last executing test programs:

17.409920732s ago: executing program 1 (id=1302):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'})
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000894) (async)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0), 0x2, 0xffffffffffffffff, 0x4}, 0x38)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000000700000002"], 0x48)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000100))

17.408989774s ago: executing program 1 (id=1303):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000340)={'bridge_slave_1\x00'})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000040)=@bpf_lsm={0x6, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3}]}, &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x5}, 0x94)

17.289263717s ago: executing program 1 (id=1306):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b9040a000000e8fe55a1180015000600142603600e120900", 0x26}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000020"], 0x33fe0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xe, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x8f10, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x1408001, 0xaea}, 0x957c5, 0x33, 0xfffffbff, 0x5, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000, 0xfffffffffffffffc}, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x60)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000040)='%ps    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r6}, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r7, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r7, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0], 0x0, 0xcc, &(0x7f0000000640)=[{}, {}], 0x10, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x6a, 0x8, 0x8, &(0x7f0000000740)}}, 0x10)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000a00e00003e6000001"], 0x48)
r9 = socket$kcm(0xa, 0x5, 0x0)
socketpair(0x10, 0xa, 0x9, &(0x7f0000000b00))
ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x890b, &(0x7f0000000000))
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r8, 0x20, &(0x7f0000001080)={0x0, 0x0, <r10=>0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r10, 0x4)

16.496522922s ago: executing program 0 (id=1318):
perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x200c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="2e0000003e000511d25a80698c6394090224fc602f6e354008000180", 0x1c}], 0x1, 0x0, 0x0, 0x39c}, 0x0)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="1800000068006b00", 0x8}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48010)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000180)=""/117, 0x75}], 0x1, &(0x7f0000000200)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x1)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1303000076"], 0xfe33)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

16.496006356s ago: executing program 0 (id=1319):
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f0000008a0e000000000080300c100000800000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000200"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50)
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x24000000)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200"/20, @ANYRES32, @ANYBLOB="0200000000000003"], 0x48)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000100))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088a847", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)

16.49453509s ago: executing program 0 (id=1320):
r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x52, 0x10, 0x7f, 0x10, 0x0, 0x200, 0x20000, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x7ff, 0x10000}, 0x1002, 0x7e2ef7a2, 0x4, 0x6, 0x2, 0x0, 0x2, 0x0, 0x7fff, 0x0, 0x500000000}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0xad, 0xc2, 0xff, 0x9, 0x0, 0xdc, 0x0, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000140), 0x2}, 0x981, 0x7, 0x8, 0x5, 0x9, 0x2, 0x6000, 0x0, 0x78d1d342, 0x0, 0xff}, 0x0, 0xe, r0, 0xa)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x7f, 0x0, 0x0, 0x7602, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(0x0, r1, 0x10, r1, 0xc)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000280)=r1)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000ffffffff00000000fd", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600200001400000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a70000090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100100040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x0)

16.419816154s ago: executing program 1 (id=1321):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50)
r1 = socket$kcm(0x1e, 0x5, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x17, 0x0, 0xffffffffffffffff, 0x50622, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x10000000000, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000002ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b63d25a80648c2594", 0xf}, {&(0x7f0000000240)="2616810726", 0x5}], 0x2}, 0x2)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r6=>0x0, <r7=>0x0})
close(r6)
setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r8=>0x0, <r9=>0x0})
close(r8)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0xb}, 0x48)
setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r10 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f00000004c0)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x0, 0x1}}, 0x80, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

16.237453281s ago: executing program 0 (id=1322):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb836d5cecbe8b101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0, 0x8}, 0x390, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005", 0x17}], 0x1}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="97d9deabea352018000000000000006761110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) (async)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00fe80000000000000c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) (async)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10) (async)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)

16.223125537s ago: executing program 0 (id=1323):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000a00)=""/189, 0xbd}, {&(0x7f0000002a00)=""/4068, 0xfe4}, {&(0x7f0000000f40)=""/185, 0xb9}, {&(0x7f0000000780)=""/217, 0xd9}, {&(0x7f0000000680)=""/197, 0xc5}, {&(0x7f0000000280)=""/216, 0xd8}, {&(0x7f0000000380)=""/221, 0xdd}, {&(0x7f0000000880)=""/198, 0xc6}, {&(0x7f0000000140)=""/76, 0x4c}], 0x9, 0x0, 0x0, 0x3f00}, 0x0)

16.109727425s ago: executing program 0 (id=1324):
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000003000000000000000000000000000046784fc0b7d500"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000640)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaeb}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x60)
perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r5 = openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000c40), 0x12)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000030000006102000002"], 0x48)
openat$cgroup_freezer_state(r1, &(0x7f0000000080), 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x1a, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115001d000200142603600e12080005007a010401a8001600200003400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202})
ioctl$TUNSETPERSIST(r9, 0x400454c9, 0x1)
ioctl$TUNSETLINK(r9, 0x400454cd, 0x6)

15.749403669s ago: executing program 2 (id=1327):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffc, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x81, 0x40, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000000c0)=0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x7d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70)

15.68916868s ago: executing program 2 (id=1328):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x4}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x2, 0x8}, 0xc)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x1e, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5cf4, 0x0, 0x0, 0x0, 0x4611}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffff9}, @jmp={0x5, 0x0, 0x6, 0x4, 0xa, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffff8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x6, 0x8d, &(0x7f0000000200)=""/141, 0x41000, 0x74, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x9, 0x7ff, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0x1, r2], 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a80)={r3, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0xa, 0x3, &(0x7f00000017c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001840)=[0x0, 0x0, 0x0], 0x0, 0x89, &(0x7f0000001880)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000018c0), &(0x7f0000001900), 0x8, 0x9a, 0x8, 0x8, &(0x7f0000001940)}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001d80)={r3, 0xe0, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000001b00)=[0x0, 0x0, 0x0], &(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r6=>0x0, 0x88, &(0x7f0000001b80)=[{}], 0x8, 0x10, &(0x7f0000001bc0), &(0x7f0000001c00), 0x8, 0x6e, 0x8, 0x8, &(0x7f0000001c40)}}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000001740)=[{&(0x7f00000004c0)="4786a94055d1e659f3daa5c733aee9ba8a17577322bb4c1c7e27aa0cb01e4a514e330eebbee6e506e70a8ceb7c729c5d084d093568896c90baed3b9b067064a4b20c3d950583642438fd2331529ad1b613f95426465a7855d3a4ba9548de515bcc3de021608ad71e0d684f282350bb06bf61e3988c8c626884338df7d6e819b5432897b6e805516a5d65f98b2734ac9c5f7d03707fbeaf2820c9e4a345108abc91f2980c4d6afff18d656f1fc05f430be31debe201111f2aeafb275729afcfaf1eba9a4d848e84b3b000f340daf6aa47f92a2e4d7f4e9079706b8d4c3603da9fe0cf456b8c094cc2734bd454d00e85", 0xef}, {&(0x7f00000005c0)="efa1839d9b67957de1c857e92397da22d92a052d80dd313af1bde98d4c90cb40b04601c7fb551bf33beaca624aa1b0046eab85cdf70494d2101b6cb4621985f420901bbb1737ba0d122e79c332b9d8d291f33433854e9420a722df973b70086064d6e847c7e864a57ffff48e3ef44211cda6407fbdfd3990d06057e6dbac80f10155e25a1ee99c2154a039a3e55ca8d938229daa553da858c180eff013e86a861ab7ac5f6399a4b03010a09c1d3ef3df047734ab8b9b09141511e5546ac27bf511ceb41773", 0xc5}, {&(0x7f00000006c0)="e6e453e784a656383bbbc853a4d74c687ccc65106926a484dd4bcbdf471167bb4fc4bcc1abb9e5e76768e76dd2e52e76344562597905905b13e165100b1f7017cc872d295fc0ae193908d18c67a84d78cc723dc91755ce70ce292b5fc267b17a9190e59f", 0x64}, {&(0x7f0000000740)="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", 0x1000}], 0x4, &(0x7f0000001dc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffc}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast1, @local}}}], 0xa0}, 0x8000)
r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f00)=@o_path={&(0x7f0000001ec0)='./file0\x00', 0x0, 0x18, r0}, 0x18)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002040)={@ifindex=r5, 0x3, 0x0, 0x2, &(0x7f0000001f40)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000001f80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002000)=[0x0, 0x0, 0x0, 0x0, 0x0], <r8=>0x0}, 0x40)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002140)={{r1, <r9=>0xffffffffffffffff}, &(0x7f00000020c0), &(0x7f0000002100)='%pI4   \x00'}, 0x20)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002080)={@map=r9, r7, 0x5, 0x1c, r3, @void, @value=r3, @void, @void, r8}, 0x20)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003540)={&(0x7f0000002180)=@in6={0xa, 0x6, 0x10, @mcast2}, 0x80, &(0x7f0000002480)=[{&(0x7f0000002200)="d538390e2e3524a3abac2fc31cfc418b2b3d81425f94cf6f42ef264af40707d81f51dce3afaa7c10a0ec91c028bad39c9e4a46bc6dd6656fc0d05a2c229eadbb5975e8f38c7be375115d4ae33c1025c944000f5fb1f032e2c9cdd33a29c32bae8a0c6fc764eba1dcfdd64725fe2a4e6db5d0c04cce8098c8990a84adba588c750860a0b0d5261c170628f8b1e5feafa1dbdfdc876d85203c72389116ac9b3043c30fcc80c75b5287de45dd583bd2325b24d663f4a2583cd00343dc5f5686d38697ac46b9000fd941ab", 0xc9}, {&(0x7f0000002300)="a3c64ee5bf52d206b6cda9d67c3017bf467c80edb5a457b98fcf6563baabaffce2d6812704f1f34530cfd62478d6c84b46cef0c9ab8e36544b831ff7a0054f76c8fef3947c6c9123dcd9", 0x4a}, {&(0x7f0000002380)="c77f39d586fdaff8ced5030e22155cb115a6", 0x12}, {&(0x7f00000023c0)="c67944565bb23bd6f36c319c309f0fa2f5b0da884abbe2a502988dbf628cedced393b24a11622dccdb7820eca1a66ef2356df735767748160da111a442fb800fa476f864b3482e30d9a9a78309ecf59cd52a11f3a94d136fdfd986b3af25db64e524e8f12f8e77d8d1d83774a49225e3cfe18f63c204aac05c546a2289c417e32104574e2640837f3a25a8f57ebea1c36c07a4a9ba08d57a1704ab4eec4bca11f74c01c98fb3cf0882367cfb62ee9032644da040", 0xb4}], 0x4, &(0x7f00000024c0)=[{0x1010, 0x11, 0x8, "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"}, {0x20, 0x10e, 0x4, "617227c2bcd5bffd843c1389293c2932"}, {0x20, 0x35c480978a1585ed, 0x10001, "dd53b9258495454186f062d8f959e38b"}], 0x1050}, 0x815)
r10 = perf_event_open$cgroup(&(0x7f00000035c0)={0x3, 0x80, 0x81, 0x8, 0x0, 0xb, 0x0, 0xca7a, 0x218, 0x5, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000003580), 0x4}, 0x10100, 0x9, 0xe5, 0x0, 0x1000, 0xfffffff9, 0x7, 0x0, 0x5, 0x0, 0x10000}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r10, 0x2401, 0xe)
r11 = syz_clone(0x20000000, &(0x7f00000036c0)="22de9747a0377d293d7e32c4848fa6702de0f6903049491ca9154eec9731f1822e38a1a3a96b76abe912fe1aa8b166ee2956111dcc63439196263f6227b268906c0669c3dcae38bdf643e80b63b9edd3451200dd746c7c353eacfe045009b719b318f33a6a77b1cda45f6fba9bf519c456ed44c86fa33a9e35", 0x79, &(0x7f0000003740), &(0x7f0000003780), &(0x7f00000037c0)="1266d930ab72e01414267fcb607bd2c64fbfd10799b977a2b442137bbf9309b70ecfebf46974488c692bfedaecdf1e55c2fdbb90c69bac3452e289377cedb25bff7b8b17a54fd5868d2a78e2929cb72e78a981adeff9c313527890e00f2ad369ca346fe8cbba094469d0a40c3deb4b7afee965fc33660b80b67909904e494f2e93801eeb8d9aad78a6af425d3d6869175e4db39e7d06e03357d1398bebef5279c032cdff280d0d9db3c5cec53320d8a175bc3458c5c9b278d204147c1db5337fa4a41871c172f185c91cabf435750a9b08d5ab3beab0a50f1030d17a0dc7804020a2d3cc29f44980175aa3c2f3565337dea487980faee8c6eb")
perf_event_open(&(0x7f0000003640)={0x3, 0x80, 0x6, 0x7, 0x7, 0x9c, 0x0, 0x9, 0x1840, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101, 0x9}, 0x2101, 0x8000, 0x7fffffff, 0x2, 0x40000000, 0xff, 0x9, 0x0, 0x5, 0x0, 0x5445fac2}, r11, 0xf, r3, 0x2)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000038c0)=0xf, 0x12)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000003900), 0x10001, 0x0)
ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000003940))
ioctl$TUNATTACHFILTER(r12, 0x401054d5, &(0x7f00000039c0)={0x5, &(0x7f0000003980)=[{0x3eb, 0x4, 0xf3}, {0x5, 0x6, 0x81, 0x3}, {0xb9, 0x8, 0x7f, 0x5}, {0x4, 0x9, 0x43, 0xf4}, {0x7, 0x0, 0x7f, 0x4}]})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000003a00)='./cgroup/syz0\x00', 0x200002, 0x0)
r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000003a40)=r6, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000003a80)=@bloom_filter={0x1e, 0x4, 0x5, 0xf3d, 0x0, 0xffffffffffffffff, 0x7fff, '\x00', 0x0, r13, 0x4}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003b00)={0xffffffffffffffff, <r14=>0xffffffffffffffff})
r15 = socket$kcm(0x29, 0x7, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r15, 0x89e2, &(0x7f0000003b40)={r14})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000003b80)={r1, <r16=>0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000003c40)={{r16}, &(0x7f0000003bc0), &(0x7f0000003c00)='%pK    \x00'}, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003c80))
socket$kcm(0x29, 0x2, 0x0)

15.599888467s ago: executing program 2 (id=1329):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd8e3fe3dc4e48aa31086b8703300000001f00000000000000040014000d0029", 0x27}], 0x1, 0x0, 0x0, 0x1f000801}, 0x41040)
write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0xfe33)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a400000085000000d000000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x400000002, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd8e3fe3dc4e48aa31086b8703300000001f00000000000000040014000d0029", 0x27}], 0x1, 0x0, 0x0, 0x1f000801}, 0x41040) (async)
write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0xfe33) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x2) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a400000085000000d000000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)

15.59953617s ago: executing program 1 (id=1330):
r0 = socket$kcm(0x10, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="d80000001600811e4e81f782db44b9040a1d0802a6cdda08040000a1180002461a1a39738c1e541208010f0100814401a80016ea1f0001", 0x37}, {&(0x7f00000004c0)="be2d6e84ea61bb84c722c835db0e94a8e2d890c1ba21fa6355555517d231f80729d5dc30badb91d855f5cc6248135a7d2512df8693135c4288fc981b30b29ce44f54d49c5105878ebb55672481f404e958ba23710874404b9913b63390aa40c6ac7eeb077343da1fba4e2549c696a4daeeb9da31c718a597294f8d94b0a05e26835d0255520f3a08d730ff083322cb4adbfe4bdd15f3dd8361c130de3a54c94b1a7e68cdf3ca118c70a69925dd012de549e9b1224ec6341396e5d94d4472de0ffe", 0xc1}], 0x2, 0x0, 0x0, 0x7400}, 0x2404c811)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r1}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x91, 0x0, &(0x7f0000000100)="b9ff03006044238cb89e14f088a81bff88a800008100630677fbac141442e934a0a662079f4b4dfe87e5feca6aab845013f286dd1a3908020b098da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00', 0x20})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r3, 0x29, 0x32, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f9, &(0x7f0000000080))
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x480c81, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c9042, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x226140, 0x0)
r7 = socket$kcm(0xa, 0x1, 0x106)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8880, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x4108, 0x3, 0x0, 0x6, 0x7, 0x4, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x18)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
close(r9)
recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x5452, &(0x7f00000005c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\x8b\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02<\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\x00\x007 2_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3\x13\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84Ro\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xacN\xe9f\x11\xff\x00\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96\xa7\xd2<\"\x18\x95\xa1\x10\xf0\xdb\xe8*\xa8\a\x00\xc5<\xf9\xaf\xb3\xfbC/\x98\xc7`\xa9\xccA\xc3(\r\xad\x92\xcdO\xe7\xa0\xa7a[\xbbj\xc2i1\xa5\x16\x80>\xc3\x93\n-\x7f\xbaX\xa6\xa2\xe1\x87\x11\x05\x9d9\x01\xa4#)\x93\t:\xec7\x1c\x8f\r\xd08\xb7')
sendmsg$kcm(r7, &(0x7f0000000780)={&(0x7f0000000000)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, 0x0}, 0x20000001)
close(r6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800067c7c09e8fe0ba10a0004000200142603600e1208001e0003070401a8000600200e02400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2d311e000008"})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a0, &(0x7f00000000c0)='%d\xf1\xfa\xbc$j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f')

15.539561157s ago: executing program 2 (id=1331):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpid()
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0x0, r1, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x80ffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000070000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

15.48882029s ago: executing program 2 (id=1332):
r0 = socket$kcm(0x10, 0x2, 0x0)
close(r0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x6, 0xfe, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x72bd1de2ad10d6f3, 0xfffffffffffffffc, 0xcfb5, 0x1, 0x0, 0x4, 0x0, 0x0, 0x84000, 0x0, 0x1}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305828, &(0x7f0000000040)=0x20000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
socket$kcm(0xa, 0x1, 0x106)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000780)={0x3, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0xc2, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c000000050000e1000000000200000d000000000200000000000000000000000000000300305f1e00"], 0x0, 0x39, 0x0, 0x1}, 0x28)
r2 = socket$kcm(0xa, 0x3, 0x73)
sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000002440)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x50, 0x29, 0x32, 0x80fe}}, @ip_pktinfo={{0x0, 0xe, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, 0x0)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000976d1ab300800000000080bb89632600", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="08000000000000000000009d6a000000c30a00fe4100000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000700)={0x3, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x3102, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={&(0x7f0000000340), 0x8}, 0x14105, 0x102, 0x2, 0x3, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4000a9e6}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000500000003000000000000080000e8b32c48722195cc28201b4c362700000030002e00"], 0x0, 0x29, 0x5a, 0xffffffff}, 0x28)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc0}, 0x10020)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)

15.488394296s ago: executing program 1 (id=1333):
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, 0xfffffffc}, 0x80, 0x0}, 0x640ce0c0)
socket$kcm(0x2, 0x200000000000001, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r1, &(0x7f0000000180), 0x40010)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46}, [@call={0x85, 0x0, 0x0, 0x6e}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_type(r2, &(0x7f0000000180), 0x40010)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x0, 0x0, 0x0, 0x0, 0x7fef, 0x53, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, @perf_config_ext={0x6, 0x5}, 0x49651e38e90d59e2, 0x2e, 0xfffffbff, 0x3, 0x4f1, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
write$cgroup_type(r3, &(0x7f0000000180), 0x40010)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c085)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b9090000000b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c06000200036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d95322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcffff951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x20004080)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000040000007919b000000000009500000000000000d631ad79f3d6d34a3f6b47cfd3a1564f222f3d67099d825d0b33082bc4987436d2876040eaf00f12202740f5"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x21}, 0x94)

