last executing test programs:

1m12.165189677s ago: executing program 1 (id=4030):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000940)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000640)={0x2ac, r2, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0xfffffffd, 0x25dfdbff, {{@in6=@mcast1, @in6=@remote, 0x4e20, 0xb, 0xf800, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x400000000000000, 0x0, 0xffffffffffffffff, 0x1000}, {0x1, 0x6, 0x5, 0xf}, 0xfffffffc}, [@tmpl={0xc4, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x4}, 0x0, 0x3c}, 0x0, @in6=@empty, 0x3502, 0x0, 0x2, 0x0, 0x0, 0xbd0}, {{@in6=@remote, 0x4d5, 0x2b}, 0xa, @in6=@loopback, 0xfffffffd, 0x1, 0x0, 0x0, 0x800, 0x800}, {{@in=@private=0xa010100, 0x0, 0x32}, 0x0, @in=@local, 0x3503, 0x1, 0x0, 0x4, 0x8}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x6815}, 0x800)
ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='veth0_to_bridge\x00')
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000980)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x224, r3, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x7b}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xee, 0xfc, "c3ef8b8a9b60d07cb13a17d6b880b88c1de6b0fafac3e52b733d4e8ea13d5e6c9f54bdfa00205aac9865fefe07efea9dfda605fa39473fcfd2f3354ecf6f055df3cac6d942af066c879d21aaaa1dff3d6411a6628ceb4381e82e77a5f12241da2fe7707a83668b35472d3712e3f154fae6a467aff4b4b38ba9299d23b03e64bd664a3702ae76ae9cd3489c77c11ce24382212d9710b2f162e68d5b013c2f914d8b50b6dffcbc5189ca06aa31aae272d72b71f0e5bfba486f77e1c47eac3f8b0360c204dd2f1fc8a13286fa59faf2ad64d40525e363d30b923dc26ac15490987d94247d58328ef9a7da4b"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}, @NL80211_ATTR_FILS_ERP_REALM={0x100, 0xfa, "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"}]]}, 0x224}}, 0x4000001)

1m11.783993344s ago: executing program 1 (id=4033):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001480)={0x1c, 0x32, 0x9, 0x70bd27, 0x0, {0x1d}, [@typed={0x8, 0x18, 0x0, 0x0, @u32=0xfac09}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4046804}, 0x4000014)

1m11.713170931s ago: executing program 1 (id=4035):
sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000500)={0x294, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x259, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_a, @device_a, @initial, {0xc, 0xc45}, @value=@ver_80211n={0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0xf7d6, @default, 0x1040, @val={0x0, 0x1b, @random="f8d9c3537204b0b478308bf7aa17d3cb35af8f0b1ac7ef800153d9"}, @val, @void, @val={0x4, 0x6, {0x8, 0x6, 0xec6, 0x4}}, @val={0x6, 0x2, 0x3}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x0, 0x6, 0x8}}, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x0, 0x2, 0xf3, 0x20}}, @void, [{0xdd, 0xd5, "ccff396922e15cae25aef7da02fcbfdfdcbfdb1ff313dae170d604445f1aa40580eb457c61f5ff5a6a0bc277b68baa4c9420a4621fd39d72837be063f927610c4e1b1bc20271c35aa02cdfcf53398a468e407d653243c60d2b68860d62aed527c8ada6bd87dc42f8543857aaf627e0f869a34019a279bcf04ec91adfbb97013032d2b4e48865c7a65aca24bd9c4684815873149f0e3b5346511e46b8fb3e4b25f72018092f67ff89ba79db5666c88b753cfb28fd093fde041dea91a27dd937547308666b5ff26df707067d284b0e8805ba5496002c"}, {0xdd, 0x50, "9f5f0f2c62229d608a6b7c48df94d31230b13059ebce9c0170b66c3df8c9a123e3953cff0e6ecc4af9856ea03206cc17f754faf34fd7d0407da02ed21bb2ce1263ddd9a13416c67923e7c5ec3cceb8d9"}, {0xdd, 0x6, "0c8f613c6e46"}, {0xdd, 0x4b, "4b4041442054720bac905052fefa38ca93d12f0b3b99f78d4f910923149d79d23e9b2c487e874c0bcda3395878fc0db160261e53ed44c70f6ad6000a38c086b8bbee3e164bbee080d74226"}, {0xdd, 0x27, "ae91fad7e0599960d08aa5c296595ea80142e940d48658b5e4af5631b87b91c3fe3915f5e4460a"}, {0xdd, 0x2d, "059d8cb3b1122c12ddecd25f84b3ee6bd2d013ca76a47d77f5c89e2f33fac1ac48cf2dbc5295fdf12772a0f0c6"}, {0xdd, 0x1b, "cf80b8f78e71a29e379db9d70c04e567fd24e2f058610a1ae5a5c0"}]}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x7, 0x3, 0x5, 0xee, 0x0, 0x3, 0xd]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x294}, 0x1, 0x0, 0x0, 0x20000081}, 0x80)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c0015"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r5, 0x400, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x44}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000)

1m11.576077276s ago: executing program 2 (id=4037):
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10)
setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f00000001c0)=0x8, 0x4)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000001c00), r2)
sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x91}, 0x10)
sendmmsg$inet(r1, &(0x7f00000051c0)=[{{&(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f00000050c0)=[{&(0x7f0000000340)="67d628c20f6a631cc7", 0x9}], 0x1}}], 0x1, 0x24004000)
unshare(0x22020600)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1b, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000181100"/81, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000080000000950000000000000018180000", @ANYRES32, @ANYBLOB="00000000000000000000000010ffffff00b15b84000000000000001812f70df20f84a8", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000030000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x29, &(0x7f00000000c0)=""/41, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xa, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000001c0)=[{0x3, 0x1, 0x6, 0x3}, {0x2, 0x6, 0x5, 0x5}], 0x10, 0xffff}, 0x9f)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0x421, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x26d2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x25}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, @IFLA_BROADCAST={0xa}]}, 0x5c}}, 0xc080)

1m11.545339662s ago: executing program 0 (id=4038):
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x2, 0x3e0, 0x1f8, 0x2f8, 0x1f8, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vxcan1\x00', 'nr0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @broadcast}}}, {{@arp={@remote, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg\x00', 'vcan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "dcbc4f0fcafe5fd600342efa7968d220b64d039e8a81d171eeb2e9630554"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a1aaf175a9d59559f29c09ff5e337e791be17c1ef703647852fe9e1b3ab3e6cd1c3b84b92c9822e232e0052c3", 0x6e}, {0x0}], 0x2)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r3, &(0x7f00000023c0)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000002c0)='G', 0x1}], 0x1}}], 0x1, 0x880)
shutdown(r3, 0x1)
listen(r3, 0x9)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
socket$kcm(0x2, 0xa, 0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x8, 0x3, 0x5a0, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4d0, 0xffffffff, 0xffffffff, 0x4d0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0x0, 0xff000000], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x21, 0x3, 0x5, 0x5}, 0x0, 0x2f0, 0x310, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'bond_slave_0\x00', {0x0, 0x0, 0x9, 0x0, 0xffff4c47, 0x3ff, 0x101, 0x8, 0x18}, {0x6}}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r4, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5, 0x0, 0x12}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x68}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000)
r6 = socket$inet6(0xa, 0x3, 0x8)
ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0})
setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4)

1m11.532013212s ago: executing program 1 (id=4039):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8)
ioctl$XFS_IOC_READLINK_BY_HANDLE(r0, 0xc038586c, &(0x7f0000000100)={r0, &(0x7f0000000000)=',&\x00', 0x2, &(0x7f0000000040)={@align=0x3, {0x8, 0x0, 0xc, 0x1}}, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x7})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
accept4(r1, 0x0, 0x0, 0x80800)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@multicast2, @broadcast}, &(0x7f0000000280)=0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e5000300000000000600000000000000250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r3)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r6=>0x0})
sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010736bd7000ffdbdf250100000008000300", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x4000000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, 0x0, 0x0)
writev(r2, 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180), 0x8)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
r8 = socket$inet6(0xa, 0x2, 0x0)
ioctl$XFS_IOC_FSINUMBERS(r8, 0xc0205867, 0x0)
socket(0x11, 0xa, 0x0)
shutdown(r0, 0x0)

1m11.421829654s ago: executing program 2 (id=4041):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000}, 0x90)

1m11.289782075s ago: executing program 1 (id=4042):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x70, 0x30, 0x871a15abc695f20d, 0x0, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x4000000, 0xffffffffffffffff, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}]}, {0x4}, {0xfffffffffffffd80}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020005000c"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040)
shutdown(r2, 0x1)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000040)='%pS    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r7, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)=@ethtool_cmd={0x2f, 0x4, 0xfffffffb, 0x0, 0x0, 0x6, 0x2, 0xfe, 0xd, 0x0, 0x0, 0x201, 0x9, 0x0, 0x0, 0x45, [0xf3, 0x100089ff]}})
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0x3e, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r8)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000040))
close(r6)
close(0x4)
sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000015000100f7ffffff0200000009000000"], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x44)

1m11.240614925s ago: executing program 2 (id=4043):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x84, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a18}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x44, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x8001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x401}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x5d8c9978}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x8000002)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x18, 0x30, 0x25, 0x70bd2b, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c)
socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e978000000000000", @ANYRES16=r4], 0x20}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001200192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000040000000000000003000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000180000085000000b700000095"], &(0x7f0000000380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000240)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0xfffffffe}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0xe187}, @ETHTOOL_A_COALESCE_RX_USECS={0xfffffffffffffcb9, 0x2, 0xfffffffa}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000c811)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="24000c000000dd8d0000000000000000020000000000000600000000"], 0x24}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r7)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r7, &(0x7f0000002100)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002040)={0x14, r8, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x20004000)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r9, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r10=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r9, 0x84, 0x71, &(0x7f0000000080)={<r11=>r10, 0x8}, &(0x7f00000000c0)=0x8)
sendmmsg$inet_sctp(r9, &(0x7f0000003640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x208, 0xff, 0x8, r11}}], 0x20, 0x4c004}], 0x1, 0x10)

1m11.217314374s ago: executing program 3 (id=4044):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="850000008b0000007600000000000000270000000000b6dd9500000000000000990415e9fdddf411b40e47fe918fb8a776e6697c77f9c32feeb75916fc7f88ebc92863f7341e8323af3bccd0"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x14, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23)
writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000800)='//', 0x2}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00')

1m11.153182228s ago: executing program 3 (id=4045):
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x35c, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r1, 0x400448cc, &(0x7f0000000100))
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x4, 0x2, 0x7, 0x0, 0x1, 0x2e92}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r5, @ANYBLOB="050026bd7000fedbdf250f00000008000300", @ANYRES32, @ANYBLOB="67000e0080000000080211000000080211000000ffffffffffff00000800000000000000640f747f368c"], 0xa0}, 0x1, 0x0, 0x0, 0x4010}, 0x20000014)
socket$kcm(0x29, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)={0x18, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x20042884}, 0x10)

1m11.148606162s ago: executing program 0 (id=4046):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020085007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m11.025361616s ago: executing program 0 (id=4048):
unshare(0x22020600)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2f0, 0xffffffff, 0xa8, 0xa8, 0x0, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast1, @empty, 0xffffff00, 0xff, 'veth0_virt_wifi\x00', 'vlan0\x00', {0xff}, {}, 0x1, 0x2, 0x20}, 0x0, 0x70, 0xa8, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x3}, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x0, 0x62}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'team_slave_0\x00', 'team0\x00', {0xff}, {}, 0x62, 0x3, 0xc}, 0x287, 0xb8, 0x118, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00', 0x3}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x3, 0x2, 0x0, 0x4], 0x1, 0x3}, {0x0, [0x6, 0x5, 0x6, 0x0, 0x5], 0x1, 0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x350)

1m10.715970155s ago: executing program 0 (id=4050):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0xc6e9f000)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0xd1383000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={<r3=>0x0, 0x111}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={r3, 0x3}, &(0x7f0000000140)=0x8)
r4 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r5 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10)
sendmsg$tipc(r5, &(0x7f0000002340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x2, 0x4000}, 0xfffffffb}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc000}, 0x0)
bind$tipc(r4, 0x0, 0x0)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x1000)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0xffffc000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0xc6e9f000) (async)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0xd1383000) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x111}, &(0x7f0000000080)=0x8) (async)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={r3, 0x3}, &(0x7f0000000140)=0x8) (async)
socket$tipc(0x1e, 0x2, 0x0) (async)
bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async)
socket$tipc(0x1e, 0x2, 0x0) (async)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) (async)
sendmsg$tipc(r5, &(0x7f0000002340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x2, 0x4000}, 0xfffffffb}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc000}, 0x0) (async)
bind$tipc(r4, 0x0, 0x0) (async)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x1000) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0xffffc000) (async)

1m10.467870244s ago: executing program 2 (id=4051):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', <r1=>0x0, 0x0, 0x700, 0x0, 0xc, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x65, 0x0, 0x0, 0x4, 0x0, @broadcast, @loopback}}}})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
close(r2) (async, rerun: 32)
accept4$unix(r2, 0x0, 0x0, 0x80000) (async, rerun: 32)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=<r3=>0x0)
connect$nfc_llcp(r2, &(0x7f0000000040)={0x27, r3, 0x1, 0x1, 0x8, 0x23, "02d395f9f5830975bce68eec241ffe4d5a2f287e0c59ac57e9c07bc716bdff2861eb3a57b90f17457f0d2a3af9ae108acf994ab282a62778a307c253a86bec", 0x2e}, 0x60) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000200)={'tunl0\x00', r1, 0x40, 0x1, 0x2, 0x9, {{0x5, 0x4, 0x1, 0x5, 0x14, 0x66, 0x0, 0xea, 0x2f, 0x0, @local, @multicast2}}}})

1m10.218843662s ago: executing program 3 (id=4052):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0200001900010025bd700000000000ac1414030000000000000000000000000000000000000000000000000000000000000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0)

1m10.052787102s ago: executing program 0 (id=4053):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x19, 0x0, 0x4, 0x2}, 0x50)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, 0x0)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x90)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x28880)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x40000000, 0x0, 0x0}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x30, 0x0, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfc, {{0x12}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x810)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x7}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8001}]}, 0x2c}}, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0x1, @private0, 0x6a69}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={0x0, 0xf, 0x30}, 0xc)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x10) (fail_nth: 2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000200000000000000000000000a030000000000000063"], 0x0, 0x52}, 0x28)
socket$kcm(0x10, 0x2, 0x0)

1m10.008303244s ago: executing program 3 (id=4054):
r0 = socket$tipc(0x1e, 0x2, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@volatile={0x0, 0x0, 0x0, 0xa}, @struct={0x0, 0x0, 0x0, 0x4, 0x1}]}}, &(0x7f0000000340)=""/184, 0x32, 0xb8, 0x1}, 0x28)
bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) (async)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x40, 0x4, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008050}, 0x80)
r3 = socket$tipc(0x1e, 0x5, 0x0) (async, rerun: 64)
getpeername$tipc(r1, &(0x7f0000000040), &(0x7f0000000240)=0x10) (rerun: 64)
bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x3}}, 0x10) (async)
bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) (async)
bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10)
bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x4}}, 0x10) (async, rerun: 64)
r4 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 64)
sendmsg$tipc(r4, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x4)

1m9.896024038s ago: executing program 0 (id=4056):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func]}}, 0x0, 0x26}, 0x28)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
socket(0x10, 0x803, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x11, 0x80a, 0x0)
socket$kcm(0x2, 0xa, 0x2)
socket$inet_sctp(0x2, 0x1, 0x84)
r4 = socket$tipc(0x1e, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r4], 0xc4}}, 0x8d0)
setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000100)='~', 0x1)
setsockopt$inet_opts(r3, 0x0, 0xc, &(0x7f0000000000)="c1", 0x1)
getsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f0000000040)=""/19, &(0x7f0000000080)=0x13)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r7)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
socket$kcm(0x11, 0x3, 0x0)
socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

1m9.718533319s ago: executing program 4 (id=4058):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000fefffffffffffd8000000000000000000000000000bbac1414bb000000000000000000000000ffffff2b6b57a470b83fce00000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000032000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d33c"], 0x1ac}}, 0x0)

