last executing test programs:

5.550946779s ago: executing program 1 (id=429):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x9d741df904aad753, 0x0, 0x0, {{@in6=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@broadcast, 0x0, 0x6c}, @in6=@rand_addr=' \x01\x00', {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)
r3 = epoll_create1(0x80000)
poll(&(0x7f0000000140)=[{r2, 0x8080}, {r0, 0x8000}, {r3, 0x5298}], 0x3, 0xfffff001)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00001700000000001c0037800b0001086970768a616e08000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmmsg$inet(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)='E', 0x1}], 0x1}}], 0x1, 0x8010)
shutdown(r1, 0x1)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x1, 0x5}]}, @var={0x4, 0x0, 0x0, 0xe, 0x3}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x4, 0x8}]}, {0x0, [0x30, 0x30, 0x0]}}, &(0x7f00000004c0)=""/158, 0x51, 0x9e, 0x0, 0x2, 0x10000}, 0x28)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', r6, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0xffffffffffffffff, <r10=>0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xff, '\x00', r6, 0xffffffffffffffff, 0x1}, 0x50)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000340)={&(0x7f0000000540)="3b14265d2a9eee7c089ecde19a2559ee3e316a782c3d0d50816bc0cb775db410d40152d7825fcc9e9a4b89872e3a016581fce14895e85588fbd5ad30af11d8728356da784e2cb2c4d6e1c81b34051158e783279257f03065923d67d99315a202c0b20db70f387aa9f5e31e6fa48590108d662484b9ca144e20644e25393f1a061cee472a8044941cfeb8d5daff40aa2dfd75fc0545e9f378ca35c41a0be68455f5f05bf159063a9136599f6fea50f3097823febd70af8cc496cd2574f629a3405ebeee7822097d826f21c0d5a1d47de8e1", &(0x7f0000001f40)=""/4096, &(0x7f0000000780)="0d8c1d61e348d64ba0f885366863622dc347a95321e40c05ca8d104817d1ae1fc904e3e650f6ceed36bf43b4ed5e6e670c70392d7723b6029f4df5daec6c4e08a30a32f6ed3d129b8e7e89c9f00cf4c8a814c2ecdb8c369e3e34cd2fd416d79f5a73f07a2a8ed117c6cab1fd6e8f158bb60a507ac2f48abd399ed4ba712785e5419760c443f74355396bd06906e0db1d036719e9a282f8e41f4b2ee24b70558151b948", &(0x7f0000000840)="1dd605aaa6ba45e8fd28ab14c48ae429156b52224382963609944a21dc246c3a9b87836a0306ccfc3f27c8b03542a86d75ca5321c36f5f4d1b98c19ee14a1432a92f8566e7374a9e62eac9575e34acc50d3031251c888da3f0e2ec5db00d29af3d4a12cbb8ba96b40b0698a9b749988b572371cff594ca268738cf3e", 0x5, r12}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r12, &(0x7f0000000140)="3156cff2394930963656873e99c19c42cbc16a", &(0x7f0000000180)=""/26}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{0x1, <r13=>0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)='%+9llu \x00'}, 0x20)
r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50)
r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)={0x1b, 0x0, 0x0, 0x1ff, 0x0, 0xffffffffffffffff, 0x8001, '\x00', r6, 0xffffffffffffffff, 0x2, 0x5, 0x5}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x1a, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x5}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @cb_func={0x18, 0x9}, @call={0x85, 0x0, 0x0, 0xd3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @generic={0x3, 0x7, 0x1, 0x0, 0x2}]}, &(0x7f0000000280)='syzkaller\x00', 0x759, 0x69, &(0x7f0000000380)=""/105, 0x40f00, 0x2, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x2, 0xd, 0x2, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000940)=[r9, r10, r11, r12, r13, r3, r0, r0, r14, r15], &(0x7f0000000980), 0x10, 0x1}, 0x94)
pselect6(0x40, &(0x7f0000000100)={0x8, 0x2, 0x5, 0x1c00000000000000, 0x9, 0x5, 0x10, 0x9}, 0x0, 0x0, 0x0, 0x0)

3.279145818s ago: executing program 1 (id=429):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x9d741df904aad753, 0x0, 0x0, {{@in6=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@broadcast, 0x0, 0x6c}, @in6=@rand_addr=' \x01\x00', {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)
r3 = epoll_create1(0x80000)
poll(&(0x7f0000000140)=[{r2, 0x8080}, {r0, 0x8000}, {r3, 0x5298}], 0x3, 0xfffff001)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00001700000000001c0037800b0001086970768a616e08000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmmsg$inet(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)='E', 0x1}], 0x1}}], 0x1, 0x8010)
shutdown(r1, 0x1)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x1, 0x5}]}, @var={0x4, 0x0, 0x0, 0xe, 0x3}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x4, 0x8}]}, {0x0, [0x30, 0x30, 0x0]}}, &(0x7f00000004c0)=""/158, 0x51, 0x9e, 0x0, 0x2, 0x10000}, 0x28)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', r6, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0xffffffffffffffff, <r10=>0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xff, '\x00', r6, 0xffffffffffffffff, 0x1}, 0x50)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000340)={&(0x7f0000000540)="3b14265d2a9eee7c089ecde19a2559ee3e316a782c3d0d50816bc0cb775db410d40152d7825fcc9e9a4b89872e3a016581fce14895e85588fbd5ad30af11d8728356da784e2cb2c4d6e1c81b34051158e783279257f03065923d67d99315a202c0b20db70f387aa9f5e31e6fa48590108d662484b9ca144e20644e25393f1a061cee472a8044941cfeb8d5daff40aa2dfd75fc0545e9f378ca35c41a0be68455f5f05bf159063a9136599f6fea50f3097823febd70af8cc496cd2574f629a3405ebeee7822097d826f21c0d5a1d47de8e1", &(0x7f0000001f40)=""/4096, &(0x7f0000000780)="0d8c1d61e348d64ba0f885366863622dc347a95321e40c05ca8d104817d1ae1fc904e3e650f6ceed36bf43b4ed5e6e670c70392d7723b6029f4df5daec6c4e08a30a32f6ed3d129b8e7e89c9f00cf4c8a814c2ecdb8c369e3e34cd2fd416d79f5a73f07a2a8ed117c6cab1fd6e8f158bb60a507ac2f48abd399ed4ba712785e5419760c443f74355396bd06906e0db1d036719e9a282f8e41f4b2ee24b70558151b948", &(0x7f0000000840)="1dd605aaa6ba45e8fd28ab14c48ae429156b52224382963609944a21dc246c3a9b87836a0306ccfc3f27c8b03542a86d75ca5321c36f5f4d1b98c19ee14a1432a92f8566e7374a9e62eac9575e34acc50d3031251c888da3f0e2ec5db00d29af3d4a12cbb8ba96b40b0698a9b749988b572371cff594ca268738cf3e", 0x5, r12}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r12, &(0x7f0000000140)="3156cff2394930963656873e99c19c42cbc16a", &(0x7f0000000180)=""/26}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{0x1, <r13=>0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)='%+9llu \x00'}, 0x20)
r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50)
r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)={0x1b, 0x0, 0x0, 0x1ff, 0x0, 0xffffffffffffffff, 0x8001, '\x00', r6, 0xffffffffffffffff, 0x2, 0x5, 0x5}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x1a, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x5}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @cb_func={0x18, 0x9}, @call={0x85, 0x0, 0x0, 0xd3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @generic={0x3, 0x7, 0x1, 0x0, 0x2}]}, &(0x7f0000000280)='syzkaller\x00', 0x759, 0x69, &(0x7f0000000380)=""/105, 0x40f00, 0x2, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x2, 0xd, 0x2, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000940)=[r9, r10, r11, r12, r13, r3, r0, r0, r14, r15], &(0x7f0000000980), 0x10, 0x1}, 0x94)
pselect6(0x40, &(0x7f0000000100)={0x8, 0x2, 0x5, 0x1c00000000000000, 0x9, 0x5, 0x10, 0x9}, 0x0, 0x0, 0x0, 0x0)

2.370047512s ago: executing program 1 (id=449):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="5aee41dea43e63a3f7fb7f110000", 0x0, 0xf004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
recvmmsg(r3, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0)
shutdown(r3, 0x0) (async)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r4, 0x0, 0x3c, 0x72, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xa0, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee5233188", 0x0, 0x8000}, 0x50) (async)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r5, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r6, 0x400448cb, 0x0) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94)
r8 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) (async)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async)
ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f00000000c0))
r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r11, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
socket$inet(0x2, 0x2, 0x0)
write(r11, &(0x7f0000000040)="05000000010000", 0x7)

2.215565402s ago: executing program 1 (id=454):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x12, 0xffffffffffffffff, 0x6484f000)
ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000200))
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e8", 0x82}], 0x1}, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x3c)
setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18)
connect$inet6(r2, &(0x7f0000001440)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x7}, 0x1c)
connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa)
socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'bond0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68)
r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000004ac0)=0x1e, 0x4)
getsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000000)=0x4)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0x11}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0xa4}}, 0x0)

1.318346861s ago: executing program 1 (id=457):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x12, 0xffffffffffffffff, 0x6484f000)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e8", 0x82}], 0x1}, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x3c)
setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18)
connect$inet6(r2, &(0x7f0000001440)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x7}, 0x1c)
connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa)
r3 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x500, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0x11}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0xa4}}, 0x0)

1.247916132s ago: executing program 2 (id=460):
r0 = socket$unix(0x1, 0x5, 0x0)
accept4(r0, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000540)=""/167, 0xa7}], 0x3}, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$netlink(0x10, 0x3, 0x0)
socket$key(0xf, 0x3, 0x2)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c)
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82187201, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
syz_80211_inject_frame(&(0x7f0000000280)=@broadcast, &(0x7f0000000100)=ANY=[@ANYRES8=r2], 0x36)
bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r6=>0xffffffffffffffff})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES64=r4, @ANYRES32=r8], 0xfc}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e7365740000180002800900010073797a30000000000800044000000000140000001100010000000000000000000000000a"], 0x68}}, 0x0)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r9], 0x44}}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000380)={'wg1\x00'})

1.189027725s ago: executing program 0 (id=462):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="fc010000190001000000000003000000ac141425000000000000000000000000fe8000000000000000000000000000aa00000000000000060a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000044010500fe880000000000000000000000000101000004d62b00000002000000ffffffff000000000000000000000000000000000403"], 0x1fc}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe8c, 0x0, 0x0, 0x0, 0x1}, 0x94)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x6}]}}]}, 0x4c}}, 0x0)
r5 = socket$inet(0xa, 0x801, 0x84)
r6 = socket$nl_route(0x10, 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000200)="8a226f2e57ce9f31c033b1ea91d2d9e84195286c3baced3f0300eb6368ed559a85603b0080", 0x25}], 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b36, &(0x7f0000000000)={'wlan0\x00'})
connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000300), 0x4)
listen(r5, 0x8)
r7 = accept4(r5, 0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x80000001}, 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x18)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$qrtr(0x2a, 0x2, 0x0)
unshare(0x20000400)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x608041, 0x0)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r9, &(0x7f0000000100)={0x90000002})
bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x12000000, 0x6e, 0x0, 0x2, 0xfffe, 0xe13a, 0xfffffffc, {0x0, @in={{0x2, 0x4e20, @loopback}}, 0x5, 0x9, 0x8001, 0x5, 0x1800}}, 0x0)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000078000000090a010400000000000000000100fffd08000a40000000000900020073797a31000000000900010073797a300000000008000540000000253c0011800a0001006c696d69740000002c0002800c000240000000000000000308000440000000010c000140fffffffffffff7ff080003"], 0xc0}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r11}, &(0x7f0000000080), &(0x7f0000000180)='%ps    \x00'}, 0x20)

