_mode_loop+0xec/0x110
[  287.136171][   T34]  do_syscall_64+0x2bd/0x3b0
[  287.136191][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  287.136209][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.136225][   T34]  ? exc_page_fault+0x9f/0xf0
[  287.136245][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.136262][   T34] RIP: 0033:0x7f3a79b8eb69
[  287.136277][   T34] RSP: 002b:00007fff6f6d7708 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  287.136327][   T34] RAX: 0000000000000000 RBX: 00007f3a79db7ba0 RCX: 00007f3a79b8eb69
[  287.136339][   T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  287.136350][   T34] RBP: 00007f3a79db7ba0 R08: 00000000000001b4 R09: 000000186f6d79ff
[  287.136362][   T34] R10: 00007f3a79db7ac0 R11: 0000000000000246 R12: 0000000000021897
[  287.136373][   T34] R13: 00007f3a79db6160 R14: ffffffffffffffff R15: 00007fff6f6d7820
[  287.136398][   T34]  </TASK>
[  287.136407][   T34] INFO: task syz.2.1894:10030 blocked for more than 143 seconds.
[  287.136419][   T34]       Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0
[  287.136430][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  287.136439][   T34] task:syz.2.1894      state:D stack:25096 pid:10030 tgid:10030 ppid:5828   task_flags:0x400040 flags:0x00004004
[  287.136492][   T34] Call Trace:
[  287.136499][   T34]  <TASK>
[  287.136510][   T34]  __schedule+0x16f5/0x4d00
[  287.136530][   T34]  ? _raw_spin_unlock+0x28/0x50
[  287.136553][   T34]  ? __lock_acquire+0xab9/0xd20
[  287.136571][   T34]  ? schedule+0x165/0x360
[  287.136592][   T34]  ? __pfx___schedule+0x10/0x10
[  287.136622][   T34]  ? schedule+0x91/0x360
[  287.136643][   T34]  schedule+0x165/0x360
[  287.136664][   T34]  schedule_preempt_disabled+0x13/0x30
[  287.136682][   T34]  __mutex_lock+0x724/0xe80
[  287.136702][   T34]  ? __mutex_lock+0x51b/0xe80
[  287.136726][   T34]  ? perf_trace_destroy+0x2e/0x150
[  287.136751][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  287.136776][   T34]  ? security_perf_event_free+0x40/0x70
[  287.136796][   T34]  ? rcu_is_watching+0x15/0xb0
[  287.136815][   T34]  ? rcu_is_watching+0x15/0xb0
[  287.136833][   T34]  ? __pfx_tp_perf_event_destroy+0x10/0x10
[  287.136851][   T34]  perf_trace_destroy+0x2e/0x150
[  287.136869][   T34]  ? __pfx_tp_perf_event_destroy+0x10/0x10
[  287.136886][   T34]  __free_event+0x316/0x7b0
[  287.136904][   T34]  ? __pfx_perf_release+0x10/0x10
[  287.136923][   T34]  perf_event_release_kernel+0x45b/0x510
[  287.136947][   T34]  ? __pfx_perf_release+0x10/0x10
[  287.136967][   T34]  perf_release+0x38/0x50
[  287.136987][   T34]  __fput+0x44c/0xa70
[  287.137015][   T34]  task_work_run+0x1d4/0x260
[  287.137039][   T34]  ? __pfx_task_work_run+0x10/0x10
[  287.137064][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  287.137083][   T34]  exit_to_user_mode_loop+0xec/0x110
[  287.137099][   T34]  do_syscall_64+0x2bd/0x3b0
[  287.137119][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.137133][   T34]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  287.137154][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.137169][   T34] RIP: 0033:0x7fc69d18eb69
[  287.137182][   T34] RSP: 002b:00007ffcc3b211e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  287.137201][   T34] RAX: 0000000000000000 RBX: 00007fc69d3b7ba0 RCX: 00007fc69d18eb69
[  287.137213][   T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  287.137224][   T34] RBP: 00007fc69d3b7ba0 R08: 000000000000017c R09: 00000015c3b214df
[  287.137235][   T34] R10: 00007fc69d3b7ac0 R11: 0000000000000246 R12: 0000000000021a63
[  287.137247][   T34] R13: 00007fc69d3b6080 R14: ffffffffffffffff R15: 00007ffcc3b21300
[  287.137270][   T34]  </TASK>
[  287.137279][   T34] INFO: task syz.0.1896:10035 blocked for more than 143 seconds.
