last executing test programs:

4.539904934s ago: executing program 2 (id=724):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000900116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)

4.307495199s ago: executing program 2 (id=727):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
unshare(0x22020600)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {0x0}, {&(0x7f0000002500)=""/4137, 0x1029}, {0x0}, {&(0x7f00000004c0)=""/200, 0xc8}, {&(0x7f0000000400)=""/170, 0xaa}, {&(0x7f0000000340)=""/181, 0xb5}], 0x7}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044040}, 0x40)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}})

3.365503664s ago: executing program 1 (id=738):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000003f00000000b703000000000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.265702968s ago: executing program 2 (id=739):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000100000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94)
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x0, 0xa2e}})
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6, 0x0, 0x6c}]}, 0x10)
syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x702, 0xe, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x4, 0x7f, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r6, &(0x7f0000000bc0), 0x0}, 0x20)
r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r7, 0x10c, 0x9, 0x0, &(0x7f0000000240))
r8 = socket(0x848000000015, 0x805, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r9)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r9, &(0x7f0000000080)={0x0, 0xa000000, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff06000700260a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r9)
bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x401}, 0x1c)

3.179882019s ago: executing program 1 (id=741):
unshare(0x64000600) (async)
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x31) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000040000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000000)=0x1000000) (async)
socket$xdp(0x2c, 0x3, 0x0)

2.938755453s ago: executing program 1 (id=743):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e0001000200", @ANYBLOB=','], 0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001940)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="1400000016000b63d2030000000000000724fc60", 0x14}], 0x1}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'ip6gretap0\x00', <r4=>0x0})
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x3, 0x30, 0x0, 0xa3}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x1000000, 0x0, 0x8a}, 0x9c)
bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r5, 0x2)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @private0, 0x80000}}}, 0x80, 0x0}, 0x0)
r7 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r7, 0x84, 0x9, &(0x7f0000000380), 0x98)
sendmsg$kcm(r7, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0x1}], 0x1}, 0x40)
sendmsg$inet6(r3, &(0x7f0000000280)={&(0x7f0000000080)={0xa, 0x4e21, 0x5, @mcast2, 0x5}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000004c0)="289b0b68f43415f8c32a4f381cb9330e0ebab9392dc9f67c7816ea37f2ccce000ccabe60bbf58a26f1fcbfe02bb884233cb86e33d9d11b62954e4a71f8f7fbca0257c0a2b09e80d7e6e5b112de55a9d65be00900dbf6f6bdb5d0d8f397fc33f1e9b381744b102e4bf048e76f4ef12caaded612d8202f30648990b727d369f3a5768c7501241c568eac5ba9b95885e24964cea945dd0c0d9e02ee55404ad37cd0b9faab9898e6ad7975eee3c099c24d51da1198392f0dc046172ac17b27308cb6d3c552fede3a750e1db06f2a77dc0968b678bf58eea5652ccd06aac6eac573ffa61a2bb17b7455e0ca127910", 0xec}, {&(0x7f0000000100)="1769e43cae1e11331d3082bdf1221a606b7f5b3e24eb2590", 0x18}, {&(0x7f0000000140)="105f17a2807933", 0x7}, {&(0x7f00000005c0)="6308e5f5141ca6ee02efbdda59254cf1f1608c10e60799887620a0c1401f419398ac68cd86ae9c879c3b9f300ebbafe787aacda9b52e18dc392c8625db52daea7ade5b6236c02c2c8958b6b16db3da5e2bf9640405ef89fc1814349ed236ac9937c8930a7b2019715538ef7a0b92dd94b730cad6de9c27aae85fc1dfb7bd2156736d2c7c", 0x84}, {&(0x7f0000000680)="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", 0x1000}], 0x5, &(0x7f00000019c0)=ANY=[@ANYBLOB="2400000000000000290000003209e459596c9be0ce00b76a897883000000fc020004000000080000000000000001854a5df84e862cedb7f1febdb9febc98ef66f2c24e98946592ef1cc68a87e4514ec8b868594d37ce67e21c5bba7f60a8d8ac93d8bc32c0bb8cb3387fef7843b8e15b5b834b28d0ac07e7b4efb89515772e64d08c7714d8278b3b2eaec8200e99d7ecc46d68336117325ebeac64cf07c2c7d08599d21375070ad91581e6eeec626608d841b8ce6a3fba65250adf9fe8ae2de709b9ae2c8275d128825c9f3ae4c1a706ab48abcee4b96dcd702c", @ANYRES32=r4, @ANYBLOB="000000001400000000000000290000000b0000000010000000000000500000000000000029000000360000001d0600000000000000010005020004040109040104000100000100c910fe80000000000000000000000000003ec910fc00000000000000000000000000000100140000000000000029000000080000000100000000000000480000000000000029000000360000003b0500000000000001020000000100071800000003040089820000008000000000ffffffffffffffff040110c20400000a98000000000000280000000000000029000000360000008701000000000000c204000000010401ff00000000000000"], 0x118}, 0x8008)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000000200)=ANY=[@ANYRES8=r0], &(0x7f00000001c0)='GPL\x00', 0x4, 0x40, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8, 0x10, &(0x7f00000000c0)={0x3}, 0x10}, 0x94)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315, 0x21}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x40801)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000001c80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001cc0)={'wpan4\x00'})
syz_genetlink_get_family_id$tipc(&(0x7f0000001880), r6)

2.430817321s ago: executing program 0 (id=748):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[], 0x3c}}, 0x0)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000400)=0xc)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001180)=ANY=[@ANYBLOB="24000000b3000100000000000000000008000c00ff8a48233b868a748a2e7fc4dfcf6e84ad0384c73c5f5bf8b9c70d9bc54ac06e01fab11ec04238829853bcfa752d58a65eb814d397e9bba17a39d861d444138f867ab1d1a386705ea6185def1277006c9e4c0d7413cfe840491b36e4666c221737e8438e3fc446930b9acd18704ffd", @ANYRES32=r2, @ANYBLOB="0b000080976b640868603000"], 0x24}], 0x1, 0x0, 0x0, 0x2000000}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000900)=@allocspi={0x800, 0x16, 0x10, 0x70bd27, 0x25dfdbfd, {{{@in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e23, 0x0, 0x4e21, 0xfffa, 0x2, 0xa0, 0x80, 0x87, 0x0, r2}, {@in6=@dev={0xfe, 0x80, '\x00', 0x13}, 0x4d3, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3d}, {0x0, 0x3, 0x7, 0x7fffffffffffffff, 0x7fff, 0x1, 0x94, 0x1}, {0x8000000000000001, 0x4, 0x9, 0x4ba15d0a}, {0x200, 0x401, 0x3}, 0x70bd25, 0x0, 0x2, 0x0, 0x20, 0x3a}, 0x13b, 0x8}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x400e99d}, @policy_type={0xa}, @sec_ctx={0x6c6, 0x8, {0x6c2, 0x8, 0x1, 0xc, 0x6ba, "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"}}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x43}, @in6=@local, 0x0, 0x2}}]}, 0x800}, 0x1, 0x0, 0x0, 0x20000000}, 0x48001)
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, r2}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="150000000300000008000000e2cf00003082", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000300"/20, @ANYRES32, @ANYBLOB="a5a98dfe", @ANYRESHEX=0x0], 0x50)
bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
write$tun(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0000001803010300ffffc4001000401900000067000004119078ac1414bbffffffff0776809300d2ffffffffe0000001ac1414278600000000020600ac70b1b86037d3b62ba4c9ef440200eeaafc8ca501009c3647c2087b5d0000933b379f8ea29ce99ace21856b3a0600fa05007b601f118d00004e224e2000009078b7840c0e2c7fe50a97fb3ac0ccf70bcd2e58e78ff676e03451932f6f1a4a2937c1703cdccd1fa51774700ee17951e17d7265b3dc7e09694a1dc91806aa86a832ff1a8456f73448d2d31cbcaf106fd70b122d30bd38fcea95f9539cb6da799d625cb162d615977bcab7f4f2177b385499f8653bdcb1dec66ab63109227179bbefe557081c102a6faef12f6120f38092f829e9bd73b763ae85e2668d53d11fc1dddc92856a571a10ef729d48"], 0xe6)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f0000000600)={'filter\x00', 0x4}, 0x68)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x20200}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}, @IFLA_MACSEC_ES={0x5, 0xa, 0x6}]}}}]}, 0x44}}, 0x0)

2.297107799s ago: executing program 2 (id=749):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
shutdown(r0, 0x0)
unshare(0x62040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
preadv(r1, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/225, 0xe1}], 0x1, 0x3, 0x1)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000040)=0x800, 0x4)
close(0x3)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'rose0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0)
ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000040)={'veth1_vlan\x00', 0x8})
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000006ffc)=0xd90, 0x4)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x3}, 0x94)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
syz_emit_ethernet(0x26, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffff097c7b2fc0fd6131ba0600fa0008060102080506020024b5cd71aaaa29620362b3aa9daaaaaabb050000000000000000000000000099cb37bbe886629b9d0bac5c7523b316776fa5516f16142e07000920da55971c213dfae00d25eea283d060d12a4080397b7a99aeed02e1e979076f2f914d1fa507c3a085e0c3e77b24429a3264c7596cf92fb6522ac810af030000005368abef7709000000ca1e183d33275c"], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1.914165784s ago: executing program 0 (id=751):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r1, 0x4004743c, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x8, 0x9, 0x1}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000400), 0x0}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x48)
pipe(&(0x7f00000014c0))
pipe(&(0x7f0000000380))
socket$inet_smc(0x2b, 0x1, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x38, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r7], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010)
bind$unix(r0, &(0x7f0000000340)=@file={0x1, './cgroup.cpu/cgroup.procs/file0\x00'}, 0x6e)

1.88334222s ago: executing program 1 (id=752):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
unshare(0x68040200)
r1 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=@newtfilter={0x4c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {}, {0x8, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xf1, 0x4, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c8d0}, 0x14)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18)
mmap(&(0x7f0000feb000/0x14000)=nil, 0x14000, 0x3000004, 0x40010, r5, 0x3f38e000)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f7}, {0x6, 0x0, 0x6, 0x1}]}, 0x10)
bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r6, &(0x7f0000000140)="24000000010006", 0x7)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r3)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x1c, r8, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x0)
connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmmsg$sock(r7, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)
shutdown(r7, 0x1)

1.553942069s ago: executing program 3 (id=754):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000002000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)

1.517033797s ago: executing program 0 (id=755):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = epoll_create1(0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8)
bind$vsock_stream(r2, &(0x7f0000000940), 0x10)
getuid()
r3 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
close(0x3)
listen(r2, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x80000004})
socket$nl_generic(0x10, 0x3, 0x10)
close(0x3)

1.513390659s ago: executing program 4 (id=756):
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000400), 0x0)

1.269276577s ago: executing program 4 (id=757):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 23)

1.267515884s ago: executing program 3 (id=758):
socketpair(0x1d, 0x2, 0x7, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000480)={0x0, 0x5}, 0xc) (async)
r2 = socket$inet6(0xa, 0x3, 0x38)
r3 = socket$l2tp6(0xa, 0x2, 0x73) (async)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000000)=0x9, 0x4) (async)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) (async)
socket$inet6_sctp(0xa, 0x801, 0x84) (async)
sendmmsg$inet6(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="b4e529663d5bdda03b0b55bb3d92b325d4277ac086813a3972ad3eb8a0abbe404419a1c115b96180d12706fd6877c72e167c88171d7c0b0a57b11995845307f32fb1bd2aa7fd24f91cba3b81e28f81d8b540dd6c754873f49fe4e5e7e76d1f84b5ed706172aaefdead491666e2fe743003286e7b4fcbef24f801436e33da8eb37aba0b2069816c962e", 0x89}, {&(0x7f0000000280)="59443435ec55c8e5dbc2b9dc8be140a2f2eef8722227e284fa6fd0c1a4bf86e6ad03f054e0b9aa91a4ff43248185bfd6f52ee94a402c222f1883cf5f1f1756e47f60407e20d8c5e78a709f485ba7b5e365953a3248d08c09d9e12415bfe4eff388091c0826b31fc77e81694c2a9b15d1e01a4e6ffda2386d969156889d985d6fed60566905b6eb0a88d9", 0x8a}], 0x2, &(0x7f0000000340)=ANY=[@ANYRESDEC=r3], 0x30}}], 0x1, 0x24048002) (async)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) (async)
syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500003800000000fe01907864010102ac1414aa030190780327000045000000000100000001000900000000640100fe2d8a728fdbe104d89c921300b966aa"], 0x0) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000130c0007800800114000000022050005000a000000050001000700000005000400000000000900020073797a31000000000c000300686173683a6970000900020073797a3200000000"], 0x5c}}, 0x4004010)

1.252705089s ago: executing program 1 (id=759):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000100000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94)
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x0, 0xa2e}})
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6, 0x0, 0x6c}]}, 0x10)
syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x702, 0xe, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x4, 0x7f, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r6, &(0x7f0000000bc0), 0x0}, 0x20)
r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r7, 0x10c, 0x9, 0x0, &(0x7f0000000240))
r8 = socket(0x848000000015, 0x805, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r9)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r9, &(0x7f0000000080)={0x0, 0xa000000, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff06000700260a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r9)
bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x401}, 0x1c)

888.109297ms ago: executing program 4 (id=760):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, r0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000003000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb71a00000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0xa}, 0x94)

887.67343ms ago: executing program 3 (id=761):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000000008851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000029500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)

812.263933ms ago: executing program 4 (id=762):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000059500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)

808.17409ms ago: executing program 0 (id=763):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000000200000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x1200, 0x0, 0x0, 0x0, 0x0}, 0x50)

691.959847ms ago: executing program 4 (id=764):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffc1, 0x0, 0x0, 0x0, 0x0, 0x2f}, 0x6c)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @broadcast})

