last executing test programs:

1m10.709804433s ago: executing program 1 (id=2280):
r0 = socket(0x2a, 0x2, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000180)={0x1d, r2, 0x0, {0x1}, 0x1}, 0x18)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5f}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_FWD_METHOD={0x0, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0xfffffffffffffe01, 0x6, 0x9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x48880)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0)
sendmmsg$inet(r3, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)
getsockname$packet(r0, &(0x7f0000000880)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000008c0)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0)
r5 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$sock_int(r5, 0x1, 0x1, &(0x7f0000000540)=0x94, 0x4)
socket$l2tp6(0xa, 0x2, 0x73)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="02000000"], 0x10)
socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$kcm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000900)="78ed2b37f2f214e33914f09ca2bf3365997d4b4970acc2f60325b84f447b05b2d9bb93b59f4d924736a9487c2ca1a0c29c523e334aad01c2479ae1c3942b2cbcce5c9a72a23aa355a83b138efada53c6e5a6b8a418918fecfe6d27883172ca6cff0915bc47058f8b7ba54218e8d4483f936b2de18477e10217d411d290aa585f20ecdacf18445699d40de498d9ad9db8e25e9d4cb9", 0x95}, {&(0x7f0000003100)="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", 0x1010}, {&(0x7f00000019c0)="95ed8342f7d48dfcd1f61541ed078e8ca2677408a171a4bc768bd2c22fd851a0274a3a337290d0cf05e00f222132265d8c22f15ae8a45809a6293be9a0ff1a8c1b2414c278767dca74ebbc5bfaecfbf6bbfdfa73f4fabf829cc1c3e86a690d50ffd1b59a2acf8b488168b73f5b2cf36ee9363fbb0e156339fbf2410f221ae307515f3bea4fb22cf77670caa81fc19e00d1e902fbf0e0b916ff3c10f3", 0x9c}], 0x3}, 0x4000000)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30)
syz_emit_ethernet(0x1622, &(0x7f0000001ac0)={@multicast, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x3, 0x6, "e2e762", 0x15ec, 0x2f, 0x1, @rand_addr=' \x01\x00', @private1, {[@routing={0x2b, 0xa, 0x1, 0x3, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, @empty]}, @fragment={0x2c, 0x0, 0x5, 0x1, 0x0, 0x6, 0x66}, @fragment={0x8, 0x0, 0x20, 0x0, 0x0, 0x3, 0x66}, @dstopts={0x67, 0x1f, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x3}, @generic={0x6, 0xda, "2952e489b74e2777cec11541882f8ad0779325fc9e56798e87014320946946c5318c4ea2d9c871d0b8bd4b7016bbe4e153122a32f66df7893ad0e610e3bc0e1bb963aa5a911f5c9fa4971a71b1bbb32c6b16ea24970c400abb00bc4c1edf3c280f07a630551b30cf6f29a74d7216d50e864b8b957f44a5aca1db7ec3b31238fbaa7423782fa6d31e77faa0f0dff4267ebb988b5b639627057f35bb55498e8963cc0aac3220b9fb1938353e40f2b0b713abcf35004882f9cc6a8bb0cd0381098805cadf93f8cc9942d2afeaa2e78c9d5906d1cc693ad114cd1990"}, @ra={0x5, 0x2, 0x7}, @jumbo={0xc2, 0x4, 0xb5}, @enc_lim={0x4, 0x1, 0x3e}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @routing={0x4, 0x2, 0x0, 0x6, 0x0, [@remote]}, @routing={0x3b, 0x4, 0x3, 0x6, 0x0, [@private2, @private1={0xfc, 0x1, '\x00', 0x1}]}, @routing={0x88, 0xa, 0x0, 0x6, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, @ipv4={'\x00', '\xff\xff', @multicast1}, @remote, @loopback]}, @dstopts={0x88, 0x22b, '\x00', [@generic={0x1, 0x8a, "2fdb4dd2e16ae81e9b5d69f638d2d918a2358bd31dc755babc73f3275d3032f297d4d16bd28fbc4a248e6a4f46efb92070b6684798ec1c5eba6b7d4ace6418fe2b1ecfd84644dac262e6a13ea10e2aa0ae16601d4a4784638959467a51c448167c29359b7cbe79731de5faeffc54ad0b17b560115a693e16f8a68c090d2ca71b5eee30e580d043f2a3b5"}, @generic={0x69, 0x1000, "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"}, @ra={0x5, 0x2, 0xfffe}, @enc_lim={0x4, 0x1, 0x40}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x9, 0x8]}}, @calipso={0x7, 0x58, {0x3, 0x14, 0x7, 0x9, [0x3, 0x101, 0x4, 0x7fffffff, 0x0, 0x4, 0x93, 0x0, 0x5, 0x1f44]}}, @calipso={0x7, 0x38, {0x3, 0xc, 0x9, 0xfff1, [0x8000000000000001, 0xd5b, 0x8, 0x6, 0x80000000, 0xb]}}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xd1, 0x1, [], "c5e4c3ab874b76138a97082f01c5180f3e5612c943656b1933e7f73148df7e75ffc56e9388f4f6c10696d494b432a8cfbf5bb32e049a82802dc20cd5948d84d23385cded2472b5597ba3930b12baff161265b52994f26a3124ae402c649f32942cdaa806d21e1b90f539db4147eb6b75aca61f6d901c5eafa13154fce2fa43e0f8f6931c01af156366c854a2b1ca0417298120e6d73acfa66409a542a5a24f6abe90378bba1fadd4bc4103929f801edd872141a7bbace6554f6d376bc2fd8879960d6c9b29af26a0a46d03d06dd2f44774"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x9, 0x4], "62a77285618bb6f88e7a"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x1], "8fbf2a89be393d7a87f2f444f2b3472eef1707212d2957d08725190a95d255c57a01c02b09f1e5b50405771ef1f5f1e04a69fd417abbaacc4a328368866573abe0a00e405b8990e78f988af8a067f32a075bcc99dac9dcb38beab0a192"}, {0x8, 0x88be, 0x3, {{0x8, 0x1, 0x3, 0x0, 0x1, 0x0, 0x2, 0xdf}, 0x1, {0x100}}}, {0x8, 0x22eb, 0x3, {{0xa, 0x2, 0xc, 0x1, 0x0, 0x2, 0x1, 0x7}, 0x2, {0x1ff, 0x81, 0x0, 0x1c, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x4, "58ca82090bbd658398b5f1ca654379ed7c67464512f01f5d0e80b02d8756614c8b347ceb909e50662a573d8fa0598149d5b5d48566181c1a654ca501ccd55760e26fc1b19417bd83315ac59e6c843be9de02ae95118985ca8a87fa31376eee3e01ac19605e6ebc4cee3ea11ae564a20acba1cb9b2806b35c4f726ba625f311e5c1624811b70782974b2ad318ec429852e65739be2a4628278e92c82d20cf930b17801c9cf38916bbadb97e04b12ac7681bdc97c3a391264a044c1206678185305d1303e14558a81d2d209fa5203ccf7b1e95230bf4140ef6b23b60b48a312740955557307289fc71959e9a1f9180690a178594a464e12067470c"}}}}}}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x9c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x6c, 0x2, [@TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0x1}, @TCA_FLOWER_KEY_TCP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e21}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x3}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffffff, 0xff000000, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_ICMPV4_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast1}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x40}, @TCA_FLOWER_KEY_TCP_SRC={0x6}]}}]}, 0x9c}}, 0x4000)
r8 = socket$netlink(0x10, 0x3, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b00000000802110000010802110100000802110000001000000002000000"], 0x1e)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)

1m9.868400605s ago: executing program 1 (id=2283):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000480012800e00010069703667726574617000000034000280140007002001000000000000000000000000000014000600fe80000000000000000000000000001508000100", @ANYRES32=r2, @ANYBLOB="f1e396"], 0x68}}, 0x0)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f00000000c0)=0x8000, 0x4)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000040)={0x2, 0x4, 0x7fffffff}, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$alg(0x26, 0x5, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8983, &(0x7f0000000dc0)={0x8, 'vlan1\x00', {'ip6_vti0\x00'}})
syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300), 0x0)
r5 = accept4(r3, 0x0, 0x0, 0x0)
sendmmsg$alg(r5, &(0x7f0000005dc0), 0x0, 0x0)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1804000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r6, &(0x7f0000000780)}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)

1m9.597981343s ago: executing program 1 (id=2285):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r0)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

58.336775169s ago: executing program 4 (id=2341):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
unshare(0x6a040000)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(r2, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$FIOCLEX(r1, 0x5451)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r4, 0x0, 0x0}, 0x10)
socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4008801}, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9f}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x80, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

57.343674187s ago: executing program 4 (id=2347):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'bond0\x00', 0x6bf1c2d5adba8c32})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000001600)={0x54, r2, 0x1, 0xfffffffd, 0x0, {0x26}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x51}, {0xc, 0x8f, 0xfffffffffffffffe}, {0xc}}]}, 0x54}}, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000cc0)={'lo\x00', &(0x7f0000000c80)=@ethtool_rxfh={0x47, 0x0, 0x0, 0x0, 0x0, "25af22"}})
close(r3)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="1c000000000003"], 0x0}, 0x94)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r7}, 0x18)
r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8)
close(r9)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r6, @ANYRES32=r10, @ANYBLOB="0200000002"], 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=r12, @ANYRES32=r11, @ANYBLOB="0200000006"], 0x10)
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0)
close(r13)
socket$kcm(0x10, 0x2, 0x10)
ioctl$SIOCSIFHWADDR(r13, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @broadcast})
connect$unix(r5, 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)

56.413894333s ago: executing program 4 (id=2352):
socket$inet6(0xa, 0x2, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r2, &(0x7f00000000c0), 0x9)
sendfile(r2, r1, 0x0, 0x10000)
sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000000e0601010000008008000000050020000500010007000000090073797b32000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4044000}, 0x4000)
bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'})
write(r0, &(0x7f0000000000)="3f000000010040", 0x7)

56.132676269s ago: executing program 4 (id=2356):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
unshare(0x62040200)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500002c00000000002f9078ac1c0001e000000100006558001890780400000000000000be04000000"], 0x3e)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r1, 0x5452, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9, 0xefff, 0x2, 0x100, 0x2000040, 0x85000040})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r4, 0x0, r6, 0x0, 0x1, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, 0x0)
write(r3, 0x0, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000380)=0x1, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32], 0x188}}, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
recvmsg(r7, 0x0, 0x1f00)
sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r7, 0x10f, 0x8a, 0x0, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000037000b002dbd78000a", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x20000080)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x6535f20f43ca3a6d, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed30000000000000000000000000000000000000000000002"], 0xb8}}, 0x0)

47.869126971s ago: executing program 1 (id=2285):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r0)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

34.124152708s ago: executing program 4 (id=2356):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
unshare(0x62040200)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500002c00000000002f9078ac1c0001e000000100006558001890780400000000000000be04000000"], 0x3e)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r1, 0x5452, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9, 0xefff, 0x2, 0x100, 0x2000040, 0x85000040})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r4, 0x0, r6, 0x0, 0x1, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, 0x0)
write(r3, 0x0, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000380)=0x1, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32], 0x188}}, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
recvmsg(r7, 0x0, 0x1f00)
sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r7, 0x10f, 0x8a, 0x0, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000037000b002dbd78000a", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x20000080)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x6535f20f43ca3a6d, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed30000000000000000000000000000000000000000000002"], 0xb8}}, 0x0)

32.138364114s ago: executing program 1 (id=2285):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r0)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

13.752832694s ago: executing program 4 (id=2356):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
unshare(0x62040200)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500002c00000000002f9078ac1c0001e000000100006558001890780400000000000000be04000000"], 0x3e)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r1, 0x5452, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9, 0xefff, 0x2, 0x100, 0x2000040, 0x85000040})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r4, 0x0, r6, 0x0, 0x1, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, 0x0)
write(r3, 0x0, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000380)=0x1, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32], 0x188}}, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
recvmsg(r7, 0x0, 0x1f00)
sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r7, 0x10f, 0x8a, 0x0, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000037000b002dbd78000a", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x20000080)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x6535f20f43ca3a6d, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed30000000000000000000000000000000000000000000002"], 0xb8}}, 0x0)

12.538717272s ago: executing program 1 (id=2285):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r0)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

7.928198346s ago: executing program 2 (id=2562):
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000002c0)={0x6, 'team0\x00', {0x7}, 0x8})
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
socket$igmp(0x2, 0x3, 0x2)
socket$inet_smc(0x2b, 0x1, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0))
socket(0x11, 0x3, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4c001)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r3, &(0x7f00000000c0), 0x9)
sendfile(r3, r2, 0x0, 0x10000)
socket(0x2a, 0x800, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYRES32=r3], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140603000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x800)
socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)="03040000008002ff", 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r3)

7.645969766s ago: executing program 3 (id=2564):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xe}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}]}, 0x50}}, 0x40)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x6, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
r2 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
shutdown(r2, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0400000004000000040000000100000000000000", @ANYRES32, @ANYBLOB="00005033e9a9fe"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10)

7.383232143s ago: executing program 3 (id=2566):
socket$l2tp(0x2, 0x2, 0x73)
r0 = socket$l2tp(0x2, 0x2, 0x73)
close(r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x118, 0x2b8, 0xb0000010, 0x118, 0x5c8f0200, 0x210, 0x3a8, 0x3a8, 0x210, 0x3a8, 0x3, 0x0, {[{{@ipv6={@local, @local, [0x0, 0x0, 0xff], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0xa8, 0x118, 0x700}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x200, 0x5, 0x3, 0x0, 0x0, "6402356d78433628ee058aac233c684ee27045e8b44ed323fd8eeb530b0fecf631a12d670436dba7ed9e555e57738a4f7e31adf5d200"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318)
socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56561, 0x4, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x28, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x9}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x80000001}]}}]}, 0x58}}, 0x4040010)

6.977436671s ago: executing program 3 (id=2568):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r1)
sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fbd1df2521000000050020000000000009001f0070687931000000000c0005"], 0x34}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000000)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0}, 0x4)
pipe(&(0x7f0000000080))
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xb, 0x7, 0x10001, 0xb, 0x1}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
socket$inet_smc(0x2b, 0x1, 0x0)
shutdown(r3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x8, 0x6}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r5=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
socket$netlink(0x10, 0x3, 0xf)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r6, @ANYRES64=0x0, @ANYRESOCT], 0x20)

6.911930339s ago: executing program 2 (id=2569):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0x7100000})

6.513912484s ago: executing program 3 (id=2570):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x2000040, 0x0, 0x0)
listen(0xffffffffffffffff, 0x100)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="02000000020000", @ANYRES64=0x0], 0x10)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
r5 = socket$inet(0x2, 0x3, 0x14)
setsockopt$MRT_DEL_VIF(r5, 0x0, 0xcb, &(0x7f0000000080)={0x0, 0x4, 0x6, 0x1, @vifc_lcl_addr=@multicast2, @remote}, 0x10)
close(r1)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x804}, 0x1c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340))
setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f00000000c0)=0x5, 0x4)
socket$qrtr(0x2a, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})

5.417872144s ago: executing program 3 (id=2575):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)
r1 = socket$l2tp(0x2, 0x2, 0x73)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4)

5.132946014s ago: executing program 2 (id=2576):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000440)={@val={0x0, 0x300}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x2, 0x0}, @broadcast}, {0x0, 0x8100, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0x3e)

5.029432411s ago: executing program 3 (id=2577):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x38, 0x84, 0x47}, 0x2c)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a3100000000402b0000000a01040000000000000040010000000900030073797a31000000000900010073797a3100000000140004800800014000000005080002401886c30128000000000a05000000000000000000010000080900010073797a31000000000800024000000001140000001100010000000000000000000000000a"], 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)

3.753546099s ago: executing program 2 (id=2580):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xa, 0x0, 0x300, 0x0, 0x10, 0x1, 0x2, 0xfffffffd, 0x4}})
sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4c880}, 0x45)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, 0x0, 0x5}, 0x94)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, 0x0, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0)

3.62777983s ago: executing program 2 (id=2581):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
unshare(0x62040200)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500002c00000000002f9078ac1c0001e000000100006558001890780400000000000000be04000000"], 0x3e)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r1, 0x5452, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9, 0xefff, 0x2, 0x100, 0x2000040, 0x85000040})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r4, 0x0, r6, 0x0, 0x1, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, 0x0)
write(r3, 0x0, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000380)=0x1, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32], 0x188}}, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x1f00)
sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r7, 0x10f, 0x8a, 0x0, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000037000b002dbd78000a", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x20000080)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x6535f20f43ca3a6d, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed30000000000000000000000000000000000000000000002"], 0xb8}}, 0x0)

1.915179811s ago: executing program 0 (id=2585):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x202}], 0x18}, 0x0)
sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000000400)=""/101, 0x65}, {&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f00000004c0)=""/21, 0x15}], 0x5}}], 0x2, 0x60, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000000)='./file0\x00', r4, 0x4000, r0}, 0x18)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000004c0)={0x11, @multicast2, 0x0, 0x0, 'wlc\x00', 0x30, 0x3, 0x4e}, 0x2c)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @remote}}, 0x9, 0x7, 0x1, 0x7ff, 0xf5, 0x80000001, 0x8}, 0x9c)

948.75499ms ago: executing program 0 (id=2586):
r0 = socket(0x2a, 0x2, 0xfffffffc)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x9, 0x3, 0x48, @remote, @mcast2={0xff, 0x5}, 0x0, 0x8000, 0xfffffffc, 0x8}}) (fail_nth: 7)

476.510412ms ago: executing program 0 (id=2587):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000, r0}, 0x18)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f00000000c0))
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="012328bd7000fcdbdf251728616573290000000000000000060008000000000000000000000000001400000017d5d82cebae9347436de1ace2fe62c079040003000000000000000000000000000000000000a5e338605ec60fe758982dfd974310cf3b463e4a810e784adad76580844fd1f15f8375ea206e64eb577bd4fb9bd958f33d4a1cc84179eb541f6cd8c3884638499454cdd2bd5ea5b0dff6dad3bbe6940b64c3d512018919a0e0484d2b213586b73b2459dc1ddee3c4bc3b95af3f299a1bc32862e73f6d50b325b4a5ac30bc5ac99b388b3f6b033130fb738391a73a82b797b9f97c5a11b490597f35c8f212b2c9495d96b9b1273b9c656268ee65c2c28810403405bf941e500b16c38786268dad0fd72e21372ead31851356720aa610b5a4df1030bf56"], 0x58}}, 0x4004)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000100)={<r3=>r2, 0x52, 0xb, 0x51})
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r3, 0x4)

332.763829ms ago: executing program 0 (id=2588):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x64, 0x40, 0x105, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x50, 0x145, 0x0, 0x1, [@nested={0x4a, 0x8, 0x0, 0x1, [@generic="5364e38aab530a3f6f91da36c0d40fa52fe7e664f69256e972dfe891079d73798ab80a6bd24a7273e06e100b6f4ab07669388e092ecf45b3127c798ed3ec04216ee6ea7cd3f5"]}]}]}, 0x64}}, 0x4040040)

