last executing test programs:

12.598914218s ago: executing program 1 (id=1324):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r1}, 0x10)
socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0))
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0xf}}, @volatile={0x1}, @enum64={0xf, 0x5, 0x0, 0x13, 0x1, 0x3, [{0x1, 0x1, 0x40}, {0x9, 0xef3a, 0x7}, {0xe, 0xc26c, 0x3}, {0x8, 0x8, 0x3ff}, {0x3, 0x7, 0x4}]}, @datasec={0x3, 0x8, 0x0, 0xf, 0x1, [{0x4, 0x6}, {0x5, 0x6, 0x7}, {0x3, 0x7}, {0x3, 0xeb4c, 0x75}, {0x4, 0x4, 0x8}, {0x1, 0x2, 0xf5cf}, {0x3, 0x4, 0x3}, {0x5, 0xffffffef, 0x6}], '-'}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x30, 0x0, 0x3b, 0x4}]}, {0x0, [0x5f, 0x2e]}}, &(0x7f0000000b00)=""/4096, 0x108, 0x1000, 0x1, 0x2}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="5e20443315d458724dcbf74ea6406e07d04f654759723e495c0467b4a198cf28deeb95d3e3a411f0e70c71e8fd22fb397c87cbb5e3452fe3dbc4fa2c84f9aa677ca263a6f55d3f8b8ef3bc16c444037d916f545d7ba63dd34010f19b2d18fcac37a38147c796f6", @ANYBLOB="0000000000000000b70800000000e705738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000009531de6ecf08000000aa5a41658564ab650501647b6e275b1880ad6c179ce0b246b3c035e22be09f328c8ce3d50f4d00cfbb131273db370d331c86f77c0754c4c5d6789306b3bfc3175f330881fee73c68f9ff4a029cf0ecaa8dc631db7f7627c33e4c01f32d1382a768abeaba69b0e8b2f552b713bfb2a838416924d98ce3f8f865292c5b551fffb122f1ad736171f2d3c22e41d096dabaaf0efbc4fccfc392279eeff87c7197b5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00'}, 0x10)
write$cgroup_int(r3, &(0x7f0000000200), 0x43451)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
write$cgroup_int(r4, &(0x7f0000000200), 0x43451)

10.980424992s ago: executing program 1 (id=1336):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'ip_vti0\x00', 0x1000})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9d, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), 0x0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r2, &(0x7f0000000080), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$tipc(r3, &(0x7f0000004440)={&(0x7f0000000ec0)=@id={0x1e, 0x3, 0x0, {0x4e21}}, 0x10, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local})

9.908444164s ago: executing program 1 (id=1343):
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2')
recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2)
syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3)

9.612303269s ago: executing program 2 (id=1346):
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x540, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x2, 0x0, 0x0, 0x2000000}]})

7.275849289s ago: executing program 2 (id=1350):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8992, &(0x7f0000000000)={'vlan1\x00', @broadcast})
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)
syz_clone(0x40000000, &(0x7f0000000280)="2a30053e1c3176348270ca8b9180188fc835645c38b5c342fa86e88edfa65351a46a96741fb8b27eb7a0bbf51c48d5e453c0f1988ab9e8ce16", 0x39, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', r3}, 0x18)
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000001000000000000000000000000fa677dbdc2c554729c7d4d93b517a4ebf873ad710849537c122baa91"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r7}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0xcf72dc13ae611bff, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r11 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r11}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r10}, 0x10)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r12}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10)
write$cgroup_subtree(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef)

7.241713255s ago: executing program 3 (id=1352):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000040), &(0x7f0000000180)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$unix(r4, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r3, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef)

7.22453615s ago: executing program 4 (id=1353):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc0189436, 0xf0ff1f00000000)

6.991222979s ago: executing program 3 (id=1354):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x36)

6.990805561s ago: executing program 4 (id=1355):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffd5d)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r3 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r3, &(0x7f0000000280), 0x9)
r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000001c0), 0x12)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYRES8=r0], 0x0, 0x58, 0x0, 0x0, 0x1020}, 0xfffffffffffffd36)
r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12)
openat$cgroup(r2, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0)
write$cgroup_int(r6, &(0x7f00000000c0), 0x12)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000780)={0x1, &(0x7f00000001c0)=[{0x45, 0x0, 0x2, 0x8}]})

5.630315354s ago: executing program 0 (id=1357):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8912, &(0x7f0000000080))

5.404224353s ago: executing program 0 (id=1358):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26}, 0x94)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)

4.625071466s ago: executing program 3 (id=1359):
perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x62, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x104800}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6)
write$cgroup_type(r1, &(0x7f0000000280), 0xfffffeed)
r2 = gettid()
syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/user\x00')
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0xb, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x7, 0x2}, {0xe, 0x2}, {0x4}, {0x7, 0x1}]}, @restrict={0x5}, @enum={0xc, 0x4, 0x0, 0x6, 0x4, [{0xc, 0x3}, {0xa, 0x2}, {0xe, 0x2}, {0x1}]}]}, {0x0, [0x5f, 0x5f, 0x30, 0x2e, 0x30, 0x2e, 0x2e, 0x61, 0x0]}}, &(0x7f0000000180)=""/107, 0x87, 0x6b, 0x1, 0x401}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r3, 0x20, &(0x7f00000002c0)={&(0x7f0000000200)=""/52, 0x34, 0x0, &(0x7f0000000240)=""/88, 0x58}}, 0x10)

4.564019162s ago: executing program 4 (id=1360):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48)

4.452121977s ago: executing program 0 (id=1361):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0xb}, 0x0, 0xc8, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000), 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
r4 = getpid()
write$cgroup_pid(r3, &(0x7f0000000000)=r4, 0x12)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
socketpair(0x33, 0x0, 0x20f, &(0x7f0000000340))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe777f6ade5a9283, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9e, 0x10000}, 0x0, 0x6, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080))
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r8}, 0x10)

3.678734454s ago: executing program 3 (id=1362):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x9, 0x17, 0xa, 0x40, 0x42, 0x1, 0x5}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38)

3.502018798s ago: executing program 4 (id=1363):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)

3.288462008s ago: executing program 0 (id=1364):
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r0}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})

3.218432389s ago: executing program 1 (id=1365):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80)

3.079593601s ago: executing program 1 (id=1366):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000006000000750000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r5, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a0000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x20})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a3, &(0x7f0000000080))

2.69625392s ago: executing program 2 (id=1367):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xff48, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101})
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r1}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r3}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0))

2.695795068s ago: executing program 4 (id=1368):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r3}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

2.695248916s ago: executing program 3 (id=1369):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="17010000a4fc0a000500feff"], &(0x7f0000000000)='GPL\x00', 0x6, 0xf4240, &(0x7f0000003300)=""/137, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x1000000}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

1.619701798s ago: executing program 1 (id=1370):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbfffffc, 0x0, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000740)='percpu_free_percpu\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f00000002c0)="f6eb094549002060009b8538a4ba", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
close(r7)

1.619252226s ago: executing program 0 (id=1371):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000200000000899b0a5cb27bc0dea74376badabebee2b61de0", @ANYRES32=0x0, @ANYRES32=0x0], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
close(0xffffffffffffffff)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000001280), 0x4)
sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0x2}], 0x1}, 0x20000801)
recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002)

1.603704924s ago: executing program 2 (id=1372):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x180000, 0xc8, 0x8, 0x7, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r4, 0x0, 0xfdef)

1.493776856s ago: executing program 3 (id=1373):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="17010000a4e50a0a05"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x88, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001380)={0x6, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x9e, &(0x7f0000000980)=""/158, 0x40f00, 0x5a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000c80)={0x1000, 0x1}, 0x8, 0x10, &(0x7f0000000ec0)={0x4, 0x6, 0x8, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000f00)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000f40)=[{0x3, 0x1, 0x7}], 0x10, 0x10001}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[], 0x48)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$tipc(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x21, 0x0, 0x0)
sendmsg$tipc(r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004000000000000000002000000000000000000000000000003000000000300000001000000000000000000e1432cbd4802d2366cf2c03d75a3c01b5ac168e5e9895bda4d508fca73e78ad4060c521aac39f82dab2e8b4f84b4b49b8aab693d1d0c9ac8014e81f5b7f20fae4b4cff715b58688354d506e80c6b39960cc967c2481f7a410eb98a585ec9dc286bbf5e21c6038cf841334e03c5f671f461130fd2ba8d56092f0990f2fe8271be70e275b6a0dc9dc1d6516893f2cdf5f83a"], 0x0, 0x4a}, 0x28)
socketpair(0x18, 0x0, 0x2, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0e00000004000000040000000200020000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03090000020000000000000000000000000000000000000000000000c6deba5a21a0d179a36aaae8ba02d301eebc5cab25b34842802f94db92d20cfd0be12cee718954a8b55775e1c4af78fbaa0d00000000000000972e8fc86808570e"], 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080))

1.270173514s ago: executing program 4 (id=1374):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)

439.13588ms ago: executing program 2 (id=1375):
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940))

185.96267ms ago: executing program 0 (id=1376):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cgroup.clone_children\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xa0011, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0xa100, 0xc8, 0x2, 0x7, 0x0, 0xdf5, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fscache_resize\x00', r4, 0x0, 0x3}, 0x18)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r7, &(0x7f00000005c0)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce"], 0xfdef)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r8}, 0x10)
r9 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r1}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb010018000000000000005800000058000000050000000c0000000000000205000000100000000000000400000000060000000000001101000000ffffffff10000000020000840400000008000000010000007302000009000000000000008000000002000000000000120200000000615f3000"], &(0x7f0000000700)=""/241, 0x75, 0xf1, 0x1, 0xffff, 0x10000, @value=r9}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r10, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400})

0s ago: executing program 2 (id=1377):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$tipc(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000a40)="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", 0x5a9}], 0x1}, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)

kernel console output (not intermixed with test programs):