1m9.596224264s ago: executing program 3 (id=4059):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="b601000000000000bd110000000000008510000002000000850000007600000095004100000000009500a5050000000077d8f3b4000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d75357f21699cdc6751dfb265a0e3ccae669e173a649c1cfd6587d472d64e7cc955d77578f4c35235138d5421f9453559c35da860e8ef14142b2a3e314422b854421eed734ceb1efeecb9c66854c3b3ffe1b4ce25d7c983c005c03bf3a48dfe3e26e7a23129d6606fd28a697a9d552af6d9a9df2c3af333e2008e11bbec0727cb3f647535deb6277f5696833a71011a7d06602e2fd5234712596b696418f163d1a13ed38a682f87925bfa753f631cd027edd68149ee99eebc6f7d6dd4ae59af7588c8e1f4efab57644ccb1973d7879b70a70001040000000000000000d7900a820b63278f4e9a217b98ef7042ad2a923132f208fd8289eaf8cd00000000000009d27d753a300800000000000000a5686f2fccc33e3e34c3969c5ad781302d40e97a8ad10ce0cbe17366d5ac6af2fca2360a15b80400d52040ef7b28d300747877e176fe4c4b8e40dbf260f5a9f7eee30293c1b163b795d0aef4deb851a30000f569dc8f39943f889008e1ec914faa9e6cd0b3b4b3b5db666ebeb49d6a62019d76459e70b459543c4ac42e53b4ad4c77cff373ebd95848f01864e456969cd28000170996016aceb583df5ee4dd722e8c350af489f9a900000000a0dcc36b3d7c734a9cce0439f832a20d7cbdcda5dff3ba92dd66afb9d74aa222038994dcd3e7784dbea1e51a15b0f1a040cc63177f8fafa3192fc8e5552da1a982ab8dfe31ad1a0968faa47c2069d6bf09c3aa4f0fc128cb578d99b08a150b4cc4b22f6a464c6398c952519818a44a1b223ff502df87865c276588ea478e328e8277e811b99ce1acfecaf8e2c55ccc4b8eae0a61635514e99ffd438784060f23ba74c0b30b1180d935832deb686d789ba1d436d116394534e88492a42b8bf050c719661a2dc50b3a1dcfbc871e5c27e3d7260f6fa589e40000b89db451ff994845f6b49c12e89291398bcb3c06ef1289f74e0b0e2cab592d35f82a69e7284223a171c616b1f0fee6c4711d7aecb69746064d2c096554975d605ebe646302bf3d5cf32a9a09915ae3f3d4eb96615d7b237da56cd5e9904a19e145f25b6d98eb2c019967f553b61d0e80d6913cee9f8d18469a654a239a84a85debbc02846ac5791278f18c6759e3b513a68284d2efc30587e433431b2896a3bd48020af67e9ac071b2dd6dc3b9efae4ff03558fa619aea909c7f2416e7e7da1c51ccc7e6ac27412f728dc6d80da8adf317ca863ed683897321f8c8bb5a5d953d6783b7a06353ee496bbdff418de3e53234df87756eb99e330253cf5da4aa1a9648a38f07e2d302b4165983db4f7b8972923fffa8c03c288512a3a38fbd7c816a44634f7a03fab30811b7b93257bea4369ba46024dee5e9b0b2c3d3324e9b7c1f99ab9bb3f498b1485373b79ec84a67dad4e37575dab87ce55a9a69ed856a4c4410d1242ac1bd1539094a641cc086c2c53e363beafc74ab4e9ff320373705cbf5644586ffe60d293944fa2d9dc18b55f1af5c42f27747bef1ffd0c1766f062d47d61bf9f64e6ee288fa7fc12d48da526527b9f5c318c93ec447cb8b5eee7aa8a1e85696af3dfef96657c0545c8ebd96528d9c28828e5befd80d684b03b6d153da3e3cbd3bfbf4a9375b8ad04a1d241bcb5d5505cb6cc7a44e2e24bd0b1ca4879caaff59d0ce39dc7f3fea447f4e46967855208e63ec988bd2692afefbed2b001205e4b30ee8fe417defa566a73ace8f01f7181de0ef25f1744896a3c38859e6148c42454949cd64b1a888e7fe9c2d86bb01023b6ddeb67f5eb038af3e460c771518a4126c338b0390d459361e03adf6e6b558b3651a0e33d101b5febfff82794203da18db6fcf89715c2d338f78d8b9220171b41f528f857a7cb79ca990de1208777e13faaa9b9cb9e67797b07d9eb9e909410b50c5d981d9a72aa36498b630519d1530ef0000000000000000000037fcffffffffffffff8db8379bd2044c652dff399a9f8bfa4e9c507f049d18837464276830461ee203ba51f6102d262fc9a26bc3638ecce24e65c55da6efaa462f03d0e119c963a8c7a522b59f5a7b44d018cb2648383073d9e032492cae44350bc0a85697f431392eb22cae093e85954af97d6d7b2e6e8f43353062275ad1578a431594243452a2bfb89f91d8eaac038e9e17136e7c698f73faaabb3d00000000000080014573789425c4c32da528d89356aa6d2ae6da082e756c80cf39053431080ea6cbf9997a5a0ddad0b9d12bc3f880476ab32f0feaac5f16e61f7b72b8c9082eec423c6b3eaecfdcc9ec72795e7696421c83b76c2d6bac19bc875d009679778d8ef97d7e05329649d97b0dc54bea9b650873de2d3d702690176e0b23ee5cb5e469a8d1612d611722e6200e3a297d92f8e1de98326c5ef2b89d4e2d47767cd755783e5d865e373338e96ceb8399f296c59b2d70ca27735ecaff62982616d3ac1ab041733bce119d8002a6c8a2b08b32551b2313b1a2ff41b3f04af61c69c85cb2da48215727271bac2ffdeb62d9f5dc4845f1c3f63dc806e615ee8d28d6d7f181e30807afa27f41d0364c746a65a47464db68f3c433d88dd625db35fded2c86d75af88efaf20c8b37c644b6c4e773a9589200faa553bc92f916b75ddbfa18ab73979f46947b35914286d2499a0b8c970000000000000000f4fe74e0c26ab52329bd600627b256ca44dd121ffc8dbb6e5f70cbe03efccac70375b30cc927574d254d1b46c607e8b1ca7d1511568c3ef4b6b885f4582bdcef74e5e010627fc8e4fe00000000000000000000869d9640f06b11df2971909b90133983308ea4f033de613763f32d913bcbe9dd082a6fff197a20730269e6cfd31275395833f1c2b8a50a94c30cceae2a11fe9b9b835d0da73891c0b3ce22dea6bf31e7f51808cf72f44b4455b77a778440795e152dc1b7bb0a5636aa4742ce4d331a47de5836539cdf289176527277b70c8162aaf6f9475418b478329f3565450acfaf07000000eab8cabfa97e35081967bb92a264b07e8003d2f15537e72a1e4ca5ec1e2aaaf8236ecdefbaf512c75e636b6b6f518ad20521f909b12e9bc97e408e0dc82f950d12705f35708bc862196abb27e8d7991b5273987f38c4706289ff4f6130cee76465d487a07a74452f87da2029bd3debd9870335d58d3fe1ac80574fa3ea312997ab81bc6f569ffdb10ba3f20a86d95128d13e0c778998d3b3114bfb07bd61e4bff8a5e2ce4aa572c63e09b44ca4a181bcfe4eec3ce843c65c4948169fe639a186acc2b4a96c6b8d4d2e6d53ab97bea01eab953e6e89e3af34d4ada217bc6fda0fb2095c49195d0d6f365ca80a955b9ec81240a84ef672afa369fc8e3d444ba35d0f51a0065a3b982d09dfc6874fc0d8079b185447cb8a695e132d4d613a529d9c77e2a8f7320ecf698e8a2b170fd601dc1a9767a38b10788e92d1356f6a6c1bcfb2d31b46e735db13f1be80bac1b6be04fd98610000000000000000000000000000139af5493f74751c5e2501a4936bc4a0fa516117f4ccadc692003adee0a080eba2f1059660c0ee0e9aec72d4d0fe095632e4f641b0e34c611c5b3e0ba05fa36542d40837dda323910672a9097d68398fd3539686e4288db0d6bf7cb8a1835f46dfe11865a66ef47e736dada06677a5bca133d6cbc8fe5c4557e51b006bdccd7c5f32ff1d9e8b130f77df09236870fb3de5b87b4f8acc13df534eba329b86670000000000000000b27a2616c03cdf6c009447a652bca9b325e73c0737d5b717945e4fe7a169c5e2c54fc71a4104aa7cf0f5d30e2fcd9503650edbd8a5971a9a1fde5e5df37469ae204a6e899eacc1e63034cbabc5604739881cb82604bed3e53696a0606b26b879ef232a1a038291389593d1575cb79aa8284cf01a7e1a456acab9d8d608ad69d4c4b56492af7004e7ed9d47c5db3d76a00bea7c804f3a3638408bc1636f1009b7f185f51606918eaa0ab6bef11ae3d300"], &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

1m9.496754579s ago: executing program 4 (id=4060):
unshare(0x22020600)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2f0, 0xffffffff, 0xa8, 0xa8, 0x0, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast1, @empty, 0xffffff00, 0xff, 'veth0_virt_wifi\x00', 'vlan0\x00', {0xff}, {}, 0x1, 0x2, 0x20}, 0x0, 0x70, 0xa8, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x3}, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x0, 0x11e}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'team_slave_0\x00', 'team0\x00', {0xff}, {}, 0x62, 0x3, 0xc}, 0x287, 0xb8, 0x118, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00', 0x3}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x3, 0x2, 0x0, 0x4], 0x1, 0x3}, {0x0, [0x6, 0x5, 0x6, 0x0, 0x5], 0x1, 0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x350)

1m9.406080004s ago: executing program 3 (id=4061):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000080000", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r3)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000182c94671d6c2d4900b8ffffff04000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e0000000400000004000000eeff", @ANYBLOB], 0x50)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000004600000046000000030000000b0000000000000204000000040000000000000e0000000b050000000100000000006d0002000000ffffffff0100000000003f0f020000005d330000002e00"/99], &(0x7f0000000840)=""/137, 0x63, 0x89, 0x0, 0x3}, 0x28)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80701, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x27)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001b00)={0xffffffffffffffff, 0x20, &(0x7f0000001ac0)={&(0x7f00000009c0)=""/4096, 0x1000, <r7=>0x0, &(0x7f00000019c0)=""/239, 0xef}}, 0x10)
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001bc0)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="18110000", @ANYRES32=r5, @ANYBLOB="6f00000100000000b702000000000000850000009f000000c1690100040000e693990008060000000d7bc0ff010000001800000000e572e9c050a10101000000"], &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, &(0x7f0000000240), 0x40f00, 0x0, '\x00', 0x0, 0x1b, r6, 0x8, &(0x7f0000000940)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000980)={0x0, 0xd, 0xfff, 0x6018}, 0x10, r7, 0x0, 0x9, &(0x7f0000001b40), &(0x7f00000003c0)=[{0x2, 0x1, 0xe, 0x4}, {0x5, 0x4, 0x4, 0x7}, {0x4, 0x4, 0xb, 0x1}, {0x4, 0x4, 0x2, 0x1}, {0x1, 0x4, 0xf}, {0x2, 0x1, 0x4, 0xa}, {0x5, 0x2, 0x10, 0x8}, {0x2, 0x4, 0x6, 0xc}, {0x2, 0x4, 0xd}], 0x10, 0x4}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r8}, 0x8)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r5, @ANYRESDEC=r4], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
r11 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_ifreq(r11, 0x8931, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_names='ip6_vti0\x00'})
ioctl$sock_proto_private(r11, 0x8b2c, &(0x7f0000000080))
r12 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r12, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r12, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r12, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc)
r13 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r13, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
write$rfkill(r13, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r14=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r9, r14, 0x25, 0x2, @void}, 0x10)
r15 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, 0x0)

1m9.116226576s ago: executing program 4 (id=4062):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x114}, 0x1, 0xa4}, 0x0)

1m9.102631543s ago: executing program 4 (id=4063):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020095007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m9.028869992s ago: executing program 4 (id=4064):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xb83297c01978451f}, 0x48)

1m8.924306251s ago: executing program 4 (id=4065):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0x6, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0)
close(r2)
write(r0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_buf(r5, 0x6, 0xb, 0x0, &(0x7f0000001c00))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000199f54ffff100000009500"/32], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

1m8.675056454s ago: executing program 2 (id=4066):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x348, 0x10, 0x200, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_VFINFO_LIST={0x328, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x6, 0x8001}}]}, {0x40, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xfe, 0xe}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x0, 0x7}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x5, 0x16b}}, @IFLA_VF_VLAN={0x10, 0x2, {0x3, 0xa92, 0x4}}]}, {0x10c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x90, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x401, 0x5ee, 0xa58c, 0x8100}}, {0x14, 0x1, {0x3, 0x2a, 0x0, 0x8100}}, {0x14, 0x1, {0x2, 0x2a7, 0x4, 0x88a8}}, {0x14, 0x1, {0x0, 0xf7a, 0x8e4, 0x8100}}, {0x14, 0x1, {0x4, 0x101, 0x2, 0x8100}}, {0x14, 0x1, {0x7fff, 0xda6, 0x5, 0x8100}}, {0x14, 0x1, {0x8, 0xa88, 0x9, 0x8100}}]}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x1, 0x80000000}}, @IFLA_VF_VLAN={0x10, 0x2, {0x2a, 0x987, 0x5e45}}, @IFLA_VF_VLAN={0x10, 0x2, {0x2d30000, 0x785, 0x2}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x2, 0x32c}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x3, 0x2}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xf}}, @IFLA_VF_TRUST={0xc, 0x9, {0x7fff, 0x3}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x4, 0x7f}}]}, {0x174, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x9, 0x9}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x6042, 0x40}}, @IFLA_VF_SPOOFCHK={0x3, 0x4, {0xa22, 0xfffffff9}}, @IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x0, 0xe55, 0xb, 0x8100}}]}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x5, 0x1}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x3, 0xfff}}, @IFLA_VF_VLAN={0x10, 0x2, {0x8c5d, 0x817, 0xff}}, @IFLA_VF_VLAN_LIST={0xb8, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xfffffff7, 0x306, 0x59}}, {0x14, 0x1, {0x400, 0x4f3, 0x0, 0x88a8}}, {0x14, 0x1, {0x8, 0xae1, 0x9, 0x88a8}}, {0x14, 0x1, {0x1, 0x763, 0x5, 0x8100}}, {0x14, 0x1, {0x1, 0x9bf, 0x7f88, 0x88a8}}, {0x14, 0x1, {0x9, 0x647, 0x5, 0x8100}}, {0x14, 0x1, {0x7, 0x423, 0x4, 0x88a8}}, {0x14, 0x1, {0xa, 0x23c, 0x5, 0x8100}}, {0x14, 0x1, {0x7f, 0x9ab, 0x6, 0x8100}}]}, @IFLA_VF_VLAN={0x10, 0x2, {0x4, 0x41d, 0x9}}, @IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x9, 0xb99, 0xc5, 0x88a8}}, {0x14, 0x1, {0x6b1, 0x5bc, 0x0, 0x88a8}}]}]}, {0x4c, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x1, 0x8}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x8, 0xfffffff7}}, @IFLA_VF_VLAN={0x10, 0x2, {0x7fff, 0xd63, 0x1}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x6ba, 0x4}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x7, 0x194}}]}]}]}, 0x348}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x348, 0x10, 0x200, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_VFINFO_LIST={0x328, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x6, 0x8001}}]}, {0x40, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xfe, 0xe}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x0, 0x7}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x5, 0x16b}}, @IFLA_VF_VLAN={0x10, 0x2, {0x3, 0xa92, 0x4}}]}, {0x10c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x90, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x401, 0x5ee, 0xa58c, 0x8100}}, {0x14, 0x1, {0x3, 0x2a, 0x0, 0x8100}}, {0x14, 0x1, {0x2, 0x2a7, 0x4, 0x88a8}}, {0x14, 0x1, {0x0, 0xf7a, 0x8e4, 0x8100}}, {0x14, 0x1, {0x4, 0x101, 0x2, 0x8100}}, {0x14, 0x1, {0x7fff, 0xda6, 0x5, 0x8100}}, {0x14, 0x1, {0x8, 0xa88, 0x9, 0x8100}}]}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x1, 0x80000000}}, @IFLA_VF_VLAN={0x10, 0x2, {0x2a, 0x987, 0x5e45}}, @IFLA_VF_VLAN={0x10, 0x2, {0x2d30000, 0x785, 0x2}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x2, 0x32c}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x3, 0x2}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xf}}, @IFLA_VF_TRUST={0xc, 0x9, {0x7fff, 0x3}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x4, 0x7f}}]}, {0x174, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x9, 0x9}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x6042, 0x40}}, @IFLA_VF_SPOOFCHK={0x3, 0x4, {0xa22, 0xfffffff9}}, @IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x0, 0xe55, 0xb, 0x8100}}]}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x5, 0x1}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x3, 0xfff}}, @IFLA_VF_VLAN={0x10, 0x2, {0x8c5d, 0x817, 0xff}}, @IFLA_VF_VLAN_LIST={0xb8, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xfffffff7, 0x306, 0x59}}, {0x14, 0x1, {0x400, 0x4f3, 0x0, 0x88a8}}, {0x14, 0x1, {0x8, 0xae1, 0x9, 0x88a8}}, {0x14, 0x1, {0x1, 0x763, 0x5, 0x8100}}, {0x14, 0x1, {0x1, 0x9bf, 0x7f88, 0x88a8}}, {0x14, 0x1, {0x9, 0x647, 0x5, 0x8100}}, {0x14, 0x1, {0x7, 0x423, 0x4, 0x88a8}}, {0x14, 0x1, {0xa, 0x23c, 0x5, 0x8100}}, {0x14, 0x1, {0x7f, 0x9ab, 0x6, 0x8100}}]}, @IFLA_VF_VLAN={0x10, 0x2, {0x4, 0x41d, 0x9}}, @IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x9, 0xb99, 0xc5, 0x88a8}}, {0x14, 0x1, {0x6b1, 0x5bc, 0x0, 0x88a8}}]}]}, {0x4c, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x1, 0x8}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x8, 0xfffffff7}}, @IFLA_VF_VLAN={0x10, 0x2, {0x7fff, 0xd63, 0x1}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x6ba, 0x4}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x7, 0x194}}]}]}]}, 0x348}}, 0x0)