15.31797092s ago: executing program 2 (id=1334):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x100002e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x100002e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xffffffffffffff60}, 0x2122)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x2b, 0x1, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r4, 0x400454ce, 0xa)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
sendmsg$inet(r3, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818)
close(0xffffffffffffffff)
close(r3) (async)
close(r3)
unlink(&(0x7f0000000280)='./file0\x00')
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x8, 0x0, 0x0}}, 0x10) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x8, 0x0, 0x0}}, 0x10)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000000000000850000007b00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000000000000850000007b00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000014000000140000000a00000000000000010000060400000006000000000000000000000000005f"], 0x0, 0x36}, 0x28)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r7}, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
perf_event_open(&(0x7f0000004600)={0x2, 0x80, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x100000005, 0x82c0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x3}, 0xecf5, 0x3, 0x10000000, 0x0, 0xd6ae, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffdfffffffffffff}, 0x0, 0xffffffffffffffff, r2, 0x0)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) (async)
r8 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r8, &(0x7f00000001c0)={'b', ' *:* ', 'm\x00'}, 0x8)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0xfe33) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0xfe33)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, 0x4, 0x11082, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x40, 0x6}, 0x0, 0x2, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

205.752222ms ago: executing program 32 (id=1324):
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000003000000000000000000000000000046784fc0b7d500"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000640)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaeb}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x60)
perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r5 = openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000c40), 0x12)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000030000006102000002"], 0x48)
openat$cgroup_freezer_state(r1, &(0x7f0000000080), 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x1a, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115001d000200142603600e12080005007a010401a8001600200003400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202})
ioctl$TUNSETPERSIST(r9, 0x400454c9, 0x1)
ioctl$TUNSETLINK(r9, 0x400454cd, 0x6)

149.623207ms ago: executing program 33 (id=1333):
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, 0xfffffffc}, 0x80, 0x0}, 0x640ce0c0)
socket$kcm(0x2, 0x200000000000001, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r1, &(0x7f0000000180), 0x40010)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46}, [@call={0x85, 0x0, 0x0, 0x6e}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_type(r2, &(0x7f0000000180), 0x40010)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x0, 0x0, 0x0, 0x0, 0x7fef, 0x53, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, @perf_config_ext={0x6, 0x5}, 0x49651e38e90d59e2, 0x2e, 0xfffffbff, 0x3, 0x4f1, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
write$cgroup_type(r3, &(0x7f0000000180), 0x40010)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c085)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b9090000000b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c06000200036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d95322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcffff951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x20004080)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000040000007919b000000000009500000000000000d631ad79f3d6d34a3f6b47cfd3a1564f222f3d67099d825d0b33082bc4987436d2876040eaf00f12202740f5"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x21}, 0x94)