646.544592ms ago: executing program 3 (id=765):
r0 = socket$rds(0x15, 0x5, 0x0)
sendmsg$sock(r0, &(0x7f0000002140)={&(0x7f0000000e00)=@l2={0x1f, 0x6, @any, 0x4}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000e80)="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", 0xfd}, {&(0x7f0000000f80)="535d5ce3d2ae98d57089538553f2a2bfecb7c3a45c5d4059636bee3252641b89542f01ae396b0cdecb42c871618015833cd3f3b524a5047e6d418b5ce1e7a2221fc36ac2cd293088b2347c23df37bb30d094c9f31b99fe1f8bf8c1b032b62e48fce1956b64cb35891376b7b3e92dbbe199c38739d25b042ec705992d54386455988453dab312262b1229cdf298059486b19dc34d13ed121f2dbe4d7299301bc5eb76c2ad1f83a88f8c5557aa56608dd2911042e5d0b25faed56e3b9cca65e445f7f36365b96de9944559a005d4e2ef", 0xcf}, {&(0x7f0000001080)="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", 0x1000}, {&(0x7f0000002340)="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", 0x1000}], 0x4, &(0x7f0000002100)}, 0x85)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000090a030000000000000000000000000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000002108000340000000c408000f400000000a0c000b"], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRESHEX=r0, @ANYRES8=r2, @ANYRES64=r2], 0x7c}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000021801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000009e8685000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000cbd520850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r3}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073010e000000e2009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="14000000100001000000000000001e000000000a40000000060a0b0400000000000000000200fffe0900010073797a30000000000900020073797a320000000014000480100001800b0001006f626a72656600c2a0e4265df1013a0000000000000000000500000ab77212b75fb898"], 0x68}, 0x1, 0x0, 0x0, 0x22040840}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000003000000ffffffff00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000400010800000000aa6e8a5b2a0000000000"], 0x48)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00', <r5=>0x0})
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x25}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x0, 0x12, 0x300, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200, 0x300, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x2000000}, 0x28)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000280)='host1x_cdma_push_gather\x00', r7, 0x0, 0x1}, 0x18)
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
r9 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="1000000001144101"], 0x10}, 0x1, 0x0, 0x0, 0x8885}, 0x0)
recvfrom(r9, 0x0, 0x0, 0x40000062, 0x0, 0xfffffffffffffdff)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0000000300000049bd0000070000007dcffaf2", @ANYRES32=0x1, @ANYBLOB="1700"/20, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05000000010000000400"/20, @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00'], 0x50)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000340)={<r11=>0x0, 0xf1, 0xfffffffffffffffb, 0x1})
accept4(r2, &(0x7f0000002180)=@hci, &(0x7f0000002200)=0x80, 0x800)
ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000940)={r11, 0x8a, 0x9})
bind$x25(r10, &(0x7f0000000240)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12)
bind$rds(r0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10)
listen(r1, 0xffffffff)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r12, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x14, 0x5, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000)
sendmsg$rds(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x8000, @empty}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_fadd={0x58, 0x118, 0x8, {{0x7, 0x62b}, 0x0, 0x0, 0x5c, 0x1, 0x1, 0x1, 0x0, 0x20}}, @rdma_dest={0x18, 0x114, 0x2, {0x401, 0x6}}], 0x70, 0x20000000}, 0x40)

608.639946ms ago: executing program 4 (id=766):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='rcu_utilization\x00', r1, 0x0, 0x4}, 0x18)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x8}, 0x20)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x4000, 0x0, 0x5, 0x2}, 0x20)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r4)
sendmsg$NET_DM_CMD_START(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r5, 0x1}, 0x14}}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket(0x10, 0x3, 0x0)
bind$netlink(r6, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r6, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
connect$netlink(r6, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vcan0\x00'})
clock_gettime(0x0, 0x0)
sendmsg$can_bcm(r6, 0x0, 0x4804)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e00000000001010400000000000000000a000000440001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c000280050001000000000006000340000200003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000070000000000000000010c00028005000100000000000800074000000000440010800800024000000fff0800024000000007080001"], 0xe0}}, 0x0)
syz_genetlink_get_family_id$smc(0x0, r6)
setsockopt$sock_int(r7, 0x1, 0x1d, &(0x7f0000b4bffc)=0x8, 0x4)
setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1, 0x10000000000000], 0x0, 0x0}, 0x78)
write(r6, &(0x7f0000000000)='\"', 0x1)
recvmmsg(r6, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0)

399.822044ms ago: executing program 3 (id=767):
socket(0x400000000010, 0x3, 0x0)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff}) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000f0000000800000002"], 0x50) (async)
r2 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 32)
r3 = socket$l2tp(0x2, 0x2, 0x73) (rerun: 32)
sendmmsg$inet(r3, &(0x7f0000003ec0)=[{{&(0x7f0000001180)={0x2, 0x4e20, @local}, 0x10, 0x0}}, {{&(0x7f0000001340)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001440)=[{&(0x7f0000001380)="7ca4c180", 0x4}, {0x0}], 0x2}}], 0x2, 0x40)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
listen(r4, 0x0) (async)
connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r5 = socket$unix(0x1, 0x1, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x24, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async)
connect$unix(r5, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
listen(r4, 0x802) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000680)={r1, &(0x7f0000001040), 0x0}, 0x20)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'ip6gre0\x00', <r8=>0x0, 0x4, 0x1, 0xbb, 0x8, 0x21, @loopback, @loopback, 0x8000, 0x8041, 0x7, 0x6}})
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000440)={'vxcan0\x00'})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0xb4, r7, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0xffffffffffffff5b, 0x3, 0x3}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x10}, 0x8801) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
r10 = socket$inet(0xa, 0x1, 0x0) (rerun: 32)
setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', <r11=>0x0}) (async, rerun: 32)
r12 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r12, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=r11, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64], 0x38}}, 0x10)

396.793055ms ago: executing program 0 (id=768):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r0}, 0x18)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
close(r2) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x13, 0x10, 0x8}, 0x50)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00v\x00\r\v'], 0x20}}, 0x0) (async)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r5}, 0x10)
r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8)
close(r8) (async)
setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x6534, 0x1, 0x6, 0xfff, 0x2da2, 0xb3, 0x6}, 0x1c) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r3}, &(0x7f0000000900), &(0x7f0000000940)=r2}, 0x20)

395.140125ms ago: executing program 2 (id=769):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b702000014000000b7030000000000080000000000000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000000000000000002c"], 0xfdef)

146.748027ms ago: executing program 0 (id=770):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xb, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x2, r4}, 0x38)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)={0x1c, 0x33, 0x107, 0xfffffffc, 0x25dfdbfd, {0x2, 0x7c}, [@nested={0x6, 0x1, 0x0, 0x1, [@generic="dd5f"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc050)
sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000580)=ANY=[@ANYBLOB="54010000100001000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001000000006c000000fe8000000000f0170ff66d80f87bb4000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001700"/268], 0x154}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r5=>0x0})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10)
sendmsg$nl_crypto(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=@getstat={0xe0, 0x15, 0x800, 0x70bd29, 0x25dfdbfc, {{'morus1280-sse2\x00'}, '\x00', '\x00', 0x400, 0x400}, ["", ""]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="19"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000"], 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=@newqdisc={0x44, 0x24, 0xf0b, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x44}}, 0x0)

51.813461ms ago: executing program 3 (id=771):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r2 = accept4(r1, 0x0, 0x0, 0x80800)
r3 = epoll_create1(0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r8, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r5, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x80c1)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000300)={0x1001})
sendmsg$AUDIT_ADD_RULE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001300)=ANY=[], 0x43c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x1200, &(0x7f0000000200)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014)

5.994625ms ago: executing program 2 (id=772):
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000001380)=ANY=[@ANYBLOB="850000002e000000661400000000000016000000ffffffff9500000000000000bd013f2755ac44ed976b5452165249753b10ad6f120f07a9645d62b69afe2e10772606696a2223d1b4ffffff7f000000007d3dd227bd388d99db7ef75d51b090729ef7ebb669afc4caf49d4cd1fcbdb4f7792dd759564d40819bb243b0e7989c7f047adba9793d44f274b1602135fb822cfb2793ac4b49c7fb09cc493dba49000000000000d1a30fdd"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d}, 0x94)