1m8.674341788s ago: executing program 1 (id=4067):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0x8}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x2000000)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)={0x38, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r5, 0x215eb000)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', 0x0})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r7)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c)
listen(r7, 0x9)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
r9 = accept(r7, 0x0, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
writev(r9, &(0x7f00000003c0)=[{&(0x7f00000002c0)="390000001300034700000000c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff080004000000000000000042a47bf6275137277296214e21b4736557bc47929fb15f339599b6f4a75c703db114355c1c7fc97a7df899732605e0be69fda0450d1f487f40bdd962541a9b1e2feec7cfb655c5648170680367877fe0762ef369827730052c37d940c96aca81da9c68f5c5d8bbee8abee2cf3e1fc17a406d0b63", 0xad}], 0x1)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="010000ff1f00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}, 0x1, 0x0, 0x0, 0x41}, 0x4000000)
r11 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_mtu(r11, 0x29, 0x17, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)

1m8.353429147s ago: executing program 2 (id=4068):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r2, 0x107, 0xa, 0x0, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)={0x18, 0x47, 0x107, 0xfffffffe, 0xffffffff, {0x1, 0x7c}, [@nested={0x4, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r3 = socket$inet(0x2, 0x2, 0x0)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000002060104000000b41f000000020000090900020073797a3000000000050005000200000005000400020000000c000780080009400000000110000300686173683a69702c6d6163000500010007"], 0x54}, 0x1, 0x0, 0x0, 0x44841}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYRES64], 0x7c}}, 0x0)
sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000001c0)={0x3c, 0x8, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x3c}}, 0x20004004)
sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x4000800)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)="00a096119d", 0x5}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), 0x4)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x5c, r7, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r8=>0x0})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x114, 0x1, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xf4, 0x6, "7116e315f1d2269ebf05ed42769483d2df8c5f8e71ca4f3f97228d25eb1d25b00f267f4b51cd2f66b21f31a2e0310885a11a4cfa363ff0460ca8a51172aa71d3ea761eebfbba7d7f60c4caac0d7025452b607fdffa48daf956c17b465fcce2cff6babb0a5f765a87e7941319564297c0282da3fbb580276d8ea09ade7a641ca51b52a78129f627891365fd7dc42e9d15ed9f3426e91f6b0ba7cdd005819102d68c6cbc464e676ed51071d6e324b88bbe8e2c7810ddeeb6be36751ef1d4767fef0103ec2554cdf58c489f9c08ef1f4d98ee8455cf19fef59a188243d6002bcf9f820222cb79b6259f009a8970142e61f2"}]}, 0x114}}, 0x24040000)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000980)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYRES64=r5, @ANYRES32=r8, @ANYBLOB="0a00180003030303030300000c00178004000008021100000100002400178004000300040004000400040004000100040001000400850304000300040003000a00e8000802110000f2ffff1b00178004000600040004000400020100000cbe04000100040004000c00178004000600040004000a00e80008021100000100001c00178004000200040004"], 0xd4}, 0x1, 0x0, 0x0, 0x4008094}, 0x40000)

0s ago: executing program 32 (id=4056):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func]}}, 0x0, 0x26}, 0x28)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
socket(0x10, 0x803, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x11, 0x80a, 0x0)
socket$kcm(0x2, 0xa, 0x2)
socket$inet_sctp(0x2, 0x1, 0x84)
r4 = socket$tipc(0x1e, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r4], 0xc4}}, 0x8d0)
setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000100)='~', 0x1)
setsockopt$inet_opts(r3, 0x0, 0xc, &(0x7f0000000000)="c1", 0x1)
getsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f0000000040)=""/19, &(0x7f0000000080)=0x13)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r7)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
socket$kcm(0x11, 0x3, 0x0)
socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

kernel console output (not intermixed with test programs):

