last executing test programs:

26.11403971s ago: executing program 2 (id=6021):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmmsg$inet(r0, &(0x7f0000006040)=[{{0x0, 0x80000, &(0x7f0000000700)=[{&(0x7f00000003c0)="0f2f", 0x2}], 0x1, 0x0, 0x0, 0x3000000}}, {{0x0, 0x0, &(0x7f0000005c40)=[{&(0x7f00000000c0)='_', 0xfe3c}], 0xa6}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000100)="19", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000025c0), 0x1}}], 0x4, 0x608d8d0) (fail_nth: 6)

25.145438793s ago: executing program 2 (id=6027):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c)
r1 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private0, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@loopback}}, 0xe8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (fail_nth: 6)

25.08094383s ago: executing program 2 (id=6028):
r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32)
r1 = socket(0x10, 0x803, 0x0) (rerun: 32)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 64)
write(r4, &(0x7f00000002c0)="23000000010006", 0x7) (rerun: 64)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="0fedeffc62a535e600000000800004009500000e00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000096d132478102268d00", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000015000400000002000000000013", @ANYRES32=0x1, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="ada2f2a73bb6dbfd17186785b9700a0400000000beaff455b786a10112d35ce1a6a5e614cab2edaf5a5f371148a9730ef3072ba4f06de0070778425f41f35fb401c6505bf4ae90ab434456cb24afc7beebd405367410d92f8f37bcf59a69b1e0651d74700c8446d9d0108a4e76ec869417a7aeb65b1d6633ab72bcc4e6f5fe67eba254edc78850d73bdbd62f6f7e0e7edce45d45292bb310dc", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r7, <r8=>0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r8, &(0x7f00000000c0)="77f9947678", &(0x7f00000002c0)=""/234}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYRES32=r6, @ANYRES64=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async, rerun: 64)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x30}}, 0x0) (async)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) (async, rerun: 32)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async, rerun: 32)
socket(0x10, 0x3, 0x0) (async)
r11 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r12=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r12, @ANYBLOB="000000000000000014001a"], 0x34}}, 0x0)

24.795775818s ago: executing program 2 (id=6031):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[], 0x0)

24.618356264s ago: executing program 2 (id=6034):
r0 = socket(0x10, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1c"], 0x20)
socket(0x40000000015, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x6, 0x42}, 0x48)
socket$nl_generic(0x11, 0x3, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r1], 0x28}}, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000180)='>n', 0x2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000240)={0x89, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x0, 'none\x00', 0x1f, 0x5, 0x6a}, 0x2c)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001100)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x64, 0x2, {{0x7fff, 0x6, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000000, 0x4, 0x9, 0x6, 0x4}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x1, 0x0, 0x0, 0x1bb, 0x4}}]}}}]}, 0x94}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001b80)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="94054c2e1b7f64296cf106794beb87d0f080be3710b4b25b90fe8141dcb884818e5b0cf2f59e"], 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={0xffffffffffffffff, r10, 0x0, r10}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

24.392172435s ago: executing program 1 (id=6036):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', r3, 0x4, 0x7, 0x6, 0xff, 0x34, @rand_addr=' \x01\x00', @local, 0x10, 0x20, 0x10000, 0xe60}})
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0xe0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044080)
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="3000000002"], 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bond0\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="90000000100003040400"/20, @ANYRES32=0x0, @ANYBLOB="010102000000000008000500", @ANYRES32=r7, @ANYBLOB="0a000200aaaaaaaaaa4100005c00128009000100766c616e000000004c00028006000100220000000600050088a800000c00020005"], 0x90}, 0x1, 0xba01}, 0x810)

23.367849194s ago: executing program 2 (id=6039):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x44b, 0x70bd29, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1a009, 0x8106}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x50}}, 0x20000000)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000100)={0x1, 0x94, "686617c1def5dcd2aac73d3ea6ffe24eba1a8d9920c1e4473fe2184da9426a01298bb36300665ae667ad61028978fdb5538ff86d782b5be88142438d6d2728770ba2ea5238d86bd63f22b66c210d8e308bf1c259025e0288916d34c8cc272c84551e26cfe7dd0eb61c8b4df19e1e08e73e6271206c9eb095f2c3581f545e092bc0c4395c70b340d6e34f057bd0b0a49c12b8b224"})
socket$nl_xfrm(0x10, 0x3, 0x6)
unshare(0x6a040000)
socket$nl_audit(0x10, 0x3, 0x9)
r2 = socket$unix(0x1, 0x1, 0x0)
unshare(0x22020600)
unshare(0x2a020400)
r3 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r3, &(0x7f0000000300)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0\x00', <r5=>0x0})
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000004c0)={r5, 0x3, 0x6, @broadcast}, 0x10)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0xffffffffffffff81, @local}, 0x10)
setsockopt$packet_drop_memb(r4, 0x107, 0x2, 0x0, 0x0)
connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socket(0x11, 0x3, 0xffe)
syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0xd9, 0x6, 0x0, @private=0xa010101, @local, {[@generic={0x7, 0x4, "0403"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80}}}}}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x44)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)

22.597015081s ago: executing program 1 (id=6042):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
close(0x3)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b1000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x5, 0xe, 0x20, &(0x7f0000000280)="6a370000000000001f71a76d2688", 0x0, 0xd00, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

22.384264346s ago: executing program 1 (id=6044):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xc}, [@call={0x85, 0x0, 0x0, 0xd3}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)

21.539089203s ago: executing program 1 (id=6049):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000002700)=[{{&(0x7f0000000280)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000300)="260bfd5fe22a81de56a58b71afff8926969e1bb54def367ea0047c45d38c8d4f2be6dc91083d4018a0c539471ece8f62c992aa4de5cb7163a17f8cc7aa3e52e11cb0defef1fd0fbcb9d444f8498b077fc431cc70238c14f4931c44453c0446fc37f3a9df845f579e840a69ce943a076dc0633702f0309cd427595161c5476b9bfd19b38ee639ab4430df3d51bb1cdbbe177fcfa43d1dbd533c6b83b41996", 0x9e}, {&(0x7f0000000540)="b96f3ad2fb47101991208feb74cefc3b4de3c0d70bde572c942b0a1be70f0ef8bf8582fb6be9fc36887bb9420c6078b6ff6a3eb587513fa892f0984cb760d43520a44e2812efb1c6073cfe3562cc2688056f2ea603ebd3d0ea7573d258b97c31696502c32da39a2b59fa7a3303ce50857ddf0fcb69765fcfb338dbe5886f2c58f7332031fa2f21e85531cf170bf5d8bbe1fc00d9b58c", 0x96}, {&(0x7f00000003c0)="374769e8783e9df889952788b652dddc6e4da6f3dc9066fcd7dc4a242de823b25c347f4a6f1d76979b6a1ab968ca719a0c3e5f3e4484533be7f6ba786dc283fde0a20af1a73b552e27b69fd180d6b43c613393fb6da63c1ed590", 0x5a}, {&(0x7f0000000640)=' ', 0x1}, {&(0x7f0000000680)="45818b5dc8dcff1b915050ed27781f858ea606756537ca99f94cb347a73532d8143f5fe80795f1ce3fcb31fe8a55", 0x2e}, {&(0x7f00000006c0)="8a6208f81292cdb2c855c6237d6a463e475b94dda964c3aafb27765f4a1a2bdcb5903f759094cdf35d4e592a4d51a10403cacd60ed37db715f75f153aa54305704a25cf68ae049b337a6fdb48325f85a5990e428343442eaf3eb3e93ff832d79734b983c4648dd74820836bba926c4fb110db36ab06ff9e39591be084e7ad051f990447a5d9dd4ffe414b8afeb21e1064eb291029b645cba07cc02838dae240b33097106bb914de859503809cfeedfe0cbed8d706a30ccef34fb900e87bd45ff71995370cdff7b0d82113522554103", 0xcf}], 0x6, 0x0, 0x0, 0x8010}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000a00)="78d1890b22f9a96f3e1d64448143bc65c292ec03ad58e0aa1e59a452cbb19f016d4f46cda96bccf4bf6f680525e3a761af16f5fd0611c521b3ec7499f603babb015a2319ab5c790900c7b87ab2cacece4472bab9d52fffcea0eea45e72bc6ee18c79d1c608add0f7b37c3dcd1de7d65f4c3e14b155b50f62451f21a2333cfedf3a67ba099a279e72f872442be725f01c7a31d31fce5ceb97058772bafdc3e624f9", 0xa1}, {&(0x7f00000007c0)="3c6f1f9ea0e680658ef2c4eda2a9b30d76e3c2a0972c87afe309e69b14091c03177f7b7328237e2cd137c5890a94", 0x2e}, {&(0x7f0000000ac0)}, {&(0x7f0000000b80)="c9f91b54364b94a5958220ec61d95bfa7c10c3e47bc7231dd2a5e9ae470cc4e782c22b9ae6441f9e823d2695fb97b3ffeb496d1fe8a4750151ccd20a7049b06229dff454e19d074e64eb27c42b3d21734b91fd16d7d30fe3231bf24406a997562c76d83d2a3b33080141f5a5ee44374bc265671462112b55643ffd552cde7c11db6435871a441c4723fccf049f2a76b94b4ac53864c895f33810fe3f2c63", 0x9e}], 0x4, &(0x7f0000000ec0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r2, r0]}}], 0x70}}, {{&(0x7f0000000f40)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002240)=[{&(0x7f0000000fc0)="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", 0x1000}, {&(0x7f0000001fc0)="83c05a5f7f881699fb294cd9813bc055673e542406", 0x15}, {&(0x7f0000002000)="6fbffe7fc61e69878977fca561db", 0xe}, {&(0x7f0000002040)="aa762ef0810aa21ff81d08f39763a4ff63249d7b18f1622a8de5451a01b3aa51f26853f751a698631ce1da9e232595fd8250c87a43b6c1b61dc45af0a0fa60a2919caaf2add80d57676901bb6742c94fa6839127dfd66ab62db136ce2793fdcaa743bfc0505ae25c482e7caab5b6147c6dda531369daf242c34517355da0460ec83f03edb10ec42547831cee2f909622dd1be220f3043921d10bed1c8b1a789d0ff25d9841690ba7d4d2062074b3ae2f15db4d6e68c49e7de4a5f146bbd27161887276348fb2c9cb01bc9285a49d56fc4dc434e7ce6fcf51e4f5371ae7", 0xdd}, {&(0x7f0000002140)="36bc43496244a6700eb469e2731762c63266f42e7b7c67788592a842d32f0546561efc2caff3f3e8c8e13cca4095137d2512db30d34b502fca730c41b02959877c9eea7ec0eed05fdae4efee1368e83bea6a45ccbafb3104d32ba47d3030e55567b7bc2d6d221c3e08947f7c821e0a42382c7ada031be036cf78958a5b709c1632b96e3dc7dae57f53219f8ca1df3505738111f94e5bc3db81aae37169c54cadb02240bd260eda09e1b58e970efd1b7ab5f25d3099db3bfe2eb772ad89d6df2f55a7abb7ec4e10f2e2092026f4ac0b9a6774ec7ede7c4ed4b5ae3ac4b314892be9868bc5d0ea986e9d31780130770591242f0ad5", 0xf4}], 0x5, &(0x7f00000022c0), 0x0, 0x800}}], 0x3, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001})

20.448894261s ago: executing program 1 (id=6058):
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r1, &(0x7f0000000340), 0x0}, 0x20)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3)
sendmmsg$inet(r3, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b2", 0x1}], 0x1}}], 0x1, 0x4000800)
sendmmsg$inet6(r0, &(0x7f0000002340)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x80, @remote, 0x1}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000340)='>', 0x1}], 0x1}}], 0x1, 0x4000044)
sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
shutdown(r0, 0x1)
r4 = epoll_create(0x1)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000000))
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r5, 0x10040)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0)
syz_emit_ethernet(0x8a, &(0x7f00000005c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x7c, 0x0, 0x0, 0xc, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x1a, 0x8, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x81000000, 0xfbc}, @exp_fastopen={0xfe, 0x14, 0xf989, "fc084c0af3ddbae8ffcdbddf72cd8da7"}, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x7, 0x8a}, @fastopen={0x22, 0x3, "e2"}, @exp_fastopen={0xfe, 0x14, 0xf989, "079d22d6961c5af4c2cc061f44954a96"}, @exp_fastopen={0xfe, 0xc, 0xf989, "5d7d0438043979a6"}]}}}}}}}, 0x0)

19.464101224s ago: executing program 1 (id=6062):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000002c0)={0xfffd, 0x1084, 0x4}, 0x8)
unshare(0x6a040000)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
r5 = socket(0x28, 0x5, 0x0)
unshare(0x40000500)
r6 = socket(0x28, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x16, &(0x7f0000000140)=ANY=[@ANYRESHEX=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x32}, 0x94)
bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r6, 0x4)
r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000340)={'team0\x00', <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x3f, 0x0, 0x0, 0x0, 0x4d, '\x00', r8, 0x2, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x87}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r9}, 0x18)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000a, 0x4c831, 0xffffffffffffffff, 0x0)
connect$vsock_stream(r5, &(0x7f0000000080), 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$inet6(0xa, 0x3, 0x3c)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
close(r11)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff000000007f00feffd100000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff6f}, 0x94)

9.901229006s ago: executing program 3 (id=6140):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x4000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x700)

9.806236524s ago: executing program 3 (id=6141):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0xcf, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0x0, 0x0, 0x4}]}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e120900210000000401a80016000400144006000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0)
write$tun(r2, &(0x7f00000005c0)=ANY=[], 0xfdef)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x1000000, 0x0, 0xd24f4d5778621d46}, 0x4)

9.590850664s ago: executing program 3 (id=6143):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="e30000080c000000000002000000000005000600330000000a00000000000000fc02000000000000000000000000000000000000000000000500050000000000000000000000ff"], 0x60}, 0x1, 0x7}, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000ffffffe600000000000000008500000027000000850000002300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)

9.522398627s ago: executing program 3 (id=6145):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000c00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x20, 0x3fa, 0x100, 0x70bd26, 0x25dfdbfd, {0x1, 0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x20}}, 0x20000100)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r3=>0x0})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x5c, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast2}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xa00}]}]}, 0x5c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r3, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={0xffffffffffffffff, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000c40)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000cc0)=[0x0], <r6=>0x0, 0x43, &(0x7f0000000d00)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000d40), &(0x7f0000000d80), 0x8, 0x3c, 0x8, 0x8, &(0x7f0000000dc0)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x40000, 0x0, 0x0, 0x0, 0x4, '\x00', r3, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, 0x0, 0x0, r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r7, 0x0, 0x0)
bind$802154_raw(r7, &(0x7f0000000040)={0x24, @none={0x0, 0xffff}}, 0x14)

9.190237334s ago: executing program 3 (id=6146):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
close(0x3)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

9.051175043s ago: executing program 3 (id=6147):
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10)
unshare(0x2c020400) (async)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
close(r2) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async, rerun: 64)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async, rerun: 64)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async)
unshare(0x62040200) (async, rerun: 64)
write$tun(0xffffffffffffffff, 0x0, 0x3e) (rerun: 64)
r3 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32)
r4 = socket$key(0xf, 0x3, 0x2) (rerun: 32)
sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) (async)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async)
r5 = accept(r4, &(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000100)=0x80)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r9, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0009000000080026000816"], 0x40}}, 0x0)
sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x30, r6, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x101, 0x32}}}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x248}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x4002004) (async, rerun: 32)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) (rerun: 32)
connect$inet6(r5, &(0x7f0000000400)={0xa, 0x4e22, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) (async)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x4d2, 0x32}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0xb3, 0x2, 0xfffffffe}}, 0xe8) (async, rerun: 32)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) (rerun: 32)

7.906774879s ago: executing program 32 (id=6039):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x44b, 0x70bd29, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1a009, 0x8106}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x50}}, 0x20000000)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000100)={0x1, 0x94, "686617c1def5dcd2aac73d3ea6ffe24eba1a8d9920c1e4473fe2184da9426a01298bb36300665ae667ad61028978fdb5538ff86d782b5be88142438d6d2728770ba2ea5238d86bd63f22b66c210d8e308bf1c259025e0288916d34c8cc272c84551e26cfe7dd0eb61c8b4df19e1e08e73e6271206c9eb095f2c3581f545e092bc0c4395c70b340d6e34f057bd0b0a49c12b8b224"})
socket$nl_xfrm(0x10, 0x3, 0x6)
unshare(0x6a040000)
socket$nl_audit(0x10, 0x3, 0x9)
r2 = socket$unix(0x1, 0x1, 0x0)
unshare(0x22020600)
unshare(0x2a020400)
r3 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r3, &(0x7f0000000300)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0\x00', <r5=>0x0})
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000004c0)={r5, 0x3, 0x6, @broadcast}, 0x10)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0xffffffffffffff81, @local}, 0x10)
setsockopt$packet_drop_memb(r4, 0x107, 0x2, 0x0, 0x0)
connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socket(0x11, 0x3, 0xffe)
syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0xd9, 0x6, 0x0, @private=0xa010101, @local, {[@generic={0x7, 0x4, "0403"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80}}}}}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x44)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)

4.061417009s ago: executing program 33 (id=6062):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000002c0)={0xfffd, 0x1084, 0x4}, 0x8)
unshare(0x6a040000)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
r5 = socket(0x28, 0x5, 0x0)
unshare(0x40000500)
r6 = socket(0x28, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x16, &(0x7f0000000140)=ANY=[@ANYRESHEX=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x32}, 0x94)
bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r6, 0x4)
r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000340)={'team0\x00', <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x3f, 0x0, 0x0, 0x0, 0x4d, '\x00', r8, 0x2, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x87}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r9}, 0x18)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000a, 0x4c831, 0xffffffffffffffff, 0x0)
connect$vsock_stream(r5, &(0x7f0000000080), 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$inet6(0xa, 0x3, 0x3c)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
close(r11)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff000000007f00feffd100000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff6f}, 0x94)

2.826477445s ago: executing program 5 (id=6175):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x3, 0xc, 0x2, 0x0, @multicast}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000580)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
close(r2)
r3 = epoll_create1(0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r2, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x4040006}, 0x4000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r5, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'broadcast-link\x00'}}}, 0x28}}, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r4, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000007c0)="93bffce623851797a8dc7901f0048278cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee389a3427c84262ff67b679ccac105b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f84240270a470f95b99ebc70000000000000000000000000000000002000002000000b91676caca13a5430463ccd3c6bdddacbcd34ec7f4c95078d0e9c390731b689cb03fe9d7a23fc6b358fa882b73f7bba72a12678806a5c63f91457070bd1985ddf9", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="51e657b8220ca193c9de9030c3c7175ae0132383bf66bd1ea5bd07a8092f5c1c356ef81ebc8a3ed11284c75e4991ca84a0eda6ac4148ace258f78bc2340c45834bc28c93523f00c13f7bda920d040647a60c2f548c6d155657", 0x59}, {&(0x7f00000002c0)="ee3714aa7756572d12ad3cd80207f0ea76a0bc3c9248ca350afa19d6fbf95238e23db454a07c93a0831e31bdca1de56a48b55c0e56450721a31ba40ea9fb151d57852e371a2ace8bf18e4f347744d20282453e4d54f49b050ae57bc7515d2c546523d307712455c5a01a19915dceb94ccf3e2abdaf29911893b524ea0d6c", 0x7e}, {&(0x7f0000000340)="369a15a0571263d7eb045c4189eca46d74304653c6a7cdcc3156527537a7ac0e069d681daf747f096a98d3c2cfe43d76014e5e77acaa68492279aea8751e5b0c555309b4609ddfd17912d5f9f49e2d85356e13b3e9c95b0b0b9b13dd80b34f03d37201b9", 0x64}], 0x3}}], 0x2, 0x48d0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r4, 0x0, 0x0, 0x10008095, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32, @ANYBLOB="08000b000000000008000200ac14143f"], 0x54}}, 0x80)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000200)={0x20002008})

1.687678408s ago: executing program 5 (id=6181):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
epoll_create1(0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = socket(0x1e, 0x1, 0x0)
listen(r2, 0x0)
socket$alg(0x26, 0x5, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
unshare(0x400)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7b}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020786c3100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10)
write$cgroup_int(r0, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc})
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff800}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000071121d000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000240)={0x28, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x28}}, 0x0)

1.452205676s ago: executing program 4 (id=6182):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}, {0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x108}}, 0x0)

1.374276614s ago: executing program 4 (id=6184):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a69700000001a000400000000000900020073797a3100000000240007800c00028008000140ffffffff0c00018008000140e000000205001400eaf4a7b878c08d0200000005000500020000000500010006000000"], 0x6c}}, 0x0)

1.195797789s ago: executing program 4 (id=6186):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

970.078487ms ago: executing program 4 (id=6188):
unshare(0x400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40000120)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x100}, @TCA_FQ_FLOW_MAX_RATE={0xffffffffffffff20, 0x2, 0x10270000}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x7000000}]}}]}, 0x48}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0082010105000000852000000400000000000000000300000000000000000000184100000004000000000000000000009500000000000000950000000000000014583000ffffffff18160000", @ANYRES32=r0, @ANYBLOB="000000000000000045abffff00000000183800000400"/32], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r0, r0, r0, r0, 0xffffffffffffffff, r0], 0x0, 0x10, 0xfffffffe}, 0xc3)

969.679907ms ago: executing program 0 (id=6189):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000100)=0x1, 0x4)
sendmmsg$inet6(r0, &(0x7f0000001480)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0xde03, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000300)='`', 0x1}], 0x1, 0x0, 0x91}}], 0x1, 0x24088058)