0s ago: executing program 34 (id=1334):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x100002e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x100002e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xffffffffffffff60}, 0x2122)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x2b, 0x1, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r4, 0x400454ce, 0xa)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
sendmsg$inet(r3, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818)
close(0xffffffffffffffff)
close(r3) (async)
close(r3)
unlink(&(0x7f0000000280)='./file0\x00')
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x8, 0x0, 0x0}}, 0x10) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x8, 0x0, 0x0}}, 0x10)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000000000000850000007b00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000000000000850000007b00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000014000000140000000a00000000000000010000060400000006000000000000000000000000005f"], 0x0, 0x36}, 0x28)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r7}, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
perf_event_open(&(0x7f0000004600)={0x2, 0x80, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x100000005, 0x82c0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x3}, 0xecf5, 0x3, 0x10000000, 0x0, 0xd6ae, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffdfffffffffffff}, 0x0, 0xffffffffffffffff, r2, 0x0)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) (async)
r8 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r8, &(0x7f00000001c0)={'b', ' *:* ', 'm\x00'}, 0x8)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0xfe33) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0xfe33)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, 0x4, 0x11082, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x40, 0x6}, 0x0, 0x2, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:58958' (ED25519) to the list of known hosts.
syzkaller login: [   48.726453][ T5773] cgroup: Unknown subsys name 'net'
[   48.813958][ T5773] cgroup: Unknown subsys name 'cpuset'
[   48.818580][ T5773] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.325812][ T5773] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.724176][ T5217] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.727497][ T5217] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.730540][ T5217] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.734061][ T5217] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.737367][ T5217] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.752001][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.755354][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.771242][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.781731][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.788336][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.802816][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.805927][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.808604][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.812026][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.815432][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.124340][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   55.154081][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   55.206514][ T5823] chnl_net:caif_netlink_parms(): no params data found
[   55.305055][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.308599][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.311858][ T5827] bridge_slave_0: entered allmulticast mode
[   55.315496][ T5827] bridge_slave_0: entered promiscuous mode
[   55.326229][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.329302][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.332801][ T5827] bridge_slave_1: entered allmulticast mode
[   55.336717][ T5827] bridge_slave_1: entered promiscuous mode
[   55.340670][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.343612][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.345993][ T5832] bridge_slave_0: entered allmulticast mode
[   55.349164][ T5832] bridge_slave_0: entered promiscuous mode
[   55.366889][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.369472][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.372125][ T5832] bridge_slave_1: entered allmulticast mode
[   55.374896][ T5832] bridge_slave_1: entered promiscuous mode
[   55.434555][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.440582][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.446066][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.448533][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.451784][ T5823] bridge_slave_0: entered allmulticast mode
[   55.454717][ T5823] bridge_slave_0: entered promiscuous mode
[   55.459931][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.479807][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.508628][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.511855][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.514838][ T5823] bridge_slave_1: entered allmulticast mode
[   55.518678][ T5823] bridge_slave_1: entered promiscuous mode
[   55.550037][ T5827] team0: Port device team_slave_0 added
[   55.555300][ T5832] team0: Port device team_slave_0 added
[   55.558926][ T5827] team0: Port device team_slave_1 added
[   55.576780][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.595000][ T5832] team0: Port device team_slave_1 added
[   55.601576][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.651769][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.654748][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.665870][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.671492][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.674712][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.685732][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.691800][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.695019][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.704399][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.730985][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.733872][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.744801][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.753562][ T5823] team0: Port device team_slave_0 added
[   55.760011][ T5823] team0: Port device team_slave_1 added
[   55.827612][ T5827] hsr_slave_0: entered promiscuous mode
[   55.830644][ T5827] hsr_slave_1: entered promiscuous mode
[   55.834776][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.837989][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.848989][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.855364][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.858180][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.867724][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.916741][ T5832] hsr_slave_0: entered promiscuous mode
[   55.919054][ T5832] hsr_slave_1: entered promiscuous mode
[   55.921852][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.924463][ T5832] Cannot create hsr debugfs directory
[   55.965027][ T5823] hsr_slave_0: entered promiscuous mode
[   55.967448][ T5823] hsr_slave_1: entered promiscuous mode
[   55.969796][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.972936][ T5823] Cannot create hsr debugfs directory
[   56.183682][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.205451][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.219783][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.235487][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.260259][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.267870][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.292636][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.299529][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.349415][ T5823] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.355834][ T5823] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.375487][ T5823] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.382230][ T5823] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.489613][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.515760][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.530169][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   56.549290][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   56.560795][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.564069][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.577791][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.580917][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.589459][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.592617][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.611847][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.622045][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.625292][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.665621][ T5823] 8021q: adding VLAN 0 to HW filter on device team0
[   56.696547][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.699017][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.704906][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.707321][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.790370][ T5823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.873107][ T5826] Bluetooth: hci2: command tx timeout
[   56.873144][ T5217] Bluetooth: hci1: command tx timeout
[   56.877782][ T5830] Bluetooth: hci0: command tx timeout
[   56.900348][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.927355][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.949776][ T5832] veth0_vlan: entered promiscuous mode
[   56.972231][ T5832] veth1_vlan: entered promiscuous mode
[   57.028838][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.033982][ T5827] veth0_vlan: entered promiscuous mode
[   57.043326][ T5832] veth0_macvtap: entered promiscuous mode
[   57.053797][ T5827] veth1_vlan: entered promiscuous mode
[   57.060671][ T5832] veth1_macvtap: entered promiscuous mode
[   57.082843][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.097876][ T5827] veth0_macvtap: entered promiscuous mode
[   57.105724][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.113658][ T5823] veth0_vlan: entered promiscuous mode
[   57.116349][ T5827] veth1_macvtap: entered promiscuous mode
[   57.123529][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.126467][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.129971][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.134161][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.142223][ T5823] veth1_vlan: entered promiscuous mode
[   57.163870][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.180904][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.187605][ T5823] veth0_macvtap: entered promiscuous mode
[   57.193555][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.196386][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.199113][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.202805][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.216857][ T5823] veth1_macvtap: entered promiscuous mode
[   57.254579][  T738] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.265782][  T738] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.267133][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.286823][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.297097][ T5823] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.300047][ T5823] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.306246][ T5823] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.309849][ T5823] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.326651][  T738] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.329280][  T738] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.364581][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.367956][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.390609][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.403449][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.406833][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.420931][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.427727][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.453715][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.456384][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.463597][ T5894] netlink: 'syz.2.3': attribute type 12 has an invalid length.
[   57.466572][ T5894] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3'.
[   57.595699][    C1] hrtimer: interrupt took 123543 ns
[   57.607502][ T5907] Zero length message leads to an empty skb
[   57.720319][ T5905] netlink: 8210 bytes leftover after parsing attributes in process `syz.2.4'.
[   57.809494][ T5830] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[   57.869530][ T5923] netlink: 'syz.1.7': attribute type 4 has an invalid length.
[   57.875730][ T5923] netlink: 14329 bytes leftover after parsing attributes in process `syz.1.7'.
[   57.923135][ T5925] netlink: 'syz.1.8': attribute type 21 has an invalid length.
[   57.925690][ T5925] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8'.
[   58.158749][ T5939] netlink: 'syz.0.13': attribute type 29 has an invalid length.
[   58.165603][ T5934] netlink: 'syz.1.12': attribute type 10 has an invalid length.
[   58.218309][ T5944] syz.0.14 (5944) used greatest stack depth: 21048 bytes left
[   58.231596][ T5934] team0 (unregistering): Port device team_slave_0 removed
[   58.249812][ T5934] team0 (unregistering): Port device team_slave_1 removed
[   58.470482][ T5963] netlink: 'syz.2.18': attribute type 21 has an invalid length.
[   58.481742][ T5963] netlink: 'syz.2.18': attribute type 1 has an invalid length.
[   58.678656][ T5970] netlink: 'syz.0.22': attribute type 10 has an invalid length.
[   58.786801][ T5970] team0: Port device wlan1 added
[   58.862322][ T5975] netlink: 6955 bytes leftover after parsing attributes in process `syz.2.24'.
[   58.867009][ T5975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24'.
[   58.878329][ T5975] netlink: 83780 bytes leftover after parsing attributes in process `syz.2.24'.
[   58.942698][ T5997] netlink: 'syz.2.24': attribute type 10 has an invalid length.
[   58.950945][ T5830] Bluetooth: hci2: command tx timeout
[   58.968134][ T5830] Bluetooth: hci0: command tx timeout
[   58.971748][ T5830] Bluetooth: hci1: command tx timeout
[   59.006342][ T5997] team0: Port device geneve1 added
[   59.024405][ T5997] syz.2.24 (5997) used greatest stack depth: 20816 bytes left
[   59.115011][ T6003] netlink: 'syz.2.27': attribute type 39 has an invalid length.
[   59.115806][ T6001] netlink: 191152 bytes leftover after parsing attributes in process `syz.0.26'.
[   59.162262][ T6003] hsr_slave_0 (unregistering): left promiscuous mode
[   60.477725][ T6045] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.37'.
[   60.830186][ T5217] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3
[   61.041559][ T5217] Bluetooth: hci1: command tx timeout
[   61.043549][ T5830] Bluetooth: hci0: command tx timeout
[   61.044256][ T5826] Bluetooth: hci2: command tx timeout
[   61.085159][ T6099] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.46'.
[   61.090248][ T6099] syz.2.46 uses obsolete (PF_INET,SOCK_PACKET)
[   61.097084][ T6099] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.135112][ T6101] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.343435][ T6107] GPL: port 1(erspan0) entered blocking state
[   61.345807][ T6107] GPL: port 1(erspan0) entered disabled state
[   61.348208][ T6107] erspan0: entered allmulticast mode
[   61.352362][ T6107] erspan0: entered promiscuous mode
[   61.357611][ T6107] GPL: port 1(erspan0) entered blocking state
[   61.359932][ T6107] GPL: port 1(erspan0) entered forwarding state
[   61.369234][ T6107] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.374106][ T6107] team0: Port device bond0 added
[   62.526474][ T6134] __nla_validate_parse: 5 callbacks suppressed
[   62.526487][ T6134] netlink: 166 bytes leftover after parsing attributes in process `syz.0.57'.
[   62.683767][ T6148] syzkaller0: entered promiscuous mode
[   62.685805][ T6148] syzkaller0: entered allmulticast mode
[   62.689051][   T13] syzkaller0: tun_net_xmit 48
[   62.704081][ T6148] syzkaller0: tun_chr_ioctl cmd 2147767520
[   62.709905][ T6148] syzkaller0: tun_net_xmit 1280
[   62.713282][ T6148] syzkaller0: create flow: hash 932898049 index 2
[   62.727697][ T6147] syzkaller0: delete flow: hash 932898049 index 2
[   62.793727][ T6150] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.62'.
[   63.122904][ T5826] Bluetooth: hci1: command tx timeout
[   63.125307][ T5826] Bluetooth: hci0: command tx timeout
[   63.518182][ T5217] Bluetooth: hci2: command tx timeout
[   64.041994][ T6171] validate_nla: 5 callbacks suppressed
[   64.042010][ T6171] netlink: 'syz.2.66': attribute type 33 has an invalid length.
[   64.046591][ T6171] netlink: 'syz.2.66': attribute type 13 has an invalid length.
[   64.049052][ T6171] netlink: 152 bytes leftover after parsing attributes in process `syz.2.66'.
[   64.162374][ T6157] warning: `syz.0.64' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   64.257454][ T6177] netlink: 'syz.1.69': attribute type 6 has an invalid length.
[   64.261156][ T6177] netlink: 'syz.1.69': attribute type 7 has an invalid length.
[   64.264105][ T6177] netlink: 'syz.1.69': attribute type 15 has an invalid length.
[   64.267351][ T6177] netlink: 'syz.1.69': attribute type 16 has an invalid length.
[   64.269810][ T6177] netlink: 'syz.1.69': attribute type 21 has an invalid length.
[   64.272469][ T6177] netlink: 'syz.1.69': attribute type 25 has an invalid length.
[   64.274892][ T6177] netlink: 'syz.1.69': attribute type 27 has an invalid length.
[   64.277332][ T6177] netlink: 'syz.1.69': attribute type 28 has an invalid length.
[   64.302031][ T6182] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.70'.
[   64.305647][ T6182] netlink: 60 bytes leftover after parsing attributes in process `syz.2.70'.
[   64.308901][ T6181] netlink: 60 bytes leftover after parsing attributes in process `syz.2.70'.
[   64.896647][ T6200] netlink: 17 bytes leftover after parsing attributes in process `syz.0.76'.
[   64.896721][ T6201] netlink: 17 bytes leftover after parsing attributes in process `syz.0.76'.
[   64.907473][ T6200] netlink: zone id is out of range
[   64.908694][ T6201] netlink: zone id is out of range
[   64.909170][ T6200] netlink: zone id is out of range
[   64.911102][ T6201] netlink: zone id is out of range
[   64.911109][ T6201] netlink: zone id is out of range
[   64.911112][ T6201] netlink: zone id is out of range
[   64.911115][ T6201] netlink: zone id is out of range
[   64.911118][ T6201] netlink: zone id is out of range
[   64.911122][ T6201] netlink: zone id is out of range
[   64.911125][ T6201] netlink: zone id is out of range
[   64.984300][ T6207] netlink: 55 bytes leftover after parsing attributes in process `syz.1.77'.
[   65.126284][ T6212] netlink: 10 bytes leftover after parsing attributes in process `syz.1.79'.
[   66.907369][ T6322] : renamed from hsr_slave_0 (while UP)
[   66.952281][ T5826] Bluetooth: hci1: command 0x0406 tx timeout
[   68.008744][ T5217] Bluetooth: hci2: ISO packet for unknown connection handle 61
[   68.008914][ T6345] __nla_validate_parse: 12 callbacks suppressed
[   68.008923][ T6345] netlink: 132 bytes leftover after parsing attributes in process `syz.2.116'.
[   68.101604][ T6347] netlink: 14 bytes leftover after parsing attributes in process `syz.0.117'.
[   68.300099][ T6362] netlink: 830 bytes leftover after parsing attributes in process `syz.1.122'.
[   68.481097][ T6372] netlink: 156 bytes leftover after parsing attributes in process `syz.1.125'.
[   68.506404][ T6372] C: renamed from team_slave_0
[   68.586904][ T6372] netlink: 152 bytes leftover after parsing attributes in process `syz.1.125'.
[   68.798895][ T6377] syzkaller0: entered promiscuous mode
[   69.030265][ T6347] syz.0.117 (6347) used greatest stack depth: 20608 bytes left
[   69.130114][ T6391] validate_nla: 9 callbacks suppressed
[   69.130129][ T6391] netlink: 'syz.0.131': attribute type 10 has an invalid length.
[   69.147102][ T6391] team0: Port device geneve1 added
[   69.304581][ T6372] syz.1.125 (6372) used greatest stack depth: 20216 bytes left
[   69.307972][ T6398] netlink: 'syz.0.132': attribute type 10 has an invalid length.
[   69.319971][ T6398] bond0: (slave bond_slave_0): Releasing backup interface
[   69.369516][ T6400] netlink: 763 bytes leftover after parsing attributes in process `syz.1.135'.
[   69.383743][ T6397] netlink: 'syz.2.134': attribute type 13 has an invalid length.
[   69.390107][ T6397] netlink: 164 bytes leftover after parsing attributes in process `syz.2.134'.
[   69.437454][ T6403] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.439913][ T6403] batman_adv: batadv0: Removing interface: batadv_slave_0
[   69.462148][ T6403] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.464559][ T6403] batman_adv: batadv0: Removing interface: batadv_slave_1
[   69.469171][ T6405] netlink: 'syz.2.137': attribute type 10 has an invalid length.
[   69.497168][ T6405] team0: Port device wlan1 added
[   69.745338][ T6422] netlink: 'syz.1.142': attribute type 2 has an invalid length.
[   69.747883][ T6422] netlink: 'syz.1.142': attribute type 1 has an invalid length.
[   69.750591][ T6422] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.142'.
[   69.767120][ T6422] nbd: must specify at least one socket
[   69.899821][ T6428] netlink: 'syz.1.144': attribute type 10 has an invalid length.
[   70.002416][ T6429] netlink: 'syz.2.143': attribute type 4 has an invalid length.
[   70.040596][ T6431] netlink: 8192 bytes leftover after parsing attributes in process `syz.1.145'.
[   70.873782][ T6436] netlink: 'syz.0.146': attribute type 13 has an invalid length.
[   70.879911][ T6436] netlink: 164 bytes leftover after parsing attributes in process `syz.0.146'.
[   70.885530][ T6436] netlink: 'syz.0.146': attribute type 23 has an invalid length.
[   71.043644][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.045825][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.390541][ T6454] netlink: 'syz.2.154': attribute type 11 has an invalid length.
[   71.741604][ T6469] dummy0: entered promiscuous mode
[   71.743430][ T6469] dummy0: entered allmulticast mode
[   71.753231][ T6465] net_ratelimit: 243 callbacks suppressed
[   71.753276][ T6465] openvswitch: netlink: Message has 4 unknown bytes.
[   73.394664][ T6489] team0: Device ipvlan1 failed to register rx_handler
[   73.583775][ T6504] netlink: 'syz.0.169': attribute type 11 has an invalid length.
[   73.586348][ T6504] __nla_validate_parse: 7 callbacks suppressed
[   73.586355][ T6504] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.169'.
[   73.593106][ T6503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   73.673675][ T6511] netlink: 209588 bytes leftover after parsing attributes in process `syz.0.171'.
[   73.729185][ T6520] netlink: 56 bytes leftover after parsing attributes in process `syz.1.173'.
[   73.740308][ T6520] netlink: 56 bytes leftover after parsing attributes in process `syz.1.173'.
[   73.843785][ T6528] netlink: 132 bytes leftover after parsing attributes in process `syz.0.176'.
[   73.944643][ T6535] netlink: 40 bytes leftover after parsing attributes in process `syz.1.177'.