(bridge_slave_1) entered disabled state
[   76.925785][ T5869] bridge_slave_1: entered allmulticast mode
[   76.933278][ T5869] bridge_slave_1: entered promiscuous mode
[   76.940903][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.948186][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.955334][ T5861] bridge_slave_0: entered allmulticast mode
[   76.963138][ T5861] bridge_slave_0: entered promiscuous mode
[   76.980504][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.987674][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.995282][ T5868] bridge_slave_1: entered allmulticast mode
[   77.002513][ T5868] bridge_slave_1: entered promiscuous mode
[   77.034652][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.042069][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.049352][ T5861] bridge_slave_1: entered allmulticast mode
[   77.056455][ T5861] bridge_slave_1: entered promiscuous mode
[   77.139872][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.152147][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.165369][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.187451][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.194763][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.202410][ T5856] bridge_slave_0: entered allmulticast mode
[   77.209777][ T5856] bridge_slave_0: entered promiscuous mode
[   77.232184][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.270854][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.283646][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.293175][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.300718][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.307873][ T5856] bridge_slave_1: entered allmulticast mode
[   77.315156][ T5856] bridge_slave_1: entered promiscuous mode
[   77.393227][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.403095][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.410352][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.417557][ T5860] bridge_slave_0: entered allmulticast mode
[   77.425745][ T5860] bridge_slave_0: entered promiscuous mode
[   77.434897][ T5868] team0: Port device team_slave_0 added
[   77.444620][ T5868] team0: Port device team_slave_1 added
[   77.451958][ T5869] team0: Port device team_slave_0 added
[   77.471542][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.492661][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.500332][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.507643][ T5860] bridge_slave_1: entered allmulticast mode
[   77.515295][ T5860] bridge_slave_1: entered promiscuous mode
[   77.549022][ T5869] team0: Port device team_slave_1 added
[   77.556931][ T5861] team0: Port device team_slave_0 added
[   77.612124][ T5861] team0: Port device team_slave_1 added
[   77.629029][ T5859] Bluetooth: hci0: command tx timeout
[   77.637408][ T5856] team0: Port device team_slave_0 added
[   77.646175][ T5856] team0: Port device team_slave_1 added
[   77.654325][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.665574][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.672582][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.698811][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.709539][   T51] Bluetooth: hci2: command tx timeout
[   77.714928][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.715321][ T5859] Bluetooth: hci1: command tx timeout
[   77.727866][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.753810][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.777875][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.784967][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.811051][ T5859] Bluetooth: hci4: command tx timeout
[   77.811508][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.827141][ T5859] Bluetooth: hci3: command tx timeout
[   77.845856][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.886345][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.893702][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.920036][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.958864][ T5860] team0: Port device team_slave_0 added
[   77.965441][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.972456][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.999354][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.017402][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.024919][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.051660][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.065962][ T5860] team0: Port device team_slave_1 added
[   78.085365][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.092469][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.119455][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.139789][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.146749][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.173457][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.245612][ T5869] hsr_slave_0: entered promiscuous mode
[   78.252552][ T5869] hsr_slave_1: entered promiscuous mode
[   78.273025][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.280045][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.306761][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.351138][ T5868] hsr_slave_0: entered promiscuous mode
[   78.357530][ T5868] hsr_slave_1: entered promiscuous mode
[   78.364037][ T5868] debugfs: 'hsr0' already exists in 'hsr'
[   78.369965][ T5868] Cannot create hsr debugfs directory
[   78.376293][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.383718][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.409803][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.426613][ T5861] hsr_slave_0: entered promiscuous mode
[   78.433847][ T5861] hsr_slave_1: entered promiscuous mode
[   78.440305][ T5861] debugfs: 'hsr0' already exists in 'hsr'
[   78.446042][ T5861] Cannot create hsr debugfs directory
[   78.577612][ T5856] hsr_slave_0: entered promiscuous mode
[   78.584042][ T5856] hsr_slave_1: entered promiscuous mode
[   78.590900][ T5856] debugfs: 'hsr0' already exists in 'hsr'
[   78.596665][ T5856] Cannot create hsr debugfs directory
[   78.672503][ T5860] hsr_slave_0: entered promiscuous mode
[   78.679220][ T5860] hsr_slave_1: entered promiscuous mode
[   78.685241][ T5860] debugfs: 'hsr0' already exists in 'hsr'
[   78.691964][ T5860] Cannot create hsr debugfs directory
[   79.193586][ T5869] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   79.213027][ T5869] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   79.225387][ T5869] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   79.252515][ T5869] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   79.337479][ T5861] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   79.351690][ T5861] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   79.375838][ T5861] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   79.398039][ T5861] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   79.462723][ T5868] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   79.476977][ T5868] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   79.490581][ T5868] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   79.513784][ T5868] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   79.597553][ T5856] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   79.617598][ T5856] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   79.632884][ T5856] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   79.669033][ T5856] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   79.709987][ T5859] Bluetooth: hci0: command tx timeout
[   79.772780][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.788514][   T51] Bluetooth: hci2: command tx timeout
[   79.794001][ T5859] Bluetooth: hci1: command tx timeout
[   79.811947][ T5869] 8021q: adding VLAN 0 to HW filter on device team0
[   79.844478][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.851756][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.862758][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.869889][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.879522][   T51] Bluetooth: hci4: command tx timeout
[   79.885014][ T5859] Bluetooth: hci3: command tx timeout
[   79.897623][ T5860] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   79.934852][ T5860] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   79.946934][ T5860] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   79.963948][ T5860] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   80.026448][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.054153][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.093243][ T5868] 8021q: adding VLAN 0 to HW filter on device team0
[   80.119809][ T5861] 8021q: adding VLAN 0 to HW filter on device team0
[   80.136349][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.143631][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.159647][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.166765][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.214032][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.221584][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.294860][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.302063][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.407244][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.508051][ T5856] 8021q: adding VLAN 0 to HW filter on device team0
[   80.526916][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.534148][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.565201][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.611704][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.618918][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.657089][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.715997][ T5860] 8021q: adding VLAN 0 to HW filter on device team0
[   80.767607][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.774810][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.822863][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.830061][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.014052][ T5869] veth0_vlan: entered promiscuous mode
[   81.033994][ T5869] veth1_vlan: entered promiscuous mode
[   81.051351][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.079367][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.167624][ T5869] veth0_macvtap: entered promiscuous mode
[   81.201003][ T5869] veth1_macvtap: entered promiscuous mode
[   81.256577][ T5861] veth0_vlan: entered promiscuous mode
[   81.312763][ T5861] veth1_vlan: entered promiscuous mode
[   81.351817][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.415573][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.446629][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.485148][ T2987] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.499967][ T2987] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.522342][ T5861] veth0_macvtap: entered promiscuous mode
[   81.536287][ T2987] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.545168][ T2987] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.561785][ T5861] veth1_macvtap: entered promiscuous mode
[   81.654401][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.690381][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.705494][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.784136][ T1150] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.805609][ T5859] Bluetooth: hci0: command tx timeout
[   81.823254][ T1150] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.836944][ T1150] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.848383][ T2987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.856310][ T2987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.868431][ T5859] Bluetooth: hci1: command tx timeout
[   81.873968][ T5859] Bluetooth: hci2: command tx timeout
[   81.906246][ T5856] veth0_vlan: entered promiscuous mode
[   81.949354][   T51] Bluetooth: hci4: command tx timeout
[   81.954880][ T5859] Bluetooth: hci3: command tx timeout
[   81.968814][ T1150] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.982626][ T5868] veth0_vlan: entered promiscuous mode
[   82.121672][ T5868] veth1_vlan: entered promiscuous mode
[   82.136191][ T5856] veth1_vlan: entered promiscuous mode
[   82.154316][ T5860] veth0_vlan: entered promiscuous mode
[   82.168595][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.180440][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.220288][ T5860] veth1_vlan: entered promiscuous mode
[   82.233174][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.253670][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.314462][ T5869] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   82.353719][ T5856] veth0_macvtap: entered promiscuous mode
[   82.381337][ T5868] veth0_macvtap: entered promiscuous mode
[   82.402868][ T5868] veth1_macvtap: entered promiscuous mode
[   82.416753][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.434582][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.443282][ T5856] veth1_macvtap: entered promiscuous mode
[   82.453781][ T5860] veth0_macvtap: entered promiscuous mode
[   82.467005][ T5860] veth1_macvtap: entered promiscuous mode
[   82.501586][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.536004][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.547999][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.592450][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.607426][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.632490][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.645670][   T56] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.654879][   T56] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.699433][   T56] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.720387][   T56] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.740952][   T56] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.772860][   T56] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.799891][ T2987] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.839632][ T2987] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.846026][ T5984] Zero length message leads to an empty skb
[   82.851916][ T2987] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.863360][ T5984] netlink: 'syz.1.6': attribute type 2 has an invalid length.
[   82.875377][ T5984] netlink: 'syz.1.6': attribute type 8 has an invalid length.
[   82.883599][ T5984] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6'.
[   82.932884][ T2987] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.943842][ T2987] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.975032][ T2987] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.026565][ T2987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.035554][ T2987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.104670][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.124237][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.203187][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.227113][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.241988][ T5989] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   83.291534][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.305389][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.436794][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.471545][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.528103][    C1] hrtimer: interrupt took 44209 ns
[   83.700081][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.733327][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.852115][ T6002] netlink: 208344 bytes leftover after parsing attributes in process `syz.4.5'.
[   83.874261][ T5859] Bluetooth: hci0: command tx timeout
[   83.899038][ T6002] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   83.923436][ T6002] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   83.949989][ T5859] Bluetooth: hci2: command tx timeout
[   83.955525][ T5859] Bluetooth: hci1: command tx timeout
[   84.028472][ T5859] Bluetooth: hci3: command tx timeout
[   84.033958][ T5859] Bluetooth: hci4: command tx timeout
[   84.062530][ T6004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11'.
[   84.374643][ T6020] netlink: 'syz.3.16': attribute type 21 has an invalid length.
[   84.410066][ T6021] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.15'.
[   84.705956][ T6029] warning: `syz.4.18' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   85.193576][ T6038] netlink: 'syz.4.22': attribute type 4 has an invalid length.
[   85.265827][ T6038] netlink: 140 bytes leftover after parsing attributes in process `syz.4.22'.
[   85.349116][ T6045] netlink: 'syz.0.23': attribute type 4 has an invalid length.
[   85.368705][ T6045] netlink: 152 bytes leftover after parsing attributes in process `syz.0.23'.
[   85.423846][ T6045] : renamed from bond0 (while UP)
[   85.811119][ T6056] netlink: 'syz.4.27': attribute type 21 has an invalid length.
[   85.874859][ T6056] netlink: 132 bytes leftover after parsing attributes in process `syz.4.27'.
[   86.517850][ T6068] netlink: 60 bytes leftover after parsing attributes in process `syz.0.31'.
[   86.544637][ T6067] netlink: 60 bytes leftover after parsing attributes in process `syz.0.31'.
[   86.710236][ T6073] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.30'.
[   86.743788][ T6073] bridge: RTM_NEWNEIGH with invalid state 0x1
[   86.840135][   T92] cfg80211: failed to load regulatory.db