969.137122ms ago: executing program 0 (id=6190):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
unshare(0x400)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8000, 0x7}, 0x50)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r1, 0x0, 0x0}, 0x20)

868.799931ms ago: executing program 0 (id=6191):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000080), 0x4)
sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f00000007c0)=@l2tp6={0xa, 0x700, 0x4, @loopback, 0xffffffff, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000280)="f4000900062b2b25fe80000000000000dc8b850f2323fcb11ea3548466cc00007a000000", 0x24}, {&(0x7f0000000100)="42e9462c", 0x4}], 0x2}, 0x0)

781.918527ms ago: executing program 5 (id=6192):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
ioctl(r1, 0x8b1a, &(0x7f0000000040)) (fail_nth: 6)

696.326391ms ago: executing program 0 (id=6193):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a0002"], 0x48}}, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000280)=ANY=[@ANYRES8=0x0], 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private0, 0x5, 0x2, 0x0, 0x9, 0x80, 0x401}, 0x20)
sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40004}, [@IFLA_MTU={0x8, 0x4, 0x3f9}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x4000)

356.107341ms ago: executing program 5 (id=6194):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='b ', @ANYRESOCT], 0x9)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006c00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b200000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004}, 0x94)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv4_getnexthop={0x28, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NHA_MASTER={0x8, 0xa, 0x2}, @NHA_MASTER={0x8, 0xa, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map=0x1, 0xa, 0x1, 0x2, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], <r5=>0x0}, 0x40)
r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={r2, 0xffffffffffffffff, 0x32, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="340000000a38bd4ec1b21325", @ANYRES32=r6, @ANYBLOB, @ANYRES64=r5], 0x20)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x14, 0x32, 0x20, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket$igmp6(0xa, 0x3, 0x2)
sendmsg$inet6(r8, &(0x7f0000003580)={&(0x7f0000001fc0)={0xa, 0x2, 0xfffffffe, @empty, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="140000000000000029000000340000000100000000000000"], 0x30}, 0x10)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r9, &(0x7f0000000140)="41000200010001", 0x7)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000300)='GPL\x00', 0xe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000ff}, 0x94)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)

252.793043ms ago: executing program 4 (id=6195):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x60}}, 0x810)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000010851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afffffff8000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000200)={'filter\x00', 0x4}, 0x68)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000280)={<r3=>0x0, @in={{0x2, 0x4e22, @empty}}, 0x2, 0xba, 0x2, 0xc, 0x2}, &(0x7f0000000080)=0x98)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000340)={r3, 0x6, 0x1, [0x0]}, 0xa)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@fwd={0x3}, @var={0x5, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x0, 0x61, 0x2e, 0x61, 0x2e]}}, 0x0, 0x3b, 0x0, 0x1, 0x1}, 0x28)

168.199945ms ago: executing program 0 (id=6196):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0)
sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x14, 0x7, 0x8, 0x3, 0x0, 0x70bd2a, 0x25dfdbfd, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e24}]}, 0x18}}, 0xb0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001e00431b", @ANYRES8], 0x20}}, 0x0)
readv(r1, &(0x7f0000000040)=[{&(0x7f0000000000)=""/6, 0x6}], 0x1)
r2 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000))
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040))
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', <r3=>0x0})
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r5, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r6, 0x4)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0xffa, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x14, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x41, '\x00', r3, @fallback=0x26, r0, 0x8, &(0x7f0000000240)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0xd, 0x8, 0x623}, 0x10, r6, r7, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94)

126.812419ms ago: executing program 4 (id=6197):
syz_init_net_socket$ax25(0x3, 0x3, 0x1)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$6lowpan_control(r1, &(0x7f0000000200)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d106c7200000001000000000037a80000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0)
ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={0x1, @default, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r4)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80001}, 0x4)
ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000300), 0xffffffffffffffff)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$bt_hci(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="3000000002"], 0x8)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600)

124.83436ms ago: executing program 5 (id=6198):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1900904}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x88, 0x2, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x5}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x6}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x28}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x81}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x4004004)
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x3, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000200)={0x9, 0x200, 0x1, 0x6}, 0x10)
sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000004c0)={0x0, 0x4}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x2}, 0x8)

480.832µs ago: executing program 0 (id=6199):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010)
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000140001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000100000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) (fail_nth: 6)

0s ago: executing program 5 (id=6200):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
close(0x3)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

kernel console output (not intermixed with test programs):