[   73.948200][ T6535] netlink: 1 bytes leftover after parsing attributes in process `syz.1.177'.
[   74.042179][ T6537] netlink: 132 bytes leftover after parsing attributes in process `syz.1.178'.
[   74.082546][ T6545] netlink: 168 bytes leftover after parsing attributes in process `syz.0.180'.
[   74.124642][ T6549] netlink: 6955 bytes leftover after parsing attributes in process `syz.0.182'.
[   74.173744][ T6553] validate_nla: 9 callbacks suppressed
[   74.173755][ T6553] netlink: 'syz.0.184': attribute type 6 has an invalid length.
[   74.188037][ T6552] delete_channel: no stack
[   74.250037][ T6562] netlink: 'syz.1.185': attribute type 3 has an invalid length.
[   74.614504][ T6578] netlink: 'syz.1.192': attribute type 10 has an invalid length.
[   74.746773][ T6587] netlink: 'syz.0.194': attribute type 10 has an invalid length.
[   74.750442][ T6587] netlink: 'syz.0.194': attribute type 19 has an invalid length.
[   75.580997][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1120159546 wd_nsec: 1120159560
[   76.189638][ T6605] netlink: 'syz.1.201': attribute type 10 has an invalid length.
[   76.241233][ T6610] netlink: 'syz.2.203': attribute type 10 has an invalid length.
[   76.527240][ T6640] netlink: 'syz.2.212': attribute type 4 has an invalid length.
[   76.529900][ T6640] netlink: 'syz.2.212': attribute type 16 has an invalid length.
[   76.556435][ T6644] netlink: 'syz.2.214': attribute type 39 has an invalid length.
[   76.843476][ T6650] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.849680][ T6650] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.896694][ T6650] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.900137][ T6650] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.905099][ T6650] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.908581][ T6650] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.947048][ T6650] team0: Port device bridge0 added
[   77.025025][ T6664] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.029950][ T6664] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   77.106920][ T6677] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   77.119580][ T6677] batadv_slave_1: entered allmulticast mode
[   77.236589][ T6691] bond_slave_0: entered allmulticast mode
[   78.647435][ T6738] __nla_validate_parse: 26 callbacks suppressed
[   78.647492][ T6738] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.244'.
[   78.678329][ T6740] netlink: 6955 bytes leftover after parsing attributes in process `syz.1.245'.
[   78.682049][ T6740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.245'.
[   78.684889][ T6740] netlink: 83780 bytes leftover after parsing attributes in process `syz.1.245'.
[   78.856828][ T6762] netlink: 168 bytes leftover after parsing attributes in process `syz.0.252'.
[   78.910049][ T6758] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.250'.
[   78.923220][ T6758] nbd: must specify a device to reconfigure
[   78.985108][ T6765] syzkaller0: entered promiscuous mode
[   78.986961][ T6765] syzkaller0: entered allmulticast mode
[   78.999055][   T12] syzkaller0: tun_net_xmit 48
[   79.749743][ T6767] syzkaller0: entered promiscuous mode
[   79.751998][ T6767] syzkaller0: entered allmulticast mode
[   79.760389][   T12] syzkaller0: tun_net_xmit 48
[   79.914169][ T6781] validate_nla: 10 callbacks suppressed
[   79.914181][ T6781] netlink: 'syz.2.258': attribute type 21 has an invalid length.
[   80.619041][ T6785] netlink: 60 bytes leftover after parsing attributes in process `syz.2.258'.
[   80.624378][ T6792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.259'.
[   80.637867][ T6784] netlink: 60 bytes leftover after parsing attributes in process `syz.2.258'.
[   80.662084][ T6787] netlink: 60 bytes leftover after parsing attributes in process `syz.2.258'.
[   80.691046][ T6793] netlink: 'syz.1.259': attribute type 10 has an invalid length.
[   80.709142][ T6793] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   81.279974][    T9] cfg80211: failed to load regulatory.db
[   81.398054][ T6806] syzkaller0: tun_chr_ioctl cmd 2147767507
[   81.567525][ T6828] netlink: 'syz.0.272': attribute type 10 has an invalid length.
[   82.356907][ T6839] netlink: 'syz.2.276': attribute type 41 has an invalid length.
[   82.631772][ T6847] netlink: 'syz.1.278': attribute type 21 has an invalid length.
[   82.670616][ T6851] Driver unsupported XDP return value 0 on prog  (id 241) dev N/A, expect packet loss!
[   83.543970][ T6899] netlink: 'syz.2.294': attribute type 10 has an invalid length.
[   83.548579][ T6899] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   83.696817][ T6905] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   83.956909][ T6905] syz.0.295 (6905) used greatest stack depth: 20160 bytes left
[   84.031874][ T6916] delete_channel: no stack
[   84.065107][ T6920] __nla_validate_parse: 10 callbacks suppressed
[   84.065124][ T6920] netlink: 156 bytes leftover after parsing attributes in process `syz.1.301'.
[   85.253398][ T6968] bridge_slave_1: left allmulticast mode
[   85.255685][ T6968] bridge_slave_1: left promiscuous mode
[   85.258002][ T6968] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.282471][ T6968] bridge_slave_0: left allmulticast mode
[   85.285016][ T6968] bridge_slave_0: left promiscuous mode
[   85.287498][ T6968] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.300630][ T6970] netlink: 'syz.1.314': attribute type 2 has an invalid length.
[   85.303999][ T6970] netlink: 'syz.1.314': attribute type 1 has an invalid length.
[   85.307910][ T6970] netlink: 777 bytes leftover after parsing attributes in process `syz.1.314'.
[   85.312018][ T6970] netlink: 129904 bytes leftover after parsing attributes in process `syz.1.314'.
[   85.316895][ T6970] netlink: 'syz.1.314': attribute type 2 has an invalid length.
[   85.319910][ T6970] netlink: 'syz.1.314': attribute type 1 has an invalid length.
[   85.324728][ T6968] team0: Port device bridge0 removed
[   85.325230][ T6970] netlink: 777 bytes leftover after parsing attributes in process `syz.1.314'.
[   85.331766][ T6970] netlink: 'syz.1.314': attribute type 21 has an invalid length.
[   85.335449][ T6970] netlink: 128 bytes leftover after parsing attributes in process `syz.1.314'.
[   85.383223][ T6970] netlink: 'syz.1.314': attribute type 5 has an invalid length.
[   85.387622][ T6970] netlink: 'syz.1.314': attribute type 6 has an invalid length.
[   85.392886][ T6970] netlink: 3 bytes leftover after parsing attributes in process `syz.1.314'.
[   85.476666][ T6977] syzkaller0: entered promiscuous mode
[   85.909449][ T6991] netlink: 6955 bytes leftover after parsing attributes in process `syz.1.322'.
[   85.913718][ T6991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.322'.
[   85.917131][ T6991] netlink: 83780 bytes leftover after parsing attributes in process `syz.1.322'.
[   86.107778][ T7005] netlink: 6955 bytes leftover after parsing attributes in process `syz.2.326'.
[   86.294160][ T7013] netlink: 'syz.2.329': attribute type 1 has an invalid length.
[   86.297503][ T7013] netlink: 'syz.2.329': attribute type 3 has an invalid length.
[   86.994543][ T7034] tap0: tun_chr_ioctl cmd 2147767521
[   87.019037][ T7034] netlink: 'syz.1.336': attribute type 3 has an invalid length.
[   87.599032][ T7071] syzkaller0: entered allmulticast mode
[   88.310215][ T7103] TCP: TCP_TX_DELAY enabled
[   89.484849][ T7129] syz.0.365 (7129) used obsolete PPPIOCDETACH ioctl
[   89.495729][ T7133] syzkaller0: tun_chr_ioctl cmd 1074025677
[   89.501058][ T7133] syzkaller0: linktype set to 32
[   90.408758][ T7144] __nla_validate_parse: 14 callbacks suppressed
[   90.408788][ T7144] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.369'.
[   90.415103][ T7141] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.369'.
[   90.418386][ T7147] validate_nla: 11 callbacks suppressed
[   90.418396][ T7147] netlink: 'syz.1.371': attribute type 1 has an invalid length.
[   90.424570][ T7147] netlink: 152 bytes leftover after parsing attributes in process `syz.1.371'.
[   90.427561][ T7147] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   90.433252][ T7149] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.369'.
[   90.484520][ T7154] netlink: 132 bytes leftover after parsing attributes in process `syz.1.372'.
[   90.619243][ T7165] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31
[   90.659940][ T7169] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.378'.
[   90.955906][ T7188] netlink: 6955 bytes leftover after parsing attributes in process `syz.1.386'.
[   90.967204][ T7188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.386'.
[   90.979657][ T7188] netlink: 83780 bytes leftover after parsing attributes in process `syz.1.386'.
[   91.012507][ T7190] C: renamed from team_slave_0 (while UP)
[   91.016706][ T7190] netlink: 'syz.2.387': attribute type 3 has an invalid length.
[   91.019270][ T7190] netlink: 'syz.2.387': attribute type 1 has an invalid length.
[   91.023473][ T7190] netlink: 116 bytes leftover after parsing attributes in process `syz.2.387'.
[   91.299296][ T7207] netlink: 'syz.2.391': attribute type 27 has an invalid length.
[   91.576438][ T7214] netdevsim netdevsim0 : renamed from netdevsim0 (while UP)
[   91.878997][ T7218] sit0: entered allmulticast mode
[   92.138210][ T7223] sit0: entered promiscuous mode
[   92.699024][ T7237] delete_channel: no stack
[   92.701850][ T7237] delete_channel: no stack
[   93.595491][ T7272] netlink: 'syz.2.413': attribute type 3 has an invalid length.
[   93.600401][ T7272] netlink: 'syz.2.413': attribute type 6 has an invalid length.
[   93.887158][ T7294] netlink: 'syz.1.419': attribute type 33 has an invalid length.
[   93.891443][ T7294] netlink: 'syz.1.419': attribute type 13 has an invalid length.
[   94.588258][ T7330] netlink: 'syz.2.431': attribute type 7 has an invalid length.
[   95.006322][ T7346] batadv_slave_1: entered promiscuous mode
[   95.008959][ T7346] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.339896][ T7364] __nla_validate_parse: 20 callbacks suppressed
[   96.339906][ T7364] netlink: 132 bytes leftover after parsing attributes in process `syz.2.441'.
[   96.375143][ T7364] netlink: 56 bytes leftover after parsing attributes in process `syz.2.441'.
[   96.388263][ T7364] netlink: 56 bytes leftover after parsing attributes in process `syz.2.441'.
[   96.395529][ T7369] netlink: zone id is out of range
[   96.397369][ T7369] netlink: zone id is out of range
[   96.399026][ T7369] netlink: zone id is out of range
[   96.401939][ T7369] netlink: zone id is out of range
[   96.403732][ T7369] netlink: zone id is out of range
[   96.405630][ T7369] netlink: zone id is out of range
[   96.407308][ T7369] netlink: zone id is out of range
[   96.409179][ T7369] netlink: zone id is out of range
[   96.413795][ T7369] netlink: zone id is out of range
[   96.415852][ T7369] netlink: zone id is out of range
[   96.448546][ T7364] netlink: 60 bytes leftover after parsing attributes in process `syz.2.441'.
[   96.454844][ T7364] netlink: 60 bytes leftover after parsing attributes in process `syz.2.441'.
[   97.164249][ T7425] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.463'.
[   97.893729][ T7431] bridge_slave_1: left allmulticast mode
[   97.899741][ T7431] bridge_slave_1: left promiscuous mode
[   97.905439][ T7431] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.923815][ T7431] bridge_slave_0: left promiscuous mode
[   97.951088][ T7431] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.202120][ T7437] delete_channel: no stack
[   98.213897][ T7437] delete_channel: no stack
[   99.091302][ T7445] netlink: 'syz.0.463': attribute type 6 has an invalid length.
[   99.094178][ T7445] netlink: 'syz.0.463': attribute type 7 has an invalid length.
[   99.096957][ T7445] netlink: 'syz.0.463': attribute type 15 has an invalid length.
[   99.099745][ T7445] netlink: 'syz.0.463': attribute type 16 has an invalid length.
[   99.102980][ T7445] netlink: 'syz.0.463': attribute type 21 has an invalid length.
[   99.105973][ T7445] netlink: 'syz.0.463': attribute type 25 has an invalid length.
[   99.108806][ T7445] netlink: 'syz.0.463': attribute type 27 has an invalid length.
[   99.112122][ T7445] netlink: 'syz.0.463': attribute type 28 has an invalid length.
[   99.114930][ T7445] netlink: 'syz.0.463': attribute type 29 has an invalid length.
[   99.117847][ T7445] netlink: 15446 bytes leftover after parsing attributes in process `syz.0.463'.
[   99.423587][ T7453] netlink: 'syz.1.470': attribute type 29 has an invalid length.
[   99.455635][ T7455] netlink: 132 bytes leftover after parsing attributes in process `syz.2.472'.
[   99.493146][ T7451] netlink: 64887 bytes leftover after parsing attributes in process `syz.0.471'.
[   99.941195][ T7479] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.480'.
[  100.534925][    C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  101.260063][ T7570] syz.1.506: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  101.267246][ T7570] CPU: 0 UID: 0 PID: 7570 Comm: syz.1.506 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  101.267259][ T7570] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  101.267264][ T7570] Call Trace:
[  101.267268][ T7570]  <TASK>
[  101.267272][ T7570]  dump_stack_lvl+0x189/0x250
[  101.267288][ T7570]  ? __pfx_dump_stack_lvl+0x10/0x10
[  101.267298][ T7570]  ? __pfx__printk+0x10/0x10
[  101.267309][ T7570]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  101.267320][ T7570]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  101.267330][ T7570]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  101.267341][ T7570]  warn_alloc+0x214/0x310
[  101.267350][ T7570]  ? stack_depot_save_flags+0x429/0x900
[  101.267361][ T7570]  ? __pfx_warn_alloc+0x10/0x10
[  101.267371][ T7570]  ? kasan_save_track+0x4f/0x80
[  101.267377][ T7570]  ? xskq_create+0x56/0x170
[  101.267386][ T7570]  ? xsk_init_queue+0xb0/0x110
[  101.267395][ T7570]  ? xsk_setsockopt+0x4de/0x710
[  101.267402][ T7570]  ? do_sock_setsockopt+0x17c/0x1b0
[  101.267410][ T7570]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  101.267418][ T7570]  ? do_syscall_64+0xfa/0x3b0
[  101.267428][ T7570]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.267445][ T7570]  __vmalloc_node_range_noprof+0x125/0x12f0
[  101.267478][ T7570]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  101.267493][ T7570]  ? preempt_schedule_thunk+0x16/0x30
[  101.267506][ T7570]  ? __kasan_kmalloc+0x93/0xb0
[  101.267520][ T7570]  vmalloc_user_noprof+0xad/0xf0
[  101.267532][ T7570]  ? xskq_create+0xbf/0x170
[  101.267548][ T7570]  xskq_create+0xbf/0x170
[  101.267566][ T7570]  xsk_init_queue+0xb0/0x110
[  101.267581][ T7570]  xsk_setsockopt+0x4de/0x710
[  101.267590][ T7570]  ? __pfx_xsk_setsockopt+0x10/0x10
[  101.267599][ T7570]  ? __fget_files+0x2a/0x420
[  101.267607][ T7570]  ? aa_sock_opt_perm+0x74/0x110
[  101.267618][ T7570]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  101.267627][ T7570]  ? __pfx_xsk_setsockopt+0x10/0x10
[  101.267659][ T7570]  do_sock_setsockopt+0x17c/0x1b0
[  101.267670][ T7570]  __x64_sys_setsockopt+0x13f/0x1b0
[  101.267680][ T7570]  do_syscall_64+0xfa/0x3b0
[  101.267692][ T7570]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.267699][ T7570]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  101.267709][ T7570]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.267716][ T7570] RIP: 0033:0x7f7a5878e9a9
[  101.267724][ T7570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  101.267730][ T7570] RSP: 002b:00007f7a59572038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  101.267739][ T7570] RAX: ffffffffffffffda RBX: 00007f7a589b5fa0 RCX: 00007f7a5878e9a9
[  101.267744][ T7570] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005
[  101.267748][ T7570] RBP: 00007f7a58810d69 R08: 0000000000000004 R09: 0000000000000000
[  101.267752][ T7570] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  101.267756][ T7570] R13: 0000000000000000 R14: 00007f7a589b5fa0 R15: 00007ffe6869af48
[  101.267768][ T7570]  </TASK>
[  101.267948][ T7570] Mem-Info:
[  101.398855][ T7570] active_anon:5304 inactive_anon:0 isolated_anon:0
[  101.398855][ T7570]  active_file:12985 inactive_file:38223 isolated_file:0
[  101.398855][ T7570]  unevictable:1768 dirty:79 writeback:0
[  101.398855][ T7570]  slab_reclaimable:9439 slab_unreclaimable:52448
[  101.398855][ T7570]  mapped:18376 shmem:2444 pagetables:894
[  101.398855][ T7570]  sec_pagetables:0 bounce:0
[  101.398855][ T7570]  kernel_misc_reclaimable:0
[  101.398855][ T7570]  free:287120 free_pcp:19548 free_cma:0
[  101.415547][ T7570] Node 0 active_anon:10564kB inactive_anon:0kB active_file:44132kB inactive_file:11360kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:46692kB dirty:296kB writeback:0kB shmem:4804kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8356kB pagetables:2456kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  101.427368][ T7570] Node 1 active_anon:10652kB inactive_anon:0kB active_file:7808kB inactive_file:141532kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:26812kB dirty:20kB writeback:0kB shmem:4972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4424kB pagetables:1120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  101.439022][ T7570] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  101.449206][ T7570] lowmem_reserve[]: 0 812 812 812 812
[  101.452490][ T7570] Node 0 DMA32 free:338860kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10564kB inactive_anon:0kB active_file:44132kB inactive_file:11360kB unevictable:3536kB writepending:296kB present:1556484kB managed:831912kB mlocked:0kB bounce:0kB free_pcp:30860kB local_pcp:15888kB free_cma:0kB
[  101.465491][ T7570] lowmem_reserve[]: 0 0 0 0 0
[  101.468100][ T7570] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  101.479612][ T7570] lowmem_reserve[]: 0 0 854 854 854
[  101.484300][ T7570] Node 1 Normal free:335644kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10720kB inactive_anon:0kB active_file:7808kB inactive_file:141532kB unevictable:3536kB writepending:20kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:47332kB local_pcp:22364kB free_cma:0kB
[  101.497553][ T7570] lowmem_reserve[]: 0 0 0 0 0
[  101.500183][ T7570] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  101.516947][ T7570] Node 0 DMA32: 1386*4kB (UME) 691*8kB (UME) 621*16kB (UM) 603*32kB (UME) 232*64kB (UM) 21*128kB (UME) 16*256kB (UM) 2*512kB (UM) 5*1024kB (ME) 2*2048kB (ME) 65*4096kB (UM) = 338416kB
[  101.524552][ T7570] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  101.533701][ T7570] Node 1 Normal: 106*4kB (UM) 737*8kB (UME) 376*16kB (UME) 142*32kB (UME) 161*64kB (UME) 59*128kB (UM) 29*256kB (UME) 17*512kB (UM) 14*1024kB (M) 13*2048kB (UME) 60*4096kB (UM) = 337584kB
[  101.553925][ T7570] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  101.558675][ T7570] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  101.566218][ T7570] 53656 total pagecache pages
[  101.575061][ T7570] 0 pages in swap cache
[  101.577940][ T7570] Free swap  = 124996kB
[  101.581324][ T7570] Total swap = 124996kB
[  101.588673][ T7570] 786301 pages RAM
[  101.599473][ T7570] 0 pages HighMem/MovableOnly
[  101.604211][ T7570] 241075 pages reserved
[  101.607687][ T7570] 0 pages cma reserved
[  102.442784][ T7594] __nla_validate_parse: 7 callbacks suppressed
[  102.445144][ T7594] netlink: 156 bytes leftover after parsing attributes in process `syz.0.514'.
[  102.473598][ T7593] C: renamed from team_slave_0 (while UP)
[  102.565523][ T7593] netlink: 152 bytes leftover after parsing attributes in process `syz.0.514'.
[  102.847383][ T7609] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.519'.
[  102.956847][ T7611] veth1_macvtap: left promiscuous mode
[  102.959434][ T7611] macsec0: entered promiscuous mode
[  102.963455][ T7611] macsec0: entered allmulticast mode
[  102.973644][ T7611] veth1_macvtap: entered promiscuous mode
[  102.975573][ T7611] veth1_macvtap: entered allmulticast mode
[  103.498223][ T7635] netlink: 40 bytes leftover after parsing attributes in process `syz.0.528'.
[  103.512481][ T7635] batman_adv: batadv0: Adding interface: virt_wifi0
[  103.514949][ T7635] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.526270][ T7635] batman_adv: batadv0: Interface activated: virt_wifi0
[  103.715125][ T7640] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.530'.
[  103.782952][ T7640] netlink: 56823 bytes leftover after parsing attributes in process `syz.1.530'.
[  104.095519][ T7656] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.535'.
[  104.359563][ T7663] net_ratelimit: 81 callbacks suppressed
[  104.359573][ T7663] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  104.596314][ T7666] netlink: 60 bytes leftover after parsing attributes in process `syz.0.538'.
[  104.648038][ T7670] validate_nla: 13 callbacks suppressed
[  104.648178][ T7670] netlink: 'syz.0.539': attribute type 3 has an invalid length.
[  104.670276][ T7670] netlink: 169664 bytes leftover after parsing attributes in process `syz.0.539'.
[  105.027335][ T7679] netlink: 132 bytes leftover after parsing attributes in process `syz.2.542'.
[  105.122203][ T7689] netlink: 'syz.1.545': attribute type 6 has an invalid length.
[  105.520569][ T7710] netlink: 'syz.0.551': attribute type 17 has an invalid length.
[  105.795726][ T7722] netlink: 'syz.0.557': attribute type 10 has an invalid length.
[  106.417479][ T7738] syzkaller0: tun_chr_ioctl cmd 1074025673
[  106.419518][ T7738] syzkaller0: tun_chr_ioctl cmd 1074025673
[  106.423160][ T7739] syzkaller0: tun_chr_ioctl cmd 1074025677
[  106.425311][ T7739] syzkaller0: linktype set to 801
[  106.427311][ T7738] syzkaller0: tun_chr_ioctl cmd 1074025673
[  106.429324][ T7739] syzkaller0: tun_chr_ioctl cmd 1074025677
[  106.434937][ T7739] syzkaller0: linktype set to 801
[  106.436926][ T7738] syzkaller0: tun_chr_ioctl cmd 1074025673
[  106.438983][ T7738] syzkaller0: tun_chr_ioctl cmd 1074025673
[  106.442307][ T7739] syzkaller0: tun_chr_ioctl cmd 1074025677
[  106.444328][ T7739] syzkaller0: linktype set to 801
[  106.446276][ T7738] syzkaller0: tun_chr_ioctl cmd 1074025673
[  106.448448][ T7739] syzkaller0: tun_chr_ioctl cmd 1074025677
[  106.450458][ T7739] syzkaller0: linktype set to 801
[  106.452528][ T7738] syzkaller0: tun_chr_ioctl cmd 1074025673
[  106.454732][ T7738] syzkaller0: tun_chr_ioctl cmd 1074025673
[  106.456966][ T7739] syzkaller0: tun_chr_ioctl cmd 1074025677
[  106.459067][ T7739] syzkaller0: linktype set to 801
[  106.461179][ T7739] syzkaller0: tun_chr_ioctl cmd 1074025677
[  106.463345][ T7739] syzkaller0: linktype set to 801
[  106.466207][ T7738] syzkaller0: tun_chr_ioctl cmd 1074025673
[  106.468259][ T7739] syzkaller0: tun_chr_ioctl cmd 1074025677
[  106.470911][ T7739] syzkaller0: linktype set to 801
[  106.531875][ T7744] netlink: 'syz.2.564': attribute type 21 has an invalid length.
[  106.534695][ T7744] netlink: 'syz.2.564': attribute type 11 has an invalid length.
[  106.543100][ T7744] netlink: 'syz.2.564': attribute type 7 has an invalid length.
[  106.546651][ T7744] netlink: 'syz.2.564': attribute type 33 has an invalid length.
[  106.578702][ T7747] ksmbd: Unknown IPC event: 1, ignore.
[  106.683500][ T7759] netlink: 'syz.1.569': attribute type 2 has an invalid length.
[  106.767997][ T7761] netlink: 'syz.0.570': attribute type 2 has an invalid length.