[   87.219854][ T6075] bridge_slave_1: left allmulticast mode
[   87.264534][ T6092] netlink: 'syz.3.36': attribute type 21 has an invalid length.
[   87.277551][ T6075] bridge_slave_1: left promiscuous mode
[   87.313646][ T6065] delete_channel: no stack
[   87.328400][ T6075] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.449362][ T6075] bridge_slave_0: left allmulticast mode
[   89.455553][ T6075] bridge_slave_0: left promiscuous mode
[   89.484184][ T6075] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.950705][ T6114] netlink: 'syz.3.42': attribute type 10 has an invalid length.
[   90.001903][ T6114] bond0: (slave bond_slave_0): Releasing backup interface
[   90.135784][ T6133] sctp: [Deprecated]: syz.1.49 (pid 6133) Use of int in max_burst socket option deprecated.
[   90.135784][ T6133] Use struct sctp_assoc_value instead
[   90.202846][ T6135] __nla_validate_parse: 1 callbacks suppressed
[   90.202866][ T6135] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.48'.
[   90.347848][ T6141] netlink: 'syz.3.51': attribute type 8 has an invalid length.
[   90.383460][ T6141] netlink: 156 bytes leftover after parsing attributes in process `syz.3.51'.
[   90.565108][ T6152] netlink: 'syz.4.56': attribute type 17 has an invalid length.
[   90.646614][ T6150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.54'.
[   90.753176][ T6159] netlink: 'syz.1.59': attribute type 10 has an invalid length.
[   90.765461][ T6159] netlink: 40 bytes leftover after parsing attributes in process `syz.1.59'.
[   90.798599][ T6159] batman_adv: batadv0: Adding interface: vlan1
[   90.806852][ T6159] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.877819][ T6159] batman_adv: batadv0: Interface activated: vlan1
[   90.910389][ T6167] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.58'.
[   93.442885][ T6209] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   94.440575][ T6236] syz.2.78 (6236) used obsolete PPPIOCDETACH ioctl
[   94.452784][ T6247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.81'.
[   94.498406][ T6247] netlink: 'syz.3.81': attribute type 1 has an invalid length.
[   94.539082][ T6250] netlink: 132 bytes leftover after parsing attributes in process `syz.2.78'.
[   94.551069][ T6247] netlink: 'syz.3.81': attribute type 2 has an invalid length.
[   94.576642][ T6247] netlink: 'syz.3.81': attribute type 3 has an invalid length.
[   94.584653][ T6247] netlink: 'syz.3.81': attribute type 5 has an invalid length.
[   94.598110][ T6247] netlink: 'syz.3.81': attribute type 6 has an invalid length.
[   94.605702][ T6247] netlink: 'syz.3.81': attribute type 7 has an invalid length.
[   94.617763][ T6247] netlink: 130140 bytes leftover after parsing attributes in process `syz.3.81'.
[   94.626974][ T6247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.81'.
[   94.652831][ T6248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.81'.
[   94.804375][ T6252] syzkaller0: entered promiscuous mode
[   94.810360][ T6252] syzkaller0: entered allmulticast mode
[   94.845356][ T6261] 8021q: adding VLAN 0 to HW filter on device team0
[   94.904090][ T6261] : (slave team0): Enslaving as an active interface with an up link
[   97.828123][ T6282] __nla_validate_parse: 3 callbacks suppressed
[   97.828143][ T6282] netlink: 160 bytes leftover after parsing attributes in process `syz.0.91'.
[   98.066580][ T6296] validate_nla: 8 callbacks suppressed
[   98.066612][ T6296] netlink: 'syz.0.96': attribute type 2 has an invalid length.
[   98.158325][ T6296] netlink: 'syz.0.96': attribute type 8 has an invalid length.
[   98.194427][ T6296] netlink: 44 bytes leftover after parsing attributes in process `syz.0.96'.
[   98.561720][ T6313] Illegal XDP return value 4294967274 on prog  (id 76) dev N/A, expect packet loss!
[   98.787678][ T6323] netlink: 'syz.1.104': attribute type 10 has an invalid length.
[   98.835882][ T6323] team0: Port device geneve1 added
[   99.142154][ T6328] netlink: 'syz.1.106': attribute type 3 has an invalid length.
[   99.172174][ T6328] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.106'.
[  100.550747][ T6355] netlink: 10 bytes leftover after parsing attributes in process `syz.1.110'.
[  100.848633][ T6365] netlink: 60 bytes leftover after parsing attributes in process `syz.1.115'.
[  101.030869][ T6380] netlink: 'syz.4.119': attribute type 46 has an invalid length.
[  101.067447][ T6380] netlink: 22 bytes leftover after parsing attributes in process `syz.4.119'.
[  101.085893][ T6385] veth1_macvtap: entered allmulticast mode
[  101.239627][ T6397] netlink: 830 bytes leftover after parsing attributes in process `syz.2.124'.
[  101.512272][ T6407] netlink: 168 bytes leftover after parsing attributes in process `syz.2.127'.
[  101.606218][ T6409] delete_channel: no stack
[  101.642532][ T6409] delete_channel: no stack
[  101.870756][ T6416] netlink: 'syz.2.130': attribute type 21 has an invalid length.
[  102.042033][ T6416] netlink: 156 bytes leftover after parsing attributes in process `syz.2.130'.
[  102.110218][ T6423] netlink: 132 bytes leftover after parsing attributes in process `syz.0.132'.
[  102.324341][ T6425] netlink: 'syz.0.133': attribute type 4 has an invalid length.
[  102.437322][   T13] syzkaller0: tun_net_xmit 76
[  102.452859][   T13] syzkaller0: tun_net_xmit 48
[  102.458541][ T5914] syzkaller0: tun_net_xmit 76
[  102.528380][ T5914] syzkaller0: tun_net_xmit 76
[  104.954986][ T6497] netlink: 'syz.3.153': attribute type 29 has an invalid length.
[  104.991509][ T6497] netlink: 'syz.3.153': attribute type 29 has an invalid length.
[  105.168377][ T6499] netlink: 'syz.0.154': attribute type 10 has an invalid length.
[  105.176479][ T6499] team0: Device ip6_vti0 is of different type
[  105.659929][ T6512] netlink: 'syz.0.159': attribute type 39 has an invalid length.
[  107.007898][ T6527] netlink: 'syz.1.162': attribute type 10 has an invalid length.
[  107.035481][ T6527] netlink: 40 bytes leftover after parsing attributes in process `syz.1.162'.
[  108.618369][ T6527] dummy0: entered promiscuous mode
[  108.809542][ T6538] netlink: 'syz.1.166': attribute type 23 has an invalid length.
[  109.107502][ T6547] netlink: 'syz.3.168': attribute type 29 has an invalid length.
[  109.218299][ T6550] netlink: 'syz.3.168': attribute type 29 has an invalid length.
[  109.926022][ T6554] netlink: 'syz.1.170': attribute type 3 has an invalid length.
[  109.935496][ T6554] netlink: 152 bytes leftover after parsing attributes in process `syz.1.170'.
[  110.602551][ T6569] netlink: 3815 bytes leftover after parsing attributes in process `syz.4.173'.
[  110.816952][ T6575] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.176'.
[  111.319011][ T6590] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  111.793520][ T6603] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.183'.
[  112.106756][ T5859] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18
[  114.280930][ T5859] Bluetooth: hci3: command tx timeout
[  115.152857][ T6611] netlink: 830 bytes leftover after parsing attributes in process `syz.1.185'.
[  115.426063][ T6630] netlink: 'syz.4.190': attribute type 10 has an invalid length.
[  116.495460][ T6666] netlink: 132 bytes leftover after parsing attributes in process `syz.2.196'.
[  116.590052][ T5859] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  116.834390][ T6669] netlink: 1053 bytes leftover after parsing attributes in process `syz.3.200'.
[  116.853133][ T6671] netlink: 'syz.4.199': attribute type 2 has an invalid length.
[  116.885378][ T6671] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.199'.
[  117.313732][ T6701] netlink: 'syz.1.206': attribute type 1 has an invalid length.
[  117.398698][ T6701] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.206'.
[  120.908950][ T6735] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.214'.
[  123.974542][ T6783] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  124.797306][ T6797] syz.4.229 uses obsolete (PF_INET,SOCK_PACKET)
[  124.809173][ T6798] ksmbd: Unknown IPC event: 3, ignore.
[  126.377756][ T6836] netlink: 2515 bytes leftover after parsing attributes in process `syz.4.241'.
[  129.952151][ T6873] syzkaller0: entered promiscuous mode
[  129.958400][ T6873] syzkaller0: entered allmulticast mode
[  132.282072][ T6911] netlink: 10 bytes leftover after parsing attributes in process `syz.2.257'.
[  132.836636][ T6942] netlink: 56 bytes leftover after parsing attributes in process `syz.0.266'.
[  132.955934][ T6939] netlink: 196 bytes leftover after parsing attributes in process `syz.0.266'.
[  133.045233][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  133.052370][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  133.144304][ T6952] ksmbd: Unknown IPC event: 3, ignore.
[  133.270104][ T6954] netlink: 180 bytes leftover after parsing attributes in process `syz.3.270'.
[  133.447452][ T6952] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.269'.
[  133.679381][ T6972] netlink: 'syz.2.275': attribute type 21 has an invalid length.
[  134.403213][ T6995] netlink: 156 bytes leftover after parsing attributes in process `syz.2.283'.
[  134.457457][ T6996] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.282'.
[  134.540525][ T6998] netlink: 'syz.2.283': attribute type 10 has an invalid length.
[  134.570695][ T6999] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.282'.
[  134.625953][ T6998] 8021q: adding VLAN 0 to HW filter on device batadv0
[  134.628689][ T7002] netlink: 'syz.2.283': attribute type 10 has an invalid length.
[  134.664278][ T7002] netlink: 40 bytes leftover after parsing attributes in process `syz.2.283'.
[  134.716542][ T6998] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  134.810818][ T7002] batadv0: entered promiscuous mode
[  134.829553][ T7002] batadv0: entered allmulticast mode
[  134.895589][ T7002] bond0: (slave batadv0): Releasing backup interface
[  134.916682][ T7002] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  134.955277][ T7007] syzkaller0: entered promiscuous mode
[  134.968725][ T7007] syzkaller0: entered allmulticast mode
[  135.466095][ T7019] syzkaller0: entered promiscuous mode
[  135.474890][ T7019] syzkaller0: entered allmulticast mode
[  135.549251][ T7021] netlink: 'syz.3.288': attribute type 21 has an invalid length.
[  135.703239][ T7021] netlink: 'syz.3.288': attribute type 1 has an invalid length.
[  136.174240][ T7033] netlink: 'syz.4.293': attribute type 10 has an invalid length.
[  136.604530][ T7055] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.297'.
[  137.260860][ T7070] netlink: 'syz.2.302': attribute type 21 has an invalid length.
[  137.276764][ T7067] netlink: 'syz.0.303': attribute type 4 has an invalid length.
[  137.290482][ T7067] __nla_validate_parse: 1 callbacks suppressed
[  137.290505][ T7067] netlink: 152 bytes leftover after parsing attributes in process `syz.0.303'.
[  137.325810][ T7070] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.302'.
[  137.342335][ T7075] delete_channel: no stack
[  137.356028][ T7070] netlink: 'syz.2.302': attribute type 21 has an invalid length.
[  137.369111][ T7070] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.302'.
[  137.380762][ T7061] netlink: 44 bytes leftover after parsing attributes in process `syz.3.301'.
[  137.392493][ T7075] delete_channel: no stack
[  137.425057][ T7067] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  137.442814][ T7070] netlink: 'syz.2.302': attribute type 21 has an invalid length.
[  137.456796][ T7070] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.302'.
[  137.562748][ T7070] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.302'.
[  137.662140][ T7070] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.302'.
[  137.796220][ T7065] netlink: 44 bytes leftover after parsing attributes in process `syz.3.301'.
[  137.830041][ T7070] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.302'.
[  137.891559][ T7077] netlink: 44 bytes leftover after parsing attributes in process `syz.3.301'.
[  140.312934][ T7161] validate_nla: 48 callbacks suppressed
[  140.312952][ T7161] netlink: 'syz.3.325': attribute type 10 has an invalid length.
[  140.629337][ T7175] netlink: 'syz.4.329': attribute type 21 has an invalid length.
[  141.426306][ T7205] netlink: 'syz.3.340': attribute type 3 has an invalid length.
[  142.035468][   T51] Bluetooth: hci2: unexpected event 0x23 length: 15 > 13
[  142.079315][ T7235] netlink: 'syz.2.348': attribute type 10 has an invalid length.
[  142.232027][ T7247] netlink: 'syz.0.350': attribute type 2 has an invalid length.
[  142.250359][ T7247] netlink: 'syz.0.350': attribute type 1 has an invalid length.
[  142.266058][ T7235] hsr_slave_0 (unregistering): left promiscuous mode
[  142.266156][ T7247] block nbd5: not configured, cannot reconfigure
[  142.630398][ T7262] netlink: 'syz.1.352': attribute type 10 has an invalid length.
[  142.663639][ T7262] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.687565][ T7262] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.756988][ T7264] netlink: 'syz.1.352': attribute type 4 has an invalid length.
[  142.846855][ T7264] __nla_validate_parse: 50 callbacks suppressed
[  142.846874][ T7264] netlink: 152 bytes leftover after parsing attributes in process `syz.1.352'.
[  142.923051][ T7262] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.935333][ T7262] bridge0: port 2(bridge_slave_1) entered forwarding state
[  142.953145][ T7262] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.964101][ T7262] bridge0: port 1(bridge_slave_0) entered forwarding state
[  143.113711][ T7262] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  143.124011][ T7262] syz.1.352 (7262) used greatest stack depth: 19896 bytes left
[  143.134865][ T7273] netlink: 'syz.4.354': attribute type 6 has an invalid length.
[  143.167898][ T7273] netlink: 168 bytes leftover after parsing attributes in process `syz.4.354'.
[  143.196792][ T7272] netlink: 184 bytes leftover after parsing attributes in process `syz.4.354'.
[  143.396051][ T7278] netlink: 180 bytes leftover after parsing attributes in process `syz.2.356'.
[  143.584276][ T7285] netlink: 'syz.3.355': attribute type 10 has an invalid length.
[  143.824021][ T7285] team0: Port device wlan1 added
[  146.236623][ T7340] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.372'.
[  146.248705][ T7340] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  146.330629][ T7345] netlink: 128 bytes leftover after parsing attributes in process `syz.2.372'.
[  146.378458][ T7345] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  146.430674][ T7342] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.373'.
[  146.818916][ T7354] netlink: 132 bytes leftover after parsing attributes in process `syz.2.376'.
[  146.981623][ T7359] netlink: 60 bytes leftover after parsing attributes in process `syz.3.378'.
[  146.986531][ T7364] validate_nla: 1 callbacks suppressed
[  146.986550][ T7364] netlink: 'syz.4.379': attribute type 4 has an invalid length.
[  147.009795][ T7364] netlink: 152 bytes leftover after parsing attributes in process `syz.4.379'.
[  147.028927][ T7364] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  147.193905][ T7369] netlink: 'syz.3.381': attribute type 10 has an invalid length.
[  147.225650][ T7369] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  147.274770][ T7369] netlink: 'syz.3.381': attribute type 10 has an invalid length.
[  147.497661][ T7350] syz.0.375 (7350) used greatest stack depth: 19768 bytes left
[  147.926428][ T7394] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.389'.
[  148.568743][ T7409] : entered promiscuous mode
[  148.629120][ T7409] : entered allmulticast mode
[  150.102697][ T7455] netlink: 'syz.2.407': attribute type 6 has an invalid length.
[  150.133048][ T7455] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.407'.
[  150.475226][ T7473] netlink: 'syz.1.412': attribute type 3 has an invalid length.
[  150.547303][ T7473] netlink: 201244 bytes leftover after parsing attributes in process `syz.1.412'.
[  150.596544][   T51] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4
[  150.888402][ T7485] netlink: 'syz.1.416': attribute type 10 has an invalid length.
[  150.929669][ T7486] netlink: 168 bytes leftover after parsing attributes in process `syz.2.414'.
[  151.073983][ T7485] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  151.118124][ T7485] syzkaller0: entered promiscuous mode
[  151.123642][ T7485] syzkaller0: entered allmulticast mode
[  151.266536][ T7496] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.418'.
[  152.083978][ T7527] netlink: 132 bytes leftover after parsing attributes in process `syz.4.428'.
[  152.175362][ T7527] netlink: 208344 bytes leftover after parsing attributes in process `syz.4.428'.
[  152.184723][ T7527] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  152.193723][ T7527] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  152.633141][ T7536] netlink: 196 bytes leftover after parsing attributes in process `syz.0.431'.
[  152.793413][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.433'.
[  152.873382][ T7538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.433'.
[  153.107746][ T7538] netlink: 2 bytes leftover after parsing attributes in process `syz.4.433'.
[  153.182530][ T7538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.433'.
[  153.197098][ T7538] netlink: 2 bytes leftover after parsing attributes in process `syz.4.433'.
[  153.367384][ T7550] pim6reg1: entered allmulticast mode