451]  __x64_sys_sendmsg+0x19b/0x260
[  656.340019][T23451]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  656.340057][T23451]  ? __pfx_ksys_write+0x10/0x10
[  656.340094][T23451]  ? do_syscall_64+0xbe/0xfa0
[  656.340121][T23451]  do_syscall_64+0xfa/0xfa0
[  656.340141][T23451]  ? lockdep_hardirqs_on+0x9c/0x150
[  656.340164][T23451]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  656.340187][T23451]  ? clear_bhb_loop+0x60/0xb0
[  656.340214][T23451]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  656.340236][T23451] RIP: 0033:0x7f952ad8f749
[  656.340256][T23451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  656.340276][T23451] RSP: 002b:00007f952bcce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  656.340299][T23451] RAX: ffffffffffffffda RBX: 00007f952afe5fa0 RCX: 00007f952ad8f749
[  656.340315][T23451] RDX: 0000000000000004 RSI: 0000200000000080 RDI: 0000000000000003
[  656.340329][T23451] RBP: 00007f952bcce090 R08: 0000000000000000 R09: 0000000000000000
[  656.340343][T23451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  656.340356][T23451] R13: 00007f952afe6038 R14: 00007f952afe5fa0 R15: 00007ffe20727b98
[  656.340395][T23451]  </TASK>
[  656.755577][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  656.795255][T23457] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5883'.
[  656.990293][T23457] bond10: entered promiscuous mode
[  657.002415][T23457] 8021q: adding VLAN 0 to HW filter on device bond10
[  657.014633][T23445] batadv_slave_1: left promiscuous mode
[  657.032073][T23466] netlink: 340 bytes leftover after parsing attributes in process `syz.2.5886'.
[  657.042468][T23466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5886'.
[  657.157415][T23471] FAULT_INJECTION: forcing a failure.
[  657.157415][T23471] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  657.181536][T23471] CPU: 0 UID: 0 PID: 23471 Comm: syz.0.5887 Not tainted syzkaller #0 PREEMPT(full) 
[  657.181567][T23471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  657.181582][T23471] Call Trace:
[  657.181590][T23471]  <TASK>
[  657.181598][T23471]  dump_stack_lvl+0x189/0x250
[  657.181628][T23471]  ? __pfx____ratelimit+0x10/0x10
[  657.181656][T23471]  ? __pfx_dump_stack_lvl+0x10/0x10
[  657.181689][T23471]  ? __pfx__printk+0x10/0x10
[  657.181718][T23471]  should_fail_ex+0x414/0x560
[  657.181749][T23471]  _copy_to_user+0x31/0xb0
[  657.181774][T23471]  simple_read_from_buffer+0xe1/0x170
[  657.181806][T23471]  proc_fail_nth_read+0x1b3/0x220
[  657.181832][T23471]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  657.181857][T23471]  ? rw_verify_area+0x2a6/0x4d0
[  657.181880][T23471]  ? __lock_acquire+0xab9/0xd20
[  657.181897][T23471]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  657.181922][T23471]  vfs_read+0x200/0xa30
[  657.181946][T23471]  ? fdget_pos+0x247/0x320
[  657.181973][T23471]  ? __pfx___mutex_lock+0x10/0x10
[  657.181995][T23471]  ? __pfx_vfs_read+0x10/0x10
[  657.182020][T23471]  ? __fget_files+0x2a/0x420
[  657.182041][T23471]  ? __fget_files+0x3a0/0x420
[  657.182056][T23471]  ? __fget_files+0x2a/0x420
[  657.182081][T23471]  ksys_read+0x145/0x250
[  657.182108][T23471]  ? __pfx_ksys_read+0x10/0x10
[  657.182135][T23471]  ? do_syscall_64+0xbe/0xfa0
[  657.182156][T23471]  do_syscall_64+0xfa/0xfa0
[  657.182171][T23471]  ? lockdep_hardirqs_on+0x9c/0x150
[  657.182188][T23471]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  657.182205][T23471]  ? clear_bhb_loop+0x60/0xb0
[  657.182226][T23471]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  657.182242][T23471] RIP: 0033:0x7f7a02b8e15c
[  657.182258][T23471] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  657.182273][T23471] RSP: 002b:00007f7a03a69030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  657.182292][T23471] RAX: ffffffffffffffda RBX: 00007f7a02de5fa0 RCX: 00007f7a02b8e15c
[  657.182305][T23471] RDX: 000000000000000f RSI: 00007f7a03a690a0 RDI: 0000000000000004
[  657.182316][T23471] RBP: 00007f7a03a69090 R08: 0000000000000000 R09: 0000000000000000
[  657.182326][T23471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  657.182336][T23471] R13: 00007f7a02de6038 R14: 00007f7a02de5fa0 R15: 00007ffec4026bd8
[  657.182366][T23471]  </TASK>
[  657.486115][T23473] FAULT_INJECTION: forcing a failure.
[  657.486115][T23473] name failslab, interval 1, probability 0, space 0, times 0
[  657.525263][T23473] CPU: 1 UID: 0 PID: 23473 Comm: syz.2.5888 Not tainted syzkaller #0 PREEMPT(full) 
[  657.525298][T23473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  657.525313][T23473] Call Trace:
[  657.525323][T23473]  <TASK>
[  657.525334][T23473]  dump_stack_lvl+0x189/0x250
[  657.525372][T23473]  ? __pfx____ratelimit+0x10/0x10
[  657.525408][T23473]  ? __pfx_dump_stack_lvl+0x10/0x10
[  657.525441][T23473]  ? __pfx__printk+0x10/0x10
[  657.525461][T23473]  ? kmalloc_reserve+0xbd/0x290
[  657.525493][T23473]  ? __lock_acquire+0xab9/0xd20
[  657.525527][T23473]  should_fail_ex+0x414/0x560
[  657.525570][T23473]  should_failslab+0xa8/0x100
[  657.525596][T23473]  kmem_cache_alloc_noprof+0x74/0x6e0
[  657.525630][T23473]  ? skb_clone+0x212/0x3a0
[  657.525665][T23473]  skb_clone+0x212/0x3a0
[  657.525709][T23473]  __netlink_deliver_tap+0x404/0x850
[  657.525752][T23473]  ? netlink_deliver_tap+0x2e/0x1b0
[  657.525780][T23473]  netlink_deliver_tap+0x19c/0x1b0
[  657.525807][T23473]  netlink_unicast+0x7fa/0x9e0
[  657.525857][T23473]  ? __pfx_netlink_unicast+0x10/0x10
[  657.525912][T23473]  ? netlink_sendmsg+0x642/0xb30
[  657.525934][T23473]  ? skb_put+0x11b/0x210
[  657.525963][T23473]  netlink_sendmsg+0x805/0xb30
[  657.526001][T23473]  ? __pfx_netlink_sendmsg+0x10/0x10
[  657.526030][T23473]  ? aa_sock_msg_perm+0xf1/0x1d0
[  657.526066][T23473]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  657.526089][T23473]  ? __pfx_netlink_sendmsg+0x10/0x10
[  657.526115][T23473]  __sock_sendmsg+0x21c/0x270
[  657.526152][T23473]  ____sys_sendmsg+0x505/0x830
[  657.526185][T23473]  ? __pfx_____sys_sendmsg+0x10/0x10
[  657.526224][T23473]  ? import_iovec+0x74/0xa0
[  657.526257][T23473]  ___sys_sendmsg+0x21f/0x2a0
[  657.526291][T23473]  ? __pfx____sys_sendmsg+0x10/0x10
[  657.526364][T23473]  ? __fget_files+0x2a/0x420
[  657.526384][T23473]  ? __fget_files+0x3a0/0x420
[  657.526419][T23473]  __x64_sys_sendmsg+0x19b/0x260
[  657.526449][T23473]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  657.526487][T23473]  ? __pfx_ksys_write+0x10/0x10
[  657.526524][T23473]  ? do_syscall_64+0xbe/0xfa0
[  657.526552][T23473]  do_syscall_64+0xfa/0xfa0
[  657.526572][T23473]  ? lockdep_hardirqs_on+0x9c/0x150
[  657.526594][T23473]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  657.526616][T23473]  ? clear_bhb_loop+0x60/0xb0
[  657.526644][T23473]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  657.526666][T23473] RIP: 0033:0x7f72fab8f749
[  657.526692][T23473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  657.526712][T23473] RSP: 002b:00007f72f8df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  657.526737][T23473] RAX: ffffffffffffffda RBX: 00007f72fade5fa0 RCX: 00007f72fab8f749
[  657.526753][T23473] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[  657.526767][T23473] RBP: 00007f72f8df6090 R08: 0000000000000000 R09: 0000000000000000
[  657.526781][T23473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  657.526794][T23473] R13: 00007f72fade6038 R14: 00007f72fade5fa0 R15: 00007ffe03441648
[  657.526835][T23473]  </TASK>
[  657.872794][T23479] FAULT_INJECTION: forcing a failure.
[  657.872794][T23479] name failslab, interval 1, probability 0, space 0, times 0
[  657.886449][T23479] CPU: 1 UID: 0 PID: 23479 Comm: syz.3.5892 Not tainted syzkaller #0 PREEMPT(full) 
[  657.886480][T23479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  657.886494][T23479] Call Trace:
[  657.886503][T23479]  <TASK>
[  657.886514][T23479]  dump_stack_lvl+0x189/0x250
[  657.886548][T23479]  ? __pfx____ratelimit+0x10/0x10
[  657.886582][T23479]  ? __pfx_dump_stack_lvl+0x10/0x10
[  657.886613][T23479]  ? __pfx__printk+0x10/0x10
[  657.886642][T23479]  ? __pfx___might_resched+0x10/0x10
[  657.886665][T23479]  ? fs_reclaim_acquire+0x7d/0x100
[  657.886692][T23479]  should_fail_ex+0x414/0x560
[  657.886731][T23479]  should_failslab+0xa8/0x100
[  657.886756][T23479]  __kmalloc_noprof+0xcb/0x7f0
[  657.886786][T23479]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  657.886817][T23479]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  657.886849][T23479]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  657.886896][T23479]  genl_family_rcv_msg_doit+0xb8/0x300
[  657.886935][T23479]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  657.886976][T23479]  ? apparmor_capable+0x137/0x1b0
[  657.887003][T23479]  ? bpf_lsm_capable+0x9/0x20
[  657.887030][T23479]  ? security_capable+0x7e/0x2e0
[  657.887068][T23479]  genl_rcv_msg+0x60e/0x790
[  657.887106][T23479]  ? __pfx_genl_rcv_msg+0x10/0x10
[  657.887133][T23479]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  657.887158][T23479]  ? __pfx_nl80211_join_mesh+0x10/0x10
[  657.887178][T23479]  ? __pfx_nl80211_post_doit+0x10/0x10
[  657.887206][T23479]  ? __asan_memcpy+0x40/0x70
[  657.887232][T23479]  ? __pfx_ref_tracker_free+0x10/0x10
[  657.887261][T23479]  netlink_rcv_skb+0x208/0x470
[  657.887282][T23479]  ? __lock_acquire+0xab9/0xd20
[  657.887304][T23479]  ? __pfx_genl_rcv_msg+0x10/0x10
[  657.887334][T23479]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  657.887379][T23479]  ? down_read+0x1ad/0x2e0
[  657.887406][T23479]  genl_rcv+0x28/0x40
[  657.887432][T23479]  netlink_unicast+0x82f/0x9e0
[  657.887476][T23479]  ? __pfx_netlink_unicast+0x10/0x10
[  657.887512][T23479]  ? netlink_sendmsg+0x642/0xb30
[  657.887533][T23479]  ? skb_put+0x11b/0x210
[  657.887560][T23479]  netlink_sendmsg+0x805/0xb30
[  657.887596][T23479]  ? __pfx_netlink_sendmsg+0x10/0x10
[  657.887625][T23479]  ? aa_sock_msg_perm+0xf1/0x1d0
[  657.887659][T23479]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  657.887680][T23479]  ? __pfx_netlink_sendmsg+0x10/0x10
[  657.887706][T23479]  __sock_sendmsg+0x21c/0x270
[  657.887740][T23479]  ____sys_sendmsg+0x505/0x830
[  657.887773][T23479]  ? __pfx_____sys_sendmsg+0x10/0x10
[  657.887810][T23479]  ? import_iovec+0x74/0xa0
[  657.887843][T23479]  ___sys_sendmsg+0x21f/0x2a0
[  657.887880][T23479]  ? __pfx____sys_sendmsg+0x10/0x10
[  657.887950][T23479]  ? __fget_files+0x2a/0x420
[  657.887969][T23479]  ? __fget_files+0x3a0/0x420
[  657.888004][T23479]  __x64_sys_sendmsg+0x19b/0x260
[  657.888032][T23479]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  657.888070][T23479]  ? __pfx_ksys_write+0x10/0x10
[  657.888106][T23479]  ? do_syscall_64+0xbe/0xfa0
[  657.888132][T23479]  do_syscall_64+0xfa/0xfa0
[  657.888151][T23479]  ? lockdep_hardirqs_on+0x9c/0x150
[  657.888172][T23479]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  657.888192][T23479]  ? clear_bhb_loop+0x60/0xb0
[  657.888218][T23479]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  657.888238][T23479] RIP: 0033:0x7feb9f98f749
[  657.888258][T23479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  657.888276][T23479] RSP: 002b:00007feba07b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  657.888298][T23479] RAX: ffffffffffffffda RBX: 00007feb9fbe5fa0 RCX: 00007feb9f98f749
[  657.888314][T23479] RDX: 0000000000048094 RSI: 0000200000000300 RDI: 0000000000000003
[  657.888327][T23479] RBP: 00007feba07b8090 R08: 0000000000000000 R09: 0000000000000000
[  657.888341][T23479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  657.888353][T23479] R13: 00007feb9fbe6038 R14: 00007feb9fbe5fa0 R15: 00007ffc455f9658
[  657.888392][T23479]  </TASK>
[  658.399160][T23491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5893'.
[  658.507123][T23496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5896'.
[  658.533350][T23496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5896'.
[  658.566872][T23501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5897'.
[  658.578866][T23496] syz_tun: entered allmulticast mode
[  658.709977][T23504] pim6reg: entered allmulticast mode
[  658.759358][T23510] FAULT_INJECTION: forcing a failure.
[  658.759358][T23510] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  658.773540][T23510] CPU: 1 UID: 0 PID: 23510 Comm: syz.2.5900 Not tainted syzkaller #0 PREEMPT(full) 
[  658.773569][T23510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  658.773581][T23510] Call Trace:
[  658.773590][T23510]  <TASK>
[  658.773599][T23510]  dump_stack_lvl+0x189/0x250
[  658.773634][T23510]  ? __pfx____ratelimit+0x10/0x10
[  658.773668][T23510]  ? __pfx_dump_stack_lvl+0x10/0x10
[  658.773695][T23510]  ? __pfx__printk+0x10/0x10
[  658.773728][T23510]  should_fail_ex+0x414/0x560
[  658.773766][T23510]  _copy_to_user+0x31/0xb0
[  658.773795][T23510]  simple_read_from_buffer+0xe1/0x170
[  658.773833][T23510]  proc_fail_nth_read+0x1b3/0x220
[  658.773864][T23510]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  658.773896][T23510]  ? rw_verify_area+0x2a6/0x4d0
[  658.773924][T23510]  ? __lock_acquire+0xab9/0xd20
[  658.773943][T23510]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  658.773972][T23510]  vfs_read+0x200/0xa30
[  658.773999][T23510]  ? fdget_pos+0x247/0x320
[  658.774026][T23510]  ? __pfx___mutex_lock+0x10/0x10
[  658.774050][T23510]  ? __pfx_vfs_read+0x10/0x10
[  658.774082][T23510]  ? __fget_files+0x2a/0x420
[  658.774114][T23510]  ? __fget_files+0x3a0/0x420
[  658.774132][T23510]  ? __fget_files+0x2a/0x420
[  658.774162][T23510]  ksys_read+0x145/0x250
[  658.774193][T23510]  ? __pfx_ksys_read+0x10/0x10
[  658.774226][T23510]  ? do_syscall_64+0xbe/0xfa0
[  658.774251][T23510]  do_syscall_64+0xfa/0xfa0
[  658.774269][T23510]  ? lockdep_hardirqs_on+0x9c/0x150
[  658.774288][T23510]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  658.774309][T23510]  ? clear_bhb_loop+0x60/0xb0
[  658.774336][T23510]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  658.774355][T23510] RIP: 0033:0x7f72fab8e15c
[  658.774376][T23510] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  658.774392][T23510] RSP: 002b:00007f72f8df6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  658.774416][T23510] RAX: ffffffffffffffda RBX: 00007f72fade5fa0 RCX: 00007f72fab8e15c
[  658.774431][T23510] RDX: 000000000000000f RSI: 00007f72f8df60a0 RDI: 0000000000000004
[  658.774444][T23510] RBP: 00007f72f8df6090 R08: 0000000000000000 R09: 0000000000000000
[  658.774457][T23510] R10: 0000200000001100 R11: 0000000000000246 R12: 0000000000000001
[  658.774470][T23510] R13: 00007f72fade6038 R14: 00007f72fade5fa0 R15: 00007ffe03441648
[  658.774516][T23510]  </TASK>
[  659.149352][T23515] netlink: 'syz.4.5904': attribute type 10 has an invalid length.
[  659.161280][T23515] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  659.271744][T23523] FAULT_INJECTION: forcing a failure.
[  659.271744][T23523] name failslab, interval 1, probability 0, space 0, times 0
[  659.304334][T23523] CPU: 0 UID: 0 PID: 23523 Comm: syz.3.5906 Not tainted syzkaller #0 PREEMPT(full) 
[  659.304366][T23523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  659.304381][T23523] Call Trace:
[  659.304389][T23523]  <TASK>
[  659.304399][T23523]  dump_stack_lvl+0x189/0x250
[  659.304432][T23523]  ? __pfx____ratelimit+0x10/0x10
[  659.304465][T23523]  ? __pfx_dump_stack_lvl+0x10/0x10
[  659.304495][T23523]  ? __pfx__printk+0x10/0x10
[  659.304519][T23523]  ? __pfx___might_resched+0x10/0x10
[  659.304544][T23523]  ? fs_reclaim_acquire+0x7d/0x100
[  659.304571][T23523]  should_fail_ex+0x414/0x560
[  659.304611][T23523]  should_failslab+0xa8/0x100
[  659.304632][T23523]  kmem_cache_alloc_node_noprof+0x77/0x710
[  659.304661][T23523]  ? __alloc_skb+0x255/0x430
[  659.304687][T23523]  ? napi_skb_cache_get+0x445/0x6e0
[  659.304707][T23523]  ? napi_skb_cache_get+0x151/0x6e0
[  659.304884][T23523]  __alloc_skb+0x255/0x430
[  659.304919][T23523]  ? __pfx___alloc_skb+0x10/0x10
[  659.304945][T23523]  ? apparmor_capable+0x137/0x1b0
[  659.304976][T23523]  ? bpf_lsm_capable+0x9/0x20
[  659.305136][T23523]  ? security_capable+0x7e/0x2e0
[  659.305174][T23523]  tipc_get_err_tlv+0x36/0xe0
[  659.305211][T23523]  tipc_nl_compat_recv+0x878/0xbe0
[  659.305248][T23523]  ? __pfx_tipc_nl_compat_recv+0x10/0x10
[  659.305278][T23523]  ? __mutex_trylock_common+0x153/0x260
[  659.305312][T23523]  ? __pfx___mutex_trylock_common+0x10/0x10
[  659.305341][T23523]  ? __pfx___tipc_nl_bearer_disable+0x10/0x10
[  659.305365][T23523]  ? __pfx_tipc_nl_compat_bearer_disable+0x10/0x10
[  659.305407][T23523]  ? trace_contention_end+0x39/0x120
[  659.305448][T23523]  genl_family_rcv_msg_doit+0x215/0x300
[  659.305493][T23523]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  659.305555][T23523]  genl_rcv_msg+0x60e/0x790
[  659.305590][T23523]  ? __pfx_genl_rcv_msg+0x10/0x10
[  659.305620][T23523]  ? __pfx_tipc_nl_compat_recv+0x10/0x10
[  659.305655][T23523]  ? __asan_memcpy+0x40/0x70
[  659.305687][T23523]  ? __pfx_ref_tracker_free+0x10/0x10
[  659.305722][T23523]  netlink_rcv_skb+0x208/0x470
[  659.305744][T23523]  ? __lock_acquire+0xab9/0xd20
[  659.305769][T23523]  ? __pfx_genl_rcv_msg+0x10/0x10
[  659.305815][T23523]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  659.305865][T23523]  ? down_read+0x1ad/0x2e0
[  659.305897][T23523]  genl_rcv+0x28/0x40
[  659.305926][T23523]  netlink_unicast+0x82f/0x9e0
[  659.305973][T23523]  ? __pfx_netlink_unicast+0x10/0x10
[  659.306012][T23523]  ? netlink_sendmsg+0x642/0xb30
[  659.306034][T23523]  ? skb_put+0x11b/0x210
[  659.306065][T23523]  netlink_sendmsg+0x805/0xb30
[  659.306103][T23523]  ? __pfx_netlink_sendmsg+0x10/0x10
[  659.306133][T23523]  ? aa_sock_msg_perm+0xf1/0x1d0
[  659.306170][T23523]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  659.306192][T23523]  ? __pfx_netlink_sendmsg+0x10/0x10
[  659.306219][T23523]  __sock_sendmsg+0x21c/0x270
[  659.306257][T23523]  ____sys_sendmsg+0x505/0x830
[  659.306289][T23523]  ? __pfx_____sys_sendmsg+0x10/0x10
[  659.306325][T23523]  ? import_iovec+0x74/0xa0
[  659.306355][T23523]  ___sys_sendmsg+0x21f/0x2a0
[  659.306383][T23523]  ? __pfx____sys_sendmsg+0x10/0x10
[  659.306450][T23523]  ? __fget_files+0x2a/0x420
[  659.306470][T23523]  ? __fget_files+0x3a0/0x420
[  659.306501][T23523]  __x64_sys_sendmsg+0x19b/0x260
[  659.306530][T23523]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  659.306568][T23523]  ? __pfx_ksys_write+0x10/0x10
[  659.306606][T23523]  ? do_syscall_64+0xbe/0xfa0
[  659.306634][T23523]  do_syscall_64+0xfa/0xfa0
[  659.306655][T23523]  ? lockdep_hardirqs_on+0x9c/0x150
[  659.306678][T23523]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  659.306699][T23523]  ? clear_bhb_loop+0x60/0xb0
[  659.306728][T23523]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  659.306749][T23523] RIP: 0033:0x7feb9f98f749
[  659.306772][T23523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  659.306801][T23523] RSP: 002b:00007feba07b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  659.306826][T23523] RAX: ffffffffffffffda RBX: 00007feb9fbe5fa0 RCX: 00007feb9f98f749
[  659.306843][T23523] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003
[  659.306856][T23523] RBP: 00007feba07b8090 R08: 0000000000000000 R09: 0000000000000000
[  659.306871][T23523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  659.306884][T23523] R13: 00007feb9fbe6038 R14: 00007feb9fbe5fa0 R15: 00007ffc455f9658
[  659.306925][T23523]  </TASK>
[  659.864987][T23526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5909'.
[  659.934583][T23526] bond14: entered promiscuous mode
[  659.940518][T23526] 8021q: adding VLAN 0 to HW filter on device bond14
[  659.969523][T23534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5911'.
[  660.016809][T23531] bond1: Removing last ns target with arp_interval on
[  660.132665][T23534] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5911'.
[  660.197571][T23552] pim6reg: entered allmulticast mode
[  660.205376][T23552] team0: entered allmulticast mode
[  660.210556][T23552] team_slave_0: entered allmulticast mode
[  660.221296][T23552] team_slave_1: entered allmulticast mode
[  660.341883][T23558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5919'.
[  660.473833][T23554] lo speed is unknown, defaulting to 1000
[  661.471907][T23575] bond13: entered promiscuous mode
[  661.499212][T23575] 8021q: adding VLAN 0 to HW filter on device bond13
[  661.647869][T23578] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  661.664936][T23578] netlink: 'syz.0.5927': attribute type 13 has an invalid length.
[  661.769309][T23582] mac80211_hwsim hwsim21 syzkaller0: Caught tx_queue_len zero misconfig
[  661.971034][T23592] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  661.979884][T23593] syzkaller0: entered promiscuous mode
[  661.998962][T23593] syzkaller0: entered allmulticast mode
[  662.009860][T23592] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  662.093571][T23592] tipc: Resetting bearer <eth:syzkaller0>
[  662.158714][T23590] tipc: Resetting bearer <eth:syzkaller0>
[  662.294756][T23590] tipc: Disabling bearer <eth:syzkaller0>
[  662.498222][T23602] batadv_slave_1: entered promiscuous mode
[  662.629613][   T12] tipc: Resetting bearer <eth:syzkaller0>
[  662.724817][T23601] batadv_slave_1: left promiscuous mode
[  663.121117][T23620] __nla_validate_parse: 3 callbacks suppressed
[  663.121138][T23620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5941'.
[  663.231429][T23620] team0: Port device dummy0 removed
[  663.362289][T23630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5943'.
[  663.500400][T23632] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  663.525429][T23632] netlink: 'syz.0.5944': attribute type 4 has an invalid length.
[  663.539619][T23630] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5943'.
[  663.579951][T23639] FAULT_INJECTION: forcing a failure.
[  663.579951][T23639] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  663.596368][T23634] FAULT_INJECTION: forcing a failure.