174.975936ms ago: executing program 0 (id=2589):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000088500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xf, 0x0, &(0x7f0000000400)="e097566f5bec64466cf0925782dd37", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

150.294265ms ago: executing program 2 (id=2590):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c)
socket$inet_udp(0x2, 0x2, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$kcm(0x29, 0x2, 0x0)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001e000100ffffffff000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000004ece7829c2de00"], 0x24}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x1, 0x4}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)
close(0x3)
close(r4)
ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={0x1, @default, @bpq0, 0x0, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000480)={0x1, @default, @bpq0, 0x1, 'syz0\x00', @bcast, 0xc, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]})
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@ipv4={""/10, ""/2, @initdev}, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000000)=0xe8)
ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f0000000180)={0x3, @bcast, r8})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'})

0s ago: executing program 0 (id=2591):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x25dfdbfc, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x380, 0xffffffff, 0x1c0, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [0x0, 0x0, 0x0, 0xff], [], 'macsec0\x00', 'bond_slave_0\x00', {0xff}, {0xff}, 0x6, 0x0, 0x1, 0x48}, 0x2f2, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7, 0x50cc}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x42b5}}}}, {{@ipv6={@private2, @mcast1, [0x0, 0xffffffff, 0xffffffff, 0xffffff00], [0x0, 0xffffffff, 0xffffff00], 'macvlan1\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x6c, 0x6, 0x6}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0)

kernel console output (not intermixed with test programs):