1.047050672s ago: executing program 0 (id=463):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600))
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000000)="0a000000010001", 0x7)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
r1 = socket(0x200000100000011, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300) (async)
socket$packet(0x11, 0x2, 0x300)
bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x7, 0x6, @local}, 0x14)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x13)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10)
ioctl$sock_bt_hci(r2, 0x400448ca, 0x0)

990.994801ms ago: executing program 0 (id=464):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x4, @empty, 0x0, 0x3}, 0x20)
setsockopt(r0, 0xf, 0x800, &(0x7f0000002780)="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", 0x1000) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000002740)="1e", 0xfdef}], 0x1) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000021c0)={0x14, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x2e}]}, 0x14}], 0x1}, 0x4000800) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async)
write(r3, &(0x7f0000000340)="07000000010001", 0x7) (async)
r4 = accept4(r2, 0x0, 0x0, 0x800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a70000000090a050000000000000000000500000928001180080001006f7366001c0002800800014000000016080001400000000005000200d40000000900020073797a31000000000900020073797a31000000000800034000000100080005400000002d0800064000000000040009801c000000120a01010000000000000000050000050800034000000009140000001100010000000000000000000a00000aa9e4ef2c3612adbc266bce3c779c8e318d9031d1f51c8be23538b1ced7"], 0xb4}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) (async)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00'})
ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000040)=@generic={0x3, 0x8000, 0x100}) (async)
sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x0)

990.639756ms ago: executing program 0 (id=465):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x9d741df904aad753, 0x0, 0x0, {{@in6=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@broadcast, 0x0, 0x6c}, @in6=@rand_addr=' \x01\x00', {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)
r3 = epoll_create1(0x80000)
poll(&(0x7f0000000140)=[{r2, 0x8080}, {r0, 0x8000}, {r3, 0x5298}], 0x3, 0xfffff001)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00001700000000001c0037800b0001086970768a616e08000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmmsg$inet(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)='E', 0x1}], 0x1}}], 0x1, 0x8010)
shutdown(r1, 0x1)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x1, 0x5}]}, @var={0x4, 0x0, 0x0, 0xe, 0x3}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x4, 0x8}]}, {0x0, [0x30, 0x30, 0x0]}}, &(0x7f00000004c0)=""/158, 0x51, 0x9e, 0x0, 0x2, 0x10000}, 0x28)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', r6, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0xffffffffffffffff, <r10=>0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xff, '\x00', r6, 0xffffffffffffffff, 0x1}, 0x50)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000340)={&(0x7f0000000540)="3b14265d2a9eee7c089ecde19a2559ee3e316a782c3d0d50816bc0cb775db410d40152d7825fcc9e9a4b89872e3a016581fce14895e85588fbd5ad30af11d8728356da784e2cb2c4d6e1c81b34051158e783279257f03065923d67d99315a202c0b20db70f387aa9f5e31e6fa48590108d662484b9ca144e20644e25393f1a061cee472a8044941cfeb8d5daff40aa2dfd75fc0545e9f378ca35c41a0be68455f5f05bf159063a9136599f6fea50f3097823febd70af8cc496cd2574f629a3405ebeee7822097d826f21c0d5a1d47de8e1", &(0x7f0000001f40)=""/4096, &(0x7f0000000780)="0d8c1d61e348d64ba0f885366863622dc347a95321e40c05ca8d104817d1ae1fc904e3e650f6ceed36bf43b4ed5e6e670c70392d7723b6029f4df5daec6c4e08a30a32f6ed3d129b8e7e89c9f00cf4c8a814c2ecdb8c369e3e34cd2fd416d79f5a73f07a2a8ed117c6cab1fd6e8f158bb60a507ac2f48abd399ed4ba712785e5419760c443f74355396bd06906e0db1d036719e9a282f8e41f4b2ee24b70558151b948", &(0x7f0000000840)="1dd605aaa6ba45e8fd28ab14c48ae429156b52224382963609944a21dc246c3a9b87836a0306ccfc3f27c8b03542a86d75ca5321c36f5f4d1b98c19ee14a1432a92f8566e7374a9e62eac9575e34acc50d3031251c888da3f0e2ec5db00d29af3d4a12cbb8ba96b40b0698a9b749988b572371cff594ca268738cf3e", 0x5, r12}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r12, &(0x7f0000000140)="3156cff2394930963656873e99c19c42cbc16a", &(0x7f0000000180)=""/26}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{0x1, <r13=>0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)='%+9llu \x00'}, 0x20)
r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50)
r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)={0x1b, 0x0, 0x0, 0x1ff, 0x0, 0xffffffffffffffff, 0x8001, '\x00', r6, 0xffffffffffffffff, 0x2, 0x5, 0x5}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x1a, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x5}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @cb_func={0x18, 0x9}, @call={0x85, 0x0, 0x0, 0xd3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @generic={0x3, 0x7, 0x1, 0x0, 0x2}]}, &(0x7f0000000280)='syzkaller\x00', 0x759, 0x69, &(0x7f0000000380)=""/105, 0x40f00, 0x2, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x2, 0xd, 0x2, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000940)=[r9, r10, r11, r12, r13, r3, r0, r0, r14, r15], &(0x7f0000000980), 0x10, 0x1}, 0x94)

569.944663ms ago: executing program 2 (id=466):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10)
setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8)
sendmmsg$sock(r1, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@mark={{0x14, 0x1, 0x3d, 0x8}}], 0x18}}], 0x1, 0x20000844)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x12, 0xffffffffffffffff, 0x6484f000)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e8", 0x82}], 0x1}, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x3c)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18)
connect$inet6(r3, &(0x7f0000001440)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x7}, 0x1c)
connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x84}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d5, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x1f}, {}, {0x8000, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x70bd2b, 0x0, 0x2, 0x0, 0x0, 0x22}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0)
r5 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {0x0, 0x11}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0xa4}}, 0x0)

500.72374ms ago: executing program 2 (id=467):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000a00)={'sit0\x00', 0x0})
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
sendto$inet(r1, &(0x7f0000006880)="617b2d82fc596a68", 0x8, 0x24008889, 0x0, 0x0) (async)
sendto$inet(r1, &(0x7f0000006880)="617b2d82fc596a68", 0x8, 0x24008889, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB], 0xc0}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0, r0)
socket$kcm(0x2, 0x1, 0x84) (async)
r3 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000001780)}, 0x4000080)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bond0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000000000000000000000040000000041854620ff9de2a1c59c7701e6e8f1751f5c5cb10fd304380546a869d8168e9360209568a917e552b3419c71f11df43f8bb3691b2cb79f24598420030e98a540", @ANYRES32=r6, @ANYBLOB="60bc010004a701001c00128009000100626f6e64000000000c0002800500010006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x8010) (async)
sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000000000000000000000040000000041854620ff9de2a1c59c7701e6e8f1751f5c5cb10fd304380546a869d8168e9360209568a917e552b3419c71f11df43f8bb3691b2cb79f24598420030e98a540", @ANYRES32=r6, @ANYBLOB="60bc010004a701001c00128009000100626f6e64000000000c0002800500010006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x8010)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085000000570000"], 0x0}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085000000570000"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0x6, 0x0, &(0x7f0000000200)="63eced8e46dc", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
socket$can_raw(0x1d, 0x3, 0x1) (async)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00032abd7000fcdbdf255500000008000100000000000c0099000000000048000000"], 0x28}, 0x1, 0x0, 0x0, 0x8814}, 0x40)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300) (async)
r10 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000000c0)) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r11=>0x0})
sendto$packet(r10, &(0x7f0000000100)="f257a8ea7bc2", 0x6, 0x0, &(0x7f0000000200)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f00000005c0)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x1f}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)

499.855444ms ago: executing program 2 (id=468):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newsa={0x150, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private0, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x40}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8}, @XFRMA_IF_ID={0x8}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x430}]}, 0x150}}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000008c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="012abd7000fcdadf250100430008000100034921d1bcb4b7d6b374de07e102fa82b7e44fb675cb30cbb45142aff9b01c6356ffbf7f775adace4b9f6107fc5d770c0f9b66d5ce58c915e5506a315a62893ff251d98ac5c1458b71137081f04ccec95240ca0a80cb00", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400f9fffbff"], 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@newtfilter={0x34, 0x2c, 0x200, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0xb}, {0xa, 0x10}, {0x1, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x8d1}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}, 0x9000000}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

431.084128ms ago: executing program 1 (id=469):
r0 = socket$unix(0x1, 0x5, 0x0)
accept4(r0, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000540)=""/167, 0xa7}], 0x3}, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', <r4=>0x0})
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x90)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000100001e226bd70000000000000000000de5bc74b3a0e271d1fdc955407993b32191fc407dfd1127aa5add44e09dcaeca4b9063e5eba5c2743f639ace8277a4", @ANYRES32=r4, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r5, @ANYBLOB="0800030008000000"], 0x34}}, 0x4008000)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket$netlink(0x10, 0x3, 0x0)
socket$key(0xf, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c)
ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82187201, 0x0)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r8, 0x400448ca, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
syz_80211_inject_frame(&(0x7f0000000280)=@broadcast, &(0x7f0000000100)=ANY=[@ANYRES8=r6], 0x36)
bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r9=>0xffffffffffffffff})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r10, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES64=r7, @ANYRES32=r11], 0xfc}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e7365740000180002800900010073797a30000000000800044000000000140000001100010000000000000000000000000a"], 0x68}}, 0x0)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r12], 0x44}}, 0x0)

430.425696ms ago: executing program 2 (id=470):
socket$inet(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0))
socket$packet(0x11, 0x3, 0x300)
socket$netlink(0x10, 0x3, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000900000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0)

430.126416ms ago: executing program 2 (id=471):
r0 = socket$unix(0x1, 0x5, 0x0)
accept4(r0, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000540)=""/167, 0xa7}], 0x3}, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$netlink(0x10, 0x3, 0x0)
socket$key(0xf, 0x3, 0x2)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c)
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82187201, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000380)={0x3, 0x2})
ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
syz_80211_inject_frame(&(0x7f0000000280)=@broadcast, &(0x7f0000000100)=ANY=[@ANYRES8=r2], 0x36)
bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r6=>0xffffffffffffffff})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES64=r4, @ANYRES32=r8], 0xfc}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e7365740000180002800900010073797a30000000000800044000000000140000001100010000000000000000000000000a"], 0x68}}, 0x0)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r9], 0x44}}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48)