[  663.596368][T23634] name failslab, interval 1, probability 0, space 0, times 0
[  663.624340][T23639] CPU: 0 UID: 0 PID: 23639 Comm: syz.4.5946 Not tainted syzkaller #0 PREEMPT(full) 
[  663.624373][T23639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  663.624387][T23639] Call Trace:
[  663.624396][T23639]  <TASK>
[  663.624407][T23639]  dump_stack_lvl+0x189/0x250
[  663.624442][T23639]  ? __pfx____ratelimit+0x10/0x10
[  663.624476][T23639]  ? __pfx_dump_stack_lvl+0x10/0x10
[  663.624506][T23639]  ? __pfx__printk+0x10/0x10
[  663.624543][T23639]  should_fail_ex+0x414/0x560
[  663.624582][T23639]  _copy_to_user+0x31/0xb0
[  663.624613][T23639]  simple_read_from_buffer+0xe1/0x170
[  663.624651][T23639]  proc_fail_nth_read+0x1b3/0x220
[  663.624683][T23639]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  663.624714][T23639]  ? rw_verify_area+0x2a6/0x4d0
[  663.624743][T23639]  ? __lock_acquire+0xab9/0xd20
[  663.624763][T23639]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  663.624791][T23639]  vfs_read+0x200/0xa30
[  663.624819][T23639]  ? fdget_pos+0x247/0x320
[  663.624845][T23639]  ? __pfx___mutex_lock+0x10/0x10
[  663.624871][T23639]  ? __pfx_vfs_read+0x10/0x10
[  663.624901][T23639]  ? __fget_files+0x2a/0x420
[  663.624927][T23639]  ? __fget_files+0x3a0/0x420
[  663.624946][T23639]  ? __fget_files+0x2a/0x420
[  663.624977][T23639]  ksys_read+0x145/0x250
[  663.625014][T23639]  ? __pfx_ksys_read+0x10/0x10
[  663.625048][T23639]  ? do_syscall_64+0xbe/0xfa0
[  663.625074][T23639]  do_syscall_64+0xfa/0xfa0
[  663.625094][T23639]  ? lockdep_hardirqs_on+0x9c/0x150
[  663.625115][T23639]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  663.625138][T23639]  ? clear_bhb_loop+0x60/0xb0
[  663.625165][T23639]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  663.625185][T23639] RIP: 0033:0x7f952ad8e15c
[  663.625205][T23639] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  663.625223][T23639] RSP: 002b:00007f952bcce030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  663.625246][T23639] RAX: ffffffffffffffda RBX: 00007f952afe5fa0 RCX: 00007f952ad8e15c
[  663.625262][T23639] RDX: 000000000000000f RSI: 00007f952bcce0a0 RDI: 0000000000000004
[  663.625275][T23639] RBP: 00007f952bcce090 R08: 0000000000000000 R09: 0000000000000000
[  663.625289][T23639] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001
[  663.625303][T23639] R13: 00007f952afe6038 R14: 00007f952afe5fa0 R15: 00007ffe20727b98
[  663.625349][T23639]  </TASK>
[  663.650647][T23634] CPU: 1 UID: 0 PID: 23634 Comm: syz.3.5945 Not tainted syzkaller #0 PREEMPT(full) 
[  663.650688][T23634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  663.650702][T23634] Call Trace:
[  663.650714][T23634]  <TASK>
[  663.650725][T23634]  dump_stack_lvl+0x189/0x250
[  663.650766][T23634]  ? __pfx____ratelimit+0x10/0x10
[  663.650806][T23634]  ? __pfx_dump_stack_lvl+0x10/0x10
[  663.650838][T23634]  ? __pfx__printk+0x10/0x10
[  663.650872][T23634]  ? __pfx___might_resched+0x10/0x10
[  663.650898][T23634]  ? fs_reclaim_acquire+0x7d/0x100
[  663.650929][T23634]  should_fail_ex+0x414/0x560
[  663.650975][T23634]  should_failslab+0xa8/0x100
[  663.651005][T23634]  __kmalloc_noprof+0xcb/0x7f0
[  663.651040][T23634]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  663.651076][T23634]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  663.651125][T23634]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  663.651170][T23634]  genl_family_rcv_msg_doit+0xb8/0x300
[  663.651213][T23634]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  663.651256][T23634]  ? apparmor_capable+0x137/0x1b0
[  663.651287][T23634]  ? bpf_lsm_capable+0x9/0x20
[  663.651316][T23634]  ? security_capable+0x7e/0x2e0
[  663.651372][T23634]  genl_rcv_msg+0x60e/0x790
[  663.651417][T23634]  ? __pfx_genl_rcv_msg+0x10/0x10
[  663.651449][T23634]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  663.651478][T23634]  ? __pfx_nl80211_join_mesh+0x10/0x10
[  663.651502][T23634]  ? __pfx_nl80211_post_doit+0x10/0x10
[  663.651534][T23634]  ? __asan_memcpy+0x40/0x70
[  663.651568][T23634]  ? __pfx_ref_tracker_free+0x10/0x10
[  663.651605][T23634]  netlink_rcv_skb+0x208/0x470
[  663.651629][T23634]  ? __lock_acquire+0xab9/0xd20
[  663.651655][T23634]  ? __pfx_genl_rcv_msg+0x10/0x10
[  663.651692][T23634]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  663.651746][T23634]  ? down_read+0x1ad/0x2e0
[  663.651779][T23634]  genl_rcv+0x28/0x40
[  663.651810][T23634]  netlink_unicast+0x82f/0x9e0
[  663.651862][T23634]  ? __pfx_netlink_unicast+0x10/0x10
[  663.651903][T23634]  ? netlink_sendmsg+0x642/0xb30
[  663.651928][T23634]  ? skb_put+0x11b/0x210
[  663.651959][T23634]  netlink_sendmsg+0x805/0xb30
[  663.651999][T23634]  ? __pfx_netlink_sendmsg+0x10/0x10
[  663.652033][T23634]  ? aa_sock_msg_perm+0xf1/0x1d0
[  663.652072][T23634]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  663.652105][T23634]  ? __pfx_netlink_sendmsg+0x10/0x10
[  663.652137][T23634]  __sock_sendmsg+0x21c/0x270
[  663.652177][T23634]  ____sys_sendmsg+0x505/0x830
[  663.652214][T23634]  ? __pfx_____sys_sendmsg+0x10/0x10
[  663.652256][T23634]  ? import_iovec+0x74/0xa0
[  663.652294][T23634]  ___sys_sendmsg+0x21f/0x2a0
[  663.652327][T23634]  ? __pfx____sys_sendmsg+0x10/0x10
[  663.652410][T23634]  ? __fget_files+0x2a/0x420
[  663.652433][T23634]  ? __fget_files+0x3a0/0x420
[  663.652474][T23634]  __x64_sys_sendmsg+0x19b/0x260
[  663.652507][T23634]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  663.652551][T23634]  ? __pfx_ksys_write+0x10/0x10
[  663.652592][T23634]  ? do_syscall_64+0xbe/0xfa0
[  663.652622][T23634]  do_syscall_64+0xfa/0xfa0
[  663.652646][T23634]  ? lockdep_hardirqs_on+0x9c/0x150
[  663.652669][T23634]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  663.652694][T23634]  ? clear_bhb_loop+0x60/0xb0
[  663.652725][T23634]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  663.652748][T23634] RIP: 0033:0x7feb9f98f749
[  663.652773][T23634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  663.652795][T23634] RSP: 002b:00007feba07b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  663.652823][T23634] RAX: ffffffffffffffda RBX: 00007feb9fbe5fa0 RCX: 00007feb9f98f749
[  663.652842][T23634] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003
[  663.652859][T23634] RBP: 00007feba07b8090 R08: 0000000000000000 R09: 0000000000000000
[  663.652875][T23634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  663.652889][T23634] R13: 00007feb9fbe6038 R14: 00007feb9fbe5fa0 R15: 00007ffc455f9658
[  663.652935][T23634]  </TASK>
[  664.314949][T23641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5948'.
[  664.363032][T23641] bond11: entered promiscuous mode
[  664.369457][T23641] 8021q: adding VLAN 0 to HW filter on device bond11
[  664.461123][T23646] lo speed is unknown, defaulting to 1000
[  664.805860][T23664] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5955'.
[  664.858049][T23666] FAULT_INJECTION: forcing a failure.
[  664.858049][T23666] name failslab, interval 1, probability 0, space 0, times 0
[  664.871470][T23666] CPU: 0 UID: 0 PID: 23666 Comm: syz.0.5955 Not tainted syzkaller #0 PREEMPT(full) 
[  664.871500][T23666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  664.871514][T23666] Call Trace:
[  664.871523][T23666]  <TASK>
[  664.871532][T23666]  dump_stack_lvl+0x189/0x250
[  664.871567][T23666]  ? __pfx____ratelimit+0x10/0x10
[  664.871601][T23666]  ? __pfx_dump_stack_lvl+0x10/0x10
[  664.871631][T23666]  ? __pfx__printk+0x10/0x10
[  664.871660][T23666]  ? __pfx___might_resched+0x10/0x10
[  664.871690][T23666]  should_fail_ex+0x414/0x560
[  664.871728][T23666]  should_failslab+0xa8/0x100
[  664.871753][T23666]  kmem_cache_alloc_lru_noprof+0x79/0x6d0
[  664.871783][T23666]  ? __d_alloc+0x36/0x7a0
[  664.871814][T23666]  __d_alloc+0x36/0x7a0
[  664.871845][T23666]  d_alloc_parallel+0xe1/0x1610
[  664.871872][T23666]  ? __lock_acquire+0xab9/0xd20
[  664.871907][T23666]  ? __lock_acquire+0xab9/0xd20
[  664.871935][T23666]  ? __pfx_d_alloc_parallel+0x10/0x10
[  664.871976][T23666]  ? __raw_spin_lock_init+0x45/0x100
[  664.872007][T23666]  ? __init_waitqueue_head+0xa9/0x150
[  664.872043][T23666]  __lookup_slow+0x116/0x3d0
[  664.872073][T23666]  ? __pfx___lookup_slow+0x10/0x10
[  664.872111][T23666]  ? d_lookup+0x8a/0xa0
[  664.872136][T23666]  ? lookup_noperm+0x112/0x220
[  664.872168][T23666]  simple_start_creating+0xfd/0x1e0
[  664.872190][T23666]  ? __pfx_simple_start_creating+0x10/0x10
[  664.872227][T23666]  debugfs_start_creating+0x10f/0x180
[  664.872261][T23666]  __debugfs_create_file+0x79/0x4f0
[  664.872298][T23666]  debugfs_create_file_full+0x3f/0x60
[  664.872333][T23666]  ref_tracker_dir_debugfs+0x14e/0x270
[  664.872356][T23666]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[  664.872412][T23666]  ? trace_kmalloc+0x1f/0xd0
[  664.872439][T23666]  ? __kvmalloc_node_noprof+0x5ed/0x910
[  664.872478][T23666]  ? __raw_spin_lock_init+0x45/0x100
[  664.872510][T23666]  alloc_netdev_mqs+0x272/0x11b0
[  664.872538][T23666]  ? __pfx_ip6_tnl_dev_setup+0x10/0x10
[  664.872576][T23666]  rtnl_create_link+0x31f/0xd10
[  664.872613][T23666]  rtnl_newlink_create+0x25c/0xb00
[  664.872644][T23666]  ? __lock_acquire+0xab9/0xd20
[  664.872672][T23666]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  664.872701][T23666]  ? __pfx___mutex_lock+0x10/0x10
[  664.872738][T23666]  ? ns_capable+0x8a/0xf0
[  664.872767][T23666]  rtnl_newlink+0x16e4/0x1c80
[  664.872808][T23666]  ? __pfx_rtnl_newlink+0x10/0x10
[  664.872840][T23666]  ? __lock_acquire+0xab9/0xd20
[  664.872877][T23666]  ? __lock_acquire+0xab9/0xd20
[  664.872924][T23666]  ? is_bpf_text_address+0x26/0x2b0
[  664.872954][T23666]  ? is_bpf_text_address+0x292/0x2b0
[  664.872984][T23666]  ? is_bpf_text_address+0x26/0x2b0
[  664.873011][T23666]  ? kernel_text_address+0xa5/0xe0
[  664.873050][T23666]  ? __kernel_text_address+0xd/0x40
[  664.873093][T23666]  ? unwind_get_return_address+0x4d/0x90
[  664.873118][T23666]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  664.873146][T23666]  ? arch_stack_walk+0xfc/0x150
[  664.873181][T23666]  ? __lock_acquire+0xab9/0xd20
[  664.873238][T23666]  ? __pfx_rtnl_newlink+0x10/0x10
[  664.873260][T23666]  rtnetlink_rcv_msg+0x7cf/0xb70
[  664.873280][T23666]  ? __lock_acquire+0xab9/0xd20
[  664.873304][T23666]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  664.873325][T23666]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  664.873368][T23666]  netlink_rcv_skb+0x208/0x470
[  664.873390][T23666]  ? __lock_acquire+0xab9/0xd20
[  664.873419][T23666]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  664.873443][T23666]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  664.873483][T23666]  ? netlink_deliver_tap+0x2e/0x1b0
[  664.873517][T23666]  netlink_unicast+0x82f/0x9e0
[  664.873562][T23666]  ? __pfx_netlink_unicast+0x10/0x10
[  664.873598][T23666]  ? netlink_sendmsg+0x642/0xb30
[  664.873619][T23666]  ? skb_put+0x11b/0x210
[  664.873646][T23666]  netlink_sendmsg+0x805/0xb30
[  664.873681][T23666]  ? __pfx_netlink_sendmsg+0x10/0x10
[  664.873707][T23666]  ? aa_sock_msg_perm+0xf1/0x1d0
[  664.873740][T23666]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  664.873760][T23666]  ? __pfx_netlink_sendmsg+0x10/0x10
[  664.873786][T23666]  __sock_sendmsg+0x21c/0x270
[  664.873820][T23666]  ____sys_sendmsg+0x505/0x830
[  664.873853][T23666]  ? __pfx_____sys_sendmsg+0x10/0x10
[  664.873890][T23666]  ? import_iovec+0x74/0xa0
[  664.873923][T23666]  ___sys_sendmsg+0x21f/0x2a0
[  664.873951][T23666]  ? __pfx____sys_sendmsg+0x10/0x10
[  664.874029][T23666]  ? __fget_files+0x2a/0x420
[  664.874048][T23666]  ? __fget_files+0x3a0/0x420
[  664.874082][T23666]  __x64_sys_sendmsg+0x19b/0x260
[  664.874117][T23666]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  664.874155][T23666]  ? __pfx_ksys_write+0x10/0x10
[  664.874190][T23666]  ? do_syscall_64+0xbe/0xfa0
[  664.874216][T23666]  do_syscall_64+0xfa/0xfa0
[  664.874235][T23666]  ? lockdep_hardirqs_on+0x9c/0x150
[  664.874256][T23666]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  664.874277][T23666]  ? clear_bhb_loop+0x60/0xb0
[  664.874303][T23666]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  664.874324][T23666] RIP: 0033:0x7f7a02b8f749
[  664.874343][T23666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  664.874362][T23666] RSP: 002b:00007f7a03a48038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  664.874385][T23666] RAX: ffffffffffffffda RBX: 00007f7a02de6090 RCX: 00007f7a02b8f749
[  664.874400][T23666] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  664.874414][T23666] RBP: 00007f7a03a48090 R08: 0000000000000000 R09: 0000000000000000
[  664.874427][T23666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  664.874440][T23666] R13: 00007f7a02de6128 R14: 00007f7a02de6090 R15: 00007ffec4026bd8
[  664.874477][T23666]  </TASK>
[  665.748742][T23679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5959'.
[  666.045904][T23690] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5959'.
[  666.621479][T23704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5966'.
[  666.687530][T23704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5966'.
[  666.706486][T23706] sock: sock_timestamping_bind_phc: sock not bind to device
[  666.882364][T23716] netlink: 'syz.4.5968': attribute type 21 has an invalid length.
[  666.900609][T23716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5968'.
[  666.999640][T23716] netlink: 'syz.4.5968': attribute type 21 has an invalid length.
[  667.018887][T23716] netlink: 'syz.4.5968': attribute type 21 has an invalid length.
[  667.582719][T23749] FAULT_INJECTION: forcing a failure.
[  667.582719][T23749] name failslab, interval 1, probability 0, space 0, times 0
[  667.610924][T23749] CPU: 1 UID: 0 PID: 23749 Comm: syz.3.5981 Not tainted syzkaller #0 PREEMPT(full) 
[  667.610953][T23749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  667.610965][T23749] Call Trace:
[  667.610973][T23749]  <TASK>
[  667.610983][T23749]  dump_stack_lvl+0x189/0x250
[  667.611018][T23749]  ? __pfx____ratelimit+0x10/0x10
[  667.611051][T23749]  ? __pfx_dump_stack_lvl+0x10/0x10
[  667.611081][T23749]  ? __pfx__printk+0x10/0x10
[  667.611106][T23749]  ? __pfx___might_resched+0x10/0x10
[  667.611130][T23749]  ? fs_reclaim_acquire+0x7d/0x100
[  667.611157][T23749]  should_fail_ex+0x414/0x560
[  667.611197][T23749]  should_failslab+0xa8/0x100
[  667.611222][T23749]  kmem_cache_alloc_node_noprof+0x77/0x710
[  667.611253][T23749]  ? __alloc_skb+0x255/0x430
[  667.611274][T23749]  ? napi_skb_cache_get+0x445/0x6e0
[  667.611293][T23749]  ? napi_skb_cache_get+0x151/0x6e0
[  667.611320][T23749]  __alloc_skb+0x255/0x430
[  667.611345][T23749]  ? __pfx___alloc_skb+0x10/0x10
[  667.611375][T23749]  ? netlink_ack_tlv_len+0x6c/0x210
[  667.611413][T23749]  netlink_ack+0x146/0xa50
[  667.611433][T23749]  ? __pfx_genl_rcv_msg+0x10/0x10
[  667.611483][T23749]  netlink_rcv_skb+0x28c/0x470
[  667.611504][T23749]  ? __lock_acquire+0xab9/0xd20
[  667.611526][T23749]  ? __pfx_genl_rcv_msg+0x10/0x10
[  667.611557][T23749]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  667.611604][T23749]  ? down_read+0x1ad/0x2e0
[  667.611632][T23749]  genl_rcv+0x28/0x40
[  667.611659][T23749]  netlink_unicast+0x82f/0x9e0
[  667.611712][T23749]  ? __pfx_netlink_unicast+0x10/0x10
[  667.611748][T23749]  ? netlink_sendmsg+0x642/0xb30
[  667.611770][T23749]  ? skb_put+0x11b/0x210
[  667.611796][T23749]  netlink_sendmsg+0x805/0xb30
[  667.611832][T23749]  ? __pfx_netlink_sendmsg+0x10/0x10
[  667.611861][T23749]  ? aa_sock_msg_perm+0xf1/0x1d0
[  667.611895][T23749]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  667.611916][T23749]  ? __pfx_netlink_sendmsg+0x10/0x10
[  667.611942][T23749]  __sock_sendmsg+0x21c/0x270
[  667.611975][T23749]  ____sys_sendmsg+0x505/0x830
[  667.612007][T23749]  ? __pfx_____sys_sendmsg+0x10/0x10
[  667.612044][T23749]  ? import_iovec+0x74/0xa0
[  667.612076][T23749]  ___sys_sendmsg+0x21f/0x2a0
[  667.612103][T23749]  ? __pfx____sys_sendmsg+0x10/0x10
[  667.612173][T23749]  ? __fget_files+0x2a/0x420
[  667.612194][T23749]  ? __fget_files+0x3a0/0x420
[  667.612227][T23749]  __x64_sys_sendmsg+0x19b/0x260
[  667.612256][T23749]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  667.612293][T23749]  ? __pfx_ksys_write+0x10/0x10
[  667.612327][T23749]  ? do_syscall_64+0xbe/0xfa0
[  667.612352][T23749]  do_syscall_64+0xfa/0xfa0
[  667.612371][T23749]  ? lockdep_hardirqs_on+0x9c/0x150
[  667.612392][T23749]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  667.612413][T23749]  ? clear_bhb_loop+0x60/0xb0
[  667.612438][T23749]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  667.612459][T23749] RIP: 0033:0x7feb9f98f749
[  667.612478][T23749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  667.612495][T23749] RSP: 002b:00007feba07b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  667.612517][T23749] RAX: ffffffffffffffda RBX: 00007feb9fbe5fa0 RCX: 00007feb9f98f749
[  667.612533][T23749] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004
[  667.612546][T23749] RBP: 00007feba07b8090 R08: 0000000000000000 R09: 0000000000000000
[  667.612558][T23749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  667.612571][T23749] R13: 00007feb9fbe6038 R14: 00007feb9fbe5fa0 R15: 00007ffc455f9658
[  667.612607][T23749]  </TASK>
[  668.122997][T23761] bridge12: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  668.139886][T23761] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  668.184992][T23765] FAULT_INJECTION: forcing a failure.
[  668.184992][T23765] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  668.231928][T23765] CPU: 0 UID: 0 PID: 23765 Comm: syz.4.5985 Not tainted syzkaller #0 PREEMPT(full) 
[  668.231961][T23765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  668.231975][T23765] Call Trace:
[  668.231984][T23765]  <TASK>
[  668.231994][T23765]  dump_stack_lvl+0x189/0x250
[  668.232029][T23765]  ? __pfx____ratelimit+0x10/0x10
[  668.232063][T23765]  ? __pfx_dump_stack_lvl+0x10/0x10
[  668.232093][T23765]  ? __pfx__printk+0x10/0x10
[  668.232117][T23765]  ? fs_reclaim_acquire+0x7d/0x100
[  668.232149][T23765]  should_fail_ex+0x414/0x560
[  668.232188][T23765]  prepare_alloc_pages+0x213/0x610
[  668.232219][T23765]  __alloc_frozen_pages_noprof+0x123/0x370
[  668.232241][T23765]  ? nlmon_xmit+0xb0/0x100
[  668.232270][T23765]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  668.232291][T23765]  ? __sock_sendmsg+0x21c/0x270
[  668.232332][T23765]  ? policy_nodemask+0x27c/0x720
[  668.232350][T23765]  ? __nla_validate_parse+0x2400/0x2d40
[  668.232379][T23765]  alloc_pages_mpol+0x232/0x4a0
[  668.232407][T23765]  ___kmalloc_large_node+0x5f/0x1b0
[  668.232444][T23765]  __kmalloc_large_node_noprof+0x18/0x90
[  668.232478][T23765]  __kmalloc_node_noprof+0x138/0x800
[  668.232507][T23765]  ? qdisc_alloc+0x92/0x900
[  668.232536][T23765]  qdisc_alloc+0x92/0x900
[  668.232569][T23765]  qdisc_create+0x12c/0xea0
[  668.232604][T23765]  ? nla_strcmp+0x106/0x140
[  668.232630][T23765]  tc_modify_qdisc+0x1547/0x2020
[  668.232676][T23765]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  668.232743][T23765]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  668.232772][T23765]  rtnetlink_rcv_msg+0x77c/0xb70
[  668.232799][T23765]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  668.232820][T23765]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  668.232838][T23765]  ? ref_tracker_free+0x63a/0x7d0
[  668.232860][T23765]  ? __asan_memcpy+0x40/0x70
[  668.232891][T23765]  ? __pfx_ref_tracker_free+0x10/0x10
[  668.232931][T23765]  netlink_rcv_skb+0x208/0x470
[  668.232956][T23765]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  668.232980][T23765]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  668.233018][T23765]  ? netlink_deliver_tap+0x2e/0x1b0
[  668.233051][T23765]  netlink_unicast+0x82f/0x9e0
[  668.233094][T23765]  ? __pfx_netlink_unicast+0x10/0x10
[  668.233129][T23765]  ? netlink_sendmsg+0x642/0xb30
[  668.233151][T23765]  ? skb_put+0x11b/0x210
[  668.233178][T23765]  netlink_sendmsg+0x805/0xb30
[  668.233214][T23765]  ? __pfx_netlink_sendmsg+0x10/0x10
[  668.233243][T23765]  ? aa_sock_msg_perm+0xf1/0x1d0
[  668.233277][T23765]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  668.233298][T23765]  ? __pfx_netlink_sendmsg+0x10/0x10
[  668.233323][T23765]  __sock_sendmsg+0x21c/0x270
[  668.233358][T23765]  ____sys_sendmsg+0x505/0x830
[  668.233391][T23765]  ? __pfx_____sys_sendmsg+0x10/0x10
[  668.233428][T23765]  ? import_iovec+0x74/0xa0
[  668.233460][T23765]  ___sys_sendmsg+0x21f/0x2a0
[  668.233488][T23765]  ? __pfx____sys_sendmsg+0x10/0x10
[  668.233557][T23765]  ? __fget_files+0x2a/0x420
[  668.233577][T23765]  ? __fget_files+0x3a0/0x420
[  668.233610][T23765]  __x64_sys_sendmsg+0x19b/0x260
[  668.233639][T23765]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  668.233676][T23765]  ? __pfx_ksys_write+0x10/0x10
[  668.233711][T23765]  ? do_syscall_64+0xbe/0xfa0
[  668.233738][T23765]  do_syscall_64+0xfa/0xfa0
[  668.233757][T23765]  ? lockdep_hardirqs_on+0x9c/0x150
[  668.233779][T23765]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  668.233800][T23765]  ? clear_bhb_loop+0x60/0xb0
[  668.233827][T23765]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  668.233847][T23765] RIP: 0033:0x7f952ad8f749
[  668.233867][T23765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  668.233886][T23765] RSP: 002b:00007f952bcce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  668.233909][T23765] RAX: ffffffffffffffda RBX: 00007f952afe5fa0 RCX: 00007f952ad8f749
[  668.233933][T23765] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005
[  668.233947][T23765] RBP: 00007f952bcce090 R08: 0000000000000000 R09: 0000000000000000
[  668.233961][T23765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  668.233974][T23765] R13: 00007f952afe6038 R14: 00007f952afe5fa0 R15: 00007ffe20727b98