0s ago: executing program 1 (id=773):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, r0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000003000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb72100000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0xa}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.204' (ED25519) to the list of known hosts.
[   83.940322][ T5835] cgroup: Unknown subsys name 'net'
[   84.073063][ T5835] cgroup: Unknown subsys name 'cpuset'
[   84.082679][ T5835] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   85.788225][ T5835] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   89.738686][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   89.747405][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   89.758954][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   89.767267][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   89.775143][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   89.804830][ T5169] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   89.825426][ T5169] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   89.839178][ T5169] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   89.847712][ T5169] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   89.875254][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   89.895600][ T5861] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   89.910197][ T5861] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   89.929566][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   89.945618][ T5861] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   89.954017][ T5861] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   89.961535][ T5861] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   89.970647][ T5861] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   89.978615][ T5861] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   89.986624][ T5861] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   89.993362][ T5858] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   90.001127][ T5861] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   90.021070][ T5858] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   90.029071][ T5865] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   90.038042][ T5865] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   90.050254][ T5865] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   90.339040][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   90.595260][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.603408][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.611864][ T5846] bridge_slave_0: entered allmulticast mode
[   90.619750][ T5846] bridge_slave_0: entered promiscuous mode
[   90.629400][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.636580][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.644579][ T5846] bridge_slave_1: entered allmulticast mode
[   90.652443][ T5846] bridge_slave_1: entered promiscuous mode
[   90.821437][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.836905][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.910604][ T5859] chnl_net:caif_netlink_parms(): no params data found
[   90.934752][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   91.011250][ T5846] team0: Port device team_slave_0 added
[   91.060810][ T5846] team0: Port device team_slave_1 added
[   91.123750][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   91.168645][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.175663][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.202322][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.244480][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.251791][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.278308][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.301273][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   91.451952][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.464751][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.472463][ T5853] bridge_slave_0: entered allmulticast mode
[   91.480868][ T5853] bridge_slave_0: entered promiscuous mode
[   91.521288][ T5846] hsr_slave_0: entered promiscuous mode
[   91.527903][ T5846] hsr_slave_1: entered promiscuous mode
[   91.535548][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.545648][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.552986][ T5859] bridge_slave_0: entered allmulticast mode
[   91.561280][ T5859] bridge_slave_0: entered promiscuous mode
[   91.570550][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.578068][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.586139][ T5859] bridge_slave_1: entered allmulticast mode
[   91.594165][ T5859] bridge_slave_1: entered promiscuous mode
[   91.601515][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.608672][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.616292][ T5853] bridge_slave_1: entered allmulticast mode
[   91.624388][ T5853] bridge_slave_1: entered promiscuous mode
[   91.714048][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.721567][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.728755][ T5850] bridge_slave_0: entered allmulticast mode
[   91.736470][ T5850] bridge_slave_0: entered promiscuous mode
[   91.769952][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.817883][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.825496][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.833853][ T5850] bridge_slave_1: entered allmulticast mode
[   91.841371][ T5850] bridge_slave_1: entered promiscuous mode
[   91.852217][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.860453][ T5849] Bluetooth: hci0: command tx timeout
[   91.880287][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.893446][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.967679][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.974945][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.983726][ T5855] bridge_slave_0: entered allmulticast mode
[   91.991101][ T5855] bridge_slave_0: entered promiscuous mode
[   92.021434][ T5859] team0: Port device team_slave_0 added
[   92.031113][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.055581][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.064046][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.071958][ T5855] bridge_slave_1: entered allmulticast mode
[   92.079619][ T5855] bridge_slave_1: entered promiscuous mode
[   92.094667][ T5859] team0: Port device team_slave_1 added
[   92.100218][ T5849] Bluetooth: hci3: command tx timeout
[   92.102484][   T51] Bluetooth: hci4: command tx timeout
[   92.105968][ T5849] Bluetooth: hci1: command tx timeout
[   92.111593][ T5865] Bluetooth: hci2: command tx timeout
[   92.135298][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.159810][ T5853] team0: Port device team_slave_0 added
[   92.213077][ T5853] team0: Port device team_slave_1 added
[   92.245846][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.256543][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.264242][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.290677][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.305026][ T5850] team0: Port device team_slave_0 added
[   92.314125][ T5850] team0: Port device team_slave_1 added
[   92.336476][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.354166][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.361262][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.387557][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.432951][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.440047][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.466750][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.551706][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.558882][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.585999][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.599168][ T5855] team0: Port device team_slave_0 added
[   92.626632][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.633861][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.661258][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.685580][ T5855] team0: Port device team_slave_1 added
[   92.726000][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.737265][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.767737][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.885146][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.892527][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.919661][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.936364][ T5859] hsr_slave_0: entered promiscuous mode
[   92.944587][ T5859] hsr_slave_1: entered promiscuous mode
[   92.951446][ T5859] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   92.959226][ T5859] Cannot create hsr debugfs directory
[   92.986310][ T5853] hsr_slave_0: entered promiscuous mode
[   92.992954][ T5853] hsr_slave_1: entered promiscuous mode
[   92.999916][ T5853] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   93.007529][ T5853] Cannot create hsr debugfs directory
[   93.018867][ T5850] hsr_slave_0: entered promiscuous mode
[   93.026436][ T5850] hsr_slave_1: entered promiscuous mode
[   93.032810][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   93.040459][ T5850] Cannot create hsr debugfs directory
[   93.046836][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.053901][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.079897][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.312883][ T5855] hsr_slave_0: entered promiscuous mode
[   93.319881][ T5855] hsr_slave_1: entered promiscuous mode
[   93.326094][ T5855] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   93.334055][ T5855] Cannot create hsr debugfs directory
[   93.370880][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   93.418166][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   93.470493][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   93.528427][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   93.781203][ T5859] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   93.806393][ T5859] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   93.832718][ T5859] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   93.846200][ T5859] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   93.923251][ T5853] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   93.934778][ T5853] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   93.941638][ T5865] Bluetooth: hci0: command tx timeout
[   93.976378][ T5853] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   93.997603][ T5853] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   94.068556][ T5855] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   94.081405][ T5855] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   94.094644][ T5855] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   94.108394][ T5855] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   94.180162][ T5865] Bluetooth: hci2: command tx timeout
[   94.185629][   T51] Bluetooth: hci4: command tx timeout
[   94.189837][ T5849] Bluetooth: hci1: command tx timeout
[   94.191400][ T5865] Bluetooth: hci3: command tx timeout
[   94.217930][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.280050][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   94.293234][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   94.325799][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   94.337455][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   94.352035][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   94.411140][ T3524] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.418425][ T3524] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.459789][ T3524] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.466940][ T3524] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.553001][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.596865][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.612104][ T5846] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   94.623995][ T5846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   94.688598][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   94.714254][ T5859] 8021q: adding VLAN 0 to HW filter on device team0
[   94.768685][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.775892][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.795126][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.823372][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.830636][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.843526][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.850809][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.861730][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.869007][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.956167][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   95.027670][ T3524] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.034890][ T3524] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.052269][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.103821][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.111068][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.137348][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   95.183943][ T3524] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.191171][ T3524] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.210495][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.268470][ T3524] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.275729][ T3524] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.410775][ T5850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   95.632288][ T5846] veth0_vlan: entered promiscuous mode
[   95.661379][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.686793][ T5846] veth1_vlan: entered promiscuous mode
[   95.850864][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.882882][ T5846] veth0_macvtap: entered promiscuous mode
[   95.953983][ T5846] veth1_macvtap: entered promiscuous mode
[   96.023043][ T5865] Bluetooth: hci0: command tx timeout
[   96.029300][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.054549][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.073457][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.102673][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.142844][   T64] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.153178][   T64] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.174881][   T64] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.194701][ T5853] veth0_vlan: entered promiscuous mode
[   96.222164][   T64] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.261647][ T5865] Bluetooth: hci3: command tx timeout
[   96.267120][ T5865] Bluetooth: hci4: command tx timeout
[   96.274336][   T51] Bluetooth: hci1: command tx timeout
[   96.274357][ T5863] Bluetooth: hci2: command tx timeout
[   96.309555][ T5853] veth1_vlan: entered promiscuous mode
[   96.337090][ T5850] veth0_vlan: entered promiscuous mode
[   96.442794][ T5850] veth1_vlan: entered promiscuous mode
[   96.492399][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.505243][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.528260][ T5853] veth0_macvtap: entered promiscuous mode
[   96.556198][ T5850] veth0_macvtap: entered promiscuous mode
[   96.594431][ T5855] veth0_vlan: entered promiscuous mode
[   96.607784][ T5853] veth1_macvtap: entered promiscuous mode
[   96.620033][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.627906][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.637547][ T5850] veth1_macvtap: entered promiscuous mode
[   96.651292][ T5855] veth1_vlan: entered promiscuous mode
[   96.666242][ T5859] veth0_vlan: entered promiscuous mode
[   96.684250][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.708619][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.742763][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.772807][   T64] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.787986][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   96.796011][ T5859] veth1_vlan: entered promiscuous mode