[  287.137318][   T34]       Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0
[  287.137327][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  287.137335][   T34] task:syz.0.1896      state:D stack:26360 pid:10035 tgid:10034 ppid:5836   task_flags:0x400140 flags:0x00004004
[  287.137376][   T34] Call Trace:
[  287.137383][   T34]  <TASK>
[  287.137393][   T34]  __schedule+0x16f5/0x4d00
[  287.137418][   T34]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  287.137437][   T34]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  287.137456][   T34]  ? do_raw_spin_lock+0x121/0x290
[  287.137477][   T34]  ? schedule+0x165/0x360
[  287.137495][   T34]  ? __lock_acquire+0xab9/0xd20
[  287.137511][   T34]  ? __pfx___schedule+0x10/0x10
[  287.137540][   T34]  ? schedule+0x91/0x360
[  287.137561][   T34]  schedule+0x165/0x360
[  287.137581][   T34]  synchronize_rcu_expedited+0x583/0x730
[  287.137599][   T34]  ? __kmalloc_noprof+0x27a/0x4f0
[  287.137615][   T34]  ? tracepoint_add_func+0x35e/0xa10
[  287.137636][   T34]  ? __pfx_synchronize_rcu_expedited+0x10/0x10
[  287.137667][   T34]  ? __pfx_wait_rcu_exp_gp+0x10/0x10
[  287.137685][   T34]  ? __pfx___might_resched+0x10/0x10
[  287.137704][   T34]  ? __pfx_autoremove_wake_function+0x10/0x10
[  287.137734][   T34]  synchronize_rcu+0x11a/0x310
[  287.137761][   T34]  ? __pfx_synchronize_rcu+0x10/0x10
[  287.137781][   T34]  ? rcu_is_watching+0x15/0xb0
[  287.137799][   T34]  ? trace_kmalloc+0x1f/0xd0
[  287.137813][   T34]  ? tracepoint_add_func+0x515/0xa10
[  287.137839][   T34]  tracepoint_add_func+0x632/0xa10
[  287.137867][   T34]  ? __pfx_perf_trace_lock+0x10/0x10
[  287.137884][   T34]  tracepoint_probe_register+0x5d/0x90
[  287.137905][   T34]  ? __pfx_perf_trace_lock+0x10/0x10
[  287.137924][   T34]  perf_trace_event_init+0x4e1/0x9d0
[  287.137944][   T34]  perf_trace_init+0x23d/0x2d0
[  287.137964][   T34]  perf_tp_event_init+0x8d/0x120
[  287.137983][   T34]  perf_try_init_event+0x17f/0x870
[  287.138001][   T34]  ? perf_event_alloc+0xf6b/0x2bb0
[  287.138022][   T34]  ? perf_event_alloc+0xf6b/0x2bb0
[  287.138041][   T34]  perf_event_alloc+0x1357/0x2bb0
[  287.138060][   T34]  ? __lock_acquire+0xab9/0xd20
[  287.138076][   T34]  ? perf_event_alloc+0xf6b/0x2bb0
[  287.138109][   T34]  ? __pfx_perf_event_alloc+0x10/0x10
[  287.138132][   T34]  ? find_lively_task_by_vpid+0x19/0x290
[  287.138151][   T34]  ? find_lively_task_by_vpid+0x19/0x290
[  287.138167][   T34]  ? find_lively_task_by_vpid+0x19/0x290
[  287.138189][   T34]  __se_sys_perf_event_open+0x772/0x1d70
[  287.138219][   T34]  ? __pfx___se_sys_perf_event_open+0x10/0x10
[  287.138250][   T34]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  287.138273][   T34]  ? rcu_is_watching+0x15/0xb0
[  287.138323][   T34]  ? do_syscall_64+0xbe/0x3b0
[  287.138344][   T34]  ? __x64_sys_perf_event_open+0x20/0xc0
[  287.138366][   T34]  do_syscall_64+0xfa/0x3b0
[  287.138385][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  287.138404][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.138420][   T34]  ? exc_page_fault+0x9f/0xf0
[  287.138441][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.138457][   T34] RIP: 0033:0x7f6b95d8eb69
[  287.138470][   T34] RSP: 002b:00007f6b96b41038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  287.138491][   T34] RAX: ffffffffffffffda RBX: 00007f6b95fb5fa0 RCX: 00007f6b95d8eb69
[  287.138502][   T34] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000040
[  287.138514][   T34] RBP: 00007f6b95e11df1 R08: 0000000000000000 R09: 0000000000000000
[  287.138525][   T34] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  287.138538][   T34] R13: 0000000000000000 R14: 00007f6b95fb5fa0 R15: 00007ffc68282f68
[  287.138561][   T34]  </TASK>
[  287.138582][   T34] 
[  287.138582][   T34] Showing all locks held in the system:
[  287.138593][   T34] 1 lock held by khungtaskd/34:
[  287.138604][   T34]  #0: ffffffff8e13f0a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  287.138662][   T34] 5 locks held by kworker/u11:0/55:
[  287.138672][   T34]  #0: ffff8881092eb148 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  287.138723][   T34]  #1: ffffc900007dfbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  287.138779][   T34]  #2: ffff88810f6c4dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  287.138830][   T34]  #3: ffff88810f6c40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  287.138884][   T34]  #4: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  287.138933][   T34] 1 lock held by hwrng/748:
[  287.138943][   T34]  #0: ffffffff8e9c5f68 (reading_mutex){+.+.}-{4:4}, at: hwrng_fillfn+0xf2/0x400
[  287.138995][   T34] 3 locks held by kworker/u10:4/1087:
[  287.139005][   T34]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  287.139054][   T34]  #1: ffffc900071a7bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  287.139104][   T34]  #2: ffff8880312f8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x460
[  287.139157][   T34] 3 locks held by kworker/u10:6/1090:
[  287.139167][   T34]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  287.139214][   T34]  #1: ffffc900071d7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  287.139264][   T34]  #2: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  287.139357][   T34] 5 locks held by kworker/u11:1/5218:
[  287.139367][   T34]  #0: ffff88802adf7148 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  287.139419][   T34]  #1: ffffc9000a9f7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  287.139470][   T34]  #2: ffff8880242fcdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  287.139520][   T34]  #3: ffff8880242fc0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  287.139576][   T34]  #4: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  287.139625][   T34] 3 locks held by kworker/1:3/5297:
[  287.139635][   T34]  #0: ffff88801a481d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  287.139687][   T34]  #1: ffffc900017dfbc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  287.139740][   T34]  #2: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf00
[  287.139798][   T34] 2 locks held by getty/5655:
[  287.139808][   T34]  #0: ffff8881087290a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  287.139859][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  287.139914][   T34] 6 locks held by kworker/u11:2/5831:
[  287.139925][   T34]  #0: ffff88802adf4148 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  287.139977][   T34]  #1: ffffc900035ffbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  287.140030][   T34]  #2: ffff88811001cdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  287.140083][   T34]  #3: ffff88811001c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  287.140139][   T34]  #4: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  287.140189][   T34]  #5: ffff8881092e8338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  287.140249][   T34] 3 locks held by kworker/u8:4/5878:
[  287.140259][   T34]  #0: ffff888022cbd948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  287.140338][   T34]  #1: ffffc900038bfbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  287.140392][   T34]  #2: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  287.140444][   T34] 1 lock held by syz.1.1875/9989:
[  287.140454][   T34]  #0: ffffffff8e193d68 (tracepoints_mutex){+.+.}-{4:4}, at: tracepoint_probe_unregister+0x30/0x9b0
[  287.140511][   T34] 1 lock held by syz.2.1894/10030:
[  287.140521][   T34]  #0: ffffffff8e1a2c68 (event_mutex){+.+.}-{4:4}, at: perf_trace_destroy+0x2e/0x150
[  287.140572][   T34] 3 locks held by syz.2.1894/10031:
[  287.140583][   T34] 5 locks held by syz.0.1896/10035:
[  287.140593][   T34]  #0: ffffffff99b075d0 (&pmus_srcu){.+.+}-{0:0}, at: class_srcu_constructor+0x2c/0x60
[  287.140648][   T34]  #1: ffffffff99b075d0 (&pmus_srcu){.+.+}-{0:0}, at: perf_event_alloc+0xf6b/0x2bb0
[  287.140702][   T34]  #2: ffffffff8e1a2c68 (event_mutex){+.+.}-{4:4}, at: perf_trace_init+0x50/0x2d0
[  287.140757][   T34]  #3: ffffffff8e193d68 (tracepoints_mutex){+.+.}-{4:4}, at: tracepoint_probe_register+0x3f/0x90
[  287.140813][   T34]  #4: ffffffff8e144bb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  287.140868][   T34] 3 locks held by syz-executor/10039:
[  287.140879][   T34]  #0: ffffffff8eca43a0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  287.140937][   T34]  #1: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  287.140993][   T34]  #2: ffffffff8e144bb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  287.141048][   T34] 1 lock held by syz-executor/10047:
[  287.141058][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  287.141113][   T34] 1 lock held by syz-executor/10050:
[  287.141123][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  287.141174][   T34] 4 locks held by kworker/u11:3/10052:
[  287.141185][   T34]  #0: ffff8880305e0948 ((wq_completion)hci6#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  287.141240][   T34]  #1: ffffc90002f1fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  287.141319][   T34]  #2: ffff88812e2240b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0
[  287.141371][   T34]  #3: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0
[  287.141424][   T34] 4 locks held by kworker/u11:4/10053:
[  287.141434][   T34]  #0: ffff8881102d8948 ((wq_completion)hci7#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  287.141491][   T34]  #1: ffffc90002f3fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  287.141540][   T34]  #2: ffff88810a1000b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0
[  287.141592][   T34]  #3: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0
[  287.141645][   T34] 1 lock held by syz-executor/10055:
[  287.141655][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  287.141706][   T34] 5 locks held by kworker/u11:5/10058:
[  287.141716][   T34]  #0: ffff888127335948 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  287.141771][   T34]  #1: ffffc90002e8fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  287.141821][   T34]  #2: ffff88810ffccdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  287.141871][   T34]  #3: ffff88810ffcc0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  287.141924][   T34]  #4: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  287.141971][   T34] 1 lock held by syz-executor/10061:
[  287.141981][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  287.142032][   T34] 5 locks held by kworker/u11:6/10063:
[  287.142043][   T34]  #0: ffff888123590148 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  287.142099][   T34]  #1: ffffc90002defbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  287.142150][   T34]  #2: ffff88810689cdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  287.142201][   T34]  #3: ffff88810689c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  287.142255][   T34]  #4: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  287.142332][   T34] 1 lock held by syz-executor/10064:
[  287.142342][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  287.142388][   T34] 4 locks held by kworker/u11:7/10067:
[  287.142398][   T34]  #0: ffff88810e032148 ((wq_completion)hci8#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  287.142455][   T34]  #1: ffffc90002dcfbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  287.142505][   T34]  #2: ffff888063bd00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0
[  287.142556][   T34]  #3: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0