[  668.234012][T23765]  </TASK>
[  668.740638][T23771] __nla_validate_parse: 12 callbacks suppressed
[  668.740662][T23771] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5988'.
[  668.889688][T23775] FAULT_INJECTION: forcing a failure.
[  668.889688][T23775] name failslab, interval 1, probability 0, space 0, times 0
[  668.903857][T23775] CPU: 0 UID: 0 PID: 23775 Comm: syz.3.5994 Not tainted syzkaller #0 PREEMPT(full) 
[  668.903887][T23775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  668.903901][T23775] Call Trace:
[  668.903910][T23775]  <TASK>
[  668.903920][T23775]  dump_stack_lvl+0x189/0x250
[  668.903953][T23775]  ? __pfx____ratelimit+0x10/0x10
[  668.903985][T23775]  ? __pfx_dump_stack_lvl+0x10/0x10
[  668.904015][T23775]  ? __pfx__printk+0x10/0x10
[  668.904043][T23775]  ? __pfx___might_resched+0x10/0x10
[  668.904064][T23775]  ? fs_reclaim_acquire+0x7d/0x100
[  668.904090][T23775]  should_fail_ex+0x414/0x560
[  668.904132][T23775]  should_failslab+0xa8/0x100
[  668.904156][T23775]  __kmalloc_cache_node_noprof+0x74/0x6f0
[  668.904188][T23775]  ? page_pool_create_percpu+0x76/0xbc0
[  668.904224][T23775]  page_pool_create_percpu+0x76/0xbc0
[  668.904253][T23775]  ? bpf_test_run_xdp_live+0x1ba/0x1b10
[  668.904284][T23775]  bpf_test_run_xdp_live+0x1cf/0x1b10
[  668.904308][T23775]  ? bpf_dispatcher_change_prog+0xb35/0xc90
[  668.904343][T23775]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  668.904375][T23775]  ? synchronize_rcu+0x11a/0x310
[  668.904399][T23775]  ? __pfx_synchronize_rcu+0x10/0x10
[  668.904423][T23775]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  668.904445][T23775]  ? 0xffffffffa02057c0
[  668.904476][T23775]  ? 0xffffffffa020164c
[  668.904489][T23775]  ? 0xffffffffa0201688
[  668.904502][T23775]  ? 0xffffffffa0201718
[  668.904515][T23775]  ? 0xffffffffa02017d8
[  668.904529][T23775]  ? 0xffffffffa02018d4
[  668.904542][T23775]  ? 0xffffffffa0201948
[  668.904554][T23775]  ? 0xffffffffa0201994
[  668.904569][T23775]  ? 0xffffffffa02019d4
[  668.904581][T23775]  ? 0xffffffffa0201a18
[  668.904595][T23775]  ? 0xffffffffa0201a6c
[  668.904626][T23775]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  668.904656][T23775]  ? _copy_from_user+0x94/0xb0
[  668.904678][T23775]  ? bpf_test_init+0x113/0x150
[  668.904694][T23775]  ? xdp_convert_md_to_buff+0x5b/0x330
[  668.904715][T23775]  bpf_prog_test_run_xdp+0x7c0/0x10e0
[  668.904748][T23775]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  668.904771][T23775]  ? __fget_files+0x2a/0x420
[  668.904792][T23775]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  668.904819][T23775]  bpf_prog_test_run+0x2c7/0x340
[  668.904841][T23775]  __sys_bpf+0x562/0x860
[  668.904859][T23775]  ? __pfx___sys_bpf+0x10/0x10
[  668.904890][T23775]  ? ksys_write+0x22a/0x250
[  668.904918][T23775]  ? __pfx_ksys_write+0x10/0x10
[  668.904948][T23775]  __x64_sys_bpf+0x7c/0x90
[  668.904974][T23775]  do_syscall_64+0xfa/0xfa0
[  668.904990][T23775]  ? lockdep_hardirqs_on+0x9c/0x150
[  668.905007][T23775]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  668.905025][T23775]  ? clear_bhb_loop+0x60/0xb0
[  668.905046][T23775]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  668.905063][T23775] RIP: 0033:0x7feb9f98f749
[  668.905078][T23775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  668.905094][T23775] RSP: 002b:00007feba07b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  668.905113][T23775] RAX: ffffffffffffffda RBX: 00007feb9fbe5fa0 RCX: 00007feb9f98f749
[  668.905127][T23775] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a
[  668.905138][T23775] RBP: 00007feba07b8090 R08: 0000000000000000 R09: 0000000000000000
[  668.905149][T23775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  668.905159][T23775] R13: 00007feb9fbe6038 R14: 00007feb9fbe5fa0 R15: 00007ffc455f9658
[  668.905188][T23775]  </TASK>
[  669.251349][T23777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5992'.
[  669.260397][T23777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5992'.
[  669.313075][T23781] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5993'.
[  669.583516][T23796] syzkaller1: entered promiscuous mode
[  669.594020][T23796] syzkaller1: entered allmulticast mode
[  669.630204][T23796] lo speed is unknown, defaulting to 1000
[  669.673586][T23804] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5998'.
[  670.070230][T23811] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6001'.
[  670.366970][T23817] FAULT_INJECTION: forcing a failure.
[  670.366970][T23817] name failslab, interval 1, probability 0, space 0, times 0
[  670.404512][T23817] CPU: 0 UID: 0 PID: 23817 Comm: syz.0.6004 Not tainted syzkaller #0 PREEMPT(full) 
[  670.404545][T23817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  670.404560][T23817] Call Trace:
[  670.404569][T23817]  <TASK>
[  670.404580][T23817]  dump_stack_lvl+0x189/0x250
[  670.404616][T23817]  ? __pfx____ratelimit+0x10/0x10
[  670.404649][T23817]  ? __pfx_dump_stack_lvl+0x10/0x10
[  670.404678][T23817]  ? __pfx__printk+0x10/0x10
[  670.404712][T23817]  ? __pfx___might_resched+0x10/0x10
[  670.404736][T23817]  ? fs_reclaim_acquire+0x7d/0x100
[  670.404762][T23817]  should_fail_ex+0x414/0x560
[  670.404802][T23817]  should_failslab+0xa8/0x100
[  670.404826][T23817]  kmem_cache_alloc_node_noprof+0x77/0x710
[  670.404858][T23817]  ? __alloc_skb+0x255/0x430
[  670.404879][T23817]  ? napi_skb_cache_get+0x445/0x6e0
[  670.404899][T23817]  ? napi_skb_cache_get+0x151/0x6e0
[  670.404925][T23817]  __alloc_skb+0x255/0x430
[  670.404947][T23817]  ? __pfx___alloc_skb+0x10/0x10
[  670.404974][T23817]  ? netlink_ack_tlv_len+0x6c/0x210
[  670.404999][T23817]  netlink_ack+0x146/0xa50
[  670.405019][T23817]  ? __pfx_genl_rcv_msg+0x10/0x10
[  670.405046][T23817]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  670.405071][T23817]  ? __pfx_nl80211_post_doit+0x10/0x10
[  670.405115][T23817]  netlink_rcv_skb+0x28c/0x470
[  670.405136][T23817]  ? __lock_acquire+0xab9/0xd20
[  670.405158][T23817]  ? __pfx_genl_rcv_msg+0x10/0x10
[  670.405189][T23817]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  670.405234][T23817]  ? down_read+0x1ad/0x2e0
[  670.405262][T23817]  genl_rcv+0x28/0x40
[  670.405289][T23817]  netlink_unicast+0x82f/0x9e0
[  670.405332][T23817]  ? __pfx_netlink_unicast+0x10/0x10
[  670.405368][T23817]  ? netlink_sendmsg+0x642/0xb30
[  670.405390][T23817]  ? skb_put+0x11b/0x210
[  670.405425][T23817]  netlink_sendmsg+0x805/0xb30
[  670.405461][T23817]  ? __pfx_netlink_sendmsg+0x10/0x10
[  670.405490][T23817]  ? aa_sock_msg_perm+0xf1/0x1d0
[  670.405524][T23817]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  670.405546][T23817]  ? __pfx_netlink_sendmsg+0x10/0x10
[  670.405570][T23817]  __sock_sendmsg+0x21c/0x270
[  670.405604][T23817]  ____sys_sendmsg+0x505/0x830
[  670.405634][T23817]  ? __pfx_____sys_sendmsg+0x10/0x10
[  670.405668][T23817]  ? import_iovec+0x74/0xa0
[  670.405705][T23817]  ___sys_sendmsg+0x21f/0x2a0
[  670.405733][T23817]  ? __pfx____sys_sendmsg+0x10/0x10
[  670.405799][T23817]  ? __fget_files+0x2a/0x420
[  670.405820][T23817]  ? __fget_files+0x3a0/0x420
[  670.405853][T23817]  __x64_sys_sendmsg+0x19b/0x260
[  670.405883][T23817]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  670.405920][T23817]  ? __pfx_ksys_write+0x10/0x10
[  670.405955][T23817]  ? do_syscall_64+0xbe/0xfa0
[  670.405981][T23817]  do_syscall_64+0xfa/0xfa0
[  670.406001][T23817]  ? lockdep_hardirqs_on+0x9c/0x150
[  670.406022][T23817]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  670.406043][T23817]  ? clear_bhb_loop+0x60/0xb0
[  670.406069][T23817]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  670.406090][T23817] RIP: 0033:0x7f7a02b8f749
[  670.406109][T23817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  670.406128][T23817] RSP: 002b:00007f7a03a69038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  670.406151][T23817] RAX: ffffffffffffffda RBX: 00007f7a02de5fa0 RCX: 00007f7a02b8f749
[  670.406167][T23817] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003
[  670.406180][T23817] RBP: 00007f7a03a69090 R08: 0000000000000000 R09: 0000000000000000
[  670.406194][T23817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  670.406206][T23817] R13: 00007f7a02de6038 R14: 00007f7a02de5fa0 R15: 00007ffec4026bd8
[  670.406249][T23817]  </TASK>
[  670.929505][ T1115] vlan2: left allmulticast mode
[  670.943783][ T1115] gretap0: left allmulticast mode
[  670.962863][ T1115] vlan2: left promiscuous mode
[  670.973818][ T1115] bridge0: port 3(vlan2) entered disabled state
[  671.002912][ T1115] bridge_slave_1: left allmulticast mode
[  671.028910][ T1115] bridge_slave_1: left promiscuous mode
[  671.041880][ T1115] bridge0: port 2(bridge_slave_1) entered disabled state
[  671.083270][ T1115] bridge_slave_0: left allmulticast mode
[  671.092886][ T1115] bridge_slave_0: left promiscuous mode
[  671.101569][T23831] FAULT_INJECTION: forcing a failure.
[  671.101569][T23831] name failslab, interval 1, probability 0, space 0, times 0
[  671.114926][ T1115] bridge0: port 1(bridge_slave_0) entered disabled state
[  671.132425][T23831] CPU: 1 UID: 0 PID: 23831 Comm: syz.3.6009 Not tainted syzkaller #0 PREEMPT(full) 
[  671.132457][T23831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  671.132472][T23831] Call Trace:
[  671.132481][T23831]  <TASK>
[  671.132491][T23831]  dump_stack_lvl+0x189/0x250
[  671.132529][T23831]  ? __pfx____ratelimit+0x10/0x10
[  671.132563][T23831]  ? __pfx_dump_stack_lvl+0x10/0x10
[  671.132593][T23831]  ? __pfx__printk+0x10/0x10
[  671.132618][T23831]  ? __pfx___might_resched+0x10/0x10
[  671.132643][T23831]  ? fs_reclaim_acquire+0x7d/0x100
[  671.132669][T23831]  should_fail_ex+0x414/0x560
[  671.132708][T23831]  should_failslab+0xa8/0x100
[  671.132732][T23831]  __kmalloc_cache_noprof+0x6f/0x6f0
[  671.132764][T23831]  ? bpf_raw_tp_link_attach+0x24e/0x6c0
[  671.132791][T23831]  ? bpf_get_raw_tracepoint+0xa9/0x270
[  671.132829][T23831]  bpf_raw_tp_link_attach+0x24e/0x6c0
[  671.132863][T23831]  ? __pfx_bpf_raw_tp_link_attach+0x10/0x10
[  671.132904][T23831]  ? __fget_files+0x2a/0x420
[  671.132936][T23831]  bpf_raw_tracepoint_open+0x1b2/0x220
[  671.132964][T23831]  __sys_bpf+0x73e/0x860
[  671.132988][T23831]  ? __pfx___sys_bpf+0x10/0x10
[  671.133028][T23831]  ? ksys_write+0x22a/0x250
[  671.133062][T23831]  ? __pfx_ksys_write+0x10/0x10
[  671.133099][T23831]  __x64_sys_bpf+0x7c/0x90
[  671.133132][T23831]  do_syscall_64+0xfa/0xfa0
[  671.133151][T23831]  ? lockdep_hardirqs_on+0x9c/0x150
[  671.133172][T23831]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  671.133194][T23831]  ? clear_bhb_loop+0x60/0xb0
[  671.133220][T23831]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  671.133241][T23831] RIP: 0033:0x7feb9f98f749
[  671.133261][T23831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  671.133279][T23831] RSP: 002b:00007feba07b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  671.133303][T23831] RAX: ffffffffffffffda RBX: 00007feb9fbe5fa0 RCX: 00007feb9f98f749
[  671.133319][T23831] RDX: 0000000000000010 RSI: 0000200000000500 RDI: 0000000000000011
[  671.133333][T23831] RBP: 00007feba07b8090 R08: 0000000000000000 R09: 0000000000000000
[  671.133346][T23831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  671.133359][T23831] R13: 00007feb9fbe6038 R14: 00007feb9fbe5fa0 R15: 00007ffc455f9658
[  671.133406][T23831]  </TASK>
[  671.490057][ T1115] bond5 (unregistering): (slave ip6gretap1): Releasing active interface
[  672.371783][ T1115] bond1 (unregistering): Released all slaves
[  672.553261][ T1115] bond2 (unregistering): Released all slaves
[  672.681402][ T1115] bond3 (unregistering): Released all slaves
[  672.793221][ T1115] bond4 (unregistering): Released all slaves
[  672.915663][ T1115] bond5 (unregistering): Released all slaves
[  673.031873][ T1115] bond0 (unregistering): Released all slaves
[  673.158240][ T1115] bond6 (unregistering): Released all slaves
[  673.278059][ T1115] bond7 (unregistering): Released all slaves
[  673.401928][ T1115] bond8 (unregistering): Released all slaves
[  673.520661][ T1115] bond9 (unregistering): Released all slaves
[  673.927709][ T1115] tipc: Left network mode
[  674.646207][T14791] syz_tun (unregistering): left allmulticast mode
[  674.738260][   T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  674.763602][   T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  674.774665][   T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  674.786521][   T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  674.794514][   T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  674.895941][T23879] lo speed is unknown, defaulting to 1000
[  674.998613][T23878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6024'.
[  675.000479][T23885] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6026'.
[  675.117601][T23878] batman_adv: batadv0: Removing interface: batadv_slave_1
[  675.201495][T23892] Bluetooth: MGMT ver 1.23
[  675.214806][T23892] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6026'.
[  675.454976][T23897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6028'.
[  675.486791][T23897] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  675.785513][T23906] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6029'.
[  675.795916][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  675.820642][T23913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6033'.
[  675.862349][T23916] IPVS: set_ctl: invalid protocol: 137 172.30.1.3:20002
[  675.870107][T23916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6034'.
[  675.886245][ T1115] hsr_slave_0: left promiscuous mode
[  675.894371][ T1115] hsr_slave_1: left promiscuous mode
[  675.914371][ T1115] batman_adv: batadv0: Removing interface: batadv_slave_0
[  675.922077][T23917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6034'.
[  675.937583][ T1115] batman_adv: batadv0: Removing interface: dummy0
[  675.945596][ T1115] batman_adv: batadv0: Removing interface: veth3
[  676.085005][T23923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6036'.
[  676.255108][T23927] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6036'.
[  676.436592][   T98] block nbd1: Possible stuck request ffff888025057000: control (read@0,1024B). Runtime 210 seconds
[  676.447539][   T98] block nbd1: Possible stuck request ffff8880250571c0: control (read@1024,1024B). Runtime 210 seconds
[  676.460007][   T98] block nbd1: Possible stuck request ffff888025057380: control (read@2048,1024B). Runtime 210 seconds
[  676.480160][   T98] block nbd1: Possible stuck request ffff888025057540: control (read@3072,1024B). Runtime 210 seconds
[  676.844665][ T5146] Bluetooth: hci0: command tx timeout
[  676.987681][T23930] FAULT_INJECTION: forcing a failure.
[  676.987681][T23930] name failslab, interval 1, probability 0, space 0, times 0
[  677.023784][T23927] vlan0: entered promiscuous mode
[  677.036597][T23930] CPU: 1 UID: 0 PID: 23930 Comm: syz.4.6038 Not tainted syzkaller #0 PREEMPT(full) 
[  677.036627][T23930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  677.036641][T23930] Call Trace:
[  677.036651][T23930]  <TASK>
[  677.036661][T23930]  dump_stack_lvl+0x189/0x250
[  677.036695][T23930]  ? __pfx____ratelimit+0x10/0x10
[  677.036729][T23930]  ? __pfx_dump_stack_lvl+0x10/0x10
[  677.036758][T23930]  ? __pfx__printk+0x10/0x10
[  677.036787][T23930]  ? __pfx___might_resched+0x10/0x10
[  677.036810][T23930]  ? fs_reclaim_acquire+0x7d/0x100
[  677.036837][T23930]  should_fail_ex+0x414/0x560
[  677.036876][T23930]  should_failslab+0xa8/0x100
[  677.036901][T23930]  __kmalloc_cache_noprof+0x6f/0x6f0
[  677.036933][T23930]  ? sctp_add_bind_addr+0x8c/0x370
[  677.036973][T23930]  sctp_add_bind_addr+0x8c/0x370
[  677.037010][T23930]  sctp_bind_addr_copy+0xb3/0x3c0
[  677.037042][T23930]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  677.037074][T23930]  sctp_connect_new_asoc+0x2e0/0x690
[  677.037103][T23930]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  677.037139][T23930]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  677.037164][T23930]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  677.037185][T23930]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  677.037210][T23930]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  677.037232][T23930]  ? security_sctp_bind_connect+0x7e/0x2e0
[  677.037262][T23930]  sctp_sendmsg+0x155c/0x2810
[  677.037299][T23930]  ? __pfx_sctp_sendmsg+0x10/0x10
[  677.037326][T23930]  ? aa_sk_perm+0x81e/0x950
[  677.037361][T23930]  ? __pfx_aa_sk_perm+0x10/0x10
[  677.037393][T23930]  ? sock_rps_record_flow+0x19/0x410
[  677.037421][T23930]  ? inet_sendmsg+0x2f4/0x370
[  677.037441][T23930]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  677.037466][T23930]  __sock_sendmsg+0x19c/0x270
[  677.037502][T23930]  ____sys_sendmsg+0x505/0x830
[  677.037534][T23930]  ? __pfx_____sys_sendmsg+0x10/0x10
[  677.037569][T23930]  ? import_iovec+0x74/0xa0
[  677.037600][T23930]  ___sys_sendmsg+0x21f/0x2a0
[  677.037628][T23930]  ? __pfx____sys_sendmsg+0x10/0x10
[  677.037697][T23930]  ? __fget_files+0x2a/0x420
[  677.037717][T23930]  ? __fget_files+0x3a0/0x420
[  677.037751][T23930]  __x64_sys_sendmsg+0x19b/0x260
[  677.037780][T23930]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  677.037819][T23930]  ? __pfx_ksys_write+0x10/0x10
[  677.037854][T23930]  ? do_syscall_64+0xbe/0xfa0
[  677.037881][T23930]  do_syscall_64+0xfa/0xfa0
[  677.037900][T23930]  ? lockdep_hardirqs_on+0x9c/0x150
[  677.037921][T23930]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  677.037942][T23930]  ? clear_bhb_loop+0x60/0xb0
[  677.037969][T23930]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  677.037989][T23930] RIP: 0033:0x7f952ad8f749
[  677.038009][T23930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  677.038028][T23930] RSP: 002b:00007f952bcce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  677.038051][T23930] RAX: ffffffffffffffda RBX: 00007f952afe5fa0 RCX: 00007f952ad8f749
[  677.038067][T23930] RDX: 000000000000c851 RSI: 0000200000000700 RDI: 0000000000000003
[  677.038080][T23930] RBP: 00007f952bcce090 R08: 0000000000000000 R09: 0000000000000000
[  677.038094][T23930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  677.038106][T23930] R13: 00007f952afe6038 R14: 00007f952afe5fa0 R15: 00007ffe20727b98
[  677.038153][T23930]  </TASK>
[  677.387673][T23932] FAULT_INJECTION: forcing a failure.
[  677.387673][T23932] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  677.403709][T23932] CPU: 1 UID: 0 PID: 23932 Comm: syz.3.6037 Not tainted syzkaller #0 PREEMPT(full) 
[  677.403738][T23932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  677.403752][T23932] Call Trace:
[  677.403761][T23932]  <TASK>
[  677.403770][T23932]  dump_stack_lvl+0x189/0x250
[  677.403805][T23932]  ? __pfx____ratelimit+0x10/0x10
[  677.403839][T23932]  ? __pfx_dump_stack_lvl+0x10/0x10
[  677.403868][T23932]  ? __pfx__printk+0x10/0x10
[  677.403890][T23932]  ? __might_fault+0xb0/0x130
[  677.403931][T23932]  should_fail_ex+0x414/0x560
[  677.403969][T23932]  _copy_from_iter+0x1de/0x1790
[  677.403991][T23932]  ? kmem_cache_alloc_node_noprof+0x483/0x710
[  677.404023][T23932]  ? kmalloc_reserve+0xbd/0x290
[  677.404058][T23932]  ? __pfx__copy_from_iter+0x10/0x10
[  677.404079][T23932]  ? __alloc_skb+0x2f1/0x430
[  677.404107][T23932]  ? __pfx___alloc_skb+0x10/0x10
[  677.404137][T23932]  ? netlink_sendmsg+0x642/0xb30
[  677.404159][T23932]  ? skb_put+0x11b/0x210
[  677.404184][T23932]  netlink_sendmsg+0x6b2/0xb30
[  677.404216][T23932]  ? __pfx_netlink_sendmsg+0x10/0x10
[  677.404242][T23932]  ? aa_sock_msg_perm+0xf1/0x1d0
[  677.404275][T23932]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  677.404297][T23932]  ? __pfx_netlink_sendmsg+0x10/0x10
[  677.404321][T23932]  __sock_sendmsg+0x21c/0x270
[  677.404355][T23932]  ____sys_sendmsg+0x505/0x830
[  677.404387][T23932]  ? __pfx_____sys_sendmsg+0x10/0x10
[  677.404421][T23932]  ? import_iovec+0x74/0xa0
[  677.404453][T23932]  ___sys_sendmsg+0x21f/0x2a0
[  677.404480][T23932]  ? __pfx____sys_sendmsg+0x10/0x10
[  677.404547][T23932]  ? __fget_files+0x2a/0x420
[  677.404567][T23932]  ? __fget_files+0x3a0/0x420
[  677.404598][T23932]  __x64_sys_sendmsg+0x19b/0x260
[  677.404627][T23932]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  677.404677][T23932]  ? __pfx_ksys_write+0x10/0x10
[  677.404733][T23932]  ? do_syscall_64+0xbe/0xfa0
[  677.404758][T23932]  do_syscall_64+0xfa/0xfa0
[  677.404778][T23932]  ? lockdep_hardirqs_on+0x9c/0x150
[  677.404799][T23932]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  677.404820][T23932]  ? clear_bhb_loop+0x60/0xb0
[  677.404846][T23932]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  677.404866][T23932] RIP: 0033:0x7feb9f98f749
[  677.404886][T23932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  677.404904][T23932] RSP: 002b:00007feba07b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  677.404927][T23932] RAX: ffffffffffffffda RBX: 00007feb9fbe5fa0 RCX: 00007feb9f98f749
[  677.404942][T23932] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  677.404964][T23932] RBP: 00007feba07b8090 R08: 0000000000000000 R09: 0000000000000000
[  677.404977][T23932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  677.404989][T23932] R13: 00007feb9fbe6038 R14: 00007feb9fbe5fa0 R15: 00007ffc455f9658
[  677.405025][T23932]  </TASK>
[  677.902538][T23879] chnl_net:caif_netlink_parms(): no params data found
[  678.227587][T23879] bridge0: port 1(bridge_slave_0) entered blocking state
[  678.228780][T23939] netlink: 'syz.2.6039': attribute type 16 has an invalid length.
[  678.243465][T23939] netlink: 'syz.2.6039': attribute type 17 has an invalid length.
[  678.256883][T23879] bridge0: port 1(bridge_slave_0) entered disabled state
[  678.264588][T23879] bridge_slave_0: entered allmulticast mode
[  678.273065][T23879] bridge_slave_0: entered promiscuous mode