im0: renamed from eth0
[  336.934190][T16324] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  336.965922][T16324] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  337.038744][T16324] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  337.081576][T16324] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  337.137722][T16324] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  337.172026][T16324] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  337.212994][T16324] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  337.492792][T16660] pim6reg1: entered promiscuous mode
[  337.510341][T16660] pim6reg1: entered allmulticast mode
[  337.891951][T16324] 8021q: adding VLAN 0 to HW filter on device bond0
[  337.982532][T16324] 8021q: adding VLAN 0 to HW filter on device team0
[  338.025596][ T6514] bridge0: port 1(bridge_slave_0) entered blocking state
[  338.032808][ T6514] bridge0: port 1(bridge_slave_0) entered forwarding state
[  338.037558][T16703] netlink: 'syz.3.3005': attribute type 4 has an invalid length.
[  338.085803][T12646] bridge0: port 2(bridge_slave_1) entered blocking state
[  338.093049][T12646] bridge0: port 2(bridge_slave_1) entered forwarding state
[  338.244633][T16713] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3007'.
[  338.275081][T16713] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3007'.
[  338.487895][T16723] pim6reg1: entered promiscuous mode
[  338.512501][T16723] pim6reg1: entered allmulticast mode
[  339.495902][T16772] pim6reg1: entered promiscuous mode
[  339.528407][T16772] pim6reg1: entered allmulticast mode
[  339.662320][T16781] Cannot find add_set index 0 as target
[  339.745694][T16778] tipc: Started in network mode
[  339.752133][T16778] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[  339.769386][T16778] tipc: Enabled bearer <eth:vlan0>, priority 30
[  339.816298][T16324] 8021q: adding VLAN 0 to HW filter on device batadv0
[  339.920298][T16324] veth0_vlan: entered promiscuous mode
[  339.965663][T16324] veth1_vlan: entered promiscuous mode
[  340.076109][T16324] veth0_macvtap: entered promiscuous mode
[  340.116796][T16324] veth1_macvtap: entered promiscuous mode
[  340.138658][T16808] xt_TPROXY: Can be used only with -p tcp or -p udp
[  340.206791][T16324] batman_adv: batadv0: Interface activated: batadv_slave_0
[  340.249830][T16814] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  340.260417][T16814] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  340.263217][T16324] batman_adv: batadv0: Interface activated: batadv_slave_1
[  340.340570][T12642] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  340.410264][T12642] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  340.421774][T12642] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  340.450829][ T6512] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  340.639396][T12642] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  340.653933][T12642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  340.752181][ T6512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  340.779316][ T6512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  340.881020][   T29] tipc: Node number set to 10005162
[  340.934357][T16831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3036'.
[  340.958419][T16831] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3036'.
[  341.160767][T16836] pim6reg1: entered promiscuous mode
[  341.212498][T16836] pim6reg1: entered allmulticast mode
[  341.389253][T16850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3044'.
[  341.427262][T16852] Cannot find add_set index 0 as target
[  341.449839][T16852] FAULT_INJECTION: forcing a failure.
[  341.449839][T16852] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  341.499822][T16852] CPU: 0 UID: 0 PID: 16852 Comm: syz.1.3043 Not tainted syzkaller #0 PREEMPT(full) 
[  341.499847][T16852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  341.499857][T16852] Call Trace:
[  341.499864][T16852]  <TASK>
[  341.499871][T16852]  dump_stack_lvl+0xe8/0x150
[  341.499901][T16852]  should_fail_ex+0x40c/0x560
[  341.499925][T16852]  _copy_to_user+0x31/0xb0
[  341.499950][T16852]  simple_read_from_buffer+0xe1/0x170
[  341.499977][T16852]  proc_fail_nth_read+0x1bb/0x230
[  341.500003][T16852]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  341.500029][T16852]  ? rw_verify_area+0x24a/0x4c0
[  341.500055][T16852]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  341.500085][T16852]  vfs_read+0x213/0xa80
[  341.500116][T16852]  ? __pfx_vfs_read+0x10/0x10
[  341.500137][T16852]  ? smc_setsockopt+0x49b/0xb00
[  341.500161][T16852]  ? __local_bh_enable_ip+0xd0/0x130
[  341.500179][T16852]  ? lockdep_hardirqs_on+0x7a/0x110
[  341.500203][T16852]  ? smc_setsockopt+0x49b/0xb00
[  341.500225][T16852]  ? __local_bh_enable_ip+0xd0/0x130
[  341.500242][T16852]  ? smc_setsockopt+0x49b/0xb00
[  341.500278][T16852]  ksys_read+0x150/0x270
[  341.500304][T16852]  ? __pfx_ksys_read+0x10/0x10
[  341.500335][T16852]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  341.500354][T16852]  do_syscall_64+0x174/0x580
[  341.500377][T16852]  ? trace_irq_disable+0x3b/0x140
[  341.500397][T16852]  ? clear_bhb_loop+0x70/0xc0
[  341.500417][T16852]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  341.500434][T16852] RIP: 0033:0x7f28f1b5e90e
[  341.500451][T16852] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  341.500466][T16852] RSP: 002b:00007f28f29e1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  341.500484][T16852] RAX: ffffffffffffffda RBX: 00007f28f29e26c0 RCX: 00007f28f1b5e90e
[  341.500497][T16852] RDX: 000000000000000f RSI: 00007f28f29e20a0 RDI: 0000000000000004
[  341.500507][T16852] RBP: 00007f28f29e2090 R08: 0000000000000000 R09: 0000000000000000
[  341.500517][T16852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  341.500528][T16852] R13: 00007f28f1e26038 R14: 00007f28f1e25fa0 R15: 00007ffe30f40558
[  341.500555][T16852]  </TASK>
[  341.797806][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  341.864649][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  341.883348][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  341.917362][ T5612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  341.927740][ T5612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  342.000926][T16864] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3045'.
[  342.109010][T16864] vlan2: entered promiscuous mode
[  342.115156][T16864] veth0: entered promiscuous mode
[  342.621931][T16896] netlink: 'syz.3.3055': attribute type 5 has an invalid length.
[  342.700049][T16897] netlink: 'syz.3.3055': attribute type 30 has an invalid length.
[  342.837316][T16896] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3055'.
[  342.891621][T16896] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3055'.
[  342.904396][T16898] pim6reg1: entered promiscuous mode
[  342.917007][T16907] Cannot find add_set index 0 as target
[  342.923681][T16898] pim6reg1: entered allmulticast mode
[  343.184322][T16921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3060'.
[  343.643726][T16948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3069'.
[  344.050070][ T5612] Bluetooth: hci0: command tx timeout
[  344.065403][T16959] pim6reg1: entered promiscuous mode
[  344.079818][T16959] pim6reg1: entered allmulticast mode
[  344.168132][T16966] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3072'.
[  344.288044][T16856] bridge0: port 1(bridge_slave_0) entered blocking state
[  344.309261][T16856] bridge0: port 1(bridge_slave_0) entered disabled state
[  344.325390][T16856] bridge_slave_0: entered allmulticast mode
[  344.338700][T16856] bridge_slave_0: entered promiscuous mode
[  344.412685][T16856] bridge0: port 2(bridge_slave_1) entered blocking state
[  344.434207][T16856] bridge0: port 2(bridge_slave_1) entered disabled state
[  344.444557][T16856] bridge_slave_1: entered allmulticast mode
[  344.463862][T16856] bridge_slave_1: entered promiscuous mode
[  344.535732][T16990] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3081'.
[  344.606377][T16856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  344.653571][T16856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  344.781581][T17002] netlink: 'syz.4.3085': attribute type 4 has an invalid length.
[  344.782760][T16856] team0: Port device team_slave_0 added
[  344.835295][T16856] team0: Port device team_slave_1 added
[  344.941936][T17009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3086'.
[  344.960716][T16856] batman_adv: batadv0: Adding interface: batadv_slave_0
[  344.989363][T16856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  345.033073][T16856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  345.046871][T17004] pim6reg1: entered promiscuous mode
[  345.054320][T17004] pim6reg1: entered allmulticast mode
[  345.081238][T16856] batman_adv: batadv0: Adding interface: batadv_slave_1
[  345.098426][T16856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  345.155787][T16856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  345.167473][T17014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3086'.
[  345.361612][T16856] hsr_slave_0: entered promiscuous mode
[  345.368305][T16856] hsr_slave_1: entered promiscuous mode
[  345.375997][T16856] debugfs: 'hsr0' already exists in 'hsr'
[  345.388961][T16856] Cannot create hsr debugfs directory
[  346.131333][ T5612] Bluetooth: hci0: command tx timeout
[  346.472707][T16856] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  346.485406][T16856] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  346.535869][T17057] pim6reg1: entered promiscuous mode
[  346.551370][T17057] pim6reg1: entered allmulticast mode
[  346.656529][T17070] syzkaller1: entered promiscuous mode
[  346.670495][T17070] syzkaller1: entered allmulticast mode
[  346.918935][T16856] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  346.935622][T16856] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.157020][T16856] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  347.207769][T16856] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.537115][T16856] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  347.567176][T17117] netlink: 'syz.2.3117': attribute type 2 has an invalid length.
[  347.570074][T16856] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.625940][T17122] FAULT_INJECTION: forcing a failure.
[  347.625940][T17122] name failslab, interval 1, probability 0, space 0, times 0
[  347.648795][T17122] CPU: 0 UID: 0 PID: 17122 Comm: syz.3.3120 Not tainted syzkaller #0 PREEMPT(full) 
[  347.648825][T17122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  347.648835][T17122] Call Trace:
[  347.648842][T17122]  <TASK>
[  347.648848][T17122]  dump_stack_lvl+0xe8/0x150
[  347.648965][T17122]  should_fail_ex+0x40c/0x560
[  347.649081][T17122]  should_failslab+0xa8/0x100
[  347.649127][T17122]  __kmalloc_noprof+0xfe/0x720
[  347.649154][T17122]  ? rcu_is_watching+0x15/0xb0
[  347.649190][T17122]  ? tomoyo_realpath_from_path+0xef/0x640
[  347.649278][T17122]  ? tomoyo_realpath_from_path+0xef/0x640
[  347.649302][T17122]  tomoyo_realpath_from_path+0xef/0x640
[  347.649329][T17122]  ? tomoyo_path_number_perm+0x219/0x5f0
[  347.649346][T17122]  tomoyo_path_number_perm+0x246/0x5f0
[  347.649364][T17122]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  347.649384][T17122]  ? sb_end_write+0xe5/0x190
[  347.649408][T17122]  ? vfs_write+0x9ce/0xba0
[  347.649430][T17122]  ? hook_file_ioctl+0x1f0/0x5f0
[  347.649514][T17122]  ? ksys_write+0x1fc/0x270
[  347.649538][T17122]  security_file_ioctl+0xc3/0x2a0
[  347.649580][T17122]  __se_sys_ioctl+0x47/0x170
[  347.649613][T17122]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  347.649648][T17122]  do_syscall_64+0x174/0x580
[  347.649812][T17122]  ? trace_irq_disable+0x3b/0x140
[  347.649851][T17122]  ? clear_bhb_loop+0x70/0xc0
[  347.649873][T17122]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  347.649890][T17122] RIP: 0033:0x7ff4bc39e0d9
[  347.649908][T17122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  347.649923][T17122] RSP: 002b:00007ff4bd185028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  347.649941][T17122] RAX: ffffffffffffffda RBX: 00007ff4bc625fa0 RCX: 00007ff4bc39e0d9
[  347.649954][T17122] RDX: 0000000000000000 RSI: 0000000000005202 RDI: 0000000000000008
[  347.649972][T17122] RBP: 00007ff4bd185090 R08: 0000000000000000 R09: 0000000000000000
[  347.649982][T17122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  347.649993][T17122] R13: 00007ff4bc626038 R14: 00007ff4bc625fa0 R15: 00007fff8c03a6c8
[  347.650023][T17122]  </TASK>
[  347.894762][T17117] : entered promiscuous mode
[  347.933044][T17122] ERROR: Out of memory at tomoyo_realpath_from_path.
[  348.003870][T17122] pim6reg1: entered promiscuous mode
[  348.009858][T17122] pim6reg1: entered allmulticast mode
[  348.108456][T17136] __nla_validate_parse: 3 callbacks suppressed
[  348.108477][T17136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3122'.
[  348.162494][T17136] vlan4: entered promiscuous mode
[  348.163578][T17143] xt_hashlimit: max too large, truncated to 1048576
[  348.210468][ T5612] Bluetooth: hci0: command tx timeout
[  348.227423][T17149] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3124'.
[  348.279044][T17142] netlink: 280 bytes leftover after parsing attributes in process `syz.3.3124'.
[  348.514663][T17156] netlink: 'syz.2.3127': attribute type 21 has an invalid length.
[  348.544825][T17156] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3127'.
[  348.599199][T17156] netlink: 'syz.2.3127': attribute type 5 has an invalid length.
[  348.613344][T17156] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3127'.
[  348.651321][T17164] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3129'.
[  348.670311][T17159] syzkaller0: entered promiscuous mode
[  348.679207][T17159] syzkaller0: entered allmulticast mode
[  348.722925][T17170] syzkaller0: entered promiscuous mode
[  348.734482][T17170] syzkaller0: entered allmulticast mode
[  348.828192][T17170] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  348.972844][T17180] FAULT_INJECTION: forcing a failure.
[  348.972844][T17180] name failslab, interval 1, probability 0, space 0, times 0
[  348.998493][T17180] CPU: 1 UID: 0 PID: 17180 Comm: syz.1.3133 Not tainted syzkaller #0 PREEMPT(full) 
[  348.998517][T17180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  348.998527][T17180] Call Trace:
[  348.998535][T17180]  <TASK>
[  348.998542][T17180]  dump_stack_lvl+0xe8/0x150
[  348.998571][T17180]  should_fail_ex+0x40c/0x560
[  348.998596][T17180]  should_failslab+0xa8/0x100
[  348.998621][T17180]  __kmalloc_noprof+0xfe/0x720
[  348.998643][T17180]  ? tomoyo_encode+0x2ad/0x570
[  348.998667][T17180]  ? tomoyo_encode+0x2ad/0x570
[  348.998697][T17180]  tomoyo_encode+0x2ad/0x570
[  348.998728][T17180]  tomoyo_realpath_from_path+0x5fa/0x640
[  348.998762][T17180]  ? tomoyo_path_number_perm+0x219/0x5f0
[  348.998784][T17180]  tomoyo_path_number_perm+0x246/0x5f0
[  348.998810][T17180]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  348.998835][T17180]  ? sb_end_write+0xe5/0x190
[  348.998856][T17180]  ? vfs_write+0x9ce/0xba0
[  348.998886][T17180]  ? hook_file_ioctl+0x1f0/0x5f0
[  348.998932][T17180]  ? ksys_write+0x1fc/0x270
[  348.998968][T17180]  security_file_ioctl+0xc3/0x2a0
[  348.998989][T17180]  __se_sys_ioctl+0x47/0x170
[  348.999014][T17180]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.999032][T17180]  do_syscall_64+0x174/0x580
[  348.999056][T17180]  ? trace_irq_disable+0x3b/0x140
[  348.999077][T17180]  ? clear_bhb_loop+0x70/0xc0
[  348.999099][T17180]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.999116][T17180] RIP: 0033:0x7f28f1b9e0d9
[  348.999133][T17180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  348.999147][T17180] RSP: 002b:00007f28f29e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  348.999166][T17180] RAX: ffffffffffffffda RBX: 00007f28f1e25fa0 RCX: 00007f28f1b9e0d9
[  348.999179][T17180] RDX: 0000000000000000 RSI: 0000000000005202 RDI: 0000000000000008
[  348.999190][T17180] RBP: 00007f28f29e2090 R08: 0000000000000000 R09: 0000000000000000
[  348.999204][T17180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  348.999214][T17180] R13: 00007f28f1e26038 R14: 00007f28f1e25fa0 R15: 00007ffe30f40558
[  348.999245][T17180]  </TASK>
[  349.003536][T17180] ERROR: Out of memory at tomoyo_realpath_from_path.
[  349.081871][T17187] xt_hashlimit: max too large, truncated to 1048576
[  349.149522][T17188] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3132'.
[  349.151298][T16856] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  349.268143][T16856] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  349.324558][T16856] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  349.367613][T16856] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  349.402280][T16856] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  349.426575][T16856] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  349.462011][T17180] pim6reg1: entered promiscuous mode
[  349.467656][T17180] pim6reg1: entered allmulticast mode
[  349.497891][T17202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3137'.
[  349.516627][T16856] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  349.545798][T16856] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  349.562617][T17196] pim6reg1: entered promiscuous mode
[  349.568102][T17196] pim6reg1: entered allmulticast mode
[  349.887668][T16856] 8021q: adding VLAN 0 to HW filter on device bond0
[  350.128177][T16856] 8021q: adding VLAN 0 to HW filter on device team0
[  350.159550][T12646] bridge0: port 1(bridge_slave_0) entered blocking state
[  350.166805][T12646] bridge0: port 1(bridge_slave_0) entered forwarding state
[  350.206765][T12646] bridge0: port 2(bridge_slave_1) entered blocking state
[  350.213997][T12646] bridge0: port 2(bridge_slave_1) entered forwarding state
[  350.289798][ T5612] Bluetooth: hci0: command tx timeout
[  350.488899][T17238] netlink: 'syz.1.3147': attribute type 10 has an invalid length.
[  350.510871][T17249] bridge0: port 3(vlan2) entered blocking state
[  350.533662][T17249] bridge0: port 3(vlan2) entered disabled state
[  350.546970][T17249] vlan2: entered allmulticast mode
[  350.584736][T17249] batadv0: entered allmulticast mode
[  350.615407][T17249] vlan2: entered promiscuous mode
[  350.627301][T17249] batadv0: entered promiscuous mode
[  350.642422][T17249] bridge0: port 3(vlan2) entered blocking state
[  350.648872][T17249] bridge0: port 3(vlan2) entered forwarding state
[  351.377451][T16856] 8021q: adding VLAN 0 to HW filter on device batadv0
[  351.535430][T16856] veth0_vlan: entered promiscuous mode
[  351.591121][T16856] veth1_vlan: entered promiscuous mode