[  287.142603][   T34] 1 lock held by dhcpcd/10068:
[  287.142612][   T34]  #0: ffff888021cd0258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  287.142663][   T34] 1 lock held by dhcpcd/10069:
[  287.142673][   T34]  #0: ffff888107782258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  287.142725][   T34] 1 lock held by dhcpcd/10070:
[  287.142736][   T34]  #0: ffff8880646e4258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  287.142797][   T34] 1 lock held by dhcpcd/10071:
[  287.142807][   T34]  #0: ffff88811d254258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  287.142859][   T34] 1 lock held by dhcpcd/10072:
[  287.142868][   T34]  #0: ffff8881062b6258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  287.142920][   T34] 1 lock held by dhcpcd/10073:
[  287.142928][   T34]  #0: ffff888127318258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  287.142977][   T34] 1 lock held by syz-executor/10075:
[  287.142987][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  287.143037][   T34] 4 locks held by kworker/u11:8/10078:
[  287.143047][   T34]  #0: ffff888065125948 ((wq_completion)hci9#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  287.143103][   T34]  #1: ffffc90002c0fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  287.143153][   T34]  #2: ffff888063c3c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0
[  287.143204][   T34]  #3: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0
[  287.143256][   T34] 1 lock held by syz-executor/10080:
[  287.143266][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  287.143344][   T34] 4 locks held by kworker/u11:9/10081:
[  287.143355][   T34]  #0: ffff8880652d9948 ((wq_completion)hci10#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  287.143410][   T34]  #1: ffffc90002bffbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  287.143451][   T34]  #2: ffff88806505c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0
[  287.143497][   T34]  #3: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0
[  287.143546][   T34] 1 lock held by syz-executor/10084:
[  287.143556][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  287.143606][   T34] 4 locks held by kworker/u11:10/10085:
[  287.143616][   T34]  #0: ffff888043164948 ((wq_completion)hci11#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  287.143670][   T34]  #1: ffffc90002b9fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  287.143705][   T34]  #2: ffff8880653840b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0
[  287.143735][   T34]  #3: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0
[  287.143771][   T34] 5 locks held by kworker/u11:12/10088:
[  287.143777][   T34]  #0: ffff88810e035148 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  287.143807][   T34]  #1: ffffc90002b6fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  287.143836][   T34]  #2: ffff888021188dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  287.143865][   T34]  #3: ffff8880211880b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  287.143897][   T34]  #4: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  287.143925][   T34] 
[  287.143929][   T34] =============================================
[  287.143929][   T34] 
[  287.143935][   T34] NMI backtrace for cpu 1
[  287.143940][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  287.143948][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  287.143952][   T34] Call Trace:
[  287.143956][   T34]  <TASK>
[  287.143959][   T34]  dump_stack_lvl+0x189/0x250
[  287.143970][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  287.143979][   T34]  ? __pfx__printk+0x10/0x10
[  287.143992][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  287.144002][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  287.144008][   T34]  ? _printk+0xcf/0x120
[  287.144019][   T34]  ? __pfx__printk+0x10/0x10