 name fail_usercopy, interval 1, probability 0, space 0, times 0
[  667.053181][T18280] CPU: 0 UID: 0 PID: 18280 Comm: syz.1.2080 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) 
[  667.053211][T18280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  667.053222][T18280] Call Trace:
[  667.053230][T18280]  <TASK>
[  667.053238][T18280]  dump_stack_lvl+0x189/0x250
[  667.053272][T18280]  ? __pfx____ratelimit+0x10/0x10
[  667.053295][T18280]  ? __pfx_dump_stack_lvl+0x10/0x10
[  667.053326][T18280]  ? __pfx__printk+0x10/0x10
[  667.053361][T18280]  should_fail_ex+0x414/0x560
[  667.053391][T18280]  _copy_from_user+0x2d/0xb0
[  667.053412][T18280]  bpf_test_init+0xf8/0x170
[  667.053440][T18280]  bpf_prog_test_run_xdp+0x37c/0x1000
[  667.053481][T18280]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  667.053511][T18280]  ? __fget_files+0x2a/0x420
[  667.053539][T18280]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  667.053565][T18280]  bpf_prog_test_run+0x2c7/0x340
[  667.053597][T18280]  __sys_bpf+0x4a4/0x860
[  667.053624][T18280]  ? __pfx___sys_bpf+0x10/0x10
[  667.053664][T18280]  ? ksys_write+0x22a/0x250
[  667.053697][T18280]  ? __pfx_ksys_write+0x10/0x10
[  667.053724][T18280]  ? rcu_is_watching+0x15/0xb0
[  667.053773][T18280]  __x64_sys_bpf+0x7c/0x90
[  667.053796][T18280]  do_syscall_64+0xfa/0x3b0
[  667.053817][T18280]  ? lockdep_hardirqs_on+0x9c/0x150
[  667.053838][T18280]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  667.053856][T18280]  ? clear_bhb_loop+0x60/0xb0
[  667.053878][T18280]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  667.053896][T18280] RIP: 0033:0x7f83d418e929
[  667.053912][T18280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  667.053927][T18280] RSP: 002b:00007f83d5077038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  667.053946][T18280] RAX: ffffffffffffffda RBX: 00007f83d43b5fa0 RCX: 00007f83d418e929
[  667.053960][T18280] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  667.053972][T18280] RBP: 00007f83d5077090 R08: 0000000000000000 R09: 0000000000000000
[  667.053983][T18280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  667.053994][T18280] R13: 0000000000000000 R14: 00007f83d43b5fa0 R15: 00007fffe9c21518
[  667.054023][T18280]  </TASK>
[  667.620655][T18294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2085'.
[  667.858839][T18308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2089'.
[  667.883971][T18308] netlink: 'syz.2.2089': attribute type 5 has an invalid length.
[  667.913479][T18308] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2089'.
[  667.989659][T18308] geneve2: entered promiscuous mode
[  668.022348][T18308] geneve2: entered allmulticast mode
[  668.057496][   T78] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0
[  668.144871][   T78] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0
[  668.233218][T18308] syz.2.2089 (18308) used greatest stack depth: 19648 bytes left
[  668.269488][   T78] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0
[  668.555552][T18323] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2091'.
[  668.620713][T18326] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2092'.
[  668.632436][   T78] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0
[  668.820721][T18324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2091'.
[  668.965353][T18337] ieee802154 phy0 wpan0: encryption failed: -22
[  669.260463][T18344] warning: `syz.1.2095' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  670.131202][T18379] FAULT_INJECTION: forcing a failure.
[  670.131202][T18379] name failslab, interval 1, probability 0, space 0, times 0
[  670.184726][T18379] CPU: 1 UID: 0 PID: 18379 Comm: syz.3.2102 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) 
[  670.184758][T18379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  670.184770][T18379] Call Trace:
[  670.184779][T18379]  <TASK>
[  670.184787][T18379]  dump_stack_lvl+0x189/0x250
[  670.184824][T18379]  ? __pfx____ratelimit+0x10/0x10
[  670.184847][T18379]  ? __pfx_dump_stack_lvl+0x10/0x10
[  670.184878][T18379]  ? __pfx__printk+0x10/0x10
[  670.184905][T18379]  ? __pfx___might_resched+0x10/0x10
[  670.184941][T18379]  should_fail_ex+0x414/0x560
[  670.184971][T18379]  ? map_get_next_key+0x22a/0x5f0
[  670.184995][T18379]  should_failslab+0xa8/0x100
[  670.185018][T18379]  __kvmalloc_node_noprof+0x161/0x5f0
[  670.185039][T18379]  ? map_get_next_key+0x22a/0x5f0
[  670.185063][T18379]  ? _copy_from_user+0x94/0xb0
[  670.185086][T18379]  map_get_next_key+0x22a/0x5f0
[  670.185113][T18379]  ? bpf_lsm_bpf+0x9/0x20
[  670.185146][T18379]  __sys_bpf+0x7bf/0x860
[  670.185174][T18379]  ? __pfx___sys_bpf+0x10/0x10
[  670.185219][T18379]  ? ksys_write+0x22a/0x250
[  670.185251][T18379]  ? __pfx_ksys_write+0x10/0x10
[  670.185279][T18379]  ? rcu_is_watching+0x15/0xb0
[  670.185318][T18379]  __x64_sys_bpf+0x7c/0x90
[  670.185342][T18379]  do_syscall_64+0xfa/0x3b0
[  670.185364][T18379]  ? lockdep_hardirqs_on+0x9c/0x150
[  670.185387][T18379]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  670.185406][T18379]  ? clear_bhb_loop+0x60/0xb0
[  670.185431][T18379]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  670.185449][T18379] RIP: 0033:0x7f96c778e929
[  670.185466][T18379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  670.185483][T18379] RSP: 002b:00007f96c869c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  670.185504][T18379] RAX: ffffffffffffffda RBX: 00007f96c79b5fa0 RCX: 00007f96c778e929
[  670.185518][T18379] RDX: 0000000000000020 RSI: 0000200000000380 RDI: 0000000000000004
[  670.185531][T18379] RBP: 00007f96c869c090 R08: 0000000000000000 R09: 0000000000000000
[  670.185543][T18379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  670.185554][T18379] R13: 0000000000000000 R14: 00007f96c79b5fa0 R15: 00007ffc876431a8
[  670.185585][T18379]  </TASK>
[  670.615712][T18389] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2104'.
[  670.757735][T18393] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2106'.
[  671.137425][T18406] x_tables: duplicate underflow at hook 1
[  671.325093][T18417] syz.3.2110 uses obsolete (PF_INET,SOCK_PACKET)
[  671.389211][T18421] x_tables: duplicate underflow at hook 1
[  671.636381][T18431] Bluetooth: MGMT ver 1.23
[  673.147774][T18461] netlink: 'syz.0.2115': attribute type 16 has an invalid length.
[  673.177439][T18465] netlink: 'syz.1.2116': attribute type 15 has an invalid length.
[  673.193366][T18461] netlink: 'syz.0.2115': attribute type 17 has an invalid length.
[  673.273009][T18461] 8021q: adding VLAN 0 to HW filter on device bond0
[  673.281728][T18461] 8021q: adding VLAN 0 to HW filter on device team0
[  673.301188][T18461] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  673.475230][T18469] FAULT_INJECTION: forcing a failure.
[  673.475230][T18469] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  673.511535][T18469] CPU: 0 UID: 0 PID: 18469 Comm: syz.3.2117 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) 
[  673.511566][T18469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  673.511579][T18469] Call Trace:
[  673.511587][T18469]  <TASK>
[  673.511596][T18469]  dump_stack_lvl+0x189/0x250
[  673.511643][T18469]  ? __pfx____ratelimit+0x10/0x10
[  673.511669][T18469]  ? __pfx_dump_stack_lvl+0x10/0x10
[  673.511702][T18469]  ? __pfx__printk+0x10/0x10
[  673.511726][T18469]  ? __might_fault+0xb0/0x130
[  673.511759][T18469]  should_fail_ex+0x414/0x560
[  673.511792][T18469]  _copy_from_user+0x2d/0xb0
[  673.511813][T18469]  kstrtouint_from_user+0xc4/0x170
[  673.511844][T18469]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  673.511893][T18469]  proc_fail_nth_write+0x88/0x240
[  673.511919][T18469]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  673.511950][T18469]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  673.511977][T18469]  vfs_write+0x27e/0xa90
[  673.512018][T18469]  ? __pfx_vfs_write+0x10/0x10
[  673.512047][T18469]  ? __fget_files+0x2a/0x420
[  673.512075][T18469]  ? __fget_files+0x3a0/0x420
[  673.512096][T18469]  ? __fget_files+0x2a/0x420
[  673.512132][T18469]  ksys_write+0x145/0x250
[  673.512166][T18469]  ? __pfx_ksys_write+0x10/0x10
[  673.512194][T18469]  ? rcu_is_watching+0x15/0xb0
[  673.512232][T18469]  ? do_syscall_64+0xbe/0x3b0
[  673.512262][T18469]  do_syscall_64+0xfa/0x3b0
[  673.512285][T18469]  ? lockdep_hardirqs_on+0x9c/0x150
[  673.512306][T18469]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  673.512325][T18469]  ? clear_bhb_loop+0x60/0xb0
[  673.512350][T18469]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  673.512369][T18469] RIP: 0033:0x7f96c778d3df
[  673.512388][T18469] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  673.512405][T18469] RSP: 002b:00007f96c869c030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  673.512426][T18469] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f96c778d3df
[  673.512440][T18469] RDX: 0000000000000001 RSI: 00007f96c869c0a0 RDI: 0000000000000005
[  673.512453][T18469] RBP: 00007f96c869c090 R08: 0000000000000000 R09: 0000000000000000
[  673.512465][T18469] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  673.512477][T18469] R13: 0000000000000000 R14: 00007f96c79b5fa0 R15: 00007ffc876431a8
[  673.512510][T18469]  </TASK>
[  673.792484][T18476] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2120'.
[  673.802859][T18476] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2120'.
[  673.853708][T18461] syz.0.2115 (18461) used greatest stack depth: 19096 bytes left
[  674.053432][T18486] openvswitch: netlink: Flow key attr not present in new flow.
[  674.404355][T18505] FAULT_INJECTION: forcing a failure.
[  674.404355][T18505] name failslab, interval 1, probability 0, space 0, times 0
[  674.450187][T18505] CPU: 0 UID: 0 PID: 18505 Comm: syz.3.2127 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) 
[  674.450219][T18505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  674.450233][T18505] Call Trace:
[  674.450241][T18505]  <TASK>
[  674.450249][T18505]  dump_stack_lvl+0x189/0x250
[  674.450287][T18505]  ? __pfx____ratelimit+0x10/0x10
[  674.450311][T18505]  ? __pfx_dump_stack_lvl+0x10/0x10
[  674.450344][T18505]  ? __pfx__printk+0x10/0x10
[  674.450373][T18505]  ? __pfx___might_resched+0x10/0x10
[  674.450405][T18505]  ? fs_reclaim_acquire+0x7d/0x100
[  674.450435][T18505]  should_fail_ex+0x414/0x560
[  674.450478][T18505]  should_failslab+0xa8/0x100
[  674.450506][T18505]  __kmalloc_cache_noprof+0x70/0x3d0
[  674.450525][T18505]  ? ip_set_create+0x348/0x1940
[  674.450550][T18505]  ip_set_create+0x348/0x1940
[  674.450581][T18505]  ? trace_contention_end+0x39/0x120
[  674.450606][T18505]  ? __pfx_ip_set_create+0x10/0x10
[  674.450665][T18505]  nfnetlink_rcv_msg+0xb4a/0x1130
[  674.450687][T18505]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  674.450736][T18505]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  674.450752][T18505]  ? __lock_acquire+0xab9/0xd20
[  674.450818][T18505]  ? __lock_acquire+0xab9/0xd20
[  674.450860][T18505]  netlink_rcv_skb+0x208/0x470
[  674.450884][T18505]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  674.450904][T18505]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  674.450939][T18505]  ? bpf_lsm_capable+0x9/0x20
[  674.450955][T18505]  ? security_capable+0x7e/0x2e0
[  674.450986][T18505]  nfnetlink_rcv+0x26a/0x2520
[  674.451005][T18505]  ? unwind_get_return_address+0x4d/0x90
[  674.451033][T18505]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  674.451054][T18505]  ? arch_stack_walk+0xfc/0x150
[  674.451083][T18505]  ? stack_trace_save+0x9c/0xe0
[  674.451106][T18505]  ? stack_depot_save_flags+0x40/0x900
[  674.451133][T18505]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  674.451152][T18505]  ? kasan_save_track+0x4f/0x80
[  674.451177][T18505]  ? kasan_save_track+0x3e/0x80
[  674.451209][T18505]  ? __lock_acquire+0xab9/0xd20
[  674.451258][T18505]  ? __lock_acquire+0xab9/0xd20
[  674.451293][T18505]  ? netlink_deliver_tap+0x2e/0x1b0
[  674.451323][T18505]  ? netlink_deliver_tap+0x2e/0x1b0
[  674.451344][T18505]  ? netlink_deliver_tap+0x2e/0x1b0
[  674.451373][T18505]  netlink_unicast+0x75b/0x8d0
[  674.451405][T18505]  netlink_sendmsg+0x805/0xb30
[  674.451438][T18505]  ? __pfx_netlink_sendmsg+0x10/0x10
[  674.451465][T18505]  ? aa_sock_msg_perm+0x94/0x160
[  674.451500][T18505]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  674.451522][T18505]  ? __pfx_netlink_sendmsg+0x10/0x10
[  674.451545][T18505]  __sock_sendmsg+0x21c/0x270
[  674.451568][T18505]  ____sys_sendmsg+0x505/0x830
[  674.451599][T18505]  ? __pfx_____sys_sendmsg+0x10/0x10
[  674.451633][T18505]  ? import_iovec+0x74/0xa0
[  674.451653][T18505]  ___sys_sendmsg+0x21f/0x2a0
[  674.451681][T18505]  ? __pfx____sys_sendmsg+0x10/0x10
[  674.451742][T18505]  ? __fget_files+0x2a/0x420
[  674.451760][T18505]  ? __fget_files+0x3a0/0x420
[  674.451794][T18505]  __x64_sys_sendmsg+0x19b/0x260
[  674.451823][T18505]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  674.451857][T18505]  ? __pfx_ksys_write+0x10/0x10
[  674.451881][T18505]  ? rcu_is_watching+0x15/0xb0
[  674.451912][T18505]  ? do_syscall_64+0xbe/0x3b0
[  674.451936][T18505]  do_syscall_64+0xfa/0x3b0
[  674.451955][T18505]  ? lockdep_hardirqs_on+0x9c/0x150
[  674.451975][T18505]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  674.451991][T18505]  ? clear_bhb_loop+0x60/0xb0
[  674.452031][T18505]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  674.452049][T18505] RIP: 0033:0x7f96c778e929
[  674.452065][T18505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  674.452080][T18505] RSP: 002b:00007f96c869c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  674.452100][T18505] RAX: ffffffffffffffda RBX: 00007f96c79b5fa0 RCX: 00007f96c778e929
[  674.452113][T18505] RDX: 0000000000008404 RSI: 00002000000003c0 RDI: 0000000000000003
[  674.452124][T18505] RBP: 00007f96c869c090 R08: 0000000000000000 R09: 0000000000000000
[  674.452136][T18505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  674.452146][T18505] R13: 0000000000000000 R14: 00007f96c79b5fa0 R15: 00007ffc876431a8
[  674.452175][T18505]  </TASK>
[  675.255362][T18520] x_tables: duplicate underflow at hook 1
[  675.568278][T18535] x_tables: duplicate underflow at hook 1
[  675.857331][T18541] netlink: 'syz.2.2134': attribute type 1 has an invalid length.
[  676.066070][T18545] netlink: 'syz.2.2135': attribute type 3 has an invalid length.
[  676.105239][T18545] netlink: 'syz.2.2135': attribute type 4 has an invalid length.
[  676.133781][T18545] netlink: 'syz.2.2135': attribute type 5 has an invalid length.
[  676.172045][T18545] netlink: 'syz.2.2135': attribute type 6 has an invalid length.
[  676.191297][T18545] netlink: 'syz.2.2135': attribute type 7 has an invalid length.
[  676.216853][T18545] netlink: 'syz.2.2135': attribute type 7 has an invalid length.
[  676.234954][T18545] netlink: 12902 bytes leftover after parsing attributes in process `syz.2.2135'.
[  676.463075][T18551] x_tables: duplicate underflow at hook 1
[  677.221395][T18574] netlink: 252 bytes leftover after parsing attributes in process `syz.3.2141'.
[  677.497780][T18591] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  678.227993][T18614] FAULT_INJECTION: forcing a failure.
[  678.227993][T18614] name failslab, interval 1, probability 0, space 0, times 0
[  678.285896][T18614] CPU: 1 UID: 0 PID: 18614 Comm: syz.3.2146 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) 
[  678.285922][T18614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  678.285933][T18614] Call Trace:
[  678.285940][T18614]  <TASK>
[  678.285948][T18614]  dump_stack_lvl+0x189/0x250
[  678.285980][T18614]  ? __pfx____ratelimit+0x10/0x10
[  678.286001][T18614]  ? __pfx_dump_stack_lvl+0x10/0x10
[  678.286028][T18614]  ? __pfx__printk+0x10/0x10
[  678.286053][T18614]  ? __pfx___might_resched+0x10/0x10
[  678.286080][T18614]  ? fs_reclaim_acquire+0x7d/0x100
[  678.286104][T18614]  should_fail_ex+0x414/0x560
[  678.286130][T18614]  should_failslab+0xa8/0x100
[  678.286151][T18614]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  678.286179][T18614]  ? __alloc_skb+0x112/0x2d0
[  678.286206][T18614]  __alloc_skb+0x112/0x2d0
[  678.286232][T18614]  netlink_ack+0x146/0xa50
[  678.286253][T18614]  ? sock_diag_lock_handler+0x19/0x290
[  678.286273][T18614]  ? sock_diag_lock_handler+0x19/0x290
[  678.286316][T18614]  ? sock_diag_rcv_msg+0x4ed/0x600
[  678.286341][T18614]  netlink_rcv_skb+0x28c/0x470
[  678.286365][T18614]  ? __pfx_sock_diag_rcv_msg+0x10/0x10
[  678.286388][T18614]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  678.286424][T18614]  ? netlink_deliver_tap+0x2e/0x1b0
[  678.286446][T18614]  ? netlink_deliver_tap+0x2e/0x1b0
[  678.286480][T18614]  netlink_unicast+0x75b/0x8d0
[  678.286512][T18614]  netlink_sendmsg+0x805/0xb30
[  678.286545][T18614]  ? __pfx_netlink_sendmsg+0x10/0x10
[  678.286572][T18614]  ? aa_sock_msg_perm+0x94/0x160
[  678.286597][T18614]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  678.286620][T18614]  ? __pfx_netlink_sendmsg+0x10/0x10
[  678.286644][T18614]  __sock_sendmsg+0x21c/0x270
[  678.286668][T18614]  sock_write_iter+0x258/0x330
[  678.286689][T18614]  ? __pfx_sock_write_iter+0x10/0x10
[  678.286720][T18614]  ? __pfx_aa_file_perm+0x10/0x10
[  678.286752][T18614]  do_iter_readv_writev+0x56b/0x7f0
[  678.286774][T18614]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  678.286798][T18614]  ? bpf_lsm_file_permission+0x9/0x20
[  678.286823][T18614]  ? security_file_permission+0x75/0x290
[  678.286844][T18614]  ? rw_verify_area+0x258/0x650
[  678.286875][T18614]  vfs_writev+0x31a/0x960
[  678.286901][T18614]  ? __lock_acquire+0xab9/0xd20
[  678.286929][T18614]  ? __pfx_vfs_writev+0x10/0x10
[  678.286966][T18614]  ? __fget_files+0x2a/0x420
[  678.286990][T18614]  ? __fget_files+0x3a0/0x420
[  678.287009][T18614]  ? __fget_files+0x2a/0x420
[  678.287038][T18614]  do_writev+0x14d/0x2d0
[  678.287062][T18614]  ? __pfx_do_writev+0x10/0x10
[  678.287082][T18614]  ? rcu_is_watching+0x15/0xb0
[  678.287115][T18614]  ? do_syscall_64+0xbe/0x3b0
[  678.287141][T18614]  do_syscall_64+0xfa/0x3b0
[  678.287163][T18614]  ? lockdep_hardirqs_on+0x9c/0x150
[  678.287183][T18614]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  678.287201][T18614]  ? clear_bhb_loop+0x60/0xb0
[  678.287223][T18614]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  678.287241][T18614] RIP: 0033:0x7f96c778e929
[  678.287258][T18614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  678.287273][T18614] RSP: 002b:00007f96c869c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  678.287294][T18614] RAX: ffffffffffffffda RBX: 00007f96c79b5fa0 RCX: 00007f96c778e929
[  678.287307][T18614] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000004
[  678.287318][T18614] RBP: 00007f96c869c090 R08: 0000000000000000 R09: 0000000000000000
[  678.287330][T18614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  678.287340][T18614] R13: 0000000000000000 R14: 00007f96c79b5fa0 R15: 00007ffc876431a8
[  678.287370][T18614]  </TASK>
[  678.883800][T18618] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2147'.
[  678.936785][T18624] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  679.116026][T18635] validate_nla: 1 callbacks suppressed
[  679.116045][T18635] netlink: 'syz.3.2153': attribute type 1 has an invalid length.
[  679.131379][T18635] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2153'.
[  679.199951][T18638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2154'.
[  679.405324][T18645] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2157'.
[  679.432180][T18646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2158'.
[  679.579275][T18652] FAULT_INJECTION: forcing a failure.
[  679.579275][T18652] name failslab, interval 1, probability 0, space 0, times 0
[  679.594662][T18652] CPU: 1 UID: 0 PID: 18652 Comm: syz.2.2159 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) 
[  679.594688][T18652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  679.594700][T18652] Call Trace:
[  679.594707][T18652]  <TASK>
[  679.594715][T18652]  dump_stack_lvl+0x189/0x250
[  679.594748][T18652]  ? __pfx____ratelimit+0x10/0x10
[  679.594771][T18652]  ? __pfx_dump_stack_lvl+0x10/0x10
[  679.594800][T18652]  ? __pfx__printk+0x10/0x10
[  679.594823][T18652]  ? __pfx___might_resched+0x10/0x10
[  679.594851][T18652]  ? fs_reclaim_acquire+0x7d/0x100
[  679.594879][T18652]  should_fail_ex+0x414/0x560
[  679.594906][T18652]  should_failslab+0xa8/0x100
[  679.594927][T18652]  kmem_cache_alloc_lru_noprof+0x78/0x3d0
[  679.594956][T18652]  ? alloc_inode+0xb8/0x1b0
[  679.594973][T18652]  ? stashed_dentry_get+0x1e/0x240
[  679.594998][T18652]  alloc_inode+0xb8/0x1b0
[  679.595018][T18652]  path_from_stashed+0x299/0x8f0
[  679.595048][T18652]  ? __pfx_path_from_stashed+0x10/0x10
[  679.595083][T18652]  ? netns_get+0xc7/0x110
[  679.595109][T18652]  proc_ns_get_link+0xef/0x230
[  679.595130][T18652]  ? __pfx_proc_ns_get_link+0x10/0x10
[  679.595153][T18652]  ? try_to_unlazy+0x32b/0x580
[  679.595176][T18652]  ? __pfx_proc_ns_get_link+0x10/0x10
[  679.595196][T18652]  pick_link+0x633/0xe80
[  679.595224][T18652]  step_into+0xc5d/0xf30
[  679.595248][T18652]  ? pid_revalidate+0x22/0x260
[  679.595274][T18652]  ? pid_revalidate+0x20d/0x260
[  679.595316][T18652]  ? __pfx_step_into+0x10/0x10
[  679.595347][T18652]  path_openat+0x1bc6/0x3830
[  679.595378][T18652]  ? arch_stack_walk+0xfc/0x150
[  679.595431][T18652]  ? __pfx_path_openat+0x10/0x10
[  679.595454][T18652]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  679.595494][T18652]  do_filp_open+0x1fa/0x410
[  679.595517][T18652]  ? __lock_acquire+0xab9/0xd20
[  679.595545][T18652]  ? __pfx_do_filp_open+0x10/0x10