[   96.817183][   T64] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.832499][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.856564][   T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.873979][   T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.905940][   T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.954190][ T5967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'.
[   96.972828][   T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.984043][   T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.014286][   T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.077802][ T5855] veth0_macvtap: entered promiscuous mode
[   97.126325][ T5855] veth1_macvtap: entered promiscuous mode
[   97.151382][ T5968] netlink: 'syz.2.3': attribute type 2 has an invalid length.
[   97.154393][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.186294][ T5859] veth0_macvtap: entered promiscuous mode
[   97.192158][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.217825][ T5968] : entered promiscuous mode
[   97.225763][  T978] cfg80211: failed to load regulatory.db
[   97.263305][ T5859] veth1_macvtap: entered promiscuous mode
[   97.326055][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.336304][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.374369][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.417666][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.433146][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.458881][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.474631][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.672449][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.709182][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.731035][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.843492][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.933450][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.961574][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.971393][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.979940][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.074677][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.102545][ T5863] Bluetooth: hci0: command tx timeout
[   98.108349][ T1332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.123530][ T1332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.149150][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.187935][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.340303][ T5863] Bluetooth: hci4: command tx timeout
[   98.345780][ T5863] Bluetooth: hci1: command tx timeout
[   98.351287][ T5849] Bluetooth: hci3: command tx timeout
[   98.351591][ T5865] Bluetooth: hci2: command tx timeout
[   98.376554][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.437646][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.589556][ T5987] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1'.
[   98.628487][ T5991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10'.
[   98.636170][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.696089][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.983855][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.019745][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.021293][ T5996] netlink: 'syz.2.11': attribute type 16 has an invalid length.
[   99.048549][ T5998] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   99.050307][ T5996] netlink: 'syz.2.11': attribute type 17 has an invalid length.
[   99.161032][ T5996] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   99.195099][ T6004] tun0: tun_chr_ioctl cmd 2147767521
[   99.304563][ T5998] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2'.
[   99.686993][ T6000] batman_adv: batadv0: Adding interface: ip6gretap1
[   99.709060][ T6000] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.762634][ T6000] batman_adv: batadv0: Interface activated: ip6gretap1
[  100.279773][ T6020] xt_hashlimit: size too large, truncated to 1048576
[  100.302532][ T6025] warning: `syz.4.19' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  100.364171][ T6024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18'.
[  100.526398][ T6033] netlink: 788 bytes leftover after parsing attributes in process `syz.3.22'.
[  100.529598][ T6035] netlink: 'syz.1.21': attribute type 13 has an invalid length.
[  100.562933][ T6035] netlink: 'syz.1.21': attribute type 17 has an invalid length.
[  100.640057][ T6040] netlink: 108 bytes leftover after parsing attributes in process `syz.3.22'.
[  100.841185][ T6045] netlink: 16 bytes leftover after parsing attributes in process `syz.2.24'.
[  101.003826][ T6035] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  101.146781][ T6049] netlink: 'syz.0.26': attribute type 1 has an invalid length.
[  101.566561][ T6058] bridge1: the hash_elasticity option has been deprecated and is always 16
[  101.613558][ T6058] bridge1: entered allmulticast mode
[  101.759493][ T6055] @: renamed from vlan0 (while UP)
[  102.332493][ T6081] veth3: entered promiscuous mode
[  102.566325][ T6096] netlink: 16 bytes leftover after parsing attributes in process `syz.1.39'.
[  102.602153][ T6086] netdevsim netdevsim2: Direct firmware load for .
[  102.602153][ T6086]  failed with error -2
[  102.646047][ T6086] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  102.646047][ T6086] 
[  103.120415][ T6117] Driver unsupported XDP return value 0 on prog  (id 23) dev N/A, expect packet loss!
[  103.386189][ T6126] netlink: 'syz.2.50': attribute type 10 has an invalid length.
[  103.475310][ T6131] netlink: 'syz.1.52': attribute type 1 has an invalid length.
[  103.536654][ T6126] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  103.740710][ T6140] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  103.752115][ T6142] netdevsim netdevsim0: Direct firmware load for .
[  103.752115][ T6142]  failed with error -2
[  103.784497][ T6144] netlink: 16 bytes leftover after parsing attributes in process `syz.1.57'.
[  103.794687][ T6142] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  103.794687][ T6142] 
[  104.018637][ T6152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.59'.
[  104.146070][ T6132] netlink: 16 bytes leftover after parsing attributes in process `syz.3.49'.
[  104.454161][ T6167] Zero length message leads to an empty skb
[  104.927860][ T6173] xt_CT: No such helper "snmp"
[  105.320147][ T6196] netlink: 12 bytes leftover after parsing attributes in process `syz.4.72'.
[  105.382813][ T6198] netlink: 'syz.0.71': attribute type 142 has an invalid length.
[  105.456036][ T6200] veth3: entered promiscuous mode
[  105.472933][ T6204] netdevsim netdevsim4: Direct firmware load for .
[  105.472933][ T6204]  failed with error -2
[  105.509208][ T6204] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  105.509208][ T6204] 
[  105.716692][ T6216] netlink: 12 bytes leftover after parsing attributes in process `syz.3.77'.
[  106.239267][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.84'.
[  106.270429][ T6238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.85'.
[  106.286403][ T6236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.84'.
[  106.323914][ T6240] netlink: 16 bytes leftover after parsing attributes in process `syz.0.86'.
[  106.329123][ T6236] netlink: 'syz.1.84': attribute type 15 has an invalid length.
[  106.399669][ T6243] netlink: 'syz.1.84': attribute type 10 has an invalid length.
[  106.462373][ T6250] netlink: 'syz.1.84': attribute type 10 has an invalid length.
[  106.497600][ T6238] team0: Port device team_slave_0 removed
[  106.576997][ T6243] team0: Port device dummy0 added
[  106.674902][ T6248] veth3: entered promiscuous mode
[  106.681673][ T6250] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  106.739911][ T6250] team0: Failed to send options change via netlink (err -105)
[  106.772199][ T6250] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  106.801974][ T6250] team0: Port device dummy0 removed
[  106.847775][ T6250] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  107.190164][ T6286] netdevsim netdevsim2: Direct firmware load for .
[  107.190164][ T6286]  failed with error -2
[  107.243972][ T6286] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  107.243972][ T6286] 
[  107.343332][ T6292] veth5: entered promiscuous mode
[  107.399711][ T6296] FAULT_INJECTION: forcing a failure.
[  107.399711][ T6296] name failslab, interval 1, probability 0, space 0, times 1
[  107.412720][ T6296] CPU: 1 UID: 0 PID: 6296 Comm: syz.1.102 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) 
[  107.412751][ T6296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  107.412773][ T6296] Call Trace:
[  107.412782][ T6296]  <TASK>
[  107.412792][ T6296]  dump_stack_lvl+0x189/0x250
[  107.412832][ T6296]  ? __pfx____ratelimit+0x10/0x10
[  107.412859][ T6296]  ? __pfx_dump_stack_lvl+0x10/0x10
[  107.412886][ T6296]  ? __pfx__printk+0x10/0x10
[  107.412920][ T6296]  ? __lock_acquire+0xab9/0xd20
[  107.412953][ T6296]  should_fail_ex+0x414/0x560
[  107.412991][ T6296]  should_failslab+0xa8/0x100
[  107.413023][ T6296]  kmem_cache_alloc_noprof+0x73/0x3c0
[  107.413049][ T6296]  ? __inet_hash_connect+0x151e/0x2310
[  107.413086][ T6296]  __inet_hash_connect+0x151e/0x2310
[  107.413135][ T6296]  ? __inet_hash_connect+0x4fa/0x2310
[  107.413177][ T6296]  ? __pfx___inet_hash_connect+0x10/0x10
[  107.413207][ T6296]  ? sk_setup_caps+0x850/0xac0
[  107.413234][ T6296]  ? inet6_hash_connect+0xd8/0x170
[  107.413269][ T6296]  tcp_v6_connect+0xf24/0x1870
[  107.413312][ T6296]  ? __pfx_tcp_v6_connect+0x10/0x10
[  107.413340][ T6296]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  107.413383][ T6296]  ? look_up_lock_class+0x74/0x170
[  107.413413][ T6296]  ? register_lock_class+0x51/0x320
[  107.413446][ T6296]  __inet_stream_connect+0x298/0xf10
[  107.413484][ T6296]  ? __local_bh_enable_ip+0x12d/0x1c0
[  107.413519][ T6296]  ? __pfx___inet_stream_connect+0x10/0x10
[  107.413545][ T6296]  ? __local_bh_enable_ip+0x12d/0x1c0
[  107.413570][ T6296]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  107.413608][ T6296]  inet_stream_connect+0x66/0xa0
[  107.413638][ T6296]  __sys_connect+0x313/0x440
[  107.413669][ T6296]  ? __fget_files+0x3a0/0x420
[  107.413700][ T6296]  ? __pfx___sys_connect+0x10/0x10
[  107.413745][ T6296]  ? __pfx_ksys_write+0x10/0x10
[  107.413769][ T6296]  ? rcu_is_watching+0x15/0xb0
[  107.413804][ T6296]  __x64_sys_connect+0x7a/0x90
[  107.413835][ T6296]  do_syscall_64+0xfa/0x3b0
[  107.413861][ T6296]  ? lockdep_hardirqs_on+0x9c/0x150
[  107.413887][ T6296]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.413908][ T6296]  ? clear_bhb_loop+0x60/0xb0
[  107.413935][ T6296]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.413956][ T6296] RIP: 0033:0x7fd74e78e929
[  107.413982][ T6296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  107.414000][ T6296] RSP: 002b:00007fd74f676038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  107.414023][ T6296] RAX: ffffffffffffffda RBX: 00007fd74e9b5fa0 RCX: 00007fd74e78e929
[  107.414038][ T6296] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003
[  107.414052][ T6296] RBP: 00007fd74f676090 R08: 0000000000000000 R09: 0000000000000000
[  107.414065][ T6296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  107.414077][ T6296] R13: 0000000000000000 R14: 00007fd74e9b5fa0 R15: 00007ffc7b652178
[  107.414112][ T6296]  </TASK>
[  108.145752][ T6311] __nla_validate_parse: 1 callbacks suppressed
[  108.145774][ T6311] netlink: 12 bytes leftover after parsing attributes in process `syz.4.110'.
[  108.180753][ T6309] netlink: 84 bytes leftover after parsing attributes in process `syz.2.107'.
[  108.199250][ T6309] netlink: 28 bytes leftover after parsing attributes in process `syz.2.107'.
[  108.227842][ T6309] netlink: 'syz.2.107': attribute type 5 has an invalid length.
[  108.373567][ T6319] Unknown options in mask 700
[  108.401723][ T6321] FAULT_INJECTION: forcing a failure.
[  108.401723][ T6321] name failslab, interval 1, probability 0, space 0, times 0
[  108.438025][ T6325] netdevsim netdevsim0: Direct firmware load for .
[  108.438025][ T6325]  failed with error -2
[  108.463627][ T6321] CPU: 1 UID: 0 PID: 6321 Comm: syz.1.114 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) 
[  108.463657][ T6321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  108.463670][ T6321] Call Trace:
[  108.463678][ T6321]  <TASK>
[  108.463687][ T6321]  dump_stack_lvl+0x189/0x250
[  108.463719][ T6321]  ? __pfx____ratelimit+0x10/0x10
[  108.463748][ T6321]  ? __pfx_dump_stack_lvl+0x10/0x10
[  108.463773][ T6321]  ? __pfx__printk+0x10/0x10
[  108.463809][ T6321]  ? __pfx___might_resched+0x10/0x10
[  108.463832][ T6321]  ? fs_reclaim_acquire+0x7d/0x100
[  108.463868][ T6321]  should_fail_ex+0x414/0x560
[  108.463906][ T6321]  should_failslab+0xa8/0x100
[  108.463936][ T6321]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  108.463963][ T6321]  ? __alloc_skb+0x112/0x2d0
[  108.463999][ T6321]  __alloc_skb+0x112/0x2d0
[  108.464035][ T6321]  tcp_stream_alloc_skb+0x3d/0x340
[  108.464064][ T6321]  tcp_connect+0x1087/0x46f0
[  108.464096][ T6321]  ? tcp_fastopen_defer_connect+0xf0/0x370
[  108.464154][ T6321]  tcp_v6_connect+0x11f7/0x1870
[  108.464196][ T6321]  ? __pfx_tcp_v6_connect+0x10/0x10
[  108.464222][ T6321]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  108.464263][ T6321]  ? look_up_lock_class+0x74/0x170
[  108.464292][ T6321]  ? register_lock_class+0x51/0x320
[  108.464326][ T6321]  __inet_stream_connect+0x298/0xf10
[  108.464364][ T6321]  ? __local_bh_enable_ip+0x12d/0x1c0
[  108.464390][ T6321]  ? __pfx___inet_stream_connect+0x10/0x10
[  108.464416][ T6321]  ? __local_bh_enable_ip+0x12d/0x1c0
[  108.464456][ T6321]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  108.464495][ T6321]  inet_stream_connect+0x66/0xa0
[  108.464525][ T6321]  __sys_connect+0x313/0x440
[  108.464556][ T6321]  ? __fget_files+0x3a0/0x420
[  108.464587][ T6321]  ? __pfx___sys_connect+0x10/0x10
[  108.464634][ T6321]  ? __pfx_ksys_write+0x10/0x10
[  108.464657][ T6321]  ? rcu_is_watching+0x15/0xb0
[  108.464692][ T6321]  __x64_sys_connect+0x7a/0x90
[  108.464724][ T6321]  do_syscall_64+0xfa/0x3b0
[  108.464752][ T6321]  ? lockdep_hardirqs_on+0x9c/0x150
[  108.464779][ T6321]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.464800][ T6321]  ? clear_bhb_loop+0x60/0xb0
[  108.464827][ T6321]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.464848][ T6321] RIP: 0033:0x7fd74e78e929
[  108.464868][ T6321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  108.464886][ T6321] RSP: 002b:00007fd74f676038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  108.464908][ T6321] RAX: ffffffffffffffda RBX: 00007fd74e9b5fa0 RCX: 00007fd74e78e929
[  108.464923][ T6321] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003
[  108.464941][ T6321] RBP: 00007fd74f676090 R08: 0000000000000000 R09: 0000000000000000
[  108.464954][ T6321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  108.464967][ T6321] R13: 0000000000000000 R14: 00007fd74e9b5fa0 R15: 00007ffc7b652178
[  108.465002][ T6321]  </TASK>
[  108.774095][ T6325] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  108.774095][ T6325] 
[  108.970277][ T6341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.118'.
[  109.859200][ T5907] IPVS: starting estimator thread 0...
[  109.893475][ T6349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.126'.
[  109.959155][ T6350] IPVS: using max 34 ests per chain, 81600 per kthread
[  110.238826][ T6366] xt_connbytes: Forcing CT accounting to be enabled
[  110.245859][ T6366] set match dimension is over the limit!
[  110.326513][ T6367] netlink: 24 bytes leftover after parsing attributes in process `syz.4.130'.
[  110.365972][ T6370] netlink: 'syz.2.134': attribute type 21 has an invalid length.
[  110.384172][ T6370] netlink: 128 bytes leftover after parsing attributes in process `syz.2.134'.
[  110.406331][ T6370] netlink: 'syz.2.134': attribute type 4 has an invalid length.
[  110.462320][ T6370] netlink: 'syz.2.134': attribute type 5 has an invalid length.
[  110.505075][ T6370] netlink: 3 bytes leftover after parsing attributes in process `syz.2.134'.
[  110.649587][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.140'.
[  110.921062][ T6394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.143'.