[  678.323497][T23939] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  678.391775][T23879] bridge0: port 2(bridge_slave_1) entered blocking state
[  678.413806][T23879] bridge0: port 2(bridge_slave_1) entered disabled state
[  678.439534][T23879] bridge_slave_1: entered allmulticast mode
[  678.463013][T23879] bridge_slave_1: entered promiscuous mode
[  678.606072][T23879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  678.637111][T23879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  678.725550][T23879] team0: Port device team_slave_0 added
[  678.760702][T23879] team0: Port device team_slave_1 added
[  678.914000][T23879] batman_adv: batadv0: Adding interface: batadv_slave_0
[  678.921231][ T5146] Bluetooth: hci0: command tx timeout
[  678.930894][T23879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  678.960206][T23879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  678.973406][T23879] batman_adv: batadv0: Adding interface: batadv_slave_1
[  678.980617][T23879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  679.007374][T23879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  679.143382][T23879] hsr_slave_0: entered promiscuous mode
[  679.171234][T23879] hsr_slave_1: entered promiscuous mode
[  679.185461][T23879] debugfs: 'hsr0' already exists in 'hsr'
[  679.201475][T23879] Cannot create hsr debugfs directory
[  679.289382][T23966] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  679.297853][T23971] FAULT_INJECTION: forcing a failure.
[  679.297853][T23971] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  679.311982][T23971] CPU: 1 UID: 0 PID: 23971 Comm: syz.3.6051 Not tainted syzkaller #0 PREEMPT(full) 
[  679.312013][T23971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  679.312026][T23971] Call Trace:
[  679.312034][T23971]  <TASK>
[  679.312044][T23971]  dump_stack_lvl+0x189/0x250
[  679.312078][T23971]  ? __pfx____ratelimit+0x10/0x10
[  679.312111][T23971]  ? __pfx_dump_stack_lvl+0x10/0x10
[  679.312141][T23971]  ? __pfx__printk+0x10/0x10
[  679.312163][T23971]  ? __might_fault+0xb0/0x130
[  679.312206][T23971]  should_fail_ex+0x414/0x560
[  679.312244][T23971]  _copy_from_user+0x2d/0xb0
[  679.312273][T23971]  kstrtouint_from_user+0xc4/0x170
[  679.312300][T23971]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  679.312344][T23971]  proc_fail_nth_write+0x88/0x200
[  679.312372][T23971]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  679.312406][T23971]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  679.312434][T23971]  vfs_write+0x27e/0xb30
[  679.312477][T23971]  ? __pfx_vfs_write+0x10/0x10
[  679.312509][T23971]  ? __fget_files+0x2a/0x420
[  679.312536][T23971]  ? __fget_files+0x3a0/0x420
[  679.312553][T23971]  ? __fget_files+0x2a/0x420
[  679.312584][T23971]  ksys_write+0x145/0x250
[  679.312619][T23971]  ? __pfx_ksys_write+0x10/0x10
[  679.312664][T23971]  ? do_syscall_64+0xbe/0xfa0
[  679.312690][T23971]  do_syscall_64+0xfa/0xfa0
[  679.312709][T23971]  ? lockdep_hardirqs_on+0x9c/0x150
[  679.312729][T23971]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  679.312750][T23971]  ? clear_bhb_loop+0x60/0xb0
[  679.312777][T23971]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  679.312797][T23971] RIP: 0033:0x7feb9f98e1ff
[  679.312817][T23971] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  679.312834][T23971] RSP: 002b:00007feba07b8030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  679.312857][T23971] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007feb9f98e1ff
[  679.312872][T23971] RDX: 0000000000000001 RSI: 00007feba07b80a0 RDI: 0000000000000004
[  679.312885][T23971] RBP: 00007feba07b8090 R08: 0000000000000000 R09: 0000000000000000
[  679.312899][T23971] R10: 00002000000001c0 R11: 0000000000000293 R12: 0000000000000001
[  679.312911][T23971] R13: 00007feb9fbe6038 R14: 00007feb9fbe5fa0 R15: 00007ffc455f9658
[  679.312951][T23971]  </TASK>
[  679.622805][T23974] Cannot find add_set index 2 as target
[  680.113478][T23879] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  680.144893][T23879] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  680.157226][T23879] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  680.188361][T23879] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  680.326206][T23994] netlink: 'syz.4.6059': attribute type 1 has an invalid length.
[  680.335103][T23879] 8021q: adding VLAN 0 to HW filter on device bond0
[  680.409292][T23994] gretap4: entered allmulticast mode
[  680.418963][T23994] bond14: (slave gretap4): making interface the new active one
[  680.428648][T23994] bond14: (slave gretap4): Enslaving as an active interface with an up link
[  680.442286][T23879] 8021q: adding VLAN 0 to HW filter on device team0
[  680.457155][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[  680.464418][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[  680.476597][T23994] __nla_validate_parse: 2 callbacks suppressed
[  680.476620][T23994] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6059'.
[  680.517685][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[  680.524990][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[  680.936326][T24014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6061'.
[  680.986365][T24014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6061'.
[  680.995547][ T5146] Bluetooth: hci0: command tx timeout
[  681.020505][T24014] FAULT_INJECTION: forcing a failure.
[  681.020505][T24014] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  681.056771][T24014] CPU: 0 UID: 0 PID: 24014 Comm: syz.4.6061 Not tainted syzkaller #0 PREEMPT(full) 
[  681.056810][T24014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  681.056823][T24014] Call Trace:
[  681.056833][T24014]  <TASK>
[  681.056842][T24014]  dump_stack_lvl+0x189/0x250
[  681.056878][T24014]  ? __pfx____ratelimit+0x10/0x10
[  681.056910][T24014]  ? __pfx_dump_stack_lvl+0x10/0x10
[  681.056940][T24014]  ? __pfx__printk+0x10/0x10
[  681.056976][T24014]  should_fail_ex+0x414/0x560
[  681.057016][T24014]  _copy_to_user+0x31/0xb0
[  681.057044][T24014]  simple_read_from_buffer+0xe1/0x170
[  681.057082][T24014]  proc_fail_nth_read+0x1b3/0x220
[  681.057114][T24014]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  681.057144][T24014]  ? rw_verify_area+0x2a6/0x4d0
[  681.057172][T24014]  ? __lock_acquire+0xab9/0xd20
[  681.057192][T24014]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  681.057220][T24014]  vfs_read+0x200/0xa30
[  681.057248][T24014]  ? fdget_pos+0x247/0x320
[  681.057275][T24014]  ? __pfx___mutex_lock+0x10/0x10
[  681.057299][T24014]  ? __pfx_vfs_read+0x10/0x10
[  681.057330][T24014]  ? __fget_files+0x2a/0x420
[  681.057357][T24014]  ? __fget_files+0x3a0/0x420
[  681.057376][T24014]  ? __fget_files+0x2a/0x420
[  681.057406][T24014]  ksys_read+0x145/0x250
[  681.057439][T24014]  ? __pfx_ksys_read+0x10/0x10
[  681.057474][T24014]  ? do_syscall_64+0xbe/0xfa0
[  681.057500][T24014]  do_syscall_64+0xfa/0xfa0
[  681.057519][T24014]  ? lockdep_hardirqs_on+0x9c/0x150
[  681.057540][T24014]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  681.057562][T24014]  ? clear_bhb_loop+0x60/0xb0
[  681.057589][T24014]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  681.057609][T24014] RIP: 0033:0x7f952ad8e15c
[  681.057629][T24014] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  681.057649][T24014] RSP: 002b:00007f952bcce030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  681.057671][T24014] RAX: ffffffffffffffda RBX: 00007f952afe5fa0 RCX: 00007f952ad8e15c
[  681.057688][T24014] RDX: 000000000000000f RSI: 00007f952bcce0a0 RDI: 0000000000000006
[  681.057701][T24014] RBP: 00007f952bcce090 R08: 0000000000000000 R09: 0000000000000000
[  681.057714][T24014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  681.057726][T24014] R13: 00007f952afe6038 R14: 00007f952afe5fa0 R15: 00007ffe20727b98
[  681.057765][T24014]  </TASK>
[  681.073253][T23879] 8021q: adding VLAN 0 to HW filter on device batadv0
[  681.293564][T24022] Set syz0 is full, maxelem 0 reached
[  681.433012][T23879] veth0_vlan: entered promiscuous mode
[  681.460391][T23879] veth1_vlan: entered promiscuous mode
[  681.540268][T23879] veth0_macvtap: entered promiscuous mode
[  681.567748][T23879] veth1_macvtap: entered promiscuous mode
[  681.600981][T23879] batman_adv: batadv0: Interface activated: batadv_slave_0
[  681.632613][T23879] batman_adv: batadv0: Interface activated: batadv_slave_1
[  681.671430][ T2915] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  681.681642][ T2915] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  681.721808][ T2915] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  681.734680][T24033] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6067'.
[  681.743977][ T2915] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  681.904694][T24036] FAULT_INJECTION: forcing a failure.
[  681.904694][T24036] name failslab, interval 1, probability 0, space 0, times 0
[  681.934264][T24036] CPU: 0 UID: 0 PID: 24036 Comm: syz.4.6069 Not tainted syzkaller #0 PREEMPT(full) 
[  681.934297][T24036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  681.934311][T24036] Call Trace:
[  681.934320][T24036]  <TASK>
[  681.934330][T24036]  dump_stack_lvl+0x189/0x250
[  681.934365][T24036]  ? __pfx____ratelimit+0x10/0x10
[  681.934397][T24036]  ? __pfx_dump_stack_lvl+0x10/0x10
[  681.934427][T24036]  ? __pfx__printk+0x10/0x10
[  681.934454][T24036]  ? __pfx___might_resched+0x10/0x10
[  681.934478][T24036]  ? fs_reclaim_acquire+0x7d/0x100
[  681.934505][T24036]  should_fail_ex+0x414/0x560
[  681.934545][T24036]  should_failslab+0xa8/0x100
[  681.934569][T24036]  __kmalloc_cache_noprof+0x6f/0x6f0
[  681.934601][T24036]  ? tcf_action_init_1+0x19f/0x6d0
[  681.934629][T24036]  ? __nla_parse+0x40/0x60
[  681.934668][T24036]  tcf_action_init_1+0x19f/0x6d0
[  681.934705][T24036]  ? __pfx_tcf_action_init_1+0x10/0x10
[  681.934733][T24036]  ? _raw_read_unlock+0x28/0x50
[  681.934763][T24036]  ? tc_action_load_ops+0x214/0x4e0
[  681.934818][T24036]  ? __nla_parse+0x40/0x60
[  681.934845][T24036]  tcf_action_init+0x2cf/0xab0
[  681.934889][T24036]  ? __pfx_tcf_action_init+0x10/0x10
[  681.934956][T24036]  ? __pfx___nla_validate_parse+0x10/0x10
[  681.934979][T24036]  ? trace_sched_exit_tp+0x36/0x110
[  681.935010][T24036]  ? __schedule+0x17ae/0x4cc0
[  681.935083][T24036]  tc_ctl_action+0x430/0xbd0
[  681.935126][T24036]  ? __pfx_tc_ctl_action+0x10/0x10
[  681.935162][T24036]  ? rcu_is_watching+0x15/0xb0
[  681.935244][T24036]  ? __pfx_tc_ctl_action+0x10/0x10
[  681.935276][T24036]  rtnetlink_rcv_msg+0x77c/0xb70
[  681.935301][T24036]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  681.935320][T24036]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  681.935338][T24036]  ? ref_tracker_free+0x63a/0x7d0
[  681.935359][T24036]  ? __asan_memcpy+0x40/0x70
[  681.935385][T24036]  ? __pfx_ref_tracker_free+0x10/0x10
[  681.935418][T24036]  netlink_rcv_skb+0x208/0x470
[  681.935442][T24036]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  681.935465][T24036]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  681.935500][T24036]  ? netlink_deliver_tap+0x2e/0x1b0
[  681.935532][T24036]  netlink_unicast+0x82f/0x9e0
[  681.935575][T24036]  ? __pfx_netlink_unicast+0x10/0x10
[  681.935610][T24036]  ? netlink_sendmsg+0x642/0xb30
[  681.935632][T24036]  ? skb_put+0x11b/0x210
[  681.935667][T24036]  netlink_sendmsg+0x805/0xb30
[  681.935702][T24036]  ? __pfx_netlink_sendmsg+0x10/0x10
[  681.935729][T24036]  ? aa_sock_msg_perm+0xf1/0x1d0
[  681.935763][T24036]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  681.935783][T24036]  ? __pfx_netlink_sendmsg+0x10/0x10
[  681.935809][T24036]  __sock_sendmsg+0x21c/0x270
[  681.935844][T24036]  ____sys_sendmsg+0x52d/0x830
[  681.935877][T24036]  ? __pfx_____sys_sendmsg+0x10/0x10
[  681.935914][T24036]  ? import_iovec+0x74/0xa0
[  681.935946][T24036]  ___sys_sendmsg+0x21f/0x2a0
[  681.935975][T24036]  ? __pfx____sys_sendmsg+0x10/0x10
[  681.936045][T24036]  ? __fget_files+0x2a/0x420
[  681.936066][T24036]  ? __fget_files+0x3a0/0x420
[  681.936100][T24036]  __sys_sendmmsg+0x227/0x430
[  681.936133][T24036]  ? __pfx___sys_sendmmsg+0x10/0x10
[  681.936170][T24036]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  681.936217][T24036]  ? ksys_write+0x22a/0x250
[  681.936250][T24036]  ? __pfx_ksys_write+0x10/0x10
[  681.936287][T24036]  __x64_sys_sendmmsg+0xa0/0xc0
[  681.936315][T24036]  do_syscall_64+0xfa/0xfa0
[  681.936335][T24036]  ? lockdep_hardirqs_on+0x9c/0x150
[  681.936356][T24036]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  681.936377][T24036]  ? clear_bhb_loop+0x60/0xb0
[  681.936404][T24036]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  681.936425][T24036] RIP: 0033:0x7f952ad8f749
[  681.936446][T24036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  681.936466][T24036] RSP: 002b:00007f952bcce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  681.936489][T24036] RAX: ffffffffffffffda RBX: 00007f952afe5fa0 RCX: 00007f952ad8f749
[  681.936504][T24036] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003
[  681.936518][T24036] RBP: 00007f952bcce090 R08: 0000000000000000 R09: 0000000000000000
[  681.936531][T24036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  681.936544][T24036] R13: 00007f952afe6038 R14: 00007f952afe5fa0 R15: 00007ffe20727b98
[  681.936581][T24036]  </TASK>
[  682.042270][T24040] batadv_slave_1: entered promiscuous mode
[  682.549656][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  682.563470][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  682.618552][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  682.624516][T24039] batadv_slave_1: left promiscuous mode
[  682.634090][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  682.729728][T24053] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6074'.
[  682.745765][T24055] FAULT_INJECTION: forcing a failure.
[  682.745765][T24055] name failslab, interval 1, probability 0, space 0, times 0
[  682.760777][T24055] CPU: 0 UID: 0 PID: 24055 Comm: syz.0.6015 Not tainted syzkaller #0 PREEMPT(full) 
[  682.760809][T24055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  682.760823][T24055] Call Trace:
[  682.760832][T24055]  <TASK>
[  682.760841][T24055]  dump_stack_lvl+0x189/0x250
[  682.760876][T24055]  ? __pfx____ratelimit+0x10/0x10
[  682.760909][T24055]  ? __pfx_dump_stack_lvl+0x10/0x10
[  682.760939][T24055]  ? __pfx__printk+0x10/0x10
[  682.760965][T24055]  ? __pfx___might_resched+0x10/0x10
[  682.760989][T24055]  ? fs_reclaim_acquire+0x7d/0x100
[  682.761016][T24055]  should_fail_ex+0x414/0x560
[  682.761054][T24055]  should_failslab+0xa8/0x100
[  682.761079][T24055]  __kmalloc_cache_noprof+0x6f/0x6f0
[  682.761111][T24055]  ? nft_pernet+0x23/0x240
[  682.761139][T24055]  ? nf_tables_newtable+0x435/0x1890
[  682.761174][T24055]  nf_tables_newtable+0x435/0x1890
[  682.761201][T24055]  ? nfnetlink_subsys_unregister+0x162/0x1b0
[  682.761259][T24055]  nfnetlink_rcv+0x11d9/0x2590
[  682.761323][T24055]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  682.761365][T24055]  ? ref_tracker_free+0x63a/0x7d0
[  682.761432][T24055]  ? __netlink_deliver_tap+0x807/0x850
[  682.761456][T24055]  ? netlink_deliver_tap+0x2e/0x1b0
[  682.761501][T24055]  netlink_unicast+0x82f/0x9e0
[  682.761545][T24055]  ? __pfx_netlink_unicast+0x10/0x10
[  682.761579][T24055]  ? netlink_sendmsg+0x642/0xb30
[  682.761600][T24055]  ? skb_put+0x11b/0x210
[  682.761628][T24055]  netlink_sendmsg+0x805/0xb30
[  682.761662][T24055]  ? __pfx_netlink_sendmsg+0x10/0x10
[  682.761690][T24055]  ? aa_sock_msg_perm+0xf1/0x1d0
[  682.761724][T24055]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  682.761746][T24055]  ? __pfx_netlink_sendmsg+0x10/0x10
[  682.761771][T24055]  __sock_sendmsg+0x21c/0x270
[  682.761803][T24055]  ____sys_sendmsg+0x505/0x830
[  682.761834][T24055]  ? __pfx_____sys_sendmsg+0x10/0x10
[  682.761869][T24055]  ? import_iovec+0x74/0xa0
[  682.761900][T24055]  ___sys_sendmsg+0x21f/0x2a0
[  682.761928][T24055]  ? __pfx____sys_sendmsg+0x10/0x10
[  682.761994][T24055]  ? __fget_files+0x2a/0x420
[  682.762013][T24055]  ? __fget_files+0x3a0/0x420
[  682.762047][T24055]  __x64_sys_sendmsg+0x19b/0x260
[  682.762075][T24055]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  682.762113][T24055]  ? __pfx_ksys_write+0x10/0x10
[  682.762146][T24055]  ? do_syscall_64+0xbe/0xfa0
[  682.762172][T24055]  do_syscall_64+0xfa/0xfa0
[  682.762191][T24055]  ? lockdep_hardirqs_on+0x9c/0x150
[  682.762212][T24055]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  682.762233][T24055]  ? clear_bhb_loop+0x60/0xb0
[  682.762257][T24055]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  682.762278][T24055] RIP: 0033:0x7fa22ef8f749
[  682.762297][T24055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  682.762314][T24055] RSP: 002b:00007fa22d1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  682.762336][T24055] RAX: ffffffffffffffda RBX: 00007fa22f1e5fa0 RCX: 00007fa22ef8f749
[  682.762351][T24055] RDX: 0000000000000840 RSI: 0000200000000040 RDI: 0000000000000003
[  682.762364][T24055] RBP: 00007fa22d1f6090 R08: 0000000000000000 R09: 0000000000000000
[  682.762376][T24055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  682.762389][T24055] R13: 00007fa22f1e6038 R14: 00007fa22f1e5fa0 R15: 00007ffee1af8f98
[  682.762434][T24055]  </TASK>
[  682.836587][T24058] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6076'.
[  682.953908][T24061] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6074'.
[  682.957845][T24058] FAULT_INJECTION: forcing a failure.
[  682.957845][T24058] name failslab, interval 1, probability 0, space 0, times 0
[  683.083453][ T5146] Bluetooth: hci0: command tx timeout
[  683.088509][T24058] CPU: 1 UID: 0 PID: 24058 Comm: syz.3.6076 Not tainted syzkaller #0 PREEMPT(full) 
[  683.088542][T24058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  683.088558][T24058] Call Trace:
[  683.088569][T24058]  <TASK>
[  683.088582][T24058]  dump_stack_lvl+0x189/0x250
[  683.088622][T24058]  ? __pfx____ratelimit+0x10/0x10
[  683.088668][T24058]  ? __pfx_dump_stack_lvl+0x10/0x10
[  683.088702][T24058]  ? __pfx__printk+0x10/0x10
[  683.088731][T24058]  ? __pfx___might_resched+0x10/0x10
[  683.088759][T24058]  ? fs_reclaim_acquire+0x7d/0x100
[  683.088790][T24058]  should_fail_ex+0x414/0x560
[  683.088833][T24058]  should_failslab+0xa8/0x100
[  683.088861][T24058]  kmem_cache_alloc_node_noprof+0x77/0x710
[  683.088896][T24058]  ? __alloc_skb+0x255/0x430
[  683.088919][T24058]  ? napi_skb_cache_get+0x445/0x6e0
[  683.088941][T24058]  ? napi_skb_cache_get+0x151/0x6e0
[  683.088972][T24058]  __alloc_skb+0x255/0x430
[  683.089000][T24058]  ? __pfx___alloc_skb+0x10/0x10
[  683.089032][T24058]  ? netlink_ack_tlv_len+0x6c/0x210
[  683.089064][T24058]  netlink_ack+0x146/0xa50
[  683.089086][T24058]  ? __pfx_genl_rcv_msg+0x10/0x10
[  683.089141][T24058]  netlink_rcv_skb+0x28c/0x470
[  683.089165][T24058]  ? __lock_acquire+0xab9/0xd20
[  683.089190][T24058]  ? __pfx_genl_rcv_msg+0x10/0x10
[  683.089229][T24058]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  683.089281][T24058]  ? down_read+0x1ad/0x2e0
[  683.089312][T24058]  genl_rcv+0x28/0x40
[  683.089341][T24058]  netlink_unicast+0x82f/0x9e0
[  683.089391][T24058]  ? __pfx_netlink_unicast+0x10/0x10
[  683.089432][T24058]  ? netlink_sendmsg+0x642/0xb30
[  683.089454][T24058]  ? skb_put+0x11b/0x210
[  683.089484][T24058]  netlink_sendmsg+0x805/0xb30
[  683.089525][T24058]  ? __pfx_netlink_sendmsg+0x10/0x10
[  683.089556][T24058]  ? aa_sock_msg_perm+0xf1/0x1d0
[  683.089595][T24058]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  683.089619][T24058]  ? __pfx_netlink_sendmsg+0x10/0x10
[  683.089653][T24058]  __sock_sendmsg+0x21c/0x270
[  683.089694][T24058]  ____sys_sendmsg+0x505/0x830
[  683.089732][T24058]  ? __pfx_____sys_sendmsg+0x10/0x10
[  683.089774][T24058]  ? import_iovec+0x74/0xa0
[  683.089812][T24058]  ___sys_sendmsg+0x21f/0x2a0
[  683.089843][T24058]  ? __pfx____sys_sendmsg+0x10/0x10
[  683.089926][T24058]  ? __fget_files+0x2a/0x420
[  683.089947][T24058]  ? __fget_files+0x3a0/0x420
[  683.089984][T24058]  __x64_sys_sendmsg+0x19b/0x260
[  683.090022][T24058]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  683.090063][T24058]  ? __pfx_ksys_write+0x10/0x10
[  683.090102][T24058]  ? do_syscall_64+0xbe/0xfa0
[  683.090132][T24058]  do_syscall_64+0xfa/0xfa0
[  683.090154][T24058]  ? lockdep_hardirqs_on+0x9c/0x150
[  683.090178][T24058]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  683.090202][T24058]  ? clear_bhb_loop+0x60/0xb0
[  683.090233][T24058]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  683.090256][T24058] RIP: 0033:0x7feb9f98f749
[  683.090280][T24058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  683.090300][T24058] RSP: 002b:00007feba07b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  683.090327][T24058] RAX: ffffffffffffffda RBX: 00007feb9fbe5fa0 RCX: 00007feb9f98f749
[  683.090345][T24058] RDX: 0000000004040000 RSI: 0000200000002680 RDI: 0000000000000004
[  683.090362][T24058] RBP: 00007feba07b8090 R08: 0000000000000000 R09: 0000000000000000
[  683.090376][T24058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  683.090391][T24058] R13: 00007feb9fbe6038 R14: 00007feb9fbe5fa0 R15: 00007ffc455f9658
[  683.090433][T24058]  </TASK>
[  683.190975][T24064] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6078'.
[  683.388359][T24069] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6078'.
[  683.581318][T24069] vlan2: entered promiscuous mode
[  683.593499][T24069] bond0: entered promiscuous mode
[  683.601138][T24069] bond_slave_0: entered promiscuous mode
[  683.607827][T24069] bond_slave_1: entered promiscuous mode
[  683.776951][T24079] syzkaller1: entered promiscuous mode
[  683.782664][T24079] syzkaller1: entered allmulticast mode
[  683.950897][T24082] FAULT_INJECTION: forcing a failure.
[  683.950897][T24082] name failslab, interval 1, probability 0, space 0, times 0
[  683.959567][T24086] batadv_slave_1: entered promiscuous mode