[  679.595593][T18652]  ? _raw_spin_unlock+0x28/0x50
[  679.595610][T18652]  ? alloc_fd+0x64c/0x6c0
[  679.595640][T18652]  do_sys_openat2+0x121/0x1c0
[  679.595668][T18652]  ? __pfx_do_sys_openat2+0x10/0x10
[  679.595692][T18652]  ? ksys_write+0x22a/0x250
[  679.595723][T18652]  ? __pfx_ksys_write+0x10/0x10
[  679.595748][T18652]  ? rcu_is_watching+0x15/0xb0
[  679.595780][T18652]  __x64_sys_openat+0x138/0x170
[  679.595809][T18652]  do_syscall_64+0xfa/0x3b0
[  679.595830][T18652]  ? lockdep_hardirqs_on+0x9c/0x150
[  679.595850][T18652]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  679.595868][T18652]  ? clear_bhb_loop+0x60/0xb0
[  679.595890][T18652]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  679.595908][T18652] RIP: 0033:0x7f3e94d8d290
[  679.595924][T18652] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44
[  679.595940][T18652] RSP: 002b:00007f3e95b1af60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  679.595960][T18652] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3e94d8d290
[  679.595973][T18652] RDX: 0000000000000000 RSI: 00007f3e94e10c51 RDI: 00000000ffffff9c
[  679.595985][T18652] RBP: 00007f3e94e10c51 R08: 0000000000000000 R09: 0000000000000000
[  679.595996][T18652] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  679.596007][T18652] R13: 0000000000000000 R14: 00007f3e94fb5fa0 R15: 00007ffec39c2278
[  679.596037][T18652]  </TASK>
[  680.730106][T18681] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  681.307817][T18687] FAULT_INJECTION: forcing a failure.
[  681.307817][T18687] name failslab, interval 1, probability 0, space 0, times 0
[  681.332320][T18687] CPU: 1 UID: 0 PID: 18687 Comm: syz.3.2170 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) 
[  681.332349][T18687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  681.332362][T18687] Call Trace:
[  681.332371][T18687]  <TASK>
[  681.332379][T18687]  dump_stack_lvl+0x189/0x250
[  681.332415][T18687]  ? __pfx____ratelimit+0x10/0x10
[  681.332439][T18687]  ? __pfx_dump_stack_lvl+0x10/0x10
[  681.332470][T18687]  ? __pfx__printk+0x10/0x10
[  681.332508][T18687]  ? __pfx___might_resched+0x10/0x10
[  681.332536][T18687]  ? fs_reclaim_acquire+0x7d/0x100
[  681.332582][T18687]  should_fail_ex+0x414/0x560
[  681.332613][T18687]  should_failslab+0xa8/0x100
[  681.332636][T18687]  __kmalloc_cache_noprof+0x70/0x3d0
[  681.332656][T18687]  ? ip_fib_metrics_init+0xc3/0x6f0
[  681.332687][T18687]  ip_fib_metrics_init+0xc3/0x6f0
[  681.332721][T18687]  ? __pfx_ip_fib_metrics_init+0x10/0x10
[  681.332748][T18687]  ? rcu_is_watching+0x15/0xb0
[  681.332780][T18687]  ? trace_kmalloc+0x1f/0xd0
[  681.332795][T18687]  ? __kmalloc_noprof+0x29b/0x4f0
[  681.332812][T18687]  ? fib_create_info+0x1728/0x3210
[  681.332841][T18687]  fib_create_info+0x177f/0x3210
[  681.332880][T18687]  ? __mutex_lock+0xa6d/0xe80
[  681.332915][T18687]  fib_table_insert+0xc6/0x1b50
[  681.332941][T18687]  ? inet_rtm_newroute+0x109/0x210
[  681.332966][T18687]  ? __pfx___mutex_lock+0x10/0x10
[  681.332987][T18687]  ? rtm_to_fib_config+0x107f/0x13c0
[  681.333048][T18687]  inet_rtm_newroute+0x12b/0x210
[  681.333068][T18687]  ? __lock_acquire+0xab9/0xd20
[  681.333095][T18687]  ? __pfx_inet_rtm_newroute+0x10/0x10
[  681.333137][T18687]  ? __pfx_inet_rtm_newroute+0x10/0x10
[  681.333176][T18687]  rtnetlink_rcv_msg+0x7cc/0xb70
[  681.333205][T18687]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  681.333229][T18687]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  681.333273][T18687]  netlink_rcv_skb+0x208/0x470
[  681.333299][T18687]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  681.333325][T18687]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  681.333378][T18687]  ? netlink_deliver_tap+0x2e/0x1b0
[  681.333400][T18687]  ? netlink_deliver_tap+0x2e/0x1b0
[  681.333429][T18687]  netlink_unicast+0x75b/0x8d0
[  681.333461][T18687]  netlink_sendmsg+0x805/0xb30
[  681.333495][T18687]  ? __pfx_netlink_sendmsg+0x10/0x10
[  681.333522][T18687]  ? aa_sock_msg_perm+0x94/0x160
[  681.333547][T18687]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  681.333570][T18687]  ? __pfx_netlink_sendmsg+0x10/0x10
[  681.333594][T18687]  __sock_sendmsg+0x21c/0x270
[  681.333618][T18687]  ____sys_sendmsg+0x505/0x830
[  681.333652][T18687]  ? __pfx_____sys_sendmsg+0x10/0x10
[  681.333689][T18687]  ? import_iovec+0x74/0xa0
[  681.333711][T18687]  ___sys_sendmsg+0x21f/0x2a0
[  681.333760][T18687]  ? __pfx____sys_sendmsg+0x10/0x10
[  681.333839][T18687]  ? __fget_files+0x2a/0x420
[  681.333858][T18687]  ? __fget_files+0x3a0/0x420
[  681.333889][T18687]  __x64_sys_sendmsg+0x19b/0x260
[  681.333938][T18687]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  681.333978][T18687]  ? __pfx_ksys_write+0x10/0x10
[  681.334012][T18687]  ? rcu_is_watching+0x15/0xb0
[  681.334048][T18687]  ? do_syscall_64+0xbe/0x3b0
[  681.334077][T18687]  do_syscall_64+0xfa/0x3b0
[  681.334099][T18687]  ? lockdep_hardirqs_on+0x9c/0x150
[  681.334121][T18687]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  681.334141][T18687]  ? clear_bhb_loop+0x60/0xb0
[  681.334165][T18687]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  681.334185][T18687] RIP: 0033:0x7f96c778e929
[  681.334203][T18687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  681.334220][T18687] RSP: 002b:00007f96c869c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  681.334241][T18687] RAX: ffffffffffffffda RBX: 00007f96c79b5fa0 RCX: 00007f96c778e929
[  681.334256][T18687] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  681.334268][T18687] RBP: 00007f96c869c090 R08: 0000000000000000 R09: 0000000000000000
[  681.334281][T18687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  681.334293][T18687] R13: 0000000000000000 R14: 00007f96c79b5fa0 R15: 00007ffc876431a8
[  681.334325][T18687]  </TASK>
[  682.037276][T18684] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  682.078877][T18697] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2171'.
[  682.994612][T18742] Illegal XDP return value 4291551232 on prog  (id 1024) dev N/A, expect packet loss!
[  683.144279][T18750] veth0_to_batadv: left allmulticast mode
[  683.201759][T18752] bridge0: port 3(ipvlan5) entered blocking state
[  683.219035][T18752] bridge0: port 3(ipvlan5) entered disabled state
[  683.242242][T18755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2188'.
[  683.242632][T18752] ipvlan5: entered allmulticast mode
[  683.294726][T18752] ipvlan5: left allmulticast mode
[  683.400331][T18761] vlan0: entered promiscuous mode
[  683.418244][T18761] vlan0: left allmulticast mode
[  683.786981][T18776] x_tables: duplicate underflow at hook 1
[  685.064524][T18818] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  685.142955][T18820] netlink: 'syz.3.2201': attribute type 1 has an invalid length.
[  685.162753][T18821] netlink: 'syz.4.2200': attribute type 1 has an invalid length.
[  685.170502][T18821] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2200'.
[  685.173400][T18820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2201'.
[  685.206779][T18820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2201'.
[  685.389571][T18830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2203'.
[  685.420230][T18830] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2203'.
[  685.722949][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  685.729281][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  686.342877][T18846] tipc: Started in network mode
[  686.351661][T18846] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  686.361551][T18846] tipc: Enabled bearer <eth:team0>, priority 0
[  686.453441][T18852] netlink: 'syz.2.2211': attribute type 9 has an invalid length.
[  686.521884][T18855] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  687.170984][T18880] 8021q: VLANs not supported on nlmon0
[  687.476683][T15375] tipc: Node number set to 11578026
[  688.091981][T18906] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  688.976318][T18932] netlink: 'syz.4.2233': attribute type 3 has an invalid length.
[  688.993044][T18932] netlink: 'syz.4.2233': attribute type 4 has an invalid length.
[  689.000804][T18932] netlink: 'syz.4.2233': attribute type 5 has an invalid length.
[  689.025920][T18932] netlink: 'syz.4.2233': attribute type 6 has an invalid length.
[  689.039089][T18932] netlink: 'syz.4.2233': attribute type 7 has an invalid length.
[  689.055904][T18932] netlink: 'syz.4.2233': attribute type 7 has an invalid length.
[  689.076174][T18932] netlink: 12902 bytes leftover after parsing attributes in process `syz.4.2233'.
[  689.146176][T18932] FAULT_INJECTION: forcing a failure.
[  689.146176][T18932] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  689.202506][T18932] CPU: 0 UID: 0 PID: 18932 Comm: syz.4.2233 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) 
[  689.202537][T18932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  689.202550][T18932] Call Trace:
[  689.202558][T18932]  <TASK>
[  689.202567][T18932]  dump_stack_lvl+0x189/0x250
[  689.202604][T18932]  ? __pfx____ratelimit+0x10/0x10
[  689.202628][T18932]  ? __pfx_dump_stack_lvl+0x10/0x10
[  689.202658][T18932]  ? __pfx__printk+0x10/0x10
[  689.202693][T18932]  should_fail_ex+0x414/0x560
[  689.202724][T18932]  _copy_to_user+0x31/0xb0
[  689.202747][T18932]  simple_read_from_buffer+0xe1/0x170
[  689.202772][T18932]  proc_fail_nth_read+0x1df/0x250
[  689.202800][T18932]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  689.202829][T18932]  ? rw_verify_area+0x258/0x650
[  689.202857][T18932]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  689.202882][T18932]  vfs_read+0x200/0x980
[  689.202916][T18932]  ? __pfx___mutex_lock+0x10/0x10
[  689.202941][T18932]  ? __pfx_vfs_read+0x10/0x10
[  689.202974][T18932]  ? __fget_files+0x2a/0x420
[  689.203001][T18932]  ? __fget_files+0x3a0/0x420
[  689.203022][T18932]  ? __fget_files+0x2a/0x420
[  689.203053][T18932]  ksys_read+0x145/0x250
[  689.203087][T18932]  ? __pfx_ksys_read+0x10/0x10
[  689.203114][T18932]  ? rcu_is_watching+0x15/0xb0
[  689.203151][T18932]  ? do_syscall_64+0xbe/0x3b0
[  689.203179][T18932]  do_syscall_64+0xfa/0x3b0
[  689.203202][T18932]  ? lockdep_hardirqs_on+0x9c/0x150
[  689.203224][T18932]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  689.203244][T18932]  ? clear_bhb_loop+0x60/0xb0
[  689.203270][T18932]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  689.203289][T18932] RIP: 0033:0x7f051fd8d33c
[  689.203307][T18932] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  689.203325][T18932] RSP: 002b:00007f0520c26030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  689.203356][T18932] RAX: ffffffffffffffda RBX: 00007f051ffb5fa0 RCX: 00007f051fd8d33c
[  689.203370][T18932] RDX: 000000000000000f RSI: 00007f0520c260a0 RDI: 0000000000000005
[  689.203383][T18932] RBP: 00007f0520c26090 R08: 0000000000000000 R09: 0000000000000000
[  689.203395][T18932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  689.203412][T18932] R13: 0000000000000000 R14: 00007f051ffb5fa0 R15: 00007ffc2199e3a8
[  689.203445][T18932]  </TASK>
[  690.794093][T18976] FAULT_INJECTION: forcing a failure.
[  690.794093][T18976] name failslab, interval 1, probability 0, space 0, times 0
[  690.835392][T18976] CPU: 1 UID: 0 PID: 18976 Comm: syz.0.2242 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) 
[  690.835425][T18976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  690.835438][T18976] Call Trace:
[  690.835447][T18976]  <TASK>
[  690.835457][T18976]  dump_stack_lvl+0x189/0x250
[  690.835494][T18976]  ? __pfx____ratelimit+0x10/0x10
[  690.835520][T18976]  ? __pfx_dump_stack_lvl+0x10/0x10
[  690.835557][T18976]  ? __pfx__printk+0x10/0x10
[  690.835587][T18976]  ? __pfx___might_resched+0x10/0x10
[  690.835619][T18976]  ? fs_reclaim_acquire+0x7d/0x100
[  690.835648][T18976]  should_fail_ex+0x414/0x560
[  690.835681][T18976]  should_failslab+0xa8/0x100
[  690.835706][T18976]  __kmalloc_noprof+0xcb/0x4f0
[  690.835724][T18976]  ? fib_trie_table+0x33/0x1d0
[  690.835759][T18976]  fib_trie_table+0x33/0x1d0
[  690.835791][T18976]  fib_new_table+0x135/0x2d0
[  690.835836][T18976]  inet_rtm_newroute+0x115/0x210
[  690.835862][T18976]  ? __lock_acquire+0xab9/0xd20
[  690.835892][T18976]  ? __pfx_inet_rtm_newroute+0x10/0x10
[  690.835939][T18976]  ? __pfx_inet_rtm_newroute+0x10/0x10
[  690.835961][T18976]  rtnetlink_rcv_msg+0x7cc/0xb70
[  690.835992][T18976]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  690.836016][T18976]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  690.836038][T18976]  ? ref_tracker_free+0x63a/0x7d0
[  690.836066][T18976]  ? __copy_skb_header+0xa7/0x550
[  690.836100][T18976]  ? __pfx_ref_tracker_free+0x10/0x10
[  690.836139][T18976]  netlink_rcv_skb+0x208/0x470
[  690.836172][T18976]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  690.836207][T18976]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  690.836249][T18976]  ? netlink_deliver_tap+0x2e/0x1b0
[  690.836273][T18976]  ? netlink_deliver_tap+0x2e/0x1b0
[  690.836305][T18976]  netlink_unicast+0x75b/0x8d0
[  690.836341][T18976]  netlink_sendmsg+0x805/0xb30
[  690.836376][T18976]  ? __pfx_netlink_sendmsg+0x10/0x10
[  690.836407][T18976]  ? aa_sock_msg_perm+0x94/0x160
[  690.836435][T18976]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  690.836459][T18976]  ? __pfx_netlink_sendmsg+0x10/0x10
[  690.836486][T18976]  __sock_sendmsg+0x21c/0x270
[  690.836512][T18976]  ____sys_sendmsg+0x505/0x830
[  690.836550][T18976]  ? __pfx_____sys_sendmsg+0x10/0x10
[  690.836591][T18976]  ? import_iovec+0x74/0xa0
[  690.836615][T18976]  ___sys_sendmsg+0x21f/0x2a0
[  690.836649][T18976]  ? __pfx____sys_sendmsg+0x10/0x10
[  690.836721][T18976]  ? __fget_files+0x2a/0x420
[  690.836743][T18976]  ? __fget_files+0x3a0/0x420
[  690.836777][T18976]  __x64_sys_sendmsg+0x19b/0x260
[  690.836811][T18976]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  690.836852][T18976]  ? __pfx_ksys_write+0x10/0x10
[  690.836881][T18976]  ? rcu_is_watching+0x15/0xb0
[  690.836919][T18976]  ? do_syscall_64+0xbe/0x3b0
[  690.836949][T18976]  do_syscall_64+0xfa/0x3b0
[  690.836972][T18976]  ? lockdep_hardirqs_on+0x9c/0x150
[  690.836995][T18976]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.837015][T18976]  ? clear_bhb_loop+0x60/0xb0
[  690.837040][T18976]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.837060][T18976] RIP: 0033:0x7f452698e929
[  690.837079][T18976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  690.837096][T18976] RSP: 002b:00007f45277d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  690.837117][T18976] RAX: ffffffffffffffda RBX: 00007f4526bb5fa0 RCX: 00007f452698e929
[  690.837132][T18976] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  690.837144][T18976] RBP: 00007f45277d8090 R08: 0000000000000000 R09: 0000000000000000
[  690.837156][T18976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  690.837167][T18976] R13: 0000000000000000 R14: 00007f4526bb5fa0 R15: 00007ffd70d4b468
[  690.837208][T18976]  </TASK>
[  691.738100][T18987] FAULT_INJECTION: forcing a failure.
[  691.738100][T18987] name failslab, interval 1, probability 0, space 0, times 0
[  691.804514][T18987] CPU: 1 UID: 0 PID: 18987 Comm: syz.0.2244 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) 
[  691.804543][T18987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  691.804553][T18987] Call Trace:
[  691.804560][T18987]  <TASK>
[  691.804569][T18987]  dump_stack_lvl+0x189/0x250
[  691.804601][T18987]  ? __pfx____ratelimit+0x10/0x10
[  691.804622][T18987]  ? __pfx_dump_stack_lvl+0x10/0x10
[  691.804649][T18987]  ? __pfx__printk+0x10/0x10
[  691.804673][T18987]  ? __pfx___might_resched+0x10/0x10
[  691.804700][T18987]  ? fs_reclaim_acquire+0x7d/0x100
[  691.804726][T18987]  should_fail_ex+0x414/0x560
[  691.804753][T18987]  should_failslab+0xa8/0x100
[  691.804772][T18987]  __kmalloc_cache_noprof+0x70/0x3d0
[  691.804789][T18987]  ? ip_fib_metrics_init+0xc3/0x6f0
[  691.804816][T18987]  ip_fib_metrics_init+0xc3/0x6f0
[  691.804843][T18987]  ? __pfx_ip_fib_metrics_init+0x10/0x10
[  691.804866][T18987]  ? rcu_is_watching+0x15/0xb0
[  691.804892][T18987]  ? trace_kmalloc+0x1f/0xd0
[  691.804904][T18987]  ? __kmalloc_noprof+0x29b/0x4f0
[  691.804918][T18987]  ? fib_create_info+0x1728/0x3210
[  691.804941][T18987]  fib_create_info+0x177f/0x3210
[  691.804966][T18987]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  691.804989][T18987]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  691.805019][T18987]  fib_table_insert+0xc6/0x1b50
[  691.805057][T18987]  ? fib_trie_table+0x142/0x1d0
[  691.805090][T18987]  inet_rtm_newroute+0x12b/0x210
[  691.805109][T18987]  ? __lock_acquire+0xab9/0xd20
[  691.805134][T18987]  ? __pfx_inet_rtm_newroute+0x10/0x10
[  691.805183][T18987]  ? __pfx_inet_rtm_newroute+0x10/0x10
[  691.805200][T18987]  rtnetlink_rcv_msg+0x7cc/0xb70
[  691.805226][T18987]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  691.805247][T18987]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  691.805265][T18987]  ? ref_tracker_free+0x63a/0x7d0
[  691.805286][T18987]  ? __copy_skb_header+0xa7/0x550
[  691.805314][T18987]  ? __pfx_ref_tracker_free+0x10/0x10
[  691.805348][T18987]  netlink_rcv_skb+0x208/0x470
[  691.805371][T18987]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  691.805394][T18987]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  691.805428][T18987]  ? netlink_deliver_tap+0x2e/0x1b0
[  691.805449][T18987]  ? netlink_deliver_tap+0x2e/0x1b0
[  691.805477][T18987]  netlink_unicast+0x75b/0x8d0
[  691.805507][T18987]  netlink_sendmsg+0x805/0xb30
[  691.805538][T18987]  ? __pfx_netlink_sendmsg+0x10/0x10
[  691.805563][T18987]  ? aa_sock_msg_perm+0x94/0x160
[  691.805588][T18987]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  691.805610][T18987]  ? __pfx_netlink_sendmsg+0x10/0x10
[  691.805632][T18987]  __sock_sendmsg+0x21c/0x270
[  691.805653][T18987]  ____sys_sendmsg+0x505/0x830
[  691.805684][T18987]  ? __pfx_____sys_sendmsg+0x10/0x10
[  691.805719][T18987]  ? import_iovec+0x74/0xa0
[  691.805740][T18987]  ___sys_sendmsg+0x21f/0x2a0
[  691.805767][T18987]  ? __pfx____sys_sendmsg+0x10/0x10
[  691.805829][T18987]  ? __fget_files+0x2a/0x420
[  691.805848][T18987]  ? __fget_files+0x3a0/0x420
[  691.805877][T18987]  __x64_sys_sendmsg+0x19b/0x260
[  691.805907][T18987]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  691.805941][T18987]  ? __pfx_ksys_write+0x10/0x10
[  691.805966][T18987]  ? rcu_is_watching+0x15/0xb0
[  691.805998][T18987]  ? do_syscall_64+0xbe/0x3b0
[  691.806023][T18987]  do_syscall_64+0xfa/0x3b0
[  691.806043][T18987]  ? lockdep_hardirqs_on+0x9c/0x150
[  691.806062][T18987]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.806079][T18987]  ? clear_bhb_loop+0x60/0xb0
[  691.806101][T18987]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.806117][T18987] RIP: 0033:0x7f452698e929
[  691.806134][T18987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  691.806156][T18987] RSP: 002b:00007f45277d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  691.806175][T18987] RAX: ffffffffffffffda RBX: 00007f4526bb5fa0 RCX: 00007f452698e929
[  691.806187][T18987] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  691.806198][T18987] RBP: 00007f45277d8090 R08: 0000000000000000 R09: 0000000000000000
[  691.806208][T18987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  691.806218][T18987] R13: 0000000000000000 R14: 00007f4526bb5fa0 R15: 00007ffd70d4b468
[  691.806247][T18987]  </TASK>
[  692.880433][T19005] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2250'.
[  692.933450][T19005] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2250'.
[  693.043117][T19005] hsr_slave_0: left promiscuous mode
[  693.089357][T19005] hsr_slave_1: left promiscuous mode
[  693.140537][T19010] xt_CT: You must specify a L4 protocol and not use inversions on it
[  693.196742][T19010] macsec0: left allmulticast mode
[  693.680798][T19028] trusted_key: syz.2.2259 sent an empty control message without MSG_MORE.
[  694.187609][T19054] FAULT_INJECTION: forcing a failure.
[  694.187609][T19054] name failslab, interval 1, probability 0, space 0, times 0
[  694.218436][T19054] CPU: 0 UID: 0 PID: 19054 Comm: syz.1.2266 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) 
[  694.218462][T19054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  694.218473][T19054] Call Trace:
[  694.218480][T19054]  <TASK>
[  694.218489][T19054]  dump_stack_lvl+0x189/0x250
[  694.218519][T19054]  ? __pfx____ratelimit+0x10/0x10
[  694.218542][T19054]  ? __pfx_dump_stack_lvl+0x10/0x10
[  694.218568][T19054]  ? __pfx__printk+0x10/0x10
[  694.218592][T19054]  ? __pfx___might_resched+0x10/0x10
[  694.218617][T19054]  ? fs_reclaim_acquire+0x7d/0x100
[  694.218642][T19054]  should_fail_ex+0x414/0x560
[  694.218669][T19054]  should_failslab+0xa8/0x100
[  694.218689][T19054]  kmem_cache_alloc_lru_noprof+0x78/0x3d0
[  694.218717][T19054]  ? __d_alloc+0x31/0x6f0
[  694.218743][T19054]  __d_alloc+0x31/0x6f0
[  694.218769][T19054]  d_alloc_parallel+0xe0/0x14e0
[  694.218793][T19054]  ? rcu_is_watching+0x15/0xb0
[  694.218824][T19054]  ? rcu_is_watching+0x15/0xb0
[  694.218852][T19054]  ? rcu_read_unlock_special+0x3fe/0x4c0
[  694.218878][T19054]  ? irqentry_exit+0x74/0x90
[  694.218898][T19054]  ? __pfx_d_alloc_parallel+0x10/0x10
[  694.218926][T19054]  ? __raw_spin_lock_init+0x45/0x100
[  694.218963][T19054]  ? __init_waitqueue_head+0xa9/0x150
[  694.218988][T19054]  __lookup_slow+0x116/0x3d0
[  694.219034][T19054]  ? __pfx___lookup_slow+0x10/0x10
[  694.219089][T19054]  ? d_lookup+0x8a/0xa0
[  694.219116][T19054]  ? lookup_noperm+0x112/0x220
[  694.219147][T19054]  start_creating+0x22e/0x3c0
[  694.219183][T19054]  ? __pfx_start_creating+0x10/0x10