[  107.306729][ T7803] team0: Port device macvlan0 added
[  108.993440][ T7853] __nla_validate_parse: 18 callbacks suppressed
[  108.993555][ T7853] netlink: 40 bytes leftover after parsing attributes in process `syz.2.599'.
[  109.108487][ T7868] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.603'.
[  109.275673][ T7866] syzkaller0: entered promiscuous mode
[  109.285926][ T7866] syzkaller0: entered allmulticast mode
[  110.138416][ T7879] netlink: 7807 bytes leftover after parsing attributes in process `syz.0.606'.
[  110.449589][ T7910] netlink: 56 bytes leftover after parsing attributes in process `syz.0.614'.
[  110.516355][ T7913] syzkaller0: entered promiscuous mode
[  110.518328][ T7913] syzkaller0: entered allmulticast mode
[  110.889622][ T7935] validate_nla: 8 callbacks suppressed
[  110.889632][ T7935] netlink: 'syz.2.620': attribute type 10 has an invalid length.
[  111.344110][ T7935] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  111.405295][ T7940] netlink: 60 bytes leftover after parsing attributes in process `syz.0.621'.
[  111.421813][ T7940] netlink: 60 bytes leftover after parsing attributes in process `syz.0.621'.
[  111.425988][ T7940] netlink: 60 bytes leftover after parsing attributes in process `syz.0.621'.
[  111.496336][ T7953] netlink: 'syz.1.625': attribute type 8 has an invalid length.
[  111.499102][ T7953] netlink: 156 bytes leftover after parsing attributes in process `syz.1.625'.
[  111.567217][ T7961] netlink: 60 bytes leftover after parsing attributes in process `syz.0.628'.
[  111.570575][ T7961] netlink: 60 bytes leftover after parsing attributes in process `syz.0.628'.
[  112.189293][ T7990] syzkaller0: entered promiscuous mode
[  112.191473][ T7990] syzkaller0: entered allmulticast mode
[  112.235011][ T7992] netlink: 'syz.0.639': attribute type 11 has an invalid length.
[  112.239977][ T7992] netlink: 'syz.0.639': attribute type 11 has an invalid length.
[  112.291900][ T7997] netlink: 'syz.0.640': attribute type 10 has an invalid length.
[  112.372787][ T8001] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  112.622983][ T8007] netlink: 'syz.2.644': attribute type 21 has an invalid length.
[  112.837145][ T8024] netlink: 'syz.0.649': attribute type 10 has an invalid length.
[  112.973258][ T8039] netlink: 'syz.0.654': attribute type 4 has an invalid length.
[  113.027816][ T8043] netlink: 'syz.1.655': attribute type 11 has an invalid length.
[  113.074245][ T8047] netlink: 'syz.1.657': attribute type 10 has an invalid length.
[  113.499840][ T8069] netlink: 'syz.0.664': attribute type 25 has an invalid length.
[  113.685540][ T8075] netlink: 'syz.1.666': attribute type 10 has an invalid length.
[  113.735228][ T8078] syzkaller0: left promiscuous mode
[  113.740784][ T8078] syzkaller0: left allmulticast mode
[  113.794516][ T8083] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  113.801097][ T8083] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  113.805623][ T8083] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  114.057745][ T8103] __nla_validate_parse: 22 callbacks suppressed
[  114.057769][ T8103] netlink: 188 bytes leftover after parsing attributes in process `syz.2.675'.
[  114.113370][ T8110] netlink: 60 bytes leftover after parsing attributes in process `syz.0.677'.
[  114.147150][ T8108] netlink: 60 bytes leftover after parsing attributes in process `syz.0.677'.
[  114.151959][ T8110] netlink: 60 bytes leftover after parsing attributes in process `syz.0.677'.
[  114.161960][ T8103] netlink: 46435 bytes leftover after parsing attributes in process `syz.2.675'.
[  114.847201][ T8145] netlink: 60 bytes leftover after parsing attributes in process `syz.1.690'.
[  114.851522][ T8142] netlink: 60 bytes leftover after parsing attributes in process `syz.1.690'.
[  114.858766][ T8145] netlink: 60 bytes leftover after parsing attributes in process `syz.1.690'.
[  114.873873][ T8147] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.691'.
[  115.079395][ T8160] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.695'.
[  115.084355][ T8160] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  115.088532][ T8160] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  116.009775][ T8198] team0: Port device macvlan0 removed
[  116.193534][ T8214] validate_nla: 11 callbacks suppressed
[  116.193544][ T8214] netlink: 'syz.0.710': attribute type 10 has an invalid length.
[  117.246182][ T8279] netlink: 'syz.0.717': attribute type 4 has an invalid length.
[  117.249886][ T8279] netlink: 'syz.0.717': attribute type 9 has an invalid length.
[  117.255556][ T8279] netlink: 'syz.0.717': attribute type 10 has an invalid length.
[  117.258903][ T8279] netlink: 'syz.0.717': attribute type 11 has an invalid length.
[  117.337365][ T8287] netlink: 'syz.0.719': attribute type 10 has an invalid length.
[  117.660993][ T8327] netlink: 'syz.2.728': attribute type 10 has an invalid length.
[  118.603983][ T8398] netlink: 'syz.0.735': attribute type 10 has an invalid length.
[  118.678395][ T8404] netlink: 'syz.1.737': attribute type 10 has an invalid length.
[  118.685937][ T8401] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  118.689998][ T8401] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  118.887065][ T8424] netlink: 'syz.2.742': attribute type 10 has an invalid length.
[  119.229864][ T8438] __nla_validate_parse: 12 callbacks suppressed
[  119.229877][ T8438] netlink: 14 bytes leftover after parsing attributes in process `syz.2.748'.
[  119.281917][ T8438] netlink: 176 bytes leftover after parsing attributes in process `syz.2.748'.
[  119.564362][ T8452] netlink: 56 bytes leftover after parsing attributes in process `syz.2.753'.
[  119.571001][ T8452] netlink: 56 bytes leftover after parsing attributes in process `syz.2.753'.
[  119.673782][ T8458] netlink: 60 bytes leftover after parsing attributes in process `syz.2.753'.
[  119.677888][ T8452] netlink: 60 bytes leftover after parsing attributes in process `syz.2.753'.
[  119.700950][ T8458] netlink: 60 bytes leftover after parsing attributes in process `syz.2.753'.
[  119.814394][ T8473] netlink: 60 bytes leftover after parsing attributes in process `syz.2.757'.
[  119.817727][ T8465] netlink: 60 bytes leftover after parsing attributes in process `syz.2.757'.
[  120.407189][ T8494] netlink: 128 bytes leftover after parsing attributes in process `syz.0.767'.
[  120.667345][ T8502]  (unregistering): left promiscuous mode
[  121.268976][ T8527] validate_nla: 15 callbacks suppressed
[  121.269020][ T8527] netlink: 'syz.1.779': attribute type 4 has an invalid length.
[  121.366099][ T8538] netlink: 'syz.1.783': attribute type 8 has an invalid length.
[  121.369322][ T8538] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  121.405456][ T8545] netlink: 'syz.2.785': attribute type 5 has an invalid length.
[  121.408115][ T8545] netlink: 'syz.2.785': attribute type 5 has an invalid length.
[  121.430181][ T8545] netlink: 'syz.2.785': attribute type 5 has an invalid length.
[  121.433330][ T8545] netlink: 'syz.2.785': attribute type 5 has an invalid length.
[  121.436761][ T8545] netlink: 'syz.2.785': attribute type 5 has an invalid length.
[  121.440114][ T8545] netlink: 'syz.2.785': attribute type 5 has an invalid length.
[  121.446549][ T8545] netlink: 'syz.2.785': attribute type 5 has an invalid length.
[  121.449800][ T8545] netlink: 'syz.2.785': attribute type 5 has an invalid length.
[  121.637554][ T8556] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.640507][ T8556] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.643578][ T8556] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.646599][ T8556] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.652603][ T8556] geneve0: entered promiscuous mode
[  121.656464][ T8556] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  121.659622][ T8556] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  121.664748][ T8556] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  121.667922][ T8556] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  121.678436][ T8556] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  122.670575][ T8655] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  123.845820][ T8730] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  124.352806][ T8768] __nla_validate_parse: 44 callbacks suppressed
[  124.352821][ T8768] netlink: 168 bytes leftover after parsing attributes in process `syz.2.858'.
[  124.386541][ T8768] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.858'.
[  124.395697][ T8768] netlink: 132 bytes leftover after parsing attributes in process `syz.2.858'.
[  124.470007][ T8770] : port 1(erspan0) entered blocking state
[  124.483971][ T8770] : port 1(erspan0) entered disabled state
[  124.490243][ T8770] erspan0: entered allmulticast mode
[  124.498385][ T8770] erspan0: entered promiscuous mode
[  124.510298][ T8770] erspan0: left allmulticast mode
[  124.515532][ T8770] erspan0: left promiscuous mode
[  124.519787][ T8770] : port 1(erspan0) entered disabled state
[  125.312553][ T8781] netlink: 132 bytes leftover after parsing attributes in process `syz.2.862'.
[  125.415635][ T8791] netlink: 60 bytes leftover after parsing attributes in process `syz.2.864'.
[  125.419001][ T8785] netlink: 60 bytes leftover after parsing attributes in process `syz.2.864'.
[  125.422862][ T8785] netlink: 60 bytes leftover after parsing attributes in process `syz.2.864'.
[  125.451516][ T8792] netlink: 60 bytes leftover after parsing attributes in process `syz.0.865'.
[  125.454939][ T8790] netlink: 60 bytes leftover after parsing attributes in process `syz.0.865'.
[  125.459978][ T8792] netlink: 60 bytes leftover after parsing attributes in process `syz.0.865'.
[  125.919913][ T8823] tap0: tun_chr_ioctl cmd 1074025677
[  125.922585][ T8823] tap0: linktype set to 6
[  126.638066][ T8845] validate_nla: 58 callbacks suppressed
[  126.638076][ T8845] netlink: 'syz.1.884': attribute type 10 has an invalid length.
[  126.668787][ T8847] netlink: 'syz.2.882': attribute type 21 has an invalid length.
[  126.671722][ T8847] netlink: 'syz.2.882': attribute type 1 has an invalid length.
[  127.039864][ T8870] netlink: 'syz.1.891': attribute type 21 has an invalid length.
[  128.986982][ T8898] netlink: 'syz.1.900': attribute type 7 has an invalid length.
[  129.576268][ T8932] netlink: 'syz.2.909': attribute type 10 has an invalid length.
[  129.678793][ T8939] __nla_validate_parse: 26 callbacks suppressed
[  129.678804][ T8939] netlink: 60 bytes leftover after parsing attributes in process `syz.2.911'.
[  129.685010][ T8937] netlink: 60 bytes leftover after parsing attributes in process `syz.2.911'.
[  129.689172][ T8939] netlink: 60 bytes leftover after parsing attributes in process `syz.2.911'.
[  130.366213][ T8951] netlink: 830 bytes leftover after parsing attributes in process `syz.0.914'.
[  130.557326][ T8957] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.916'.
[  130.564330][ T8960] netlink: 60 bytes leftover after parsing attributes in process `syz.0.917'.
[  130.568176][ T8960] netlink: 60 bytes leftover after parsing attributes in process `syz.0.917'.
[  130.573044][ T8960] netlink: 60 bytes leftover after parsing attributes in process `syz.0.917'.
[  130.579919][ T8960] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.917'.
[  130.597054][ T8962] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.918'.
[  130.638256][ T8962] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  130.843434][ T8970] netlink: 'syz.1.922': attribute type 10 has an invalid length.
[  130.875655][ T8972] netlink: 'syz.0.923': attribute type 1 has an invalid length.
[  131.150408][ T9004] netlink: 'syz.0.932': attribute type 10 has an invalid length.
[  131.230959][ T9008] netlink: 'syz.0.934': attribute type 27 has an invalid length.
[  131.235877][ T9008] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  131.282643][ T9010] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.286218][ T9010] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.290110][ T9010] bridge0: entered allmulticast mode
[  131.827131][ T5217] Bluetooth: hci1: ISO packet for unknown connection handle 62
[  132.473659][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.475795][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  132.866042][ T9069] validate_nla: 2 callbacks suppressed
[  132.866103][ T9069] netlink: 'syz.0.953': attribute type 10 has an invalid length.
[  132.904841][ T9069] 8021q: adding VLAN 0 to HW filter on device team0
[  132.929969][ T9083] netlink: 'syz.2.958': attribute type 1 has an invalid length.
[  132.934195][ T9084] netlink: 'syz.2.958': attribute type 1 has an invalid length.
[  133.165874][ T9106] sock: sock_set_timeout: `syz.0.963' (pid 9106) tries to set negative timeout
[  134.538706][ T9129] syz.2.973: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  134.546878][ T9129] CPU: 1 UID: 0 PID: 9129 Comm: syz.2.973 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  134.546898][ T9129] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  134.546906][ T9129] Call Trace:
[  134.546912][ T9129]  <TASK>
[  134.546918][ T9129]  dump_stack_lvl+0x189/0x250
[  134.546942][ T9129]  ? __pfx_dump_stack_lvl+0x10/0x10
[  134.546960][ T9129]  ? __pfx__printk+0x10/0x10
[  134.546978][ T9129]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  134.546997][ T9129]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  134.547015][ T9129]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  134.547034][ T9129]  warn_alloc+0x214/0x310
[  134.547051][ T9129]  ? stack_depot_save_flags+0x40/0x900
[  134.547072][ T9129]  ? __pfx_warn_alloc+0x10/0x10
[  134.547091][ T9129]  ? kasan_save_track+0x4f/0x80
[  134.547104][ T9129]  ? xskq_create+0x56/0x170
[  134.547118][ T9129]  ? xsk_init_queue+0xb0/0x110
[  134.547132][ T9129]  ? xsk_setsockopt+0x4de/0x710
[  134.547145][ T9129]  ? do_sock_setsockopt+0x17c/0x1b0
[  134.547158][ T9129]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  134.547171][ T9129]  ? do_syscall_64+0xfa/0x3b0
[  134.547187][ T9129]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.547209][ T9129]  __vmalloc_node_range_noprof+0x125/0x12f0
[  134.547282][ T9129]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  134.547306][ T9129]  ? __kasan_kmalloc+0x93/0xb0
[  134.547324][ T9129]  vmalloc_user_noprof+0xad/0xf0
[  134.547340][ T9129]  ? xskq_create+0xbf/0x170
[  134.547360][ T9129]  xskq_create+0xbf/0x170
[  134.547380][ T9129]  xsk_init_queue+0xb0/0x110
[  134.547400][ T9129]  xsk_setsockopt+0x4de/0x710
[  134.547418][ T9129]  ? __pfx_xsk_setsockopt+0x10/0x10
[  134.547437][ T9129]  ? __fget_files+0x2a/0x420
[  134.547453][ T9129]  ? aa_sock_opt_perm+0x74/0x110
[  134.547472][ T9129]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  134.547489][ T9129]  ? __pfx_xsk_setsockopt+0x10/0x10
[  134.547506][ T9129]  do_sock_setsockopt+0x17c/0x1b0
[  134.547525][ T9129]  __x64_sys_setsockopt+0x13f/0x1b0
[  134.547546][ T9129]  do_syscall_64+0xfa/0x3b0
[  134.547562][ T9129]  ? lockdep_hardirqs_on+0x9c/0x150
[  134.547579][ T9129]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.547591][ T9129]  ? exc_page_fault+0x9f/0xf0
[  134.547610][ T9129]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.547623][ T9129] RIP: 0033:0x7fa9bd58e9a9
[  134.547636][ T9129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  134.547647][ T9129] RSP: 002b:00007fa9be382038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  134.547662][ T9129] RAX: ffffffffffffffda RBX: 00007fa9bd7b5fa0 RCX: 00007fa9bd58e9a9
[  134.547671][ T9129] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006
[  134.547680][ T9129] RBP: 00007fa9bd610d69 R08: 0000000000000004 R09: 0000000000000000
[  134.547688][ T9129] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  134.547696][ T9129] R13: 0000000000000000 R14: 00007fa9bd7b5fa0 R15: 00007fffb54af448
[  134.547720][ T9129]  </TASK>
[  134.547727][ T9129] Mem-Info:
[  134.689218][ T9129] active_anon:5665 inactive_anon:0 isolated_anon:0
[  134.689218][ T9129]  active_file:14989 inactive_file:38239 isolated_file:0
[  134.689218][ T9129]  unevictable:1768 dirty:115 writeback:0
[  134.689218][ T9129]  slab_reclaimable:9577 slab_unreclaimable:54732
[  134.689218][ T9129]  mapped:18385 shmem:2453 pagetables:890
[  134.689218][ T9129]  sec_pagetables:0 bounce:0
[  134.689218][ T9129]  kernel_misc_reclaimable:0
[  134.689218][ T9129]  free:280251 free_pcp:20853 free_cma:0
[  134.705985][ T9129] Node 0 active_anon:10280kB inactive_anon:0kB active_file:45156kB inactive_file:11420kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:46736kB dirty:416kB writeback:0kB shmem:4828kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8272kB pagetables:2304kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  134.717177][ T9129] Node 1 active_anon:12380kB inactive_anon:0kB active_file:14800kB inactive_file:141536kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:26804kB dirty:44kB writeback:0kB shmem:4984kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4484kB pagetables:1256kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  134.727912][ T9129] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  134.737811][ T9129] lowmem_reserve[]: 0 812 812 812 812
[  134.739634][ T9129] Node 0 DMA32 free:320872kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10280kB inactive_anon:0kB active_file:45156kB inactive_file:11420kB unevictable:3536kB writepending:416kB present:1556484kB managed:831912kB mlocked:0kB bounce:0kB free_pcp:36880kB local_pcp:17432kB free_cma:0kB
[  134.749947][ T9129] lowmem_reserve[]: 0 0 0 0 0
[  134.752534][ T9129] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  134.758997][ T9122] syzkaller0: entered promiscuous mode
[  134.762267][ T9129] lowmem_reserve[]: 0 0 854 854 854
[  134.762315][ T9129] Node 1 Normal free:324620kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12380kB inactive_anon:0kB active_file:14800kB inactive_file:141536kB unevictable:3536kB writepending:44kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:46424kB local_pcp:28528kB free_cma:0kB
[  134.762342][ T9129] lowmem_reserve[]: 0 0 0 0 0
[  134.762368][ T9129] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  134.762444][ T9129] Node 0 DMA32: 916*4kB (UME) 475*8kB (UME) 224*16kB (UM) 367*32kB (ME) 175*64kB (UM) 36*128kB (UM) 19*256kB (UM) 10*512kB (UME) 11*1024kB (UM) 5*2048kB (ME) 61*4096kB (M) = 319944kB
[  134.762550][ T9129] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 
[  134.777603][ T9122] syzkaller0: entered allmulticast mode
[  134.778678][ T9129] 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  134.803791][ T9129] Node 1 Normal: 537*4kB (UM) 539*8kB (UME) 237*16kB (M) 278*32kB (UME) 231*64kB (UME) 53*128kB (UM) 31*256kB (UM) 31*512kB (UM) 8*1024kB (UM) 5*2048kB (UME) 59*4096kB (UM) = 324620kB
[  134.809874][ T9129] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  134.813066][ T9129] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  134.816483][ T9129] 55681 total pagecache pages
[  134.818169][ T9129] 0 pages in swap cache
[  134.819671][ T9129] Free swap  = 124996kB
[  134.821419][ T9129] Total swap = 124996kB
[  134.823089][ T9129] 786301 pages RAM
[  134.824566][ T9129] 0 pages HighMem/MovableOnly
[  134.826266][ T9129] 241075 pages reserved
[  134.827824][ T9129] 0 pages cma reserved
[  135.064599][ T9133] __nla_validate_parse: 24 callbacks suppressed
[  135.064614][ T9133] netlink: 140 bytes leftover after parsing attributes in process `syz.2.974'.
[  135.070161][ T9133] netlink: 6 bytes leftover after parsing attributes in process `syz.2.974'.
[  135.334647][ T9139] netlink: 14 bytes leftover after parsing attributes in process `syz.0.975'.
[  135.451343][ T9141] netlink: 'syz.0.975': attribute type 4 has an invalid length.
[  135.454763][ T9141] netlink: 'syz.0.975': attribute type 3 has an invalid length.
[  135.458036][ T9141] netlink: 132 bytes leftover after parsing attributes in process `syz.0.975'.
[  135.842614][ T9154] netlink: 60 bytes leftover after parsing attributes in process `syz.0.976'.
[  135.845755][ T9144] netlink: 60 bytes leftover after parsing attributes in process `syz.0.976'.
[  135.860484][ T9144] netlink: 60 bytes leftover after parsing attributes in process `syz.0.976'.
[  135.872565][ T9153] netlink: 'syz.1.980': attribute type 21 has an invalid length.
[  135.875261][ T9153] netlink: 164 bytes leftover after parsing attributes in process `syz.1.980'.
[  135.939477][ T9160] netlink: 'syz.0.982': attribute type 10 has an invalid length.
[  136.017751][ T9172] netlink: 60 bytes leftover after parsing attributes in process `syz.0.984'.
[  136.023597][ T9165] netlink: 60 bytes leftover after parsing attributes in process `syz.0.984'.
[  136.120408][ T9180] netlink: 'syz.0.989': attribute type 2 has an invalid length.
[  136.127031][ T9180] netlink: 'syz.0.989': attribute type 2 has an invalid length.
[  136.132946][ T9181] netlink: 'syz.0.989': attribute type 29 has an invalid length.
[  136.421668][ T9198] syzkaller0: entered promiscuous mode
[  136.424296][ T9198] syzkaller0: entered allmulticast mode
[  137.436348][ T9231] mac80211_hwsim hwsim6 O3c: renamed from wlan1
[  137.709655][ T9245] macvlan0: entered promiscuous mode
[  137.713093][ T9245] macvlan0: entered allmulticast mode
[  137.715438][ T9245] veth1_vlan: entered allmulticast mode
[  137.792429][ T9253] sctp: [Deprecated]: syz.2.1010 (pid 9253) Use of struct sctp_assoc_value in delayed_ack socket option.
[  137.792429][ T9253] Use struct sctp_sack_info instead
[  138.029627][ T9272] validate_nla: 3 callbacks suppressed
[  138.029642][ T9272] netlink: 'syz.0.1016': attribute type 10 has an invalid length.
[  138.293443][ T9283] netlink: 'syz.2.1020': attribute type 21 has an invalid length.
[  138.510528][ T9294] netlink: 'syz.0.1024': attribute type 10 has an invalid length.
[  138.560996][ T5217] Bluetooth: hci1: Malformed HCI Event: 0x22
[  139.196284][ T9313] netlink: 'syz.1.1030': attribute type 4 has an invalid length.
[  139.203975][ T9313] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  139.236084][ T9315] netlink: 'syz.1.1031': attribute type 10 has an invalid length.
[  139.288970][ T9317] netlink: 'syz.1.1032': attribute type 29 has an invalid length.
[  139.337125][ T9317] netlink: 'syz.1.1032': attribute type 29 has an invalid length.
[  139.417118][ T9322] netlink: 'syz.1.1034': attribute type 29 has an invalid length.
[  139.420519][ T9322] netlink: 'syz.1.1034': attribute type 29 has an invalid length.
[  139.444107][ T5217] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  139.528420][ T9333] veth1_macvtap: left promiscuous mode
[  139.539932][ T9336] sctp: [Deprecated]: syz.2.1039 (pid 9336) Use of int in max_burst socket option deprecated.
[  139.539932][ T9336] Use struct sctp_assoc_value instead
[  139.578937][ T9344] bridge_slave_0: entered allmulticast mode
[  140.205019][ T9373] lo: entered allmulticast mode
[  140.215249][ T9369] lo: entered promiscuous mode
[  140.217403][ T9369] lo: left allmulticast mode
[  140.522310][ T9392] netlink: 'syz.0.1057': attribute type 10 has an invalid length.
[  141.184200][ T9417] __nla_validate_parse: 14 callbacks suppressed
[  141.184214][ T9417] netlink: 531 bytes leftover after parsing attributes in process `syz.2.1066'.
[  142.121159][ T9467] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1083'.
[  142.201388][ T9469] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1084'.