[  111.029864][ T6399] veth7: entered promiscuous mode
[  111.049219][ T6401] syz.1.146 uses obsolete (PF_INET,SOCK_PACKET)
[  111.340705][ T6410] veth3: entered promiscuous mode
[  111.672517][ T6426] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  112.219351][ T6443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  112.327230][ T6443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  112.496928][ T6443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  113.757741][ T6479] netdevsim netdevsim0: Direct firmware load for .
[  113.757741][ T6479]  failed with error -2
[  113.836231][ T6479] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  113.836231][ T6479] 
[  114.028458][ T6492] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  114.094527][ T6476] syz.4.172 (6476) used greatest stack depth: 17992 bytes left
[  114.177605][ T6494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.178'.
[  114.444696][ T6500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.180'.
[  115.036247][ T6525] netlink: 168 bytes leftover after parsing attributes in process `syz.0.188'.
[  115.114874][ T6529] veth3: entered promiscuous mode
[  115.532072][ T6546] netlink: 'syz.1.198': attribute type 10 has an invalid length.
[  115.616653][ T6549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.199'.
[  115.642689][ T6546] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  115.718433][ T6552] netlink: 'syz.2.201': attribute type 10 has an invalid length.
[  115.757778][ T6555] netlink: 16 bytes leftover after parsing attributes in process `syz.0.202'.
[  115.767586][ T6553] tipc: Started in network mode
[  115.775847][ T6553] tipc: Node identity 1aefba7c59bb, cluster identity 4711
[  115.786629][ T6553] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  115.956991][ T6553] syzkaller0: entered promiscuous mode
[  115.989189][ T6553] syzkaller0: entered allmulticast mode
[  116.014002][ T6553] tipc: Resetting bearer <eth:syzkaller0>
[  116.078438][ T6565] netlink: del zone limit has 4 unknown bytes
[  116.154096][ T6558] netlink: 40 bytes leftover after parsing attributes in process `syz.4.200'.
[  116.201357][ T6566] veth5: entered promiscuous mode
[  116.248804][ T6574] netlink: 16 bytes leftover after parsing attributes in process `syz.0.208'.
[  116.414102][   T36] tipc: Resetting bearer <eth:syzkaller0>
[  116.505241][ T6588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.214'.
[  116.579397][ T6590] netlink: 'syz.3.215': attribute type 10 has an invalid length.
[  116.644203][ T6590] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  116.654343][ T6591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.214'.
[  116.694730][ T6596] netlink: 28 bytes leftover after parsing attributes in process `syz.1.217'.
[  116.754342][ T6551] tipc: Resetting bearer <eth:syzkaller0>
[  116.900172][ T5907] tipc: Node number set to 1129626236
[  116.987242][ T6604] syz.3.219: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  117.005717][ T6604] CPU: 0 UID: 0 PID: 6604 Comm: syz.3.219 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) 
[  117.005748][ T6604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  117.005762][ T6604] Call Trace:
[  117.005772][ T6604]  <TASK>
[  117.005782][ T6604]  dump_stack_lvl+0x189/0x250
[  117.005820][ T6604]  ? __pfx_dump_stack_lvl+0x10/0x10
[  117.005847][ T6604]  ? __pfx__printk+0x10/0x10
[  117.005877][ T6604]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  117.005909][ T6604]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  117.005943][ T6604]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  117.005974][ T6604]  warn_alloc+0x214/0x310
[  117.006004][ T6604]  ? stack_depot_save_flags+0x429/0x900
[  117.006041][ T6604]  ? __pfx_warn_alloc+0x10/0x10
[  117.006075][ T6604]  ? kasan_save_track+0x4f/0x80
[  117.006101][ T6604]  ? xskq_create+0x56/0x170
[  117.006125][ T6604]  ? xsk_init_queue+0xb0/0x110
[  117.006148][ T6604]  ? xsk_setsockopt+0x43f/0x710
[  117.006176][ T6604]  ? do_sock_setsockopt+0x257/0x3e0
[  117.006207][ T6604]  ? __x64_sys_setsockopt+0x18b/0x220
[  117.006237][ T6604]  ? do_syscall_64+0xfa/0x3b0
[  117.006265][ T6604]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.006298][ T6604]  __vmalloc_node_range_noprof+0x125/0x12f0
[  117.006365][ T6604]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  117.006408][ T6604]  ? __kasan_kmalloc+0x93/0xb0
[  117.006435][ T6604]  vmalloc_user_noprof+0xad/0xf0
[  117.006460][ T6604]  ? xskq_create+0xbf/0x170
[  117.006482][ T6604]  xskq_create+0xbf/0x170
[  117.006508][ T6604]  xsk_init_queue+0xb0/0x110
[  117.006537][ T6604]  xsk_setsockopt+0x43f/0x710
[  117.006560][ T6604]  ? __pfx_xsk_setsockopt+0x10/0x10
[  117.006582][ T6604]  ? do_futex+0x395/0x420
[  117.006634][ T6604]  ? __lock_acquire+0xab9/0xd20
[  117.006660][ T6604]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  117.006676][ T6604]  ? __pfx_xsk_setsockopt+0x10/0x10
[  117.006698][ T6604]  do_sock_setsockopt+0x257/0x3e0
[  117.006730][ T6604]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  117.006775][ T6604]  __x64_sys_setsockopt+0x18b/0x220
[  117.006810][ T6604]  do_syscall_64+0xfa/0x3b0
[  117.006833][ T6604]  ? lockdep_hardirqs_on+0x9c/0x150
[  117.006856][ T6604]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.006876][ T6604]  ? clear_bhb_loop+0x60/0xb0
[  117.006898][ T6604]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.006916][ T6604] RIP: 0033:0x7f6d26b8e929
[  117.006934][ T6604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  117.006949][ T6604] RSP: 002b:00007f6d27a78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  117.006969][ T6604] RAX: ffffffffffffffda RBX: 00007f6d26db5fa0 RCX: 00007f6d26b8e929
[  117.006982][ T6604] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a
[  117.006993][ T6604] RBP: 00007f6d26c10b39 R08: 0000000000000004 R09: 0000000000000000
[  117.007004][ T6604] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  117.007015][ T6604] R13: 0000000000000000 R14: 00007f6d26db5fa0 R15: 00007ffd5c3814a8
[  117.007047][ T6604]  </TASK>
[  117.007834][ T6604] Mem-Info:
[  117.315856][ T6604] active_anon:4517 inactive_anon:0 isolated_anon:0
[  117.315856][ T6604]  active_file:1463 inactive_file:39835 isolated_file:0
[  117.315856][ T6604]  unevictable:768 dirty:312 writeback:0
[  117.315856][ T6604]  slab_reclaimable:10700 slab_unreclaimable:113890
[  117.315856][ T6604]  mapped:31294 shmem:1362 pagetables:1079
[  117.315856][ T6604]  sec_pagetables:0 bounce:0
[  117.315856][ T6604]  kernel_misc_reclaimable:0
[  117.315856][ T6604]  free:1313294 free_pcp:16661 free_cma:0
[  117.363911][ T6604] Node 0 active_anon:18068kB inactive_anon:0kB active_file:5852kB inactive_file:159140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125176kB dirty:1240kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12176kB pagetables:4164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  117.460706][ T6604] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  117.507006][ T6604] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  117.544235][ T6604] lowmem_reserve[]: 0 2498 2499 2499 2499
[  117.551643][ T6604] Node 0 DMA32 free:1346476kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17920kB inactive_anon:0kB active_file:5852kB inactive_file:157564kB unevictable:1536kB writepending:1240kB present:3129332kB managed:2558316kB mlocked:0kB bounce:0kB free_pcp:45080kB local_pcp:15584kB free_cma:0kB
[  117.588725][ T6604] lowmem_reserve[]: 0 0 1 1 1
[  117.593886][ T6604] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  117.626010][ T6604] lowmem_reserve[]: 0 0 0 0 0
[  117.631229][ T6604] Node 1 Normal free:3891808kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:23264kB local_pcp:14080kB free_cma:0kB
[  117.667760][ T6604] lowmem_reserve[]: 0 0 0 0 0
[  117.676789][ T6604] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  117.691239][ T6604] Node 0 DMA32: 1*4kB (M) 91*8kB (ME) 131*16kB (UME) 159*32kB (UM) 96*64kB (UM) 34*128kB (UME) 14*256kB (UM) 9*512kB (UM) 7*1024kB (UME) 7*2048kB (M) 317*4096kB (M) = 1346540kB
[  117.709477][ T6604] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB
[  117.729203][ T6604] Node 1 Normal: 212*4kB (UME) 54*8kB (UME) 50*16kB (UME) 82*32kB (UME) 24*64kB (UME) 8*128kB (UME) 4*256kB (UME) 3*512kB (ME) 1*1024kB (M) 1*2048kB (E) 947*4096kB (M) = 3891808kB
[  117.752776][ T6606] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  117.760457][ T6604] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  117.770911][ T6604] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  117.781954][ T6604] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  117.799956][ T6604] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  117.810775][ T6604] 42656 total pagecache pages
[  117.815520][ T6604] 0 pages in swap cache
[  117.827348][ T6604] Free swap  = 124996kB
[  117.838722][ T6604] Total swap = 124996kB
[  117.847778][ T6604] 2097051 pages RAM
[  117.852091][ T6604] 0 pages HighMem/MovableOnly
[  117.856954][ T6604] 425430 pages reserved
[  117.862897][ T6604] 0 pages cma reserved
[  118.727879][ T6551] tipc: Disabling bearer <eth:syzkaller0>
[  118.746102][ T6595] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  118.754962][ T6595] macsec1: entered allmulticast mode
[  118.761465][ T6595] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  118.772638][ T6595] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  118.780625][ T6595] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  118.828049][   T64] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  118.852043][   T64] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  118.852350][ T5907] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  119.079263][ T6627] xt_nat: multiple ranges no longer supported
[  119.202222][ T5935] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  119.408412][ T6631] vlan0: entered promiscuous mode
[  119.420623][ T6631] bridge0: entered promiscuous mode
[  119.447669][ T6631] vlan0: entered allmulticast mode
[  119.485532][ T6631] bridge0: entered allmulticast mode
[  119.779248][ T5952] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  120.127607][ T6670] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  120.401297][ T6680] netdevsim netdevsim4: Direct firmware load for .
[  120.401297][ T6680]  failed with error -2
[  120.447165][ T6687] netlink: 124 bytes leftover after parsing attributes in process `syz.2.251'.
[  120.454245][ T6680] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  120.454245][ T6680] 
[  120.739066][ T3524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.751319][ T3524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.665745][ T6726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.262'.
[  122.012519][ T6741] netdevsim netdevsim1: Direct firmware load for .
[  122.012519][ T6741]  failed with error -2
[  122.031398][ T6741] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  122.031398][ T6741] 
[  122.384282][ T6762] netlink: 'syz.0.277': attribute type 1 has an invalid length.
[  122.465917][ T6762] 8021q: adding VLAN 0 to HW filter on device bond1
[  122.535421][ T6762] bond1: (slave veth9): Enslaving as an active interface with a down link
[  122.553730][ T6770] netlink: 16 bytes leftover after parsing attributes in process `syz.3.279'.
[  122.820755][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  122.883663][ T6785] netlink: 'syz.4.286': attribute type 1 has an invalid length.
[  123.010513][ T6785] 8021q: adding VLAN 0 to HW filter on device bond1
[  123.062114][ T6787] veth5: entered promiscuous mode
[  123.379281][ T6796] netlink: 32 bytes leftover after parsing attributes in process `syz.0.287'.
[  123.445811][ T6808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.294'.
[  123.612837][ T6795] netlink: 16 bytes leftover after parsing attributes in process `syz.1.288'.
[  123.761623][ T6819] netlink: 16 bytes leftover after parsing attributes in process `syz.2.297'.
[  124.292753][ T6839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.304'.
[  124.383088][ T6843] netdevsim netdevsim3: Direct firmware load for .
[  124.383088][ T6843]  failed with error -2
[  124.394287][ T6843] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  124.394287][ T6843] 
[  124.506778][ T6852] netlink: 12 bytes leftover after parsing attributes in process `syz.3.305'.
[  124.544151][ T6847] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  124.907304][ T6862] netlink: 28 bytes leftover after parsing attributes in process `syz.2.311'.
[  125.315104][ T6884] pimreg: entered allmulticast mode
[  125.369792][ T6880] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  125.607688][ T6903] __nla_validate_parse: 1 callbacks suppressed
[  125.607711][ T6903] netlink: 16 bytes leftover after parsing attributes in process `syz.4.326'.
[  125.917643][ T6889] netlink: 16 bytes leftover after parsing attributes in process `syz.1.318'.
[  125.937270][ T6912] bond0: entered promiscuous mode
[  125.977128][ T6912] bond_slave_0: entered promiscuous mode
[  125.984388][ T6917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.330'.
[  125.993753][ T6912] bond_slave_1: entered promiscuous mode
[  125.999968][ T6912] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  126.011692][ T6912] bond0: left promiscuous mode
[  126.017057][ T6912] bond_slave_0: left promiscuous mode
[  126.045137][ T6918] netlink: 12 bytes leftover after parsing attributes in process `syz.4.331'.
[  126.056413][ T6912] bond_slave_1: left promiscuous mode
[  126.063240][ T6912] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  126.074149][ T6918] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  126.104956][ T6919] batadv_slave_1: entered promiscuous mode
[  126.117084][ T6914] netdevsim netdevsim4: Direct firmware load for .
[  126.117084][ T6914]  failed with error -2
[  126.136078][ T6912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.330'.
[  126.143987][ T6914] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  126.143987][ T6914] 
[  126.157562][ T6912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.330'.
[  126.169239][ T6910] batadv_slave_1: left promiscuous mode
[  126.571327][ T6934] netlink: 'syz.0.339': attribute type 1 has an invalid length.
[  126.579384][ T6934] netlink: 180 bytes leftover after parsing attributes in process `syz.0.339'.
[  126.791490][ T6943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.343'.
[  127.314949][ T6969] netdevsim netdevsim4: Direct firmware load for .
[  127.314949][ T6969]  failed with error -2
[  127.325839][ T6969] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  127.325839][ T6969] 
[  127.450109][ T6974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.356'.
[  127.493952][ T6974] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  127.708148][ T6994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  127.727591][ T6994] netlink: 256 bytes leftover after parsing attributes in process `syz.2.365'.
[  127.756931][ T6997] netlink: 'syz.1.367': attribute type 21 has an invalid length.
[  127.785150][ T6997] netlink: 'syz.1.367': attribute type 22 has an invalid length.
[  127.796230][ T6997] netlink: 'syz.1.367': attribute type 23 has an invalid length.
[  127.805953][ T6997] netlink: 'syz.1.367': attribute type 25 has an invalid length.
[  127.815234][ T6997] netlink: 'syz.1.367': attribute type 26 has an invalid length.
[  128.291721][ T7014] vlan2: entered promiscuous mode
[  128.307133][ T7014] bridge0: entered promiscuous mode
[  128.324028][ T7014] vlan2: entered allmulticast mode
[  128.331686][ T7014] bridge0: entered allmulticast mode
[  128.708053][ T7028] veth7: entered promiscuous mode
[  129.948775][ T7059] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  130.499111][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  130.915999][ T7101] __nla_validate_parse: 9 callbacks suppressed
[  130.916018][ T7101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.399'.
[  130.971294][ T7102] netlink: 68 bytes leftover after parsing attributes in process `syz.1.399'.
[  131.062494][ T7104] netdevsim netdevsim2: Direct firmware load for .
[  131.062494][ T7104]  failed with error -2