[  694.219214][T19054]  ? snprintf+0xda/0x120
[  694.219254][T19054]  __debugfs_create_file+0x79/0x4f0
[  694.219291][T19054]  debugfs_create_file_full+0x3f/0x60
[  694.219326][T19054]  ref_tracker_dir_debugfs+0x14e/0x270
[  694.219355][T19054]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[  694.219412][T19054]  ? rcu_is_watching+0x15/0xb0
[  694.219441][T19054]  ? alloc_netdev_mqs+0xa3/0x1170
[  694.219466][T19054]  ? __raw_spin_lock_init+0x45/0x100
[  694.219492][T19054]  alloc_netdev_mqs+0x26f/0x1170
[  694.219510][T19054]  ? __pfx_xfrmi_dev_setup+0x10/0x10
[  694.219537][T19054]  rtnl_create_link+0x31f/0xd10
[  694.219565][T19054]  rtnl_newlink_create+0x25c/0xb00
[  694.219601][T19054]  ? __pfx_aa_get_newest_label+0x10/0x10
[  694.219631][T19054]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  694.219657][T19054]  ? rtnl_newlink+0x8db/0x1c70
[  694.219684][T19054]  ? __pfx___mutex_lock+0x10/0x10
[  694.219721][T19054]  ? ns_capable+0x8a/0xf0
[  694.219755][T19054]  rtnl_newlink+0x16d6/0x1c70
[  694.219798][T19054]  ? __pfx_rtnl_newlink+0x10/0x10
[  694.219822][T19054]  ? is_bpf_text_address+0x26/0x2b0
[  694.219862][T19054]  ? __lock_acquire+0xab9/0xd20
[  694.219903][T19054]  ? __lock_acquire+0xab9/0xd20
[  694.219961][T19054]  ? is_bpf_text_address+0x26/0x2b0
[  694.219998][T19054]  ? is_bpf_text_address+0x292/0x2b0
[  694.220027][T19054]  ? is_bpf_text_address+0x26/0x2b0
[  694.220060][T19054]  ? kernel_text_address+0xa5/0xe0
[  694.220101][T19054]  ? __lock_acquire+0xab9/0xd20
[  694.220159][T19054]  ? __pfx_rtnl_newlink+0x10/0x10
[  694.220194][T19054]  rtnetlink_rcv_msg+0x7cc/0xb70
[  694.220222][T19054]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  694.220254][T19054]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  694.220291][T19054]  netlink_rcv_skb+0x208/0x470
[  694.220314][T19054]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  694.220336][T19054]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  694.220370][T19054]  ? netlink_deliver_tap+0x2e/0x1b0
[  694.220391][T19054]  ? netlink_deliver_tap+0x2e/0x1b0
[  694.220417][T19054]  netlink_unicast+0x75b/0x8d0
[  694.220447][T19054]  netlink_sendmsg+0x805/0xb30
[  694.220478][T19054]  ? __pfx_netlink_sendmsg+0x10/0x10
[  694.220503][T19054]  ? aa_sock_msg_perm+0x94/0x160
[  694.220527][T19054]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  694.220548][T19054]  ? __pfx_netlink_sendmsg+0x10/0x10
[  694.220571][T19054]  __sock_sendmsg+0x21c/0x270
[  694.220592][T19054]  ____sys_sendmsg+0x505/0x830
[  694.220623][T19054]  ? __pfx_____sys_sendmsg+0x10/0x10
[  694.220657][T19054]  ? import_iovec+0x74/0xa0
[  694.220678][T19054]  ___sys_sendmsg+0x21f/0x2a0
[  694.220706][T19054]  ? __pfx____sys_sendmsg+0x10/0x10
[  694.220766][T19054]  ? __fget_files+0x2a/0x420
[  694.220785][T19054]  ? __fget_files+0x3a0/0x420
[  694.220814][T19054]  __x64_sys_sendmsg+0x19b/0x260
[  694.220843][T19054]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  694.220878][T19054]  ? __pfx_ksys_write+0x10/0x10
[  694.220903][T19054]  ? rcu_is_watching+0x15/0xb0
[  694.220944][T19054]  ? do_syscall_64+0xbe/0x3b0
[  694.220969][T19054]  do_syscall_64+0xfa/0x3b0
[  694.220988][T19054]  ? lockdep_hardirqs_on+0x9c/0x150
[  694.221008][T19054]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  694.221025][T19054]  ? clear_bhb_loop+0x60/0xb0
[  694.221045][T19054]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  694.221062][T19054] RIP: 0033:0x7f83d418e929
[  694.221078][T19054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  694.221093][T19054] RSP: 002b:00007f83d5077038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  694.221111][T19054] RAX: ffffffffffffffda RBX: 00007f83d43b5fa0 RCX: 00007f83d418e929
[  694.221124][T19054] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  694.221135][T19054] RBP: 00007f83d5077090 R08: 0000000000000000 R09: 0000000000000000
[  694.221145][T19054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  694.221155][T19054] R13: 0000000000000000 R14: 00007f83d43b5fa0 R15: 00007fffe9c21518
[  694.221183][T19054]  </TASK>
[  695.643919][T19084] netlink: 'syz.2.2277': attribute type 10 has an invalid length.
[  695.651817][T19084] batadv0: left allmulticast mode
[  695.688138][T19084] 8021q: adding VLAN 0 to HW filter on device batadv0
[  695.711109][T19089] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2277'.
[  695.720338][T19084] batadv0: entered allmulticast mode
[  695.721152][T19084] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  695.770657][T19092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  697.350022][T19120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2288'.
[  698.116853][T19143] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2292'.
[  698.342861][T19146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2293'.
[  698.366398][T18265] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  698.376160][T18265] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  698.384908][T18265] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  698.398148][T18265] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  698.407708][T18265] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  698.669713][T19154] gre0: left allmulticast mode
[  698.704311][T19154] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2295'.
[  698.715652][T19154] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  698.829979][T19159] FAULT_INJECTION: forcing a failure.
[  698.829979][T19159] name failslab, interval 1, probability 0, space 0, times 0
[  698.843472][T19159] CPU: 0 UID: 0 PID: 19159 Comm: syz.2.2297 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) 
[  698.843502][T19159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  698.843515][T19159] Call Trace:
[  698.843523][T19159]  <TASK>
[  698.843532][T19159]  dump_stack_lvl+0x189/0x250
[  698.843569][T19159]  ? __pfx____ratelimit+0x10/0x10
[  698.843593][T19159]  ? __pfx_dump_stack_lvl+0x10/0x10
[  698.843625][T19159]  ? __pfx__printk+0x10/0x10
[  698.843651][T19159]  ? __pfx___might_resched+0x10/0x10
[  698.843682][T19159]  ? fs_reclaim_acquire+0x7d/0x100
[  698.843712][T19159]  should_fail_ex+0x414/0x560
[  698.843743][T19159]  should_failslab+0xa8/0x100
[  698.843767][T19159]  __kmalloc_noprof+0xcb/0x4f0
[  698.843786][T19159]  ? tomoyo_encode+0x28b/0x550
[  698.843829][T19159]  tomoyo_encode+0x28b/0x550
[  698.843864][T19159]  tomoyo_realpath_from_path+0x58d/0x5d0
[  698.843909][T19159]  tomoyo_check_open_permission+0x1c1/0x3b0
[  698.843934][T19159]  ? tomoyo_check_open_permission+0x16a/0x3b0
[  698.843958][T19159]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  698.844026][T19159]  ? tomoyo_file_open+0x165/0x220
[  698.844062][T19159]  security_file_open+0xb1/0x270
[  698.844085][T19159]  do_dentry_open+0x35e/0x1970
[  698.844130][T19159]  vfs_open+0x3b/0x340
[  698.844152][T19159]  ? path_openat+0x2ecd/0x3830
[  698.844185][T19159]  path_openat+0x2ee5/0x3830
[  698.844212][T19159]  ? arch_stack_walk+0xfc/0x150
[  698.844272][T19159]  ? __pfx_path_openat+0x10/0x10
[  698.844298][T19159]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  698.844342][T19159]  do_filp_open+0x1fa/0x410
[  698.844368][T19159]  ? __lock_acquire+0xab9/0xd20
[  698.844399][T19159]  ? __pfx_do_filp_open+0x10/0x10
[  698.844453][T19159]  ? _raw_spin_unlock+0x28/0x50
[  698.844473][T19159]  ? alloc_fd+0x64c/0x6c0
[  698.844507][T19159]  do_sys_openat2+0x121/0x1c0
[  698.844537][T19159]  ? __pfx_do_sys_openat2+0x10/0x10
[  698.844565][T19159]  ? ksys_write+0x22a/0x250
[  698.844599][T19159]  ? __pfx_ksys_write+0x10/0x10
[  698.844627][T19159]  ? rcu_is_watching+0x15/0xb0
[  698.844663][T19159]  __x64_sys_openat+0x138/0x170
[  698.844695][T19159]  do_syscall_64+0xfa/0x3b0
[  698.844720][T19159]  ? lockdep_hardirqs_on+0x9c/0x150
[  698.844743][T19159]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  698.844763][T19159]  ? clear_bhb_loop+0x60/0xb0
[  698.844789][T19159]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  698.844822][T19159] RIP: 0033:0x7f3e94d8d290
[  698.844840][T19159] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44
[  698.844858][T19159] RSP: 002b:00007f3e95b1af60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  698.844880][T19159] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3e94d8d290
[  698.844894][T19159] RDX: 0000000000000000 RSI: 00007f3e94e10c51 RDI: 00000000ffffff9c
[  698.844907][T19159] RBP: 00007f3e94e10c51 R08: 0000000000000000 R09: 0000000000000000
[  698.844920][T19159] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[  698.844932][T19159] R13: 0000000000000000 R14: 00007f3e94fb5fa0 R15: 00007ffec39c2278
[  698.844965][T19159]  </TASK>
[  698.844997][T19159] ERROR: Out of memory at tomoyo_realpath_from_path.
[  699.037613][T19162] netlink: 'syz.0.2296': attribute type 1 has an invalid length.
[  699.148404][T19163] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2296'.
[  699.187655][T19162] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2296'.
[  699.428950][T18060] bridge_slave_1: left promiscuous mode
[  699.435392][T19173] openvswitch: netlink: Unknown key attributes 2
[  699.446928][T18060] bridge0: port 2(bridge_slave_1) entered disabled state
[  699.507473][T18060] bridge_slave_0: left promiscuous mode
[  699.532376][T18060] bridge0: port 1(bridge_slave_0) entered disabled state
[  699.579679][T19175] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2300'.
[  699.674742][T19185] FAULT_INJECTION: forcing a failure.
[  699.674742][T19185] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  699.710248][T19185] CPU: 0 UID: 0 PID: 19185 Comm: syz.4.2303 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) 
[  699.710279][T19185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  699.710290][T19185] Call Trace:
[  699.710297][T19185]  <TASK>
[  699.710306][T19185]  dump_stack_lvl+0x189/0x250
[  699.710339][T19185]  ? __pfx____ratelimit+0x10/0x10
[  699.710361][T19185]  ? __pfx_dump_stack_lvl+0x10/0x10
[  699.710389][T19185]  ? __pfx__printk+0x10/0x10
[  699.710410][T19185]  ? __might_fault+0xb0/0x130
[  699.710438][T19185]  should_fail_ex+0x414/0x560
[  699.710467][T19185]  _copy_from_user+0x2d/0xb0
[  699.710485][T19185]  do_sock_getsockopt+0x1cd/0x650
[  699.710515][T19185]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  699.710539][T19185]  ? do_syscall_64+0x40/0x3b0
[  699.710561][T19185]  ? __fget_files+0x3a0/0x420
[  699.710581][T19185]  ? __fget_files+0x2a/0x420
[  699.710608][T19185]  __x64_sys_getsockopt+0x1a5/0x250
[  699.710633][T19185]  ? do_syscall_64+0x40/0x3b0
[  699.710657][T19185]  ? do_syscall_64+0x40/0x3b0
[  699.710682][T19185]  do_syscall_64+0xfa/0x3b0
[  699.710702][T19185]  ? lockdep_hardirqs_on+0x9c/0x150
[  699.710723][T19185]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  699.710748][T19185]  ? clear_bhb_loop+0x60/0xb0
[  699.710770][T19185]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  699.710788][T19185] RIP: 0033:0x7f051fd8e929
[  699.710803][T19185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  699.710818][T19185] RSP: 002b:00007f0520c26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  699.710837][T19185] RAX: ffffffffffffffda RBX: 00007f051ffb5fa0 RCX: 00007f051fd8e929
[  699.710850][T19185] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003
[  699.710860][T19185] RBP: 00007f0520c26090 R08: 0000200000001980 R09: 0000000000000000
[  699.710872][T19185] R10: 00002000000018c0 R11: 0000000000000246 R12: 0000000000000001
[  699.710882][T19185] R13: 0000000000000000 R14: 00007f051ffb5fa0 R15: 00007ffc2199e3a8
[  699.710908][T19185]  </TASK>
[  700.007889][T19195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2300'.
[  700.302568][T18060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  700.315774][T18060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  700.325146][T18060] bond0 (unregistering): Released all slaves
[  700.404397][T18060] bond1 (unregistering): Released all slaves
[  700.433603][   T51] Bluetooth: hci2: command tx timeout
[  700.494716][T18060] bond2 (unregistering): Released all slaves
[  700.717643][T18060] tipc: Disabling bearer <eth:team0>
[  700.747997][T18060] tipc: Left network mode
[  700.820713][T19203] FAULT_INJECTION: forcing a failure.
[  700.820713][T19203] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  700.855582][T19210] delete_channel: no stack
[  700.872453][T19203] CPU: 0 UID: 0 PID: 19203 Comm: syz.2.2306 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) 
[  700.872478][T19203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  700.872488][T19203] Call Trace:
[  700.872495][T19203]  <TASK>
[  700.872502][T19203]  dump_stack_lvl+0x189/0x250
[  700.872534][T19203]  ? __pfx____ratelimit+0x10/0x10
[  700.872554][T19203]  ? __pfx_dump_stack_lvl+0x10/0x10
[  700.872581][T19203]  ? __pfx__printk+0x10/0x10
[  700.872599][T19203]  ? __might_fault+0xb0/0x130
[  700.872628][T19203]  should_fail_ex+0x414/0x560
[  700.872662][T19203]  _copy_from_user+0x2d/0xb0
[  700.872680][T19203]  kstrtouint_from_user+0xc4/0x170
[  700.872706][T19203]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  700.872746][T19203]  proc_fail_nth_write+0x88/0x240
[  700.872767][T19203]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  700.872793][T19203]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  700.872816][T19203]  vfs_write+0x27e/0xa90
[  700.872852][T19203]  ? __pfx_vfs_write+0x10/0x10
[  700.872898][T19203]  ? __fget_files+0x2a/0x420
[  700.872926][T19203]  ? __fget_files+0x3a0/0x420
[  700.872944][T19203]  ? __fget_files+0x2a/0x420
[  700.872974][T19203]  ksys_write+0x145/0x250
[  700.873004][T19203]  ? __pfx_ksys_write+0x10/0x10
[  700.873028][T19203]  ? rcu_is_watching+0x15/0xb0
[  700.873062][T19203]  ? do_syscall_64+0xbe/0x3b0
[  700.873088][T19203]  do_syscall_64+0xfa/0x3b0
[  700.873109][T19203]  ? lockdep_hardirqs_on+0x9c/0x150
[  700.873129][T19203]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  700.873146][T19203]  ? clear_bhb_loop+0x60/0xb0
[  700.873169][T19203]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  700.873187][T19203] RIP: 0033:0x7f3e94d8d3df
[  700.873203][T19203] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  700.873219][T19203] RSP: 002b:00007f3e95b1b030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  700.873238][T19203] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3e94d8d3df
[  700.873250][T19203] RDX: 0000000000000001 RSI: 00007f3e95b1b0a0 RDI: 0000000000000004
[  700.873266][T19203] RBP: 00007f3e95b1b090 R08: 0000000000000000 R09: 0000000000000000
[  700.873277][T19203] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[  700.873288][T19203] R13: 0000000000000000 R14: 00007f3e94fb5fa0 R15: 00007ffec39c2278
[  700.873318][T19203]  </TASK>
[  701.127609][T19214] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2309'.
[  701.144064][T19147] chnl_net:caif_netlink_parms(): no params data found
[  701.274013][T19214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2309'.
[  701.773849][T19229] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2313'.
[  702.146336][T18060] hsr_slave_0: left promiscuous mode
[  702.186792][T18060] hsr_slave_1: left promiscuous mode
[  702.203056][T18060] batman_adv: batadv0: Removing interface: batadv_slave_0
[  702.216863][T19247] netlink: 'syz.4.2314': attribute type 3 has an invalid length.
[  702.238142][T19247] netlink: 'syz.4.2314': attribute type 4 has an invalid length.
[  702.249654][T18060] batman_adv: batadv0: Removing interface: batadv_slave_1
[  702.277378][T19247] netlink: 'syz.4.2314': attribute type 5 has an invalid length.
[  702.292748][T19247] netlink: 'syz.4.2314': attribute type 6 has an invalid length.
[  702.301047][T19251] netlink: 'syz.2.2315': attribute type 2 has an invalid length.
[  702.317924][T19247] netlink: 'syz.4.2314': attribute type 7 has an invalid length.
[  702.332242][T19247] netlink: 'syz.4.2314': attribute type 7 has an invalid length.
[  702.513622][   T51] Bluetooth: hci2: command tx timeout
[  702.762763][T19259] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  703.086603][T18060] team0 (unregistering): Port device team_slave_1 removed
[  703.196615][T18060] team0 (unregistering): Port device team_slave_0 removed
[  703.990781][T19147] bridge0: port 1(bridge_slave_0) entered blocking state
[  704.001896][T19147] bridge0: port 1(bridge_slave_0) entered disabled state
[  704.009253][T19147] bridge_slave_0: entered allmulticast mode
[  704.017071][T19147] bridge_slave_0: entered promiscuous mode
[  704.028284][T19147] bridge0: port 2(bridge_slave_1) entered blocking state
[  704.035660][T19147] bridge0: port 2(bridge_slave_1) entered disabled state
[  704.042896][T19147] bridge_slave_1: entered allmulticast mode
[  704.050727][T19147] bridge_slave_1: entered promiscuous mode
[  704.267234][T19147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  704.329126][T19289] __nla_validate_parse: 4 callbacks suppressed
[  704.329145][T19289] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2321'.
[  704.349296][T19147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  704.592319][   T51] Bluetooth: hci2: command tx timeout
[  704.622585][T19147] team0: Port device team_slave_0 added
[  704.641959][T19147] team0: Port device team_slave_1 added
[  704.837323][T19147] batman_adv: batadv0: Adding interface: batadv_slave_0
[  704.848760][T19147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  704.886437][T19147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  704.928352][T19147] batman_adv: batadv0: Adding interface: batadv_slave_1
[  704.943847][T19147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  705.004589][T19147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  705.095070][T18060] IPVS: stop unused estimator thread 0...
[  705.291238][T19147] hsr_slave_0: entered promiscuous mode
[  705.330255][T19147] hsr_slave_1: entered promiscuous mode
[  705.449549][T19313] netlink: 134788 bytes leftover after parsing attributes in process `syz.3.2328'.
[  705.956732][T19319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2329'.
[  706.672367][   T51] Bluetooth: hci2: command tx timeout
[  707.293752][T19364] No such timeout policy "syz0"
[  708.630044][T19398] netlink: 'syz.2.2343': attribute type 1 has an invalid length.
[  708.638351][T19398] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2343'.
[  708.734122][T19147] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  708.779680][T19147] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  708.798852][T19403] netlink: 'syz.2.2344': attribute type 10 has an invalid length.
[  708.873679][T19147] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  708.957103][T19147] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  709.253758][T19413] bridge_slave_0: left promiscuous mode
[  709.259601][T19413] bridge0: port 1(bridge_slave_0) entered disabled state
[  709.429481][T19413] bridge_slave_1: left promiscuous mode
[  709.447180][T19413] bridge0: port 2(bridge_slave_1) entered disabled state
[  709.497040][T19413] bond0: (slave bond_slave_0): Releasing backup interface
[  709.514777][T19413] bond0: (slave bond_slave_1): Releasing backup interface
[  709.528873][T19413] team0: Port device team_slave_0 removed
[  709.560480][T19413] team0: Port device team_slave_1 removed
[  709.571288][T19413] batman_adv: batadv0: Removing interface: batadv_slave_0
[  709.589834][T19413] batman_adv: batadv0: Removing interface: batadv_slave_1
[  709.638089][T19421] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2348'.
[  709.664265][T19421] tc_dump_action: action bad kind
[  710.243770][T19147] 8021q: adding VLAN 0 to HW filter on device bond0
[  710.530800][T19147] 8021q: adding VLAN 0 to HW filter on device team0
[  710.548874][ T3561] bridge0: port 1(bridge_slave_0) entered blocking state
[  710.556182][ T3561] bridge0: port 1(bridge_slave_0) entered forwarding state
[  710.631048][ T3561] bridge0: port 2(bridge_slave_1) entered blocking state
[  710.638809][ T3561] bridge0: port 2(bridge_slave_1) entered forwarding state
[  711.946854][T19147] 8021q: adding VLAN 0 to HW filter on device batadv0
[  712.020373][T18060] bridge_slave_1: left promiscuous mode
[  712.036945][T18060] bridge0: port 2(bridge_slave_1) entered disabled state
[  712.096920][T18265] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  712.109179][T18265] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  712.118300][T18265] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  712.129981][T18265] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  712.138901][T18265] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  712.237980][T18060] bridge_slave_0: left promiscuous mode
[  712.247214][T18060] bridge0: port 1(bridge_slave_0) entered disabled state
[  713.450407][T18060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  713.467824][T18060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  713.480964][T18060] bond0 (unregistering): Released all slaves
[  713.948418][T19147] veth0_vlan: entered promiscuous mode
[  714.067198][T19147] veth1_vlan: entered promiscuous mode
[  714.192370][T18265] Bluetooth: hci3: command tx timeout
[  714.259529][T18060] hsr_slave_0: left promiscuous mode
[  714.293591][T18060] hsr_slave_1: left promiscuous mode
[  714.315855][T18060] batman_adv: batadv0: Removing interface: batadv_slave_0
[  714.334620][T18060] batman_adv: batadv0: Removing interface: batadv_slave_1
[  714.656511][T19578] netlink: 'syz.0.2365': attribute type 1 has an invalid length.
[  714.668826][T19578] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2365'.
[  714.847602][T18060] team0 (unregistering): Port device team_slave_1 removed
[  714.877815][T18060] team0 (unregistering): Port device team_slave_0 removed