[  683.972209][T24082] CPU: 0 UID: 0 PID: 24082 Comm: syz.4.6084 Not tainted syzkaller #0 PREEMPT(full) 
[  683.972250][T24082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  683.972263][T24082] Call Trace:
[  683.972271][T24082]  <TASK>
[  683.972281][T24082]  dump_stack_lvl+0x189/0x250
[  683.972314][T24082]  ? __pfx____ratelimit+0x10/0x10
[  683.972347][T24082]  ? __pfx_dump_stack_lvl+0x10/0x10
[  683.972376][T24082]  ? __pfx__printk+0x10/0x10
[  683.972395][T24082]  ? kmalloc_reserve+0xbd/0x290
[  683.972421][T24082]  ? __lock_acquire+0xab9/0xd20
[  683.972450][T24082]  should_fail_ex+0x414/0x560
[  683.972486][T24082]  should_failslab+0xa8/0x100
[  683.972511][T24082]  kmem_cache_alloc_noprof+0x74/0x6e0
[  683.972542][T24082]  ? skb_clone+0x212/0x3a0
[  683.972571][T24082]  skb_clone+0x212/0x3a0
[  683.972599][T24082]  __netlink_deliver_tap+0x404/0x850
[  683.972635][T24082]  ? netlink_deliver_tap+0x2e/0x1b0
[  683.972658][T24082]  netlink_deliver_tap+0x19c/0x1b0
[  683.972682][T24082]  netlink_unicast+0x7fa/0x9e0
[  683.972722][T24082]  ? __pfx_netlink_unicast+0x10/0x10
[  683.972754][T24082]  ? netlink_sendmsg+0x642/0xb30
[  683.972774][T24082]  ? skb_put+0x11b/0x210
[  683.972798][T24082]  netlink_sendmsg+0x805/0xb30
[  683.972831][T24082]  ? __pfx_netlink_sendmsg+0x10/0x10
[  683.972858][T24082]  ? aa_sock_msg_perm+0xf1/0x1d0
[  683.972889][T24082]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  683.972908][T24082]  ? __pfx_netlink_sendmsg+0x10/0x10
[  683.972931][T24082]  __sock_sendmsg+0x21c/0x270
[  683.972963][T24082]  ____sys_sendmsg+0x505/0x830
[  683.972992][T24082]  ? __pfx_____sys_sendmsg+0x10/0x10
[  683.973026][T24082]  ? import_iovec+0x74/0xa0
[  683.973056][T24082]  ___sys_sendmsg+0x21f/0x2a0
[  683.973082][T24082]  ? __pfx____sys_sendmsg+0x10/0x10
[  683.973147][T24082]  ? __fget_files+0x2a/0x420
[  683.973167][T24082]  ? __fget_files+0x3a0/0x420
[  683.973233][T24082]  __x64_sys_sendmsg+0x19b/0x260
[  683.973261][T24082]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  683.973296][T24082]  ? __pfx_ksys_write+0x10/0x10
[  683.973326][T24082]  ? do_syscall_64+0xbe/0xfa0
[  683.973351][T24082]  do_syscall_64+0xfa/0xfa0
[  683.973370][T24082]  ? lockdep_hardirqs_on+0x9c/0x150
[  683.973390][T24082]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  683.973411][T24082]  ? clear_bhb_loop+0x60/0xb0
[  683.973438][T24082]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  683.973459][T24082] RIP: 0033:0x7f952ad8f749
[  683.973479][T24082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  683.973497][T24082] RSP: 002b:00007f952bcce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  683.973519][T24082] RAX: ffffffffffffffda RBX: 00007f952afe5fa0 RCX: 00007f952ad8f749
[  683.973535][T24082] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000008
[  683.973549][T24082] RBP: 00007f952bcce090 R08: 0000000000000000 R09: 0000000000000000
[  683.973562][T24082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  683.973575][T24082] R13: 00007f952afe6038 R14: 00007f952afe5fa0 R15: 00007ffe20727b98
[  683.973613][T24082]  </TASK>
[  684.315652][T24085] batadv_slave_1: left promiscuous mode
[  684.497553][T24095] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6088'.
[  684.812302][T24107] netlink: 'syz.3.6093': attribute type 2 has an invalid length.
[  685.233162][T24113] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  685.327063][T24115] batadv_slave_1: entered promiscuous mode
[  685.439533][T24114] batadv_slave_1: left promiscuous mode
[  686.173090][T24137] gretap1: entered promiscuous mode
[  686.184338][T24137] gretap1: entered allmulticast mode
[  686.205159][T24137] __nla_validate_parse: 1 callbacks suppressed
[  686.205183][T24137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6103'.
[  686.443469][T24142] veth1_to_bond: entered allmulticast mode
[  686.471363][T24142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6104'.
[  686.543153][T24142] bond0: (slave bond_slave_1): Releasing backup interface
[  686.562557][T24142] bond_slave_1 (unregistering): left promiscuous mode
[  686.635985][T24142] veth1_to_bond (unregistering): left allmulticast mode
[  687.059415][T24152] batadv_slave_1: entered promiscuous mode
[  687.207363][T24151] batadv_slave_1: left promiscuous mode
[  687.503690][T24165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6112'.
[  687.513298][T24165] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  687.559742][T24165] batman_adv: batadv0: Removing interface: batadv_slave_1
[  687.595669][T24166] FAULT_INJECTION: forcing a failure.
[  687.595669][T24166] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  687.609223][T24166] CPU: 1 UID: 0 PID: 24166 Comm: syz.3.6112 Not tainted syzkaller #0 PREEMPT(full) 
[  687.609252][T24166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  687.609266][T24166] Call Trace:
[  687.609275][T24166]  <TASK>
[  687.609285][T24166]  dump_stack_lvl+0x189/0x250
[  687.609320][T24166]  ? __pfx____ratelimit+0x10/0x10
[  687.609354][T24166]  ? __pfx_dump_stack_lvl+0x10/0x10
[  687.609383][T24166]  ? __pfx__printk+0x10/0x10
[  687.609421][T24166]  should_fail_ex+0x414/0x560
[  687.609460][T24166]  _copy_to_user+0x31/0xb0
[  687.609491][T24166]  simple_read_from_buffer+0xe1/0x170
[  687.609530][T24166]  proc_fail_nth_read+0x1b3/0x220
[  687.609561][T24166]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  687.609594][T24166]  ? rw_verify_area+0x2a6/0x4d0
[  687.609622][T24166]  ? __lock_acquire+0xab9/0xd20
[  687.609641][T24166]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  687.609670][T24166]  vfs_read+0x200/0xa30
[  687.609697][T24166]  ? fdget_pos+0x247/0x320
[  687.609721][T24166]  ? __pfx___mutex_lock+0x10/0x10
[  687.609744][T24166]  ? __pfx_vfs_read+0x10/0x10
[  687.609776][T24166]  ? __fget_files+0x2a/0x420
[  687.609800][T24166]  ? __fget_files+0x3a0/0x420
[  687.609817][T24166]  ? __fget_files+0x2a/0x420
[  687.609847][T24166]  ksys_read+0x145/0x250
[  687.609878][T24166]  ? __pfx_ksys_read+0x10/0x10
[  687.609913][T24166]  ? do_syscall_64+0xbe/0xfa0
[  687.609949][T24166]  do_syscall_64+0xfa/0xfa0
[  687.609969][T24166]  ? lockdep_hardirqs_on+0x9c/0x150
[  687.609990][T24166]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  687.610012][T24166]  ? clear_bhb_loop+0x60/0xb0
[  687.610037][T24166]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  687.610060][T24166] RIP: 0033:0x7feb9f98e15c
[  687.610079][T24166] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  687.610098][T24166] RSP: 002b:00007feba0797030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  687.610122][T24166] RAX: ffffffffffffffda RBX: 00007feb9fbe6090 RCX: 00007feb9f98e15c
[  687.610138][T24166] RDX: 000000000000000f RSI: 00007feba07970a0 RDI: 0000000000000008
[  687.610152][T24166] RBP: 00007feba0797090 R08: 0000000000000000 R09: 0000000000000000
[  687.610166][T24166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  687.610179][T24166] R13: 00007feb9fbe6128 R14: 00007feb9fbe6090 R15: 00007ffc455f9658
[  687.610216][T24166]  </TASK>
[  688.409652][   T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  688.420181][   T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  688.430153][   T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  688.442573][   T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  688.456945][   T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  688.586579][T24190] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  688.827267][T24195] FAULT_INJECTION: forcing a failure.
[  688.827267][T24195] name failslab, interval 1, probability 0, space 0, times 0
[  688.840562][T24195] CPU: 1 UID: 0 PID: 24195 Comm: syz.0.6123 Not tainted syzkaller #0 PREEMPT(full) 
[  688.840591][T24195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  688.840605][T24195] Call Trace:
[  688.840614][T24195]  <TASK>
[  688.840624][T24195]  dump_stack_lvl+0x189/0x250
[  688.840660][T24195]  ? __pfx____ratelimit+0x10/0x10
[  688.840693][T24195]  ? __pfx_dump_stack_lvl+0x10/0x10
[  688.840722][T24195]  ? __pfx__printk+0x10/0x10
[  688.840749][T24195]  ? __pfx___might_resched+0x10/0x10
[  688.840771][T24195]  ? fs_reclaim_acquire+0x7d/0x100
[  688.840807][T24195]  should_fail_ex+0x414/0x560
[  688.840846][T24195]  should_failslab+0xa8/0x100
[  688.840869][T24195]  __kmalloc_noprof+0xcb/0x7f0
[  688.840898][T24195]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  688.840929][T24195]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  688.840960][T24195]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  688.840999][T24195]  genl_family_rcv_msg_doit+0xb8/0x300
[  688.841037][T24195]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  688.841078][T24195]  ? apparmor_capable+0x137/0x1b0
[  688.841106][T24195]  ? bpf_lsm_capable+0x9/0x20
[  688.841132][T24195]  ? security_capable+0x7e/0x2e0
[  688.841170][T24195]  genl_rcv_msg+0x60e/0x790
[  688.841207][T24195]  ? __pfx_genl_rcv_msg+0x10/0x10
[  688.841235][T24195]  ? __pfx_ethnl_default_set_doit+0x10/0x10
[  688.841265][T24195]  ? __asan_memcpy+0x40/0x70
[  688.841292][T24195]  ? __pfx_ref_tracker_free+0x10/0x10
[  688.841323][T24195]  netlink_rcv_skb+0x208/0x470
[  688.841343][T24195]  ? __lock_acquire+0xab9/0xd20
[  688.841365][T24195]  ? __pfx_genl_rcv_msg+0x10/0x10
[  688.841397][T24195]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  688.841442][T24195]  ? down_read+0x1ad/0x2e0
[  688.841470][T24195]  genl_rcv+0x28/0x40
[  688.841497][T24195]  netlink_unicast+0x82f/0x9e0
[  688.841541][T24195]  ? __pfx_netlink_unicast+0x10/0x10
[  688.841576][T24195]  ? netlink_sendmsg+0x642/0xb30
[  688.841602][T24195]  ? skb_put+0x11b/0x210
[  688.841630][T24195]  netlink_sendmsg+0x805/0xb30
[  688.841665][T24195]  ? __pfx_netlink_sendmsg+0x10/0x10
[  688.841693][T24195]  ? aa_sock_msg_perm+0xf1/0x1d0
[  688.841727][T24195]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  688.841748][T24195]  ? __pfx_netlink_sendmsg+0x10/0x10
[  688.841774][T24195]  __sock_sendmsg+0x21c/0x270
[  688.841819][T24195]  ____sys_sendmsg+0x505/0x830
[  688.841852][T24195]  ? __pfx_____sys_sendmsg+0x10/0x10
[  688.841889][T24195]  ? import_iovec+0x74/0xa0
[  688.841922][T24195]  ___sys_sendmsg+0x21f/0x2a0
[  688.841951][T24195]  ? __pfx____sys_sendmsg+0x10/0x10
[  688.842021][T24195]  ? __fget_files+0x2a/0x420
[  688.842042][T24195]  ? __fget_files+0x3a0/0x420
[  688.842074][T24195]  __x64_sys_sendmsg+0x19b/0x260
[  688.842103][T24195]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  688.842139][T24195]  ? __pfx_ksys_write+0x10/0x10
[  688.842175][T24195]  ? do_syscall_64+0xbe/0xfa0
[  688.842201][T24195]  do_syscall_64+0xfa/0xfa0
[  688.842219][T24195]  ? lockdep_hardirqs_on+0x9c/0x150
[  688.842240][T24195]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.842261][T24195]  ? clear_bhb_loop+0x60/0xb0
[  688.842286][T24195]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.842307][T24195] RIP: 0033:0x7fa22ef8f749
[  688.842327][T24195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  688.842346][T24195] RSP: 002b:00007fa22d1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  688.842368][T24195] RAX: ffffffffffffffda RBX: 00007fa22f1e5fa0 RCX: 00007fa22ef8f749
[  688.842384][T24195] RDX: 0000000000000010 RSI: 0000200000000300 RDI: 0000000000000003
[  688.842398][T24195] RBP: 00007fa22d1f6090 R08: 0000000000000000 R09: 0000000000000000
[  688.842411][T24195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  688.842423][T24195] R13: 00007fa22f1e6038 R14: 00007fa22f1e5fa0 R15: 00007ffee1af8f98
[  688.842462][T24195]  </TASK>
[  689.361054][T24185] chnl_net:caif_netlink_parms(): no params data found
[  689.488313][T24185] bridge0: port 1(bridge_slave_0) entered blocking state
[  689.490440][T24209] netlink: 'syz.3.6127': attribute type 2 has an invalid length.
[  689.495660][T24185] bridge0: port 1(bridge_slave_0) entered disabled state
[  689.511151][T24185] bridge_slave_0: entered allmulticast mode
[  689.519351][T24185] bridge_slave_0: entered promiscuous mode
[  689.536460][T24209] !: entered promiscuous mode
[  689.542018][T24185] bridge0: port 2(bridge_slave_1) entered blocking state
[  689.549583][T24185] bridge0: port 2(bridge_slave_1) entered disabled state
[  689.550446][T24209] netlink: 'syz.3.6127': attribute type 2 has an invalid length.
[  689.557409][T24185] bridge_slave_1: entered allmulticast mode
[  689.572755][T24185] bridge_slave_1: entered promiscuous mode
[  689.598864][T24209] !: left promiscuous mode
[  689.639559][T24185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  689.653712][T24185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  689.735654][T24185] team0: Port device team_slave_0 added
[  689.746236][T24185] team0: Port device team_slave_1 added
[  689.805739][T24185] batman_adv: batadv0: Adding interface: batadv_slave_0
[  689.812751][T24185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  689.843546][T24185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  689.895001][T24185] batman_adv: batadv0: Adding interface: batadv_slave_1
[  689.897983][T24219] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6131'.
[  689.902000][T24185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  689.923144][T24219] netlink: 'syz.3.6131': attribute type 10 has an invalid length.
[  689.946455][T24185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  689.957970][T24219] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  689.971929][T24219] batman_adv: batadv0: Removing interface: batadv_slave_0
[  689.982950][T24219] batadv_slave_0: entered promiscuous mode
[  689.990670][T24219] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  690.146263][T24185] hsr_slave_0: entered promiscuous mode
[  690.153328][T24185] hsr_slave_1: entered promiscuous mode
[  690.161108][T24185] debugfs: 'hsr0' already exists in 'hsr'
[  690.170457][T24185] Cannot create hsr debugfs directory
[  690.440891][T24185] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  690.500092][T24238] batadv_slave_1: entered promiscuous mode
[  690.514789][ T5146] Bluetooth: hci5: command tx timeout
[  690.548010][T24185] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  690.679617][T24185] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  690.695682][T24237] batadv_slave_1: left promiscuous mode
[  690.709042][T24245] netlink: 'syz.3.6141': attribute type 33 has an invalid length.
[  690.717602][T24245] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6141'.
[  690.727448][T24245] `: renamed from team0 (while UP)
[  690.797809][T24185] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  690.986893][T24254] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6145'.
[  691.012522][T24254] netlink: 'syz.3.6145': attribute type 10 has an invalid length.
[  691.050786][T24254] bridge0: port 2(bridge_slave_1) entered disabled state
[  691.058742][T24254] bridge0: port 1(bridge_slave_0) entered disabled state
[  691.069945][T24259] Unsupported ieee802154 address type: 0
[  691.083396][T24254] bridge0: port 2(bridge_slave_1) entered blocking state
[  691.090702][T24254] bridge0: port 2(bridge_slave_1) entered forwarding state
[  691.098335][T24254] bridge0: port 1(bridge_slave_0) entered blocking state
[  691.105603][T24254] bridge0: port 1(bridge_slave_0) entered forwarding state
[  691.122519][T24254] bridge0: entered promiscuous mode
[  691.131248][T24254] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  691.153311][T24185] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  691.171626][ T1301] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  691.208075][T24185] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  691.223631][T24185] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  691.264881][T24185] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  691.452072][T24185] 8021q: adding VLAN 0 to HW filter on device bond0
[  691.501671][T24185] 8021q: adding VLAN 0 to HW filter on device team0
[  691.521978][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[  691.529216][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[  691.547171][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  691.554438][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  691.931188][T24290] syzkaller1: entered promiscuous mode
[  691.938786][T24290] syzkaller1: entered allmulticast mode
[  691.990589][T24185] 8021q: adding VLAN 0 to HW filter on device batadv0
[  692.006646][T24288] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6150'.
[  692.381589][T24185] veth0_vlan: entered promiscuous mode
[  692.397643][T24185] veth1_vlan: entered promiscuous mode
[  692.447992][T24185] veth0_macvtap: entered promiscuous mode
[  692.459982][T24185] veth1_macvtap: entered promiscuous mode
[  692.481750][T24185] batman_adv: batadv0: Interface activated: batadv_slave_0
[  692.511230][T24185] batman_adv: batadv0: Interface activated: batadv_slave_1
[  692.528806][   T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  692.562705][   T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  692.582224][   T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  692.600209][ T5146] Bluetooth: hci5: command tx timeout
[  692.608812][   T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  692.744719][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  692.772545][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  692.806467][ T2915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  692.814547][ T2915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  693.109524][   T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  693.123634][   T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  693.132327][   T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  693.147822][   T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  693.160264][   T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  693.161771][T24316] tap0: tun_chr_ioctl cmd 1074812118
[  693.328729][T24321] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6157'.
[  693.883439][T24313] chnl_net:caif_netlink_parms(): no params data found
[  694.102350][T24313] bridge0: port 1(bridge_slave_0) entered blocking state
[  694.122203][T24313] bridge0: port 1(bridge_slave_0) entered disabled state
[  694.137286][T24313] bridge_slave_0: entered allmulticast mode
[  694.153943][T24313] bridge_slave_0: entered promiscuous mode
[  694.168419][T24313] bridge0: port 2(bridge_slave_1) entered blocking state
[  694.176315][T24313] bridge0: port 2(bridge_slave_1) entered disabled state
[  694.183673][T24313] bridge_slave_1: entered allmulticast mode
[  694.193733][T24313] bridge_slave_1: entered promiscuous mode
[  694.246789][T24313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  694.260602][T24313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  694.321000][T24313] team0: Port device team_slave_0 added
[  694.331700][T24313] team0: Port device team_slave_1 added
[  694.391361][T24313] batman_adv: batadv0: Adding interface: batadv_slave_0
[  694.399506][T24313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  694.427712][T24313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  694.447634][T24313] batman_adv: batadv0: Adding interface: batadv_slave_1
[  694.457710][T24313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  694.486190][T24313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  694.575617][T24313] hsr_slave_0: entered promiscuous mode
[  694.582810][T24313] hsr_slave_1: entered promiscuous mode
[  694.589851][T24313] debugfs: 'hsr0' already exists in 'hsr'
[  694.596371][T24313] Cannot create hsr debugfs directory
[  694.674909][ T5146] Bluetooth: hci5: command tx timeout
[  694.789725][T24342] netlink: 'syz.4.6163': attribute type 29 has an invalid length.
[  694.812964][T24342] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6163'.
[  694.875280][T24313] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  694.887964][T24313] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  694.903701][T24313] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  694.923700][T24313] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  695.089996][T24313] 8021q: adding VLAN 0 to HW filter on device bond0
[  695.129291][T24313] 8021q: adding VLAN 0 to HW filter on device team0
[  695.181695][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state
[  695.188960][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  695.207838][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state
[  695.215141][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  695.241807][ T5146] Bluetooth: hci4: command tx timeout
[  695.569987][T24313] 8021q: adding VLAN 0 to HW filter on device batadv0
[  695.930597][T24313] veth0_vlan: entered promiscuous mode
[  695.945935][T24313] veth1_vlan: entered promiscuous mode
[  695.991211][T24313] veth0_macvtap: entered promiscuous mode
[  696.003198][T24313] veth1_macvtap: entered promiscuous mode
[  696.030011][T24313] batman_adv: batadv0: Interface activated: batadv_slave_0
[  696.058706][T24313] batman_adv: batadv0: Interface activated: batadv_slave_1
[  696.077868][   T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  696.088270][   T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  696.098890][   T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  696.109853][   T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  696.207372][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  696.226963][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  696.260141][ T2915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  696.270449][ T2915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  696.419077][T24382] batadv_slave_1: entered promiscuous mode
[  696.602197][T24381] batadv_slave_1: left promiscuous mode
[  696.758514][ T5146] Bluetooth: hci5: command tx timeout