[  142.207290][ T9471] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1083'.
[  142.212130][ T9471] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  143.079359][ T9485] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1090'.
[  143.310168][ T9508] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.1099'.
[  143.434649][ T9514] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1101'.
[  146.652779][ T9549] validate_nla: 3 callbacks suppressed
[  146.652792][ T9549] netlink: 'syz.2.1112': attribute type 6 has an invalid length.
[  146.657154][ T9549] netlink: 'syz.2.1112': attribute type 7 has an invalid length.
[  146.659709][ T9549] netlink: 'syz.2.1112': attribute type 7 has an invalid length.
[  146.670960][ T9549] netlink: 12902 bytes leftover after parsing attributes in process `syz.2.1112'.
[  146.678917][ T9549] netlink: 'syz.2.1112': attribute type 1 has an invalid length.
[  146.684504][ T9549] netlink: 208080 bytes leftover after parsing attributes in process `syz.2.1112'.
[  146.747482][ T9557] netlink: 'syz.1.1116': attribute type 10 has an invalid length.
[  147.334068][ T9577] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.1123'.
[  147.337919][ T9577] netlink: get zone limit has 8 unknown bytes
[  147.521483][ T9590] netlink: 'syz.1.1127': attribute type 13 has an invalid length.
[  147.524740][ T9590] netlink: 'syz.1.1127': attribute type 58 has an invalid length.
[  147.527846][ T9590] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1127'.
[  147.591162][ T9590] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.1127'.
[  147.667644][ T9597] netlink: 'syz.1.1128': attribute type 21 has an invalid length.
[  147.670402][ T9597] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1128'.
[  147.710624][ T9599] bond_slave_1: entered promiscuous mode
[  147.714634][ T9599] bond_slave_1: entered allmulticast mode
[  147.846145][ T9605] netlink: 'syz.2.1132': attribute type 39 has an invalid length.
[  148.180689][ T9613] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1134'.
[  148.194414][ T9613] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1134'.
[  148.218460][ T9613] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  148.228577][ T9613] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  148.408601][ T9617] netlink: 'syz.2.1135': attribute type 13 has an invalid length.
[  148.420858][ T9617] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1135'.
[  148.772158][ T9628] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1140'.
[  152.279983][ T9716] __nla_validate_parse: 6 callbacks suppressed
[  152.280079][ T9716] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1169'.
[  152.342560][ T9723] validate_nla: 15 callbacks suppressed
[  152.342575][ T9723] netlink: 'syz.1.1171': attribute type 15 has an invalid length.
[  152.348530][ T9723] netlink: 'syz.1.1171': attribute type 7 has an invalid length.
[  152.352460][ T9723] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1171'.
[  152.774232][ T9737] netlink: 'syz.0.1172': attribute type 21 has an invalid length.
[  152.777616][ T9737] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1172'.
[  152.832749][ T9737] netlink: 'syz.0.1172': attribute type 5 has an invalid length.
[  152.882426][ T9737] netlink: 'syz.0.1172': attribute type 6 has an invalid length.
[  152.896084][ T9737] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1172'.
[  153.270545][ T9747] netlink: 'syz.2.1176': attribute type 10 has an invalid length.
[  153.367250][ T9756] netlink: 'syz.2.1179': attribute type 2 has an invalid length.
[  153.370512][ T9756] netlink: 'syz.2.1179': attribute type 8 has an invalid length.
[  153.374424][ T9756] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1179'.
[  153.379413][ T9756] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1179'.
[  153.697364][ T9781] netlink: 'syz.2.1185': attribute type 10 has an invalid length.
[  153.731791][ T9782] syzkaller0: entered promiscuous mode
[  153.752743][ T9782] syzkaller0: entered allmulticast mode
[  154.008698][ T9790] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1186'.
[  154.112463][ T5826] Bluetooth: hci2: unexpected event 0x23 length: 15 > 13
[  154.113738][ T5826] Bluetooth: hci2: unexpected event 0x23 length: 15 > 13
[  154.176724][ T9810] netlink: 'syz.2.1193': attribute type 10 has an invalid length.
[  154.300087][ T9825] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1199'.
[  154.356820][ T9828] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.1201'.
[  154.366183][ T9828] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.1201'.
[  154.957815][ T9870] : renamed from hsr0
[  155.747799][ T9896] bond_slave_1: entered promiscuous mode
[  155.750372][ T9896] bond_slave_1: entered allmulticast mode
[  157.398515][ T9940] validate_nla: 18 callbacks suppressed
[  157.398573][ T9940] netlink: 'syz.2.1238': attribute type 4 has an invalid length.
[  157.406087][ T9940] __nla_validate_parse: 4 callbacks suppressed
[  157.406127][ T9940] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1238'.
[  157.459718][ T9943] netlink: 'syz.1.1240': attribute type 10 has an invalid length.
[  157.463249][ T9943] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1240'.
[  157.463548][ T9940] : renamed from bond0 (while UP)
[  157.563231][ T9953] netlink: 'syz.0.1244': attribute type 10 has an invalid length.
[  157.664849][ T9962] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  157.668236][ T9962] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  157.907880][ T9973] netlink: 'syz.1.1252': attribute type 10 has an invalid length.
[  157.915491][ T9973] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  157.918653][ T9973] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  157.985660][ T9977] netlink: 'syz.0.1254': attribute type 21 has an invalid length.
[  157.988322][ T9977] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1254'.
[  158.167488][ T9940] syz.2.1238 (9940) used greatest stack depth: 20088 bytes left
[  158.188868][ T9985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1256'.
[  158.285519][ T9985] netlink: 'syz.0.1256': attribute type 33 has an invalid length.
[  158.288920][ T9985] netlink: 'syz.0.1256': attribute type 13 has an invalid length.
[  158.296928][ T9985] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1256'.
[  158.527878][ T9996] netlink: 'syz.0.1261': attribute type 10 has an invalid length.
[  158.577669][ T9999] netlink: 'syz.1.1260': attribute type 29 has an invalid length.
[  158.856378][T10008] netlink: 'syz.2.1265': attribute type 13 has an invalid length.
[  158.859887][T10008] netlink: 14581 bytes leftover after parsing attributes in process `syz.2.1265'.
[  159.250337][T10022] 8021q: adding VLAN 0 to HW filter on device 
[  159.258598][T10022] team0: Port device  added
[  159.280026][T10026] netlink: 703 bytes leftover after parsing attributes in process `syz.1.1270'.
[  159.979554][T10062] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1283'.
[  160.076529][T10073] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1285'.
[  160.080565][T10073] netlink: zone id is out of range
[  160.086936][T10073] netlink: get zone limit has 8 unknown bytes
[  161.426193][T10112] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1299'.
[  161.513327][T10120] raw_sendmsg: syz.0.1300 forgot to set AF_INET. Fix it!
[  161.703885][T10131] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  161.706886][T10131] batman_adv: batadv0: Removing interface: batadv_slave_0
[  161.718659][T10131] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  161.721650][T10131] batman_adv: batadv0: Removing interface: batadv_slave_1
[  161.740478][T10131] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  161.750622][T10131] batman_adv: batadv0: Removing interface: virt_wifi0
[  162.322274][T10157] netlink: zone id is out of range
[  162.324452][T10157] netlink: zone id is out of range
[  162.326637][T10157] netlink: zone id is out of range
[  162.328816][T10157] netlink: zone id is out of range
[  162.335113][T10157] netlink: zone id is out of range
[  162.337006][T10157] netlink: zone id is out of range
[  162.338706][T10157] netlink: zone id is out of range
[  162.340436][T10157] netlink: zone id is out of range
[  162.587528][T10178] validate_nla: 12 callbacks suppressed
[  162.587538][T10178] netlink: 'syz.0.1320': attribute type 21 has an invalid length.
[  162.606811][T10178] __nla_validate_parse: 4 callbacks suppressed
[  162.606821][T10178] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1320'.
[  162.736810][T10181] netlink: 'syz.0.1322': attribute type 7 has an invalid length.
[  162.739367][T10181] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1322'.
[  162.742919][T10183] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1322'.
[  162.802261][T10185] netlink: 'syz.0.1323': attribute type 29 has an invalid length.
[  162.826538][T10185] netlink: 'syz.0.1323': attribute type 29 has an invalid length.
[  162.996124][T10188] netlink: 'syz.0.1324': attribute type 29 has an invalid length.
[  163.002261][T10188] netlink: 'syz.0.1324': attribute type 3 has an invalid length.
[  163.007355][T10188] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1324'.
[  163.062733][T10188] tap0: tun_chr_ioctl cmd 1074025677
[  163.067958][T10188] tap0: linktype set to 6
[  163.374509][T10201] netlink: 'syz.2.1329': attribute type 41 has an invalid length.
[  163.384086][T10203] netlink: 'syz.2.1329': attribute type 41 has an invalid length.
[  163.420527][T10206] netlink: 'syz.1.1330': attribute type 4 has an invalid length.
[  163.425429][T10206] netlink: 'syz.1.1330': attribute type 6 has an invalid length.
[  163.428431][T10206] -1: renamed from syzkaller0
[  163.447001][T10208] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1331'.
[  172.680825][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 8156948894 wd_nsec: 8156948752
[  179.236350][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  179.237170][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  179.237792][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  179.238287][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  179.238601][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  179.334206][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  179.335261][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  179.335739][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  179.336243][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  179.336801][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  179.378631][ T5217] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  179.379432][ T5217] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  179.379736][ T5217] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  179.380247][ T5217] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  179.380558][ T5217] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  180.640960][ T5830] Bluetooth: hci0: command 0x0406 tx timeout
[  181.271010][ T5830] Bluetooth: hci3: command tx timeout
[  181.360981][ T5830] Bluetooth: hci4: command tx timeout
[  181.430967][ T5830] Bluetooth: hci5: command tx timeout
[  183.361762][ T5830] Bluetooth: hci3: command tx timeout
[  183.431766][ T5830] Bluetooth: hci4: command tx timeout
[  183.520944][ T5830] Bluetooth: hci5: command tx timeout
[  185.430958][ T5830] Bluetooth: hci3: command tx timeout
[  185.511006][ T5830] Bluetooth: hci4: command tx timeout
[  185.590977][ T5217] Bluetooth: hci5: command tx timeout
[  187.511010][ T5830] Bluetooth: hci3: command tx timeout
[  187.590865][ T5830] Bluetooth: hci4: command tx timeout
[  187.670854][ T5830] Bluetooth: hci5: command tx timeout
[  240.205864][ T5217] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  240.206756][ T5217] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  240.207143][ T5217] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  240.207777][ T5217] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  240.208330][ T5217] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  240.255034][   T55] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  240.256361][   T55] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  240.257053][   T55] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  240.258285][   T55] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  240.258901][   T55] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  240.325308][ T5834] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  240.326383][ T5834] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  240.326802][ T5834] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  240.327368][ T5834] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  240.328016][ T5834] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  268.700752][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
[  268.700764][    C0] rcu: 	0-....: (10011 ticks this GP) idle=8024/1/0x4000000000000000 softirq=31080/31080 fqs=4810
[  268.701064][    C0] rcu: 	         hardirqs   softirqs   csw/system
[  268.701069][    C0] rcu: 	 number:   982653          0            0
[  268.701074][    C0] rcu: 	cputime:    25140      27349          100   ==> 52490(ms)
[  268.701080][    C0] rcu: 	(t=10500 jiffies g=24597 q=2244 ncpus=2)
[  268.701089][    C0] CPU: 0 UID: 0 PID: 10212 Comm: syz.1.1333 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  268.701098][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  268.701102][    C0] RIP: 0010:console_flush_all+0x7f7/0xc40
[  268.701116][    C0] Code: 48 21 c3 0f 85 e9 01 00 00 e8 75 e7 1e 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 66 e7 1e 00 eb 06 e8 5f e7 1e 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 8a 0a 82 00 48 8b 1b 48 8b 44 24
[  268.701122][    C0] RSP: 0018:ffffc90000007620 EFLAGS: 00000246
[  268.701129][    C0] RAX: 1ffffffff1d902ff RBX: ffffffff8ec817f8 RCX: ffff88812387b980
[  268.701135][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  268.701139][    C0] RBP: ffffc90000007770 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  268.701143][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: dffffc0000000000
[  268.701148][    C0] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8ec817a0
[  268.701153][    C0] FS:  00007f7a595726c0(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
[  268.701158][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  268.701163][    C0] CR2: 00007fa9be2e56c0 CR3: 000000012024e000 CR4: 00000000000006f0
[  268.701194][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  268.701199][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  268.701204][    C0] Call Trace:
[  268.701206][    C0]  <IRQ>
[  268.701212][    C0]  ? console_flush_all+0x13a/0xc40
[  268.701225][    C0]  ? __pfx_console_flush_all+0x10/0x10
[  268.701239][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  268.701251][    C0]  console_unlock+0xc4/0x270
[  268.701260][    C0]  ? __pfx_console_unlock+0x10/0x10
[  268.701271][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  268.701282][    C0]  vprintk_emit+0x5b7/0x7a0
[  268.701292][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[  268.701299][    C0]  ? irq_work_single+0x1ac/0x240
[  268.701309][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  268.701321][    C0]  ? __irq_exit_rcu+0xd8/0x1f0
[  268.701334][    C0]  _printk+0xcf/0x120
[  268.701346][    C0]  ? __pfx__printk+0x10/0x10
[  268.701366][    C0]  clocksource_watchdog+0xdca/0x11c0
[  268.701374][    C0]  ? __lock_acquire+0xab9/0xd20
[  268.701388][    C0]  ? __pfx_clocksource_watchdog+0x10/0x10
[  268.701396][    C0]  ? __irq_exit_rcu+0xd8/0x1f0
[  268.701407][    C0]  call_timer_fn+0x17e/0x5f0
[  268.701414][    C0]  ? __pfx_clocksource_watchdog+0x10/0x10
[  268.701420][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  268.701429][    C0]  ? call_timer_fn+0xbe/0x5f0
[  268.701436][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  268.701448][    C0]  ? __pfx_clocksource_watchdog+0x10/0x10
[  268.701456][    C0]  __run_timer_base+0x61a/0x860
[  268.701465][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  268.701481][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  268.701498][    C0]  run_timer_softirq+0x67/0x180
[  268.701508][    C0]  handle_softirqs+0x286/0x870
[  268.701518][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  268.701528][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  268.701535][    C0]  ? irq_work_single+0x1ac/0x240
[  268.701544][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  268.701554][    C0]  __irq_exit_rcu+0xca/0x1f0
[  268.701562][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  268.701571][    C0]  ? rcu_is_watching+0x15/0xb0
[  268.701581][    C0]  irq_exit_rcu+0x9/0x30
[  268.701588][    C0]  sysvec_irq_work+0xa3/0xc0
[  268.701631][    C0]  </IRQ>
[  268.701633][    C0]  <TASK>
[  268.701636][    C0]  asm_sysvec_irq_work+0x1a/0x20
[  268.701644][    C0] RIP: 0010:rcu_read_unlock_special+0x87/0x4c0
[  268.701654][    C0] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 62 2c f8 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
[  268.701659][    C0] RSP: 0018:ffffc900086f7280 EFLAGS: 00000206
[  268.701666][    C0] RAX: 573cdfceba5e4100 RBX: 1ffff920010dee58 RCX: 573cdfceba5e4100
[  268.701671][    C0] RDX: 0000000000000006 RSI: ffffffff8d99883e RDI: ffffffff8be29f40
[  268.701675][    C0] RBP: ffffc900086f7370 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  268.701680][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffffffff8e144400
[  268.701684][    C0] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000001
[  268.701697][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  268.701707][    C0]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  268.701721][    C0]  ? mod_objcg_mlstate+0x24/0x260
[  268.701733][    C0]  __rcu_read_unlock+0x84/0xe0
[  268.701743][    C0]  drain_obj_stock+0x196/0x3c0
[  268.701754][    C0]  refill_obj_stock+0x247/0x850
[  268.701762][    C0]  ? refill_obj_stock+0x116/0x850
[  268.701770][    C0]  obj_cgroup_charge_account+0x116/0x660
[  268.701782][    C0]  ? obj_cgroup_charge_account+0x13b/0x660
[  268.701793][    C0]  __memcg_slab_post_alloc_hook+0x3e6/0x7f0
[  268.701807][    C0]  __kvmalloc_node_noprof+0x466/0x5f0
[  268.701816][    C0]  ? bpf_check+0xf20/0x1d2e0
[  268.701827][    C0]  bpf_check+0xf20/0x1d2e0
[  268.701835][    C0]  ? __lock_acquire+0xab9/0xd20
[  268.701844][    C0]  ? migrate_enable+0x29c/0x3c0
[  268.701853][    C0]  ? trace_call_bpf+0xb7/0x850
[  268.701866][    C0]  ? trace_call_bpf+0xb7/0x850
[  268.701874][    C0]  ? trace_call_bpf+0xb7/0x850
[  268.701881][    C0]  ? trace_call_bpf+0x5ba/0x850
[  268.701888][    C0]  ? trace_call_bpf+0xb7/0x850
[  268.701898][    C0]  ? __pfx_trace_call_bpf+0x10/0x10
[  268.701907][    C0]  ? trace_call_bpf+0x5ba/0x850
[  268.701916][    C0]  ? perf_trace_run_bpf_submit+0x100/0x170
[  268.701927][    C0]  ? perf_trace_preemptirq_template+0x280/0x340
[  268.701938][    C0]  ? irqentry_enter+0x3d/0x60
[  268.701954][    C0]  ? irqentry_exit+0x74/0x90
[  268.701963][    C0]  ? __pfx_bpf_check+0x10/0x10
[  268.701975][    C0]  ? seqcount_lockdep_reader_access+0x175/0x1c0
[  268.701986][    C0]  ? seqcount_lockdep_reader_access+0x17e/0x1c0
[  268.701996][    C0]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  268.702010][    C0]  ? __asan_memset+0x22/0x50
[  268.702019][    C0]  ? bpf_obj_name_cpy+0x194/0x1e0
[  268.702027][    C0]  ? bpf_lsm_bpf_prog_load+0x9/0x20
[  268.702034][    C0]  ? security_bpf_prog_load+0x7f/0x310
[  268.702044][    C0]  bpf_prog_load+0x1318/0x1930
[  268.702056][    C0]  ? __pfx_bpf_prog_load+0x10/0x10
[  268.702074][    C0]  ? bpf_lsm_bpf+0x9/0x20
[  268.702079][    C0]  ? security_bpf+0x7e/0x300
[  268.702088][    C0]  __sys_bpf+0x528/0x870
[  268.702096][    C0]  ? __pfx___sys_bpf+0x10/0x10
[  268.702109][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  268.702120][    C0]  ? rcu_is_watching+0x15/0xb0
[  268.702133][    C0]  __x64_sys_bpf+0x7c/0x90
[  268.702142][    C0]  do_syscall_64+0xfa/0x3b0
[  268.702151][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.702157][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  268.702166][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.702171][    C0] RIP: 0033:0x7f7a5878e9a9
[  268.702179][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  268.702184][    C0] RSP: 002b:00007f7a59572038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  268.702190][    C0] RAX: ffffffffffffffda RBX: 00007f7a589b5fa0 RCX: 00007f7a5878e9a9
[  268.702195][    C0] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005
[  268.702199][    C0] RBP: 00007f7a58810d69 R08: 0000000000000000 R09: 0000000000000000
[  268.702202][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  268.702206][    C0] R13: 0000000000000000 R14: 00007f7a589b5fa0 R15: 00007ffe6869af48
[  268.702217][    C0]  </TASK>
[  296.311717][   T18] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 13261 jiffies s: 22769 root: 0x1/.
[  296.311763][   T18] rcu: blocking rcu_node structures (internal RCU debug):
[  296.311780][   T18] Sending NMI from CPU 1 to CPUs 0:
[  296.311845][    C0] NMI backtrace for cpu 0
[  296.311856][    C0] CPU: 0 UID: 0 PID: 10212 Comm: syz.1.1333 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  296.311865][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  296.311869][    C0] RIP: 0010:console_flush_all+0x7f7/0xc40
[  296.311882][    C0] Code: 48 21 c3 0f 85 e9 01 00 00 e8 75 e7 1e 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 66 e7 1e 00 eb 06 e8 5f e7 1e 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 8a 0a 82 00 48 8b 1b 48 8b 44 24
[  296.311888][    C0] RSP: 0018:ffffc90000007620 EFLAGS: 00000246
[  296.311895][    C0] RAX: 1ffffffff1d902ff RBX: ffffffff8ec817f8 RCX: ffff88812387b980
[  296.311900][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  296.311903][    C0] RBP: ffffc90000007770 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  296.311908][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: dffffc0000000000
[  296.311913][    C0] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8ec817a0
[  296.311917][    C0] FS:  00007f7a595726c0(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
[  296.311922][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  296.311926][    C0] CR2: 00007fa9be2e56c0 CR3: 000000012024e000 CR4: 00000000000006f0
[  296.311952][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  296.311957][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  296.311961][    C0] Call Trace:
[  296.311964][    C0]  <IRQ>
[  296.311970][    C0]  ? console_flush_all+0x13a/0xc40
[  296.311980][    C0]  ? __pfx_console_flush_all+0x10/0x10
[  296.311996][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  296.312011][    C0]  console_unlock+0xc4/0x270
[  296.312024][    C0]  ? __pfx_console_unlock+0x10/0x10
[  296.312037][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  296.312055][    C0]  vprintk_emit+0x5b7/0x7a0
[  296.312069][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[  296.312081][    C0]  ? irq_work_single+0x1ac/0x240
[  296.312094][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  296.312110][    C0]  ? __irq_exit_rcu+0xd8/0x1f0
[  296.312121][    C0]  _printk+0xcf/0x120
[  296.312130][    C0]  ? __pfx__printk+0x10/0x10
[  296.312140][    C0]  clocksource_watchdog+0xdca/0x11c0