[  287.144029][   T34]  ? debug_show_all_locks+0x2e/0x180
[  287.144038][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  287.144046][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  287.144055][   T34]  watchdog+0xfee/0x1030
[  287.144067][   T34]  ? watchdog+0x1de/0x1030
[  287.144081][   T34]  kthread+0x711/0x8a0
[  287.144092][   T34]  ? __pfx_watchdog+0x10/0x10
[  287.144102][   T34]  ? __pfx_kthread+0x10/0x10
[  287.144113][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  287.144122][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  287.144130][   T34]  ? __pfx_kthread+0x10/0x10
[  287.144140][   T34]  ret_from_fork+0x3fc/0x770
[  287.144149][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  287.144159][   T34]  ? __switch_to_asm+0x39/0x70
[  287.144167][   T34]  ? __switch_to_asm+0x33/0x70
[  287.144176][   T34]  ? __pfx_kthread+0x10/0x10
[  287.144186][   T34]  ret_from_fork_asm+0x1a/0x30
[  287.144201][   T34]  </TASK>
[  287.144204][   T34] Sending NMI from CPU 1 to CPUs 0:
[  287.144242][    C0] NMI backtrace for cpu 0
[  287.144253][    C0] CPU: 0 UID: 0 PID: 10031 Comm: syz.2.1894 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  287.144261][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  287.144265][    C0] RIP: 0010:asm_sysvec_apic_timer_interrupt+0x0/0x20
[  287.144275][    C0] Code: 56 6d 6e 0a e9 61 06 00 00 90 f3 0f 1e fa 0f 1f 00 fc 6a ff e8 11 05 00 00 48 89 c4 48 89 e7 e8 66 6c 6e 0a e9 41 06 00 00 90 <f3> 0f 1e fa 0f 1f 00 fc 6a ff e8 f1 04 00 00 48 89 c4 48 89 e7 e8
[  287.144300][    C0] RSP: 0018:ffffc90000007e18 EFLAGS: 00000086
[  287.144307][    C0] RAX: 42bc194d6a2ead00 RBX: 0000000000000202 RCX: 42bc194d6a2ead00
[  287.144312][    C0] RDX: 0000000000000002 RSI: ffffffff8d998701 RDI: ffffffff8be29f80
[  287.144317][    C0] RBP: ffffc90000007f50 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  287.144321][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 000000000000000a
[  287.144325][    C0] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8de0c0c0
[  287.144329][    C0] FS:  00007fc69e02d6c0(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
[  287.144335][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  287.144339][    C0] CR2: 0000200000001000 CR3: 0000000124a80000 CR4: 00000000000006f0
[  287.144364][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000082
[  287.144369][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  287.144373][    C0] Call Trace:
[  287.144377][    C0]  <IRQ>
[  287.144379][    C0] RIP: 0010:handle_softirqs+0x1b0/0x870
[  287.144388][    C0] Code: 89 64 24 30 0f b7 db 48 c7 c7 00 ad 89 8b e8 17 ef e8 09 65 66 c7 05 f5 5b 1a 11 00 00 e8 98 f5 41 00 fb 49 c7 c7 c0 c0 e0 8d <b8> ff ff ff ff 0f bc c3 41 89 c5 41 ff c5 0f 84 c2 03 00 00 89 5c
[  287.144393][    C0] RSP: 0018:ffffc90000007e40 EFLAGS: 00000286
[  287.144399][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  287.144408][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  287.144414][    C0]  ? irq_work_single+0x1ac/0x240
[  287.144421][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  287.144431][    C0]  __irq_exit_rcu+0xca/0x1f0
[  287.144438][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  287.144445][    C0]  ? rcu_is_watching+0x15/0xb0
[  287.144453][    C0]  irq_exit_rcu+0x9/0x30
[  287.144459][    C0]  sysvec_irq_work+0xa3/0xc0
[  287.144466][    C0]  </IRQ>
[  287.144468][    C0]  <TASK>
[  287.144475][    C0]  asm_sysvec_irq_work+0x1a/0x20
[  287.144481][    C0] RIP: 0010:vsnprintf+0xac9/0xf00
[  287.144488][    C0] Code: e1 07 38 c1 7c c9 4c 89 ef e8 f3 8f b8 f6 eb bf e8 ec 6b 55 f6 49 ff c7 4d 89 fd eb 0d e8 df 6b 55 f6 4d 89 fd 4c 8b 74 24 08 <48> 89 e8 48 c1 e8 03 0f b6 04 18 84 c0 75 3d 80 7d 00 00 0f 84 f8
[  287.144493][    C0] RSP: 0018:ffffc90006776e10 EFLAGS: 00000286