[  715.318287][T19147] veth0_macvtap: entered promiscuous mode
[  715.348084][T19583] syzkaller1: entered promiscuous mode
[  715.353766][T19583] syzkaller1: entered allmulticast mode
[  715.388489][T19147] veth1_macvtap: entered promiscuous mode
[  715.449397][T19147] batman_adv: batadv0: Interface activated: batadv_slave_0
[  715.491554][T19147] batman_adv: batadv0: Interface activated: batadv_slave_1
[  715.540165][ T6035] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  715.570042][ T6035] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  715.608574][ T6035] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  715.641979][T19506] chnl_net:caif_netlink_parms(): no params data found
[  715.675501][ T6035] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  715.714863][T19591] netlink: 'syz.0.2368': attribute type 1 has an invalid length.
[  715.788939][T19597] netlink: 'syz.3.2369': attribute type 1 has an invalid length.
[  715.798342][T19597] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2369'.
[  715.824493][T19591] 8021q: adding VLAN 0 to HW filter on device bond2
[  715.912301][T19598] 8021q: adding VLAN 0 to HW filter on device batadv1
[  715.938608][T19598] bond2: (slave batadv1): making interface the new active one
[  715.953237][T19598] bond2: (slave batadv1): Enslaving as an active interface with an up link
[  716.143763][T18060] IPVS: stop unused estimator thread 0...
[  716.159584][ T6035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  716.161016][T19610] netlink: 'syz.3.2370': attribute type 12 has an invalid length.
[  716.182223][T19610] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2370'.
[  716.202875][ T6035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  716.272318][T18265] Bluetooth: hci3: command tx timeout
[  716.288794][T19616] netlink: 'syz.0.2371': attribute type 8 has an invalid length.
[  716.919855][T19506] bridge0: port 1(bridge_slave_0) entered blocking state
[  716.982145][T19506] bridge0: port 1(bridge_slave_0) entered disabled state
[  717.004394][T19506] bridge_slave_0: entered allmulticast mode
[  717.029605][T19506] bridge_slave_0: entered promiscuous mode
[  717.054071][T19506] bridge0: port 2(bridge_slave_1) entered blocking state
[  717.061249][T19506] bridge0: port 2(bridge_slave_1) entered disabled state
[  717.068426][T19506] bridge_slave_1: entered allmulticast mode
[  717.076375][T19506] bridge_slave_1: entered promiscuous mode
[  717.297320][T19632] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2373'.
[  717.349029][T19634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2373'.
[  717.393407][T19634] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2373'.
[  717.464898][T19506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  717.490470][T19506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  717.511856][   T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  717.551141][   T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  717.765649][T19617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2372'.
[  717.972880][T19506] team0: Port device team_slave_0 added
[  717.992667][T19506] team0: Port device team_slave_1 added
[  718.354653][T18265] Bluetooth: hci3: command tx timeout
[  718.385003][T19665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2379'.
[  718.432005][T19506] batman_adv: batadv0: Adding interface: batadv_slave_0
[  718.457911][T19506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  718.532647][T19506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  718.642567][T19506] batman_adv: batadv0: Adding interface: batadv_slave_1
[  718.649642][T19506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  718.682410][T19506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  718.922732][T19506] hsr_slave_0: entered promiscuous mode
[  718.949117][T19506] hsr_slave_1: entered promiscuous mode
[  718.975244][T19506] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  719.002493][T19506] Cannot create hsr debugfs directory
[  719.096130][T18060] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  719.288549][T18060] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  719.450162][T18060] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  719.463444][T18265] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  719.472578][T18265] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  719.480828][T18265] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  719.492065][T18265] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  719.502796][T18265] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  719.707370][T18060] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  720.045695][T19704] openvswitch: netlink: IPv4 tunnel dst address is zero
[  720.432734][T18265] Bluetooth: hci3: command tx timeout
[  720.461224][T19724] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2390'.
[  720.531937][T19715] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  720.539458][T19715] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  721.035722][T18060] bridge_slave_1: left allmulticast mode
[  721.041495][T18060] bridge_slave_1: left promiscuous mode
[  721.048999][T18060] bridge0: port 2(bridge_slave_1) entered disabled state
[  721.067392][T18060] bridge_slave_0: left allmulticast mode
[  721.077460][T18060] bridge_slave_0: left promiscuous mode
[  721.086119][T18060] bridge0: port 1(bridge_slave_0) entered disabled state
[  721.199702][T19744] netlink: 'syz.2.2393': attribute type 5 has an invalid length.
[  721.209732][T19744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2393'.
[  721.404778][T18060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  721.416142][T18060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  721.427204][T18060] bond0 (unregistering): Released all slaves
[  721.552928][T18265] Bluetooth: hci2: command tx timeout
[  721.581945][T19683] chnl_net:caif_netlink_parms(): no params data found
[  722.147838][T18060] hsr_slave_0: left promiscuous mode
[  722.166906][T18060] hsr_slave_1: left promiscuous mode
[  722.178253][T18060] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  722.186888][T18060] batman_adv: batadv0: Removing interface: batadv_slave_0
[  722.199322][T18060] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  722.220285][T18060] batman_adv: batadv0: Removing interface: batadv_slave_1
[  722.280454][T18060] veth1_macvtap: left promiscuous mode
[  722.287672][T18060] veth0_macvtap: left promiscuous mode
[  722.300499][T18060] veth1_vlan: left promiscuous mode
[  722.308601][T18060] veth0_vlan: left promiscuous mode
[  722.322038][T19776] openvswitch: netlink: IPv4 tunnel dst address is zero
[  722.716003][T18060] team0 (unregistering): Port device team_slave_1 removed
[  722.749373][T18060] team0 (unregistering): Port device team_slave_0 removed
[  723.127487][T19773] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  723.195841][T19506] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  723.217676][T19683] bridge0: port 1(bridge_slave_0) entered blocking state
[  723.247988][T19683] bridge0: port 1(bridge_slave_0) entered disabled state
[  723.264492][T19683] bridge_slave_0: entered allmulticast mode
[  723.284413][T19683] bridge_slave_0: entered promiscuous mode
[  723.305940][T19683] bridge0: port 2(bridge_slave_1) entered blocking state
[  723.324126][T19683] bridge0: port 2(bridge_slave_1) entered disabled state
[  723.331790][T19683] bridge_slave_1: entered allmulticast mode
[  723.342557][T19683] bridge_slave_1: entered promiscuous mode
[  723.376825][T19773] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  723.451921][T19506] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  723.499968][T19506] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  723.534348][T19506] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  723.632768][T18265] Bluetooth: hci2: command tx timeout
[  723.634109][T19773] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  723.669808][T19683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  723.693896][T19795] syz_tun: left allmulticast mode
[  723.700084][T19795] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  723.730249][T19683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  723.766506][T19796] tipc: Started in network mode
[  723.777653][T19796] tipc: Node identity 9ec2ef87432a, cluster identity 4711
[  723.790329][T19796] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  723.819143][T19773] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  723.969288][T19796] syzkaller0: entered promiscuous mode
[  723.974896][T19796] syzkaller0: entered allmulticast mode
[  723.981212][T19796] tipc: Resetting bearer <eth:syzkaller0>
[  724.065222][T19683] team0: Port device team_slave_0 added
[  724.088006][T19793] tipc: Resetting bearer <eth:syzkaller0>
[  724.805664][T18757] tipc: Node number set to 3723030407
[  725.162661][T19826] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2413'.
[  725.397535][T19830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2413'.
[  725.572038][T19793] tipc: Disabling bearer <eth:syzkaller0>
[  725.586150][T19683] team0: Port device team_slave_1 added
[  725.703669][T19683] batman_adv: batadv0: Adding interface: batadv_slave_0
[  725.710672][T19683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  725.712544][T18265] Bluetooth: hci2: command tx timeout
[  725.742472][T19683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  725.756484][T19683] batman_adv: batadv0: Adding interface: batadv_slave_1
[  725.763590][T19683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  725.790757][T19683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  725.811456][T19835] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.2414'.
[  726.006484][T19683] hsr_slave_0: entered promiscuous mode
[  726.019651][T19683] hsr_slave_1: entered promiscuous mode
[  726.027767][   T49] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  726.249409][   T49] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  726.366119][   T49] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  726.382356][   T49] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  726.569972][T19854] netlink: 'syz.2.2416': attribute type 32 has an invalid length.
[  726.577387][T19506] 8021q: adding VLAN 0 to HW filter on device bond0
[  726.592272][T19854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2416'.
[  726.637484][T19856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2417'.
[  726.858378][T19854] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192)
[  727.047111][T19506] 8021q: adding VLAN 0 to HW filter on device team0
[  727.205940][T19876] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2420'.
[  727.231375][T19876] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2420'.
[  727.286002][   T78] bridge0: port 1(bridge_slave_0) entered blocking state
[  727.293195][   T78] bridge0: port 1(bridge_slave_0) entered forwarding state
[  727.325496][   T78] bridge0: port 2(bridge_slave_1) entered blocking state
[  727.332698][   T78] bridge0: port 2(bridge_slave_1) entered forwarding state
[  727.793492][T18265] Bluetooth: hci2: command tx timeout
[  728.297025][T19683] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  728.345801][T19683] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  728.353743][T19904] netlink: 'syz.2.2424': attribute type 4 has an invalid length.
[  728.421603][T19683] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  728.459390][T19909] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2425'.
[  728.478995][T19909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2425'.
[  728.505805][T19683] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  728.749420][T19506] 8021q: adding VLAN 0 to HW filter on device batadv0
[  728.957038][T19683] 8021q: adding VLAN 0 to HW filter on device bond0
[  729.113617][T19683] 8021q: adding VLAN 0 to HW filter on device team0
[  729.271002][ T3561] bridge0: port 1(bridge_slave_0) entered blocking state
[  729.278229][ T3561] bridge0: port 1(bridge_slave_0) entered forwarding state
[  729.423297][ T1327] bridge0: port 2(bridge_slave_1) entered blocking state
[  729.430529][ T1327] bridge0: port 2(bridge_slave_1) entered forwarding state
[  729.731203][T19506] veth0_vlan: entered promiscuous mode
[  729.771568][T19506] veth1_vlan: entered promiscuous mode
[  730.089482][T19506] veth0_macvtap: entered promiscuous mode
[  730.101107][T19506] veth1_macvtap: entered promiscuous mode
[  730.252022][T19506] batman_adv: batadv0: Interface activated: batadv_slave_0
[  730.309953][T19506] batman_adv: batadv0: Interface activated: batadv_slave_1
[  730.317606][   T30] audit: type=1800 audit(1751583790.255:2): pid=19966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2432" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2499 res=0 errno=0
[  730.378284][   T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  730.388477][   T30] audit: type=1800 audit(1751583790.255:3): pid=19966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2432" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2499 res=0 errno=0
[  730.410045][   T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  730.488600][   T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  730.526645][   T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  730.646903][T19976] bridge_slave_0: left promiscuous mode
[  730.657178][T19976] bridge0: port 1(bridge_slave_0) entered disabled state
[  730.821744][T19976] bridge_slave_1: left promiscuous mode
[  730.879876][T19976] bridge0: port 2(bridge_slave_1) entered disabled state
[  730.917872][T19976] bond0: (slave bond_slave_0): Releasing backup interface
[  730.931513][T19976] bond0: (slave bond_slave_1): Releasing backup interface
[  730.953216][T19976] team0: Port device team_slave_0 removed
[  730.976398][T19976] team0: Port device team_slave_1 removed
[  730.991132][T19976] batman_adv: batadv0: Removing interface: batadv_slave_0
[  731.011455][T19976] batman_adv: batadv0: Removing interface: batadv_slave_1
[  731.030479][T19976] bond2: (slave batadv1): Releasing active interface
[  731.065953][T19683] 8021q: adding VLAN 0 to HW filter on device batadv0
[  731.320849][  T972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  731.334135][T19683] veth0_vlan: entered promiscuous mode
[  731.354665][  T972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  731.418111][T19683] veth1_vlan: entered promiscuous mode
[  731.476799][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  731.494705][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  731.583723][T19683] veth0_macvtap: entered promiscuous mode
[  731.623914][T19683] veth1_macvtap: entered promiscuous mode
[  731.683982][T19683] batman_adv: batadv0: Interface activated: batadv_slave_0
[  731.707943][T19683] batman_adv: batadv0: Interface activated: batadv_slave_1
[  731.832749][   T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  731.850492][   T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  731.901165][   T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  731.925390][T20006] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2439'.
[  731.938497][   T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  732.074278][T20006] bond0: entered promiscuous mode
[  732.092366][T20006] bond_slave_0: entered promiscuous mode
[  732.098249][T20006] bond_slave_1: entered promiscuous mode
[  732.122889][T20006] batadv0: entered promiscuous mode
[  732.180930][T20006] bond0: left promiscuous mode
[  732.189562][T20006] bond_slave_0: left promiscuous mode
[  732.207541][T20006] bond_slave_1: left promiscuous mode
[  732.244287][T20006] batadv0: left promiscuous mode
[  732.569432][ T3561] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  732.808972][ T3561] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  732.851435][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  732.887229][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  733.074575][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  733.108633][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  733.191685][T20029] netlink: 'syz.0.2443': attribute type 1 has an invalid length.
[  733.426098][T20029] 8021q: adding VLAN 0 to HW filter on device bond3
[  733.621944][ T3561] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  733.655111][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  733.676143][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  733.702302][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  733.711106][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  733.723758][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  733.754733][T20037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2445'.
[  733.829593][T20037] block nbd3: not configured, cannot reconfigure
[  734.220305][ T3561] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  734.306491][T20057] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2446'.
[  735.046824][T20047] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  735.056405][T20047] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  735.066394][T20047] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  735.086854][T20047] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  735.096016][T20047] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  735.173957][T20082] netlink: 'syz.3.2450': attribute type 83 has an invalid length.
[  735.490074][ T3561] bridge_slave_1: left allmulticast mode
[  735.512905][ T3561] bridge_slave_1: left promiscuous mode
[  735.522406][ T3561] bridge0: port 2(bridge_slave_1) entered disabled state
[  735.574728][ T3561] bridge_slave_0: left allmulticast mode
[  735.592298][ T3561] bridge_slave_0: left promiscuous mode
[  735.602659][ T3561] bridge0: port 1(bridge_slave_0) entered disabled state
[  735.793760][ T5833] Bluetooth: hci2: command tx timeout
[  736.278759][T20105] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  736.360428][ T3561] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  736.374496][ T3561] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  736.386585][ T3561] bond0 (unregistering): Released all slaves
[  736.426988][T20091] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  736.489915][T20039] chnl_net:caif_netlink_parms(): no params data found
[  736.744756][T20113] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2454'.
[  736.754745][T20113] netlink: 'syz.3.2454': attribute type 7 has an invalid length.
[  736.767016][T20113] netlink: 'syz.3.2454': attribute type 8 has an invalid length.
[  736.775407][T20113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2454'.
[  736.861726][T20039] bridge0: port 1(bridge_slave_0) entered blocking state
[  736.868979][T20039] bridge0: port 1(bridge_slave_0) entered disabled state
[  736.877148][T20039] bridge_slave_0: entered allmulticast mode
[  736.885974][T20039] bridge_slave_0: entered promiscuous mode
[  736.921368][T20039] bridge0: port 2(bridge_slave_1) entered blocking state
[  736.933782][T20039] bridge0: port 2(bridge_slave_1) entered disabled state
[  736.941059][T20039] bridge_slave_1: entered allmulticast mode
[  736.951234][T20039] bridge_slave_1: entered promiscuous mode
[  736.997928][ T3561] hsr_slave_0: left promiscuous mode
[  737.006012][ T3561] hsr_slave_1: left promiscuous mode
[  737.013000][ T3561] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  737.020611][ T3561] batman_adv: batadv0: Removing interface: batadv_slave_0
[  737.030063][ T3561] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  737.039462][ T3561] batman_adv: batadv0: Removing interface: batadv_slave_1
[  737.090381][ T3561] veth1_macvtap: left promiscuous mode
[  737.096079][ T3561] veth0_macvtap: left promiscuous mode
[  737.101738][ T3561] veth1_vlan: left promiscuous mode
[  737.107489][ T3561] veth0_vlan: left promiscuous mode
[  737.167018][ T5833] Bluetooth: hci3: command tx timeout
[  737.562418][ T3561] team0 (unregistering): Port device team_slave_1 removed
[  737.591358][ T3561] team0 (unregistering): Port device team_slave_0 removed
[  737.873677][ T5833] Bluetooth: hci2: command tx timeout
[  738.003224][T20039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  738.021801][T20039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  738.089412][T20133] openvswitch: netlink: IPv4 tunnel dst address is zero
[  738.253703][T20137] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2461'.
[  738.340744][T20139] ieee802154 phy0 wpan0: encryption failed: -22
[  738.410496][T20039] team0: Port device team_slave_0 added
[  738.423939][T20039] team0: Port device team_slave_1 added
[  738.475726][T20148] netlink: 'syz.0.2463': attribute type 4 has an invalid length.
[  738.568433][T20039] batman_adv: batadv0: Adding interface: batadv_slave_0
[  738.582276][T20039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  738.666828][T20039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  738.695309][T20076] chnl_net:caif_netlink_parms(): no params data found
[  738.714037][T20039] batman_adv: batadv0: Adding interface: batadv_slave_1
[  738.737834][T20039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  738.814022][T20039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  738.997774][T20166] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  739.159173][T20039] hsr_slave_0: entered promiscuous mode
[  739.170781][T20039] hsr_slave_1: entered promiscuous mode
[  739.178434][T20039] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  739.191743][T20039] Cannot create hsr debugfs directory
[  739.232760][ T5833] Bluetooth: hci3: command tx timeout
[  739.264582][T20076] bridge0: port 1(bridge_slave_0) entered blocking state