100.180659ms ago: executing program 0 (id=472):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000040), 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x780, 0x1d0, 0x5c8, 0x0, 0x5c8, 0x0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'ip6gretap0\x00', {}, {}, 0x2b}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x5], 0x0, 0x0, 0x0, [@dev, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private2, @private1, @dev, @dev={0xfe, 0x80, '\x00', 0x34}, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x81, 0x10, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x2}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7e0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x62040200)
socket$rxrpc(0x21, 0x2, 0xa)
socket$kcm(0x2, 0x1000000000000002, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r1, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b400000000000000731132000000000016640000000001009500740000000000ba56e23690a87d00935e6c02bdc1aa666714e5893645da93e92b81970ec7"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x21)
r3 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, @mcast2, @mcast2={0xff, 0x3}, 0x0, 0x0, 0xfffffffe, 0xffffffff}})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40000000190001090000000000000000021800000000fd010000000008000100ac141400080005000a0101020c00168008020000000000020600150002"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRES32=r2], 0x238}, 0x1, 0x0, 0x0, 0x4001}, 0x4040000)
close(r4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000800)=0x6)

0s ago: executing program 0 (id=473):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x0, @fixed, 0x3ff}, 0xe)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0)
getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, &(0x7f00000003c0))
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x44080)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {}, {0x9, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40055}, 0x4000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000200000002000000080062000900000600003d0003000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x0)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58)
r9 = accept4(r8, 0x0, 0x0, 0x800)
recvmmsg$unix(r9, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000100)=0x20, 0x4)
connect$pptp(r9, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast2}}, 0x1e)
r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48)
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={0x1c, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x6c00}, 0x4040000)
socket$nl_generic(0x10, 0x3, 0x10)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x2}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r12, 0x8b35, &(0x7f0000000040))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='rcu_utilization\x00', r11}, 0x18)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:5837' (ED25519) to the list of known hosts.
syzkaller login: [   48.269647][ T5792] cgroup: Unknown subsys name 'net'
[   48.377879][ T5792] cgroup: Unknown subsys name 'cpuset'
[   48.382265][ T5792] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.810945][ T5792] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.640309][ T5813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.643807][ T5813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.647468][ T5813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.650487][ T5813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.653118][ T5813] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.688188][ T5813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.691379][ T5813] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.694985][ T5813] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.705772][ T5813] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.709116][ T5813] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.741031][ T5204] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.765472][ T5204] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.768942][ T5204] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.772782][ T5204] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.776723][ T5204] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.890555][ T5811] chnl_net:caif_netlink_parms(): no params data found
[   53.914050][ T5815] chnl_net:caif_netlink_parms(): no params data found
[   54.011306][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.015633][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.019126][ T5811] bridge_slave_0: entered allmulticast mode
[   54.022930][ T5811] bridge_slave_0: entered promiscuous mode
[   54.035960][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.038920][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.041846][ T5811] bridge_slave_1: entered allmulticast mode
[   54.046877][ T5811] bridge_slave_1: entered promiscuous mode
[   54.107807][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.111780][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.115066][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.118063][ T5815] bridge_slave_0: entered allmulticast mode
[   54.121932][ T5815] bridge_slave_0: entered promiscuous mode
[   54.132544][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.142256][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.145236][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.147472][ T5815] bridge_slave_1: entered allmulticast mode
[   54.150036][ T5815] bridge_slave_1: entered promiscuous mode
[   54.166288][ T5811] team0: Port device team_slave_0 added
[   54.193053][ T5811] team0: Port device team_slave_1 added
[   54.213124][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.226580][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.228875][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.237546][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.256050][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.259881][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.262143][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.271067][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.300957][ T5817] chnl_net:caif_netlink_parms(): no params data found
[   54.307811][ T5815] team0: Port device team_slave_0 added
[   54.311509][ T5815] team0: Port device team_slave_1 added
[   54.359196][ T5811] hsr_slave_0: entered promiscuous mode
[   54.362491][ T5811] hsr_slave_1: entered promiscuous mode
[   54.366427][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.368730][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.378557][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.386028][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.388304][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.398179][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.450260][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.452589][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.455404][ T5817] bridge_slave_0: entered allmulticast mode
[   54.458104][ T5817] bridge_slave_0: entered promiscuous mode
[   54.486308][ T5815] hsr_slave_0: entered promiscuous mode
[   54.489577][ T5815] hsr_slave_1: entered promiscuous mode
[   54.492566][ T5815] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.497294][ T5815] Cannot create hsr debugfs directory
[   54.499622][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.502013][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.505153][ T5817] bridge_slave_1: entered allmulticast mode
[   54.507875][ T5817] bridge_slave_1: entered promiscuous mode
[   54.545813][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.575779][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.642541][ T5817] team0: Port device team_slave_0 added
[   54.662448][ T5817] team0: Port device team_slave_1 added
[   54.695988][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.698292][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.707951][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.727848][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.730776][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.741213][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.792234][ T5817] hsr_slave_0: entered promiscuous mode
[   54.795937][ T5817] hsr_slave_1: entered promiscuous mode
[   54.798147][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.800694][ T5817] Cannot create hsr debugfs directory
[   54.837008][ T5811] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.846026][ T5811] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.861870][ T5811] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.869425][ T5811] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.955386][ T5815] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.960897][ T5815] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.980286][ T5815] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.986409][ T5815] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.059805][ T5817] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.069996][ T5817] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.080854][ T5817] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.086438][ T5817] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.146977][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.162986][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.179875][ T5811] 8021q: adding VLAN 0 to HW filter on device team0
[   55.194417][ T5815] 8021q: adding VLAN 0 to HW filter on device team0
[   55.209413][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.211906][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.217906][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.220251][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.253921][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.256820][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.261710][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.264088][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.288669][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.316727][ T5817] 8021q: adding VLAN 0 to HW filter on device team0
[   55.347823][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.350163][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.358283][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.361123][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.472026][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.477661][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.549962][ T5815] veth0_vlan: entered promiscuous mode
[   55.556378][ T5811] veth0_vlan: entered promiscuous mode
[   55.566161][ T5815] veth1_vlan: entered promiscuous mode
[   55.572882][ T5811] veth1_vlan: entered promiscuous mode
[   55.582726][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.613218][ T5811] veth0_macvtap: entered promiscuous mode
[   55.623237][ T5811] veth1_macvtap: entered promiscuous mode
[   55.630126][ T5815] veth0_macvtap: entered promiscuous mode
[   55.643441][ T5815] veth1_macvtap: entered promiscuous mode
[   55.658900][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.670868][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.681551][ T5817] veth0_vlan: entered promiscuous mode
[   55.685082][ T5820] Bluetooth: hci0: command tx timeout
[   55.688603][ T5811] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.691578][ T5811] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.694447][ T5811] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.699132][ T5811] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.707121][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.715797][ T5817] veth1_vlan: entered promiscuous mode
[   55.723440][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.737248][ T5815] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.740134][ T5815] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.742979][ T5815] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.746564][ T5815] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.765651][ T5820] Bluetooth: hci1: command tx timeout
[   55.782546][ T5817] veth0_macvtap: entered promiscuous mode
[   55.792631][ T5817] veth1_macvtap: entered promiscuous mode
[   55.804308][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.822437][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.833192][ T5817] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.836954][ T5817] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.839825][ T5817] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.842693][ T5817] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.845911][ T5820] Bluetooth: hci2: command tx timeout
[   55.862697][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.871132][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.917838][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.920499][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.957801][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.962806][  T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.965117][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.969866][  T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.980705][ T5811] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.001741][  T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.005482][  T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.036776][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.048361][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.086012][ T5882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'.
[   56.147175][ T5883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'.
[   56.153228][ T5883] netlink: 'syz.0.1': attribute type 2 has an invalid length.
[   56.161426][ T5883] Bluetooth: MGMT ver 1.23
[   56.206677][ T5885] syz.1.2: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   56.213500][ T5885] CPU: 0 UID: 0 PID: 5885 Comm: syz.1.2 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   56.213520][ T5885] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   56.213528][ T5885] Call Trace:
[   56.213535][ T5885]  <TASK>
[   56.213540][ T5885]  dump_stack_lvl+0x189/0x250