[  154.059427][ T7571] netlink: 'syz.4.439': attribute type 3 has an invalid length.
[  154.209775][ T7580] netlink: 'syz.4.439': attribute type 2 has an invalid length.
[  154.209798][ T7580] netlink: 'syz.4.439': attribute type 1 has an invalid length.
[  154.209812][ T7580] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.439'.
[  154.209838][ T7580] block nbd5: not configured, cannot reconfigure
[  154.606880][ T7571] netlink: 132 bytes leftover after parsing attributes in process `syz.4.439'.
[  155.649357][ T7611] netlink: 'syz.1.450': attribute type 4 has an invalid length.
[  155.670092][ T7611] netlink: 152 bytes leftover after parsing attributes in process `syz.1.450'.
[  155.742601][ T7611] wlan1: mtu less than device minimum
[  155.797698][ T7618] : renamed from bond0 (while UP)
[  156.123522][ T7627] netlink: 'syz.2.454': attribute type 29 has an invalid length.
[  156.390108][ T7631] cgroup: fork rejected by pids controller in /syz3
[  157.104775][ T7628] netlink: 'syz.2.454': attribute type 29 has an invalid length.
[  157.133807][ T7629] netlink: 'syz.2.454': attribute type 29 has an invalid length.
[  157.141654][ T7745] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.459'.
[  157.187062][ T7625] netlink: 'syz.2.454': attribute type 29 has an invalid length.
[  157.520906][ T7756] TCP: TCP_TX_DELAY enabled
[  157.702655][ T1091] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.838856][ T1091] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.975275][ T1091] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.070858][ T7763] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.466'.
[  158.094330][ T7765] netlink: 'syz.0.465': attribute type 21 has an invalid length.
[  158.137490][ T1091] bond0: (slave netdevsim0): Releasing backup interface
[  158.169883][ T1091] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.208952][ T7763] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.466'.
[  158.672700][ T7769] syzkaller0: entered promiscuous mode
[  158.685238][ T7769] syzkaller0: entered allmulticast mode
[  159.011686][ T5859] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  159.021157][ T5859] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  159.029716][ T5859] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  159.037766][ T5859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  159.045821][ T5859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  160.926326][ T7800] netlink: 830 bytes leftover after parsing attributes in process `syz.1.473'.
[  160.955952][ T1091] bridge_slave_1: left allmulticast mode
[  160.978854][ T1091] bridge_slave_1: left promiscuous mode
[  160.985838][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.060304][ T1091] bridge_slave_0: left allmulticast mode
[  161.066247][ T1091] bridge_slave_0: left promiscuous mode
[  161.085723][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.152192][ T5859] Bluetooth: hci3: command tx timeout
[  162.285407][ T1091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  162.295989][ T1091] bond0 (unregistering): Released all slaves
[  162.515463][ T1091] team0: Port device wlan1 removed
[  162.913474][ T7910] netlink: 'syz.2.497': attribute type 21 has an invalid length.
[  163.193981][ T1091] hsr_slave_0: left promiscuous mode
[  163.205203][ T1091] hsr_slave_1: left promiscuous mode
[  163.224749][ T1091] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  163.229214][ T5859] Bluetooth: hci3: command tx timeout
[  163.233522][ T1091] batman_adv: batadv0: Removing interface: batadv_slave_0
[  163.266590][ T1091] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  163.301716][ T1091] batman_adv: batadv0: Removing interface: batadv_slave_1
[  163.481342][ T1091] veth1_macvtap: left promiscuous mode
[  163.487229][ T1091] veth0_macvtap: left promiscuous mode
[  163.512970][ T1091] veth1_vlan: left promiscuous mode
[  163.528775][ T1091] veth0_vlan: left promiscuous mode
[  164.247345][ T1091] team0 (unregistering): Port device team_slave_1 removed
[  164.286763][ T1091] team0 (unregistering): Port device team_slave_0 removed
[  165.120762][ T7958] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.504'.
[  165.311495][ T5859] Bluetooth: hci3: command tx timeout
[  165.397619][ T7809] chnl_net:caif_netlink_parms(): no params data found
[  165.447635][ T7956] -1: renamed from syzkaller0
[  166.821148][ T7988] syzkaller1: tun_chr_ioctl cmd 2148553947
[  166.883611][ T8001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.512'.
[  166.993531][ T8001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.512'.
[  167.008587][ T8001] netlink: 2 bytes leftover after parsing attributes in process `syz.2.512'.
[  167.017732][ T8001] bridge_slave_0: entered allmulticast mode
[  167.029927][ T8001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.512'.
[  167.063008][ T8001] netlink: 2 bytes leftover after parsing attributes in process `syz.2.512'.
[  167.089256][ T8003] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.512'.
[  167.103969][ T8006] FAULT_INJECTION: forcing a failure.
[  167.103969][ T8006] name failslab, interval 1, probability 0, space 0, times 1
[  167.126389][ T7809] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.155797][ T7809] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.158198][ T8006] CPU: 0 UID: 0 PID: 8006 Comm: syz.1.513 Not tainted 6.16.0-syzkaller-gf3af62b6cee8 #0 PREEMPT(full) 
[  167.158220][ T8006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  167.158237][ T8006] Call Trace:
[  167.158246][ T8006]  <TASK>
[  167.158253][ T8006]  dump_stack_lvl+0x189/0x250
[  167.158291][ T8006]  ? __pfx____ratelimit+0x10/0x10
[  167.158311][ T8006]  ? __pfx_dump_stack_lvl+0x10/0x10
[  167.158331][ T8006]  ? __pfx__printk+0x10/0x10
[  167.158373][ T8006]  should_fail_ex+0x414/0x560
[  167.158406][ T8006]  should_failslab+0xa8/0x100
[  167.158432][ T8006]  __kmalloc_cache_noprof+0x70/0x3d0
[  167.158454][ T8006]  ? sctp_add_bind_addr+0x8c/0x370
[  167.158485][ T8006]  sctp_add_bind_addr+0x8c/0x370
[  167.158516][ T8006]  sctp_copy_local_addr_list+0x30b/0x4e0
[  167.158545][ T8006]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  167.158570][ T8006]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  167.158601][ T8006]  ? sctp_v4_is_any+0x35/0x60
[  167.158620][ T8006]  ? sctp_copy_one_addr+0x93/0x360
[  167.158650][ T8006]  sctp_bind_addr_copy+0x189/0x3c0
[  167.158684][ T8006]  sctp_connect_new_asoc+0x2e0/0x690
[  167.158708][ T8006]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  167.158726][ T8006]  ? __local_bh_enable_ip+0x12d/0x1c0
[  167.158753][ T8006]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  167.158772][ T8006]  ? security_sctp_bind_connect+0x7e/0x2e0
[  167.158795][ T8006]  sctp_sendmsg+0x155c/0x2810
[  167.158831][ T8006]  ? __pfx_sctp_sendmsg+0x10/0x10
[  167.158855][ T8006]  ? aa_sk_perm+0x81e/0x950
[  167.158882][ T8006]  ? __pfx_aa_sk_perm+0x10/0x10
[  167.158906][ T8006]  ? __might_fault+0xb0/0x130
[  167.158925][ T8006]  ? sock_rps_record_flow+0x19/0x410
[  167.158954][ T8006]  ? inet_sendmsg+0x2f4/0x370
[  167.158982][ T8006]  __sock_sendmsg+0x19c/0x270
[  167.159011][ T8006]  ____sys_sendmsg+0x505/0x830
[  167.159045][ T8006]  ? __pfx_____sys_sendmsg+0x10/0x10
[  167.159078][ T8006]  ? import_iovec+0x74/0xa0
[  167.159105][ T8006]  ___sys_sendmsg+0x21f/0x2a0
[  167.159129][ T8006]  ? __pfx____sys_sendmsg+0x10/0x10
[  167.159178][ T8006]  ? __fget_files+0x2a/0x420
[  167.159218][ T8006]  ? __fget_files+0x2a/0x420
[  167.159240][ T8006]  ? __fget_files+0x3a0/0x420
[  167.159275][ T8006]  __x64_sys_sendmsg+0x19b/0x260
[  167.159300][ T8006]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  167.159338][ T8006]  ? rcu_is_watching+0x15/0xb0
[  167.159356][ T8006]  ? trace_sys_enter+0x25/0x100
[  167.159387][ T8006]  do_syscall_64+0xfa/0x3b0
[  167.159403][ T8006]  ? lockdep_hardirqs_on+0x9c/0x150
[  167.159420][ T8006]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.159437][ T8006]  ? clear_bhb_loop+0x60/0xb0
[  167.159459][ T8006]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.159475][ T8006] RIP: 0033:0x7f14dcb8eb69
[  167.159496][ T8006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  167.159509][ T8006] RSP: 002b:00007f14dd93d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  167.159528][ T8006] RAX: ffffffffffffffda RBX: 00007f14dcdb5fa0 RCX: 00007f14dcb8eb69
[  167.159540][ T8006] RDX: 0000000000000000 RSI: 0000200000001680 RDI: 0000000000000003
[  167.159551][ T8006] RBP: 00007f14dd93d090 R08: 0000000000000000 R09: 0000000000000000
[  167.159562][ T8006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  167.159571][ T8006] R13: 0000000000000000 R14: 00007f14dcdb5fa0 R15: 00007fff39930288
[  167.159604][ T8006]  </TASK>
[  167.388499][ T5859] Bluetooth: hci3: command tx timeout
[  167.398908][ T7809] bridge_slave_0: entered allmulticast mode
[  167.517209][ T7809] bridge_slave_0: entered promiscuous mode
[  167.552560][ T7809] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.575841][ T7809] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.587396][ T7809] bridge_slave_1: entered allmulticast mode
[  167.630678][ T7809] bridge_slave_1: entered promiscuous mode
[  167.702533][ T8026] netlink: 'syz.1.517': attribute type 10 has an invalid length.
[  167.829077][ T7809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  167.880252][ T7809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  167.907677][ T8040] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.520'.
[  168.019318][ T8046] ksmbd: Unknown IPC event: 3, ignore.
[  168.145683][ T7809] team0: Port device team_slave_0 added
[  168.175602][ T7809] team0: Port device team_slave_1 added
[  168.232968][ T8058] FAULT_INJECTION: forcing a failure.
[  168.232968][ T8058] name failslab, interval 1, probability 0, space 0, times 0
[  168.245809][ T8058] CPU: 0 UID: 0 PID: 8058 Comm: syz.1.525 Not tainted 6.16.0-syzkaller-gf3af62b6cee8 #0 PREEMPT(full) 
[  168.245834][ T8058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  168.245845][ T8058] Call Trace:
[  168.245852][ T8058]  <TASK>
[  168.245860][ T8058]  dump_stack_lvl+0x189/0x250
[  168.245886][ T8058]  ? __pfx____ratelimit+0x10/0x10
[  168.245905][ T8058]  ? __pfx_dump_stack_lvl+0x10/0x10
[  168.245926][ T8058]  ? __pfx__printk+0x10/0x10
[  168.245963][ T8058]  should_fail_ex+0x414/0x560
[  168.245994][ T8058]  should_failslab+0xa8/0x100
[  168.246019][ T8058]  __kmalloc_cache_noprof+0x70/0x3d0
[  168.246040][ T8058]  ? sctp_add_bind_addr+0x8c/0x370
[  168.246069][ T8058]  sctp_add_bind_addr+0x8c/0x370
[  168.246099][ T8058]  sctp_copy_local_addr_list+0x30b/0x4e0
[  168.246128][ T8058]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  168.246152][ T8058]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  168.246181][ T8058]  ? sctp_v4_is_any+0x35/0x60
[  168.246196][ T8058]  ? sctp_copy_one_addr+0x93/0x360
[  168.246231][ T8058]  sctp_bind_addr_copy+0x189/0x3c0
[  168.246264][ T8058]  sctp_connect_new_asoc+0x2e0/0x690
[  168.246288][ T8058]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  168.246306][ T8058]  ? __local_bh_enable_ip+0x12d/0x1c0
[  168.246332][ T8058]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  168.246351][ T8058]  ? security_sctp_bind_connect+0x7e/0x2e0
[  168.246374][ T8058]  sctp_sendmsg+0x155c/0x2810
[  168.246408][ T8058]  ? __pfx_sctp_sendmsg+0x10/0x10
[  168.246432][ T8058]  ? aa_sk_perm+0x81e/0x950
[  168.246458][ T8058]  ? __pfx_aa_sk_perm+0x10/0x10
[  168.246481][ T8058]  ? sock_rps_record_flow+0x19/0x410
[  168.246509][ T8058]  ? inet_sendmsg+0x2f4/0x370
[  168.246536][ T8058]  __sock_sendmsg+0x19c/0x270
[  168.246564][ T8058]  ____sys_sendmsg+0x505/0x830
[  168.246592][ T8058]  ? __pfx_____sys_sendmsg+0x10/0x10
[  168.246624][ T8058]  ? import_iovec+0x74/0xa0
[  168.246651][ T8058]  ___sys_sendmsg+0x21f/0x2a0
[  168.246675][ T8058]  ? __pfx____sys_sendmsg+0x10/0x10
[  168.246737][ T8058]  ? __fget_files+0x2a/0x420
[  168.246759][ T8058]  ? __fget_files+0x3a0/0x420
[  168.246795][ T8058]  __x64_sys_sendmsg+0x19b/0x260
[  168.246819][ T8058]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  168.246851][ T8058]  ? __pfx_ksys_write+0x10/0x10
[  168.246870][ T8058]  ? rcu_is_watching+0x15/0xb0
[  168.246894][ T8058]  ? do_syscall_64+0xbe/0x3b0
[  168.246916][ T8058]  do_syscall_64+0xfa/0x3b0
[  168.246932][ T8058]  ? lockdep_hardirqs_on+0x9c/0x150
[  168.246948][ T8058]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.246965][ T8058]  ? clear_bhb_loop+0x60/0xb0
[  168.246987][ T8058]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.247004][ T8058] RIP: 0033:0x7f14dcb8eb69
[  168.247020][ T8058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  168.247034][ T8058] RSP: 002b:00007f14dd93d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  168.247053][ T8058] RAX: ffffffffffffffda RBX: 00007f14dcdb5fa0 RCX: 00007f14dcb8eb69
[  168.247067][ T8058] RDX: 0000000000000000 RSI: 0000200000001680 RDI: 0000000000000003
[  168.247078][ T8058] RBP: 00007f14dd93d090 R08: 0000000000000000 R09: 0000000000000000
[  168.247089][ T8058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  168.247099][ T8058] R13: 0000000000000000 R14: 00007f14dcdb5fa0 R15: 00007fff39930288
[  168.247130][ T8058]  </TASK>
[  168.595710][ T7809] batman_adv: batadv0: Adding interface: batadv_slave_0
[  168.614820][ T7809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  168.664132][ T7809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  168.736830][ T7809] batman_adv: batadv0: Adding interface: batadv_slave_1
[  168.753915][ T7809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  168.786142][ T7809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  168.824083][ T8069] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  168.830824][ T8069] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  168.897964][ T8074] netlink: 'syz.2.528': attribute type 10 has an invalid length.
[  170.350034][ T7809] hsr_slave_0: entered promiscuous mode
[  170.384196][ T7809] hsr_slave_1: entered promiscuous mode
[  171.097659][ T8115] FAULT_INJECTION: forcing a failure.
[  171.097659][ T8115] name failslab, interval 1, probability 0, space 0, times 0
[  171.130620][ T8109] tap0: tun_chr_ioctl cmd 1074025677
[  171.138988][ T8115] CPU: 1 UID: 0 PID: 8115 Comm: syz.2.536 Not tainted 6.16.0-syzkaller-gf3af62b6cee8 #0 PREEMPT(full) 
[  171.139014][ T8115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  171.139024][ T8115] Call Trace:
[  171.139032][ T8115]  <TASK>
[  171.139040][ T8115]  dump_stack_lvl+0x189/0x250
[  171.139065][ T8115]  ? __pfx____ratelimit+0x10/0x10
[  171.139084][ T8115]  ? __pfx_dump_stack_lvl+0x10/0x10
[  171.139104][ T8115]  ? __pfx__printk+0x10/0x10
[  171.139145][ T8115]  should_fail_ex+0x414/0x560
[  171.139178][ T8115]  should_failslab+0xa8/0x100
[  171.139205][ T8115]  __kmalloc_cache_noprof+0x70/0x3d0
[  171.139227][ T8115]  ? sctp_add_bind_addr+0x8c/0x370
[  171.139259][ T8115]  sctp_add_bind_addr+0x8c/0x370
[  171.139290][ T8115]  sctp_copy_local_addr_list+0x30b/0x4e0
[  171.139321][ T8115]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  171.139347][ T8115]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  171.139378][ T8115]  ? sctp_v4_is_any+0x35/0x60
[  171.139394][ T8115]  ? sctp_copy_one_addr+0x93/0x360
[  171.139424][ T8115]  sctp_bind_addr_copy+0x189/0x3c0
[  171.139460][ T8115]  sctp_connect_new_asoc+0x2e0/0x690
[  171.139486][ T8115]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  171.139504][ T8115]  ? __local_bh_enable_ip+0x12d/0x1c0
[  171.139532][ T8115]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  171.139552][ T8115]  ? security_sctp_bind_connect+0x7e/0x2e0
[  171.139598][ T8115]  sctp_sendmsg+0x155c/0x2810
[  171.139635][ T8115]  ? __pfx_sctp_sendmsg+0x10/0x10
[  171.139660][ T8115]  ? aa_sk_perm+0x81e/0x950
[  171.139688][ T8115]  ? __pfx_aa_sk_perm+0x10/0x10
[  171.139712][ T8115]  ? __might_fault+0xb0/0x130
[  171.139732][ T8115]  ? sock_rps_record_flow+0x19/0x410
[  171.139761][ T8115]  ? inet_sendmsg+0x2f4/0x370
[  171.139790][ T8115]  __sock_sendmsg+0x19c/0x270
[  171.139819][ T8115]  ____sys_sendmsg+0x505/0x830
[  171.139849][ T8115]  ? __pfx_____sys_sendmsg+0x10/0x10
[  171.139886][ T8115]  ? import_iovec+0x74/0xa0
[  171.139914][ T8115]  ___sys_sendmsg+0x21f/0x2a0
[  171.139939][ T8115]  ? __pfx____sys_sendmsg+0x10/0x10
[  171.139989][ T8115]  ? __fget_files+0x2a/0x420
[  171.140034][ T8115]  ? __fget_files+0x2a/0x420
[  171.140056][ T8115]  ? __fget_files+0x3a0/0x420
[  171.140094][ T8115]  __x64_sys_sendmsg+0x19b/0x260
[  171.140120][ T8115]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  171.140159][ T8115]  ? rcu_is_watching+0x15/0xb0
[  171.140177][ T8115]  ? trace_sys_enter+0x25/0x100
[  171.140209][ T8115]  do_syscall_64+0xfa/0x3b0
[  171.140226][ T8115]  ? lockdep_hardirqs_on+0x9c/0x150
[  171.140243][ T8115]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.140261][ T8115]  ? clear_bhb_loop+0x60/0xb0
[  171.140284][ T8115]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.140301][ T8115] RIP: 0033:0x7fb16898eb69
[  171.140317][ T8115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  171.140331][ T8115] RSP: 002b:00007fb16983b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  171.140350][ T8115] RAX: ffffffffffffffda RBX: 00007fb168bb5fa0 RCX: 00007fb16898eb69
[  171.140363][ T8115] RDX: 0000000000000000 RSI: 0000200000001680 RDI: 0000000000000003
[  171.140374][ T8115] RBP: 00007fb16983b090 R08: 0000000000000000 R09: 0000000000000000