[  131.085049][ T7104] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  131.085049][ T7104] 
[  131.187543][ T7107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.401'.
[  131.204149][ T7107] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  131.241676][ T7112] netlink: 224 bytes leftover after parsing attributes in process `syz.0.405'.
[  131.801760][ T7130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.414'.
[  131.863506][ T7130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.414'.
[  132.005240][ T7134] tipc: Started in network mode
[  132.015094][ T7134] tipc: Node identity 8eee0f1b27a5, cluster identity 4711
[  132.034213][ T7134] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  132.157007][ T7140] syzkaller0: entered promiscuous mode
[  132.171193][ T7140] syzkaller0: entered allmulticast mode
[  132.177919][ T7140] tipc: Resetting bearer <eth:syzkaller0>
[  132.211265][ T7133] tipc: Resetting bearer <eth:syzkaller0>
[  133.073049][ T5914] tipc: Node number set to 2840268571
[  133.496273][ T7133] tipc: Disabling bearer <eth:syzkaller0>
[  133.552263][ T7162] veth11: entered promiscuous mode
[  133.778428][ T7172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.428'.
[  134.418263][ T7198] Bluetooth: MGMT ver 1.23
[  134.444124][ T7199] vlan2: entered promiscuous mode
[  134.459072][ T7199] bridge0: entered promiscuous mode
[  134.464525][ T7199] vlan2: entered allmulticast mode
[  134.478073][ T7199] bridge0: entered allmulticast mode
[  134.513657][ T7203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  134.603996][ T7205] veth5: entered promiscuous mode
[  134.626039][ T7209] netlink: 12 bytes leftover after parsing attributes in process `syz.3.442'.
[  134.657440][ T7207] netlink: 'syz.4.441': attribute type 10 has an invalid length.
[  134.766924][ T7207] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  134.968492][ T7223] FAULT_INJECTION: forcing a failure.
[  134.968492][ T7223] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  134.994060][ T7223] CPU: 1 UID: 0 PID: 7223 Comm: syz.4.448 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) 
[  134.994108][ T7223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  134.994121][ T7223] Call Trace:
[  134.994130][ T7223]  <TASK>
[  134.994139][ T7223]  dump_stack_lvl+0x189/0x250
[  134.994183][ T7223]  ? __pfx____ratelimit+0x10/0x10
[  134.994211][ T7223]  ? __pfx_dump_stack_lvl+0x10/0x10
[  134.994236][ T7223]  ? __pfx__printk+0x10/0x10
[  134.994273][ T7223]  ? __might_fault+0xb0/0x130
[  134.994311][ T7223]  should_fail_ex+0x414/0x560
[  134.994350][ T7223]  _copy_from_user+0x2d/0xb0
[  134.994377][ T7223]  bpf_prog_test_run_xdp+0xd05/0x1000
[  134.994425][ T7223]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  134.994460][ T7223]  ? __fget_files+0x2a/0x420
[  134.994496][ T7223]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  134.994527][ T7223]  bpf_prog_test_run+0x2c4/0x340
[  134.994554][ T7223]  __sys_bpf+0x4a4/0x860
[  134.994578][ T7223]  ? __pfx___sys_bpf+0x10/0x10
[  134.994614][ T7223]  ? ksys_write+0x22a/0x250
[  134.994642][ T7223]  ? __pfx_ksys_write+0x10/0x10
[  134.994665][ T7223]  ? rcu_is_watching+0x15/0xb0
[  134.994697][ T7223]  __x64_sys_bpf+0x7c/0x90
[  134.994730][ T7223]  do_syscall_64+0xfa/0x3b0
[  134.994759][ T7223]  ? lockdep_hardirqs_on+0x9c/0x150
[  134.994786][ T7223]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.994807][ T7223]  ? clear_bhb_loop+0x60/0xb0
[  134.994838][ T7223]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.994859][ T7223] RIP: 0033:0x7f194518e929
[  134.994884][ T7223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  134.994901][ T7223] RSP: 002b:00007f1945f6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  134.994929][ T7223] RAX: ffffffffffffffda RBX: 00007f19453b5fa0 RCX: 00007f194518e929
[  134.994945][ T7223] RDX: 0000000000000050 RSI: 0000200000000c80 RDI: 000000000000000a
[  134.994958][ T7223] RBP: 00007f1945f6d090 R08: 0000000000000000 R09: 0000000000000000
[  134.994971][ T7223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  134.994983][ T7223] R13: 0000000000000000 R14: 00007f19453b5fa0 R15: 00007ffcb141bf28
[  134.995016][ T7223]  </TASK>
[  135.361886][ T7232] Bluetooth: MGMT ver 1.23
[  135.465845][ T7238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.456'.
[  135.480826][ T7236] veth7: entered promiscuous mode
[  135.862431][ T7259] FAULT_INJECTION: forcing a failure.
[  135.862431][ T7259] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  135.922259][ T7259] CPU: 1 UID: 0 PID: 7259 Comm: syz.1.466 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) 
[  135.922289][ T7259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  135.922302][ T7259] Call Trace:
[  135.922311][ T7259]  <TASK>
[  135.922320][ T7259]  dump_stack_lvl+0x189/0x250
[  135.922353][ T7259]  ? __pfx____ratelimit+0x10/0x10
[  135.922382][ T7259]  ? __pfx_dump_stack_lvl+0x10/0x10
[  135.922409][ T7259]  ? __pfx__printk+0x10/0x10
[  135.922439][ T7259]  ? __might_fault+0xb0/0x130
[  135.922480][ T7259]  should_fail_ex+0x414/0x560
[  135.922519][ T7259]  _copy_from_user+0x2d/0xb0
[  135.922547][ T7259]  bpf_prog_test_run_xdp+0xd05/0x1000
[  135.922595][ T7259]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  135.922631][ T7259]  ? __fget_files+0x2a/0x420
[  135.922667][ T7259]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  135.922698][ T7259]  bpf_prog_test_run+0x2c4/0x340
[  135.922726][ T7259]  __sys_bpf+0x4a4/0x860
[  135.922750][ T7259]  ? __pfx___sys_bpf+0x10/0x10
[  135.922786][ T7259]  ? ksys_write+0x22a/0x250
[  135.922814][ T7259]  ? __pfx_ksys_write+0x10/0x10
[  135.922836][ T7259]  ? rcu_is_watching+0x15/0xb0
[  135.922870][ T7259]  __x64_sys_bpf+0x7c/0x90
[  135.922903][ T7259]  do_syscall_64+0xfa/0x3b0
[  135.922930][ T7259]  ? lockdep_hardirqs_on+0x9c/0x150
[  135.922958][ T7259]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.922979][ T7259]  ? clear_bhb_loop+0x60/0xb0
[  135.923006][ T7259]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.923027][ T7259] RIP: 0033:0x7fd74e78e929
[  135.923046][ T7259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  135.923064][ T7259] RSP: 002b:00007fd74f676038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  135.923086][ T7259] RAX: ffffffffffffffda RBX: 00007fd74e9b5fa0 RCX: 00007fd74e78e929
[  135.923102][ T7259] RDX: 0000000000000050 RSI: 0000200000000c80 RDI: 000000000000000a
[  135.923116][ T7259] RBP: 00007fd74f676090 R08: 0000000000000000 R09: 0000000000000000
[  135.923128][ T7259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  135.923140][ T7259] R13: 0000000000000000 R14: 00007fd74e9b5fa0 R15: 00007ffc7b652178
[  135.923173][ T7259]  </TASK>
[  136.186220][ T7268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.468'.
[  136.199824][ T7264] x_tables: duplicate underflow at hook 1
[  136.237311][ T7271] team0: No ports can be present during mode change
[  136.248676][ T7271] netlink: 24 bytes leftover after parsing attributes in process `syz.0.469'.
[  136.327242][ T7273] veth9: entered promiscuous mode
[  136.426589][ T5935] IPVS: starting estimator thread 0...
[  136.515295][ T7283] netlink: 16 bytes leftover after parsing attributes in process `syz.0.474'.
[  136.539085][ T7279] IPVS: using max 25 ests per chain, 60000 per kthread
[  136.604907][ T7287] tun0: tun_chr_ioctl cmd 1074025677
[  136.617592][ T7287] tun0: linktype set to 778
[  136.669503][ T7291] netlink: 68 bytes leftover after parsing attributes in process `syz.1.477'.
[  137.003519][ T7305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.481'.
[  137.140430][ T7307] veth11: entered promiscuous mode
[  137.178387][ T7309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.484'.
[  137.585822][ T7332] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[  137.603426][ T7333] netlink: 28 bytes leftover after parsing attributes in process `syz.2.493'.
[  137.619823][ T7332] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  137.706371][ T7338] netlink: 4 bytes leftover after parsing attributes in process `syz.4.494'.
[  137.728824][ T7338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.494'.
[  138.146974][ T7353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.503'.
[  138.197056][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  138.208694][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  139.469602][ T7395] 8021q: adding VLAN 0 to HW filter on device batadv1
[  139.479971][ T7395] team0: Port device batadv1 added
[  139.655633][ T7401] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.791729][ T7401] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.904532][ T7401] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.057632][ T7401] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.348465][   T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.422204][   T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.508374][ T7427] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.611200][   T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.702182][ T7427] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.755367][   T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  140.859936][ T7427] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.865649][ T7442] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  140.890502][ T7440] netlink: 'syz.2.533': attribute type 10 has an invalid length.
[  140.910890][ T7442] netlink: 'syz.4.534': attribute type 11 has an invalid length.
[  141.009642][ T7427] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.299243][ T1332] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  141.347181][   T64] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  141.363422][ T7452] netlink: 'syz.4.538': attribute type 2 has an invalid length.
[  141.402443][ T7452] __nla_validate_parse: 4 callbacks suppressed
[  141.402462][ T7452] netlink: 24 bytes leftover after parsing attributes in process `syz.4.538'.
[  141.404118][   T64] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  141.487942][   T64] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  141.654337][ T7458] syzkaller0: entered promiscuous mode
[  141.679008][ T7458] syzkaller0: entered allmulticast mode
[  141.844748][ T7469] netlink: 'syz.3.545': attribute type 10 has an invalid length.
[  141.946959][ T7473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.544'.
[  142.034890][ T7476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.544'.
[  142.047728][ T7476] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  143.497753][ T7487] netlink: 12 bytes leftover after parsing attributes in process `syz.4.550'.
[  143.990735][ T7504] FAULT_INJECTION: forcing a failure.
[  143.990735][ T7504] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  144.019155][ T7504] CPU: 0 UID: 0 PID: 7504 Comm: syz.2.554 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) 
[  144.019203][ T7504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  144.019223][ T7504] Call Trace:
[  144.019236][ T7504]  <TASK>
[  144.019249][ T7504]  dump_stack_lvl+0x189/0x250
[  144.019298][ T7504]  ? __pfx____ratelimit+0x10/0x10
[  144.019326][ T7504]  ? __pfx_dump_stack_lvl+0x10/0x10
[  144.019353][ T7504]  ? __pfx__printk+0x10/0x10
[  144.019396][ T7504]  should_fail_ex+0x414/0x560
[  144.019433][ T7504]  _copy_to_user+0x31/0xb0
[  144.019462][ T7504]  simple_read_from_buffer+0xe1/0x170
[  144.019495][ T7504]  proc_fail_nth_read+0x1df/0x250
[  144.019535][ T7504]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  144.019570][ T7504]  ? rw_verify_area+0x258/0x650
[  144.019595][ T7504]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  144.019628][ T7504]  vfs_read+0x200/0x980
[  144.019660][ T7504]  ? __pfx___mutex_lock+0x10/0x10
[  144.019691][ T7504]  ? __pfx_vfs_read+0x10/0x10
[  144.019718][ T7504]  ? __fget_files+0x2a/0x420
[  144.019753][ T7504]  ? __fget_files+0x3a0/0x420
[  144.019780][ T7504]  ? __fget_files+0x2a/0x420
[  144.019821][ T7504]  ksys_read+0x145/0x250
[  144.019850][ T7504]  ? __pfx_ksys_read+0x10/0x10
[  144.019872][ T7504]  ? rcu_is_watching+0x15/0xb0
[  144.019903][ T7504]  ? do_syscall_64+0xbe/0x3b0
[  144.019936][ T7504]  do_syscall_64+0xfa/0x3b0
[  144.019963][ T7504]  ? lockdep_hardirqs_on+0x9c/0x150
[  144.019989][ T7504]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.020010][ T7504]  ? clear_bhb_loop+0x60/0xb0
[  144.020036][ T7504]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.020057][ T7504] RIP: 0033:0x7f462b78d33c
[  144.020076][ T7504] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  144.020093][ T7504] RSP: 002b:00007f462c601030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  144.020115][ T7504] RAX: ffffffffffffffda RBX: 00007f462b9b6080 RCX: 00007f462b78d33c
[  144.020131][ T7504] RDX: 000000000000000f RSI: 00007f462c6010a0 RDI: 0000000000000006
[  144.020144][ T7504] RBP: 00007f462c601090 R08: 0000000000000000 R09: 0000000000000000
[  144.020156][ T7504] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  144.020169][ T7504] R13: 0000000000000001 R14: 00007f462b9b6080 R15: 00007ffde494a278
[  144.020204][ T7504]  </TASK>
[  144.317001][ T7509] veth1_to_bond: entered allmulticast mode
[  144.326932][ T7509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.556'.
[  144.340385][ T7512] netdevsim netdevsim1: Direct firmware load for .
[  144.340385][ T7512]  failed with error -2
[  144.351699][ T7512] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  144.351699][ T7512] 
[  144.437783][ T7509] bond0: (slave bond_slave_1): Releasing backup interface
[  144.491882][ T7514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.557'.
[  144.525900][ T7509] veth1_to_bond (unregistering): left allmulticast mode
[  144.546671][ T7514] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  144.658631][ T7525] netlink: 'syz.2.559': attribute type 10 has an invalid length.
[  144.834526][ T7529] netlink: 16 bytes leftover after parsing attributes in process `syz.2.563'.
[  144.844617][ T7529] netlink: 16 bytes leftover after parsing attributes in process `syz.2.563'.
[  144.940769][ T7535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.564'.
[  144.964789][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.564'.
[  145.219137][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  145.886909][ T7560] netlink: 'syz.0.570': attribute type 3 has an invalid length.
[  146.120604][ T7566] netlink: 'syz.1.571': attribute type 5 has an invalid length.
[  146.799263][ T7596] __nla_validate_parse: 6 callbacks suppressed
[  146.799297][ T7596] netlink: 12 bytes leftover after parsing attributes in process `syz.0.578'.
[  146.868499][ T7596] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  146.877671][ T7601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.581'.
[  147.218010][ T7611] netlink: 'syz.2.584': attribute type 10 has an invalid length.
[  147.801208][ T7635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.593'.
[  147.853432][ T7635] netlink: 28 bytes leftover after parsing attributes in process `syz.0.593'.
[  147.981947][ T7644] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  148.015040][ T7644] netlink: 16 bytes leftover after parsing attributes in process `syz.4.596'.
[  148.033434][ T7647] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  148.215285][ T7652] netlink: 'syz.2.600': attribute type 1 has an invalid length.
[  148.248127][ T7652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.600'.
[  148.266659][ T7659] netlink: 'syz.0.603': attribute type 11 has an invalid length.
[  148.299541][ T7659] netlink: 44 bytes leftover after parsing attributes in process `syz.0.603'.
[  148.311632][ T7652] netlink: 28 bytes leftover after parsing attributes in process `syz.2.600'.
[  148.358976][ T7652] netlink: 28 bytes leftover after parsing attributes in process `syz.2.600'.
[  148.388270][ T7662] netlink: 172 bytes leftover after parsing attributes in process `syz.0.603'.
[  148.498637][ T7667] bond2: entered promiscuous mode
[  148.504263][ T7667] bond2: entered allmulticast mode
[  148.510019][ T7667] 8021q: adding VLAN 0 to HW filter on device bond2
[  149.837469][ T7698] syzkaller0: entered promiscuous mode
[  149.854940][ T7698] syzkaller0: entered allmulticast mode