[   56.213568][ T5885]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[   56.213589][ T5885]  ? __pfx_dump_stack_lvl+0x10/0x10
[   56.213604][ T5885]  ? __pfx__printk+0x10/0x10
[   56.213618][ T5885]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   56.213631][ T5885]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   56.213648][ T5885]  warn_alloc+0x214/0x310
[   56.213663][ T5885]  ? stack_depot_save_flags+0x429/0x900
[   56.213677][ T5885]  ? __pfx_warn_alloc+0x10/0x10
[   56.213690][ T5885]  ? kasan_save_track+0x4f/0x80
[   56.213708][ T5885]  ? xskq_create+0x56/0x170
[   56.213722][ T5885]  ? xsk_init_queue+0xb0/0x110
[   56.213735][ T5885]  ? xsk_setsockopt+0x43f/0x710
[   56.213747][ T5885]  ? do_sock_setsockopt+0x25a/0x3e0
[   56.213760][ T5885]  ? __x64_sys_setsockopt+0x18b/0x220
[   56.213771][ T5885]  ? do_syscall_64+0xfa/0x3b0
[   56.213780][ T5885]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.213794][ T5885]  __vmalloc_node_range_noprof+0x125/0x12f0
[   56.213827][ T5885]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   56.213844][ T5885]  ? __kasan_kmalloc+0x93/0xb0
[   56.213856][ T5885]  vmalloc_user_noprof+0xad/0xf0
[   56.213868][ T5885]  ? xskq_create+0xbf/0x170
[   56.213882][ T5885]  xskq_create+0xbf/0x170
[   56.213897][ T5885]  xsk_init_queue+0xb0/0x110
[   56.213913][ T5885]  xsk_setsockopt+0x43f/0x710
[   56.213929][ T5885]  ? __pfx_xsk_setsockopt+0x10/0x10
[   56.213942][ T5885]  ? __lock_acquire+0xab9/0xd20
[   56.213964][ T5885]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   56.213978][ T5885]  ? __pfx_xsk_setsockopt+0x10/0x10
[   56.213992][ T5885]  do_sock_setsockopt+0x25a/0x3e0
[   56.214003][ T5885]  ? __pfx_do_sock_setsockopt+0x10/0x10
[   56.214019][ T5885]  ? __fget_files+0x2a/0x420
[   56.214037][ T5885]  __x64_sys_setsockopt+0x18b/0x220
[   56.214054][ T5885]  do_syscall_64+0xfa/0x3b0
[   56.214063][ T5885]  ? lockdep_hardirqs_on+0x9c/0x150
[   56.214078][ T5885]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.214089][ T5885]  ? exc_page_fault+0x9f/0xf0
[   56.214101][ T5885]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.214112][ T5885] RIP: 0033:0x7fdb0518e929
[   56.214123][ T5885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   56.214133][ T5885] RSP: 002b:00007fdb06070038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   56.214145][ T5885] RAX: ffffffffffffffda RBX: 00007fdb053b5fa0 RCX: 00007fdb0518e929
[   56.214153][ T5885] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[   56.214159][ T5885] RBP: 00007fdb05210b39 R08: 0000000000000004 R09: 0000000000000000
[   56.214166][ T5885] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   56.214173][ T5885] R13: 0000000000000000 R14: 00007fdb053b5fa0 R15: 00007ffeb596dae8
[   56.214187][ T5885]  </TASK>
[   56.214197][ T5885] Mem-Info:
[   56.323095][ T5885] active_anon:5368 inactive_anon:0 isolated_anon:0
[   56.323095][ T5885]  active_file:697 inactive_file:38198 isolated_file:0
[   56.323095][ T5885]  unevictable:1768 dirty:1422 writeback:0
[   56.323095][ T5885]  slab_reclaimable:9075 slab_unreclaimable:51044
[   56.323095][ T5885]  mapped:17990 shmem:2432 pagetables:904
[   56.323095][ T5885]  sec_pagetables:0 bounce:0
[   56.323095][ T5885]  kernel_misc_reclaimable:0
[   56.323095][ T5885]  free:305245 free_pcp:20702 free_cma:0
[   56.338492][ T5885] Node 0 active_anon:12072kB inactive_anon:0kB active_file:604kB inactive_file:136724kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38924kB dirty:4400kB writeback:0kB shmem:4992kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5892kB pagetables:2052kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   56.350380][ T5885] Node 1 active_anon:9400kB inactive_anon:0kB active_file:2184kB inactive_file:16068kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:33036kB dirty:1288kB writeback:0kB shmem:4736kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5640kB pagetables:1564kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   56.361351][ T5885] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   56.370796][ T5885] lowmem_reserve[]: 0 815 815 815 815
[   56.373248][ T5885] Node 0 DMA32 free:312100kB boost:0kB min:33716kB low:42144kB high:50572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12072kB inactive_anon:0kB active_file:604kB inactive_file:136724kB unevictable:3536kB writepending:4400kB present:1556484kB managed:834740kB mlocked:0kB bounce:0kB free_pcp:47284kB local_pcp:27912kB free_cma:0kB
[   56.385566][ T5885] lowmem_reserve[]: 0 0 0 0 0
[   56.387289][ T5885] Node 1 DMA32 free:458492kB boost:0kB min:19168kB low:23960kB high:28752kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[   56.415735][ T5885] lowmem_reserve[]: 0 0 854 854 854
[   56.417664][ T5885] Node 1 Normal free:435028kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9400kB inactive_anon:0kB active_file:2184kB inactive_file:16068kB unevictable:3536kB writepending:1356kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:35276kB local_pcp:21488kB free_cma:0kB
[   56.435291][ T5885] lowmem_reserve[]: 0 0 0 0 0
[   56.436940][ T5885] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   56.440904][ T5885] Node 0 DMA32: 68*4kB (UM) 69*8kB (ME) 54*16kB (UM) 53*32kB (ME) 9*64kB (M) 1*128kB (M) 3*256kB (UM) 2*512kB (M) 2*1024kB (M) 4*2048kB (UM) 72*4096kB (M) = 311032kB
[   56.455095][ T5885] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   56.460462][ T5885] Node 1 Normal: 3*4kB (UE) 3*8kB (UME) 165*16kB (UE) 0*32kB 33*64kB (UE) 3*128kB (UME) 1*256kB (U) 1*512kB (U) 1*1024kB (E) 1*2048kB (E) 104*4096kB (M) = 434996kB
[   56.470707][ T5885] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   56.473837][ T5885] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   56.477288][ T5885] 41361 total pagecache pages
[   56.478846][ T5885] 0 pages in swap cache
[   56.480235][ T5885] Free swap  = 124996kB
[   56.481566][ T5885] Total swap = 124996kB
[   56.482903][ T5885] 786301 pages RAM
[   56.484140][ T5885] 0 pages HighMem/MovableOnly
[   56.486338][ T5885] 240368 pages reserved
[   56.487815][ T5885] 0 pages cma reserved
[   56.979246][ T5894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5'.
[   57.188860][ T5907] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.764739][ T5813] Bluetooth: hci0: command tx timeout
[   57.854994][ T5813] Bluetooth: hci1: command tx timeout
[   57.925478][ T5813] Bluetooth: hci2: command tx timeout
[   58.166026][ T5820] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   58.172701][ T5886] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   58.238156][ T5918] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   58.242181][ T5918] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   58.383858][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'.
[   58.393181][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'.
[   58.397745][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'.
[   58.411355][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'.
[   58.414890][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'.
[   58.417852][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'.
[   58.421824][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'.
[   58.471062][ T5940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   58.576654][ T5949] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   58.707672][ T5878] IPVS: starting estimator thread 0...
[   58.717821][ T5958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   58.723279][ T5964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   58.804948][ T5966] IPVS: using max 53 ests per chain, 127200 per kthread
[   59.478968][ T5984] Zero length message leads to an empty skb
[   59.924823][ T5820] Bluetooth: hci1: command tx timeout
[   59.938975][ T5986] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   59.982631][ T5988] veth0: entered promiscuous mode
[   59.998273][ T5987] veth0: left promiscuous mode
[   60.005191][ T5820] Bluetooth: hci2: command 0x040f tx timeout
[   60.117800][ T5995] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.281351][ T6006] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   60.516008][ T6023] syz.1.40 uses obsolete (PF_INET,SOCK_PACKET)
[   61.429407][ T6032] __nla_validate_parse: 56 callbacks suppressed
[   61.429424][ T6032] netlink: 44 bytes leftover after parsing attributes in process `syz.1.43'.
[   61.493002][ T6034] netlink: 16 bytes leftover after parsing attributes in process `syz.0.44'.
[   61.498906][ T6034] netlink: 16 bytes leftover after parsing attributes in process `syz.0.44'.
[   61.580404][ T6036] netlink: 20 bytes leftover after parsing attributes in process `syz.0.45'.
[   61.583733][ T6036] netlink: 40 bytes leftover after parsing attributes in process `syz.0.45'.
[   61.627704][ T6036] netlink: 176 bytes leftover after parsing attributes in process `syz.0.45'.
[   61.943397][ T6047] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.48'.
[   62.004853][ T5204] Bluetooth: hci1: command tx timeout
[   62.040637][ T6052] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.49'.
[   62.044879][ T6051] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.49'.
[   62.050860][   T24] IPVS: starting estimator thread 0...
[   62.056607][ T6051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.085271][ T5204] Bluetooth: hci2: command 0x040f tx timeout
[   62.134669][ T6053] IPVS: using max 79 ests per chain, 189600 per kthread
[   62.858496][ T6070] netlink: 16 bytes leftover after parsing attributes in process `syz.2.55'.
[   63.049784][ T6079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   63.199724][ T6087] netlink: 'syz.1.61': attribute type 4 has an invalid length.
[   63.731881][ T6096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   64.128567][   T47] IPVS: starting estimator thread 0...
[   64.133307][ T6104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   64.175863][ T5204] Bluetooth: hci2: command 0x040f tx timeout
[   64.215859][ T6106] IPVS: using max 80 ests per chain, 192000 per kthread
[   64.311244][ T6110] syzkaller1: entered promiscuous mode
[   64.671613][ T6129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   64.768889][ T6142] syzkaller1: entered promiscuous mode
[   64.838082][ T6144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   64.913107][ T6147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   65.550090][ T6167] syzkaller1: entered promiscuous mode
[   65.635080][ T6178] netlink: 'syz.2.93': attribute type 4 has an invalid length.
[   65.670368][ T6178] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.673025][ T6178] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.756649][ T6178] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   65.765699][ T6178] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   65.804310][ T6178] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.807507][ T6178] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.810356][ T6178] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.813277][ T6178] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.254736][ T5820] Bluetooth: hci2: command 0x040f tx timeout
[   66.360091][ T6172] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   66.702282][ T6190] Bluetooth: hci0: Opcode 0x0401 failed: -4
[   66.784393][ T6215] warning: `syz.1.107' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   66.906728][ T6219] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   66.906901][ T6225] syzkaller1: entered promiscuous mode
[   67.031230][ T6229] __nla_validate_parse: 17 callbacks suppressed
[   67.031241][ T6229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.112'.
[   67.162661][ T6237] warn_alloc: 5 callbacks suppressed
[   67.162671][ T6237] syz.0.115: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   67.169917][ T6237] CPU: 1 UID: 0 PID: 6237 Comm: syz.0.115 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   67.169927][ T6237] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   67.169932][ T6237] Call Trace:
[   67.169936][ T6237]  <TASK>
[   67.169939][ T6237]  dump_stack_lvl+0x189/0x250
[   67.169956][ T6237]  ? __pfx_dump_stack_lvl+0x10/0x10
[   67.169967][ T6237]  ? __pfx__printk+0x10/0x10
[   67.169976][ T6237]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   67.169984][ T6237]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   67.169992][ T6237]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   67.170001][ T6237]  warn_alloc+0x214/0x310
[   67.170009][ T6237]  ? stack_depot_save_flags+0x40/0x900
[   67.170038][ T6237]  ? __pfx_warn_alloc+0x10/0x10
[   67.170047][ T6237]  ? kasan_save_track+0x4f/0x80
[   67.170058][ T6237]  ? xskq_create+0x56/0x170
[   67.170068][ T6237]  ? xsk_init_queue+0xb0/0x110
[   67.170076][ T6237]  ? xsk_setsockopt+0x43f/0x710
[   67.170083][ T6237]  ? do_sock_setsockopt+0x25a/0x3e0
[   67.170092][ T6237]  ? __x64_sys_setsockopt+0x18b/0x220
[   67.170099][ T6237]  ? do_syscall_64+0xfa/0x3b0
[   67.170105][ T6237]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.170114][ T6237]  __vmalloc_node_range_noprof+0x125/0x12f0
[   67.170134][ T6237]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   67.170144][ T6237]  ? __kasan_kmalloc+0x93/0xb0
[   67.170152][ T6237]  vmalloc_user_noprof+0xad/0xf0
[   67.170160][ T6237]  ? xskq_create+0xbf/0x170
[   67.170169][ T6237]  xskq_create+0xbf/0x170
[   67.170180][ T6237]  xsk_init_queue+0xb0/0x110
[   67.170192][ T6237]  xsk_setsockopt+0x43f/0x710
[   67.170207][ T6237]  ? __pfx_xsk_setsockopt+0x10/0x10
[   67.170219][ T6237]  ? __lock_acquire+0xab9/0xd20
[   67.170240][ T6237]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   67.170254][ T6237]  ? __pfx_xsk_setsockopt+0x10/0x10
[   67.170270][ T6237]  do_sock_setsockopt+0x25a/0x3e0
[   67.170285][ T6237]  ? __pfx_do_sock_setsockopt+0x10/0x10
[   67.170303][ T6237]  ? __fget_files+0x2a/0x420
[   67.170346][ T6237]  __x64_sys_setsockopt+0x18b/0x220
[   67.170364][ T6237]  do_syscall_64+0xfa/0x3b0
[   67.170372][ T6237]  ? lockdep_hardirqs_on+0x9c/0x150
[   67.170382][ T6237]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.170388][ T6237]  ? exc_page_fault+0x9f/0xf0