[  287.144498][    C0] RAX: ffffc900067770e6 RBX: dffffc0000000000 RCX: 000000000000002e
[  287.144502][    C0] RDX: 0000000000000000 RSI: ffffffff8b8b8905 RDI: ffffc900067770e6
[  287.144506][    C0] RBP: ffffffff8b8b8906 R08: ffffc900067770e6 R09: 1ffff92000ceee1c
[  287.144511][    C0] R10: dffffc0000000000 R11: fffff52000ceee1d R12: ffffc90006776f00
[  287.144515][    C0] R13: ffffc900067770e7 R14: 0000000000000800 R15: ffffffff8b8b8905
[  287.144525][    C0]  sprintf+0xd9/0x120
[  287.144532][    C0]  ? data_push_tail+0x5d1/0x630
[  287.144541][    C0]  ? __pfx_sprintf+0x10/0x10
[  287.144548][    C0]  ? desc_read+0x208/0x3f0
[  287.144556][    C0]  info_print_prefix+0x155/0x310
[  287.144567][    C0]  ? __pfx_info_print_prefix+0x10/0x10
[  287.144575][    C0]  ? _prb_read_valid+0xa7b/0xa90
[  287.144584][    C0]  record_print_text+0x154/0x430
[  287.144593][    C0]  ? __pfx__prb_read_valid+0x10/0x10
[  287.144600][    C0]  ? __pfx_record_print_text+0x10/0x10
[  287.144608][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  287.144618][    C0]  printk_get_next_message+0x26d/0x7b0
[  287.144627][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  287.144637][    C0]  ? __pfx_printk_get_next_message+0x10/0x10
[  287.144644][    C0]  ? __lock_acquire+0xab9/0xd20
[  287.144654][    C0]  ? console_flush_all+0x476/0xc40
[  287.144663][    C0]  console_flush_all+0x4ca/0xc40
[  287.144671][    C0]  ? console_flush_all+0x891/0xc40
[  287.144679][    C0]  ? console_flush_all+0x13a/0xc40
[  287.144688][    C0]  ? __pfx_console_flush_all+0x10/0x10
[  287.144698][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  287.144708][    C0]  console_unlock+0xc4/0x270
[  287.144716][    C0]  ? __pfx_console_unlock+0x10/0x10
[  287.144723][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  287.144733][    C0]  vprintk_emit+0x5b7/0x7a0
[  287.144741][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[  287.144748][    C0]  ? __pfx_trace_call_bpf+0x10/0x10
[  287.144757][    C0]  _printk+0xcf/0x120
[  287.144766][    C0]  ? __pfx__printk+0x10/0x10
[  287.144777][    C0]  __show_mem+0x95/0x21b0
[  287.144785][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  287.144795][    C0]  ? dump_stack_lvl+0x1e7/0x250
[  287.144803][    C0]  ? __pfx___show_mem+0x10/0x10
[  287.144812][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  287.144819][    C0]  ? __pfx__printk+0x10/0x10
[  287.144827][    C0]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  287.144835][    C0]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  287.144843][    C0]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  287.144851][    C0]  warn_alloc+0x2dd/0x310
[  287.144858][    C0]  ? stack_depot_save_flags+0x40/0x900
[  287.144867][    C0]  ? perf_trace_run_bpf_submit+0x41/0x170
[  287.144875][    C0]  ? __pfx_warn_alloc+0x10/0x10
[  287.144882][    C0]  ? kasan_save_track+0x4f/0x80
[  287.144892][    C0]  ? xskq_create+0x56/0x170
[  287.144900][    C0]  ? xsk_init_queue+0xb0/0x110
[  287.144907][    C0]  ? xsk_setsockopt+0x4de/0x710
[  287.144913][    C0]  ? do_sock_setsockopt+0x17c/0x1b0
[  287.144920][    C0]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  287.144926][    C0]  ? do_syscall_64+0xfa/0x3b0
[  287.144934][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.144941][    C0]  __vmalloc_node_range_noprof+0x125/0x12f0
[  287.144954][    C0]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  287.144961][    C0]  ? __kasan_kmalloc+0x93/0xb0
[  287.144968][    C0]  vmalloc_user_noprof+0xad/0xf0
[  287.144975][    C0]  ? xskq_create+0xbf/0x170
[  287.144983][    C0]  xskq_create+0xbf/0x170
[  287.144991][    C0]  xsk_init_queue+0xb0/0x110
[  287.144998][    C0]  xsk_setsockopt+0x4de/0x710
[  287.145006][    C0]  ? __pfx_xsk_setsockopt+0x10/0x10
[  287.145014][    C0]  ? aa_sock_opt_perm+0x74/0x110