[  351.699201][T16856] veth0_macvtap: entered promiscuous mode
[  351.759962][T16856] veth1_macvtap: entered promiscuous mode
[  351.837303][T16856] batman_adv: batadv0: Interface activated: batadv_slave_0
[  351.865185][T17286] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3155'.
[  351.891592][T16856] batman_adv: batadv0: Interface activated: batadv_slave_1
[  351.966966][T17286] vlan4: entered promiscuous mode
[  352.018240][T17292] netlink: 'syz.4.3158': attribute type 4 has an invalid length.
[  352.042710][T12645] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  352.070352][T12645] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  352.165709][T12642] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  352.216522][T12642] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  352.240714][T17299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.251596][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.353758][ T6512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  352.401982][ T6512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  352.525943][ T6512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  352.558128][ T6512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  352.584391][T17315] mac80211_hwsim hwsim56 »»»»»»z1: renamed from wlan0 (while UP)
[  352.650290][T17319] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3168'.
[  352.676110][T17319] netlink: 'syz.3.3168': attribute type 30 has an invalid length.
[  352.790963][T17326] netlink: 'syz.0.3041': attribute type 11 has an invalid length.
[  352.809253][T17326] netlink: 'syz.0.3041': attribute type 4 has an invalid length.
[  353.045362][T17325] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  353.102315][T17325] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  353.301685][ T5618] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  353.317645][ T5618] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  353.327774][ T5618] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  353.338574][ T5618] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  353.349296][ T5618] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  353.793294][T17358] __nla_validate_parse: 2 callbacks suppressed
[  353.793314][T17358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3179'.
[  353.956718][T17368] IPVS: set_ctl: invalid protocol: 19 10.1.1.2:20003
[  354.157164][T12642] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  354.169111][T12642] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.423502][T12642] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  354.450802][T12642] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.637224][T12642] bond0: (slave netdevsim1): Releasing backup interface
[  354.680123][T12642] netdevsim netdevsim2 netdevsim1 (unregistering): left allmulticast mode
[  354.694827][T17405] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3194'.
[  354.705139][T12642] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  354.705191][T12642] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.762577][T17409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3195'.
[  354.807730][T17410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3196'.
[  354.923918][T17419] FAULT_INJECTION: forcing a failure.
[  354.923918][T17419] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  354.980585][T17419] CPU: 1 UID: 0 PID: 17419 Comm: syz.0.3197 Not tainted syzkaller #0 PREEMPT(full) 
[  354.980614][T17419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  354.980624][T17419] Call Trace:
[  354.980631][T17419]  <TASK>
[  354.980638][T17419]  dump_stack_lvl+0xe8/0x150
[  354.980667][T17419]  should_fail_ex+0x40c/0x560
[  354.980690][T17419]  _copy_from_user+0x2d/0xb0
[  354.980816][T17419]  __sys_bpf+0x2e7/0xd90
[  354.980842][T17419]  ? __pfx___sys_bpf+0x10/0x10
[  354.980870][T17419]  ? __fget_files+0x2a/0x420
[  354.980904][T17419]  ? ksys_write+0x242/0x270
[  354.980929][T17419]  ? __pfx_ksys_write+0x10/0x10
[  354.980958][T17419]  __x64_sys_bpf+0xba/0xd0
[  354.980977][T17419]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.980996][T17419]  do_syscall_64+0x174/0x580
[  354.981020][T17419]  ? trace_irq_disable+0x3b/0x140
[  354.981040][T17419]  ? clear_bhb_loop+0x70/0xc0
[  354.981061][T17419]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.981078][T17419] RIP: 0033:0x7fb23a39e0d9
[  354.981094][T17419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  354.981108][T17419] RSP: 002b:00007fb23b2f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  354.981125][T17419] RAX: ffffffffffffffda RBX: 00007fb23a625fa0 RCX: 00007fb23a39e0d9
[  354.981137][T17419] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  354.981148][T17419] RBP: 00007fb23b2f5090 R08: 0000000000000000 R09: 0000000000000000
[  354.981159][T17419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  354.981169][T17419] R13: 00007fb23a626038 R14: 00007fb23a625fa0 R15: 00007ffefb96dec8
[  354.981199][T17419]  </TASK>
[  355.412237][ T5612] Bluetooth: hci3: command tx timeout
[  355.429193][T12642] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  355.459233][T12642] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.963739][T17420] bridge0: port 2(bridge_slave_1) entered blocking state
[  355.971106][T17420] bridge0: port 2(bridge_slave_1) entered forwarding state
[  355.973920][T17444] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3207'.
[  355.978636][T17420] bridge0: port 1(bridge_slave_0) entered blocking state
[  355.994509][T17420] bridge0: port 1(bridge_slave_0) entered forwarding state
[  356.008683][T17420] 8021q: adding VLAN 0 to HW filter on device bond0
[  356.044415][T17420] syzkaller0: left promiscuous mode
[  356.082987][T17420] gretap1: left promiscuous mode
[  356.095874][T17420] 8021q: adding VLAN 0 to HW filter on device bond4
[  356.128803][T17420] vlan2: left promiscuous mode
[  356.150261][T17420] 8021q: adding VLAN 0 to HW filter on device bond7
[  356.288697][T17444] vlan2: entered promiscuous mode
[  356.309167][T17444] veth0: entered promiscuous mode
[  356.420642][T17461] netlink: 'syz.1.3211': attribute type 1 has an invalid length.
[  356.436505][T17462] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3210'.
[  356.516504][T17462] vlan0: entered promiscuous mode
[  356.530682][T17462] bond1: entered promiscuous mode
[  356.536295][T17462] geneve2: entered promiscuous mode
[  356.598987][T17467] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3213'.
[  356.617542][T17467] nbd: must specify at least one socket
[  356.741941][T17479] FAULT_INJECTION: forcing a failure.
[  356.741941][T17479] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  356.779972][T17479] CPU: 0 UID: 0 PID: 17479 Comm: syz.4.3216 Not tainted syzkaller #0 PREEMPT(full) 
[  356.779998][T17479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  356.780009][T17479] Call Trace:
[  356.780016][T17479]  <TASK>
[  356.780024][T17479]  dump_stack_lvl+0xe8/0x150
[  356.780054][T17479]  should_fail_ex+0x40c/0x560
[  356.780077][T17479]  _copy_from_user+0x2d/0xb0
[  356.780099][T17479]  bpf_test_init+0xd8/0x150
[  356.780256][T17479]  bpf_prog_test_run_xdp+0x4cc/0x11d0
[  356.780291][T17479]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  356.780315][T17479]  ? __fget_files+0x2a/0x420
[  356.780342][T17479]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  356.780364][T17479]  bpf_prog_test_run+0x2c5/0x340
[  356.780389][T17479]  __sys_bpf+0xa22/0xd90
[  356.780417][T17479]  ? __pfx___sys_bpf+0x10/0x10
[  356.780448][T17479]  ? __fget_files+0x2a/0x420
[  356.780484][T17479]  ? ksys_write+0x242/0x270
[  356.780511][T17479]  ? __pfx_ksys_write+0x10/0x10
[  356.780540][T17479]  __x64_sys_bpf+0xba/0xd0
[  356.780559][T17479]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.780578][T17479]  do_syscall_64+0x174/0x580
[  356.780601][T17479]  ? trace_irq_disable+0x3b/0x140
[  356.780621][T17479]  ? clear_bhb_loop+0x70/0xc0
[  356.780642][T17479]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.780659][T17479] RIP: 0033:0x7f9c8379e0d9
[  356.780676][T17479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  356.780689][T17479] RSP: 002b:00007f9c846b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  356.780708][T17479] RAX: ffffffffffffffda RBX: 00007f9c83a25fa0 RCX: 00007f9c8379e0d9
[  356.780720][T17479] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  356.780732][T17479] RBP: 00007f9c846b2090 R08: 0000000000000000 R09: 0000000000000000
[  356.780742][T17479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  356.780752][T17479] R13: 00007f9c83a26038 R14: 00007f9c83a25fa0 R15: 00007ffe02d9a2d8
[  356.780781][T17479]  </TASK>
[  357.277087][T12642] pim6reg: left allmulticast mode
[  357.318829][T12642] batman_adv: batadv0: Interface deactivated: gretap2
[  357.492008][ T5612] Bluetooth: hci3: command tx timeout
[  357.513583][T17501] netlink: 'syz.3.3218': attribute type 11 has an invalid length.
[  357.632519][T12642] gretap0 (unregistering): left allmulticast mode
[  357.679104][T12642] batman_adv: batadv0: Removing interface: gretap2
[  357.772421][T12642] bond4 (unregistering): (slave bridge0): Releasing active interface
[  357.785885][T12642] bond5 (unregistering): (slave bridge2): Releasing active interface
[  357.817975][T12642] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface
[  357.828086][T12642] veth0_to_bond: left allmulticast mode
[  357.837928][T12642] bond0 (unregistering): Released all slaves
[  357.849371][T12642] bond1 (unregistering): Released all slaves
[  357.868672][T12642] bond2 (unregistering): Released all slaves
[  357.883991][T12642] bond3 (unregistering): (slave veth3): Releasing active interface
[  357.894008][T12642] batadv1: entered promiscuous mode
[  357.902826][T12642] bond3 (unregistering): (slave batadv1): Releasing active interface
[  357.915840][T12642] bond3 (unregistering): Released all slaves
[  357.946417][T12642] bond4 (unregistering): Released all slaves
[  357.966296][T12642] bond5 (unregistering): Released all slaves
[  358.003693][T17506] syz_tun: entered allmulticast mode
[  358.175376][T12642] : left promiscuous mode
[  358.198880][T17504] syz_tun: left allmulticast mode
[  358.231067][T17477] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  358.252828][T17477] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  358.296929][T12642] tipc: Disabling bearer <eth:vlan0>
[  358.328914][T12642] tipc: Left network mode
[  358.650554][T17477] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  358.673041][T17477] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  359.132202][T17477] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  359.150008][T17477] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  359.339387][ T5268] 8021q: adding VLAN 0 to HW filter on device eth1
[  359.376336][T17477] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  359.376986][T17340] bridge0: port 1(bridge_slave_0) entered blocking state
[  359.389467][T17477] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  359.404375][T17340] bridge0: port 1(bridge_slave_0) entered disabled state
[  359.428866][T17340] bridge_slave_0: entered allmulticast mode
[  359.448685][T17340] bridge_slave_0: entered promiscuous mode
[  359.461945][T17498] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  359.467482][T17340] bridge0: port 2(bridge_slave_1) entered blocking state
[  359.530275][T17340] bridge0: port 2(bridge_slave_1) entered disabled state
[  359.557622][T17340] bridge_slave_1: entered allmulticast mode
[  359.633449][T17340] bridge_slave_1: entered promiscuous mode
[  359.975728][T17340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  360.017126][T17340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  360.186104][T17340] team0: Port device team_slave_0 added
[  360.237037][T17340] team0: Port device team_slave_1 added
[  360.413124][T17584] syzkaller0: entered promiscuous mode
[  360.443727][T17577] netlink: 'syz.3.3237': attribute type 13 has an invalid length.
[  360.477859][T17577] netlink: 'syz.3.3237': attribute type 17 has an invalid length.
[  360.489879][T17597] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_macvtap, syncid = 4, id = 0
[  360.612994][T17577] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  360.629081][T17598] IPVS: set_ctl: invalid protocol: 29 172.30.0.1:20000
[  360.676034][T17340] batman_adv: batadv0: Adding interface: batadv_slave_0
[  360.684593][T17340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  360.721255][T17340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  360.740762][T17581] ªªªªªª: renamed from vlan0 (while UP)
[  360.825036][T17340] batman_adv: batadv0: Adding interface: batadv_slave_1
[  360.853450][T17340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  360.929763][T17340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  360.977765][T17611] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3242'.
[  361.006491][T17611] block nbd0: NBD_DISCONNECT
[  361.056158][T17611] block nbd0: Send disconnect failed -32
[  361.075210][ T5268] 8021q: adding VLAN 0 to HW filter on device eth4
[  361.101905][T17611] block nbd0: shutting down sockets
[  361.156270][T17615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3245'.
[  361.169436][T17617] FAULT_INJECTION: forcing a failure.
[  361.169436][T17617] name failslab, interval 1, probability 0, space 0, times 0
[  361.198742][T17617] CPU: 1 UID: 0 PID: 17617 Comm: syz.3.3246 Not tainted syzkaller #0 PREEMPT(full) 
[  361.198777][T17617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  361.198815][T17617] Call Trace:
[  361.198822][T17617]  <TASK>
[  361.198829][T17617]  dump_stack_lvl+0xe8/0x150
[  361.198858][T17617]  should_fail_ex+0x40c/0x560
[  361.198883][T17617]  should_failslab+0xa8/0x100
[  361.198985][T17617]  __kmalloc_cache_node_noprof+0xaa/0x630
[  361.199011][T17617]  ? bpf_test_run_xdp_live+0x220/0x1c20
[  361.199034][T17617]  ? page_pool_create_percpu+0x73/0xc70
[  361.199176][T17617]  ? page_pool_create_percpu+0x73/0xc70
[  361.199206][T17617]  page_pool_create_percpu+0x73/0xc70
[  361.199228][T17617]  ? page_pool_create+0xd/0x20
[  361.199254][T17617]  bpf_test_run_xdp_live+0x23a/0x1c20
[  361.199278][T17617]  ? bpf_dispatcher_change_prog+0xc4c/0xf20
[  361.199322][T17617]  ? __mutex_unlock_slowpath+0x731/0x900
[  361.199396][T17617]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  361.199421][T17617]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  361.199442][T17617]  ? bpf_dispatcher_xdp+0x800/0x1000
[  361.199500][T17617]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  361.199525][T17617]  ? _copy_from_user+0x94/0xb0
[  361.199549][T17617]  ? bpf_test_init+0x113/0x150
[  361.199566][T17617]  ? xdp_convert_md_to_buff+0x5b/0x330
[  361.199594][T17617]  bpf_prog_test_run_xdp+0x7d8/0x11d0
[  361.199631][T17617]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  361.199655][T17617]  ? __fget_files+0x2a/0x420
[  361.199679][T17617]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  361.199698][T17617]  bpf_prog_test_run+0x2c5/0x340
[  361.199722][T17617]  __sys_bpf+0xa22/0xd90
[  361.199749][T17617]  ? __pfx___sys_bpf+0x10/0x10
[  361.199781][T17617]  ? __fget_files+0x2a/0x420
[  361.199820][T17617]  ? ksys_write+0x242/0x270
[  361.199847][T17617]  ? __pfx_ksys_write+0x10/0x10
[  361.199875][T17617]  __x64_sys_bpf+0xba/0xd0
[  361.199895][T17617]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  361.199915][T17617]  do_syscall_64+0x174/0x580
[  361.199938][T17617]  ? trace_irq_disable+0x3b/0x140
[  361.199959][T17617]  ? clear_bhb_loop+0x70/0xc0
[  361.199981][T17617]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  361.199997][T17617] RIP: 0033:0x7ff4bc39e0d9
[  361.200016][T17617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  361.200031][T17617] RSP: 002b:00007ff4bd185028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  361.200050][T17617] RAX: ffffffffffffffda RBX: 00007ff4bc625fa0 RCX: 00007ff4bc39e0d9
[  361.200063][T17617] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  361.200073][T17617] RBP: 00007ff4bd185090 R08: 0000000000000000 R09: 0000000000000000
[  361.200082][T17617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  361.200092][T17617] R13: 00007ff4bc626038 R14: 00007ff4bc625fa0 R15: 00007fff8c03a6c8
[  361.200118][T17617]  </TASK>
[  361.369357][T17340] hsr_slave_0: entered promiscuous mode
[  361.590814][T17340] hsr_slave_1: entered promiscuous mode
[  361.597366][T17340] debugfs: 'hsr0' already exists in 'hsr'
[  361.608358][T17340] Cannot create hsr debugfs directory
[  361.668756][T12642] hsr_slave_0: left promiscuous mode
[  361.744973][T12642] hsr_slave_1: left promiscuous mode
[  361.898409][T12642] veth0_macvtap: left promiscuous mode
[  361.920748][T12642] veth1_vlan: left promiscuous mode
[  361.936932][T12642] veth0_vlan: left promiscuous mode
[  362.029107][T17645] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20004
[  362.783328][T17655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3252'.
[  362.869024][ T5268] 8021q: adding VLAN 0 to HW filter on device eth3
[  362.871911][T17656] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3252'.
[  363.382280][T17674] FAULT_INJECTION: forcing a failure.
[  363.382280][T17674] name failslab, interval 1, probability 0, space 0, times 0
[  363.430654][T17674] CPU: 1 UID: 0 PID: 17674 Comm: syz.3.3258 Not tainted syzkaller #0 PREEMPT(full) 
[  363.430680][T17674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  363.430690][T17674] Call Trace:
[  363.430697][T17674]  <TASK>
[  363.430705][T17674]  dump_stack_lvl+0xe8/0x150
[  363.430733][T17674]  should_fail_ex+0x40c/0x560
[  363.430754][T17674]  ? bpf_test_run_xdp_live+0x220/0x1c20
[  363.430776][T17674]  should_failslab+0xa8/0x100
[  363.430801][T17674]  __kvmalloc_node_noprof+0x176/0x860
[  363.430826][T17674]  ? __kvmalloc_node_noprof+0x35c/0x860
[  363.430846][T17674]  ? bpf_test_run_xdp_live+0x220/0x1c20
[  363.430873][T17674]  bpf_test_run_xdp_live+0x220/0x1c20
[  363.430895][T17674]  ? bpf_dispatcher_change_prog+0xc4c/0xf20
[  363.430922][T17674]  ? __mutex_unlock_slowpath+0x731/0x900
[  363.430954][T17674]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  363.430982][T17674]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  363.431003][T17674]  ? 0xffffffffa0205480
[  363.431060][T17674]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  363.431088][T17674]  ? _copy_from_user+0x94/0xb0
[  363.431111][T17674]  ? bpf_test_init+0x113/0x150
[  363.431127][T17674]  ? xdp_convert_md_to_buff+0x5b/0x330
[  363.431149][T17674]  bpf_prog_test_run_xdp+0x7d8/0x11d0
[  363.431181][T17674]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  363.431205][T17674]  ? __fget_files+0x2a/0x420