[  171.140385][ T8115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  171.140395][ T8115] R13: 0000000000000000 R14: 00007fb168bb5fa0 R15: 00007fff4ab45a38
[  171.140431][ T8115]  </TASK>
[  171.504948][ T8109] tap0: linktype set to 270
[  171.925862][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.537'.
[  172.961111][ T8129] netlink: 'syz.0.538': attribute type 29 has an invalid length.
[  173.064054][ T8149] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.541'.
[  173.885157][ T8134] syzkaller0: entered promiscuous mode
[  173.899807][ T8134] syzkaller0: entered allmulticast mode
[  174.357010][ T8163] netlink: 22 bytes leftover after parsing attributes in process `syz.1.544'.
[  175.135857][ T8175] FAULT_INJECTION: forcing a failure.
[  175.135857][ T8175] name failslab, interval 1, probability 0, space 0, times 0
[  175.155494][ T8175] CPU: 0 UID: 0 PID: 8175 Comm: syz.1.547 Not tainted 6.16.0-syzkaller-gf3af62b6cee8 #0 PREEMPT(full) 
[  175.155522][ T8175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  175.155532][ T8175] Call Trace:
[  175.155540][ T8175]  <TASK>
[  175.155548][ T8175]  dump_stack_lvl+0x189/0x250
[  175.155574][ T8175]  ? __pfx____ratelimit+0x10/0x10
[  175.155593][ T8175]  ? __pfx_dump_stack_lvl+0x10/0x10
[  175.155613][ T8175]  ? __pfx__printk+0x10/0x10
[  175.155652][ T8175]  should_fail_ex+0x414/0x560
[  175.155684][ T8175]  should_failslab+0xa8/0x100
[  175.155710][ T8175]  __kmalloc_cache_noprof+0x70/0x3d0
[  175.155732][ T8175]  ? sctp_add_bind_addr+0x8c/0x370
[  175.155763][ T8175]  sctp_add_bind_addr+0x8c/0x370
[  175.155793][ T8175]  sctp_copy_local_addr_list+0x30b/0x4e0
[  175.155823][ T8175]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  175.155848][ T8175]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  175.155878][ T8175]  ? sctp_v4_is_any+0x35/0x60
[  175.155893][ T8175]  ? sctp_copy_one_addr+0x93/0x360
[  175.155922][ T8175]  sctp_bind_addr_copy+0x189/0x3c0
[  175.155955][ T8175]  sctp_connect_new_asoc+0x2e0/0x690
[  175.155980][ T8175]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  175.155998][ T8175]  ? __local_bh_enable_ip+0x12d/0x1c0
[  175.156023][ T8175]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  175.156043][ T8175]  ? security_sctp_bind_connect+0x7e/0x2e0
[  175.156066][ T8175]  sctp_sendmsg+0x155c/0x2810
[  175.156100][ T8175]  ? __pfx_sctp_sendmsg+0x10/0x10
[  175.156123][ T8175]  ? aa_sk_perm+0x81e/0x950
[  175.156150][ T8175]  ? __pfx_aa_sk_perm+0x10/0x10
[  175.156173][ T8175]  ? sock_rps_record_flow+0x19/0x410
[  175.156207][ T8175]  ? inet_sendmsg+0x2f4/0x370
[  175.156236][ T8175]  __sock_sendmsg+0x19c/0x270
[  175.156265][ T8175]  ____sys_sendmsg+0x505/0x830
[  175.156293][ T8175]  ? __pfx_____sys_sendmsg+0x10/0x10
[  175.156325][ T8175]  ? import_iovec+0x74/0xa0
[  175.156352][ T8175]  ___sys_sendmsg+0x21f/0x2a0
[  175.156376][ T8175]  ? __pfx____sys_sendmsg+0x10/0x10
[  175.156438][ T8175]  ? __fget_files+0x2a/0x420
[  175.156461][ T8175]  ? __fget_files+0x3a0/0x420
[  175.156497][ T8175]  __x64_sys_sendmsg+0x19b/0x260
[  175.156522][ T8175]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  175.156555][ T8175]  ? __pfx_ksys_write+0x10/0x10
[  175.156574][ T8175]  ? rcu_is_watching+0x15/0xb0
[  175.156598][ T8175]  ? do_syscall_64+0xbe/0x3b0
[  175.156621][ T8175]  do_syscall_64+0xfa/0x3b0
[  175.156637][ T8175]  ? lockdep_hardirqs_on+0x9c/0x150
[  175.156653][ T8175]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.156671][ T8175]  ? clear_bhb_loop+0x60/0xb0
[  175.156693][ T8175]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.156711][ T8175] RIP: 0033:0x7f14dcb8eb69
[  175.156728][ T8175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  175.156741][ T8175] RSP: 002b:00007f14dd93d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  175.156760][ T8175] RAX: ffffffffffffffda RBX: 00007f14dcdb5fa0 RCX: 00007f14dcb8eb69
[  175.156773][ T8175] RDX: 0000000000000000 RSI: 0000200000001680 RDI: 0000000000000003
[  175.156784][ T8175] RBP: 00007f14dd93d090 R08: 0000000000000000 R09: 0000000000000000
[  175.156795][ T8175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  175.156805][ T8175] R13: 0000000000000000 R14: 00007f14dcdb5fa0 R15: 00007fff39930288
[  175.156835][ T8175]  </TASK>
[  175.806721][ T8181] netlink: 17 bytes leftover after parsing attributes in process `syz.1.550'.
[  175.816432][ T8181] netlink: zone id is out of range
[  175.822578][ T8181] netlink: zone id is out of range
[  175.827954][ T8181] netlink: zone id is out of range
[  175.835513][ T8181] netlink: zone id is out of range
[  175.844890][ T8181] netlink: zone id is out of range
[  175.851063][ T8181] netlink: zone id is out of range
[  175.857275][ T8181] netlink: zone id is out of range
[  175.862714][ T8181] netlink: zone id is out of range
[  175.869019][ T8181] netlink: zone id is out of range
[  175.874288][ T8181] netlink: zone id is out of range
[  176.060771][ T8184] netlink: 183676 bytes leftover after parsing attributes in process `syz.1.550'.
[  177.130007][ T8202] netlink: 'syz.0.555': attribute type 2 has an invalid length.
[  177.137891][ T8202] netlink: 51 bytes leftover after parsing attributes in process `syz.0.555'.
[  177.473952][ T8210] FAULT_INJECTION: forcing a failure.
[  177.473952][ T8210] name failslab, interval 1, probability 0, space 0, times 0
[  177.522611][ T7809] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  177.525910][ T8210] CPU: 0 UID: 0 PID: 8210 Comm: syz.0.558 Not tainted 6.16.0-syzkaller-gf3af62b6cee8 #0 PREEMPT(full) 
[  177.525936][ T8210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  177.525947][ T8210] Call Trace:
[  177.525954][ T8210]  <TASK>
[  177.525962][ T8210]  dump_stack_lvl+0x189/0x250
[  177.525988][ T8210]  ? __pfx____ratelimit+0x10/0x10
[  177.526007][ T8210]  ? __pfx_dump_stack_lvl+0x10/0x10
[  177.526027][ T8210]  ? __pfx__printk+0x10/0x10
[  177.526054][ T8210]  ? __pfx___might_resched+0x10/0x10
[  177.526070][ T8210]  ? fs_reclaim_acquire+0x7d/0x100
[  177.526101][ T8210]  should_fail_ex+0x414/0x560
[  177.526133][ T8210]  should_failslab+0xa8/0x100
[  177.526159][ T8210]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  177.526187][ T8210]  ? __alloc_skb+0x112/0x2d0
[  177.526211][ T8210]  __alloc_skb+0x112/0x2d0
[  177.526236][ T8210]  _sctp_make_chunk+0x5e/0x430
[  177.526260][ T8210]  sctp_make_datafrag_empty+0x122/0x230
[  177.526290][ T8210]  ? __pfx_sctp_make_datafrag_empty+0x10/0x10
[  177.526313][ T8210]  ? __kasan_kmalloc+0x93/0xb0
[  177.526338][ T8210]  ? sctp_auth_send_cid+0x69/0x250
[  177.526369][ T8210]  sctp_datamsg_from_user+0x726/0xef0
[  177.526419][ T8210]  sctp_sendmsg_to_asoc+0x1003/0x1810
[  177.526437][ T8210]  ? __asan_memcpy+0x40/0x70
[  177.526465][ T8210]  ? sctp_assoc_add_peer+0xcfa/0x13b0
[  177.526503][ T8210]  ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10
[  177.526524][ T8210]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  177.526541][ T8210]  ? __local_bh_enable_ip+0x12d/0x1c0
[  177.526567][ T8210]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  177.526586][ T8210]  ? security_sctp_bind_connect+0x7e/0x2e0
[  177.526609][ T8210]  sctp_sendmsg+0x1941/0x2810
[  177.526644][ T8210]  ? __pfx_sctp_sendmsg+0x10/0x10
[  177.526668][ T8210]  ? aa_sk_perm+0x81e/0x950
[  177.526695][ T8210]  ? __pfx_aa_sk_perm+0x10/0x10
[  177.526718][ T8210]  ? __might_fault+0xb0/0x130
[  177.526737][ T8210]  ? sock_rps_record_flow+0x19/0x410
[  177.526765][ T8210]  ? inet_sendmsg+0x2f4/0x370
[  177.526793][ T8210]  __sock_sendmsg+0x19c/0x270
[  177.526823][ T8210]  ____sys_sendmsg+0x505/0x830
[  177.526850][ T8210]  ? __pfx_____sys_sendmsg+0x10/0x10
[  177.526883][ T8210]  ? import_iovec+0x74/0xa0
[  177.526910][ T8210]  ___sys_sendmsg+0x21f/0x2a0
[  177.526934][ T8210]  ? __pfx____sys_sendmsg+0x10/0x10
[  177.526981][ T8210]  ? __fget_files+0x2a/0x420
[  177.527021][ T8210]  ? __fget_files+0x2a/0x420
[  177.527042][ T8210]  ? __fget_files+0x3a0/0x420
[  177.527079][ T8210]  __x64_sys_sendmsg+0x19b/0x260
[  177.527104][ T8210]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  177.527137][ T8210]  ? __pfx_ksys_write+0x10/0x10
[  177.527155][ T8210]  ? rcu_is_watching+0x15/0xb0
[  177.527190][ T8210]  ? do_syscall_64+0xbe/0x3b0
[  177.527213][ T8210]  do_syscall_64+0xfa/0x3b0
[  177.527229][ T8210]  ? lockdep_hardirqs_on+0x9c/0x150
[  177.527245][ T8210]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.527262][ T8210]  ? clear_bhb_loop+0x60/0xb0
[  177.527284][ T8210]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.527300][ T8210] RIP: 0033:0x7f4e11d8eb69
[  177.527317][ T8210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  177.527330][ T8210] RSP: 002b:00007f4e12bfe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  177.527348][ T8210] RAX: ffffffffffffffda RBX: 00007f4e11fb5fa0 RCX: 00007f4e11d8eb69
[  177.527361][ T8210] RDX: 0000000000000000 RSI: 0000200000001680 RDI: 0000000000000003
[  177.527371][ T8210] RBP: 00007f4e12bfe090 R08: 0000000000000000 R09: 0000000000000000
[  177.527382][ T8210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  177.527392][ T8210] R13: 0000000000000000 R14: 00007f4e11fb5fa0 R15: 00007ffcd9a54d58
[  177.527424][ T8210]  </TASK>
[  177.931620][ T7809] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  177.969239][ T8220] netlink: 128 bytes leftover after parsing attributes in process `syz.0.560'.
[  178.016674][ T8222] netlink: 128 bytes leftover after parsing attributes in process `syz.0.560'.
[  178.033819][ T7809] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  178.074354][ T7809] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  178.216265][ T8237] pim6reg1: entered allmulticast mode
[  178.292313][ T7809] 8021q: adding VLAN 0 to HW filter on device bond0
[  178.389972][ T7809] 8021q: adding VLAN 0 to HW filter on device team0
[  178.435930][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.443168][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  178.496653][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.504544][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  178.634651][ T8251] netlink: 60 bytes leftover after parsing attributes in process `syz.1.566'.
[  178.701251][ T8256] netlink: 60 bytes leftover after parsing attributes in process `syz.1.566'.
[  179.157846][ T7809] 8021q: adding VLAN 0 to HW filter on device batadv0
[  179.445737][ T8288] netlink: 14 bytes leftover after parsing attributes in process `syz.2.573'.
[  179.663608][ T8289] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  179.671189][ T8289] IPv6: NLM_F_CREATE should be set when creating new route
[  179.678565][ T8289] IPv6: NLM_F_CREATE should be set when creating new route
[  179.685809][ T8289] IPv6: NLM_F_CREATE should be set when creating new route
[  180.620003][ T8288] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  180.674619][ T8288] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  180.715794][ T8288] bond0 (unregistering): Released all slaves
[  180.787808][ T8303] netlink: 36 bytes leftover after parsing attributes in process `syz.4.577'.
[  180.875557][ T7809] veth0_vlan: entered promiscuous mode
[  180.913620][ T8303] netlink: 'syz.4.577': attribute type 39 has an invalid length.
[  180.914414][ T7809] veth1_vlan: entered promiscuous mode
[  181.102005][ T7809] veth0_macvtap: entered promiscuous mode
[  181.210724][ T7809] veth1_macvtap: entered promiscuous mode
[  181.454682][ T7809] batman_adv: batadv0: Interface activated: batadv_slave_0
[  181.511780][ T7809] batman_adv: batadv0: Interface activated: batadv_slave_1
[  181.564690][   T56] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  181.575393][   T56] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  181.617213][ T8325] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  181.649107][ T8325] batman_adv: batadv0: Removing interface: batadv_slave_0
[  181.663298][ T8325] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  181.682385][ T8335] netlink: 'syz.0.583': attribute type 2 has an invalid length.
[  181.695519][ T8335] netlink: 'syz.0.583': attribute type 8 has an invalid length.
[  181.699251][ T8325] batman_adv: batadv0: Removing interface: batadv_slave_1
[  181.703852][ T8335] netlink: 132 bytes leftover after parsing attributes in process `syz.0.583'.
[  181.734853][ T8325] batman_adv: batadv0: Interface deactivated: vlan1
[  181.748614][ T8325] batman_adv: batadv0: Removing interface: vlan1
[  181.795494][   T56] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  181.810209][   T56] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  182.452789][ T2987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.498442][ T2987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.669067][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.708755][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  183.145100][ T8383] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.593'.
[  183.546941][ T8395] netlink: 'syz.4.594': attribute type 7 has an invalid length.
[  183.591273][ T8395] netlink: 'syz.4.594': attribute type 6 has an invalid length.
[  184.488582][ T8429] FAULT_INJECTION: forcing a failure.
[  184.488582][ T8429] name failslab, interval 1, probability 0, space 0, times 0
[  184.537752][ T8429] CPU: 1 UID: 0 PID: 8429 Comm: syz.3.602 Not tainted 6.16.0-syzkaller-gf3af62b6cee8 #0 PREEMPT(full) 
[  184.537779][ T8429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  184.537793][ T8429] Call Trace:
[  184.537801][ T8429]  <TASK>
[  184.537814][ T8429]  dump_stack_lvl+0x189/0x250
[  184.537841][ T8429]  ? __pfx____ratelimit+0x10/0x10
[  184.537860][ T8429]  ? __pfx_dump_stack_lvl+0x10/0x10
[  184.537880][ T8429]  ? __pfx__printk+0x10/0x10
[  184.537918][ T8429]  should_fail_ex+0x414/0x560
[  184.537950][ T8429]  should_failslab+0xa8/0x100
[  184.537976][ T8429]  __kmalloc_cache_noprof+0x70/0x3d0
[  184.537998][ T8429]  ? sctp_add_bind_addr+0x8c/0x370
[  184.538024][ T8429]  sctp_add_bind_addr+0x8c/0x370
[  184.538051][ T8429]  sctp_copy_local_addr_list+0x30b/0x4e0
[  184.538078][ T8429]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  184.538101][ T8429]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  184.538127][ T8429]  ? sctp_v4_is_any+0x35/0x60
[  184.538141][ T8429]  ? sctp_copy_one_addr+0x93/0x360
[  184.538167][ T8429]  sctp_bind_addr_copy+0x189/0x3c0
[  184.538221][ T8429]  sctp_connect_new_asoc+0x2e0/0x690
[  184.538245][ T8429]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  184.538263][ T8429]  ? __local_bh_enable_ip+0x12d/0x1c0
[  184.538289][ T8429]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  184.538309][ T8429]  ? security_sctp_bind_connect+0x7e/0x2e0
[  184.538331][ T8429]  sctp_sendmsg+0x155c/0x2810
[  184.538365][ T8429]  ? __pfx_sctp_sendmsg+0x10/0x10
[  184.538389][ T8429]  ? aa_sk_perm+0x81e/0x950
[  184.538416][ T8429]  ? __pfx_aa_sk_perm+0x10/0x10
[  184.538440][ T8429]  ? sock_rps_record_flow+0x19/0x410
[  184.538467][ T8429]  ? inet_sendmsg+0x2f4/0x370
[  184.538495][ T8429]  __sock_sendmsg+0x19c/0x270
[  184.538530][ T8429]  ____sys_sendmsg+0x505/0x830
[  184.538558][ T8429]  ? __pfx_____sys_sendmsg+0x10/0x10
[  184.538589][ T8429]  ? import_iovec+0x74/0xa0
[  184.538616][ T8429]  ___sys_sendmsg+0x21f/0x2a0
[  184.538640][ T8429]  ? __pfx____sys_sendmsg+0x10/0x10
[  184.538702][ T8429]  ? __fget_files+0x2a/0x420
[  184.538725][ T8429]  ? __fget_files+0x3a0/0x420
[  184.538759][ T8429]  __x64_sys_sendmsg+0x19b/0x260
[  184.538783][ T8429]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  184.538816][ T8429]  ? __pfx_ksys_write+0x10/0x10
[  184.538835][ T8429]  ? rcu_is_watching+0x15/0xb0
[  184.538857][ T8429]  ? do_syscall_64+0xbe/0x3b0
[  184.538880][ T8429]  do_syscall_64+0xfa/0x3b0
[  184.538896][ T8429]  ? lockdep_hardirqs_on+0x9c/0x150
[  184.538913][ T8429]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.538930][ T8429]  ? clear_bhb_loop+0x60/0xb0
[  184.538952][ T8429]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.538969][ T8429] RIP: 0033:0x7f739c58eb69
[  184.538985][ T8429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  184.538999][ T8429] RSP: 002b:00007f739d4a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  184.539018][ T8429] RAX: ffffffffffffffda RBX: 00007f739c7b5fa0 RCX: 00007f739c58eb69
[  184.539030][ T8429] RDX: 0000000000000000 RSI: 0000200000001680 RDI: 0000000000000003
[  184.539041][ T8429] RBP: 00007f739d4a0090 R08: 0000000000000000 R09: 0000000000000000
[  184.539052][ T8429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  184.539062][ T8429] R13: 0000000000000000 R14: 00007f739c7b5fa0 R15: 00007ffde0202dd8
[  184.539091][ T8429]  </TASK>
[  186.025401][ T8479] netlink: 'syz.1.613': attribute type 10 has an invalid length.
[  186.087463][ T8479] netlink: 2 bytes leftover after parsing attributes in process `syz.1.613'.
[  186.146681][ T8486] FAULT_INJECTION: forcing a failure.
[  186.146681][ T8486] name failslab, interval 1, probability 0, space 0, times 0
[  186.160194][ T8479] bond0: entered promiscuous mode
[  186.166096][ T8479] bond_slave_0: entered promiscuous mode
[  186.188589][ T8486] CPU: 1 UID: 0 PID: 8486 Comm: syz.3.615 Not tainted 6.16.0-syzkaller-gf3af62b6cee8 #0 PREEMPT(full) 
[  186.188616][ T8486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  186.188626][ T8486] Call Trace:
[  186.188634][ T8486]  <TASK>
[  186.188642][ T8486]  dump_stack_lvl+0x189/0x250
[  186.188668][ T8486]  ? __pfx____ratelimit+0x10/0x10