[  739.278422][T20076] bridge0: port 1(bridge_slave_0) entered disabled state
[  739.286087][T20076] bridge_slave_0: entered allmulticast mode
[  739.293893][T20076] bridge_slave_0: entered promiscuous mode
[  739.397448][ T3561] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  739.449563][T20076] bridge0: port 2(bridge_slave_1) entered blocking state
[  739.464569][T20076] bridge0: port 2(bridge_slave_1) entered disabled state
[  739.471932][T20076] bridge_slave_1: entered allmulticast mode
[  739.480518][T20076] bridge_slave_1: entered promiscuous mode
[  739.581906][ T3561] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  739.726993][ T3561] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  739.756415][T20076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  739.814771][T20076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  739.955845][ T5833] Bluetooth: hci2: command tx timeout
[  740.132904][T20195] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2473'.
[  740.234079][ T3561] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  740.282329][T20076] team0: Port device team_slave_0 added
[  740.347410][T20076] team0: Port device team_slave_1 added
[  740.531263][T20076] batman_adv: batadv0: Adding interface: batadv_slave_0
[  740.544349][T20076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  740.597765][T20210] netlink: 'syz.2.2475': attribute type 1 has an invalid length.
[  740.615524][T20210] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2475'.
[  740.620255][T20076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  740.640969][T20210] netlink: 'syz.2.2475': attribute type 1 has an invalid length.
[  740.758555][T20076] batman_adv: batadv0: Adding interface: batadv_slave_1
[  740.802653][T20076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  740.900905][T20076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  740.961544][T20222] FAULT_INJECTION: forcing a failure.
[  740.961544][T20222] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  740.990492][T20222] CPU: 0 UID: 0 PID: 20222 Comm: syz.2.2478 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) 
[  740.990519][T20222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  740.990530][T20222] Call Trace:
[  740.990537][T20222]  <TASK>
[  740.990545][T20222]  dump_stack_lvl+0x189/0x250
[  740.990577][T20222]  ? __pfx____ratelimit+0x10/0x10
[  740.990599][T20222]  ? __pfx_dump_stack_lvl+0x10/0x10
[  740.990626][T20222]  ? __pfx__printk+0x10/0x10
[  740.990646][T20222]  ? __might_fault+0xb0/0x130
[  740.990675][T20222]  should_fail_ex+0x414/0x560
[  740.990702][T20222]  _copy_from_user+0x2d/0xb0
[  740.990719][T20222]  kstrtouint_from_user+0xc4/0x170
[  740.990745][T20222]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  740.990784][T20222]  proc_fail_nth_write+0x88/0x240
[  740.990806][T20222]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  740.990832][T20222]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  740.990855][T20222]  vfs_write+0x27e/0xa90
[  740.990892][T20222]  ? __pfx_vfs_write+0x10/0x10
[  740.990920][T20222]  ? __fget_files+0x2a/0x420
[  740.990944][T20222]  ? __fget_files+0x3a0/0x420
[  740.990962][T20222]  ? __fget_files+0x2a/0x420
[  740.990990][T20222]  ksys_write+0x145/0x250
[  740.991020][T20222]  ? __pfx_ksys_write+0x10/0x10
[  740.991044][T20222]  ? rcu_is_watching+0x15/0xb0
[  740.991076][T20222]  ? do_syscall_64+0xbe/0x3b0
[  740.991102][T20222]  do_syscall_64+0xfa/0x3b0
[  740.991122][T20222]  ? lockdep_hardirqs_on+0x9c/0x150
[  740.991141][T20222]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  740.991158][T20222]  ? clear_bhb_loop+0x60/0xb0
[  740.991179][T20222]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  740.991194][T20222] RIP: 0033:0x7f3e94d8d3df
[  740.991210][T20222] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  740.991225][T20222] RSP: 002b:00007f3e95b1b030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  740.991243][T20222] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3e94d8d3df
[  740.991255][T20222] RDX: 0000000000000001 RSI: 00007f3e95b1b0a0 RDI: 0000000000000004
[  740.991266][T20222] RBP: 00007f3e95b1b090 R08: 0000000000000000 R09: 0000000000000000
[  740.991276][T20222] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  740.991285][T20222] R13: 0000000000000000 R14: 00007f3e94fb5fa0 R15: 00007ffec39c2278
[  740.991314][T20222]  </TASK>
[  741.313519][ T5833] Bluetooth: hci3: command tx timeout
[  741.356010][T20231] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  741.618821][T20076] hsr_slave_0: entered promiscuous mode
[  741.635004][T20076] hsr_slave_1: entered promiscuous mode
[  741.643127][T20241] FAULT_INJECTION: forcing a failure.
[  741.643127][T20241] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  741.658294][T20076] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  741.672010][T20076] Cannot create hsr debugfs directory
[  741.681675][T20241] CPU: 1 UID: 0 PID: 20241 Comm: syz.0.2484 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) 
[  741.681702][T20241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  741.681715][T20241] Call Trace:
[  741.681724][T20241]  <TASK>
[  741.681732][T20241]  dump_stack_lvl+0x189/0x250
[  741.681781][T20241]  ? __pfx____ratelimit+0x10/0x10
[  741.681805][T20241]  ? __pfx_dump_stack_lvl+0x10/0x10
[  741.681835][T20241]  ? __pfx__printk+0x10/0x10
[  741.681858][T20241]  ? __might_fault+0xb0/0x130
[  741.681891][T20241]  should_fail_ex+0x414/0x560
[  741.681921][T20241]  _copy_to_iter+0x1db/0x16f0
[  741.681954][T20241]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  741.681987][T20241]  ? __pfx__copy_to_iter+0x10/0x10
[  741.682014][T20241]  ? kernfs_seq_stop+0x17e/0x200
[  741.682050][T20241]  ? kernfs_put_active+0xa0/0x100
[  741.682074][T20241]  ? kernfs_seq_stop+0x17e/0x200
[  741.682113][T20241]  seq_read_iter+0xbeb/0xe10
[  741.682165][T20241]  do_iter_readv_writev+0x56b/0x7f0
[  741.682190][T20241]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  741.682231][T20241]  ? rw_verify_area+0x258/0x650
[  741.682264][T20241]  vfs_readv+0x253/0x850
[  741.682310][T20241]  ? __pfx_vfs_readv+0x10/0x10
[  741.682368][T20241]  ? __fget_files+0x2a/0x420
[  741.682394][T20241]  ? __fget_files+0x3a0/0x420
[  741.682413][T20241]  ? __fget_files+0x2a/0x420
[  741.682442][T20241]  do_readv+0x14d/0x2d0
[  741.682467][T20241]  ? __pfx_do_readv+0x10/0x10
[  741.682485][T20241]  ? rcu_is_watching+0x15/0xb0
[  741.682520][T20241]  ? do_syscall_64+0xbe/0x3b0
[  741.682547][T20241]  do_syscall_64+0xfa/0x3b0
[  741.682568][T20241]  ? lockdep_hardirqs_on+0x9c/0x150
[  741.682588][T20241]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  741.682606][T20241]  ? clear_bhb_loop+0x60/0xb0
[  741.682630][T20241]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  741.682648][T20241] RIP: 0033:0x7f452698e929
[  741.682664][T20241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  741.682680][T20241] RSP: 002b:00007f45277d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013
[  741.682699][T20241] RAX: ffffffffffffffda RBX: 00007f4526bb5fa0 RCX: 00007f452698e929
[  741.682713][T20241] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000004
[  741.682724][T20241] RBP: 00007f45277d8090 R08: 0000000000000000 R09: 0000000000000000
[  741.682735][T20241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  741.682745][T20241] R13: 0000000000000000 R14: 00007f4526bb5fa0 R15: 00007ffd70d4b468
[  741.682776][T20241]  </TASK>
[  742.032187][ T5833] Bluetooth: hci2: command tx timeout
[  742.449725][ T3561] bridge_slave_1: left allmulticast mode
[  742.464878][ T3561] bridge_slave_1: left promiscuous mode
[  742.471787][ T3561] bridge0: port 2(bridge_slave_1) entered disabled state
[  742.471959][T20256] netlink: 'syz.0.2487': attribute type 10 has an invalid length.
[  742.535082][ T3561] bridge_slave_0: left allmulticast mode
[  742.542891][T20260] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2487'.
[  742.560956][ T3561] bridge_slave_0: left promiscuous mode
[  742.580303][ T3561] bridge0: port 1(bridge_slave_0) entered disabled state
[  743.336580][ T3561] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  743.347364][ T3561] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  743.358016][ T3561] bond0 (unregistering): Released all slaves
[  743.392287][ T5833] Bluetooth: hci3: command tx timeout
[  743.420710][T20256] batadv0: left allmulticast mode
[  743.450225][T20256] 8021q: adding VLAN 0 to HW filter on device batadv0
[  743.474782][T20256] batadv0: entered allmulticast mode
[  743.489026][T20256] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  743.710566][T20277] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2491'.
[  743.745811][T20277] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2491'.
[  744.099515][T20039] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  744.126067][T20039] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  744.183893][ T3561] hsr_slave_0: left promiscuous mode
[  744.214256][ T3561] hsr_slave_1: left promiscuous mode
[  744.232940][ T3561] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  744.250363][ T3561] batman_adv: batadv0: Removing interface: batadv_slave_0
[  744.297722][ T3561] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  744.320923][ T3561] batman_adv: batadv0: Removing interface: batadv_slave_1
[  744.380442][T20297] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  744.418677][ T3561] veth1_macvtap: left promiscuous mode
[  744.433903][ T3561] veth0_macvtap: left promiscuous mode
[  744.447528][ T3561] veth1_vlan: left promiscuous mode
[  744.456312][ T3561] veth0_vlan: left promiscuous mode
[  745.054415][ T3561] team0 (unregistering): Port device team_slave_1 removed
[  745.097942][ T3561] team0 (unregistering): Port device team_slave_0 removed
[  745.330337][T20312] netlink: 'syz.3.2501': attribute type 10 has an invalid length.
[  745.368495][T20313] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2501'.
[  745.672179][T20039] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  745.693875][T20039] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  745.735447][T20306] tipc: Started in network mode
[  745.745197][T20306] tipc: Node identity , cluster identity 4711
[  745.751401][T20306] tipc: Failed to set node id, please configure manually
[  745.760052][T20306] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  745.768456][T20312] batadv0: left allmulticast mode
[  745.790935][T20312] 8021q: adding VLAN 0 to HW filter on device batadv0
[  745.815566][T20312] batadv0: entered allmulticast mode
[  745.833501][T20312] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  746.304548][T20339] ..
@ÿ: renamed from bond_slave_0
[  746.359860][T20339] Cannot find add_set index 0 as target
[  746.615398][T20349] netlink: 'syz.3.2507': attribute type 3 has an invalid length.
[  746.650550][T20349] netlink: 'syz.3.2507': attribute type 4 has an invalid length.
[  746.696658][T20349] netlink: 'syz.3.2507': attribute type 5 has an invalid length.
[  746.753763][T20349] netlink: 'syz.3.2507': attribute type 6 has an invalid length.
[  746.789440][T20349] netlink: 'syz.3.2507': attribute type 7 has an invalid length.
[  746.854302][T20349] netlink: 'syz.3.2507': attribute type 7 has an invalid length.
[  746.862059][T20349] netlink: 12902 bytes leftover after parsing attributes in process `syz.3.2507'.
[  746.925649][T20039] 8021q: adding VLAN 0 to HW filter on device bond0
[  747.090866][T20039] 8021q: adding VLAN 0 to HW filter on device team0
[  747.101800][T20076] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  747.115385][T20076] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  747.127496][T20362] tipc: Started in network mode
[  747.134295][T20362] tipc: Node identity , cluster identity 4711
[  747.140379][T20362] tipc: Failed to set node id, please configure manually
[  747.154731][T20362] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  747.165566][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  747.171947][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  747.174167][T20076] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  747.213039][ T3561] bridge0: port 1(bridge_slave_0) entered blocking state
[  747.220229][ T3561] bridge0: port 1(bridge_slave_0) entered forwarding state
[  747.262762][T20076] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  747.291752][ T3561] bridge0: port 2(bridge_slave_1) entered blocking state
[  747.299043][ T3561] bridge0: port 2(bridge_slave_1) entered forwarding state
[  747.683242][T20384] vti0: entered promiscuous mode
[  747.917542][T20076] 8021q: adding VLAN 0 to HW filter on device bond0
[  747.973033][T20076] 8021q: adding VLAN 0 to HW filter on device team0
[  747.991678][  T972] bridge0: port 1(bridge_slave_0) entered blocking state
[  747.998899][  T972] bridge0: port 1(bridge_slave_0) entered forwarding state
[  748.068542][ T3561] bridge0: port 2(bridge_slave_1) entered blocking state
[  748.075734][ T3561] bridge0: port 2(bridge_slave_1) entered forwarding state
[  748.772686][T20039] 8021q: adding VLAN 0 to HW filter on device batadv0
[  749.720058][T20039] veth0_vlan: entered promiscuous mode
[  749.822739][T20456] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  749.977883][T20039] veth1_vlan: entered promiscuous mode
[  750.575841][T20076] 8021q: adding VLAN 0 to HW filter on device batadv0
[  750.619277][T20039] veth0_macvtap: entered promiscuous mode
[  750.669215][T20039] veth1_macvtap: entered promiscuous mode
[  750.909984][T20039] batman_adv: batadv0: Interface activated: batadv_slave_0
[  750.969596][T20039] batman_adv: batadv0: Interface activated: batadv_slave_1
[  751.081382][ T1327] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  751.140054][ T1327] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  751.174690][ T1327] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  751.210636][T20076] veth0_vlan: entered promiscuous mode
[  751.260843][ T1327] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  751.320353][T20076] veth1_vlan: entered promiscuous mode
[  751.483423][ T3561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  751.511886][ T3561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  751.762674][T20076] veth0_macvtap: entered promiscuous mode
[  751.856133][T20076] veth1_macvtap: entered promiscuous mode
[  751.888676][T18060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  751.909391][T18060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  751.976729][T20076] batman_adv: batadv0: Interface activated: batadv_slave_0
[  752.081402][T20076] batman_adv: batadv0: Interface activated: batadv_slave_1
[  752.151346][ T6038] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  752.186212][ T6038] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  752.269508][ T6038] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  752.477740][ T6038] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  752.583323][T20537] netlink: 'syz.2.2538': attribute type 4 has an invalid length.
[  752.594170][T20535] netlink: 'syz.3.2537': attribute type 4 has an invalid length.
[  752.828128][   T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  752.988821][   T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  753.021504][ T6038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  753.051830][ T6038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  753.115836][ T3561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  753.136674][ T3561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  753.331518][   T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  753.410718][T20552] ip6tnl0: left allmulticast mode
[  753.444380][T20552] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2540'.
[  753.464533][T20552] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check.
[  753.742804][   T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  754.135203][   T49] bridge_slave_1: left allmulticast mode
[  754.151093][   T49] bridge_slave_1: left promiscuous mode
[  754.175521][T20047] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  754.184603][T20047] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  754.194936][T20047] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  754.209121][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  754.235441][   T49] bridge_slave_0: left allmulticast mode
[  754.241243][   T49] bridge_slave_0: left promiscuous mode
[  754.261597][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  754.269462][T20047] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  754.277595][T20047] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  755.330450][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  755.353502][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  755.388682][   T49] bond0 (unregistering): Released all slaves
[  755.413602][T20047] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  755.422737][T20047] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  755.429776][T20567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2544'.
[  755.442475][T20047] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  755.453995][T20047] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  755.461979][T20047] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  755.906502][T20601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2549'.
[  756.061000][T20606] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2549'.
[  756.141488][T20612] netlink: 'syz.3.2548': attribute type 1 has an invalid length.
[  756.209778][T20612] 8021q: adding VLAN 0 to HW filter on device bond2
[  756.240553][   T49] hsr_slave_0: left promiscuous mode
[  756.268873][   T49] hsr_slave_1: left promiscuous mode
[  756.279549][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  756.291877][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  756.301075][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  756.313336][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  756.345868][   T49] veth1_macvtap: left promiscuous mode
[  756.351516][   T49] veth0_macvtap: left promiscuous mode
[  756.353169][ T5833] Bluetooth: hci2: command tx timeout
[  756.364156][   T49] veth1_vlan: left promiscuous mode
[  756.369836][   T49] veth0_vlan: left promiscuous mode
[  756.832558][   T49] team0 (unregistering): Port device team_slave_1 removed
[  756.868957][   T49] team0 (unregistering): Port device team_slave_0 removed
[  757.190529][T20615] 8021q: adding VLAN 0 to HW filter on device batadv1
[  757.209670][T20615] bond2: (slave batadv1): making interface the new active one
[  757.226314][T20615] bond2: (slave batadv1): Enslaving as an active interface with an up link
[  757.237977][T20619] ip6tnl0: left allmulticast mode
[  757.243758][T20619] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2552'.
[  757.253115][T20619] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check.
[  757.552463][ T5833] Bluetooth: hci3: command tx timeout
[  757.898724][T20653] netlink: 'syz.3.2558': attribute type 1 has an invalid length.
[  757.989633][T20653] 8021q: adding VLAN 0 to HW filter on device bond3
[  758.043376][T20574] chnl_net:caif_netlink_parms(): no params data found
[  758.123608][T20653] 8021q: adding VLAN 0 to HW filter on device bond3
[  758.135251][T20653] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  758.151214][T20653] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  758.210699][T20663] gretap3: entered promiscuous mode
[  758.393224][T20590] chnl_net:caif_netlink_parms(): no params data found
[  758.432260][ T5833] Bluetooth: hci2: command tx timeout
[  758.448699][T20671] bond0: (slave batadv0): Releasing backup interface
[  758.470504][T20671] batadv0: left allmulticast mode
[  758.493514][T20671] bond2: (slave batadv1): Releasing active interface
[  758.512605][T20675] netlink: 'syz.2.2562': attribute type 10 has an invalid length.
[  758.649622][   T30] audit: type=1800 audit(1751583818.595:4): pid=20680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2563" name="memory.events" dev="tmpfs" ino=2679 res=0 errno=0
[  758.774655][   T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  758.861438][T20686] ip6tnl0: left allmulticast mode
[  758.892164][T20686] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2565'.
[  758.932828][T20686] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check.
[  759.165063][   T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  759.246967][T20574] bridge0: port 1(bridge_slave_0) entered blocking state
[  759.291378][T20574] bridge0: port 1(bridge_slave_0) entered disabled state
[  759.309438][T20574] bridge_slave_0: entered allmulticast mode
[  759.339444][T20574] bridge_slave_0: entered promiscuous mode
[  759.365616][T20590] bridge0: port 1(bridge_slave_0) entered blocking state
[  759.390447][T20590] bridge0: port 1(bridge_slave_0) entered disabled state
[  759.413547][T20590] bridge_slave_0: entered allmulticast mode
[  759.431871][T20590] bridge_slave_0: entered promiscuous mode
[  759.478600][T20574] bridge0: port 2(bridge_slave_1) entered blocking state
[  759.491996][T20574] bridge0: port 2(bridge_slave_1) entered disabled state
[  759.510825][T20574] bridge_slave_1: entered allmulticast mode
[  759.525253][T20574] bridge_slave_1: entered promiscuous mode
[  759.565659][   T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  759.595542][T20590] bridge0: port 2(bridge_slave_1) entered blocking state
[  759.610076][T20590] bridge0: port 2(bridge_slave_1) entered disabled state
[  759.628099][T20590] bridge_slave_1: entered allmulticast mode
[  759.642365][ T5833] Bluetooth: hci3: command tx timeout