[  363.431231][T17674]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  363.431252][T17674]  bpf_prog_test_run+0x2c5/0x340
[  363.431280][T17674]  __sys_bpf+0xa22/0xd90
[  363.431308][T17674]  ? __pfx___sys_bpf+0x10/0x10
[  363.431338][T17674]  ? __fget_files+0x2a/0x420
[  363.431373][T17674]  ? ksys_write+0x242/0x270
[  363.431404][T17674]  ? __pfx_ksys_write+0x10/0x10
[  363.431429][T17674]  __x64_sys_bpf+0xba/0xd0
[  363.431446][T17674]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  363.431464][T17674]  do_syscall_64+0x174/0x580
[  363.431486][T17674]  ? trace_irq_disable+0x3b/0x140
[  363.431506][T17674]  ? clear_bhb_loop+0x70/0xc0
[  363.431527][T17674]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  363.431544][T17674] RIP: 0033:0x7ff4bc39e0d9
[  363.431560][T17674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  363.431574][T17674] RSP: 002b:00007ff4bd185028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  363.431593][T17674] RAX: ffffffffffffffda RBX: 00007ff4bc625fa0 RCX: 00007ff4bc39e0d9
[  363.431605][T17674] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  363.431616][T17674] RBP: 00007ff4bd185090 R08: 0000000000000000 R09: 0000000000000000
[  363.431627][T17674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  363.431637][T17674] R13: 00007ff4bc626038 R14: 00007ff4bc625fa0 R15: 00007fff8c03a6c8
[  363.431667][T17674]  </TASK>
[  363.510274][T17681] netlink: 'syz.1.3260': attribute type 4 has an invalid length.
[  364.156581][T17711] xt_nfacct: accounting object `syz0' does not exist
[  364.250736][T12642] IPVS: stop unused estimator thread 0...
[  364.464815][T17727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3271'.
[  364.566582][T17732] xt_nfacct: accounting object `syz0' does not exist
[  364.705186][T12642] bond0: left allmulticast mode
[  364.721265][T12642] bond_slave_0: left allmulticast mode
[  364.743047][T12642] bond_slave_1: left allmulticast mode
[  364.765115][T12642] bond0: left promiscuous mode
[  364.771572][T12642] bond_slave_0: left promiscuous mode
[  364.777328][T12642] bond_slave_1: left promiscuous mode
[  364.795759][T12642] bridge0: port 3(bond0) entered disabled state
[  364.813305][T12642] bridge_slave_1: left promiscuous mode
[  364.826543][T12642] bridge0: port 2(bridge_slave_1) entered disabled state
[  364.840786][T12642] bridge_slave_0: left allmulticast mode
[  364.856446][T12642] bridge0: port 1(bridge_slave_0) entered disabled state
[  364.902771][T12642] pim6reg: left allmulticast mode
[  364.908804][T12642] bridge0: left allmulticast mode
[  365.203212][T12642] bond3 (unregistering): (slave geneve4): Releasing active interface
[  365.297904][T17742] Cannot find add_set index 0 as target
[  365.309326][T12642] bond2 (unregistering): (slave bridge4): Releasing backup interface
[  365.319270][T12642] bridge4 (unregistering): left promiscuous mode
[  365.328024][T12642] bridge4 (unregistering): left allmulticast mode
[  365.396720][T12642] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  365.410744][T12642] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  365.426159][T12642] bond0 (unregistering): Released all slaves
[  365.436346][T12642] bond1 (unregistering): Released all slaves
[  365.457715][T12642] bond2 (unregistering): Released all slaves
[  365.471283][T12642] bond3 (unregistering): Released all slaves
[  365.485099][T12642] bond4 (unregistering): Released all slaves
[  365.508971][T12642] bond5 (unregistering): (slave dummy0): Releasing backup interface
[  365.522142][T12642] bond5 (unregistering): Released all slaves
[  365.535769][T12642] bond6 (unregistering): Released all slaves
[  365.554591][ T5268] 8021q: adding VLAN 0 to HW filter on device eth2
[  365.747145][T17750] FAULT_INJECTION: forcing a failure.
[  365.747145][T17750] name failslab, interval 1, probability 0, space 0, times 0
[  365.761109][T17750] CPU: 1 UID: 0 PID: 17750 Comm: syz.1.3277 Not tainted syzkaller #0 PREEMPT(full) 
[  365.761134][T17750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  365.761145][T17750] Call Trace:
[  365.761152][T17750]  <TASK>
[  365.761159][T17750]  dump_stack_lvl+0xe8/0x150
[  365.761188][T17750]  should_fail_ex+0x40c/0x560
[  365.761211][T17750]  should_failslab+0xa8/0x100
[  365.761236][T17750]  __kmalloc_cache_noprof+0xa8/0x660
[  365.761259][T17750]  ? __xdp_reg_mem_model+0x1e9/0x5a0
[  365.761362][T17750]  ? __xdp_reg_mem_model+0x1e9/0x5a0
[  365.761388][T17750]  __xdp_reg_mem_model+0x1e9/0x5a0
[  365.761414][T17750]  ? __pfx___xdp_reg_mem_model+0x10/0x10
[  365.761444][T17750]  xdp_reg_mem_model+0x22/0x40
[  365.761463][T17750]  bpf_test_run_xdp_live+0x292/0x1c20
[  365.761488][T17750]  ? bpf_dispatcher_change_prog+0xc4c/0xf20
[  365.761516][T17750]  ? __mutex_unlock_slowpath+0x731/0x900
[  365.761546][T17750]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  365.761574][T17750]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  365.761595][T17750]  ? 0xffffffffa0205480
[  365.761656][T17750]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  365.761684][T17750]  ? _copy_from_user+0x94/0xb0
[  365.761714][T17750]  ? bpf_test_init+0x113/0x150
[  365.761731][T17750]  ? xdp_convert_md_to_buff+0x5b/0x330
[  365.761753][T17750]  bpf_prog_test_run_xdp+0x7d8/0x11d0
[  365.761788][T17750]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  365.761811][T17750]  ? __fget_files+0x2a/0x420
[  365.761835][T17750]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  365.761856][T17750]  bpf_prog_test_run+0x2c5/0x340
[  365.761881][T17750]  __sys_bpf+0xa22/0xd90
[  365.761910][T17750]  ? __pfx___sys_bpf+0x10/0x10
[  365.761940][T17750]  ? __fget_files+0x2a/0x420
[  365.761977][T17750]  ? ksys_write+0x242/0x270
[  365.762004][T17750]  ? __pfx_ksys_write+0x10/0x10
[  365.762032][T17750]  __x64_sys_bpf+0xba/0xd0
[  365.762051][T17750]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.762070][T17750]  do_syscall_64+0x174/0x580
[  365.762094][T17750]  ? clear_bhb_loop+0x70/0xc0
[  365.762113][T17750]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.762129][T17750] RIP: 0033:0x7f28f1b9e0d9
[  365.762144][T17750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  365.762158][T17750] RSP: 002b:00007f28f29e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  365.762176][T17750] RAX: ffffffffffffffda RBX: 00007f28f1e25fa0 RCX: 00007f28f1b9e0d9
[  365.762188][T17750] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  365.762199][T17750] RBP: 00007f28f29e2090 R08: 0000000000000000 R09: 0000000000000000
[  365.762209][T17750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  365.762220][T17750] R13: 00007f28f1e26038 R14: 00007f28f1e25fa0 R15: 00007ffe30f40558
[  365.762247][T17750]  </TASK>
[  366.083596][T17753] netlink: 'syz.3.3278': attribute type 4 has an invalid length.
[  366.292142][T17764] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3280'.
[  366.425839][T17770] netlink: 'syz.4.3281': attribute type 1 has an invalid length.
[  366.477461][T17770] netlink: 'syz.4.3281': attribute type 2 has an invalid length.
[  366.565450][T17770] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication
[  367.005043][T17793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3285'.
[  367.260055][T17800] syzkaller0: left promiscuous mode
[  367.283220][T17800] syzkaller0: left allmulticast mode
[  367.410802][T17807] netlink: 'syz.0.3288': attribute type 1 has an invalid length.
[  367.442651][T17808] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3290'.
[  367.767284][T17807] 8021q: adding VLAN 0 to HW filter on device bond1
[  367.848721][T17813] macvlan2: entered promiscuous mode
[  367.854253][T17813] macvlan2: entered allmulticast mode
[  367.861080][T17813] bond1: entered allmulticast mode
[  367.866339][T17813] bond1: entered promiscuous mode
[  367.876484][T17813] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  367.887444][T17813] team0: Port device macvlan2 added
[  367.894481][T17808] pim6reg1: entered promiscuous mode
[  367.900356][T17808] pim6reg1: entered allmulticast mode
[  367.974616][T12642] hsr_slave_0: left promiscuous mode
[  367.980975][T12642] hsr_slave_1: left promiscuous mode
[  367.987271][T12642] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  367.995451][T12642] batman_adv: batadv0: Removing interface: batadv_slave_0
[  368.005736][T12642] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  368.013617][T12642] batman_adv: batadv0: Removing interface: batadv_slave_1
[  368.769398][T12642] team0 (unregistering): Port device team_slave_1 removed
[  368.807154][T12642] team0 (unregistering): Port device team_slave_0 removed
[  368.888934][ T6508] smc: removing ib device syz2
[  369.121949][T17830] syzkaller0: entered promiscuous mode
[  369.129310][T17830] syzkaller0: entered allmulticast mode
[  369.295670][T17340] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  369.325115][T17882] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3298'.
[  369.353402][T17340] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  369.397933][ T6508] smbdirect: ib_dev[syz2] removed
[  369.596762][T17892] xt_TPROXY: Can be used only with -p tcp or -p udp
[  369.621243][T17340] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  369.667504][T17893] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  369.679337][T17893] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  370.003200][T17340] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  370.025673][T17340] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  373.105894][T17340] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  373.175129][T17911] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3307'.
[  373.338289][T17340] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  373.409237][T17340] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  373.848924][T17944] xt_TPROXY: Can be used only with -p tcp or -p udp
[  373.858821][T17937] tipc: Invalid UDP bearer configuration
[  373.858870][T17937] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  373.886987][T12642] IPVS: stop unused estimator thread 0...
[  373.899291][T17944] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  373.909037][T17937] Bluetooth: MGMT ver 1.23
[  373.926637][T17947] netlink: 'syz.3.3314': attribute type 4 has an invalid length.
[  373.937866][T17944] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  373.962096][T17340] 8021q: adding VLAN 0 to HW filter on device bond0
[  374.205075][T17340] 8021q: adding VLAN 0 to HW filter on device team0
[  374.224698][T17961] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3316'.
[  374.271445][T12642] bridge0: port 1(bridge_slave_0) entered blocking state
[  374.278677][T12642] bridge0: port 1(bridge_slave_0) entered forwarding state
[  374.362591][ T6514] bridge0: port 2(bridge_slave_1) entered blocking state
[  374.369786][ T6514] bridge0: port 2(bridge_slave_1) entered forwarding state
[  374.494375][T17972] netlink: 'syz.4.3320': attribute type 4 has an invalid length.
[  374.622710][T17979] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3321'.
[  375.147189][T18005] netlink: 'syz.0.3328': attribute type 1 has an invalid length.
[  375.245135][T18008] openvswitch: netlink: Unknown key attributes 2
[  375.257351][T18008] Cannot find add_set index 0 as target
[  375.314592][T18005] bond2: entered promiscuous mode
[  375.333222][T18005] 8021q: adding VLAN 0 to HW filter on device bond2
[  375.398756][T18009] vlan2: entered allmulticast mode
[  375.417071][T18009] bond2: entered allmulticast mode
[  375.482735][T18015] bond2: (slave bridge1): making interface the new active one
[  375.511410][T18015] bridge1: entered promiscuous mode
[  375.527711][T18015] bridge1: entered allmulticast mode
[  375.552574][T18015] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  376.249412][T17340] 8021q: adding VLAN 0 to HW filter on device batadv0
[  376.324349][T17340] veth0_vlan: entered promiscuous mode
[  376.333511][T18065] Cannot find add_set index 0 as target
[  376.358947][T17340] veth1_vlan: entered promiscuous mode
[  376.434962][T17340] veth0_macvtap: entered promiscuous mode
[  376.448202][T17340] veth1_macvtap: entered promiscuous mode
[  376.507019][T17340] batman_adv: batadv0: Interface activated: batadv_slave_0
[  376.630812][T17340] batman_adv: batadv0: Interface activated: batadv_slave_1
[  376.724327][T18076] netlink: 'syz.4.3343': attribute type 4 has an invalid length.
[  376.763821][ T6512] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  376.788751][ T6512] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  376.871801][T12642] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  376.964107][T12642] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  376.995583][T18078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3344'.
[  377.169147][T18078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  377.216340][   T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  377.266134][   T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  377.271223][T18099] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3348'.
[  377.424034][T12642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  377.465320][T12642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  377.810108][T18124] netlink: 'syz.2.3172': attribute type 1 has an invalid length.
[  378.239405][ T5618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  378.255119][ T5618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  378.270051][ T5618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  378.281377][ T5618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  378.297355][ T5618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  378.934260][T18137] mac80211_hwsim hwsim64 wlan0: entered promiscuous mode
[  378.947697][T18137] mac80211_hwsim hwsim64 wlan0: entered allmulticast mode
[  379.525889][T18197] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3370'.
[  379.558579][T18197] vlan0: entered promiscuous mode
[  379.579351][T18197] veth0: entered promiscuous mode
[  379.872815][T18203] pim6reg1: entered promiscuous mode
[  379.886861][T18203] pim6reg1: entered allmulticast mode
[  380.370629][ T5612] Bluetooth: hci2: command tx timeout
[  380.940456][T18141] bridge0: port 1(bridge_slave_0) entered blocking state
[  380.947858][T18141] bridge0: port 1(bridge_slave_0) entered disabled state
[  380.955416][T18141] bridge_slave_0: entered allmulticast mode
[  380.963620][T18141] bridge_slave_0: entered promiscuous mode
[  380.972721][T18141] bridge0: port 2(bridge_slave_1) entered blocking state
[  380.980364][T18141] bridge0: port 2(bridge_slave_1) entered disabled state
[  380.991031][T18141] bridge_slave_1: entered allmulticast mode
[  381.001441][T18141] bridge_slave_1: entered promiscuous mode
[  381.050847][T18141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  381.063616][T18141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  381.142812][T18141] team0: Port device team_slave_0 added
[  381.153939][T18141] team0: Port device team_slave_1 added
[  381.190524][T18275] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3391'.
[  381.230603][T18141] batman_adv: batadv0: Adding interface: batadv_slave_0
[  381.241234][T18275] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3391'.
[  381.263635][T18141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  381.322287][T18141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  381.358872][T18141] batman_adv: batadv0: Adding interface: batadv_slave_1
[  381.380273][T18282] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3393'.
[  381.391619][T18141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  381.458988][T18141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  381.575074][T18292] x_tables: ip6_tables: dccp match: only valid for protocol 33
[  381.684189][T18141] hsr_slave_0: entered promiscuous mode
[  381.691127][T18141] hsr_slave_1: entered promiscuous mode
[  381.915895][T18305] xt_TPROXY: Can be used only with -p tcp or -p udp
[  381.938170][T18305] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  381.956526][T18305] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  382.258543][T18316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3403'.
[  382.436596][T18319] pim6reg1: entered promiscuous mode
[  382.454212][ T5612] Bluetooth: hci2: command tx timeout
[  382.473702][T18319] pim6reg1: entered allmulticast mode
[  382.528115][T18330] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3406'.
[  383.032073][T18141] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  383.047146][T18141] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.294241][T18141] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  383.319089][T18141] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.597951][T18141] bond0: (slave netdevsim1): Releasing backup interface
[  383.676661][T18141] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  383.678916][T18383] xt_TPROXY: Can be used only with -p tcp or -p udp
[  383.718162][T18141] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.730921][T18383] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  383.757858][T18383] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  384.045576][T18404] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3419'.
[  384.065282][T18141] netdevsim netdevsim3 
€Â (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  384.075306][T18141] netdevsim netdevsim3 
€Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.109540][T18408] netlink: 'syz.4.3420': attribute type 4 has an invalid length.
[  384.530568][ T5612] Bluetooth: hci2: command tx timeout
[  384.585224][T18418] xt_CT: No such helper "syz0"
[  384.734302][T18434] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3426'.
[  384.740713][T18141] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  384.781391][T18441] xt_TPROXY: Can be used only with -p tcp or -p udp
[  384.790624][T18441] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  384.799485][T18441] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  385.154990][T18141] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  385.176603][T18141] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  385.272543][T18141] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  385.313504][T18141] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  385.349040][T18141] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  385.389516][T18141] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  385.444752][T18141] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  385.751343][T18480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3430'.
[  386.616805][ T5612] Bluetooth: hci2: command tx timeout
[  387.794577][T18480] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  387.924446][T18491] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3432'.