[   67.170399][ T6237]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.170405][ T6237] RIP: 0033:0x7f5a0c78e929
[   67.170412][ T6237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   67.170419][ T6237] RSP: 002b:00007f5a0d632038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   67.170427][ T6237] RAX: ffffffffffffffda RBX: 00007f5a0c9b6160 RCX: 00007f5a0c78e929
[   67.170432][ T6237] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008
[   67.170436][ T6237] RBP: 00007f5a0c810b39 R08: 0000000000000004 R09: 0000000000000000
[   67.170440][ T6237] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   67.170444][ T6237] R13: 0000000000000000 R14: 00007f5a0c9b6160 R15: 00007ffcd646cff8
[   67.170456][ T6237]  </TASK>
[   67.170553][ T6237] Mem-Info:
[   67.273559][ T6237] active_anon:11984 inactive_anon:0 isolated_anon:0
[   67.273559][ T6237]  active_file:1014 inactive_file:38206 isolated_file:0
[   67.273559][ T6237]  unevictable:1768 dirty:1511 writeback:0
[   67.273559][ T6237]  slab_reclaimable:9357 slab_unreclaimable:51256
[   67.273559][ T6237]  mapped:17928 shmem:2437 pagetables:835
[   67.273559][ T6237]  sec_pagetables:0 bounce:0
[   67.273559][ T6237]  kernel_misc_reclaimable:0
[   67.273559][ T6237]  free:302930 free_pcp:14944 free_cma:0
[   67.291430][ T6237] Node 0 active_anon:42788kB inactive_anon:0kB active_file:964kB inactive_file:136752kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:39100kB dirty:4420kB writeback:0kB shmem:5000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5672kB pagetables:1672kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   67.304210][ T6237] Node 1 active_anon:5148kB inactive_anon:0kB active_file:3092kB inactive_file:16072kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32612kB dirty:1624kB writeback:0kB shmem:4748kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5704kB pagetables:1668kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   67.315451][ T6237] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   67.334816][ T6237] lowmem_reserve[]: 0 815 815 815 815
[   67.337598][ T6237] Node 0 DMA32 free:299076kB boost:0kB min:33716kB low:42144kB high:50572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42720kB inactive_anon:0kB active_file:964kB inactive_file:136752kB unevictable:3536kB writepending:4420kB present:1556484kB managed:834740kB mlocked:0kB bounce:0kB free_pcp:28704kB local_pcp:20904kB free_cma:0kB
[   67.350106][ T6237] lowmem_reserve[]: 0 0 0 0 0
[   67.354767][ T6237] Node 1 DMA32 free:458492kB boost:0kB min:19168kB low:23960kB high:28752kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[   67.367924][ T6237] lowmem_reserve[]: 0 0 854 854 854
[   67.370413][ T6237] Node 1 Normal free:438520kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:5284kB inactive_anon:0kB active_file:3092kB inactive_file:16072kB unevictable:3536kB writepending:1624kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:30996kB local_pcp:13796kB free_cma:0kB
[   67.383012][ T6237] lowmem_reserve[]: 0 0 0 0 0
[   67.385390][ T6237] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   67.389426][ T6237] Node 0 DMA32: 1*4kB (U) 2*8kB (UM) 2*16kB (UE) 159*32kB (UE) 61*64kB (UME) 10*128kB (U) 4*256kB (UM) 0*512kB 3*1024kB (UME) 5*2048kB (UME) 67*4096kB (M) = 299092kB
[   67.396846][ T6237] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   67.402392][ T6237] Node 1 Normal: 231*4kB (UME) 576*8kB (UM) 296*16kB (UME) 58*32kB (UM) 26*64kB (UM) 12*128kB (UM) 3*256kB (UM) 3*512kB (UME) 1*1024kB (U) 3*2048kB (UME) 101*4096kB (M) = 438492kB
[   67.408042][ T6237] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   67.410897][ T6237] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   67.414247][ T6237] 41657 total pagecache pages
[   67.416022][ T6237] 0 pages in swap cache
[   67.417340][ T6237] Free swap  = 124996kB
[   67.418676][ T6237] Total swap = 124996kB
[   67.419977][ T6237] 786301 pages RAM
[   67.421164][ T6237] 0 pages HighMem/MovableOnly
[   67.422645][ T6237] 240368 pages reserved
[   67.423957][ T6237] 0 pages cma reserved
[   67.768347][ T6261] syzkaller1: entered promiscuous mode
[   67.873998][ T6264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.334732][ T5820] Bluetooth: hci2: command 0x040f tx timeout
[   68.883864][ T6294] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.135'.
[   68.888594][ T6293] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.135'.
[   68.903461][ T6293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.925741][ T6273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.247010][ T6300] syzkaller1: entered promiscuous mode
[   69.605945][ T6320] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.147'.
[   69.643282][ T6324] syzkaller1: entered promiscuous mode
[   69.715852][ T6327] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.149'.
[   69.720671][ T6326] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.149'.
[   69.731998][ T6326] xt_hashlimit: overflow, rate too high: 1125899906842624
[   69.740256][ T6326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.859949][ T6334] netlink: 48 bytes leftover after parsing attributes in process `syz.2.152'.
[   70.237509][ T6345] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[   70.406088][ T5820] Bluetooth: hci2: command 0x040f tx timeout
[   70.540403][ T6359] wireguard0: entered promiscuous mode
[   70.542494][ T6359] wireguard0: entered allmulticast mode
[   70.559744][ T6362] syzkaller1: entered promiscuous mode
[   71.050118][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.054261][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.229470][ T6356] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   71.238748][ T6391] netlink: 16 bytes leftover after parsing attributes in process `syz.1.174'.
[   71.272925][ T6393] syzkaller1: entered promiscuous mode
[   71.626550][ T6413] netlink: 16 bytes leftover after parsing attributes in process `syz.0.182'.
[   72.076668][ T6429] syzkaller1: entered promiscuous mode
[   72.843285][ T6458] netlink: 'syz.2.200': attribute type 7 has an invalid length.
[   72.941722][ T6461] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.201'.
[   72.945855][ T6460] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.201'.
[   72.955597][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.958575][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.966431][ T6460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   72.972681][ T6460] netlink: 68 bytes leftover after parsing attributes in process `syz.2.201'.
[   73.500362][ T6472] syzkaller1: entered promiscuous mode
[   73.613879][ T6478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.208'.
[   73.789796][ T6493] netlink: 20 bytes leftover after parsing attributes in process `syz.0.214'.
[   74.146142][ T6503] syzkaller1: entered promiscuous mode
[   74.258850][ T6507] veth0: entered promiscuous mode
[   74.268621][ T6506] veth0: left promiscuous mode
[   74.342787][ T6474] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   74.408935][ T6515] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   74.492425][ T6524] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.227'.
[   74.509157][ T6524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   74.607096][ T6529] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.229'.
[   74.610526][ T6528] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.229'.
[   74.648135][ T6533] netlink: 16 bytes leftover after parsing attributes in process `syz.2.230'.
[   74.651564][ T6533] netlink: 'syz.2.230': attribute type 3 has an invalid length.
[   74.829966][ T6547] syzkaller1: entered promiscuous mode
[   75.136043][ T6561] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.240'.
[   75.154121][ T6558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.492608][ T6579] tipc: Enabling <ib:lo> not permitted
[   75.495209][ T6579] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[   75.499291][ T6579] Bluetooth: hci1: Opcode 0x080f failed: -4
[   75.610067][ T6587] syzkaller1: entered promiscuous mode
[   75.756051][ T6598] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   76.081277][ T6631] x_tables: ip6_tables: mh match: only valid for protocol 135
[   76.140879][ T6635] syzkaller1: entered promiscuous mode
[   76.309946][ T6638] Bluetooth: hci1: Opcode 0x080f failed: -4
[   76.353527][ T6644] openvswitch: netlink: Actions may not be safe on all matching packets
[   76.553740][ T6652] netlink: 'syz.1.275': attribute type 5 has an invalid length.
[   76.563882][ T6652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   76.627975][ T6658] Bluetooth: hci1: Opcode 0x080f failed: -4
[   76.957746][ T6679] syzkaller1: entered promiscuous mode
[   77.019675][ T6680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   77.113850][ T6685] unknown channel width for channel at 909000KHz?
[   77.122253][ T6685] unknown channel width for channel at 909000KHz?
[   77.372162][ T6701] warn_alloc: 13 callbacks suppressed
[   77.372178][ T6701] syz.1.293: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   77.379800][ T6701] CPU: 1 UID: 0 PID: 6701 Comm: syz.1.293 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   77.379819][ T6701] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   77.379826][ T6701] Call Trace:
[   77.379831][ T6701]  <TASK>
[   77.379837][ T6701]  dump_stack_lvl+0x189/0x250
[   77.379860][ T6701]  ? __pfx_dump_stack_lvl+0x10/0x10
[   77.379878][ T6701]  ? __pfx__printk+0x10/0x10
[   77.379892][ T6701]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   77.379905][ T6701]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   77.379944][ T6701]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   77.379959][ T6701]  warn_alloc+0x214/0x310
[   77.379972][ T6701]  ? stack_depot_save_flags+0x40/0x900
[   77.379990][ T6701]  ? __pfx_warn_alloc+0x10/0x10
[   77.380004][ T6701]  ? kasan_save_track+0x4f/0x80
[   77.380022][ T6701]  ? xskq_create+0x56/0x170
[   77.380036][ T6701]  ? xsk_init_queue+0xb0/0x110
[   77.380049][ T6701]  ? xsk_setsockopt+0x43f/0x710
[   77.380062][ T6701]  ? do_sock_setsockopt+0x25a/0x3e0
[   77.380075][ T6701]  ? __x64_sys_setsockopt+0x18b/0x220
[   77.380086][ T6701]  ? do_syscall_64+0xfa/0x3b0
[   77.380095][ T6701]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.380113][ T6701]  __vmalloc_node_range_noprof+0x125/0x12f0
[   77.380158][ T6701]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   77.380173][ T6701]  ? xskq_create+0x56/0x170
[   77.380190][ T6701]  ? __kasan_kmalloc+0x93/0xb0
[   77.380203][ T6701]  vmalloc_user_noprof+0xad/0xf0
[   77.380216][ T6701]  ? xskq_create+0xbf/0x170
[   77.380233][ T6701]  xskq_create+0xbf/0x170
[   77.380250][ T6701]  xsk_init_queue+0xb0/0x110
[   77.380267][ T6701]  xsk_setsockopt+0x43f/0x710
[   77.380284][ T6701]  ? __pfx_xsk_setsockopt+0x10/0x10
[   77.380297][ T6701]  ? __lock_acquire+0xab9/0xd20
[   77.380348][ T6701]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   77.380365][ T6701]  ? __pfx_xsk_setsockopt+0x10/0x10
[   77.380381][ T6701]  do_sock_setsockopt+0x25a/0x3e0
[   77.380396][ T6701]  ? __pfx_do_sock_setsockopt+0x10/0x10
[   77.380413][ T6701]  ? __fget_files+0x2a/0x420
[   77.380433][ T6701]  __x64_sys_setsockopt+0x18b/0x220
[   77.380451][ T6701]  do_syscall_64+0xfa/0x3b0
[   77.380460][ T6701]  ? lockdep_hardirqs_on+0x9c/0x150
[   77.380476][ T6701]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.380487][ T6701]  ? exc_page_fault+0x9f/0xf0
[   77.380505][ T6701]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.380516][ T6701] RIP: 0033:0x7fdb0518e929
[   77.380534][ T6701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   77.380544][ T6701] RSP: 002b:00007fdb06070038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   77.380557][ T6701] RAX: ffffffffffffffda RBX: 00007fdb053b5fa0 RCX: 00007fdb0518e929
[   77.380565][ T6701] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c
[   77.380572][ T6701] RBP: 00007fdb05210b39 R08: 0000000000000004 R09: 0000000000000000
[   77.380578][ T6701] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   77.380585][ T6701] R13: 0000000000000000 R14: 00007fdb053b5fa0 R15: 00007ffeb596dae8
[   77.380605][ T6701]  </TASK>
[   77.380765][ T6701] Mem-Info:
[   77.512983][ T6701] active_anon:12028 inactive_anon:0 isolated_anon:0
[   77.512983][ T6701]  active_file:1071 inactive_file:38208 isolated_file:0
[   77.512983][ T6701]  unevictable:1768 dirty:1557 writeback:0
[   77.512983][ T6701]  slab_reclaimable:9313 slab_unreclaimable:51483
[   77.512983][ T6701]  mapped:18039 shmem:2437 pagetables:862
[   77.512983][ T6701]  sec_pagetables:0 bounce:0
[   77.512983][ T6701]  kernel_misc_reclaimable:0
[   77.512983][ T6701]  free:296817 free_pcp:20128 free_cma:0
[   77.531065][ T6701] Node 0 active_anon:42772kB inactive_anon:0kB active_file:1188kB inactive_file:136760kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:39292kB dirty:4580kB writeback:0kB shmem:5000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5684kB pagetables:1900kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   77.531109][ T5204] Bluetooth: hci1: command 0x080f tx timeout
[   77.544478][ T6701] Node 1 active_anon:5324kB inactive_anon:0kB active_file:3096kB inactive_file:16072kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32928kB dirty:1652kB writeback:0kB shmem:4748kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5656kB pagetables:1532kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   77.544538][ T6701] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   77.574768][ T6701] lowmem_reserve[]: 0 815 815 815 815
[   77.577024][ T6701] Node 0 DMA32 free:282932kB boost:0kB min:33716kB low:42144kB high:50572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42756kB inactive_anon:0kB active_file:1188kB inactive_file:136768kB unevictable:3536kB writepending:4580kB present:1556484kB managed:834740kB mlocked:0kB bounce:0kB free_pcp:45476kB local_pcp:18072kB free_cma:0kB
[   77.601090][ T6701] lowmem_reserve[]: 0 0 0 0 0