[  186.188686][ T8486]  ? __pfx_dump_stack_lvl+0x10/0x10
[  186.188706][ T8486]  ? __pfx__printk+0x10/0x10
[  186.188745][ T8486]  should_fail_ex+0x414/0x560
[  186.188777][ T8486]  should_failslab+0xa8/0x100
[  186.188803][ T8486]  __kmalloc_cache_noprof+0x70/0x3d0
[  186.188825][ T8486]  ? sctp_add_bind_addr+0x8c/0x370
[  186.188855][ T8486]  sctp_add_bind_addr+0x8c/0x370
[  186.188885][ T8486]  sctp_copy_local_addr_list+0x30b/0x4e0
[  186.188914][ T8486]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  186.188939][ T8486]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  186.188969][ T8486]  ? sctp_v4_is_any+0x35/0x60
[  186.188984][ T8486]  ? sctp_copy_one_addr+0x93/0x360
[  186.189013][ T8486]  sctp_bind_addr_copy+0x189/0x3c0
[  186.189046][ T8486]  sctp_connect_new_asoc+0x2e0/0x690
[  186.189069][ T8486]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  186.189094][ T8486]  ? __local_bh_enable_ip+0x12d/0x1c0
[  186.189120][ T8486]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  186.189140][ T8486]  ? security_sctp_bind_connect+0x7e/0x2e0
[  186.189163][ T8486]  sctp_sendmsg+0x155c/0x2810
[  186.189197][ T8486]  ? __pfx_sctp_sendmsg+0x10/0x10
[  186.189221][ T8486]  ? aa_sk_perm+0x81e/0x950
[  186.189247][ T8486]  ? __pfx_aa_sk_perm+0x10/0x10
[  186.189271][ T8486]  ? sock_rps_record_flow+0x19/0x410
[  186.189299][ T8486]  ? inet_sendmsg+0x2f4/0x370
[  186.189325][ T8486]  __sock_sendmsg+0x19c/0x270
[  186.189352][ T8486]  ____sys_sendmsg+0x505/0x830
[  186.189380][ T8486]  ? __pfx_____sys_sendmsg+0x10/0x10
[  186.189413][ T8486]  ? import_iovec+0x74/0xa0
[  186.189439][ T8486]  ___sys_sendmsg+0x21f/0x2a0
[  186.189460][ T8486]  ? __pfx____sys_sendmsg+0x10/0x10
[  186.189518][ T8486]  ? __fget_files+0x2a/0x420
[  186.189539][ T8486]  ? __fget_files+0x3a0/0x420
[  186.189572][ T8486]  __x64_sys_sendmsg+0x19b/0x260
[  186.189595][ T8486]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  186.189626][ T8486]  ? __pfx_ksys_write+0x10/0x10
[  186.189645][ T8486]  ? rcu_is_watching+0x15/0xb0
[  186.189667][ T8486]  ? do_syscall_64+0xbe/0x3b0
[  186.189669][ T8479] bond_slave_1: entered promiscuous mode
[  186.189688][ T8486]  do_syscall_64+0xfa/0x3b0
[  186.189703][ T8486]  ? lockdep_hardirqs_on+0x9c/0x150
[  186.189716][ T8486]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.189729][ T8486]  ? clear_bhb_loop+0x60/0xb0
[  186.189748][ T8486]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.189764][ T8486] RIP: 0033:0x7f739c58eb69
[  186.189780][ T8486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  186.189794][ T8486] RSP: 002b:00007f739d4a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  186.189813][ T8486] RAX: ffffffffffffffda RBX: 00007f739c7b5fa0 RCX: 00007f739c58eb69
[  186.189825][ T8486] RDX: 0000000000000000 RSI: 0000200000001680 RDI: 0000000000000003
[  186.189836][ T8486] RBP: 00007f739d4a0090 R08: 0000000000000000 R09: 0000000000000000
[  186.189845][ T8486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  186.189855][ T8486] R13: 0000000000000000 R14: 00007f739c7b5fa0 R15: 00007ffde0202dd8
[  186.189885][ T8486]  </TASK>
[  186.551838][ T8479] bridge0: entered promiscuous mode
[  186.557336][ T8479] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  186.619015][ T8479] bridge0: port 3(bond0) entered blocking state
[  186.640746][ T8479] bridge0: port 3(bond0) entered disabled state
[  186.657497][ T8479] bond0: entered allmulticast mode
[  186.682056][ T8479] bond_slave_0: entered allmulticast mode
[  186.698666][ T8479] bond_slave_1: entered allmulticast mode
[  186.728147][ T8479] bridge0: entered allmulticast mode
[  186.733725][ T8479] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  186.772267][ T8479] bond0: left allmulticast mode
[  186.785042][ T8479] bond_slave_0: left allmulticast mode
[  186.802521][ T8479] bond_slave_1: left allmulticast mode
[  186.815754][ T8479] bridge0: left allmulticast mode
[  186.822084][ T8479] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  186.974407][ T5230] udevd[5230]: worker [6025] terminated by signal 33 (Unknown signal 33)
[  187.018431][ T8450] syz.2.606 (8450) used greatest stack depth: 15352 bytes left
[  187.038266][ T5230] udevd[5230]: worker [6025] failed while handling '/devices/virtual/block/loop0'
[  187.087006][ T8511] netlink: 'syz.1.620': attribute type 10 has an invalid length.
[  187.235967][ T8509] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.619'.
[  187.266056][ T8511] dummy0: left promiscuous mode
[  187.480963][ T8511] dummy0: entered promiscuous mode
[  187.507678][ T8511] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  187.621600][ T8531] netlink: 'syz.0.625': attribute type 2 has an invalid length.
[  187.658299][ T8531] netlink: 'syz.0.625': attribute type 1 has an invalid length.
[  187.672118][ T8531] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.625'.
[  187.731915][ T8531] block nbd5: not configured, cannot reconfigure
[  187.936386][ T8549] netlink: 'syz.1.627': attribute type 29 has an invalid length.
[  188.181920][ T5859] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18
[  189.234213][ T8574] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.632'.
[  189.868650][ T8612] syz.4.640: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  189.926517][ T8612] CPU: 0 UID: 0 PID: 8612 Comm: syz.4.640 Not tainted 6.16.0-syzkaller-gf3af62b6cee8 #0 PREEMPT(full) 
[  189.926545][ T8612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  189.926557][ T8612] Call Trace:
[  189.926564][ T8612]  <TASK>
[  189.926572][ T8612]  dump_stack_lvl+0x189/0x250
[  189.926608][ T8612]  ? __pfx_dump_stack_lvl+0x10/0x10
[  189.926631][ T8612]  ? __pfx__printk+0x10/0x10
[  189.926655][ T8612]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  189.926676][ T8612]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  189.926709][ T8612]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  189.926733][ T8612]  warn_alloc+0x214/0x310
[  189.926760][ T8612]  ? stack_depot_save_flags+0x429/0x900
[  189.926792][ T8612]  ? __pfx_warn_alloc+0x10/0x10
[  189.926820][ T8612]  ? kasan_save_track+0x4f/0x80
[  189.926843][ T8612]  ? xskq_create+0x56/0x170
[  189.926858][ T8612]  ? xsk_init_queue+0xb0/0x110
[  189.926880][ T8612]  ? xsk_setsockopt+0x57b/0x8d0
[  189.926903][ T8612]  ? do_sock_setsockopt+0x17c/0x1b0
[  189.926922][ T8612]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  189.926939][ T8612]  ? do_syscall_64+0xfa/0x3b0
[  189.926956][ T8612]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.926981][ T8612]  __vmalloc_node_range_noprof+0x125/0x12f0
[  189.927036][ T8612]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  189.927067][ T8612]  ? __kasan_kmalloc+0x93/0xb0
[  189.927092][ T8612]  vmalloc_user_noprof+0xad/0xf0
[  189.927117][ T8612]  ? xskq_create+0xbf/0x170
[  189.927135][ T8612]  xskq_create+0xbf/0x170
[  189.927155][ T8612]  xsk_init_queue+0xb0/0x110
[  189.927184][ T8612]  xsk_setsockopt+0x57b/0x8d0
[  189.927213][ T8612]  ? __pfx_xsk_setsockopt+0x10/0x10
[  189.927238][ T8612]  ? __pfx_aa_sk_perm+0x10/0x10
[  189.927262][ T8612]  ? __fget_files+0x2a/0x420
[  189.927285][ T8612]  ? aa_sock_opt_perm+0x74/0x110
[  189.927309][ T8612]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  189.927326][ T8612]  ? __pfx_xsk_setsockopt+0x10/0x10
[  189.927350][ T8612]  do_sock_setsockopt+0x17c/0x1b0
[  189.927374][ T8612]  __x64_sys_setsockopt+0x13f/0x1b0
[  189.927398][ T8612]  do_syscall_64+0xfa/0x3b0
[  189.927415][ T8612]  ? lockdep_hardirqs_on+0x9c/0x150
[  189.927431][ T8612]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.927449][ T8612]  ? clear_bhb_loop+0x60/0xb0
[  189.927471][ T8612]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.927488][ T8612] RIP: 0033:0x7f5c2b98eb69
[  189.927507][ T8612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  189.927521][ T8612] RSP: 002b:00007f5c2c895038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  189.927540][ T8612] RAX: ffffffffffffffda RBX: 00007f5c2bbb5fa0 RCX: 00007f5c2b98eb69
[  189.927554][ T8612] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006
[  189.927564][ T8612] RBP: 00007f5c2ba11df1 R08: 0000000000000004 R09: 0000000000000000
[  189.927575][ T8612] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  189.927586][ T8612] R13: 0000000000000000 R14: 00007f5c2bbb5fa0 R15: 00007ffc83f920c8
[  189.927616][ T8612]  </TASK>
[  189.927638][ T8612] Mem-Info:
[  189.992241][ T8615] netlink: 'syz.2.641': attribute type 39 has an invalid length.
[  190.007119][ T8612] active_anon:8750 inactive_anon:0 isolated_anon:0
[  190.007119][ T8612]  active_file:18909 inactive_file:39875 isolated_file:0
[  190.007119][ T8612]  unevictable:768 dirty:202 writeback:0
[  190.007119][ T8612]  slab_reclaimable:10792 slab_unreclaimable:96228
[  190.007119][ T8612]  mapped:29238 shmem:1357 pagetables:1189
[  190.007119][ T8612]  sec_pagetables:0 bounce:0
[  190.007119][ T8612]  kernel_misc_reclaimable:0
[  190.007119][ T8612]  free:1306569 free_pcp:19878 free_cma:0
[  190.291965][   T51] Bluetooth: hci3: command tx timeout
[  190.311279][ T8612] Node 0 active_anon:35100kB inactive_anon:0kB active_file:75636kB inactive_file:159300kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120952kB dirty:804kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11744kB pagetables:4704kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  190.311851][ T8615] veth0_macvtap: left promiscuous mode
[  190.343757][ T8612] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  190.379076][ T8619] netlink: 'syz.4.640': attribute type 10 has an invalid length.
[  190.386920][ T8612] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  190.452997][ T8612] lowmem_reserve[]: 0 2497 2499 2499 2499
[  190.508691][ T8612] Node 0 DMA32 free:1318832kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35052kB inactive_anon:0kB active_file:75636kB inactive_file:157724kB unevictable:1536kB writepending:804kB present:3129332kB managed:2557608kB mlocked:0kB bounce:0kB free_pcp:60596kB local_pcp:20756kB free_cma:0kB
[  190.634138][ T8622] netlink: 'syz.3.642': attribute type 10 has an invalid length.
[  190.695033][ T8612] lowmem_reserve[]: 0 0 1 1 1
[  190.700690][ T8612] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  190.729752][ T8612] lowmem_reserve[]: 0 0 0 0 0
[  190.734515][ T8612] Node 1 Normal free:3890868kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:18752kB local_pcp:6400kB free_cma:0kB
[  190.858916][ T8612] lowmem_reserve[]: 0 0 0 0 0
[  190.863764][ T8612] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  190.924555][ T8623] netlink: 'syz.3.642': attribute type 1 has an invalid length.
[  190.941738][ T8623] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.642'.
[  191.024145][ T8612] Node 0 DMA32: 1543*4kB (UME) 1099*8kB (ME) 676*16kB (UM) 942*32kB (UME) 111*64kB (UME) 120*128kB (UME) 60*256kB (UME) 23*512kB (UM) 15*1024kB (U) 4*2048kB (UM) 291*4096kB (UM) = 1321012kB
[  191.202352][ T8612] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB
[  191.220390][ T8622] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  191.276930][ T8635] netlink: 'syz.2.645': attribute type 3 has an invalid length.
[  191.284746][ T8635] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.645'.
[  191.294494][ T8612] Node 1 Normal: 199*4kB (UME) 53*8kB (UME) 43*16kB (UME) 94*32kB (UME) 30*64kB (UME) 6*128kB (UME) 5*256kB (UME) 2*512kB (M) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3890868kB
[  191.341526][ T8612] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  191.353147][ T8612] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  191.363739][ T8612] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  191.376769][ T8612] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  191.395276][ T8612] 60138 total pagecache pages
[  191.402100][ T8612] 0 pages in swap cache
[  191.406451][ T8612] Free swap  = 124996kB
[  191.426002][ T8612] Total swap = 124996kB
[  191.434615][ T8612] 2097051 pages RAM
[  191.442359][ T8612] 0 pages HighMem/MovableOnly
[  191.447129][ T8612] 425607 pages reserved
[  191.452369][ T8612] 0 pages cma reserved
[  191.604841][ T8651] netlink: 'syz.3.651': attribute type 21 has an invalid length.
[  191.617297][ T8651] netlink: 'syz.3.651': attribute type 11 has an invalid length.
[  191.767502][ T8659] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.655'.
[  191.794435][ T8662] netlink: 'syz.3.654': attribute type 21 has an invalid length.
[  191.805888][ T8662] netlink: 164 bytes leftover after parsing attributes in process `syz.3.654'.
[  192.222340][ T8686] netlink: 'syz.3.661': attribute type 10 has an invalid length.
[  192.386903][ T8693] netlink: 'syz.1.662': attribute type 3 has an invalid length.
[  192.403649][ T8693] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.662'.
[  192.654672][ T8698] net_ratelimit: 74 callbacks suppressed
[  192.654691][ T8698] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  194.385627][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  194.396539][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  194.810208][ T8726] netlink: 14 bytes leftover after parsing attributes in process `syz.2.671'.
[  195.253641][ T8738] validate_nla: 1 callbacks suppressed
[  195.253676][ T8738] netlink: 'syz.3.673': attribute type 29 has an invalid length.
[  195.269710][ T8742] netlink: 'syz.3.673': attribute type 29 has an invalid length.
[  195.290009][ T8735] netlink: 'syz.3.673': attribute type 29 has an invalid length.
[  195.308504][ T8743] netlink: 132 bytes leftover after parsing attributes in process `syz.4.676'.
[  195.319758][ T8735] netlink: 'syz.3.673': attribute type 29 has an invalid length.
[  195.400870][ T8735] netlink: 60 bytes leftover after parsing attributes in process `syz.3.673'.
[  195.479790][ T8748] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.679'.
[  195.534523][ T8752] netlink: 'syz.1.678': attribute type 2 has an invalid length.
[  195.560679][ T8752] netlink: 124 bytes leftover after parsing attributes in process `syz.1.678'.
[  195.585640][ T8752] netlink: 'syz.1.678': attribute type 11 has an invalid length.
[  195.590993][ T8754] netlink: 60 bytes leftover after parsing attributes in process `syz.4.680'.
[  195.600145][ T8752] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.678'.
[  195.630830][ T8751] netlink: 'syz.1.678': attribute type 11 has an invalid length.
[  195.681449][ T8751] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.678'.
[  196.029101][ T8747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  197.288846][ T8782] netlink: 67 bytes leftover after parsing attributes in process `syz.2.688'.
[  197.370215][ T8782] netlink: 10 bytes leftover after parsing attributes in process `syz.2.688'.
[  197.544946][ T8783] netlink: 'syz.2.688': attribute type 21 has an invalid length.
[  197.593999][ T8775] netlink: 'syz.3.686': attribute type 10 has an invalid length.
[  197.612445][ T8775] ipvlan1: entered promiscuous mode
[  197.632632][ T8775] ipvlan1: entered allmulticast mode
[  197.681879][ T8775] veth0_vlan: entered allmulticast mode
[  197.760477][ T8775] bridge0: port 3(ipvlan1) entered blocking state
[  197.767595][ T8775] bridge0: port 3(ipvlan1) entered disabled state
[  197.779286][ T8775] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  198.065766][ T8793] netlink: 'syz.4.690': attribute type 10 has an invalid length.
[  198.164781][ T8793] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  198.238997][ T8793] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  200.534606][ T8828] __nla_validate_parse: 4 callbacks suppressed
[  200.534628][ T8828] netlink: 26 bytes leftover after parsing attributes in process `syz.0.700'.
[  200.639180][ T8835] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.700'.
[  201.495250][ T8851] netlink: 71 bytes leftover after parsing attributes in process `syz.0.707'.
[  201.504710][ T8852] netlink: 71 bytes leftover after parsing attributes in process `syz.0.707'.
[  201.638796][ T5866] Bluetooth: hci0: command 0x0406 tx timeout
[  201.639952][ T5181] Bluetooth: hci2: command 0x0406 tx timeout
[  201.644868][ T5866] Bluetooth: hci1: command 0x0406 tx timeout
[  201.651353][ T5181] Bluetooth: hci4: command 0x0406 tx timeout
[  202.569401][ T8879] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf
[  202.739787][ T8881] lo: entered allmulticast mode
[  202.774802][ T8879] lo: entered promiscuous mode
[  202.799674][ T8879] lo: left allmulticast mode
[  202.869444][ T8881] netlink: 'syz.1.715': attribute type 10 has an invalid length.
[  202.984761][ T8881] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  203.023483][ T8881] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  203.507683][ T8893] netlink: 'syz.1.720': attribute type 11 has an invalid length.
[  203.543558][ T8891] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  203.557000][ T8891] IPv6: NLM_F_CREATE should be set when creating new route
[  203.566746][ T8893] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.720'.
[  203.568061][ T8891] IPv6: NLM_F_CREATE should be set when creating new route
[  203.595020][ T8891] IPv6: NLM_F_CREATE should be set when creating new route
[  203.893477][ T8892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  204.325354][ T8909] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.723'.
[  205.375769][ T8937] netlink: 'syz.1.730': attribute type 3 has an invalid length.
[  205.431157][ T8937] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.730'.