[  388.094562][T18141] 8021q: adding VLAN 0 to HW filter on device bond0
[  388.145690][T18505] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3435'.
[  388.175049][T18141] 8021q: adding VLAN 0 to HW filter on device team0
[  388.197743][T12645] bridge0: port 1(bridge_slave_0) entered blocking state
[  388.205062][T12645] bridge0: port 1(bridge_slave_0) entered forwarding state
[  388.225388][ T6514] bridge0: port 2(bridge_slave_1) entered blocking state
[  388.232605][ T6514] bridge0: port 2(bridge_slave_1) entered forwarding state
[  388.356115][T18513] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3438'.
[  388.391789][T18516] xt_TPROXY: Can be used only with -p tcp or -p udp
[  388.418183][T18516] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  388.440040][T18516] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  388.445579][T18520] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3440'.
[  388.512237][T18523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3441'.
[  388.514822][T18520] netlink: 'syz.1.3440': attribute type 4 has an invalid length.
[  388.529945][T18523] tipc: Started in network mode
[  388.529974][T18523] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711
[  388.530118][T18523] tipc: Enabled bearer <eth:batadv0>, priority 10
[  388.614316][T18520] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3440'.
[  389.038103][T18549] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3447'.
[  389.112910][T18551] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3448'.
[  389.310803][T18564] Bluetooth: MGMT ver 1.23
[  389.581352][ T5617] udevd[5617]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  390.303800][T18577] netlink: 'syz.4.3453': attribute type 4 has an invalid length.
[  391.937135][ T5712] tipc: Node number set to 8432298
[  392.154067][T18589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3457'.
[  392.206341][T18590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3456'.
[  392.387181][T18141] 8021q: adding VLAN 0 to HW filter on device batadv0
[  392.660488][T18141] veth0_vlan: entered promiscuous mode
[  392.703618][T18141] veth1_vlan: entered promiscuous mode
[  392.718892][T18615] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3463'.
[  392.797998][T18141] veth0_macvtap: entered promiscuous mode
[  392.839256][T18141] veth1_macvtap: entered promiscuous mode
[  392.854331][T18622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3464'.
[  392.897087][T18622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3464'.
[  392.926069][T18141] batman_adv: batadv0: Interface activated: batadv_slave_0
[  392.988169][T18141] batman_adv: batadv0: Interface activated: batadv_slave_1
[  393.209921][ T6514] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  393.320500][   T47] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  393.363803][ T6508] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  393.420502][ T6508] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  393.491808][   T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  393.517856][   T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  393.554820][ T6514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  393.564968][ T6514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  410.958338][T18687] netlink: 'syz.1.3471': attribute type 2 has an invalid length.
[  410.979440][T18687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3471'.
[  411.029439][T18688] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3473'.
[  411.283409][T18712] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3480'.
[  411.653947][T18735] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3486'.
[  411.961454][T18749] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3491'.
[  412.032413][T18755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3492'.
[  412.075600][T18757] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3490'.
[  412.138211][T18757] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3490'.
[  412.178587][T18757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3490'.
[  412.469843][T18770] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3497'.
[  412.649504][T18777] netlink: 'syz.2.3499': attribute type 4 has an invalid length.
[  412.977265][    C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff888050168000: connection exists (00 00). last cmd: 10
[  412.991590][    C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff88805016a400: connection exists (00 00). last cmd: 10
[  413.055364][T18801] netlink: 'syz.0.3508': attribute type 13 has an invalid length.
[  413.078441][T18801] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  413.275042][T18803] bridge0: port 2(bridge_slave_1) entered disabled state
[  413.282793][T18803] bridge0: port 1(bridge_slave_0) entered disabled state
[  413.427036][T18803] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  413.445043][T18803] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  413.577817][T18803] mac80211_hwsim hwsim64 wlan0: left promiscuous mode
[  413.586023][T18803] mac80211_hwsim hwsim64 wlan0: left allmulticast mode
[  413.663308][ T6514] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  413.681261][T18837] netlink: 'syz.1.3515': attribute type 4 has an invalid length.
[  413.684637][ T6514] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  414.691015][T18844] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  416.435738][T18856] virt_wifi0: entered promiscuous mode
[  416.453822][T18856] batman_adv: batadv0: Adding interface: virt_wifi0
[  416.460687][T18856] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  416.499492][T18856] batman_adv: batadv0: Interface activated: virt_wifi0
[  416.607625][T18868] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  416.794114][ T6514] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  416.861839][ T6514] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  416.876879][T18886] __nla_validate_parse: 6 callbacks suppressed
[  416.876897][T18886] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3526'.
[  417.296811][T18905] xt_hashlimit: max too large, truncated to 1048576
[  417.501509][ T6514] tipc: Subscription rejected, illegal request
[  417.899886][T18921] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  417.942582][T18923] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3537'.
[  417.975554][T18923] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3537'.
[  418.006357][T18927] netlink: 60795 bytes leftover after parsing attributes in process `syz.4.3536'.
[  418.506726][T18939] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  418.562907][T18944] x_tables: unsorted underflow at hook 2
[  418.651723][T18939] batman_adv: batadv0: Removing interface: batadv_slave_0
[  418.693483][T18950] netlink: 292 bytes leftover after parsing attributes in process `syz.3.3546'.
[  418.719008][T18953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3547'.
[  418.792849][T18953] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  418.824711][T18963] Cannot find add_set index 0 as target
[  419.121070][T18986] FAULT_INJECTION: forcing a failure.
[  419.121070][T18986] name failslab, interval 1, probability 0, space 0, times 0
[  419.142685][T18986] CPU: 0 UID: 0 PID: 18986 Comm: syz.4.3553 Not tainted syzkaller #0 PREEMPT(full) 
[  419.142710][T18986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  419.142721][T18986] Call Trace:
[  419.142728][T18986]  <TASK>
[  419.142735][T18986]  dump_stack_lvl+0xe8/0x150
[  419.142767][T18986]  should_fail_ex+0x40c/0x560
[  419.142793][T18986]  should_failslab+0xa8/0x100
[  419.142818][T18986]  kmem_cache_alloc_node_noprof+0xb3/0x610
[  419.142839][T18986]  ? local_lock_release+0x9c/0x160
[  419.142964][T18986]  ? __alloc_skb+0x1d7/0x7a0
[  419.142977][T18986]  ? __alloc_skb+0x1d7/0x7a0
[  419.142999][T18986]  __alloc_skb+0x1d7/0x7a0
[  419.143020][T18986]  netlink_sendmsg+0x5d4/0xb40
[  419.143084][T18986]  ? __pfx_netlink_sendmsg+0x10/0x10
[  419.143118][T18986]  ? aa_sock_msg_perm+0xf1/0x1b0
[  419.143203][T18986]  ? __pfx_netlink_sendmsg+0x10/0x10
[  419.143221][T18986]  sock_sendmsg_nosec+0x13a/0x180
[  419.143272][T18986]  ____sys_sendmsg+0x54e/0x850
[  419.143296][T18986]  ? __pfx_____sys_sendmsg+0x10/0x10
[  419.143325][T18986]  ? import_iovec+0x73/0xa0
[  419.143378][T18986]  ___sys_sendmsg+0x2a5/0x360
[  419.143395][T18986]  ? __lock_acquire+0x683/0x2cf0
[  419.143432][T18986]  ? __pfx____sys_sendmsg+0x10/0x10
[  419.143485][T18986]  ? __fget_files+0x2a/0x420
[  419.143505][T18986]  ? __fget_files+0x3a2/0x420
[  419.143539][T18986]  __x64_sys_sendmsg+0x1b1/0x290
[  419.143560][T18986]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  419.143597][T18986]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.143616][T18986]  do_syscall_64+0x174/0x580
[  419.143642][T18986]  ? trace_irq_disable+0x3b/0x140
[  419.143664][T18986]  ? clear_bhb_loop+0x70/0xc0
[  419.143684][T18986]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.143700][T18986] RIP: 0033:0x7f9c8379e0d9
[  419.143716][T18986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  419.143730][T18986] RSP: 002b:00007f9c84691028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  419.143748][T18986] RAX: ffffffffffffffda RBX: 00007f9c83a26090 RCX: 00007f9c8379e0d9
[  419.143761][T18986] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  419.143773][T18986] RBP: 00007f9c84691090 R08: 0000000000000000 R09: 0000000000000000
[  419.143783][T18986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  419.143793][T18986] R13: 00007f9c83a26128 R14: 00007f9c83a26090 R15: 00007ffe02d9a2d8
[  419.143822][T18986]  </TASK>
[  419.251671][T18988] xt_hashlimit: max too large, truncated to 1048576
[  419.802729][T19012] netlink: 'syz.1.3559': attribute type 4 has an invalid length.
[  421.927542][T18976] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  422.434299][T19023] Cannot find add_set index 0 as target
[  422.844828][T19045] macsec1: entered promiscuous mode
[  422.871272][T19045] hsr0: entered promiscuous mode
[  423.156394][T19053] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  423.167025][T19055] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3570'.
[  423.190031][T19051] syzkaller0: entered promiscuous mode
[  423.200958][T19051] syzkaller0: entered allmulticast mode
[  423.214409][T19053] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  423.243296][T19027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3563'.
[  423.277145][T19027] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3563'.
[  423.378236][T19027] geneve2: entered promiscuous mode
[  423.391552][T19061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3573'.
[  423.395992][T19027] geneve2: entered allmulticast mode
[  423.438221][T19061] sctp: [Deprecated]: syz.0.3573 (pid 19061) Use of int in max_burst socket option.
[  423.438221][T19061] Use struct sctp_assoc_value instead
[  423.449852][ T6512] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  423.484415][T19066] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3574'.
[  423.520145][ T6512] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  423.539202][ T6512] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  423.563573][T19058] syzkaller0: entered promiscuous mode
[  423.578017][T19058] syzkaller0: entered allmulticast mode
[  423.592633][T12646] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  423.604188][T19066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3574'.
[  424.166950][T19091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3579'.
[  424.193717][T19091] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.306577][T19094] syz.0.3580: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  424.342458][T19094] CPU: 1 UID: 0 PID: 19094 Comm: syz.0.3580 Not tainted syzkaller #0 PREEMPT(full) 
[  424.342484][T19094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  424.342494][T19094] Call Trace:
[  424.342500][T19094]  <TASK>
[  424.342509][T19094]  dump_stack_lvl+0xe8/0x150
[  424.342538][T19094]  warn_alloc+0x24c/0x270
[  424.342566][T19094]  ? __pfx_warn_alloc+0x10/0x10
[  424.342584][T19094]  ? xskq_create+0x56/0x220
[  424.342750][T19094]  ? xsk_setsockopt+0x52a/0x960
[  424.342769][T19094]  ? do_syscall_64+0x174/0x580
[  424.342792][T19094]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.342823][T19094]  __vmalloc_node_range_noprof+0x12c/0x1730
[  424.342871][T19094]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  424.342893][T19094]  ? __kmalloc_cache_noprof+0x32d/0x660
[  424.342915][T19094]  ? __kmalloc_cache_noprof+0x150/0x660
[  424.342935][T19094]  ? xskq_create+0x56/0x220
[  424.342960][T19094]  xskq_create+0x148/0x220
[  424.342983][T19094]  ? xsk_init_queue+0x8a/0xe0
[  424.343007][T19094]  xsk_init_queue+0x8a/0xe0
[  424.343032][T19094]  xsk_setsockopt+0x52a/0x960
[  424.343052][T19094]  ? __fget_files+0x2a/0x420
[  424.343075][T19094]  ? __pfx_xsk_setsockopt+0x10/0x10
[  424.343096][T19094]  ? __pfx_aa_sk_perm+0x10/0x10
[  424.343123][T19094]  ? aa_sock_opt_perm+0xff/0x1a0
[  424.343151][T19094]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  424.343169][T19094]  ? __pfx_xsk_setsockopt+0x10/0x10
[  424.343192][T19094]  do_sock_setsockopt+0x17c/0x1b0
[  424.343216][T19094]  __x64_sys_setsockopt+0x13d/0x1b0
[  424.343237][T19094]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.343256][T19094]  do_syscall_64+0x174/0x580
[  424.343278][T19094]  ? trace_irq_disable+0x3b/0x140
[  424.343298][T19094]  ? clear_bhb_loop+0x70/0xc0
[  424.343320][T19094]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.343337][T19094] RIP: 0033:0x7fb23a39e0d9
[  424.343354][T19094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  424.343369][T19094] RSP: 002b:00007fb23b2f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  424.343388][T19094] RAX: ffffffffffffffda RBX: 00007fb23a625fa0 RCX: 00007fb23a39e0d9
[  424.343400][T19094] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  424.343410][T19094] RBP: 00007fb23a435024 R08: 0000000000000004 R09: 0000000000000000
[  424.343421][T19094] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  424.343432][T19094] R13: 00007fb23a626038 R14: 00007fb23a625fa0 R15: 00007ffefb96dec8
[  424.343464][T19094]  </TASK>
[  424.344436][T19094] Mem-Info:
[  424.606147][T19094] active_anon:14553 inactive_anon:0 isolated_anon:0
[  424.606147][T19094]  active_file:17 inactive_file:43584 isolated_file:0
[  424.606147][T19094]  unevictable:0 dirty:196 writeback:0
[  424.606147][T19094]  slab_reclaimable:11290 slab_unreclaimable:135772
[  424.606147][T19094]  mapped:30832 shmem:3371 pagetables:1305
[  424.606147][T19094]  sec_pagetables:0 bounce:0
[  424.606147][T19094]  kernel_misc_reclaimable:0
[  424.606147][T19094]  free:1274854 free_pcp:8015 free_cma:0
[  424.671310][T19094] Node 0 active_anon:58812kB inactive_anon:0kB active_file:68kB inactive_file:174128kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123328kB dirty:784kB writeback:0kB shmem:13484kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14616kB pagetables:5088kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  424.708319][T19094] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  424.741408][T19094] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  424.773904][T19094] lowmem_reserve[]: 0 2488 2489 2489 2489
[  424.784423][T19094] Node 0 DMA32 free:1154796kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:59616kB inactive_anon:0kB active_file:68kB inactive_file:174128kB unevictable:0kB writepending:784kB zspages:0kB present:3129332kB managed:2548612kB mlocked:0kB bounce:0kB free_pcp:28944kB local_pcp:15244kB free_cma:0kB
[  424.818557][T19094] lowmem_reserve[]: 0 0 0 0 0
[  424.825206][T19094] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:264kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  424.857257][T19094] lowmem_reserve[]: 0 0 0 0 0
[  424.862837][T19094] Node 1 Normal free:3940156kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  424.900131][T19094] lowmem_reserve[]: 0 0 0 0 0
[  424.904908][T19094] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  424.918266][T19094] Node 0 DMA32: 3522*4kB (UM) 1215*8kB (UM) 554*16kB (UME) 335*32kB (UME) 56*64kB (UME) 66*128kB (UME) 33*256kB (UM) 25*512kB (UME) 16*1024kB (UME) 8*2048kB (M) 255*4096kB (UM) = 1153920kB
[  424.938428][T19094] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  424.989972][T19094] Node 1 Normal: 1*4kB (M) 3*8kB (UM) 6*16kB (UM) 6*32kB (UM) 10*64kB (UM) 3*128kB (UM) 2*256kB (M) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (UM) = 3940156kB
[  425.028030][T19094] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  425.042274][T19094] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  425.052356][T19094] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  425.062902][T19094] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  425.072656][T19094] 44163 total pagecache pages
[  425.078230][T19094] 0 pages in swap cache
[  425.082985][T19094] Free swap  = 124996kB
[  425.087200][T19094] Total swap = 124996kB
[  425.092649][T19094] 2097051 pages RAM
[  425.096578][T19094] 0 pages HighMem/MovableOnly
[  425.112127][T19094] 428217 pages reserved
[  425.116517][T19094] 0 pages cma reserved
[  425.131414][T19099] xt_hashlimit: max too large, truncated to 1048576
[  425.348501][T19101] tunl0: entered promiscuous mode
[  425.355814][T19101] netlink: 'syz.0.3582': attribute type 4 has an invalid length.
[  425.365866][T19101] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3582'.
[  425.422127][T19111] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3584'.
[  425.441065][T19111] netlink: 11 bytes leftover after parsing attributes in process `syz.3.3584'.
[  425.466399][T19113] netlink: 'syz.4.3585': attribute type 10 has an invalid length.
[  425.508208][T19113] geneve2: entered promiscuous mode
[  425.513986][T19113] geneve2: entered allmulticast mode
[  426.274641][T19123] netlink: 'syz.3.3587': attribute type 1 has an invalid length.
[  426.339930][T19125] Cannot find add_set index 0 as target
[  426.782477][T19081] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  426.986434][T19143] xt_hashlimit: max too large, truncated to 1048576
[  427.009255][T19145] netlink: 'syz.2.3596': attribute type 4 has an invalid length.
[  427.080022][T19146] netlink: 'syz.1.3595': attribute type 29 has an invalid length.
[  427.097267][T19145] xt_hashlimit: max too large, truncated to 1048576
[  427.126207][T19145] xt_hashlimit: overflow, try lower: 0/0
[  427.375440][T19168] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20003
[  427.860005][T19181] IPVS: length: 8 != 121776898056
[  430.163928][T19171] 
: renamed from dummy0
[  430.245769][T19179] netlink: 'syz.4.3603': attribute type 1 has an invalid length.