[  696.933486][T24396] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  696.945220][T24396] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  696.954779][T24396] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  696.964924][T24396] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  696.972851][T24396] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  697.059145][T24393] bridge0: port 2(bridge_slave_1) entered disabled state
[  697.067047][T24393] bridge0: port 1(bridge_slave_0) entered disabled state
[  697.213266][T24393] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  697.230781][T24393] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  697.315426][T24396] Bluetooth: hci4: command tx timeout
[  697.378130][T24400] syzkaller1: entered promiscuous mode
[  697.383657][T24400] syzkaller1: entered allmulticast mode
[  697.392968][   T50] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  697.402852][   T50] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  697.471481][   T50] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  697.481218][   T50] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  697.854988][T24412] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  697.967761][T24416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6177'.
[  697.986746][T24416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6177'.
[  698.008789][T24416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6177'.
[  698.030027][T24416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6177'.
[  698.055501][T24416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6177'.
[  698.086843][T24416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6177'.
[  698.101482][T24416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6177'.
[  698.132609][T24416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6177'.
[  698.176200][T24416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6177'.
[  698.188340][T24416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6177'.
[  698.212323][T24416] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  698.311766][T24412] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  698.393277][T24412] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  698.501229][T24412] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  698.678102][   T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  698.766164][   T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  698.810485][T24394] chnl_net:caif_netlink_parms(): no params data found
[  698.829332][ T1154] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  698.859740][ T1154] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  699.053594][T24394] bridge0: port 1(bridge_slave_0) entered blocking state
[  699.074712][T24396] Bluetooth: hci6: command tx timeout
[  699.080730][T24394] bridge0: port 1(bridge_slave_0) entered disabled state
[  699.104040][T24394] bridge_slave_0: entered allmulticast mode
[  699.121953][T24394] bridge_slave_0: entered promiscuous mode
[  699.126651][T24451] netlink: 'syz.4.6184': attribute type 4 has an invalid length.
[  699.137251][T24451] netlink: 'syz.4.6184': attribute type 1 has an invalid length.
[  699.145783][T24451] netlink: 'syz.4.6184': attribute type 1 has an invalid length.
[  699.146608][T24394] bridge0: port 2(bridge_slave_1) entered blocking state
[  699.177167][T24394] bridge0: port 2(bridge_slave_1) entered disabled state
[  699.185581][T24394] bridge_slave_1: entered allmulticast mode
[  699.196966][T24394] bridge_slave_1: entered promiscuous mode
[  699.294550][T24394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  699.322351][T24394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  699.387621][T24394] team0: Port device team_slave_0 added
[  699.394964][T24396] Bluetooth: hci4: command tx timeout
[  699.407759][T24394] team0: Port device team_slave_1 added
[  699.505467][T24394] batman_adv: batadv0: Adding interface: batadv_slave_0
[  699.513946][T24394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  699.540584][T24394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  699.557453][T24394] batman_adv: batadv0: Adding interface: batadv_slave_1
[  699.564621][T24394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  699.591477][T24394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  699.720581][T24394] hsr_slave_0: entered promiscuous mode
[  699.728721][T24394] hsr_slave_1: entered promiscuous mode
[  699.736924][T24394] debugfs: 'hsr0' already exists in 'hsr'
[  699.742857][T24394] Cannot create hsr debugfs directory
[  699.748937][T24467] FAULT_INJECTION: forcing a failure.
[  699.748937][T24467] name failslab, interval 1, probability 0, space 0, times 0
[  699.762395][T24467] CPU: 0 UID: 0 PID: 24467 Comm: syz.5.6192 Not tainted syzkaller #0 PREEMPT(full) 
[  699.762425][T24467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  699.762438][T24467] Call Trace:
[  699.762446][T24467]  <TASK>
[  699.762456][T24467]  dump_stack_lvl+0x189/0x250
[  699.762490][T24467]  ? __pfx____ratelimit+0x10/0x10
[  699.762523][T24467]  ? __pfx_dump_stack_lvl+0x10/0x10
[  699.762552][T24467]  ? __pfx__printk+0x10/0x10
[  699.762574][T24467]  ? __pfx___might_resched+0x10/0x10
[  699.762595][T24467]  should_fail_ex+0x414/0x560
[  699.762623][T24467]  should_failslab+0xa8/0x100
[  699.762640][T24467]  __kmalloc_noprof+0xcb/0x7f0
[  699.762662][T24467]  ? ioctl_standard_iw_point+0x4d5/0xd40
[  699.762680][T24467]  ? rcu_is_watching+0x15/0xb0
[  699.762702][T24467]  ioctl_standard_iw_point+0x4d5/0xd40
[  699.762730][T24467]  ? __pfx_cfg80211_wext_siwessid+0x10/0x10
[  699.762756][T24467]  ? __pfx_ioctl_standard_iw_point+0x10/0x10
[  699.762774][T24467]  ? __pfx___mutex_lock+0x10/0x10
[  699.762797][T24467]  ? full_name_hash+0x92/0xe0
[  699.762815][T24467]  ? __pfx_cfg80211_wext_siwessid+0x10/0x10
[  699.762838][T24467]  ioctl_standard_call+0xaf/0x1b0
[  699.762858][T24467]  ? __pfx_cfg80211_wext_siwessid+0x10/0x10
[  699.762887][T24467]  wext_ioctl_dispatch+0xee/0x410
[  699.762907][T24467]  ? __pfx_ioctl_standard_call+0x10/0x10
[  699.762935][T24467]  wext_handle_ioctl+0x100/0x1c0
[  699.762960][T24467]  ? __pfx_wext_handle_ioctl+0x10/0x10
[  699.763017][T24467]  sock_ioctl+0x15f/0x790
[  699.763063][T24467]  ? __pfx_sock_ioctl+0x10/0x10
[  699.763097][T24467]  ? __fget_files+0x3a0/0x420
[  699.763145][T24467]  ? __fget_files+0x2a/0x420
[  699.763172][T24467]  ? bpf_lsm_file_ioctl+0x9/0x20
[  699.763196][T24467]  ? __pfx_sock_ioctl+0x10/0x10
[  699.763226][T24467]  __se_sys_ioctl+0xfc/0x170
[  699.763248][T24467]  do_syscall_64+0xfa/0xfa0
[  699.763262][T24467]  ? lockdep_hardirqs_on+0x9c/0x150
[  699.763280][T24467]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  699.763295][T24467]  ? clear_bhb_loop+0x60/0xb0
[  699.763314][T24467]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  699.763329][T24467] RIP: 0033:0x7ff1ef58f749
[  699.763343][T24467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  699.763355][T24467] RSP: 002b:00007ff1f040e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  699.763372][T24467] RAX: ffffffffffffffda RBX: 00007ff1ef7e5fa0 RCX: 00007ff1ef58f749
[  699.763384][T24467] RDX: 0000200000000040 RSI: 0000000000008b1a RDI: 0000000000000005
[  699.763394][T24467] RBP: 00007ff1f040e090 R08: 0000000000000000 R09: 0000000000000000
[  699.763403][T24467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  699.763412][T24467] R13: 00007ff1ef7e6038 R14: 00007ff1ef7e5fa0 R15: 00007ffc73d5d718
[  699.763439][T24467]  </TASK>
[  700.105161][T24470] rdma_rxe: rxe_newlink: failed to add ip6_vti0
[  700.438266][T24483] FAULT_INJECTION: forcing a failure.
[  700.438266][T24483] name failslab, interval 1, probability 0, space 0, times 0
[  700.451216][T24483] CPU: 1 UID: 0 PID: 24483 Comm: syz.0.6199 Not tainted syzkaller #0 PREEMPT(full) 
[  700.451242][T24483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  700.451256][T24483] Call Trace:
[  700.451265][T24483]  <TASK>
[  700.451275][T24483]  dump_stack_lvl+0x189/0x250
[  700.451309][T24483]  ? __pfx____ratelimit+0x10/0x10
[  700.451338][T24483]  ? __pfx_dump_stack_lvl+0x10/0x10
[  700.451362][T24483]  ? __pfx__printk+0x10/0x10
[  700.451382][T24483]  ? __pfx___might_resched+0x10/0x10
[  700.451401][T24483]  ? fs_reclaim_acquire+0x7d/0x100
[  700.451423][T24483]  should_fail_ex+0x414/0x560
[  700.451454][T24483]  should_failslab+0xa8/0x100
[  700.451474][T24483]  kmem_cache_alloc_node_noprof+0x77/0x710
[  700.451500][T24483]  ? __alloc_skb+0x255/0x430
[  700.451518][T24483]  ? napi_skb_cache_get+0x445/0x6e0
[  700.451533][T24483]  ? napi_skb_cache_get+0x151/0x6e0
[  700.451555][T24483]  __alloc_skb+0x255/0x430
[  700.451576][T24483]  ? __pfx___alloc_skb+0x10/0x10
[  700.451600][T24483]  ? netlink_ack_tlv_len+0x6c/0x210
[  700.451622][T24483]  netlink_ack+0x146/0xa50
[  700.451645][T24483]  ? rcu_is_watching+0x15/0xb0
[  700.451668][T24483]  ? trace_contention_end+0x39/0x120
[  700.451731][T24483]  netlink_rcv_skb+0x28c/0x470
[  700.451754][T24483]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  700.451779][T24483]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  700.451812][T24483]  ? netlink_deliver_tap+0x2e/0x1b0
[  700.451830][T24483]  ? netlink_deliver_tap+0x2e/0x1b0
[  700.451851][T24483]  xfrm_netlink_rcv+0x79/0x90
[  700.451874][T24483]  netlink_unicast+0x82f/0x9e0
[  700.451911][T24483]  ? __pfx_netlink_unicast+0x10/0x10
[  700.451940][T24483]  ? netlink_sendmsg+0x642/0xb30
[  700.451957][T24483]  ? skb_put+0x11b/0x210
[  700.451981][T24483]  netlink_sendmsg+0x805/0xb30
[  700.452013][T24483]  ? __pfx_netlink_sendmsg+0x10/0x10
[  700.452038][T24483]  ? aa_sock_msg_perm+0xf1/0x1d0
[  700.452080][T24483]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  700.452098][T24483]  ? __pfx_netlink_sendmsg+0x10/0x10
[  700.452121][T24483]  __sock_sendmsg+0x21c/0x270
[  700.452151][T24483]  ____sys_sendmsg+0x505/0x830
[  700.452177][T24483]  ? __pfx_____sys_sendmsg+0x10/0x10
[  700.452206][T24483]  ? import_iovec+0x74/0xa0
[  700.452232][T24483]  ___sys_sendmsg+0x21f/0x2a0
[  700.452257][T24483]  ? __pfx____sys_sendmsg+0x10/0x10
[  700.452314][T24483]  ? __fget_files+0x2a/0x420
[  700.452332][T24483]  ? __fget_files+0x3a0/0x420
[  700.452362][T24483]  __x64_sys_sendmsg+0x19b/0x260
[  700.452389][T24483]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  700.452421][T24483]  ? __pfx_ksys_write+0x10/0x10
[  700.452452][T24483]  ? do_syscall_64+0xbe/0xfa0
[  700.452476][T24483]  do_syscall_64+0xfa/0xfa0
[  700.452494][T24483]  ? lockdep_hardirqs_on+0x9c/0x150
[  700.452511][T24483]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  700.452529][T24483]  ? clear_bhb_loop+0x60/0xb0
[  700.452551][T24483]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  700.452569][T24483] RIP: 0033:0x7fa22ef8f749
[  700.452587][T24483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  700.452604][T24483] RSP: 002b:00007fa22d1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  700.452626][T24483] RAX: ffffffffffffffda RBX: 00007fa22f1e5fa0 RCX: 00007fa22ef8f749
[  700.452640][T24483] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003
[  700.452652][T24483] RBP: 00007fa22d1f6090 R08: 0000000000000000 R09: 0000000000000000
[  700.452664][T24483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  700.452676][T24483] R13: 00007fa22f1e6038 R14: 00007fa22f1e5fa0 R15: 00007ffee1af8f98
[  700.452709][T24483]  </TASK>
[  700.850498][T24481] 
[  700.852889][T24481] ======================================================
[  700.855516][T24394] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  700.859925][T24481] WARNING: possible circular locking dependency detected
[  700.873683][T24481] syzkaller #0 Not tainted
[  700.878129][T24481] ------------------------------------------------------
[  700.885187][T24481] syz.4.6197/24481 is trying to acquire lock:
[  700.891274][T24481] ffffffff8f426a58 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0
[  700.900623][T24481] 
[  700.900623][T24481] but task is already holding lock:
[  700.908008][T24481] ffff888145b28470 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570
[  700.917366][T24481] 
[  700.917366][T24481] which lock already depends on the new lock.
[  700.917366][T24481] 
[  700.927786][T24481] 
[  700.927786][T24481] the existing dependency chain (in reverse order) is:
[  700.936813][T24481] 
[  700.936813][T24481] -> #2 (&nr_node->node_lock){+...}-{3:3}:
[  700.944824][T24481]        lock_acquire+0x120/0x360
[  700.949865][T24481]        _raw_spin_lock_bh+0x36/0x50
[  700.955179][T24481]        nr_rt_device_down+0x12a/0x720
[  700.960659][T24481]        nr_device_event+0x137/0x150
[  700.965966][T24481]        notifier_call_chain+0x1b6/0x3e0
[  700.971613][T24481]        __dev_notify_flags+0x18d/0x2e0
[  700.977186][T24481]        netif_change_flags+0xe8/0x1a0
[  700.982654][T24481]        dev_change_flags+0x130/0x260
[  700.988036][T24481]        dev_ioctl+0x7b4/0x1150
[  700.992901][T24481]        sock_do_ioctl+0x22c/0x300
[  700.998027][T24481]        sock_ioctl+0x576/0x790
[  701.002903][T24481]        __se_sys_ioctl+0xfc/0x170
[  701.008031][T24481]        do_syscall_64+0xfa/0xfa0
[  701.013093][T24481]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  701.019518][T24481] 
[  701.019518][T24481] -> #1 (nr_node_list_lock){+...}-{3:3}:
[  701.027355][T24481]        lock_acquire+0x120/0x360
[  701.032566][T24481]        _raw_spin_lock_bh+0x36/0x50
[  701.037874][T24481]        nr_rt_device_down+0xa9/0x720
[  701.043285][T24481]        nr_device_event+0x137/0x150
[  701.048581][T24481]        notifier_call_chain+0x1b6/0x3e0
[  701.054235][T24481]        netif_close_many+0x29c/0x410
[  701.059637][T24481]        netif_close+0x158/0x210
[  701.064598][T24481]        dev_close+0x10a/0x220
[  701.069374][T24481]        bpq_device_event+0x377/0x6a0
[  701.074754][T24481]        notifier_call_chain+0x1b6/0x3e0
[  701.080492][T24481]        netif_close_many+0x29c/0x410
[  701.085966][T24481]        netif_close+0x158/0x210
[  701.090945][T24481]        dev_close+0x10a/0x220
[  701.095832][T24481]        bond_setup_by_slave+0x5f/0x3f0
[  701.101401][T24481]        bond_enslave+0x6ca/0x38c0
[  701.106614][T24481]        bond_do_ioctl+0x635/0x9b0
[  701.111763][T24481]        dev_ifsioc+0x90b/0xf00
[  701.116713][T24481]        dev_ioctl+0x7b4/0x1150
[  701.121570][T24481]        sock_do_ioctl+0x22c/0x300
[  701.126694][T24481]        sock_ioctl+0x576/0x790
[  701.131593][T24481]        __se_sys_ioctl+0xfc/0x170
[  701.136781][T24481]        do_syscall_64+0xfa/0xfa0
[  701.141811][T24481]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  701.148246][T24481] 
[  701.148246][T24481] -> #0 (nr_neigh_list_lock){+...}-{3:3}:
[  701.156181][T24481]        validate_chain+0xb9b/0x2140
[  701.161580][T24481]        __lock_acquire+0xab9/0xd20
[  701.166795][T24481]        lock_acquire+0x120/0x360
[  701.171828][T24481]        _raw_spin_lock_bh+0x36/0x50
[  701.177141][T24481]        nr_remove_neigh+0x25/0xe0
[  701.182308][T24481]        nr_add_node+0x1d9f/0x2570
[  701.187449][T24481]        nr_rt_ioctl+0xc12/0xd50
[  701.192412][T24481]        sock_do_ioctl+0xdc/0x300
[  701.197460][T24481]        sock_ioctl+0x576/0x790
[  701.202327][T24481]        __se_sys_ioctl+0xfc/0x170
[  701.207456][T24481]        do_syscall_64+0xfa/0xfa0
[  701.212498][T24481]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  701.218931][T24481] 
[  701.218931][T24481] other info that might help us debug this:
[  701.218931][T24481] 
[  701.229198][T24481] Chain exists of:
[  701.229198][T24481]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[  701.229198][T24481] 
[  701.243037][T24481]  Possible unsafe locking scenario:
[  701.243037][T24481] 
[  701.250499][T24481]        CPU0                    CPU1
[  701.255872][T24481]        ----                    ----
[  701.261248][T24481]   lock(&nr_node->node_lock);
[  701.266063][T24481]                                lock(nr_node_list_lock);
[  701.273186][T24481]                                lock(&nr_node->node_lock);
[  701.280842][T24481]   lock(nr_neigh_list_lock);
[  701.285550][T24481] 
[  701.285550][T24481]  *** DEADLOCK ***
[  701.285550][T24481] 
[  701.293705][T24481] 1 lock held by syz.4.6197/24481:
[  701.298850][T24481]  #0: ffff888145b28470 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570
[  701.308633][T24481] 
[  701.308633][T24481] stack backtrace:
[  701.314536][T24481] CPU: 1 UID: 0 PID: 24481 Comm: syz.4.6197 Not tainted syzkaller #0 PREEMPT(full) 
[  701.314561][T24481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  701.314573][T24481] Call Trace:
[  701.314581][T24481]  <TASK>
[  701.314598][T24481]  dump_stack_lvl+0x189/0x250
[  701.314629][T24481]  ? __pfx_dump_stack_lvl+0x10/0x10
[  701.314654][T24481]  ? __pfx__printk+0x10/0x10
[  701.314671][T24481]  ? stack_trace_save+0x9c/0xe0
[  701.314702][T24481]  print_circular_bug+0x2ee/0x310
[  701.314727][T24481]  check_noncircular+0x134/0x160
[  701.314752][T24481]  validate_chain+0xb9b/0x2140
[  701.314786][T24481]  __lock_acquire+0xab9/0xd20
[  701.314808][T24481]  ? nr_remove_neigh+0x25/0xe0
[  701.314832][T24481]  lock_acquire+0x120/0x360
[  701.314849][T24481]  ? nr_remove_neigh+0x25/0xe0
[  701.314878][T24481]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  701.314908][T24481]  ? nr_remove_neigh+0x25/0xe0
[  701.314933][T24481]  _raw_spin_lock_bh+0x36/0x50
[  701.314959][T24481]  ? nr_remove_neigh+0x25/0xe0
[  701.314984][T24481]  nr_remove_neigh+0x25/0xe0
[  701.315009][T24481]  nr_add_node+0x1d9f/0x2570
[  701.315035][T24481]  ? __asan_memcpy+0x40/0x70
[  701.315065][T24481]  ? nr_call_to_digi+0x126/0x1b0
[  701.315090][T24481]  nr_rt_ioctl+0xc12/0xd50
[  701.315120][T24481]  ? __pfx_nr_rt_ioctl+0x10/0x10
[  701.315142][T24481]  ? lockdep_hardirqs_on+0x9c/0x150
[  701.315164][T24481]  ? apparmor_capable+0x137/0x1b0
[  701.315188][T24481]  ? capable+0x89/0xe0
[  701.315208][T24481]  ? nr_ioctl+0x1b1/0x3b0
[  701.315228][T24481]  sock_do_ioctl+0xdc/0x300
[  701.315255][T24481]  ? __pfx_sock_do_ioctl+0x10/0x10
[  701.315288][T24481]  sock_ioctl+0x576/0x790
[  701.315312][T24481]  ? __pfx_sock_ioctl+0x10/0x10
[  701.315337][T24481]  ? __fget_files+0x3a0/0x420
[  701.315354][T24481]  ? __fget_files+0x2a/0x420
[  701.315372][T24481]  ? bpf_lsm_file_ioctl+0x9/0x20
[  701.315392][T24481]  ? __pfx_sock_ioctl+0x10/0x10
[  701.315414][T24481]  __se_sys_ioctl+0xfc/0x170
[  701.315437][T24481]  do_syscall_64+0xfa/0xfa0
[  701.315453][T24481]  ? lockdep_hardirqs_on+0x9c/0x150
[  701.315469][T24481]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  701.315487][T24481]  ? clear_bhb_loop+0x60/0xb0
[  701.315507][T24481]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  701.315523][T24481] RIP: 0033:0x7f624f38f749
[  701.315540][T24481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  701.315556][T24481] RSP: 002b:00007f6250272038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  701.315575][T24481] RAX: ffffffffffffffda RBX: 00007f624f5e5fa0 RCX: 00007f624f38f749
[  701.315588][T24481] RDX: 0000200000000280 RSI: 000000000000890b RDI: 000000000000000b
[  701.315600][T24481] RBP: 00007f624f413f91 R08: 0000000000000000 R09: 0000000000000000
[  701.315611][T24481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  701.315622][T24481] R13: 00007f624f5e6038 R14: 00007f624f5e5fa0 R15: 00007ffd6c31afc8
[  701.315644][T24481]  </TASK>
[  701.316120][T19289] page_pool_release_retry() stalled pool shutdown: id 119, 1 inflight 60 sec
[  701.377330][T24396] Bluetooth: hci6: command tx timeout
[  701.397767][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  701.484715][T24396] Bluetooth: hci4: command tx timeout
[  701.495162][T24394] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  701.653882][T24394] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  701.667169][T24394] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  701.725884][T24394] 8021q: adding VLAN 0 to HW filter on device bond0
[  701.741781][T24394] 8021q: adding VLAN 0 to HW filter on device team0
[  701.753836][   T72] bridge0: port 1(bridge_slave_0) entered blocking state
[  701.760994][   T72] bridge0: port 1(bridge_slave_0) entered forwarding state
[  701.775135][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  701.782275][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  701.915672][T24394] 8021q: adding VLAN 0 to HW filter on device batadv0
[  702.071176][T24394] veth0_vlan: entered promiscuous mode
[  702.082157][T24394] veth1_vlan: entered promiscuous mode
[  702.105383][T24394] veth0_macvtap: entered promiscuous mode
[  702.114135][T24394] veth1_macvtap: entered promiscuous mode
[  702.129552][T24394] batman_adv: batadv0: Interface activated: batadv_slave_0
[  702.142488][T24394] batman_adv: batadv0: Interface activated: batadv_slave_1
[  702.157021][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  702.166120][   T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  702.178411][   T72] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  702.187422][   T72] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  702.210276][T24394] ieee80211 phy41: Selected rate control algorithm 'minstrel_ht'
[  702.236514][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  702.241060][T24394] ieee80211 phy42: Selected rate control algorithm 'minstrel_ht'
[  702.252765][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  702.278310][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  702.286603][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  703.394523][T24396] Bluetooth: hci6: command tx timeout
[  705.474496][T24396] Bluetooth: hci6: command tx timeout
[  706.534352][   T98] block nbd1: Possible stuck request ffff888025057000: control (read@0,1024B). Runtime 240 seconds
[  706.545582][   T98] block nbd1: Possible stuck request ffff8880250571c0: control (read@1024,1024B). Runtime 240 seconds
[  706.556636][   T98] block nbd1: Possible stuck request ffff888025057380: control (read@2048,1024B). Runtime 240 seconds
[  706.567728][   T98] block nbd1: Possible stuck request ffff888025057540: control (read@3072,1024B). Runtime 240 seconds