[  287.145022][    C0]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  287.145030][    C0]  ? __pfx_xsk_setsockopt+0x10/0x10
[  287.145037][    C0]  do_sock_setsockopt+0x17c/0x1b0
[  287.145045][    C0]  __x64_sys_setsockopt+0x13f/0x1b0
[  287.145052][    C0]  do_syscall_64+0xfa/0x3b0
[  287.145061][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.145066][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  287.145074][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.145079][    C0] RIP: 0033:0x7fc69d18eb69
[  287.145086][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  287.145090][    C0] RSP: 002b:00007fc69e02d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  287.145097][    C0] RAX: ffffffffffffffda RBX: 00007fc69d3b5fa0 RCX: 00007fc69d18eb69
[  287.145101][    C0] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008
[  287.145105][    C0] RBP: 00007fc69d211df1 R08: 0000000000000004 R09: 0000000000000000
[  287.145108][    C0] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  287.145112][    C0] R13: 0000000000000000 R14: 00007fc69d3b5fa0 R15: 00007ffcc3b21088
[  287.145119][    C0]  </TASK>
[  287.154430][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  287.154444][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  287.154459][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  287.154467][   T34] Call Trace:
[  287.154473][   T34]  <TASK>
[  287.154478][   T34]  dump_stack_lvl+0x99/0x250
[  287.154496][   T34]  ? __asan_memcpy+0x40/0x70
[  287.154512][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  287.154526][   T34]  ? __pfx__printk+0x10/0x10
[  287.154548][   T34]  panic+0x2db/0x790
[  287.154565][   T34]  ? __pfx_panic+0x10/0x10
[  287.154578][   T34]  ? __pfx_delay_tsc+0x10/0x10
[  287.154589][   T34]  ? nmi_backtrace_stall_check+0x433/0x440
[  287.154607][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  287.154625][   T34]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  287.154642][   T34]  watchdog+0x102d/0x1030
[  287.154662][   T34]  ? watchdog+0x1de/0x1030
[  287.154684][   T34]  kthread+0x711/0x8a0
[  287.154702][   T34]  ? __pfx_watchdog+0x10/0x10
[  287.154718][   T34]  ? __pfx_kthread+0x10/0x10
[  287.154735][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  287.154757][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  287.154771][   T34]  ? __pfx_kthread+0x10/0x10
[  287.154787][   T34]  ret_from_fork+0x3fc/0x770
[  287.154802][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  287.154819][   T34]  ? __switch_to_asm+0x39/0x70
[  287.154834][   T34]  ? __switch_to_asm+0x33/0x70
[  287.154848][   T34]  ? __pfx_kthread+0x10/0x10
[  287.154867][   T34]  ret_from_fork_asm+0x1a/0x30
[  287.154893][   T34]  </TASK>
[  287.155688][   T34] Kernel Offset: disabled

VM DIAGNOSIS:
22:09:30  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81680ea6 RBX=0000000000000000 RCX=ffff8880201b5640 RDX=0000000000010100
RSI=0000000000000008 RDI=ffffffff92a52460 RBP=ffffc90000007d68 RSP=ffffc90000007ce0
R8 =ffffffff92a52467 R9 =1ffffffff254a48c R10=dffffc0000000000 R11=fffffbfff254a48d
R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff81680ea7 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc69e02d6c0 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001000 CR3=0000000124a80000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000082 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fc69d212f89
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f7b0
R8 =ffff888021598237 R9 =1ffff110042b3046 R10=dffffc0000000000 R11=ffffffff85471fa0
R12=dffffc0000000000 R13=ffffffff99af58ce R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff8547201c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f53ece1f881 CR3=0000000107596000 CR4=000006f0
DR0=0000000000000000 DR1=0000200000000300 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