[  151.048717][ T7730] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  152.725221][ T7755] __nla_validate_parse: 4 callbacks suppressed
[  152.725242][ T7755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.633'.
[  152.788182][ T7756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.633'.
[  152.937480][ T7686] Set syz1 is full, maxelem 65536 reached
[  153.096979][ T7760] netlink: 12 bytes leftover after parsing attributes in process `syz.2.635'.
[  153.482557][ T7766] netlink: 176 bytes leftover after parsing attributes in process `syz.4.638'.
[  153.695080][ T7781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.643'.
[  153.704328][ T7781] netlink: 24 bytes leftover after parsing attributes in process `syz.1.643'.
[  154.348546][ T7807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  154.375790][ T7810] netlink: 16 bytes leftover after parsing attributes in process `syz.1.650'.
[  154.598136][ T7816] syz.0.648: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  154.682067][ T7819] netlink: 'syz.1.651': attribute type 2 has an invalid length.
[  154.690418][ T7816] CPU: 1 UID: 0 PID: 7816 Comm: syz.0.648 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) 
[  154.690452][ T7816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  154.690467][ T7816] Call Trace:
[  154.690476][ T7816]  <TASK>
[  154.690486][ T7816]  dump_stack_lvl+0x189/0x250
[  154.690524][ T7816]  ? __pfx_dump_stack_lvl+0x10/0x10
[  154.690554][ T7816]  ? __pfx__printk+0x10/0x10
[  154.690587][ T7816]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  154.690621][ T7816]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  154.690657][ T7816]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  154.690693][ T7816]  warn_alloc+0x214/0x310
[  154.690725][ T7816]  ? stack_depot_save_flags+0x40/0x900
[  154.690765][ T7816]  ? __pfx_warn_alloc+0x10/0x10
[  154.690800][ T7816]  ? kasan_save_track+0x4f/0x80
[  154.690828][ T7816]  ? xskq_create+0x56/0x170
[  154.690853][ T7816]  ? xsk_init_queue+0xb0/0x110
[  154.690877][ T7816]  ? xsk_setsockopt+0x43f/0x710
[  154.690899][ T7816]  ? do_sock_setsockopt+0x257/0x3e0
[  154.690931][ T7816]  ? __x64_sys_setsockopt+0x18b/0x220
[  154.690963][ T7816]  ? do_syscall_64+0xfa/0x3b0
[  154.690991][ T7816]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.691023][ T7816]  __vmalloc_node_range_noprof+0x125/0x12f0
[  154.691092][ T7816]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  154.691132][ T7816]  ? __kasan_kmalloc+0x93/0xb0
[  154.691164][ T7816]  vmalloc_user_noprof+0xad/0xf0
[  154.691196][ T7816]  ? xskq_create+0xbf/0x170
[  154.691224][ T7816]  xskq_create+0xbf/0x170
[  154.691255][ T7816]  xsk_init_queue+0xb0/0x110
[  154.691286][ T7816]  xsk_setsockopt+0x43f/0x710
[  154.691324][ T7816]  ? __pfx_xsk_setsockopt+0x10/0x10
[  154.691349][ T7816]  ? __lock_acquire+0xab9/0xd20
[  154.691385][ T7816]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  154.691405][ T7816]  ? __pfx_xsk_setsockopt+0x10/0x10
[  154.691433][ T7816]  do_sock_setsockopt+0x257/0x3e0
[  154.691472][ T7816]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  154.691513][ T7816]  ? __fget_files+0x2a/0x420
[  154.691554][ T7816]  __x64_sys_setsockopt+0x18b/0x220
[  154.691598][ T7816]  do_syscall_64+0xfa/0x3b0
[  154.691627][ T7816]  ? lockdep_hardirqs_on+0x9c/0x150
[  154.691656][ T7816]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.691678][ T7816]  ? clear_bhb_loop+0x60/0xb0
[  154.691706][ T7816]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.691728][ T7816] RIP: 0033:0x7f9d6538e929
[  154.691749][ T7816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  154.691767][ T7816] RSP: 002b:00007f9d62d91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  154.691792][ T7816] RAX: ffffffffffffffda RBX: 00007f9d655b6240 RCX: 00007f9d6538e929
[  154.691808][ T7816] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a
[  154.691821][ T7816] RBP: 00007f9d65410b39 R08: 0000000000000004 R09: 0000000000000000
[  154.691835][ T7816] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  154.691848][ T7816] R13: 0000000000000000 R14: 00007f9d655b6240 R15: 00007ffcc9977e68
[  154.691884][ T7816]  </TASK>
[  154.691893][ T7816] Mem-Info:
[  154.780011][ T7819] netlink: 'syz.1.651': attribute type 8 has an invalid length.
[  154.822834][ T7816] active_anon:12086 inactive_anon:0 isolated_anon:0
[  154.822834][ T7816]  active_file:1624 inactive_file:39854 isolated_file:0
[  154.822834][ T7816]  unevictable:768 dirty:111 writeback:0
[  154.822834][ T7816]  slab_reclaimable:10641 slab_unreclaimable:117803
[  154.822834][ T7816]  mapped:34288 shmem:7085 pagetables:1107
[  154.822834][ T7816]  sec_pagetables:0 bounce:0
[  154.822834][ T7816]  kernel_misc_reclaimable:0
[  154.822834][ T7816]  free:1292021 free_pcp:24769 free_cma:0
[  154.861700][ T7819] netlink: 132 bytes leftover after parsing attributes in process `syz.1.651'.
[  154.967056][ T7816] Node 0 active_anon:38944kB inactive_anon:0kB active_file:6496kB inactive_file:159216kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137152kB dirty:440kB writeback:0kB shmem:17704kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12268kB pagetables:4276kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  155.097657][ T7821] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  155.113136][ T7816] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  155.179074][ T7816] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  155.255488][ T7809] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  155.262944][ T7816] lowmem_reserve[]: 0 2498 2499 2499 2499
[  155.269034][ T7816] Node 0 DMA32 free:1268300kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36652kB inactive_anon:0kB active_file:6496kB inactive_file:157640kB unevictable:1536kB writepending:300kB present:3129332kB managed:2558316kB mlocked:0kB bounce:0kB free_pcp:78812kB local_pcp:50024kB free_cma:0kB
[  155.305554][ T7829] netlink: 'syz.2.652': attribute type 6 has an invalid length.
[  155.315323][ T7816] lowmem_reserve[]: 0 0 1 1 1
[  155.324286][ T7816] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  155.359707][ T7816] lowmem_reserve[]: 0 0 0 0 0
[  155.364809][ T7816] Node 1 Normal free:3892272kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:23040kB local_pcp:13984kB free_cma:0kB
[  155.404635][ T7816] lowmem_reserve[]: 0 0 0 0 0
[  155.410363][ T7816] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  155.429240][ T7816] Node 0 DMA32: 1*4kB (E) 1214*8kB (UME) 827*16kB (UME) 931*32kB (UME) 97*64kB (UE) 11*128kB (UME) 4*256kB (UM) 3*512kB (UM) 3*1024kB (M) 5*2048kB (M) 291*4096kB (ME) = 1268164kB
[  155.448249][ T7816] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB
[  155.465798][ T7816] Node 1 Normal: 212*4kB (UME) 54*8kB (UME) 50*16kB (UME) 87*32kB (UME) 30*64kB (UME) 8*128kB (UME) 4*256kB (UME) 3*512kB (ME) 1*1024kB (M) 1*2048kB (E) 947*4096kB (M) = 3892352kB
[  155.486346][ T7816] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  155.540834][ T7816] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  155.559543][ T7816] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  155.575508][ T7816] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  155.585410][ T7816] 44731 total pagecache pages
[  155.600336][ T7816] 0 pages in swap cache
[  155.604900][ T7816] Free swap  = 124996kB
[  155.614076][ T7816] Total swap = 124996kB
[  155.618308][ T7816] 2097051 pages RAM
[  155.623496][ T7816] 0 pages HighMem/MovableOnly
[  155.628225][ T7816] 425430 pages reserved
[  155.632942][ T7816] 0 pages cma reserved
[  155.651459][ T7838] netlink: 72 bytes leftover after parsing attributes in process `syz.4.656'.
[  156.058395][ T7853] netlink: 20 bytes leftover after parsing attributes in process `syz.4.662'.
[  157.747294][ T7907] __nla_validate_parse: 2 callbacks suppressed
[  157.747316][ T7907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.680'.
[  157.922436][ T7915] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  158.156301][ T7927] netlink: 16 bytes leftover after parsing attributes in process `syz.3.686'.
[  158.282711][ T7934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.690'.
[  158.401030][ T7937] netlink: 48 bytes leftover after parsing attributes in process `syz.3.691'.
[  158.415281][ T7937] netlink: 'syz.3.691': attribute type 10 has an invalid length.
[  158.468514][ T7937] team0: Port device dummy0 added
[  158.492118][ T7945] netlink: 'syz.3.691': attribute type 10 has an invalid length.
[  158.556131][ T7945] team0: Port device dummy0 removed
[  158.574902][ T7945] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  159.138063][ T7969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.703'.
[  159.159302][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.704'.
[  159.650138][ T7987] netlink: 16 bytes leftover after parsing attributes in process `syz.0.707'.
[  159.906746][ T8004] netlink: 16 bytes leftover after parsing attributes in process `syz.3.715'.
[  160.573116][ T8023] veth0_macvtap: left promiscuous mode
[  160.671265][ T8032] bridge2: entered promiscuous mode
[  160.754685][ T8035] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  160.779121][ T8035] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  160.787610][ T8035] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  160.896431][ T8044] bridge3: entered allmulticast mode
[  161.082534][ T8053] FAULT_INJECTION: forcing a failure.
[  161.082534][ T8053] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  161.101806][ T8053] CPU: 0 UID: 0 PID: 8053 Comm: syz.1.734 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) 
[  161.101837][ T8053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  161.101851][ T8053] Call Trace:
[  161.101859][ T8053]  <TASK>
[  161.101869][ T8053]  dump_stack_lvl+0x189/0x250
[  161.101902][ T8053]  ? __pfx____ratelimit+0x10/0x10
[  161.101930][ T8053]  ? __pfx_dump_stack_lvl+0x10/0x10
[  161.101957][ T8053]  ? __pfx__printk+0x10/0x10
[  161.101990][ T8053]  ? fs_reclaim_acquire+0x7d/0x100
[  161.102029][ T8053]  should_fail_ex+0x414/0x560
[  161.102069][ T8053]  prepare_alloc_pages+0x213/0x610
[  161.102108][ T8053]  __alloc_frozen_pages_noprof+0x123/0x370
[  161.102143][ T8053]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  161.102173][ T8053]  ? lockdep_hardirqs_on+0x9c/0x150
[  161.102202][ T8053]  ? exc_page_fault+0x9f/0xf0
[  161.102230][ T8053]  ? policy_nodemask+0x27c/0x720
[  161.102265][ T8053]  alloc_pages_mpol+0x232/0x4a0
[  161.102300][ T8053]  alloc_pages_noprof+0xa9/0x190
[  161.102330][ T8053]  bpf_prog_test_run_xdp+0xb8d/0x1000
[  161.102377][ T8053]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  161.102412][ T8053]  ? __fget_files+0x2a/0x420
[  161.102446][ T8053]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  161.102477][ T8053]  bpf_prog_test_run+0x2c4/0x340
[  161.102506][ T8053]  __sys_bpf+0x4a4/0x860
[  161.102529][ T8053]  ? __pfx___sys_bpf+0x10/0x10
[  161.102560][ T8053]  ? ksys_write+0x22a/0x250
[  161.102583][ T8053]  ? __pfx_ksys_write+0x10/0x10
[  161.102601][ T8053]  ? rcu_is_watching+0x15/0xb0
[  161.102627][ T8053]  __x64_sys_bpf+0x7c/0x90
[  161.102653][ T8053]  do_syscall_64+0xfa/0x3b0
[  161.102675][ T8053]  ? lockdep_hardirqs_on+0x9c/0x150
[  161.102696][ T8053]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.102712][ T8053]  ? clear_bhb_loop+0x60/0xb0
[  161.102733][ T8053]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.102749][ T8053] RIP: 0033:0x7fd74e78e929
[  161.102765][ T8053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  161.102789][ T8053] RSP: 002b:00007fd74f676038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  161.102807][ T8053] RAX: ffffffffffffffda RBX: 00007fd74e9b5fa0 RCX: 00007fd74e78e929
[  161.102819][ T8053] RDX: 0000000000000050 RSI: 0000200000000c80 RDI: 000000000000000a
[  161.102830][ T8053] RBP: 00007fd74f676090 R08: 0000000000000000 R09: 0000000000000000
[  161.102840][ T8053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  161.102850][ T8053] R13: 0000000000000000 R14: 00007fd74e9b5fa0 R15: 00007ffc7b652178
[  161.102875][ T8053]  </TASK>
[  161.710841][ T8063] netdevsim netdevsim2: Direct firmware load for .
[  161.710841][ T8063]  failed with error -2
[  161.733341][ T8063] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  161.733341][ T8063] 
[  161.816373][ T8070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.739'.
[  161.842612][ T8070] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  161.991720][ T8076] Bluetooth: MGMT ver 1.23
[  162.147559][ T8081] netlink: 'syz.4.744': attribute type 10 has an invalid length.
[  162.334742][ T8078] ip6gretap0: entered promiscuous mode
[  162.434060][ T8078] ip6gretap0: left promiscuous mode
[  163.108241][ T8105] syz.0.751 (8105) used obsolete PPPIOCDETACH ioctl
[  163.178715][ T8108] vlan3: entered allmulticast mode
[  163.185501][ T8108] dummy0: entered allmulticast mode
[  163.269170][ T5865] Bluetooth: hci4: link tx timeout
[  163.274782][ T5865] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  163.290544][   T51] Bluetooth: hci4: link tx timeout
[  163.296555][   T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  163.646870][ T8123] FAULT_INJECTION: forcing a failure.
[  163.646870][ T8123] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  163.662745][ T8123] CPU: 0 UID: 0 PID: 8123 Comm: syz.4.757 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) 
[  163.662775][ T8123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  163.662788][ T8123] Call Trace:
[  163.662796][ T8123]  <TASK>
[  163.662806][ T8123]  dump_stack_lvl+0x189/0x250
[  163.662838][ T8123]  ? __pfx____ratelimit+0x10/0x10
[  163.662865][ T8123]  ? __pfx_dump_stack_lvl+0x10/0x10
[  163.662892][ T8123]  ? __pfx__printk+0x10/0x10
[  163.662921][ T8123]  ? __might_fault+0xb0/0x130
[  163.662961][ T8123]  should_fail_ex+0x414/0x560
[  163.662999][ T8123]  _copy_from_user+0x2d/0xb0
[  163.663026][ T8123]  bpf_prog_test_run_xdp+0xd05/0x1000
[  163.663075][ T8123]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  163.663110][ T8123]  ? __fget_files+0x2a/0x420
[  163.663145][ T8123]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  163.663176][ T8123]  bpf_prog_test_run+0x2c4/0x340
[  163.663204][ T8123]  __sys_bpf+0x4a4/0x860
[  163.663227][ T8123]  ? __pfx___sys_bpf+0x10/0x10
[  163.663263][ T8123]  ? ksys_write+0x22a/0x250
[  163.663291][ T8123]  ? __pfx_ksys_write+0x10/0x10
[  163.663313][ T8123]  ? rcu_is_watching+0x15/0xb0
[  163.663348][ T8123]  __x64_sys_bpf+0x7c/0x90
[  163.663380][ T8123]  do_syscall_64+0xfa/0x3b0
[  163.663408][ T8123]  ? lockdep_hardirqs_on+0x9c/0x150
[  163.663435][ T8123]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.663456][ T8123]  ? clear_bhb_loop+0x60/0xb0
[  163.663483][ T8123]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.663504][ T8123] RIP: 0033:0x7f194518e929
[  163.663523][ T8123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  163.663541][ T8123] RSP: 002b:00007f1945f6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  163.663570][ T8123] RAX: ffffffffffffffda RBX: 00007f19453b5fa0 RCX: 00007f194518e929
[  163.663585][ T8123] RDX: 0000000000000050 RSI: 0000200000000c80 RDI: 000000000000000a
[  163.663599][ T8123] RBP: 00007f1945f6d090 R08: 0000000000000000 R09: 0000000000000000
[  163.663612][ T8123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  163.663624][ T8123] R13: 0000000000000000 R14: 00007f19453b5fa0 R15: 00007ffcb141bf28
[  163.663658][ T8123]  </TASK>
[  164.019113][ T8130] netdevsim netdevsim1: Direct firmware load for .
[  164.019113][ T8130]  failed with error -2
[  164.062605][ T8130] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  164.062605][ T8130] 
[  164.194762][ T8137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.759'.
[  164.224840][ T8137] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  164.593292][ T8145] netlink: 40 bytes leftover after parsing attributes in process `syz.4.766'.
[  164.639787][ T8152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.768'.
[  164.845670][ T8160] netlink: 100 bytes leftover after parsing attributes in process `syz.0.770'.
[  164.925578][ T8162] ==================================================================