[  296.312148][    C0]  ? __lock_acquire+0xab9/0xd20
[  296.312158][    C0]  ? __pfx_clocksource_watchdog+0x10/0x10
[  296.312165][    C0]  ? __irq_exit_rcu+0xd8/0x1f0
[  296.312172][    C0]  call_timer_fn+0x17e/0x5f0
[  296.312179][    C0]  ? __pfx_clocksource_watchdog+0x10/0x10
[  296.312185][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  296.312192][    C0]  ? call_timer_fn+0xbe/0x5f0
[  296.312198][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  296.312206][    C0]  ? __pfx_clocksource_watchdog+0x10/0x10
[  296.312213][    C0]  __run_timer_base+0x61a/0x860
[  296.312221][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  296.312232][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  296.312244][    C0]  run_timer_softirq+0x67/0x180
[  296.312253][    C0]  handle_softirqs+0x286/0x870
[  296.312294][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  296.312302][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  296.312309][    C0]  ? irq_work_single+0x1ac/0x240
[  296.312315][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  296.312324][    C0]  __irq_exit_rcu+0xca/0x1f0
[  296.312330][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  296.312338][    C0]  ? rcu_is_watching+0x15/0xb0
[  296.312346][    C0]  irq_exit_rcu+0x9/0x30
[  296.312352][    C0]  sysvec_irq_work+0xa3/0xc0
[  296.312359][    C0]  </IRQ>
[  296.312361][    C0]  <TASK>
[  296.312364][    C0]  asm_sysvec_irq_work+0x1a/0x20
[  296.312370][    C0] RIP: 0010:rcu_read_unlock_special+0x87/0x4c0
[  296.312380][    C0] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 62 2c f8 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
[  296.312385][    C0] RSP: 0018:ffffc900086f7280 EFLAGS: 00000206
[  296.312394][    C0] RAX: 573cdfceba5e4100 RBX: 1ffff920010dee58 RCX: 573cdfceba5e4100
[  296.312401][    C0] RDX: 0000000000000006 RSI: ffffffff8d99883e RDI: ffffffff8be29f40
[  296.312408][    C0] RBP: ffffc900086f7370 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  296.312415][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffffffff8e144400
[  296.312421][    C0] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000001
[  296.312436][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  296.312452][    C0]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  296.312469][    C0]  ? mod_objcg_mlstate+0x24/0x260
[  296.312485][    C0]  __rcu_read_unlock+0x84/0xe0
[  296.312502][    C0]  drain_obj_stock+0x196/0x3c0
[  296.312513][    C0]  refill_obj_stock+0x247/0x850
[  296.312520][    C0]  ? refill_obj_stock+0x116/0x850
[  296.312526][    C0]  obj_cgroup_charge_account+0x116/0x660
[  296.312535][    C0]  ? obj_cgroup_charge_account+0x13b/0x660
[  296.312545][    C0]  __memcg_slab_post_alloc_hook+0x3e6/0x7f0
[  296.312555][    C0]  __kvmalloc_node_noprof+0x466/0x5f0
[  296.312563][    C0]  ? bpf_check+0xf20/0x1d2e0
[  296.312573][    C0]  bpf_check+0xf20/0x1d2e0
[  296.312580][    C0]  ? __lock_acquire+0xab9/0xd20
[  296.312587][    C0]  ? migrate_enable+0x29c/0x3c0
[  296.312596][    C0]  ? trace_call_bpf+0xb7/0x850
[  296.312605][    C0]  ? trace_call_bpf+0xb7/0x850
[  296.312611][    C0]  ? trace_call_bpf+0xb7/0x850
[  296.312617][    C0]  ? trace_call_bpf+0x5ba/0x850
[  296.312623][    C0]  ? trace_call_bpf+0xb7/0x850
[  296.312630][    C0]  ? __pfx_trace_call_bpf+0x10/0x10
[  296.312637][    C0]  ? trace_call_bpf+0x5ba/0x850
[  296.312644][    C0]  ? perf_trace_run_bpf_submit+0x100/0x170
[  296.312653][    C0]  ? perf_trace_preemptirq_template+0x280/0x340
[  296.312663][    C0]  ? irqentry_enter+0x3d/0x60
[  296.312673][    C0]  ? irqentry_exit+0x74/0x90
[  296.312681][    C0]  ? __pfx_bpf_check+0x10/0x10
[  296.312690][    C0]  ? seqcount_lockdep_reader_access+0x175/0x1c0
[  296.312699][    C0]  ? seqcount_lockdep_reader_access+0x17e/0x1c0
[  296.312708][    C0]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  296.312717][    C0]  ? __asan_memset+0x22/0x50
[  296.312726][    C0]  ? bpf_obj_name_cpy+0x194/0x1e0
[  296.312733][    C0]  ? bpf_lsm_bpf_prog_load+0x9/0x20
[  296.312740][    C0]  ? security_bpf_prog_load+0x7f/0x310
[  296.312748][    C0]  bpf_prog_load+0x1318/0x1930
[  296.312757][    C0]  ? __pfx_bpf_prog_load+0x10/0x10
[  296.312773][    C0]  ? bpf_lsm_bpf+0x9/0x20
[  296.312778][    C0]  ? security_bpf+0x7e/0x300
[  296.312785][    C0]  __sys_bpf+0x528/0x870
[  296.312792][    C0]  ? __pfx___sys_bpf+0x10/0x10
[  296.312801][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  296.312810][    C0]  ? rcu_is_watching+0x15/0xb0
[  296.312818][    C0]  __x64_sys_bpf+0x7c/0x90
[  296.312827][    C0]  do_syscall_64+0xfa/0x3b0
[  296.312836][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.312841][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  296.312849][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.312855][    C0] RIP: 0033:0x7f7a5878e9a9
[  296.312862][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  296.312868][    C0] RSP: 002b:00007f7a59572038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  296.312875][    C0] RAX: ffffffffffffffda RBX: 00007f7a589b5fa0 RCX: 00007f7a5878e9a9
[  296.312880][    C0] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005
[  296.312883][    C0] RBP: 00007f7a58810d69 R08: 0000000000000000 R09: 0000000000000000
[  296.312887][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  296.312891][    C0] R13: 0000000000000000 R14: 00007f7a589b5fa0 R15: 00007ffe6869af48
[  296.312898][    C0]  </TASK>
[  301.105264][T10257] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  301.111068][T10257] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  301.111905][T10257] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  301.112827][T10257] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  301.113888][T10257] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  301.439460][T10261] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  301.480581][T10265] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  301.496588][T10267] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  301.496997][T10267] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  301.497932][T10267] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  301.498680][T10267] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  301.499614][T10267] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  301.500136][T10267] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  301.501855][T10267] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  301.502141][T10267] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  303.513828][T10257] Bluetooth: hci3: command 0x0406 tx timeout
[  303.513889][T10257] Bluetooth: hci4: command 0x0406 tx timeout
[  303.513927][T10257] Bluetooth: hci5: command 0x0406 tx timeout
[  314.871064][   T34] INFO: task rcu_tasks_trace:31 blocked for more than 143 seconds.
[  314.871093][   T34]       Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0
[  314.871104][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  314.871113][   T34] task:rcu_tasks_trace state:D stack:26360 pid:31    tgid:31    ppid:2      task_flags:0x208040 flags:0x00004000
[  314.871158][   T34] Call Trace:
[  314.871169][   T34]  <TASK>
[  314.871182][   T34]  __schedule+0x16f5/0x4d00
[  314.871212][   T34]  ? __lock_acquire+0xab9/0xd20
[  314.871231][   T34]  ? schedule+0x165/0x360
[  314.871245][   T34]  ? __pfx___schedule+0x10/0x10
[  314.871263][   T34]  ? schedule+0x91/0x360
[  314.871275][   T34]  schedule+0x165/0x360
[  314.871286][   T34]  schedule_preempt_disabled+0x13/0x30
[  314.871296][   T34]  __mutex_lock+0x724/0xe80
[  314.871309][   T34]  ? __mutex_lock+0x51b/0xe80
[  314.871322][   T34]  ? synchronize_rcu_expedited+0x3b9/0x730
[  314.871336][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  314.871353][   T34]  ? do_raw_spin_unlock+0x4d/0x240
[  314.871367][   T34]  synchronize_rcu_expedited+0x3b9/0x730
[  314.871379][   T34]  ? __pfx_synchronize_rcu_expedited+0x10/0x10
[  314.871398][   T34]  ? __pfx___might_resched+0x10/0x10
[  314.871411][   T34]  ? rcu_tasks_trace_pregp_step+0xe2a/0xe70
[  314.871428][   T34]  synchronize_rcu+0x11a/0x310
[  314.871439][   T34]  ? __pfx_synchronize_rcu+0x10/0x10
[  314.871449][   T34]  ? __pfx_rcu_tasks_trace_pregp_step+0x10/0x10
[  314.871461][   T34]  ? rcu_is_watching+0x15/0xb0
[  314.871471][   T34]  ? trace_contention_end+0x39/0x120
[  314.871483][   T34]  ? __mutex_lock+0x330/0xe80
[  314.871495][   T34]  rcu_tasks_wait_gp+0x490/0xac0
[  314.871511][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  314.871521][   T34]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  314.871532][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  314.871544][   T34]  ? __pfx_rcu_tasks_wait_gp+0x10/0x10
[  314.871558][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  314.871573][   T34]  rcu_tasks_one_gp+0xc19/0xdf0
[  314.871590][   T34]  ? rcu_tasks_one_gp+0xe9/0xdf0
[  314.871606][   T34]  rcu_tasks_kthread+0x195/0x1c0
[  314.871620][   T34]  kthread+0x711/0x8a0
[  314.871633][   T34]  ? __pfx_rcu_tasks_kthread+0x10/0x10
[  314.871645][   T34]  ? __pfx_kthread+0x10/0x10
[  314.871658][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  314.871668][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  314.871677][   T34]  ? __pfx_kthread+0x10/0x10
[  314.871689][   T34]  ret_from_fork+0x3fc/0x770
[  314.871701][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  314.871713][   T34]  ? __switch_to_asm+0x39/0x70
[  314.871724][   T34]  ? __switch_to_asm+0x33/0x70
[  314.871734][   T34]  ? __pfx_kthread+0x10/0x10
[  314.871746][   T34]  ret_from_fork_asm+0x1a/0x30
[  314.871763][   T34]  </TASK>
[  314.871833][   T34] INFO: task kworker/u10:28:6066 blocked for more than 143 seconds.
[  314.871841][   T34]       Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0
[  314.871847][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  314.871852][   T34] task:kworker/u10:28  state:D stack:25520 pid:6066  tgid:6066  ppid:2      task_flags:0x4208060 flags:0x00004000
[  314.871877][   T34] Workqueue: events_unbound linkwatch_event
[  314.871892][   T34] Call Trace:
[  314.871897][   T34]  <TASK>
[  314.871903][   T34]  __schedule+0x16f5/0x4d00
[  314.871919][   T34]  ? __lock_acquire+0xab9/0xd20
[  314.871929][   T34]  ? schedule+0x165/0x360
[  314.871942][   T34]  ? __pfx___schedule+0x10/0x10
[  314.871959][   T34]  ? schedule+0x91/0x360
[  314.871971][   T34]  schedule+0x165/0x360
[  314.871982][   T34]  schedule_preempt_disabled+0x13/0x30
[  314.871992][   T34]  __mutex_lock+0x724/0xe80
[  314.872004][   T34]  ? __mutex_lock+0x51b/0xe80
[  314.872017][   T34]  ? linkwatch_event+0xe/0x60
[  314.872051][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  314.872070][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  314.872079][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  314.872089][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  314.872100][   T34]  linkwatch_event+0xe/0x60
[  314.872110][   T34]  process_scheduled_works+0xae1/0x17b0
[  314.872132][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  314.872149][   T34]  worker_thread+0x8a0/0xda0
[  314.872170][   T34]  kthread+0x711/0x8a0
[  314.872183][   T34]  ? __pfx_worker_thread+0x10/0x10
[  314.872193][   T34]  ? __pfx_kthread+0x10/0x10
[  314.872205][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  314.872215][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  314.872226][   T34]  ? __pfx_kthread+0x10/0x10
[  314.872238][   T34]  ret_from_fork+0x3fc/0x770
[  314.872248][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  314.872260][   T34]  ? __switch_to_asm+0x39/0x70
[  314.872270][   T34]  ? __switch_to_asm+0x33/0x70
[  314.872281][   T34]  ? __pfx_kthread+0x10/0x10
[  314.872293][   T34]  ret_from_fork_asm+0x1a/0x30
[  314.872310][   T34]  </TASK>
[  314.872316][   T34] INFO: task syz.0.1324:10187 blocked for more than 143 seconds.
[  314.872323][   T34]       Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0
[  314.872329][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  314.872334][   T34] task:syz.0.1324      state:D stack:25040 pid:10187 tgid:10187 ppid:5827   task_flags:0x400040 flags:0x00004004
[  314.872358][   T34] Call Trace:
[  314.872362][   T34]  <TASK>
[  314.872368][   T34]  __schedule+0x16f5/0x4d00
[  314.872384][   T34]  ? do_raw_spin_lock+0x121/0x290
[  314.872397][   T34]  ? schedule+0x165/0x360
[  314.872407][   T34]  ? __lock_acquire+0xab9/0xd20
[  314.872417][   T34]  ? __pfx___schedule+0x10/0x10
[  314.872434][   T34]  ? schedule+0x91/0x360
[  314.872446][   T34]  schedule+0x165/0x360
[  314.872457][   T34]  synchronize_rcu_expedited+0x583/0x730
[  314.872470][   T34]  ? __pfx_synchronize_rcu_expedited+0x10/0x10
[  314.872487][   T34]  ? __pfx_wait_rcu_exp_gp+0x10/0x10
[  314.872498][   T34]  ? __pfx___might_resched+0x10/0x10
[  314.872508][   T34]  ? __pfx_autoremove_wake_function+0x10/0x10
[  314.872521][   T34]  ? __pfx_device_del+0x10/0x10
[  314.872531][   T34]  ? netdev_unregister_kobject+0x344/0x450
[  314.872546][   T34]  unregister_netdevice_many_notify+0x1f75/0x2320
[  314.872566][   T34]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  314.872581][   T34]  ? __mod_timer+0xb37/0xf30
[  314.872596][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  314.872610][   T34]  unregister_netdevice_queue+0x33c/0x380
[  314.872622][   T34]  ? __pfx_queue_delayed_work_on+0x10/0x10
[  314.872633][   T34]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  314.872643][   T34]  ? linkwatch_urgent_event+0x62/0x3a0
[  314.872657][   T34]  __tun_detach+0xda4/0x1560
[  314.872673][   T34]  ? __pfx_tun_chr_close+0x10/0x10
[  314.872685][   T34]  tun_chr_close+0x10a/0x1c0
[  314.872698][   T34]  __fput+0x44c/0xa70
[  314.872715][   T34]  task_work_run+0x1d4/0x260
[  314.872729][   T34]  ? __pfx_task_work_run+0x10/0x10
[  314.872763][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  314.872777][   T34]  exit_to_user_mode_loop+0xec/0x110
[  314.872787][   T34]  do_syscall_64+0x2bd/0x3b0
[  314.872798][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  314.872813][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.872822][   T34]  ? exc_page_fault+0x9f/0xf0
[  314.872834][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.872843][   T34] RIP: 0033:0x7feea1f8e9a9
[  314.872853][   T34] RSP: 002b:00007ffdc04ff568 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  314.872864][   T34] RAX: 0000000000000000 RBX: 00007feea21b7ba0 RCX: 00007feea1f8e9a9
[  314.872872][   T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  314.872878][   T34] RBP: 00007feea21b7ba0 R08: 000000000000021c R09: 0000001ec04ff85f
[  314.872885][   T34] R10: 00007feea21b7ac0 R11: 0000000000000246 R12: 0000000000027eed
[  314.872892][   T34] R13: 00007feea21b5fa0 R14: ffffffffffffffff R15: 00007ffdc04ff680
[  314.872906][   T34]  </TASK>
[  314.872911][   T34] INFO: task syz.1.1333:10211 blocked for more than 143 seconds.
[  314.872917][   T34]       Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0
[  314.872923][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  314.872928][   T34] task:syz.1.1333      state:D stack:25096 pid:10211 tgid:10211 ppid:5823   task_flags:0x400040 flags:0x00004004
[  314.872951][   T34] Call Trace:
[  314.872955][   T34]  <TASK>
[  314.872962][   T34]  __schedule+0x16f5/0x4d00
[  314.872974][   T34]  ? trace_call_bpf+0xb7/0x850
[  314.872987][   T34]  ? perf_trace_run_bpf_submit+0x100/0x170
[  314.872999][   T34]  ? schedule+0x165/0x360
[  314.873009][   T34]  ? __lock_acquire+0xab9/0xd20
[  314.873019][   T34]  ? __pfx___schedule+0x10/0x10
[  314.873056][   T34]  ? schedule+0x91/0x360
[  314.873070][   T34]  schedule+0x165/0x360
[  314.873081][   T34]  schedule_timeout+0x9a/0x270
[  314.873091][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  314.873106][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  314.873115][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  314.873127][   T34]  __wait_for_common+0x3da/0x710
[  314.873146][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  314.873155][   T34]  ? __pfx___wait_for_common+0x10/0x10
[  314.873167][   T34]  ? __raw_spin_lock_init+0x45/0x100
[  314.873180][   T34]  ? __init_swait_queue_head+0xa9/0x150
[  314.873193][   T34]  wait_for_completion_state+0x1c/0x40
[  314.873204][   T34]  __wait_rcu_gp+0x24c/0x280
[  314.873218][   T34]  synchronize_rcu_tasks_generic+0x132/0x220
[  314.873230][   T34]  ? __pfx_synchronize_rcu_tasks_generic+0x10/0x10
[  314.873240][   T34]  ? rcu_read_lock_any_held+0xb3/0x120
[  314.873250][   T34]  ? __pfx_call_rcu_tasks_trace+0x10/0x10
[  314.873262][   T34]  ? __pfx_wakeme_after_rcu+0x10/0x10
[  314.873282][   T34]  perf_trace_event_unreg+0xbe/0x1b0
[  314.873293][   T34]  perf_trace_destroy+0xa4/0x150
[  314.873304][   T34]  ? __pfx_tp_perf_event_destroy+0x10/0x10
[  314.873314][   T34]  __free_event+0x316/0x7b0
[  314.873324][   T34]  ? __pfx_perf_release+0x10/0x10
[  314.873336][   T34]  perf_event_release_kernel+0x45b/0x510
[  314.873346][   T34]  ? __pfx_perf_release+0x10/0x10
[  314.873357][   T34]  perf_release+0x38/0x50
[  314.873368][   T34]  __fput+0x44c/0xa70
[  314.873384][   T34]  task_work_run+0x1d4/0x260
[  314.873397][   T34]  ? __pfx_task_work_run+0x10/0x10
[  314.873412][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  314.873423][   T34]  exit_to_user_mode_loop+0xec/0x110
[  314.873432][   T34]  do_syscall_64+0x2bd/0x3b0
[  314.873443][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  314.873453][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.873462][   T34]  ? exc_page_fault+0x9f/0xf0
[  314.873474][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.873482][   T34] RIP: 0033:0x7f7a5878e9a9
[  314.873490][   T34] RSP: 002b:00007ffe6869b0a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  314.873501][   T34] RAX: 0000000000000000 RBX: 00007f7a589b7ba0 RCX: 00007f7a5878e9a9
[  314.873508][   T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  314.873514][   T34] RBP: 00007f7a589b7ba0 R08: 00000000000001f8 R09: 0000001c6869b39f
[  314.873521][   T34] R10: 00007f7a589b7ac0 R11: 0000000000000246 R12: 000000000002817a
[  314.873527][   T34] R13: 00007f7a589b6080 R14: ffffffffffffffff R15: 00007ffe6869b1c0
[  314.873541][   T34]  </TASK>
[  314.873546][   T34] INFO: task syz.2.1334:10215 blocked for more than 143 seconds.
[  314.873554][   T34]       Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0
[  314.873561][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  314.873565][   T34] task:syz.2.1334      state:D stack:24824 pid:10215 tgid:10214 ppid:5832   task_flags:0x400140 flags:0x00004004
[  314.873588][   T34] Call Trace:
[  314.873592][   T34]  <TASK>
[  314.873598][   T34]  __schedule+0x16f5/0x4d00
[  314.873613][   T34]  ? __lock_acquire+0xab9/0xd20
[  314.873624][   T34]  ? schedule+0x165/0x360
[  314.873636][   T34]  ? __pfx___schedule+0x10/0x10
[  314.873652][   T34]  ? schedule+0x91/0x360
[  314.873664][   T34]  schedule+0x165/0x360
[  314.873676][   T34]  schedule_preempt_disabled+0x13/0x30
[  314.873686][   T34]  __mutex_lock+0x724/0xe80
[  314.873697][   T34]  ? __mutex_lock+0x51b/0xe80
[  314.873711][   T34]  ? __tun_chr_ioctl+0x37a/0x1df0
[  314.873721][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  314.873741][   T34]  __tun_chr_ioctl+0x37a/0x1df0
[  314.873753][   T34]  ? __pfx___tun_chr_ioctl+0x10/0x10
[  314.873764][   T34]  ? __fget_files+0x2a/0x420
[  314.873774][   T34]  ? __fget_files+0x3a0/0x420
[  314.873783][   T34]  ? __fget_files+0x2a/0x420
[  314.873794][   T34]  ? bpf_lsm_file_ioctl+0x9/0x20
[  314.873811][   T34]  ? __pfx_tun_chr_ioctl+0x10/0x10
[  314.873823][   T34]  __se_sys_ioctl+0xfc/0x170
[  314.873838][   T34]  do_syscall_64+0xfa/0x3b0
[  314.873850][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.873858][   T34]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  314.873869][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.873878][   T34] RIP: 0033:0x7fa9bd58e9a9
[  314.873885][   T34] RSP: 002b:00007fa9be382038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  314.873896][   T34] RAX: ffffffffffffffda RBX: 00007fa9bd7b5fa0 RCX: 00007fa9bd58e9a9
[  314.873903][   T34] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 000000000000000b
[  314.873909][   T34] RBP: 00007fa9bd610d69 R08: 0000000000000000 R09: 0000000000000000
[  314.873916][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  314.873922][   T34] R13: 0000000000000000 R14: 00007fa9bd7b5fa0 R15: 00007fffb54af448
[  314.873936][   T34]  </TASK>
[  314.873940][   T34] INFO: task syz.2.1334:10216 blocked for more than 143 seconds.
[  314.873947][   T34]       Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0
[  314.873953][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  314.873958][   T34] task:syz.2.1334      state:D stack:25896 pid:10216 tgid:10214 ppid:5832   task_flags:0x400140 flags:0x00004004
[  314.873980][   T34] Call Trace:
[  314.873984][   T34]  <TASK>
[  314.873991][   T34]  __schedule+0x16f5/0x4d00
[  314.874006][   T34]  ? __lock_acquire+0xab9/0xd20
[  314.874017][   T34]  ? schedule+0x165/0x360
[  314.874048][   T34]  ? __pfx___schedule+0x10/0x10
[  314.874067][   T34]  ? schedule+0x91/0x360
[  314.874079][   T34]  schedule+0x165/0x360
[  314.874090][   T34]  schedule_preempt_disabled+0x13/0x30
[  314.874100][   T34]  __mutex_lock+0x724/0xe80
[  314.874112][   T34]  ? __mutex_lock+0x51b/0xe80
[  314.874126][   T34]  ? __tun_chr_ioctl+0x37a/0x1df0
[  314.874136][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  314.874147][   T34]  ? trace_call_bpf+0x5ba/0x850
[  314.874159][   T34]  ? __lock_acquire+0xab9/0xd20
[  314.874172][   T34]  __tun_chr_ioctl+0x37a/0x1df0
[  314.874184][   T34]  ? __pfx___tun_chr_ioctl+0x10/0x10
[  314.874195][   T34]  ? __fget_files+0x2a/0x420
[  314.874205][   T34]  ? __fget_files+0x3a0/0x420
[  314.874215][   T34]  ? __fget_files+0x2a/0x420
[  314.874226][   T34]  ? bpf_lsm_file_ioctl+0x9/0x20
[  314.874238][   T34]  ? __pfx_tun_chr_ioctl+0x10/0x10
[  314.874251][   T34]  __se_sys_ioctl+0xfc/0x170
[  314.874264][   T34]  do_syscall_64+0xfa/0x3b0
[  314.874275][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  314.874286][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.874295][   T34]  ? exc_page_fault+0x9f/0xf0
[  314.874307][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.874315][   T34] RIP: 0033:0x7fa9bd58e9a9
[  314.874323][   T34] RSP: 002b:00007fa9be361038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  314.874334][   T34] RAX: ffffffffffffffda RBX: 00007fa9bd7b6080 RCX: 00007fa9bd58e9a9
[  314.874342][   T34] RDX: 000000000000000a RSI: 00000000400454ce RDI: 0000000000000009
[  314.874348][   T34] RBP: 00007fa9bd610d69 R08: 0000000000000000 R09: 0000000000000000
[  314.874355][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  314.874361][   T34] R13: 0000000000000000 R14: 00007fa9bd7b6080 R15: 00007fffb54af448
[  314.874375][   T34]  </TASK>
[  314.874386][   T34] 
[  314.874386][   T34] Showing all locks held in the system:
[  314.874393][   T34] 2 locks held by rcu_tasks_trace/31:
[  314.874400][   T34]  #0: ffffffff8e13fe10 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{4:4}, at: rcu_tasks_one_gp+0xaf9/0xdf0
[  314.874434][   T34]  #1: ffffffff8e144bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  314.874465][   T34] 1 lock held by khungtaskd/34:
[  314.874471][   T34]  #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  314.874504][   T34] 4 locks held by kworker/u11:0/55:
[  314.874510][   T34]  #0: ffff888110810148 ((wq_completion)hci9#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  314.874543][   T34]  #1: ffffc900007dfbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  314.874575][   T34]  #2: ffff8881222a40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0
[  314.874606][   T34]  #3: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0
[  314.874637][   T34] 3 locks held by kworker/1:2/95:
[  314.874644][   T34]  #0: ffff88801a481d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  314.874673][   T34]  #1: ffffc90001befbc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  314.874702][   T34]  #2: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf00
[  314.874749][   T34] 4 locks held by kworker/u11:1/5217:
[  314.874754][   T34]  #0: ffff88812004e948 ((wq_completion)hci7#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  314.874787][   T34]  #1: ffffc90021787bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  314.874821][   T34]  #2: ffff8881214680b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0
[  314.874851][   T34]  #3: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0
[  314.874883][   T34] 2 locks held by getty/5652:
[  314.874889][   T34]  #0: ffff8880280c10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  314.874918][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  314.874950][   T34] 6 locks held by kworker/u11:2/5826:
[  314.874956][   T34]  #0: ffff88810629d148 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  314.874985][   T34]  #1: ffffc9000399fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  314.875015][   T34]  #2: ffff88810ed60dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  314.875070][   T34]  #3: ffff88810ed600b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  314.875102][   T34]  #4: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  314.875131][   T34]  #5: ffff88802359bb38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  314.875164][   T34] 4 locks held by kworker/u11:3/5830:
[  314.875170][   T34]  #0: ffff888122c17148 ((wq_completion)hci6#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  314.875203][   T34]  #1: ffffc900039cfbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  314.875232][   T34]  #2: ffff8881111280b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0
[  314.875263][   T34]  #3: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0
[  314.875293][   T34] 5 locks held by kworker/u11:4/5831:
[  314.875299][   T34]  #0: ffff8881230bf948 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  314.875328][   T34]  #1: ffffc900039efbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  314.875357][   T34]  #2: ffff88811fea4dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  314.875387][   T34]  #3: ffff88811fea40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  314.875418][   T34]  #4: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  314.875451][   T34] 4 locks held by kworker/u11:5/5834:
[  314.875457][   T34]  #0: ffff8881218cd948 ((wq_completion)hci8#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  314.875489][   T34]  #1: ffffc90003a1fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  314.875518][   T34]  #2: ffff8881214b00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0
[  314.875548][   T34]  #3: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0
[  314.875583][   T34] 3 locks held by kworker/u8:4/5859:
[  314.875588][   T34]  #0: ffff8880213ad948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  314.875617][   T34]  #1: ffffc90003b4fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  314.875646][   T34]  #2: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  314.875679][   T34] 3 locks held by kworker/u10:28/6066:
[  314.875685][   T34]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  314.875714][   T34]  #1: ffffc90004a7fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  314.875743][   T34]  #2: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  314.875773][   T34] 2 locks held by syz.0.1324/10187:
[  314.875779][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  314.875813][   T34]  #1: ffffffff8e144bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  314.875843][   T34] 1 lock held by syz.1.1333/10211:
[  314.875849][   T34]  #0: ffffffff8e1a2ca8 (event_mutex){+.+.}-{4:4}, at: perf_trace_destroy+0x2e/0x150
[  314.875878][   T34] 5 locks held by syz.1.1333/10212:
[  314.875884][   T34] 1 lock held by syz.2.1334/10215:
[  314.875890][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37a/0x1df0
[  314.875919][   T34] 1 lock held by syz.2.1334/10216:
[  314.875924][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37a/0x1df0
[  314.875952][   T34] 1 lock held by syz-executor/10222:
[  314.875958][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  314.875988][   T34] 1 lock held by syz-executor/10225:
[  314.875995][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  314.876024][   T34] 1 lock held by syz-executor/10226:
[  314.876050][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  314.876082][   T34] 1 lock held by dhcpcd/10233:
[  314.876088][   T34]  #0: ffff888105346258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  314.876120][   T34] 1 lock held by dhcpcd/10234:
[  314.876125][   T34]  #0: ffff88810af92258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  314.876154][   T34] 1 lock held by dhcpcd/10235:
[  314.876160][   T34]  #0: ffff88812fc6e258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  314.876189][   T34] 1 lock held by dhcpcd/10236:
[  314.876195][   T34]  #0: ffff88812fbce258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  314.876224][   T34] 1 lock held by dhcpcd/10237:
[  314.876230][   T34]  #0: ffff888130004258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  314.876260][   T34] 1 lock held by syz-executor/10241:
[  314.876266][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  314.876295][   T34] 1 lock held by syz-executor/10244:
[  314.876301][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  314.876331][   T34] 1 lock held by syz-executor/10245:
[  314.876336][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  314.876366][   T34] 1 lock held by dhcpcd/10250:
[  314.876371][   T34]  #0: ffff8880642e0258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  314.876402][   T34] 1 lock held by syz-executor/10254:
[  314.876407][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  314.876437][   T34] 1 lock held by syz-executor/10259:
[  314.876443][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  314.876473][   T34] 1 lock held by syz-executor/10260:
[  314.876479][   T34]  #0: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  314.876509][   T34] 5 locks held by kworker/u11:7/10261:
[  314.876514][   T34]  #0: ffff8881230bb948 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  314.876544][   T34]  #1: ffffc90008b07bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  314.876575][   T34]  #2: ffff88810e234dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  314.876604][   T34]  #3: ffff88810e2340b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  314.876635][   T34]  #4: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  314.876663][   T34] 5 locks held by kworker/u11:8/10263:
[  314.876669][   T34]  #0: ffff888111b8a948 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  314.876697][   T34]  #1: ffffc90008b27bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  314.876726][   T34]  #2: ffff88811bf2cdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  314.876755][   T34]  #3: ffff88811bf2c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0
[  314.876786][   T34]  #4: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  314.876818][   T34] 4 locks held by kworker/u11:9/10265:
[  314.876824][   T34]  #0: ffff888110b5f148 ((wq_completion)hci10#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  314.876856][   T34]  #1: ffffc90008b47bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  314.876885][   T34]  #2: ffff88812147c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0
[  314.876915][   T34]  #3: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0
[  314.876945][   T34] 4 locks held by kworker/u11:11/10267:
[  314.876951][   T34]  #0: ffff888111b8c148 ((wq_completion)hci11#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  314.876984][   T34]  #1: ffffc90008b67bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  314.877013][   T34]  #2: ffff88810dd340b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0
[  314.877064][   T34]  #3: ffffffff8f684f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0
[  314.877095][   T34] 
[  314.877099][   T34] =============================================
[  314.877099][   T34] 
[  314.877105][   T34] NMI backtrace for cpu 1
[  314.877111][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  314.877120][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  314.877124][   T34] Call Trace:
[  314.877127][   T34]  <TASK>
[  314.877130][   T34]  dump_stack_lvl+0x189/0x250
[  314.877140][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  314.877148][   T34]  ? __pfx__printk+0x10/0x10
[  314.877162][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  314.877172][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  314.877178][   T34]  ? _printk+0xcf/0x120
[  314.877189][   T34]  ? __pfx__printk+0x10/0x10
[  314.877198][   T34]  ? debug_show_all_locks+0x2e/0x180
[  314.877206][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  314.877214][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  314.877223][   T34]  watchdog+0xfee/0x1030
[  314.877231][   T34]  ? watchdog+0x1de/0x1030
[  314.877240][   T34]  kthread+0x711/0x8a0
[  314.877250][   T34]  ? __pfx_watchdog+0x10/0x10
[  314.877256][   T34]  ? __pfx_kthread+0x10/0x10
[  314.877266][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  314.877274][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  314.877281][   T34]  ? __pfx_kthread+0x10/0x10
[  314.877291][   T34]  ret_from_fork+0x3fc/0x770
[  314.877299][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  314.877308][   T34]  ? __switch_to_asm+0x39/0x70
[  314.877316][   T34]  ? __switch_to_asm+0x33/0x70
[  314.877325][   T34]  ? __pfx_kthread+0x10/0x10
[  314.877334][   T34]  ret_from_fork_asm+0x1a/0x30
[  314.877348][   T34]  </TASK>
[  314.877351][   T34] Sending NMI from CPU 1 to CPUs 0:
[  314.877400][    C0] NMI backtrace for cpu 0
[  314.877415][    C0] CPU: 0 UID: 0 PID: 10212 Comm: syz.1.1333 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  314.877429][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  314.877436][    C0] RIP: 0010:native_apic_msr_write+0x39/0x50
[  314.877456][    C0] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 cc cc cc cc cc f3 0f 1e fa 89 f6 31 d2 e9 e2 db 86 03 66
[  314.877466][    C0] RSP: 0018:ffffc900000070a8 EFLAGS: 00000046
[  314.877477][    C0] RAX: 00000000000000f6 RBX: 0000000000000200 RCX: 000000000000083f
[  314.877485][    C0] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f
[  314.877491][    C0] RBP: ffffc90000007178 R08: ffffc90000007107 R09: 1ffff92000000e20
[  314.877499][    C0] R10: dffffc0000000000 R11: fffff52000000e21 R12: ffff88804b03af01
[  314.877506][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88804b0314f0
[  314.877514][    C0] FS:  00007f7a595726c0(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
[  314.877523][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  314.877531][    C0] CR2: 00007fa9be2e56c0 CR3: 000000012024e000 CR4: 00000000000006f0
[  314.877565][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  314.877580][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  314.877587][    C0] Call Trace:
[  314.877592][    C0]  <IRQ>
[  314.877597][    C0]  arch_irq_work_raise+0x6d/0x80
[  314.877610][    C0]  __irq_work_queue_local+0x1d7/0x550
[  314.877624][    C0]  ? __pfx___irq_work_queue_local+0x10/0x10
[  314.877635][    C0]  ? __virt_addr_valid+0x4a5/0x5c0
[  314.877649][    C0]  ? __phys_addr+0xd3/0x180
[  314.877663][    C0]  irq_work_queue_on+0x122/0x230
[  314.877675][    C0]  rcu_read_unlock_special+0x3ab/0x4c0
[  314.877691][    C0]  ? __lock_acquire+0xab9/0xd20
[  314.877703][    C0]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  314.877718][    C0]  ? trace_call_bpf+0xb7/0x850
[  314.877734][    C0]  __rcu_read_unlock+0x84/0xe0
[  314.877749][    C0]  ? trace_call_bpf+0xb7/0x850
[  314.877759][    C0]  trace_call_bpf+0x5ae/0x850
[  314.877770][    C0]  ? trace_call_bpf+0xb7/0x850
[  314.877783][    C0]  ? __pfx_trace_call_bpf+0x10/0x10
[  314.877792][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  314.877805][    C0]  ? sched_clock_cpu+0x74/0x430
[  314.877817][    C0]  ? lapic_next_event+0x11/0x20
[  314.877828][    C0]  ? clockevents_program_event+0x24d/0x360
[  314.877844][    C0]  perf_trace_run_bpf_submit+0x78/0x170
[  314.877860][    C0]  perf_trace_preemptirq_template+0x280/0x340
[  314.877878][    C0]  ? irqentry_enter+0x3d/0x60
[  314.877891][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  314.877907][    C0]  ? __irq_exit_rcu+0xd8/0x1f0
[  314.877919][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  314.877931][    C0]  ? irqentry_enter+0x3d/0x60
[  314.877944][    C0]  trace_irq_disable+0xee/0x110
[  314.877959][    C0]  irqentry_enter+0x3d/0x60
[  314.877972][    C0]  sysvec_apic_timer_interrupt+0xe/0xc0
[  314.877986][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  314.877998][    C0] RIP: 0010:console_flush_all+0x7f7/0xc40
[  314.878013][    C0] Code: 48 21 c3 0f 85 e9 01 00 00 e8 75 e7 1e 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 66 e7 1e 00 eb 06 e8 5f e7 1e 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 8a 0a 82 00 48 8b 1b 48 8b 44 24
[  314.878023][    C0] RSP: 0018:ffffc90000007620 EFLAGS: 00000246
[  314.878074][    C0] RAX: 1ffffffff1d902ff RBX: ffffffff8ec817f8 RCX: ffff88812387b980
[  314.878083][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  314.878090][    C0] RBP: ffffc90000007770 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  314.878098][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: dffffc0000000000
[  314.878106][    C0] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8ec817a0
[  314.878122][    C0]  ? console_flush_all+0x13a/0xc40
[  314.878139][    C0]  ? __pfx_console_flush_all+0x10/0x10
[  314.878158][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  314.878174][    C0]  console_unlock+0xc4/0x270
[  314.878187][    C0]  ? __pfx_console_unlock+0x10/0x10
[  314.878201][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  314.878217][    C0]  vprintk_emit+0x5b7/0x7a0
[  314.878231][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[  314.878243][    C0]  ? irq_work_single+0x1ac/0x240
[  314.878256][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  314.878273][    C0]  ? __irq_exit_rcu+0xd8/0x1f0
[  314.878286][    C0]  _printk+0xcf/0x120
[  314.878301][    C0]  ? __pfx__printk+0x10/0x10
[  314.878319][    C0]  clocksource_watchdog+0xdca/0x11c0
[  314.878330][    C0]  ? __lock_acquire+0xab9/0xd20
[  314.878345][    C0]  ? __pfx_clocksource_watchdog+0x10/0x10
[  314.878358][    C0]  ? __irq_exit_rcu+0xd8/0x1f0
[  314.878373][    C0]  call_timer_fn+0x17e/0x5f0
[  314.878385][    C0]  ? __pfx_clocksource_watchdog+0x10/0x10
[  314.878396][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  314.878408][    C0]  ? call_timer_fn+0xbe/0x5f0
[  314.878419][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  314.878433][    C0]  ? __pfx_clocksource_watchdog+0x10/0x10
[  314.878446][    C0]  __run_timer_base+0x61a/0x860
[  314.878461][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  314.878481][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  314.878501][    C0]  run_timer_softirq+0x67/0x180
[  314.878517][    C0]  handle_softirqs+0x286/0x870
[  314.878547][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  314.878562][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  314.878579][    C0]  ? irq_work_single+0x1ac/0x240
[  314.878593][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  314.878607][    C0]  __irq_exit_rcu+0xca/0x1f0
[  314.878618][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  314.878631][    C0]  ? rcu_is_watching+0x15/0xb0
[  314.878643][    C0]  irq_exit_rcu+0x9/0x30
[  314.878653][    C0]  sysvec_irq_work+0xa3/0xc0
[  314.878665][    C0]  </IRQ>
[  314.878669][    C0]  <TASK>
[  314.878673][    C0]  asm_sysvec_irq_work+0x1a/0x20
[  314.878684][    C0] RIP: 0010:rcu_read_unlock_special+0x87/0x4c0
[  314.878700][    C0] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 62 2c f8 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
[  314.878709][    C0] RSP: 0018:ffffc900086f7280 EFLAGS: 00000206
[  314.878720][    C0] RAX: 573cdfceba5e4100 RBX: 1ffff920010dee58 RCX: 573cdfceba5e4100
[  314.878728][    C0] RDX: 0000000000000006 RSI: ffffffff8d99883e RDI: ffffffff8be29f40
[  314.878736][    C0] RBP: ffffc900086f7370 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  314.878744][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffffffff8e144400
[  314.878752][    C0] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000001
[  314.878767][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  314.878782][    C0]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  314.878801][    C0]  ? mod_objcg_mlstate+0x24/0x260
[  314.878818][    C0]  __rcu_read_unlock+0x84/0xe0
[  314.878833][    C0]  drain_obj_stock+0x196/0x3c0
[  314.878849][    C0]  refill_obj_stock+0x247/0x850
[  314.878861][    C0]  ? refill_obj_stock+0x116/0x850
[  314.878873][    C0]  obj_cgroup_charge_account+0x116/0x660
[  314.878891][    C0]  ? obj_cgroup_charge_account+0x13b/0x660
[  314.878908][    C0]  __memcg_slab_post_alloc_hook+0x3e6/0x7f0
[  314.878926][    C0]  __kvmalloc_node_noprof+0x466/0x5f0
[  314.878940][    C0]  ? bpf_check+0xf20/0x1d2e0
[  314.878957][    C0]  bpf_check+0xf20/0x1d2e0
[  314.878971][    C0]  ? __lock_acquire+0xab9/0xd20
[  314.878983][    C0]  ? migrate_enable+0x29c/0x3c0
[  314.878998][    C0]  ? trace_call_bpf+0xb7/0x850
[  314.879015][    C0]  ? trace_call_bpf+0xb7/0x850
[  314.879027][    C0]  ? trace_call_bpf+0xb7/0x850
[  314.879066][    C0]  ? trace_call_bpf+0x5ba/0x850
[  314.879078][    C0]  ? trace_call_bpf+0xb7/0x850
[  314.879091][    C0]  ? __pfx_trace_call_bpf+0x10/0x10
[  314.879104][    C0]  ? trace_call_bpf+0x5ba/0x850
[  314.879116][    C0]  ? perf_trace_run_bpf_submit+0x100/0x170
[  314.879132][    C0]  ? perf_trace_preemptirq_template+0x280/0x340
[  314.879148][    C0]  ? irqentry_enter+0x3d/0x60
[  314.879168][    C0]  ? irqentry_exit+0x74/0x90
[  314.879183][    C0]  ? __pfx_bpf_check+0x10/0x10
[  314.879200][    C0]  ? seqcount_lockdep_reader_access+0x175/0x1c0
[  314.879216][    C0]  ? seqcount_lockdep_reader_access+0x17e/0x1c0
[  314.879231][    C0]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  314.879250][    C0]  ? __asan_memset+0x22/0x50
[  314.879265][    C0]  ? bpf_obj_name_cpy+0x194/0x1e0
[  314.879277][    C0]  ? bpf_lsm_bpf_prog_load+0x9/0x20
[  314.879288][    C0]  ? security_bpf_prog_load+0x7f/0x310
[  314.879304][    C0]  bpf_prog_load+0x1318/0x1930
[  314.879320][    C0]  ? __pfx_bpf_prog_load+0x10/0x10
[  314.879339][    C0]  ? bpf_lsm_bpf+0x9/0x20
[  314.879348][    C0]  ? security_bpf+0x7e/0x300
[  314.879361][    C0]  __sys_bpf+0x528/0x870
[  314.879372][    C0]  ? __pfx___sys_bpf+0x10/0x10
[  314.879388][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  314.879403][    C0]  ? rcu_is_watching+0x15/0xb0
[  314.879418][    C0]  __x64_sys_bpf+0x7c/0x90
[  314.879434][    C0]  do_syscall_64+0xfa/0x3b0
[  314.879450][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.879460][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  314.879473][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.879483][    C0] RIP: 0033:0x7f7a5878e9a9
[  314.879494][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  314.879503][    C0] RSP: 002b:00007f7a59572038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  314.879515][    C0] RAX: ffffffffffffffda RBX: 00007f7a589b5fa0 RCX: 00007f7a5878e9a9
[  314.879523][    C0] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005
[  314.879530][    C0] RBP: 00007f7a58810d69 R08: 0000000000000000 R09: 0000000000000000
[  314.879537][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  314.879543][    C0] R13: 0000000000000000 R14: 00007f7a589b5fa0 R15: 00007ffe6869af48
[  314.879557][    C0]  </TASK>
[  314.891274][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  314.891292][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  314.891309][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  314.891317][   T34] Call Trace:
[  314.891323][   T34]  <TASK>
[  314.891330][   T34]  dump_stack_lvl+0x99/0x250
[  314.891350][   T34]  ? __asan_memcpy+0x40/0x70
[  314.891369][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  314.891384][   T34]  ? __pfx__printk+0x10/0x10
[  314.891410][   T34]  panic+0x2db/0x790
[  314.891429][   T34]  ? __pfx_panic+0x10/0x10
[  314.891443][   T34]  ? __pfx_delay_tsc+0x10/0x10
[  314.891456][   T34]  ? nmi_backtrace_stall_check+0x433/0x440
[  314.891474][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  314.891488][   T34]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  314.891507][   T34]  watchdog+0x102d/0x1030
[  314.891521][   T34]  ? watchdog+0x1de/0x1030
[  314.891539][   T34]  kthread+0x711/0x8a0
[  314.891557][   T34]  ? __pfx_watchdog+0x10/0x10
[  314.891569][   T34]  ? __pfx_kthread+0x10/0x10
[  314.891587][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  314.891604][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  314.891619][   T34]  ? __pfx_kthread+0x10/0x10
[  314.891636][   T34]  ret_from_fork+0x3fc/0x770
[  314.891652][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  314.891670][   T34]  ? __switch_to_asm+0x39/0x70
[  314.891685][   T34]  ? __switch_to_asm+0x33/0x70
[  314.891700][   T34]  ? __pfx_kthread+0x10/0x10
[  314.891717][   T34]  ret_from_fork_asm+0x1a/0x30
[  314.891744][   T34]  </TASK>
[  314.892488][   T34] Kernel Offset: disabled

VM DIAGNOSIS:
06:25:21  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81680ea6 RBX=0000000000000000 RCX=ffff88812387b980 RDX=0000000000010100
RSI=0000000000000008 RDI=ffffffff92a52460 RBP=ffffc90000007548 RSP=ffffc900000074c0
R8 =ffffffff92a52467 R9 =1ffffffff254a48c R10=dffffc0000000000 R11=fffffbfff254a48d
R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff81680ea7 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f7a595726c0 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa9be2e56c0 CR3=000000012024e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007feea2011ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33bf460 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99dfa470 RSP=ffffc9000068f750
R8 =ffff888108180237 R9 =1ffff11021030046 R10=dffffc0000000000 R11=ffffffff854729d0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff85472a47 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7317068ef0 CR3=000000010e2a6000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000ff0000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