[  759.645998][T20590] bridge_slave_1: entered promiscuous mode
[  759.995064][   T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  760.071034][T20590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  760.211848][T20590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  760.226118][T20714] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  760.235818][T20574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  760.245037][T20723] netlink: 'syz.0.2571': attribute type 8 has an invalid length.
[  760.285135][T20714] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -1
[  760.364126][T20574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  760.437755][T20590] team0: Port device team_slave_0 added
[  760.465060][T20590] team0: Port device team_slave_1 added
[  760.512304][ T5833] Bluetooth: hci2: command tx timeout
[  760.649326][T20574] team0: Port device team_slave_0 added
[  760.745305][T20590] batman_adv: batadv0: Adding interface: batadv_slave_0
[  760.764877][T20590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  760.790498][T20737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2574'.
[  760.828148][T20590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  760.893215][T20590] batman_adv: batadv0: Adding interface: batadv_slave_1
[  760.923088][T20590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  760.967868][T20590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  761.033001][T20574] team0: Port device team_slave_1 added
[  761.048571][T20738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2574'.
[  761.361911][T20574] batman_adv: batadv0: Adding interface: batadv_slave_0
[  761.375733][T20574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  761.418949][T20574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  761.439316][T20574] batman_adv: batadv0: Adding interface: batadv_slave_1
[  761.449899][T20574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  761.486843][T20574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  761.525946][   T49] bridge_slave_1: left allmulticast mode
[  761.531649][   T49] bridge_slave_1: left promiscuous mode
[  761.552472][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  761.571726][   T49] bridge_slave_0: left allmulticast mode
[  761.584894][   T49] bridge_slave_0: left promiscuous mode
[  761.591244][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  761.712374][ T5833] Bluetooth: hci3: command tx timeout
[  761.822059][T20753] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2578'.
[  761.856371][T20753] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2578'.
[  761.887154][T20754] netlink: 'syz.0.2578': attribute type 10 has an invalid length.
[  761.913923][T20047] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  761.926895][T20047] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  761.938203][T20047] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  761.952938][T20047] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  761.960648][T20047] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  762.219811][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  762.235334][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  762.245676][   T49] bond0 (unregistering): Released all slaves
[  762.309311][T20590] hsr_slave_0: entered promiscuous mode
[  762.320486][T20590] hsr_slave_1: entered promiscuous mode
[  762.340864][T20754] team0: Device ipvlan1 failed to register rx_handler
[  762.559794][T20574] hsr_slave_0: entered promiscuous mode
[  762.567838][T20574] hsr_slave_1: entered promiscuous mode
[  762.578457][T20574] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  762.587754][T20574] Cannot create hsr debugfs directory
[  762.602491][ T5833] Bluetooth: hci2: command tx timeout
[  763.127549][   T49] hsr_slave_0: left promiscuous mode
[  763.144509][   T49] hsr_slave_1: left promiscuous mode
[  763.150495][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  763.162506][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  763.173522][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  763.180965][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  763.228352][   T49] veth1_macvtap: left promiscuous mode
[  763.234348][   T49] veth0_macvtap: left promiscuous mode
[  763.240717][   T49] veth1_vlan: left promiscuous mode
[  763.246700][   T49] veth0_vlan: left promiscuous mode
[  763.804432][ T5833] Bluetooth: hci3: command tx timeout
[  763.846743][   T49] team0 (unregistering): Port device team_slave_1 removed
[  763.887442][   T49] team0 (unregistering): Port device team_slave_0 removed
[  764.032581][ T5833] Bluetooth: hci4: command tx timeout
[  764.526599][T20783] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  765.308230][T20755] chnl_net:caif_netlink_parms(): no params data found
[  765.333762][T20789] FAULT_INJECTION: forcing a failure.
[  765.333762][T20789] name failslab, interval 1, probability 0, space 0, times 0
[  765.346722][T20789] CPU: 0 UID: 0 PID: 20789 Comm: syz.0.2586 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) 
[  765.346748][T20789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  765.346760][T20789] Call Trace:
[  765.346768][T20789]  <TASK>
[  765.346776][T20789]  dump_stack_lvl+0x189/0x250
[  765.346810][T20789]  ? __pfx____ratelimit+0x10/0x10
[  765.346833][T20789]  ? __pfx_dump_stack_lvl+0x10/0x10
[  765.346861][T20789]  ? __pfx__printk+0x10/0x10
[  765.346907][T20789]  ? __pfx___might_resched+0x10/0x10
[  765.346943][T20789]  should_fail_ex+0x414/0x560
[  765.346971][T20789]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  765.346991][T20789]  should_failslab+0xa8/0x100
[  765.347013][T20789]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  765.347029][T20789]  kmem_cache_alloc_lru_noprof+0x78/0x3d0
[  765.347061][T20789]  ? alloc_inode+0x6a/0x1b0
[  765.347084][T20789]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  765.347102][T20789]  alloc_inode+0x6a/0x1b0
[  765.347124][T20789]  new_inode+0x22/0x170
[  765.347150][T20789]  __debugfs_create_file+0x14d/0x4f0
[  765.347187][T20789]  debugfs_create_file_full+0x3f/0x60
[  765.347221][T20789]  ref_tracker_dir_debugfs+0x14e/0x270
[  765.347249][T20789]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[  765.347305][T20789]  ? rcu_is_watching+0x15/0xb0
[  765.347334][T20789]  ? alloc_netdev_mqs+0xa3/0x1170
[  765.347359][T20789]  ? __raw_spin_lock_init+0x45/0x100
[  765.347408][T20789]  alloc_netdev_mqs+0x26f/0x1170
[  765.347427][T20789]  ? __pfx_ip6_tnl_dev_setup+0x10/0x10
[  765.347458][T20789]  ip6_tnl_locate+0x658/0x810
[  765.347505][T20789]  ? __pfx_ip6_tnl_locate+0x10/0x10
[  765.347545][T20789]  ? ip6_tnl_siocdevprivate+0x60c/0xad0
[  765.347574][T20789]  ip6_tnl_siocdevprivate+0x630/0xad0
[  765.347607][T20789]  ? __pfx_ip6_tnl_siocdevprivate+0x10/0x10
[  765.347629][T20789]  ? rcu_is_watching+0x15/0xb0
[  765.347681][T20789]  ? full_name_hash+0x92/0xe0
[  765.347710][T20789]  ? netdev_name_node_lookup+0xdf/0x120
[  765.347734][T20789]  dev_ifsioc+0xb57/0xf00
[  765.347769][T20789]  dev_ioctl+0x84c/0x1150
[  765.347796][T20789]  sock_ioctl+0x719/0x790
[  765.347819][T20789]  ? __pfx_sock_ioctl+0x10/0x10
[  765.347841][T20789]  ? __fget_files+0x3a0/0x420
[  765.347861][T20789]  ? __fget_files+0x2a/0x420
[  765.347886][T20789]  ? bpf_lsm_file_ioctl+0x9/0x20
[  765.347914][T20789]  ? __pfx_sock_ioctl+0x10/0x10
[  765.347933][T20789]  __se_sys_ioctl+0xf9/0x170
[  765.347965][T20789]  do_syscall_64+0xfa/0x3b0
[  765.347988][T20789]  ? lockdep_hardirqs_on+0x9c/0x150
[  765.348010][T20789]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  765.348030][T20789]  ? clear_bhb_loop+0x60/0xb0
[  765.348055][T20789]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  765.348075][T20789] RIP: 0033:0x7f452698e929
[  765.348093][T20789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  765.348109][T20789] RSP: 002b:00007f45277d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  765.348130][T20789] RAX: ffffffffffffffda RBX: 00007f4526bb5fa0 RCX: 00007f452698e929
[  765.348145][T20789] RDX: 0000200000000000 RSI: 00000000000089f1 RDI: 0000000000000003
[  765.348157][T20789] RBP: 00007f45277d8090 R08: 0000000000000000 R09: 0000000000000000
[  765.348169][T20789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  765.348181][T20789] R13: 0000000000000000 R14: 00007f4526bb5fa0 R15: 00007ffd70d4b468
[  765.348215][T20789]  </TASK>
[  765.348223][T20789] debugfs: out of free dentries, can not create file 'netdev@ffff88802b7ea610'
[  766.113976][ T5833] Bluetooth: hci4: command tx timeout
[  766.143142][T20755] bridge0: port 1(bridge_slave_0) entered blocking state
[  766.150377][T20755] bridge0: port 1(bridge_slave_0) entered disabled state
[  766.172322][T20755] bridge_slave_0: entered allmulticast mode
[  766.180224][T20755] bridge_slave_0: entered promiscuous mode
[  766.195625][T20755] bridge0: port 2(bridge_slave_1) entered blocking state
[  766.202977][T20755] bridge0: port 2(bridge_slave_1) entered disabled state
[  766.242402][T20755] bridge_slave_1: entered allmulticast mode
[  766.250131][T20755] bridge_slave_1: entered promiscuous mode
[  766.323903][T20814] 
[  766.326264][T20814] ======================================================
[  766.333293][T20814] WARNING: possible circular locking dependency detected
[  766.340351][T20814] 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 Not tainted
[  766.347544][T20814] ------------------------------------------------------
[  766.354554][T20814] syz.2.2590/20814 is trying to acquire lock:
[  766.360606][T20814] ffffffff8f66a078 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0
[  766.369919][T20814] 
[  766.369919][T20814] but task is already holding lock:
[  766.377282][T20814] ffff88804fe00970 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570
[  766.386600][T20814] 
[  766.386600][T20814] which lock already depends on the new lock.
[  766.386600][T20814] 
[  766.397012][T20814] 
[  766.397012][T20814] the existing dependency chain (in reverse order) is:
[  766.406018][T20814] 
[  766.406018][T20814] -> #2 (&nr_node->node_lock){+...}-{3:3}:
[  766.414011][T20814]        lock_acquire+0x120/0x360
[  766.419055][T20814]        _raw_spin_lock_bh+0x36/0x50
[  766.424347][T20814]        nr_rt_device_down+0x12a/0x720
[  766.429805][T20814]        nr_device_event+0x137/0x150
[  766.435088][T20814]        notifier_call_chain+0x1b3/0x3e0
[  766.440742][T20814]        __dev_notify_flags+0x18d/0x2e0
[  766.446305][T20814]        netif_change_flags+0xe8/0x1a0
[  766.451768][T20814]        dev_change_flags+0x130/0x260
[  766.457145][T20814]        dev_ioctl+0x7b4/0x1150
[  766.461990][T20814]        sock_do_ioctl+0x22c/0x300
[  766.467099][T20814]        sock_ioctl+0x576/0x790
[  766.471950][T20814]        __se_sys_ioctl+0xf9/0x170
[  766.477067][T20814]        do_syscall_64+0xfa/0x3b0
[  766.482103][T20814]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  766.488528][T20814] 
[  766.488528][T20814] -> #1 (nr_node_list_lock){+...}-{3:3}:
[  766.496517][T20814]        lock_acquire+0x120/0x360
[  766.501553][T20814]        _raw_spin_lock_bh+0x36/0x50
[  766.506838][T20814]        nr_rt_device_down+0xa9/0x720
[  766.512215][T20814]        nr_device_event+0x137/0x150
[  766.517514][T20814]        notifier_call_chain+0x1b3/0x3e0
[  766.523159][T20814]        __dev_notify_flags+0x18d/0x2e0
[  766.528708][T20814]        netif_change_flags+0xe8/0x1a0
[  766.534183][T20814]        dev_change_flags+0x130/0x260
[  766.539699][T20814]        dev_ioctl+0x7b4/0x1150
[  766.544563][T20814]        sock_do_ioctl+0x22c/0x300
[  766.549679][T20814]        sock_ioctl+0x576/0x790
[  766.554528][T20814]        __se_sys_ioctl+0xf9/0x170
[  766.559645][T20814]        do_syscall_64+0xfa/0x3b0
[  766.564673][T20814]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  766.571078][T20814] 
[  766.571078][T20814] -> #0 (nr_neigh_list_lock){+...}-{3:3}:
[  766.578978][T20814]        validate_chain+0xb9b/0x2140
[  766.584529][T20814]        __lock_acquire+0xab9/0xd20
[  766.589747][T20814]        lock_acquire+0x120/0x360
[  766.594782][T20814]        _raw_spin_lock_bh+0x36/0x50
[  766.600075][T20814]        nr_remove_neigh+0x25/0xe0
[  766.605195][T20814]        nr_add_node+0x1d9f/0x2570
[  766.610312][T20814]        nr_rt_ioctl+0xc12/0xd50
[  766.615254][T20814]        sock_do_ioctl+0xdc/0x300
[  766.620270][T20814]        sock_ioctl+0x576/0x790
[  766.625110][T20814]        __se_sys_ioctl+0xf9/0x170
[  766.630242][T20814]        do_syscall_64+0xfa/0x3b0
[  766.635275][T20814]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  766.641719][T20814] 
[  766.641719][T20814] other info that might help us debug this:
[  766.641719][T20814] 
[  766.651941][T20814] Chain exists of:
[  766.651941][T20814]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[  766.651941][T20814] 
[  766.665755][T20814]  Possible unsafe locking scenario:
[  766.665755][T20814] 
[  766.673200][T20814]        CPU0                    CPU1
[  766.678579][T20814]        ----                    ----
[  766.683937][T20814]   lock(&nr_node->node_lock);
[  766.688706][T20814]                                lock(nr_node_list_lock);
[  766.695820][T20814]                                lock(&nr_node->node_lock);
[  766.703110][T20814]   lock(nr_neigh_list_lock);
[  766.707809][T20814] 
[  766.707809][T20814]  *** DEADLOCK ***
[  766.707809][T20814] 
[  766.715946][T20814] 1 lock held by syz.2.2590/20814:
[  766.721050][T20814]  #0: ffff88804fe00970 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570
[  766.730838][T20814] 
[  766.730838][T20814] stack backtrace:
[  766.736735][T20814] CPU: 0 UID: 0 PID: 20814 Comm: syz.2.2590 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) 
[  766.736758][T20814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  766.736768][T20814] Call Trace:
[  766.736776][T20814]  <TASK>
[  766.736784][T20814]  dump_stack_lvl+0x189/0x250
[  766.736814][T20814]  ? __pfx_dump_stack_lvl+0x10/0x10
[  766.736838][T20814]  ? __pfx__printk+0x10/0x10
[  766.736853][T20814]  ? stack_trace_save+0x9c/0xe0
[  766.736876][T20814]  print_circular_bug+0x2ee/0x310
[  766.736895][T20814]  check_noncircular+0x134/0x160
[  766.736914][T20814]  validate_chain+0xb9b/0x2140
[  766.736927][T20814]  ? do_syscall_64+0xfa/0x3b0
[  766.736958][T20814]  __lock_acquire+0xab9/0xd20
[  766.736982][T20814]  ? nr_remove_neigh+0x25/0xe0
[  766.737000][T20814]  lock_acquire+0x120/0x360
[  766.737021][T20814]  ? nr_remove_neigh+0x25/0xe0
[  766.737042][T20814]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  766.737060][T20814]  ? nr_remove_neigh+0x25/0xe0
[  766.737078][T20814]  _raw_spin_lock_bh+0x36/0x50
[  766.737099][T20814]  ? nr_remove_neigh+0x25/0xe0
[  766.737116][T20814]  nr_remove_neigh+0x25/0xe0
[  766.737135][T20814]  nr_add_node+0x1d9f/0x2570
[  766.737153][T20814]  ? dev_get_by_name+0x21/0x200
[  766.737169][T20814]  ? dev_get_by_name+0x21/0x200
[  766.737183][T20814]  ? dev_get_by_name+0x21/0x200
[  766.737196][T20814]  ? nr_call_to_digi+0x136/0x1b0
[  766.737213][T20814]  nr_rt_ioctl+0xc12/0xd50
[  766.737229][T20814]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  766.737255][T20814]  ? kasan_quarantine_put+0xdd/0x220
[  766.737277][T20814]  ? __pfx_nr_rt_ioctl+0x10/0x10
[  766.737298][T20814]  ? apparmor_capable+0x137/0x1b0
[  766.737326][T20814]  ? capable+0x89/0xe0
[  766.737351][T20814]  ? nr_ioctl+0x1b1/0x3b0
[  766.737376][T20814]  sock_do_ioctl+0xdc/0x300
[  766.737393][T20814]  ? __pfx_sock_do_ioctl+0x10/0x10
[  766.737408][T20814]  ? __lock_acquire+0xab9/0xd20
[  766.737436][T20814]  sock_ioctl+0x576/0x790
[  766.737452][T20814]  ? __pfx_sock_ioctl+0x10/0x10
[  766.737467][T20814]  ? __fget_files+0x2a/0x420
[  766.737483][T20814]  ? __fget_files+0x3a0/0x420
[  766.737499][T20814]  ? __fget_files+0x2a/0x420
[  766.737516][T20814]  ? bpf_lsm_file_ioctl+0x9/0x20
[  766.737542][T20814]  ? __pfx_sock_ioctl+0x10/0x10
[  766.737556][T20814]  __se_sys_ioctl+0xf9/0x170
[  766.737580][T20814]  do_syscall_64+0xfa/0x3b0
[  766.737598][T20814]  ? lockdep_hardirqs_on+0x9c/0x150
[  766.737616][T20814]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  766.737632][T20814]  ? clear_bhb_loop+0x60/0xb0
[  766.737650][T20814]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  766.737690][T20814] RIP: 0033:0x7f3e94d8e929
[  766.737705][T20814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  766.737718][T20814] RSP: 002b:00007f3e95b1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  766.737735][T20814] RAX: ffffffffffffffda RBX: 00007f3e94fb5fa0 RCX: 00007f3e94d8e929
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  766.737746][T20814] RDX: 0000200000000480 RSI: 000000000000890b RDI: 000000000000000b
[  766.737756][T20814] RBP: 00007f3e94e10b39 R08: 0000000000000000 R09: 0000000000000000
[  766.737765][T20814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  766.737773][T20814] R13: 0000000000000000 R14: 00007f3e94fb5fa0 R15: 00007ffec39c2278
[  766.737790][T20814]  </TASK>
[  767.084269][T20755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  767.105601][T20755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  768.276484][   T49] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  768.285094][   T49] batadv0: left allmulticast mode
[  768.290815][   T49] bond0 (unregistering): Released all slaves
[  768.360568][   T49] bond1 (unregistering): Released all slaves
[  768.426067][   T49] bond2 (unregistering): Released all slaves
[  768.492190][   T49] bond3 (unregistering): Released all slaves
[  768.554668][   T49] tipc: Left network mode
[  769.501724][   T49] IPVS: stop unused estimator thread 0...
[  769.807052][   T49] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  769.856475][   T49] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  769.928372][   T49] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  769.976408][   T49] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  770.105062][   T49] bridge_slave_1: left allmulticast mode
[  770.110745][   T49] bridge_slave_1: left promiscuous mode
[  770.120211][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  770.128729][   T49] bridge_slave_0: left allmulticast mode
[  770.136569][   T49] bridge_slave_0: left promiscuous mode
[  770.142691][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  770.151896][   T49] bridge_slave_1: left allmulticast mode
[  770.158435][   T49] bridge_slave_1: left promiscuous mode
[  770.164226][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  770.174423][   T49] bridge_slave_0: left allmulticast mode
[  770.180087][   T49] bridge_slave_0: left promiscuous mode
[  770.186785][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  770.199446][   T49] bridge_slave_1: left allmulticast mode
[  770.206800][   T49] bridge_slave_1: left promiscuous mode
[  770.214934][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  770.224049][   T49] bridge_slave_0: left allmulticast mode
[  770.229710][   T49] bridge_slave_0: left promiscuous mode
[  770.237400][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  770.246687][   T49] bridge_slave_1: left promiscuous mode
[  770.254308][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  770.263458][   T49] bridge_slave_0: left promiscuous mode
[  770.269153][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  770.369308][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  770.379370][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  770.389389][   T49] bond0 (unregistering): Released all slaves
[  770.467181][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  770.477784][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  770.488480][   T49] bond0 (unregistering): Released all slaves
[  770.585630][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  770.597738][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  770.607890][   T49] bond0 (unregistering): Released all slaves
[  770.991671][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  771.004239][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  771.014760][   T49] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  771.024960][   T49] batadv0: left allmulticast mode
[  771.030365][   T49] bond0 (unregistering): Released all slaves
[  771.121479][   T49] bond1 (unregistering): Released all slaves
[  771.219266][   T49] bond2 (unregistering): Released all slaves
[  771.325800][   T49] bond3 (unregistering): Released all slaves
[  771.584880][   T49] hsr_slave_0: left promiscuous mode
[  771.590970][   T49] hsr_slave_1: left promiscuous mode
[  771.598541][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  771.609338][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  771.620296][   T49] hsr_slave_0: left promiscuous mode
[  771.630215][   T49] hsr_slave_1: left promiscuous mode
[  771.639180][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  771.649015][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  771.661728][   T49] hsr_slave_0: left promiscuous mode
[  771.671421][   T49] hsr_slave_1: left promiscuous mode
[  771.677697][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  771.687297][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  771.788354][   T49] team0 (unregistering): Port device team_slave_1 removed
[  771.814588][   T49] team0 (unregistering): Port device team_slave_0 removed
[  772.011513][   T49] team0 (unregistering): Port device team_slave_1 removed
[  772.029886][   T49] team0 (unregistering): Port device team_slave_0 removed
[  772.320878][   T49] team0 (unregistering): Port device team_slave_1 removed
[  772.347940][   T49] team0 (unregistering): Port device team_slave_0 removed
[  773.351444][   T49] IPVS: stop unused estimator thread 0...