[   77.604545][ T6701] Node 1 DMA32 free:458492kB boost:0kB min:19168kB low:23960kB high:28752kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[   77.617263][ T6701] lowmem_reserve[]: 0 0 854 854 854
[   77.622920][ T6701] Node 1 Normal free:439116kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:5324kB inactive_anon:0kB active_file:3096kB inactive_file:16072kB unevictable:3536kB writepending:1652kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:26044kB local_pcp:11212kB free_cma:0kB
[   77.637602][ T6701] lowmem_reserve[]: 0 0 0 0 0
[   77.639879][ T6701] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   77.647426][ T6701] Node 0 DMA32: 1*4kB (U) 94*8kB (UME) 125*16kB (UME) 76*32kB (UME) 14*64kB (UME) 9*128kB (UM) 2*256kB (U) 2*512kB (U) 1*1024kB (E) 3*2048kB (UME) 65*4096kB (M) = 282180kB
[   77.656187][ T6701] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   77.663051][ T6701] Node 1 Normal: 650*4kB (UME) 581*8kB (UME) 507*16kB (UME) 104*32kB (UME) 28*64kB (UM) 13*128kB (UM) 4*256kB (UME) 2*512kB (UM) 1*1024kB (U) 2*2048kB (ME) 100*4096kB (M) = 438912kB
[   77.672456][ T6701] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   77.676582][ T6701] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   77.680552][ T6701] 41718 total pagecache pages
[   77.682690][ T6701] 0 pages in swap cache
[   77.686408][ T6701] Free swap  = 124996kB
[   77.688399][ T6701] Total swap = 124996kB
[   77.690366][ T6701] 786301 pages RAM
[   77.692084][ T6701] 0 pages HighMem/MovableOnly
[   77.694144][ T6701] 240368 pages reserved
[   77.696118][ T6701] 0 pages cma reserved
[   77.849436][ T6719] IPVS: set_ctl: invalid protocol: 38346 242.225.226.227:0
[   77.891254][ T6719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   78.228168][ T6726] __nla_validate_parse: 62 callbacks suppressed
[   78.228181][ T6726] netlink: 52 bytes leftover after parsing attributes in process `syz.2.302'.
[   78.233716][ T6726] netlink: 52 bytes leftover after parsing attributes in process `syz.2.302'.
[   78.310988][ T6731] Bluetooth: hci0: Opcode 0x0401 failed: -22
[   78.314102][ T6731] Bluetooth: hci0: Opcode 0x0401 failed: -22
[   78.317774][ T6731] Bluetooth: hci0: Opcode 0x0401 failed: -22
[   78.320611][ T6731] Bluetooth: hci0: Opcode 0x0401 failed: -22
[   78.323448][ T6731] Bluetooth: hci0: Opcode 0x0401 failed: -22
[   78.328428][ T6731] Bluetooth: hci0: Opcode 0x0401 failed: -22
[   78.331206][ T6731] Bluetooth: hci0: Opcode 0x0401 failed: -22
[   78.333935][ T6731] Bluetooth: hci0: Opcode 0x0401 failed: -22
[   78.336791][ T6731] Bluetooth: hci0: Opcode 0x0401 failed: -22
[   78.339667][ T6731] Bluetooth: hci0: Opcode 0x0401 failed: -22
[   78.342597][ T6731] Bluetooth: hci0: Opcode 0x0401 failed: -22
[   78.347768][ T6731] Bluetooth: hci0: Opcode 0x0401 failed: -22
[   78.350664][ T6731] Bluetooth: hci0: Opcode 0x0401 failed: -22
[   78.353647][ T6731] Bluetooth: hci0: Opcode 0x0401 failed: -22
[   78.356666][ T6731] Bluetooth: hci0: Opcode 0x0401 failed: -22
[   78.359428][ T6731] Bluetooth: hci0: Opcode 0x0401 failed: -22
[   78.362170][ T6731] Bluetooth: hci0: Opcode 0x0401 failed: -22
[   78.364948][ T6731] Bluetooth: hci0: Opcode 0x0401 failed: -22
[   78.367686][ T6731] Bluetooth: hci0: Opcode 0x0401 failed: -22
[   78.370437][ T6731] Bluetooth: hci0: Opcode 0x0401 failed: -22
[   78.373201][ T6731] Bluetooth: hci0: Opcode 0x0401 failed: -22
[   78.378844][ T6731] Bluetooth: hci0: Opcode 0x0401 failed: -22
[   78.382550][ T6731] Bluetooth: hci0: Opcode 0x0401 failed: -22
[   78.385740][ T6731] Bluetooth: hci0: Opcode 0x0401 failed: -22
[   78.389471][ T6731] Bluetooth: hci0: Opcode 0x0401 failed: -22
[   78.392704][ T6731] Bluetooth: hci0: Opcode 0x0401 failed: -22
[   78.396945][ T6731] Bluetooth: hci0: Opcode 0x0401 failed: -22
[   78.399825][ T6731] Bluetooth: hci0: Opcode 0x0401 failed: -22
[   78.402578][ T6731] Bluetooth: hci0: Opcode 0x0401 failed: -22
[   78.405460][ T6731] Bluetooth: hci0: Opcode 0x0401 failed: -22
[   78.408186][ T6731] Bluetooth: hci0: Opcode 0x0401 failed: -22
[   78.410949][ T6731] Bluetooth: hci0: Opcode 0x0401 failed: -22
[   78.413730][ T6731] Bluetooth: hci0: Opcode 0x0401 failed: -22
[   78.670974][ T6745] netlink: 'syz.2.310': attribute type 1 has an invalid length.
[   78.673394][ T6745] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   78.861197][ T6759] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   78.864373][ T6760] netlink: 'syz.2.316': attribute type 4 has an invalid length.
[   78.957158][ T6770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.317'.
[   78.960732][ T6770] netlink: 18 bytes leftover after parsing attributes in process `syz.2.317'.
[   78.966204][ T6770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.317'.
[   78.969109][ T6770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.317'.
[   79.143142][ T6777] netlink: 'syz.1.321': attribute type 4 has an invalid length.
[   79.164969][ T6779] netlink: 'syz.2.322': attribute type 3 has an invalid length.
[   79.168086][ T6779] netlink: 'syz.2.322': attribute type 1 has an invalid length.
[   79.171169][ T6779] netlink: 220 bytes leftover after parsing attributes in process `syz.2.322'.
[   79.179201][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.323'.
[   79.186823][ T6783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.323'.
[   79.214652][ T6777] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.214900][ T5204] Bluetooth: hci2: command 0x040f tx timeout
[   79.218050][ T6777] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.288631][ T6789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.322'.
[   79.308361][ T6777] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.316877][ T6777] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.389981][ T6777] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.393608][ T6777] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.397397][ T6777] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.400350][ T6777] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.428860][ T6789] bridge_slave_0: left allmulticast mode
[   79.430976][ T6789] bridge_slave_0: left promiscuous mode
[   79.433364][ T6789] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.440899][ T6789] bridge_slave_1: left allmulticast mode
[   79.442819][ T6789] bridge_slave_1: left promiscuous mode
[   79.445252][ T6789] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.450308][ T6789] bond0: (slave bond_slave_0): Releasing backup interface
[   79.455245][ T6789] bond0: (slave bond_slave_1): Releasing backup interface
[   79.460643][ T6789] team0: Port device team_slave_0 removed
[   79.465718][ T6789] team0: Port device team_slave_1 removed
[   79.468788][ T6789] batman_adv: batadv0: Removing interface: batadv_slave_0
[   79.472223][ T6789] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.605854][ T5820] Bluetooth: hci1: command 0x080f tx timeout
[   79.896686][ T6776] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   80.105596][ T6808] sock: sock_set_timeout: `syz.0.332' (pid 6808) tries to set negative timeout
[   80.180952][ T6808] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[   80.371368][ T6818] pim6reg0: tun_chr_ioctl cmd 1074025694
[   80.458178][ T6802] Bluetooth: hci1: Opcode 0x080f failed: -4
[   80.598448][ T6828] syzkaller1: entered promiscuous mode
[   80.906285][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.910228][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.918188][ T6845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   81.135296][  T149] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[   81.144261][ T6850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   81.148457][ T6851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   81.285497][  T973] cfg80211: failed to load regulatory.db
[   81.441655][ T6856] syzkaller1: entered promiscuous mode
[   81.583906][ T6863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   81.684716][ T5820] Bluetooth: hci1: command 0x080f tx timeout
[   81.864472][ T6870] netlink: 'syz.2.354': attribute type 2 has an invalid length.
[   82.740383][ T6899] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[   82.887541][ T6908] netlink: 'syz.2.367': attribute type 2 has an invalid length.
[   82.954357][ T6911] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   83.200788][ T6925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   83.764793][ T5820] Bluetooth: hci1: command 0x080f tx timeout
[   83.936382][ T6944] syzkaller1: entered promiscuous mode
[   84.008094][ T6949] __nla_validate_parse: 19 callbacks suppressed
[   84.008109][ T6949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.381'.
[   84.015199][ T6949] netlink: 'syz.0.381': attribute type 2 has an invalid length.
[   85.075529][ T6977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.392'.
[   85.115246][ T6979] Bluetooth: hci1: Opcode 0x080f failed: -4
[   86.464362][ T7036] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.761169][ T7059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.419'.
[   86.764540][ T7059] netlink: 'syz.2.419': attribute type 2 has an invalid length.
[   87.136007][ T5820] Bluetooth: hci1: command 0x080f tx timeout
[   87.517751][ T7068] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.422'.
[   87.524434][ T7066] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.422'.
[   87.548379][ T7066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   87.627154][ T5817] cgroup: fork rejected by pids controller in /syz1
[   87.750751][ T7079] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.428'.
[   87.763149][ T7079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   87.767385][ T7078] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.428'.
[   88.080830][ T5204] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   88.085572][ T5204] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   88.089673][ T5204] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   88.094801][ T5204] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   88.098695][ T5204] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   88.233269][ T7081] chnl_net:caif_netlink_parms(): no params data found
[   88.293964][ T7081] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.297077][ T7081] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.299758][ T7081] bridge_slave_0: entered allmulticast mode
[   88.304038][ T7081] bridge_slave_0: entered promiscuous mode
[   88.307736][ T7081] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.310780][ T7081] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.321075][ T7081] bridge_slave_1: entered allmulticast mode
[   88.323735][ T7081] bridge_slave_1: entered promiscuous mode
[   88.337082][ T7098] warn_alloc: 5 callbacks suppressed
[   88.337093][ T7098] syz.2.433: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   88.346653][ T7098] CPU: 1 UID: 0 PID: 7098 Comm: syz.2.433 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   88.346665][ T7098] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   88.346670][ T7098] Call Trace:
[   88.346674][ T7098]  <TASK>
[   88.346678][ T7098]  dump_stack_lvl+0x189/0x250
[   88.346695][ T7098]  ? __pfx_dump_stack_lvl+0x10/0x10
[   88.346706][ T7098]  ? __pfx__printk+0x10/0x10
[   88.346716][ T7098]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   88.346725][ T7098]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   88.346733][ T7098]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   88.346741][ T7098]  warn_alloc+0x214/0x310
[   88.346751][ T7098]  ? stack_depot_save_flags+0x40/0x900
[   88.346764][ T7098]  ? __pfx_warn_alloc+0x10/0x10
[   88.346772][ T7098]  ? kasan_save_track+0x4f/0x80
[   88.346784][ T7098]  ? xskq_create+0x56/0x170
[   88.346794][ T7098]  ? xsk_init_queue+0xb0/0x110
[   88.346803][ T7098]  ? xsk_setsockopt+0x43f/0x710
[   88.346811][ T7098]  ? do_sock_setsockopt+0x25a/0x3e0
[   88.346820][ T7098]  ? __x64_sys_setsockopt+0x18b/0x220
[   88.346827][ T7098]  ? do_syscall_64+0xfa/0x3b0
[   88.346833][ T7098]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.346843][ T7098]  __vmalloc_node_range_noprof+0x125/0x12f0
[   88.346862][ T7098]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   88.346870][ T7098]  ? xskq_create+0x56/0x170
[   88.346880][ T7098]  ? __kasan_kmalloc+0x93/0xb0
[   88.346888][ T7098]  vmalloc_user_noprof+0xad/0xf0
[   88.346896][ T7098]  ? xskq_create+0xbf/0x170
[   88.346905][ T7098]  xskq_create+0xbf/0x170
[   88.346916][ T7098]  xsk_init_queue+0xb0/0x110
[   88.346927][ T7098]  xsk_setsockopt+0x43f/0x710
[   88.346937][ T7098]  ? __pfx_xsk_setsockopt+0x10/0x10
[   88.346945][ T7098]  ? __lock_acquire+0xab9/0xd20
[   88.346960][ T7098]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   88.346970][ T7098]  ? __pfx_xsk_setsockopt+0x10/0x10
[   88.346979][ T7098]  do_sock_setsockopt+0x25a/0x3e0
[   88.346989][ T7098]  ? __pfx_do_sock_setsockopt+0x10/0x10
[   88.346998][ T7098]  ? __fget_files+0x2a/0x420
[   88.347010][ T7098]  __x64_sys_setsockopt+0x18b/0x220
[   88.347020][ T7098]  do_syscall_64+0xfa/0x3b0
[   88.347026][ T7098]  ? lockdep_hardirqs_on+0x9c/0x150
[   88.347036][ T7098]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.347042][ T7098]  ? exc_page_fault+0x9f/0xf0
[   88.347052][ T7098]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.347059][ T7098] RIP: 0033:0x7f7e1398e929
[   88.347067][ T7098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   88.347073][ T7098] RSP: 002b:00007f7e14894038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   88.347083][ T7098] RAX: ffffffffffffffda RBX: 00007f7e13bb6080 RCX: 00007f7e1398e929
[   88.347088][ T7098] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[   88.347092][ T7098] RBP: 00007f7e13a10b39 R08: 0000000000000004 R09: 0000000000000000
[   88.347096][ T7098] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   88.347101][ T7098] R13: 0000000000000000 R14: 00007f7e13bb6080 R15: 00007ffd9ae17ff8
[   88.347112][ T7098]  </TASK>
[   88.347115][ T7098] Mem-Info:
[   88.470158][ T7098] active_anon:11956 inactive_anon:0 isolated_anon:0
[   88.470158][ T7098]  active_file:1137 inactive_file:38218 isolated_file:0
[   88.470158][ T7098]  unevictable:1768 dirty:94 writeback:0