[  164.933707][ T8162] BUG: KASAN: double-free in nl80211_dump_station+0x690/0x7f0
[  164.941211][ T8162] Free of addr ffff888051120000 by task syz.3.771/8162
[  164.948089][ T8162] 
[  164.950456][ T8162] CPU: 1 UID: 0 PID: 8162 Comm: syz.3.771 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) 
[  164.950485][ T8162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  164.950499][ T8162] Call Trace:
[  164.950508][ T8162]  <TASK>
[  164.950516][ T8162]  dump_stack_lvl+0x189/0x250
[  164.950548][ T8162]  ? rcu_is_watching+0x15/0xb0
[  164.950573][ T8162]  ? __kasan_check_byte+0x12/0x40
[  164.950604][ T8162]  ? __pfx_dump_stack_lvl+0x10/0x10
[  164.950628][ T8162]  ? rcu_is_watching+0x15/0xb0
[  164.950653][ T8162]  ? lock_release+0x4b/0x3e0
[  164.950676][ T8162]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[  164.950703][ T8162]  ? __virt_addr_valid+0x1c8/0x5c0
[  164.950733][ T8162]  ? __virt_addr_valid+0x4a5/0x5c0
[  164.950763][ T8162]  print_report+0xd2/0x2b0
[  164.950784][ T8162]  ? nl80211_dump_station+0x690/0x7f0
[  164.950809][ T8162]  kasan_report_invalid_free+0xea/0x110
[  164.950840][ T8162]  ? nl80211_dump_station+0x690/0x7f0
[  164.950868][ T8162]  ? nl80211_dump_station+0x690/0x7f0
[  164.950894][ T8162]  check_slab_allocation+0xe1/0x130
[  164.950920][ T8162]  ? nl80211_dump_station+0x690/0x7f0
[  164.950944][ T8162]  kfree+0x13f/0x440
[  164.950972][ T8162]  nl80211_dump_station+0x690/0x7f0
[  164.950997][ T8162]  ? __kmalloc_node_track_caller_noprof+0x271/0x4e0
[  164.951025][ T8162]  ? kmalloc_reserve+0x136/0x290
[  164.951066][ T8162]  ? __pfx_nl80211_dump_station+0x10/0x10
[  164.951114][ T8162]  ? trace_kmalloc+0x1f/0xd0
[  164.951138][ T8162]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  164.951181][ T8162]  ? __build_skb_around+0x257/0x3e0
[  164.951216][ T8162]  genl_dumpit+0x108/0x1b0
[  164.951241][ T8162]  netlink_dump+0x62d/0xe20
[  164.951277][ T8162]  ? __pfx_netlink_dump+0x10/0x10
[  164.951313][ T8162]  ? genl_start+0x499/0x6c0
[  164.951339][ T8162]  __netlink_dump_start+0x5cb/0x7e0
[  164.951372][ T8162]  genl_family_rcv_msg_dumpit+0x1e7/0x2c0
[  164.951408][ T8162]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[  164.951431][ T8162]  ? genl_get_cmd+0x7d9/0x910
[  164.951454][ T8162]  ? __pfx_genl_start+0x10/0x10
[  164.951473][ T8162]  ? __pfx_genl_dumpit+0x10/0x10
[  164.951493][ T8162]  ? __pfx_genl_done+0x10/0x10
[  164.951523][ T8162]  genl_rcv_msg+0x5da/0x790
[  164.951548][ T8162]  ? __pfx_genl_rcv_msg+0x10/0x10
[  164.951567][ T8162]  ? ref_tracker_free+0x63a/0x7d0
[  164.951587][ T8162]  ? __pfx_nl80211_dump_station+0x10/0x10
[  164.951614][ T8162]  ? __pfx_ref_tracker_free+0x10/0x10
[  164.951640][ T8162]  netlink_rcv_skb+0x205/0x470
[  164.951671][ T8162]  ? __pfx_genl_rcv_msg+0x10/0x10
[  164.951694][ T8162]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  164.951733][ T8162]  ? down_read+0x1ad/0x2e0
[  164.951766][ T8162]  genl_rcv+0x28/0x40
[  164.951785][ T8162]  netlink_unicast+0x758/0x8d0
[  164.951818][ T8162]  netlink_sendmsg+0x805/0xb30
[  164.951853][ T8162]  ? __pfx_netlink_sendmsg+0x10/0x10
[  164.951886][ T8162]  ? aa_sock_msg_perm+0x94/0x160
[  164.951920][ T8162]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  164.951940][ T8162]  ? __pfx_netlink_sendmsg+0x10/0x10
[  164.951970][ T8162]  __sock_sendmsg+0x219/0x270
[  164.952004][ T8162]  ____sys_sendmsg+0x505/0x830
[  164.952042][ T8162]  ? __pfx_____sys_sendmsg+0x10/0x10
[  164.952082][ T8162]  ? import_iovec+0x74/0xa0
[  164.952110][ T8162]  ___sys_sendmsg+0x21f/0x2a0
[  164.952146][ T8162]  ? __pfx____sys_sendmsg+0x10/0x10
[  164.952203][ T8162]  ? __fget_files+0x2a/0x420
[  164.952232][ T8162]  ? __fget_files+0x3a0/0x420
[  164.952269][ T8162]  __x64_sys_sendmsg+0x19b/0x260
[  164.952291][ T8162]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  164.952332][ T8162]  ? rcu_is_watching+0x15/0xb0
[  164.952361][ T8162]  ? do_syscall_64+0xbe/0x3b0
[  164.952399][ T8162]  do_syscall_64+0xfa/0x3b0
[  164.952428][ T8162]  ? lockdep_hardirqs_on+0x9c/0x150
[  164.952455][ T8162]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.952477][ T8162]  ? clear_bhb_loop+0x60/0xb0
[  164.952502][ T8162]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.952524][ T8162] RIP: 0033:0x7f6d26b8e929
[  164.952545][ T8162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  164.952564][ T8162] RSP: 002b:00007f6d27a78038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  164.952587][ T8162] RAX: ffffffffffffffda RBX: 00007f6d26db5fa0 RCX: 00007f6d26b8e929
[  164.952604][ T8162] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000008
[  164.952619][ T8162] RBP: 00007f6d26c10b39 R08: 0000000000000000 R09: 0000000000000000
[  164.952632][ T8162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  164.952645][ T8162] R13: 0000000000000000 R14: 00007f6d26db5fa0 R15: 00007ffd5c3814a8
[  164.952672][ T8162]  </TASK>
[  164.952680][ T8162] 
[  165.400605][ T8162] Allocated by task 8162:
[  165.404933][ T8162]  kasan_save_track+0x3e/0x80
[  165.409621][ T8162]  __kasan_kmalloc+0x93/0xb0
[  165.414216][ T8162]  __kmalloc_cache_noprof+0x230/0x3d0
[  165.419595][ T8162]  cfg80211_sinfo_alloc_tid_stats+0x77/0x100
[  165.425586][ T8162]  sta_set_sinfo+0x1d6a/0x6990
[  165.430361][ T8162]  ieee80211_dump_station+0x111/0x1d0
[  165.435740][ T8162]  nl80211_dump_station+0x3a4/0x7f0
[  165.440942][ T8162]  genl_dumpit+0x108/0x1b0
[  165.445361][ T8162]  netlink_dump+0x62d/0xe20
[  165.449873][ T8162]  __netlink_dump_start+0x5cb/0x7e0
[  165.455078][ T8162]  genl_family_rcv_msg_dumpit+0x1e7/0x2c0
[  165.460806][ T8162]  genl_rcv_msg+0x5da/0x790
[  165.465310][ T8162]  netlink_rcv_skb+0x205/0x470
[  165.470087][ T8162]  genl_rcv+0x28/0x40
[  165.474075][ T8162]  netlink_unicast+0x758/0x8d0
[  165.478842][ T8162]  netlink_sendmsg+0x805/0xb30
[  165.483622][ T8162]  __sock_sendmsg+0x219/0x270
[  165.488308][ T8162]  ____sys_sendmsg+0x505/0x830
[  165.493087][ T8162]  ___sys_sendmsg+0x21f/0x2a0
[  165.497776][ T8162]  __x64_sys_sendmsg+0x19b/0x260
[  165.502715][ T8162]  do_syscall_64+0xfa/0x3b0
[  165.507250][ T8162]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.513148][ T8162] 
[  165.515476][ T8162] Freed by task 8162:
[  165.519452][ T8162]  kasan_save_track+0x3e/0x80
[  165.524485][ T8162]  kasan_save_free_info+0x46/0x50
[  165.529526][ T8162]  __kasan_slab_free+0x62/0x70
[  165.534296][ T8162]  kfree+0x18e/0x440
[  165.538203][ T8162]  nl80211_send_station+0xb2c/0x3d00
[  165.543498][ T8162]  nl80211_dump_station+0x4bc/0x7f0
[  165.548702][ T8162]  genl_dumpit+0x108/0x1b0
[  165.553124][ T8162]  netlink_dump+0x62d/0xe20
[  165.557634][ T8162]  __netlink_dump_start+0x5cb/0x7e0
[  165.562851][ T8162]  genl_family_rcv_msg_dumpit+0x1e7/0x2c0
[  165.568573][ T8162]  genl_rcv_msg+0x5da/0x790
[  165.573168][ T8162]  netlink_rcv_skb+0x205/0x470
[  165.577941][ T8162]  genl_rcv+0x28/0x40
[  165.581927][ T8162]  netlink_unicast+0x758/0x8d0
[  165.586696][ T8162]  netlink_sendmsg+0x805/0xb30
[  165.591467][ T8162]  __sock_sendmsg+0x219/0x270
[  165.596152][ T8162]  ____sys_sendmsg+0x505/0x830
[  165.600930][ T8162]  ___sys_sendmsg+0x21f/0x2a0
[  165.605622][ T8162]  __x64_sys_sendmsg+0x19b/0x260
[  165.610559][ T8162]  do_syscall_64+0xfa/0x3b0
[  165.615078][ T8162]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.620989][ T8162] 
[  165.623328][ T8162] The buggy address belongs to the object at ffff888051120000
[  165.623328][ T8162]  which belongs to the cache kmalloc-2k of size 2048
[  165.637379][ T8162] The buggy address is located 0 bytes inside of
[  165.637379][ T8162]  2048-byte region [ffff888051120000, ffff888051120800)
[  165.650663][ T8162] 
[  165.652996][ T8162] The buggy address belongs to the physical page:
[  165.659416][ T8162] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x51120
[  165.668188][ T8162] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  165.676685][ T8162] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  165.684247][ T8162] page_type: f5(slab)
[  165.688273][ T8162] raw: 00fff00000000040 ffff88801a442000 ffffea0001499600 dead000000000002
[  165.696874][ T8162] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000
[  165.705487][ T8162] head: 00fff00000000040 ffff88801a442000 ffffea0001499600 dead000000000002
[  165.714176][ T8162] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000
[  165.722857][ T8162] head: 00fff00000000003 ffffea0001444801 00000000ffffffff 00000000ffffffff
[  165.731536][ T8162] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  165.740211][ T8162] page dumped because: kasan: bad access detected
[  165.746641][ T8162] page_owner tracks the page as allocated
[  165.752358][ T8162] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7530, tgid 7528 (syz.2.563), ts 144994660198, free_ts 144401410165
[  165.773653][ T8162]  post_alloc_hook+0x240/0x2a0
[  165.778450][ T8162]  get_page_from_freelist+0x21e4/0x22c0
[  165.784019][ T8162]  __alloc_frozen_pages_noprof+0x181/0x370
[  165.789860][ T8162]  alloc_pages_mpol+0x232/0x4a0
[  165.794718][ T8162]  allocate_slab+0x8a/0x3b0
[  165.799224][ T8162]  ___slab_alloc+0xbfc/0x1480
[  165.803910][ T8162]  __kmalloc_cache_noprof+0x296/0x3d0
[  165.809287][ T8162]  copy_verifier_state+0x90f/0xed0
[  165.814409][ T8162]  do_check+0x4c44/0xd450
[  165.818740][ T8162]  do_check_common+0x168d/0x20b0
[  165.823677][ T8162]  bpf_check+0x13664/0x19c60
[  165.828287][ T8162]  bpf_prog_load+0x1318/0x1930
[  165.833077][ T8162]  __sys_bpf+0x5f1/0x860
[  165.837338][ T8162]  __x64_sys_bpf+0x7c/0x90
[  165.841768][ T8162]  do_syscall_64+0xfa/0x3b0
[  165.846288][ T8162]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.852196][ T8162] page last free pid 7503 tgid 7502 stack trace:
[  165.858526][ T8162]  __free_pages_ok+0xa44/0xc20
[  165.863306][ T8162]  __folio_put+0x21b/0x2c0
[  165.867733][ T8162]  free_large_kmalloc+0x145/0x200
[  165.872769][ T8162]  skb_release_data+0x62d/0x7c0
[  165.877633][ T8162]  sk_skb_reason_drop+0x127/0x170
[  165.882672][ T8162]  virtio_transport_release+0x633/0x7e0
[  165.888229][ T8162]  __vsock_release+0x9c/0x520
[  165.892913][ T8162]  __vsock_release+0x376/0x520
[  165.897684][ T8162]  vsock_release+0x99/0x100
[  165.902193][ T8162]  sock_close+0xc0/0x240
[  165.906442][ T8162]  __fput+0x449/0xa70
[  165.910428][ T8162]  task_work_run+0x1d1/0x260
[  165.915032][ T8162]  do_exit+0x6b5/0x22e0
[  165.919203][ T8162]  do_group_exit+0x21c/0x2d0
[  165.923808][ T8162]  get_signal+0x1286/0x1340
[  165.928317][ T8162]  arch_do_signal_or_restart+0x9a/0x750
[  165.933879][ T8162] 
[  165.936206][ T8162] Memory state around the buggy address:
[  165.941834][ T8162]  ffff88805111ff00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  165.949893][ T8162]  ffff88805111ff80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  165.957957][ T8162] >ffff888051120000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  165.966020][ T8162]                    ^
[  165.970093][ T8162]  ffff888051120080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  165.978155][ T8162]  ffff888051120100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  165.986220][ T8162] ==================================================================
[  166.036922][   T51] Bluetooth: hci4: command 0x0406 tx timeout
[  166.070294][ T8162] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  166.077567][ T8162] CPU: 0 UID: 0 PID: 8162 Comm: syz.3.771 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) 
[  166.089493][ T8162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  166.099593][ T8162] Call Trace:
[  166.102903][ T8162]  <TASK>
[  166.105861][ T8162]  dump_stack_lvl+0x99/0x250
[  166.110575][ T8162]  ? __asan_memcpy+0x40/0x70
[  166.115194][ T8162]  ? __pfx_dump_stack_lvl+0x10/0x10
[  166.120427][ T8162]  ? __pfx__printk+0x10/0x10
[  166.125079][ T8162]  panic+0x2db/0x790
[  166.129013][ T8162]  ? __pfx_preempt_schedule+0x10/0x10
[  166.134423][ T8162]  ? __pfx_panic+0x10/0x10
[  166.138887][ T8162]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  166.144824][ T8162]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  166.151191][ T8162]  check_panic_on_warn+0x89/0xb0
[  166.156160][ T8162]  end_report+0x78/0x160
[  166.160427][ T8162]  ? nl80211_dump_station+0x690/0x7f0
[  166.165817][ T8162]  kasan_report_invalid_free+0xfa/0x110
[  166.171390][ T8162]  ? nl80211_dump_station+0x690/0x7f0
[  166.176879][ T8162]  ? nl80211_dump_station+0x690/0x7f0
[  166.182287][ T8162]  check_slab_allocation+0xe1/0x130
[  166.187509][ T8162]  ? nl80211_dump_station+0x690/0x7f0
[  166.192898][ T8162]  kfree+0x13f/0x440
[  166.196813][ T8162]  nl80211_dump_station+0x690/0x7f0
[  166.202020][ T8162]  ? __kmalloc_node_track_caller_noprof+0x271/0x4e0
[  166.208620][ T8162]  ? kmalloc_reserve+0x136/0x290
[  166.213584][ T8162]  ? __pfx_nl80211_dump_station+0x10/0x10
[  166.219331][ T8162]  ? trace_kmalloc+0x1f/0xd0
[  166.223932][ T8162]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  166.230535][ T8162]  ? __build_skb_around+0x257/0x3e0
[  166.235758][ T8162]  genl_dumpit+0x108/0x1b0
[  166.240182][ T8162]  netlink_dump+0x62d/0xe20
[  166.244794][ T8162]  ? __pfx_netlink_dump+0x10/0x10
[  166.249836][ T8162]  ? genl_start+0x499/0x6c0
[  166.254353][ T8162]  __netlink_dump_start+0x5cb/0x7e0
[  166.259570][ T8162]  genl_family_rcv_msg_dumpit+0x1e7/0x2c0
[  166.265435][ T8162]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[  166.271683][ T8162]  ? genl_get_cmd+0x7d9/0x910
[  166.276375][ T8162]  ? __pfx_genl_start+0x10/0x10
[  166.281241][ T8162]  ? __pfx_genl_dumpit+0x10/0x10
[  166.286185][ T8162]  ? __pfx_genl_done+0x10/0x10
[  166.291052][ T8162]  genl_rcv_msg+0x5da/0x790
[  166.295573][ T8162]  ? __pfx_genl_rcv_msg+0x10/0x10
[  166.300604][ T8162]  ? ref_tracker_free+0x63a/0x7d0
[  166.305638][ T8162]  ? __pfx_nl80211_dump_station+0x10/0x10
[  166.311368][ T8162]  ? __pfx_ref_tracker_free+0x10/0x10
[  166.316756][ T8162]  netlink_rcv_skb+0x205/0x470
[  166.321534][ T8162]  ? __pfx_genl_rcv_msg+0x10/0x10
[  166.326578][ T8162]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  166.331884][ T8162]  ? down_read+0x1ad/0x2e0
[  166.336320][ T8162]  genl_rcv+0x28/0x40
[  166.340312][ T8162]  netlink_unicast+0x758/0x8d0
[  166.345099][ T8162]  netlink_sendmsg+0x805/0xb30
[  166.349884][ T8162]  ? __pfx_netlink_sendmsg+0x10/0x10
[  166.355198][ T8162]  ? aa_sock_msg_perm+0x94/0x160
[  166.360175][ T8162]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  166.365467][ T8162]  ? __pfx_netlink_sendmsg+0x10/0x10
[  166.370775][ T8162]  __sock_sendmsg+0x219/0x270
[  166.375470][ T8162]  ____sys_sendmsg+0x505/0x830
[  166.380256][ T8162]  ? __pfx_____sys_sendmsg+0x10/0x10
[  166.385571][ T8162]  ? import_iovec+0x74/0xa0
[  166.390086][ T8162]  ___sys_sendmsg+0x21f/0x2a0
[  166.394782][ T8162]  ? __pfx____sys_sendmsg+0x10/0x10
[  166.400012][ T8162]  ? __fget_files+0x2a/0x420
[  166.404621][ T8162]  ? __fget_files+0x3a0/0x420
[  166.409324][ T8162]  __x64_sys_sendmsg+0x19b/0x260
[  166.414270][ T8162]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  166.420187][ T8162]  ? rcu_is_watching+0x15/0xb0
[  166.424992][ T8162]  ? do_syscall_64+0xbe/0x3b0
[  166.429710][ T8162]  do_syscall_64+0xfa/0x3b0
[  166.434240][ T8162]  ? lockdep_hardirqs_on+0x9c/0x150
[  166.439455][ T8162]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.445540][ T8162]  ? clear_bhb_loop+0x60/0xb0
[  166.450238][ T8162]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.456143][ T8162] RIP: 0033:0x7f6d26b8e929
[  166.460566][ T8162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  166.480189][ T8162] RSP: 002b:00007f6d27a78038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  166.488615][ T8162] RAX: ffffffffffffffda RBX: 00007f6d26db5fa0 RCX: 00007f6d26b8e929
[  166.496599][ T8162] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000008
[  166.504668][ T8162] RBP: 00007f6d26c10b39 R08: 0000000000000000 R09: 0000000000000000
[  166.512657][ T8162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  166.520724][ T8162] R13: 0000000000000000 R14: 00007f6d26db5fa0 R15: 00007ffd5c3814a8
[  166.528797][ T8162]  </TASK>
[  166.532166][ T8162] Kernel Offset: disabled
[  166.536512][ T8162] Rebooting in 86400 seconds..