[  206.800615][ T8994] netlink: 'syz.4.749': attribute type 21 has an invalid length.
[  206.838246][ T8994] netlink: 132 bytes leftover after parsing attributes in process `syz.4.749'.
[  206.932331][ T9002] netlink: 14308 bytes leftover after parsing attributes in process `syz.1.750'.
[  207.349008][ T9010] bridge_slave_1: left allmulticast mode
[  207.369296][ T9010] bridge_slave_1: left promiscuous mode
[  207.383665][ T9010] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.691632][ T9010] bridge_slave_0: left allmulticast mode
[  207.724436][ T9010] bridge_slave_0: left promiscuous mode
[  207.740539][ T9010] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.168174][ T9027] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.759'.
[  208.561995][ T9046] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.764'.
[  208.602002][ T9046] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  208.668069][ T9046] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  209.097390][ T9057] netlink: 22 bytes leftover after parsing attributes in process `syz.2.762'.
[  211.446225][ T9042] netlink: 763 bytes leftover after parsing attributes in process `syz.0.764'.
[  211.587886][ T9072] sock: sock_set_timeout: `syz.0.770' (pid 9072) tries to set negative timeout
[  211.686152][ T9080] netlink: 'syz.0.771': attribute type 11 has an invalid length.
[  211.718112][ T9080] netlink: 149476 bytes leftover after parsing attributes in process `syz.0.771'.
[  211.752292][ T9078] syzkaller0: entered promiscuous mode
[  211.780614][ T9078] syzkaller0: entered allmulticast mode
[  211.845337][ T9079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  212.117658][ T9088] netlink: 10 bytes leftover after parsing attributes in process `syz.0.773'.
[  212.296660][ T9091] netlink: 17 bytes leftover after parsing attributes in process `syz.2.774'.
[  212.309480][ T9091] netlink: zone id is out of range
[  212.314826][ T9091] netlink: zone id is out of range
[  212.323575][ T9091] netlink: zone id is out of range
[  212.330743][ T9091] netlink: zone id is out of range
[  212.336086][ T9091] netlink: zone id is out of range
[  212.344254][ T9091] netlink: zone id is out of range
[  212.375756][ T9094] netlink: 'syz.2.774': attribute type 10 has an invalid length.
[  212.392855][ T9091] netlink: zone id is out of range
[  212.404193][ T9096] veth0_vlan: entered allmulticast mode
[  212.410972][ T9094] netlink: 55 bytes leftover after parsing attributes in process `syz.2.774'.
[  213.274097][ T9107] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.779'.
[  213.310062][ T9107] netlink: 8063 bytes leftover after parsing attributes in process `syz.1.779'.
[  213.962353][ T9120] netlink: 'syz.3.783': attribute type 4 has an invalid length.
[  213.970297][ T9120] netlink: 14345 bytes leftover after parsing attributes in process `syz.3.783'.
[  214.930382][ T9168] netlink: 14 bytes leftover after parsing attributes in process `syz.1.800'.
[  214.974702][ T9168] bond0: (slave dummy0): Releasing backup interface
[  215.004822][ T9168] dummy0 (unregistering): left promiscuous mode
[  215.174670][ T9185] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.804'.
[  215.252819][ T9185] wg2: entered promiscuous mode
[  215.268246][ T9185] wg2: entered allmulticast mode
[  215.755404][ T9221] netlink: 'syz.1.816': attribute type 3 has an invalid length.
[  215.807735][ T9221] netlink: 132 bytes leftover after parsing attributes in process `syz.1.816'.
[  216.503011][ T9232] netlink: 'syz.1.819': attribute type 22 has an invalid length.
[  216.535937][ T9232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.819'.
[  218.260719][ T9297] netlink: 'syz.2.834': attribute type 10 has an invalid length.
[  218.278378][ T9297] netlink: 'syz.2.834': attribute type 16 has an invalid length.
[  218.309362][ T9297] netlink: 156 bytes leftover after parsing attributes in process `syz.2.834'.
[  218.472042][ T9305] netlink: 'syz.3.837': attribute type 16 has an invalid length.
[  218.495959][ T9310] sit0: entered promiscuous mode
[  218.502185][ T9310] sit0: entered allmulticast mode
[  218.571637][ T9305] netlink: 164 bytes leftover after parsing attributes in process `syz.3.837'.
[  219.163014][ T9329] netlink: 132 bytes leftover after parsing attributes in process `syz.4.841'.
[  219.357547][ T9334] netlink: 168 bytes leftover after parsing attributes in process `syz.1.844'.
[  219.371180][ T9323] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.840'.
[  219.905446][ T9345] netlink: 'syz.2.847': attribute type 39 has an invalid length.
[  220.453927][ T9354] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.848'.
[  221.281405][ T9393] netlink: 60 bytes leftover after parsing attributes in process `syz.4.858'.
[  221.340392][ T9390] netlink: 'syz.1.857': attribute type 4 has an invalid length.
[  221.348207][ T9390] netlink: 152 bytes leftover after parsing attributes in process `syz.1.857'.
[  221.395647][ T9390] net_ratelimit: 77 callbacks suppressed
[  221.395680][ T9390] wlan1: mtu less than device minimum
[  221.879573][ T9423] raw_sendmsg: syz.3.867 forgot to set AF_INET. Fix it!
[  221.889452][ T9424] netlink: 'syz.3.867': attribute type 10 has an invalid length.
[  223.925232][ T9515] netlink: 132 bytes leftover after parsing attributes in process `syz.4.890'.
[  223.969692][ T9519] netlink: 'syz.4.890': attribute type 1 has an invalid length.
[  224.015512][ T9519] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.890'.
[  225.146450][ T9583] netlink: 168 bytes leftover after parsing attributes in process `syz.4.898'.
[  225.438638][ T9598] netlink: 'syz.0.899': attribute type 3 has an invalid length.
[  225.518106][ T9598] netlink: 193308 bytes leftover after parsing attributes in process `syz.0.899'.
[  226.171714][ T5862] Bluetooth: hci3: unexpected event 0x23 length: 15 > 13
[  226.887398][ T9639] netlink: 'syz.1.912': attribute type 8 has an invalid length.
[  226.912630][ T9639] netlink: 156 bytes leftover after parsing attributes in process `syz.1.912'.
[  226.953719][ T9639] netlink: 164 bytes leftover after parsing attributes in process `syz.1.912'.
[  227.129643][ T9645] netlink: 'syz.2.914': attribute type 21 has an invalid length.
[  227.186498][ T9652] netlink: 'syz.1.918': attribute type 3 has an invalid length.
[  227.188191][ T9645] netlink: 'syz.2.914': attribute type 4 has an invalid length.
[  227.236092][ T9645] netlink: 156 bytes leftover after parsing attributes in process `syz.2.914'.
[  227.272635][ T9652] netlink: 152 bytes leftover after parsing attributes in process `syz.1.918'.
[  227.595575][ T9678] netlink: 'syz.0.923': attribute type 4 has an invalid length.
[  227.624063][ T9682] netlink: 'syz.0.923': attribute type 39 has an invalid length.
[  227.658370][ T9683] netlink: 'syz.0.923': attribute type 39 has an invalid length.
[  228.182550][ T9700] netlink: 'syz.1.928': attribute type 3 has an invalid length.
[  228.192926][ T9700] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.928'.
[  228.976464][ T9730] netlink: 168 bytes leftover after parsing attributes in process `syz.1.934'.
[  229.425249][ T9746] validate_nla: 1 callbacks suppressed
[  229.425267][ T9746] netlink: 'syz.0.937': attribute type 4 has an invalid length.
[  229.462771][ T9746] netlink: 152 bytes leftover after parsing attributes in process `syz.0.937'.
[  229.551550][ T9741] syzkaller0: entered promiscuous mode
[  229.578828][ T9741] syzkaller0: entered allmulticast mode
[  229.604377][ T9746] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  229.644538][ T9750] netlink: 'syz.2.938': attribute type 21 has an invalid length.
[  229.663891][ T9750] netlink: 'syz.2.938': attribute type 4 has an invalid length.
[  229.993845][ T9764] netlink: 'syz.1.940': attribute type 10 has an invalid length.
[  230.046130][ T9766] netlink: 'syz.1.940': attribute type 10 has an invalid length.
[  230.108164][ T9766] netlink: 2 bytes leftover after parsing attributes in process `syz.1.940'.
[  232.473773][ T9766] team0: entered promiscuous mode
[  232.485946][ T9766] team_slave_0: entered promiscuous mode
[  232.498695][ T9766] team_slave_1: entered promiscuous mode
[  232.511876][ T9766] geneve1: entered promiscuous mode
[  232.526388][ T9766] 8021q: adding VLAN 0 to HW filter on device team0
[  232.559690][ T9766] bridge0: port 3(team0) entered blocking state
[  232.566077][ T9766] bridge0: port 3(team0) entered disabled state
[  232.577427][ T9766] team0: entered allmulticast mode
[  232.584911][ T9766] team_slave_0: entered allmulticast mode
[  232.591531][ T9766] team_slave_1: entered allmulticast mode
[  232.597279][ T9766] geneve1: entered allmulticast mode
[  232.606768][ T9766] bridge0: port 3(team0) entered blocking state
[  232.613225][ T9766] bridge0: port 3(team0) entered forwarding state
[  232.810370][ T9802] : (slave bond_slave_1): Error -28 calling ndo_bpf
[  232.831387][ T9815] netlink: 'syz.0.951': attribute type 10 has an invalid length.
[  233.207827][ T9556] syzkaller0: tun_net_xmit 76
[  233.236683][ T5914] syzkaller0: tun_net_xmit 76
[  233.242287][ T9556] syzkaller0: tun_net_xmit 48
[  233.674185][ T9835] netlink: 'syz.3.958': attribute type 10 has an invalid length.
[  234.592673][ T9815] : (slave netdevsim0): Enslaving as an active interface with an up link
[  234.601427][ T9820] C: renamed from team_slave_0
[  234.608971][ T9820] netlink: 'syz.1.955': attribute type 3 has an invalid length.
[  234.616634][ T9820] netlink: 152 bytes leftover after parsing attributes in process `syz.1.955'.
[  234.638938][ T9830] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  234.660650][ T9833] netlink: 'syz.3.958': attribute type 29 has an invalid length.
[  234.700139][ T9841] netlink: 'syz.2.961': attribute type 10 has an invalid length.
[  234.847893][ T9848] netlink: 703 bytes leftover after parsing attributes in process `syz.4.964'.
[  235.588964][ T9882] netlink: 'syz.2.973': attribute type 10 has an invalid length.
[  235.602536][ T9880] netlink: 'syz.2.973': attribute type 10 has an invalid length.
[  235.654852][ T9871] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf
[  235.974159][ T9906] netlink: 'syz.2.979': attribute type 10 has an invalid length.
[  235.990740][ T9906] batadv0: left promiscuous mode
[  235.995986][ T9906] batadv0: left allmulticast mode
[  236.008217][ T9906] netlink: 'syz.2.979': attribute type 10 has an invalid length.
[  236.032967][ T9906] netlink: 40 bytes leftover after parsing attributes in process `syz.2.979'.
[  236.053312][ T9906] batadv0: entered promiscuous mode
[  236.065629][ T9906] batadv0: entered allmulticast mode
[  236.084708][ T9906] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  236.117074][ T9918] netlink: 132 bytes leftover after parsing attributes in process `syz.2.979'.
[  236.177688][ T9920] netlink: 'syz.1.981': attribute type 10 has an invalid length.
[  236.185715][ T9920] netlink: 40 bytes leftover after parsing attributes in process `syz.1.981'.
[  236.199147][ T9920] netlink: 763 bytes leftover after parsing attributes in process `syz.1.981'.
[  236.427039][ T9930] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.983'.
[  236.657909][ T5862] Bluetooth: hci1: unexpected event 0x0f length: 15 > 4
[  236.657954][ T5862] Bluetooth: hci1: unexpected event for opcode 0x0000
[  236.682505][ T5862] Bluetooth: hci1: unexpected event 0x0f length: 15 > 4
[  236.682542][ T5862] Bluetooth: hci1: unexpected event for opcode 0x0000
[  237.520516][ T9949] netlink: 'syz.4.992': attribute type 21 has an invalid length.
[  237.535560][ T9949] netlink: 156 bytes leftover after parsing attributes in process `syz.4.992'.
[  237.721395][ T9959] netlink: 152064 bytes leftover after parsing attributes in process `syz.4.993'.
[  237.733801][ T9959] netlink: zone id is out of range
[  238.229478][ T9985] netlink: 'syz.0.1001': attribute type 10 has an invalid length.
[  238.397276][ T9985] wlan1: mtu less than device minimum
[  238.404061][ T9985] : (slave wlan1): Error -22 calling dev_set_mtu
[  239.137699][T10025] syz.3.1009: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  239.164455][T10025] CPU: 0 UID: 0 PID: 10025 Comm: syz.3.1009 Not tainted 6.16.0-syzkaller-gf3af62b6cee8 #0 PREEMPT(full) 
[  239.164483][T10025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  239.164494][T10025] Call Trace:
[  239.164502][T10025]  <TASK>
[  239.164512][T10025]  dump_stack_lvl+0x189/0x250
[  239.164545][T10025]  ? __pfx_dump_stack_lvl+0x10/0x10
[  239.164567][T10025]  ? __pfx__printk+0x10/0x10
[  239.164592][T10025]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  239.164613][T10025]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  239.164637][T10025]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  239.164658][T10025]  warn_alloc+0x214/0x310
[  239.164684][T10025]  ? stack_depot_save_flags+0x40/0x900
[  239.164716][T10025]  ? __pfx_warn_alloc+0x10/0x10
[  239.164745][T10025]  ? kasan_save_track+0x4f/0x80
[  239.164767][T10025]  ? xskq_create+0x56/0x170
[  239.164782][T10025]  ? xsk_init_queue+0xb0/0x110
[  239.164805][T10025]  ? xsk_setsockopt+0x57b/0x8d0
[  239.164827][T10025]  ? do_sock_setsockopt+0x17c/0x1b0
[  239.164846][T10025]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  239.164865][T10025]  ? do_syscall_64+0xfa/0x3b0
[  239.164882][T10025]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.164915][T10025]  __vmalloc_node_range_noprof+0x125/0x12f0
[  239.164974][T10025]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  239.165006][T10025]  ? __kasan_kmalloc+0x93/0xb0
[  239.165033][T10025]  vmalloc_user_noprof+0xad/0xf0
[  239.165058][T10025]  ? xskq_create+0xbf/0x170
[  239.165077][T10025]  xskq_create+0xbf/0x170
[  239.165097][T10025]  xsk_init_queue+0xb0/0x110
[  239.165126][T10025]  xsk_setsockopt+0x57b/0x8d0
[  239.165155][T10025]  ? __pfx_xsk_setsockopt+0x10/0x10
[  239.165181][T10025]  ? __pfx_aa_sk_perm+0x10/0x10
[  239.165206][T10025]  ? __fget_files+0x2a/0x420
[  239.165231][T10025]  ? aa_sock_opt_perm+0x74/0x110
[  239.165255][T10025]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  239.165274][T10025]  ? __pfx_xsk_setsockopt+0x10/0x10
[  239.165301][T10025]  do_sock_setsockopt+0x17c/0x1b0
[  239.165327][T10025]  __x64_sys_setsockopt+0x13f/0x1b0
[  239.165354][T10025]  do_syscall_64+0xfa/0x3b0
[  239.165371][T10025]  ? lockdep_hardirqs_on+0x9c/0x150
[  239.165389][T10025]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.165406][T10025]  ? clear_bhb_loop+0x60/0xb0
[  239.165429][T10025]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.165447][T10025] RIP: 0033:0x7f739c58eb69
[  239.165463][T10025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  239.165478][T10025] RSP: 002b:00007f739d47f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  239.165497][T10025] RAX: ffffffffffffffda RBX: 00007f739c7b6080 RCX: 00007f739c58eb69
[  239.165511][T10025] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000c
[  239.165522][T10025] RBP: 00007f739c611df1 R08: 0000000000000004 R09: 0000000000000000
[  239.165533][T10025] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  239.165545][T10025] R13: 0000000000000000 R14: 00007f739c7b6080 R15: 00007ffde0202dd8
[  239.165576][T10025]  </TASK>
[  239.165584][T10025] Mem-Info:
[  239.470769][T10025] active_anon:7394 inactive_anon:0 isolated_anon:0
[  239.470769][T10025]  active_file:18926 inactive_file:39897 isolated_file:0
[  239.470769][T10025]  unevictable:768 dirty:57 writeback:0
[  239.470769][T10025]  slab_reclaimable:11032 slab_unreclaimable:96399
[  239.470769][T10025]  mapped:30055 shmem:1379 pagetables:1146
[  239.470769][T10025]  sec_pagetables:0 bounce:0
[  239.470769][T10025]  kernel_misc_reclaimable:0
[  239.470769][T10025]  free:1305627 free_pcp:22684 free_cma:0
[  239.532248][T10025] Node 0 active_anon:29776kB inactive_anon:0kB active_file:75704kB inactive_file:159388kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120220kB dirty:224kB writeback:0kB shmem:3980kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12748kB pagetables:4432kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  239.615092][T10025] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  239.666441][T10025] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  239.715822][T10025] lowmem_reserve[]: 0 2497 2499 2499 2499
[  239.724726][T10025] Node 0 DMA32 free:1315756kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29728kB inactive_anon:0kB active_file:75704kB inactive_file:157812kB unevictable:1536kB writepending:224kB present:3129332kB managed:2557608kB mlocked:0kB bounce:0kB free_pcp:71452kB local_pcp:26624kB free_cma:0kB
[  239.761567][T10025] lowmem_reserve[]: 0 0 1 1 1
[  239.766437][T10025] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  239.884989][T10025] lowmem_reserve[]: 0 0 0 0 0
[  239.889845][T10025] Node 1 Normal free:3891380kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:18304kB local_pcp:12096kB free_cma:0kB
[  239.921372][T10025] lowmem_reserve[]: 0 0 0 0 0
[  239.926131][T10025] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  239.938951][T10025] Node 0 DMA32: 2311*4kB (UME) 1859*8kB (UME) 843*16kB (UME) 1198*32kB (UME) 435*64kB (UME) 205*128kB (UME) 169*256kB (UME) 63*512kB (UM) 28*1024kB (UME) 20*2048kB (UME) 254*4096kB (UM) = 1315556kB
[  239.962577][T10025] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB
[  239.975726][T10025] Node 1 Normal: 199*4kB (UME) 53*8kB (UME) 43*16kB (UME) 96*32kB (UME) 31*64kB (UME) 7*128kB (UME) 6*256kB (UME) 2*512kB (M) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3891380kB