[   88.470158][ T7098]  slab_reclaimable:9379 slab_unreclaimable:52586
[   88.470158][ T7098]  mapped:18045 shmem:2437 pagetables:825
[   88.470158][ T7098]  sec_pagetables:0 bounce:0
[   88.470158][ T7098]  kernel_misc_reclaimable:0
[   88.470158][ T7098]  free:296848 free_pcp:18040 free_cma:0
[   88.472226][ T7081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.486753][ T7098] Node 0 active_anon:42696kB inactive_anon:0kB active_file:1188kB inactive_file:136800kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:44656kB dirty:304kB writeback:0kB shmem:5000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5620kB pagetables:1708kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   88.493749][ T7081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.503110][ T7098] Node 1 active_anon:5132kB inactive_anon:0kB active_file:3360kB inactive_file:16072kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:27560kB dirty:72kB writeback:0kB shmem:4748kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5808kB pagetables:1564kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   88.518531][ T7098] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   88.530452][ T7098] lowmem_reserve[]: 0 815 815 815 815
[   88.533086][ T7098] Node 0 DMA32 free:263244kB boost:0kB min:33716kB low:42144kB high:50572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42696kB inactive_anon:0kB active_file:1188kB inactive_file:136800kB unevictable:3536kB writepending:304kB present:1556484kB managed:834740kB mlocked:0kB bounce:0kB free_pcp:34288kB local_pcp:13376kB free_cma:0kB
[   88.536161][ T7081] team0: Port device team_slave_0 added
[   88.546161][ T7098] lowmem_reserve[]: 0 0 0 0 0
[   88.548372][ T7098] Node 1 DMA32 free:458492kB boost:0kB min:19168kB low:23960kB high:28752kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[   88.549103][ T7081] team0: Port device team_slave_1 added
[   88.560299][ T7098] lowmem_reserve[]: 0 0 854 854 854
[   88.565434][ T7098] Node 1 Normal free:450120kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:5120kB inactive_anon:0kB active_file:3360kB inactive_file:16072kB unevictable:3536kB writepending:72kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:37260kB local_pcp:15668kB free_cma:0kB
[   88.577179][ T7098] lowmem_reserve[]: 0 0 0 0 0
[   88.579358][ T7098] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   88.587393][ T7098] Node 0 DMA32: 347*4kB (UM) 124*8kB (UME) 42*16kB (M) 184*32kB (UM) 48*64kB (UME) 9*128kB (ME) 7*256kB (ME) 4*512kB (M) 6*1024kB (ME) 3*2048kB (UME) 57*4096kB (M) = 262764kB
[   88.594382][ T7098] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   88.602000][ T7098] Node 1 Normal: 42*4kB (UME) 266*8kB (UE) 451*16kB (UME) 255*32kB (UME) 47*64kB (UM) 21*128kB (UM) 9*256kB (UME) 3*512kB (UM) 5*1024kB (U) 4*2048kB (UME) 100*4096kB (M) = 450120kB
[   88.602701][ T7081] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.610806][ T7098] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   88.613838][ T7081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.616651][ T7098] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   88.624785][ T7081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.625890][ T7081] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.630642][ T7098] 41793 total pagecache pages
[   88.632452][ T7081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.635446][ T7098] 0 pages in swap cache
[   88.635455][ T7098] Free swap  = 124996kB
[   88.635460][ T7098] Total swap = 124996kB
[   88.637972][ T7081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.648035][ T7098] 786301 pages RAM
[   88.659799][ T7098] 0 pages HighMem/MovableOnly
[   88.662006][ T7098] 240368 pages reserved
[   88.664001][ T7098] 0 pages cma reserved
[   88.699720][ T7081] hsr_slave_0: entered promiscuous mode
[   88.703725][ T7081] hsr_slave_1: entered promiscuous mode
[   88.709206][ T7081] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   88.712448][ T7081] Cannot create hsr debugfs directory
[   89.213273][ T7121] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   89.223290][ T7081] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   89.234252][ T7081] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   89.242653][ T7081] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   89.256392][ T7081] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   89.272600][ T7123] syzkaller1: entered promiscuous mode
[   89.275450][ T7123] syzkaller1: entered allmulticast mode
[   89.382770][ T7134] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   89.409740][ T7081] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.439409][ T7081] 8021q: adding VLAN 0 to HW filter on device team0
[   89.462613][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.464995][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.477069][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.479454][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.488803][ T7135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.443'.
[   89.492741][ T7135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.443'.
[   89.500749][ T7135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.443'.
[   89.504909][ T7135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.443'.
[   89.509026][ T7135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.443'.
[   89.513059][ T7135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.443'.
[   89.520571][ T7135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.443'.
[   89.524354][ T7135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.443'.
[   89.528128][ T7135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.443'.
[   89.531109][ T7135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.443'.
[   89.572201][ T7081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   89.728712][ T7081] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.787308][ T7081] veth0_vlan: entered promiscuous mode
[   89.801648][ T7081] veth1_vlan: entered promiscuous mode
[   89.803850][ T7145] Bluetooth: hci1: Opcode 0x080f failed: -4
[   89.849789][ T7081] veth0_macvtap: entered promiscuous mode
[   89.857174][ T7081] veth1_macvtap: entered promiscuous mode
[   89.872841][ T7081] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.883934][ T7081] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.901334][ T7081] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.904473][ T7081] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.908616][ T7081] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.912055][ T7081] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.984491][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.989586][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.008255][  T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.011390][  T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.103747][ T7151] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   90.126001][ T7153] netlink: 'syz.1.429': attribute type 2 has an invalid length.
[   90.165389][ T5204] Bluetooth: hci2: command tx timeout
[   91.294921][ T7180] netlink: 'syz.2.455': attribute type 2 has an invalid length.
[   91.854951][ T5204] Bluetooth: hci1: command 0x080f tx timeout
[   91.985120][ T7184] netlink: 'syz.0.456': attribute type 7 has an invalid length.
[   92.056685][ T7190] netlink: 'syz.0.458': attribute type 2 has an invalid length.
[   92.149130][ T7198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.245240][ T5204] Bluetooth: hci2: command 0x041b tx timeout
[   92.397797][ T7219] netlink: 'syz.0.465': attribute type 2 has an invalid length.
[   92.939477][ T7230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.972547][ T7234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   93.203087][ T7238] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   93.356128][ T7242] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN PTI
[   93.359981][ T7242] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027]
[   93.363155][ T7242] CPU: 0 UID: 0 PID: 7242 Comm: syz.0.473 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   93.367285][ T7242] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   93.370891][ T7242] RIP: 0010:qdisc_tree_reduce_backlog+0x223/0x480
[   93.372915][ T7242] Code: 89 ef e8 00 80 b3 f8 4d 89 ef 85 db 74 0d e8 34 fc 4f f8 4c 89 f5 e9 88 00 00 00 48 8b 6d 00 48 8d 45 20 48 89 c3 48 c1 eb 03 <42> 80 3c 33 00 48 89 04 24 74 0d 48 8b 3c 24 e8 c9 7f b3 f8 48 8b
[   93.379105][ T7242] RSP: 0018:ffffc900070f7128 EFLAGS: 00010202
[   93.381170][ T7242] RAX: 0000000000000020 RBX: 0000000000000004 RCX: 0000000000000002
[   93.383785][ T7242] RDX: ffff88810767d640 RSI: 0000000000000000 RDI: 0000000000000000
[   93.386691][ T7242] RBP: 0000000000000000 R08: ffff88810767d640 R09: 0000000000000002
[   93.389727][ T7242] R10: 00000000ffffffff R11: 0000000000000002 R12: 00000000000a0009
[   93.392388][ T7242] R13: ffff888101693800 R14: dffffc0000000000 R15: ffff888101693800
[   93.394876][ T7242] FS:  00007f5a0d6536c0(0000) GS:ffff8880b8650000(0000) knlGS:0000000000000000
[   93.397704][ T7242] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   93.399800][ T7242] CR2: 00007f5a0d652fc8 CR3: 000000010aaa0000 CR4: 00000000000006f0
[   93.402360][ T7242] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   93.405097][ T7242] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   93.407655][ T7242] Call Trace:
[   93.408775][ T7242]  <TASK>
[   93.409758][ T7242]  ? qdisc_tree_reduce_backlog+0x3c/0x480
[   93.411998][ T7242]  hhf_change+0x764/0xad0
[   93.413461][ T7242]  ? __pfx_hhf_change+0x10/0x10
[   93.415149][ T7242]  ? __pfx_hhf_init+0x10/0x10
[   93.416714][ T7242]  hhf_init+0x213/0x950
[   93.418061][ T7242]  ? __pfx_hhf_init+0x10/0x10
[   93.419740][ T7242]  qdisc_create+0x7ac/0xea0
[   93.421531][ T7242]  tc_modify_qdisc+0x1426/0x2010
[   93.423152][ T7242]  ? __pfx_tc_modify_qdisc+0x10/0x10
[   93.424931][ T7242]  ? __pfx_tc_modify_qdisc+0x10/0x10
[   93.426645][ T7242]  rtnetlink_rcv_msg+0x77c/0xb70
[   93.428612][ T7242]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[   93.430228][ T7242]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   93.431976][ T7242]  ? ref_tracker_free+0x63a/0x7d0
[   93.433624][ T7242]  ? __copy_skb_header+0xa7/0x550
[   93.435271][ T7242]  ? __pfx_ref_tracker_free+0x10/0x10
[   93.436988][ T7242]  netlink_rcv_skb+0x208/0x470
[   93.438508][ T7242]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   93.440698][ T7242]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   93.442430][ T7242]  ? netlink_deliver_tap+0x2e/0x1b0
[   93.444076][ T7242]  ? netlink_deliver_tap+0x2e/0x1b0
[   93.445829][ T7242]  netlink_unicast+0x75b/0x8d0
[   93.447392][ T7242]  netlink_sendmsg+0x805/0xb30
[   93.448988][ T7242]  ? __pfx_netlink_sendmsg+0x10/0x10
[   93.450665][ T7242]  ? aa_sock_msg_perm+0x94/0x160
[   93.452279][ T7242]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   93.453973][ T7242]  ? __pfx_netlink_sendmsg+0x10/0x10
[   93.455690][ T7242]  __sock_sendmsg+0x21c/0x270
[   93.457266][ T7242]  ____sys_sendmsg+0x505/0x830
[   93.459073][ T7242]  ? __pfx_____sys_sendmsg+0x10/0x10
[   93.460957][ T7242]  ? import_iovec+0x74/0xa0
[   93.462657][ T7242]  ___sys_sendmsg+0x21f/0x2a0
[   93.464388][ T7242]  ? __pfx____sys_sendmsg+0x10/0x10
[   93.466167][ T7242]  ? __fget_files+0x2a/0x420
[   93.467737][ T7242]  ? __fget_files+0x3a0/0x420
[   93.469383][ T7242]  __x64_sys_sendmsg+0x19b/0x260
[   93.470955][ T7242]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   93.472691][ T7242]  ? rcu_is_watching+0x15/0xb0
[   93.474228][ T7242]  ? do_syscall_64+0xbe/0x3b0
[   93.475731][ T7242]  do_syscall_64+0xfa/0x3b0
[   93.477304][ T7242]  ? lockdep_hardirqs_on+0x9c/0x150
[   93.479467][ T7242]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.481856][ T7242]  ? exc_page_fault+0x9f/0xf0
[   93.483483][ T7242]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.485405][ T7242] RIP: 0033:0x7f5a0c78e929
[   93.486826][ T7242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   93.494308][ T7242] RSP: 002b:00007f5a0d653038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   93.497768][ T7242] RAX: ffffffffffffffda RBX: 00007f5a0c9b6080 RCX: 00007f5a0c78e929
[   93.500574][ T7242] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000005
[   93.503191][ T7242] RBP: 00007f5a0c810b39 R08: 0000000000000000 R09: 0000000000000000
[   93.505761][ T7242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   93.508371][ T7242] R13: 0000000000000000 R14: 00007f5a0c9b6080 R15: 00007ffcd646cff8
[   93.510996][ T7242]  </TASK>
[   93.512040][ T7242] Modules linked in:
[   93.513485][ T7242] ---[ end trace 0000000000000000 ]---
[   93.515693][ T7242] RIP: 0010:qdisc_tree_reduce_backlog+0x223/0x480
[   93.518083][ T7242] Code: 89 ef e8 00 80 b3 f8 4d 89 ef 85 db 74 0d e8 34 fc 4f f8 4c 89 f5 e9 88 00 00 00 48 8b 6d 00 48 8d 45 20 48 89 c3 48 c1 eb 03 <42> 80 3c 33 00 48 89 04 24 74 0d 48 8b 3c 24 e8 c9 7f b3 f8 48 8b
[   93.524472][ T7242] RSP: 0018:ffffc900070f7128 EFLAGS: 00010202
[   93.526682][ T7242] RAX: 0000000000000020 RBX: 0000000000000004 RCX: 0000000000000002
[   93.529425][ T7242] RDX: ffff88810767d640 RSI: 0000000000000000 RDI: 0000000000000000
[   93.532289][ T7242] RBP: 0000000000000000 R08: ffff88810767d640 R09: 0000000000000002
[   93.535200][ T7242] R10: 00000000ffffffff R11: 0000000000000002 R12: 00000000000a0009
[   93.538309][ T7242] R13: ffff888101693800 R14: dffffc0000000000 R15: ffff888101693800
[   93.541513][ T7242] FS:  00007f5a0d6536c0(0000) GS:ffff8880b8650000(0000) knlGS:0000000000000000
[   93.545255][ T7242] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   93.548042][ T7242] CR2: 00007f5a0d652fc8 CR3: 000000010aaa0000 CR4: 00000000000006f0
[   93.551383][ T7242] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   93.554777][ T7242] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   93.558127][ T7242] Kernel panic - not syncing: Fatal exception in interrupt
[   93.561742][ T7242] Kernel Offset: disabled
[   93.563460][ T7242] Rebooting in 86400 seconds..