[  239.994217][T10025] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  240.003998][T10025] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  240.014923][T10025] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  240.024920][T10025] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  240.038957][T10025] 60175 total pagecache pages
[  240.043672][T10025] 0 pages in swap cache
[  240.047845][T10025] Free swap  = 124996kB
[  240.053509][T10025] Total swap = 124996kB
[  240.058330][T10025] 2097051 pages RAM
[  240.062146][T10025] 0 pages HighMem/MovableOnly
[  240.066801][T10025] 425607 pages reserved
[  240.071145][T10025] 0 pages cma reserved
[  240.107370][T10039] validate_nla: 1 callbacks suppressed
[  240.107386][T10039] netlink: 'syz.1.1013': attribute type 21 has an invalid length.
[  240.121894][T10039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1013'.
[  240.132507][T10039] netlink: 'syz.1.1013': attribute type 8 has an invalid length.
[  240.141807][T10039] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1013'.
[  240.480601][T10043] netlink: 'syz.3.1015': attribute type 2 has an invalid length.
[  240.482025][T10050] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1017'.
[  240.490317][T10043] netlink: 'syz.3.1015': attribute type 8 has an invalid length.
[  240.520939][T10043] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1015'.
[  240.783729][T10069] netlink: 'syz.1.1021': attribute type 10 has an invalid length.
[  240.803230][T10076] IPv6: NLM_F_CREATE should be specified when creating new route
[  240.815453][T10069] bridge0: port 4(macsec0) entered blocking state
[  240.826814][T10069] bridge0: port 4(macsec0) entered disabled state
[  240.835853][T10069] macsec0: entered allmulticast mode
[  240.855738][T10069] veth1_macvtap: entered allmulticast mode
[  240.892226][T10069] macsec0: entered promiscuous mode
[  240.915453][T10069] bridge0: port 4(macsec0) entered blocking state
[  240.922241][T10069] bridge0: port 4(macsec0) entered forwarding state
[  242.165346][T10117] netlink: 'syz.1.1034': attribute type 10 has an invalid length.
[  242.224036][T10117] bond0: (slave wlan1): Releasing backup interface
[  242.257836][T10117] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  242.404226][T10128] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.1036'.
[  243.119423][T10153] netlink: 'syz.3.1044': attribute type 1 has an invalid length.
[  243.163062][T10164] netlink: 212940 bytes leftover after parsing attributes in process `syz.1.1046'.
[  243.344140][T10173] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.1049'.
[  243.360710][T10173] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.1049'.
[  246.056942][ T5862] Bluetooth: hci2: ISO packet for unknown connection handle 62
[  246.095002][T10199] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1054'.
[  246.241497][T10204] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  246.280569][T10204] batman_adv: batadv0: Removing interface: batadv_slave_0
[  246.313468][T10204] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  246.338595][T10204] batman_adv: batadv0: Removing interface: batadv_slave_1
[  246.617882][T10222] netlink: 'syz.0.1062': attribute type 10 has an invalid length.
[  246.632925][T10222] wlan1: mtu less than device minimum
[  246.640451][T10222] : (slave wlan1): Error -22 calling dev_set_mtu
[  246.663733][T10222] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1062'.
[  246.673969][T10219] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1062'.
[  246.886374][T10233] netlink: 'syz.0.1066': attribute type 10 has an invalid length.
[  246.927835][T10236] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1067'.
[  246.929408][T10233] 8021q: adding VLAN 0 to HW filter on device batadv0
[  246.953909][T10233] : (slave batadv0): Enslaving as an active interface with an up link
[  247.073877][T10233] netlink: 'syz.0.1066': attribute type 10 has an invalid length.
[  247.082366][T10236] netlink: 'syz.1.1067': attribute type 2 has an invalid length.
[  247.137813][T10233] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1066'.
[  247.170914][T10233] batadv0: entered promiscuous mode
[  247.176164][T10233] batadv0: entered allmulticast mode
[  247.201222][T10246] netlink: 1053 bytes leftover after parsing attributes in process `syz.4.1069'.
[  247.805791][T10233] : (slave batadv0): Releasing backup interface
[  247.844546][T10233] bridge0: port 3(batadv0) entered blocking state
[  247.877039][T10233] bridge0: port 3(batadv0) entered disabled state
[  248.203223][T10265] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.1074'.
[  248.236218][ T9558] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  248.246242][ T9558] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  249.001566][T10278] netlink: 'syz.2.1079': attribute type 10 has an invalid length.
[  249.355334][T10293] netlink: 'syz.3.1082': attribute type 21 has an invalid length.
[  249.565537][T10301] netlink: 'syz.0.1086': attribute type 21 has an invalid length.
[  249.588117][T10301] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1086'.
[  249.612723][T10301] netlink: 'syz.0.1086': attribute type 4 has an invalid length.
[  249.634631][T10301] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1086'.
[  249.678800][T10301] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  249.699498][T10301] batman_adv: batadv0: Removing interface: batadv_slave_0
[  249.723151][T10301] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  249.731909][T10301] batman_adv: batadv0: Removing interface: batadv_slave_1
[  249.798958][T10313] netlink: 'syz.2.1088': attribute type 2 has an invalid length.
[  249.810253][T10301] bridge0: port 3(batadv0) entered disabled state
[  249.817106][T10313] netlink: 'syz.2.1088': attribute type 1 has an invalid length.
[  249.837868][T10313] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1088'.
[  250.153794][T10317] dummy0: entered promiscuous mode
[  250.182134][T10317] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  250.831947][T10327] netlink: 'syz.2.1094': attribute type 11 has an invalid length.
[  251.495452][T10356] __nla_validate_parse: 4 callbacks suppressed
[  251.495473][T10356] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1098'.
[  252.285224][T10367] validate_nla: 4 callbacks suppressed
[  252.285244][T10367] netlink: 'syz.1.1103': attribute type 29 has an invalid length.
[  252.300175][T10367] netlink: 'syz.1.1103': attribute type 29 has an invalid length.
[  252.612662][T10392] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1109'.
[  252.631648][T10392] netlink: zone id is out of range
[  252.692487][T10392] netlink: zone id is out of range
[  252.697648][T10392] netlink: zone id is out of range
[  252.717486][T10392] netlink: zone id is out of range
[  252.735878][T10392] netlink: zone id is out of range
[  252.755416][T10392] netlink: zone id is out of range
[  252.775667][T10392] netlink: zone id is out of range
[  252.814580][T10392] netlink: zone id is out of range
[  252.827441][T10392] netlink: zone id is out of range
[  253.069482][T10392] netlink: zone id is out of range
[  253.545318][T10429] netlink: 'syz.4.1120': attribute type 17 has an invalid length.
[  253.568958][T10429] netlink: 'syz.4.1120': attribute type 16 has an invalid length.
[  253.595331][T10429] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1120'.
[  253.819725][T10437] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1124'.
[  254.019420][T10440] netlink: 'syz.1.1125': attribute type 10 has an invalid length.
[  254.027683][T10440] bridge0: port 4(macsec0) entered disabled state
[  254.034405][T10440] bridge0: port 3(team0) entered disabled state
[  254.041453][T10440] bridge0: port 2(bridge_slave_1) entered disabled state
[  254.048847][T10440] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.386690][T10467] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1134'.
[  254.400380][T10467] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1134'.
[  254.412709][T10467] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1134'.
[  255.803226][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  255.810051][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  258.562140][T10549] veth0_vlan: entered allmulticast mode
[  258.741166][T10551] ªªªªªª: renamed from vlan0
[  266.307926][T10659] veth0_vlan: entered allmulticast mode
[  266.349091][T10660] ªªªªªª: renamed from vlan0
[  266.516113][T10665] syzkaller0: entered promiscuous mode
[  266.542790][T10665] syzkaller0: entered allmulticast mode
[  269.888203][T10706] pim6reg1: entered promiscuous mode
[  269.893755][T10706] pim6reg1: entered allmulticast mode
[  271.870429][T10740] pim6reg1: entered promiscuous mode
[  272.580950][T10740] pim6reg1: entered allmulticast mode
[  272.908575][T10751] syzkaller0: entered promiscuous mode
[  272.944710][T10751] syzkaller0: entered allmulticast mode
[  277.006435][T10793] sit0: entered allmulticast mode
[  277.014620][T10794] sit0: entered promiscuous mode
[  279.684608][T10849] net_ratelimit: 72 callbacks suppressed
[  279.684625][T10849] bond_slave_1: mtu less than device minimum
[  281.633877][T10900] pim6reg1: entered promiscuous mode
[  281.648330][T10900] pim6reg1: entered allmulticast mode
[  283.450363][T10944] veth1_macvtap: left promiscuous mode
[  283.468171][ T5864] Bluetooth: hci3: command 0x0406 tx timeout
[  283.729192][T10944] veth1_macvtap: entered promiscuous mode
[  283.736039][T10944] macsec0: entered promiscuous mode
[  283.796854][T10944] macsec0: entered allmulticast mode
[  283.817180][T10944] veth1_macvtap: entered allmulticast mode
[  284.968920][T10982] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.976632][T10982] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.049174][T10982] bridge0: entered allmulticast mode
[  285.090517][T10982] bridge_slave_1: left allmulticast mode
[  285.096370][T10982] bridge_slave_1: left promiscuous mode
[  285.104082][T10982] bridge0: port 2(bridge_slave_1) entered disabled state
[  285.260916][T10982] bridge_slave_0: left allmulticast mode
[  285.266605][T10982] bridge_slave_0: left promiscuous mode
[  285.298376][T10982] bridge0: port 1(bridge_slave_0) entered disabled state
[  286.017546][T11010] pim6reg1: entered promiscuous mode
[  286.023125][T11010] pim6reg1: entered allmulticast mode
[  288.566884][T11046] syzkaller0: entered promiscuous mode
[  288.572561][T11046] syzkaller0: entered allmulticast mode
[  292.173173][T11098] syzkaller0: entered promiscuous mode
[  292.192384][T11098] syzkaller0: entered allmulticast mode
[  298.780511][ T5943] ------------[ cut here ]------------
[  298.786223][ T5943] WARNING: CPU: 1 PID: 5943 at kernel/cgroup/rstat.c:305 css_rstat_flush+0x6d0/0x1890
[  298.795784][ T5943] Modules linked in:
[  298.799823][ T5943] CPU: 1 UID: 0 PID: 5943 Comm: kworker/1:5 Not tainted 6.16.0-syzkaller-gf3af62b6cee8 #0 PREEMPT(full) 
[  298.811006][ T5943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  298.821051][ T5943] Workqueue: cgroup_destroy css_free_rwork_fn
[  298.827122][ T5943] RIP: 0010:css_rstat_flush+0x6d0/0x1890
[  298.832745][ T5943] Code: ff df 80 3c 08 00 74 08 4c 89 ff e8 ea 68 6a 00 4d 8b 27 4c 3b 64 24 20 74 24 e8 7b 15 07 00 e9 77 ff ff ff e8 71 15 07 00 90 <0f> 0b 90 eb be e8 66 15 07 00 4c 8b 74 24 20 e9 c5 10 00 00 e8 57
[  298.852340][ T5943] RSP: 0018:ffffc90004e17848 EFLAGS: 00010093
[  298.858398][ T5943] RAX: ffffffff81b8897f RBX: ffff8880268f0000 RCX: ffff88802e731e00
[  298.866359][ T5943] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8880b8640fb8
[  298.874318][ T5943] RBP: ffffffff8dbd8d10 R08: ffffc90004e177c7 R09: 1ffff920009c2ef8
[  298.882276][ T5943] R10: dffffc0000000000 R11: fffff520009c2ef9 R12: ffff8880268f0000
[  298.890233][ T5943] R13: 1ffff11024b85401 R14: ffff888125c2a008 R15: ffffe8ffffc674a0
[  298.898193][ T5943] FS:  0000000000000000(0000) GS:ffff888125d2a000(0000) knlGS:0000000000000000
[  298.907110][ T5943] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  298.913678][ T5943] CR2: 00007fb1696e56c0 CR3: 000000007c05c000 CR4: 00000000003526f0
[  298.921640][ T5943] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  298.929598][ T5943] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  298.937561][ T5943] Call Trace:
[  298.940827][ T5943]  <TASK>
[  298.943773][ T5943]  ? __lock_acquire+0xab9/0xd20
[  298.948627][ T5943]  css_rstat_exit+0xa9/0x320
[  298.953204][ T5943]  ? process_scheduled_works+0x9ef/0x17b0
[  298.958942][ T5943]  ? percpu_ref_exit+0xc5/0x1c0
[  298.963788][ T5943]  css_free_rwork_fn+0x90/0xb80
[  298.968631][ T5943]  ? process_scheduled_works+0x9ef/0x17b0
[  298.974344][ T5943]  ? process_scheduled_works+0x9ef/0x17b0
[  298.980054][ T5943]  process_scheduled_works+0xade/0x17b0
[  298.985615][ T5943]  ? __pfx_process_scheduled_works+0x10/0x10
[  298.991610][ T5943]  worker_thread+0x8a0/0xda0
[  298.996193][ T5943]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  299.002526][ T5943]  ? __kthread_parkme+0x7b/0x200
[  299.007462][ T5943]  kthread+0x711/0x8a0
[  299.011528][ T5943]  ? __pfx_worker_thread+0x10/0x10
[  299.016628][ T5943]  ? __pfx_kthread+0x10/0x10
[  299.021207][ T5943]  ? _raw_spin_unlock_irq+0x23/0x50
[  299.026397][ T5943]  ? lockdep_hardirqs_on+0x9c/0x150
[  299.031596][ T5943]  ? __pfx_kthread+0x10/0x10
[  299.036179][ T5943]  ret_from_fork+0x3f9/0x770
[  299.040767][ T5943]  ? __pfx_ret_from_fork+0x10/0x10
[  299.045869][ T5943]  ? __switch_to_asm+0x39/0x70
[  299.050620][ T5943]  ? __switch_to_asm+0x33/0x70
[  299.055376][ T5943]  ? __pfx_kthread+0x10/0x10
[  299.059958][ T5943]  ret_from_fork_asm+0x1a/0x30
[  299.064746][ T5943]  </TASK>
[  299.067756][ T5943] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  299.075020][ T5943] CPU: 1 UID: 0 PID: 5943 Comm: kworker/1:5 Not tainted 6.16.0-syzkaller-gf3af62b6cee8 #0 PREEMPT(full) 
[  299.086195][ T5943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  299.096239][ T5943] Workqueue: cgroup_destroy css_free_rwork_fn
[  299.102304][ T5943] Call Trace:
[  299.105599][ T5943]  <TASK>
[  299.108515][ T5943]  dump_stack_lvl+0x99/0x250
[  299.113093][ T5943]  ? __asan_memcpy+0x40/0x70
[  299.117671][ T5943]  ? __pfx_dump_stack_lvl+0x10/0x10
[  299.122855][ T5943]  ? __pfx__printk+0x10/0x10
[  299.127445][ T5943]  vpanic+0x27a/0x730
[  299.131420][ T5943]  ? __pfx__printk+0x10/0x10
[  299.136002][ T5943]  ? __pfx_vpanic+0x10/0x10
[  299.140496][ T5943]  ? is_bpf_text_address+0x26/0x2b0
[  299.145696][ T5943]  panic+0xb9/0xc0
[  299.149405][ T5943]  ? __pfx_panic+0x10/0x10
[  299.153843][ T5943]  __warn+0x31b/0x4b0
[  299.157813][ T5943]  ? css_rstat_flush+0x6d0/0x1890
[  299.162825][ T5943]  ? css_rstat_flush+0x6d0/0x1890
[  299.167835][ T5943]  report_bug+0x2be/0x4f0
[  299.172157][ T5943]  ? css_rstat_flush+0x6d0/0x1890
[  299.177168][ T5943]  ? css_rstat_flush+0x6d0/0x1890
[  299.182178][ T5943]  ? css_rstat_flush+0x6d2/0x1890
[  299.187191][ T5943]  handle_bug+0x84/0x160
[  299.191424][ T5943]  exc_invalid_op+0x1a/0x50
[  299.195922][ T5943]  asm_exc_invalid_op+0x1a/0x20
[  299.200758][ T5943] RIP: 0010:css_rstat_flush+0x6d0/0x1890
[  299.206378][ T5943] Code: ff df 80 3c 08 00 74 08 4c 89 ff e8 ea 68 6a 00 4d 8b 27 4c 3b 64 24 20 74 24 e8 7b 15 07 00 e9 77 ff ff ff e8 71 15 07 00 90 <0f> 0b 90 eb be e8 66 15 07 00 4c 8b 74 24 20 e9 c5 10 00 00 e8 57
[  299.226153][ T5943] RSP: 0018:ffffc90004e17848 EFLAGS: 00010093
[  299.232209][ T5943] RAX: ffffffff81b8897f RBX: ffff8880268f0000 RCX: ffff88802e731e00
[  299.240175][ T5943] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8880b8640fb8
[  299.248136][ T5943] RBP: ffffffff8dbd8d10 R08: ffffc90004e177c7 R09: 1ffff920009c2ef8
[  299.256095][ T5943] R10: dffffc0000000000 R11: fffff520009c2ef9 R12: ffff8880268f0000
[  299.264054][ T5943] R13: 1ffff11024b85401 R14: ffff888125c2a008 R15: ffffe8ffffc674a0
[  299.272021][ T5943]  ? css_rstat_flush+0x6cf/0x1890
[  299.277039][ T5943]  ? css_rstat_flush+0x6cf/0x1890
[  299.282069][ T5943]  ? __lock_acquire+0xab9/0xd20
[  299.286917][ T5943]  css_rstat_exit+0xa9/0x320
[  299.291493][ T5943]  ? process_scheduled_works+0x9ef/0x17b0
[  299.297205][ T5943]  ? percpu_ref_exit+0xc5/0x1c0
[  299.302046][ T5943]  css_free_rwork_fn+0x90/0xb80
[  299.306887][ T5943]  ? process_scheduled_works+0x9ef/0x17b0
[  299.312600][ T5943]  ? process_scheduled_works+0x9ef/0x17b0
[  299.318313][ T5943]  process_scheduled_works+0xade/0x17b0
[  299.323884][ T5943]  ? __pfx_process_scheduled_works+0x10/0x10
[  299.329870][ T5943]  worker_thread+0x8a0/0xda0
[  299.334458][ T5943]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  299.340786][ T5943]  ? __kthread_parkme+0x7b/0x200
[  299.345725][ T5943]  kthread+0x711/0x8a0
[  299.349785][ T5943]  ? __pfx_worker_thread+0x10/0x10
[  299.354880][ T5943]  ? __pfx_kthread+0x10/0x10
[  299.359460][ T5943]  ? _raw_spin_unlock_irq+0x23/0x50
[  299.364652][ T5943]  ? lockdep_hardirqs_on+0x9c/0x150
[  299.369835][ T5943]  ? __pfx_kthread+0x10/0x10
[  299.374416][ T5943]  ret_from_fork+0x3f9/0x770
[  299.378999][ T5943]  ? __pfx_ret_from_fork+0x10/0x10
[  299.384119][ T5943]  ? __switch_to_asm+0x39/0x70
[  299.388888][ T5943]  ? __switch_to_asm+0x33/0x70
[  299.393659][ T5943]  ? __pfx_kthread+0x10/0x10
[  299.398250][ T5943]  ret_from_fork_asm+0x1a/0x30
[  299.403017][ T5943]  </TASK>
[  299.406296][ T5943] Kernel Offset: disabled
[  299.410607][ T5943] Rebooting in 86400 seconds..