VM DIAGNOSIS:
22:10:17  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000104e RDI=000000000000104f RBP=00000000000003f8 RSP=ffffc900070f6950
R8 =ffff888108640237 R9 =1ffff110210c8046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac490f R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f5a0d6536c0 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5a0d652fc8 CR3=000000010aaa0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f5a0c984478 00007f5a0c984450 XMM03=00007f5a0c984488 00007f5a0c984480
XMM04=00007f5a0d4ed100 00007f5a0c984440 XMM05=00007f5a0c984458 00007f5a0c9844a0
XMM06=00007f5a0c984498 00007f5a0c984490 XMM07=00007f5a0c984488 00007f5a0c984480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f5a0c811c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=3ea9d6f0b514a800 RBX=ffffffff81974d58 RCX=3ea9d6f0b514a800 RDX=0000000000000001
RSI=ffffffff8be28d20 RDI=ffffffff81974d58 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa10cf0 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d6000
RIP=ffffffff8b66b4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2717ea CR3=000000010aaa0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000006f6c
XMM02=00007f5a0c984478 00007f5a0c984450 XMM03=00007f5a0c984488 00007f5a0c984480
XMM04=00007f5a0d4ed100 00007f5a0c984440 XMM05=00007f5a0c984458 00007f5a0c9844a0
XMM06=00007f5a0c984498 00007f5a0c984490 XMM07=00007f5a0c984488 00007f5a0c984480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f5a0c811c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