[  430.284668][T12646] bridge_slave_1: left allmulticast mode
[  430.297089][T12646] bridge_slave_1: left promiscuous mode
[  430.322792][T12646] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.338412][T19195] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  430.348572][T19195] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  430.361385][T12646] bridge_slave_0: left allmulticast mode
[  430.367139][T12646] bridge_slave_0: left promiscuous mode
[  430.376920][T12646] bridge0: port 1(bridge_slave_0) entered disabled state
[  430.935154][T12646] bond4 (unregistering): (slave gre2): Releasing backup interface
[  430.947325][T12646] gre2 (unregistering): left promiscuous mode
[  430.995013][T12646] bond5 (unregistering): (slave geneve3): Releasing active interface
[  431.056374][T12646] bond1 (unregistering): Released all slaves
[  431.077532][T12646] bond2 (unregistering): Released all slaves
[  431.096257][T12646] bond3 (unregistering): Released all slaves
[  431.111698][T12646] bond0 (unregistering): Released all slaves
[  431.127448][T12646] bond4 (unregistering): Released all slaves
[  431.156225][T12646] bond5 (unregistering): Released all slaves
[  431.176607][T19196] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  431.201284][T19204] FAULT_INJECTION: forcing a failure.
[  431.201284][T19204] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  431.249303][T19204] CPU: 1 UID: 0 PID: 19204 Comm: syz.4.3609 Not tainted syzkaller #0 PREEMPT(full) 
[  431.249329][T19204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  431.249338][T19204] Call Trace:
[  431.249344][T19204]  <TASK>
[  431.249351][T19204]  dump_stack_lvl+0xe8/0x150
[  431.249379][T19204]  should_fail_ex+0x40c/0x560
[  431.249403][T19204]  _copy_to_user+0x31/0xb0
[  431.249430][T19204]  simple_read_from_buffer+0xe1/0x170
[  431.249490][T19204]  proc_fail_nth_read+0x1bb/0x230
[  431.249533][T19204]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  431.249558][T19204]  ? rw_verify_area+0x24a/0x4c0
[  431.249587][T19204]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  431.249608][T19204]  vfs_read+0x213/0xa80
[  431.249637][T19204]  ? __pfx___mutex_lock+0x10/0x10
[  431.249663][T19204]  ? __pfx_vfs_read+0x10/0x10
[  431.249688][T19204]  ? __fget_files+0x2a/0x420
[  431.249713][T19204]  ? __fget_files+0x3a2/0x420
[  431.249732][T19204]  ? __fget_files+0x2a/0x420
[  431.249760][T19204]  ksys_read+0x150/0x270
[  431.249786][T19204]  ? __pfx_ksys_read+0x10/0x10
[  431.249817][T19204]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  431.249836][T19204]  do_syscall_64+0x174/0x580
[  431.249858][T19204]  ? trace_irq_disable+0x3b/0x140
[  431.249879][T19204]  ? clear_bhb_loop+0x70/0xc0
[  431.249897][T19204]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  431.249912][T19204] RIP: 0033:0x7f9c8375e90e
[  431.249927][T19204] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  431.249939][T19204] RSP: 002b:00007f9c84690fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  431.249954][T19204] RAX: ffffffffffffffda RBX: 00007f9c846916c0 RCX: 00007f9c8375e90e
[  431.249963][T19204] RDX: 000000000000000f RSI: 00007f9c846910a0 RDI: 0000000000000005
[  431.249972][T19204] RBP: 00007f9c84691090 R08: 0000000000000000 R09: 0000000000000000
[  431.249980][T19204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  431.249988][T19204] R13: 00007f9c83a26128 R14: 00007f9c83a26090 R15: 00007ffe02d9a2d8
[  431.250012][T19204]  </TASK>
[  431.489399][T12646] 
: left promiscuous mode
[  431.721252][T19234] xt_nfacct: accounting object `syz0' does not exist
[  431.783930][T12646] tipc: Disabling bearer <eth:syzkaller0>
[  431.808918][T12646] tipc: Left network mode
[  432.029112][T19251] xt_hashlimit: max too large, truncated to 1048576
[  432.171401][T19255] __nla_validate_parse: 3 callbacks suppressed
[  432.171421][T19255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3622'.
[  432.266196][T19259] Bluetooth: hci0: Opcode 0x080f failed: -22
[  432.305291][T12646] IPVS: stopping backup sync thread 11619 ...
[  432.538076][T19274] xt_nfacct: accounting object `syz0' does not exist
[  432.544561][T19271] netlink: 'syz.3.3627': attribute type 32 has an invalid length.
[  433.107985][T19300] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3637'.
[  433.180540][T19306] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3639'.
[  433.227228][T19309] Cannot find add_set index 0 as target
[  433.315281][T12646] hsr_slave_0: left promiscuous mode
[  433.347719][T12646] hsr_slave_1: left promiscuous mode
[  433.359294][T12646] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  433.368351][T12646] batadv0: mtu less than device minimum
[  433.377991][T12646] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  433.391673][T12646] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  433.403549][T12646] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  433.415351][T12646] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  433.427101][T12646] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  433.438942][T12646] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  433.452416][T12646] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  433.481858][T12646] batman_adv: batadv0: Removing interface: batadv_slave_0
[  433.545891][T19323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3643'.
[  433.560690][T12646] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  433.606775][T12646] batman_adv: batadv0: Removing interface: batadv_slave_1
[  433.617270][T12646] batman_adv: batadv0: Interface deactivated: dummy0
[  433.624291][T12646] batman_adv: batadv0: Removing interface: dummy0
[  433.637514][T12646] batman_adv: batadv0: Removing interface: virt_wifi0
[  433.662066][T12646] veth1_macvtap: left promiscuous mode
[  433.672995][T12646] veth0_macvtap: left promiscuous mode
[  433.685350][T12646] veth1_vlan: left promiscuous mode
[  433.693639][T12646] veth0_vlan: left promiscuous mode
[  434.008249][T12646] team0 (unregistering): Port device team_slave_1 removed
[  434.056909][T12646] team0 (unregistering): Port device team_slave_0 removed
[  434.269185][T19338] tc_dump_action: action bad kind
[  434.390027][T19342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3648'.
[  435.137070][T19372] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3655'.
[  435.303010][T19377] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3658'.
[  435.351118][T12646] IPVS: stop unused estimator thread 0...
[  435.967851][T19409] Cannot find set identified by id 0 to match
[  436.028589][T19393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3664'.
[  436.047900][T19393] netlink: 'syz.0.3664': attribute type 10 has an invalid length.
[  436.063402][T19393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3664'.
[  436.312979][T19425] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3671'.
[  436.466320][T19430] netlink: 'syz.4.3673': attribute type 4 has an invalid length.
[  436.541358][T19432] netlink: 'syz.2.3674': attribute type 4 has an invalid length.
[  436.585544][T19432] 8021q: adding VLAN 0 to HW filter on device bond0
[  436.909419][T19459] xt_hashlimit: max too large, truncated to 1048576
[  437.036165][T19463] sch_tbf: peakrate 7 is lower than or equals to rate 213 !
[  437.074882][T19468] netlink: 'syz.1.3686': attribute type 4 has an invalid length.
[  437.127797][T19468] xt_hashlimit: max too large, truncated to 1048576
[  437.149029][T19468] xt_hashlimit: overflow, try lower: 0/0
[  437.314734][T19478] __nla_validate_parse: 8 callbacks suppressed
[  437.314775][T19478] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3690'.
[  437.402994][T19478] netlink: 'syz.2.3690': attribute type 4 has an invalid length.
[  437.430927][T19478] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3690'.
[  437.470300][T19489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3695'.
[  437.499148][T19489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3695'.
[  437.510346][T19491] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3694'.
[  437.784570][T19500] FAULT_INJECTION: forcing a failure.
[  437.784570][T19500] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  437.801295][T19500] CPU: 0 UID: 0 PID: 19500 Comm: syz.2.3698 Not tainted syzkaller #0 PREEMPT(full) 
[  437.801320][T19500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  437.801330][T19500] Call Trace:
[  437.801337][T19500]  <TASK>
[  437.801344][T19500]  dump_stack_lvl+0xe8/0x150
[  437.801372][T19500]  should_fail_ex+0x40c/0x560
[  437.801395][T19500]  _copy_from_user+0x2d/0xb0
[  437.801429][T19500]  bpf_test_init+0xd8/0x150
[  437.801454][T19500]  bpf_prog_test_run_xdp+0x4cc/0x11d0
[  437.801488][T19500]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  437.801513][T19500]  ? __fget_files+0x2a/0x420
[  437.801536][T19500]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  437.801557][T19500]  bpf_prog_test_run+0x2c5/0x340
[  437.801583][T19500]  __sys_bpf+0xa22/0xd90
[  437.801610][T19500]  ? __pfx___sys_bpf+0x10/0x10
[  437.801636][T19500]  ? __fget_files+0x2a/0x420
[  437.801668][T19500]  ? ksys_write+0x242/0x270
[  437.801691][T19500]  ? __pfx_ksys_write+0x10/0x10
[  437.801717][T19500]  __x64_sys_bpf+0xba/0xd0
[  437.801735][T19500]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.801752][T19500]  do_syscall_64+0x174/0x580
[  437.801774][T19500]  ? trace_irq_disable+0x3b/0x140
[  437.801791][T19500]  ? clear_bhb_loop+0x70/0xc0
[  437.801809][T19500]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.801826][T19500] RIP: 0033:0x7f51a819e0d9
[  437.801841][T19500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  437.801854][T19500] RSP: 002b:00007f51a90f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  437.801869][T19500] RAX: ffffffffffffffda RBX: 00007f51a8425fa0 RCX: 00007f51a819e0d9
[  437.801879][T19500] RDX: 0000000000000050 RSI: 0000200000000900 RDI: 000000000000000a
[  437.801887][T19500] RBP: 00007f51a90f2090 R08: 0000000000000000 R09: 0000000000000000
[  437.801895][T19500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  437.801903][T19500] R13: 00007f51a8426038 R14: 00007f51a8425fa0 R15: 00007fff249ce818
[  437.801926][T19500]  </TASK>
[  438.028926][T19503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3699'.
[  438.086131][T19509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3702'.
[  438.175953][T19510] vlan2: entered allmulticast mode
[  438.225179][T19510] bond0: entered allmulticast mode
[  438.247442][T19517] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3706'.
[  438.260686][T19510] bond_slave_0: entered allmulticast mode
[  438.279888][T19510] bond_slave_1: entered allmulticast mode
[  438.297928][T19510] bridge0: port 3(vlan2) entered blocking state
[  438.335141][T19510] bridge0: port 3(vlan2) entered disabled state
[  438.343818][T19522] netlink: 'syz.4.3705': attribute type 4 has an invalid length.
[  438.355149][T19510] vlan2: entered promiscuous mode
[  438.363868][T19510] bond0: entered promiscuous mode
[  438.369012][T19510] bond_slave_0: entered promiscuous mode
[  438.377441][T19510] bond_slave_1: entered promiscuous mode
[  438.387647][T19510] bridge0: port 3(vlan2) entered blocking state
[  438.394078][T19510] bridge0: port 3(vlan2) entered forwarding state
[  438.419518][T19524] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3708'.
[  438.451307][T19524] netlink: 'syz.1.3708': attribute type 4 has an invalid length.
[  438.462190][T19524] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3708'.
[  438.469371][T19519] xt_hashlimit: max too large, truncated to 1048576
[  438.495454][T19519] xt_hashlimit: overflow, try lower: 0/0
[  438.567632][T19537] No such timeout policy "syz1"
[  438.639383][T19540] netlink: 'syz.1.3712': attribute type 1 has an invalid length.
[  438.664294][T19542] FAULT_INJECTION: forcing a failure.
[  438.664294][T19542] name failslab, interval 1, probability 0, space 0, times 0
[  438.688900][T19542] CPU: 1 UID: 0 PID: 19542 Comm: syz.2.3713 Not tainted syzkaller #0 PREEMPT(full) 
[  438.688926][T19542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  438.688936][T19542] Call Trace:
[  438.688943][T19542]  <TASK>
[  438.688951][T19542]  dump_stack_lvl+0xe8/0x150
[  438.688981][T19542]  should_fail_ex+0x40c/0x560
[  438.689002][T19542]  ? bpf_test_run_xdp_live+0x1ef/0x1c20
[  438.689024][T19542]  should_failslab+0xa8/0x100
[  438.689049][T19542]  __kvmalloc_node_noprof+0x176/0x860
[  438.689074][T19542]  ? arch_stack_walk+0xfb/0x150
[  438.689137][T19542]  ? bpf_test_run_xdp_live+0x1ef/0x1c20
[  438.689164][T19542]  bpf_test_run_xdp_live+0x1ef/0x1c20
[  438.689187][T19542]  ? __pfx_stack_trace_save+0x10/0x10
[  438.689216][T19542]  ? stack_depot_save_flags+0x33/0x800
[  438.689306][T19542]  ? __kmalloc_noprof+0x1ad/0x720
[  438.689326][T19542]  ? kasan_save_track+0x4f/0x80
[  438.689345][T19542]  ? kasan_save_track+0x3e/0x80
[  438.689363][T19542]  ? __kasan_kmalloc+0x93/0xb0
[  438.689382][T19542]  ? __kmalloc_noprof+0x375/0x720
[  438.689399][T19542]  ? bpf_test_init+0x9f/0x150
[  438.689414][T19542]  ? bpf_prog_test_run_xdp+0x4cc/0x11d0
[  438.689435][T19542]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  438.689490][T19542]  ? __might_fault+0xaf/0x130
[  438.689510][T19542]  ? __might_fault+0xaf/0x130
[  438.689537][T19542]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  438.689564][T19542]  ? _copy_from_user+0x94/0xb0
[  438.689584][T19542]  ? bpf_test_init+0x113/0x150
[  438.689600][T19542]  ? xdp_convert_md_to_buff+0x5b/0x330
[  438.689622][T19542]  bpf_prog_test_run_xdp+0x7d8/0x11d0
[  438.689658][T19542]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  438.689682][T19542]  ? __fget_files+0x2a/0x420
[  438.689709][T19542]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  438.689730][T19542]  bpf_prog_test_run+0x2c5/0x340
[  438.689756][T19542]  __sys_bpf+0xa22/0xd90
[  438.689783][T19542]  ? __pfx___sys_bpf+0x10/0x10
[  438.689812][T19542]  ? __fget_files+0x2a/0x420
[  438.689848][T19542]  ? ksys_write+0x242/0x270
[  438.689875][T19542]  ? __pfx_ksys_write+0x10/0x10
[  438.689911][T19542]  __x64_sys_bpf+0xba/0xd0
[  438.689930][T19542]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.689950][T19542]  do_syscall_64+0x174/0x580
[  438.689973][T19542]  ? trace_irq_disable+0x3b/0x140
[  438.689993][T19542]  ? clear_bhb_loop+0x70/0xc0
[  438.690015][T19542]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.690032][T19542] RIP: 0033:0x7f51a819e0d9
[  438.690050][T19542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  438.690064][T19542] RSP: 002b:00007f51a90f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  438.690083][T19542] RAX: ffffffffffffffda RBX: 00007f51a8425fa0 RCX: 00007f51a819e0d9
[  438.690096][T19542] RDX: 0000000000000050 RSI: 0000200000000900 RDI: 000000000000000a
[  438.690107][T19542] RBP: 00007f51a90f2090 R08: 0000000000000000 R09: 0000000000000000
[  438.690118][T19542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  438.690129][T19542] R13: 00007f51a8426038 R14: 00007f51a8425fa0 R15: 00007fff249ce818
[  438.690159][T19542]  </TASK>
[  439.059986][T19547] vlan0: entered promiscuous mode
[  439.065389][T19547] virt_wifi0: entered promiscuous mode
[  439.081761][T19545] xt_hashlimit: max too large, truncated to 1048576
[  439.231418][T12642] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  439.241332][T12642] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  439.285589][T12642] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  439.313468][T12642] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  439.539309][T12642] tipc: Subscription rejected, illegal request
[  439.605596][T19573] netlink: 'syz.2.3724': attribute type 4 has an invalid length.
[  439.806246][T19584] FAULT_INJECTION: forcing a failure.
[  439.806246][T19584] name failslab, interval 1, probability 0, space 0, times 0
[  439.854315][T19584] CPU: 1 UID: 0 PID: 19584 Comm: syz.2.3727 Not tainted syzkaller #0 PREEMPT(full) 
[  439.854341][T19584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  439.854351][T19584] Call Trace:
[  439.854358][T19584]  <TASK>
[  439.854365][T19584]  dump_stack_lvl+0xe8/0x150
[  439.854394][T19584]  should_fail_ex+0x40c/0x560
[  439.854414][T19584]  ? bpf_test_run_xdp_live+0x220/0x1c20
[  439.854437][T19584]  should_failslab+0xa8/0x100
[  439.854462][T19584]  __kvmalloc_node_noprof+0x176/0x860
[  439.854487][T19584]  ? __kvmalloc_node_noprof+0x35c/0x860
[  439.854507][T19584]  ? bpf_test_run_xdp_live+0x220/0x1c20
[  439.854533][T19584]  bpf_test_run_xdp_live+0x220/0x1c20
[  439.854555][T19584]  ? __pfx_stack_trace_save+0x10/0x10
[  439.854577][T19584]  ? stack_depot_save_flags+0x33/0x800
[  439.854595][T19584]  ? do_raw_spin_lock+0x12b/0x2f0
[  439.854614][T19584]  ? __kmalloc_noprof+0x1ad/0x720
[  439.854633][T19584]  ? kasan_save_track+0x4f/0x80
[  439.854651][T19584]  ? kasan_save_track+0x3e/0x80
[  439.854670][T19584]  ? __kasan_kmalloc+0x93/0xb0
[  439.854688][T19584]  ? __kmalloc_noprof+0x375/0x720
[  439.854706][T19584]  ? bpf_test_init+0x9f/0x150
[  439.854723][T19584]  ? bpf_prog_test_run_xdp+0x4cc/0x11d0
[  439.854745][T19584]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  439.854796][T19584]  ? __might_fault+0xaf/0x130
[  439.854815][T19584]  ? __might_fault+0xaf/0x130
[  439.854842][T19584]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  439.854870][T19584]  ? _copy_from_user+0x94/0xb0
[  439.854893][T19584]  ? bpf_test_init+0x113/0x150
[  439.854910][T19584]  ? xdp_convert_md_to_buff+0x5b/0x330
[  439.854933][T19584]  bpf_prog_test_run_xdp+0x7d8/0x11d0
[  439.854968][T19584]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  439.854993][T19584]  ? __fget_files+0x2a/0x420
[  439.855019][T19584]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  439.855041][T19584]  bpf_prog_test_run+0x2c5/0x340
[  439.855067][T19584]  __sys_bpf+0xa22/0xd90
[  439.855096][T19584]  ? __pfx___sys_bpf+0x10/0x10
[  439.855127][T19584]  ? __fget_files+0x2a/0x420
[  439.855164][T19584]  ? ksys_write+0x242/0x270
[  439.855191][T19584]  ? __pfx_ksys_write+0x10/0x10
[  439.855220][T19584]  __x64_sys_bpf+0xba/0xd0
[  439.855239][T19584]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  439.855258][T19584]  do_syscall_64+0x174/0x580
[  439.855287][T19584]  ? trace_irq_disable+0x3b/0x140
[  439.855307][T19584]  ? clear_bhb_loop+0x70/0xc0
[  439.855328][T19584]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  439.855345][T19584] RIP: 0033:0x7f51a819e0d9
[  439.855362][T19584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  439.855377][T19584] RSP: 002b:00007f51a90f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  439.855398][T19584] RAX: ffffffffffffffda RBX: 00007f51a8425fa0 RCX: 00007f51a819e0d9
[  439.855411][T19584] RDX: 0000000000000050 RSI: 0000200000000900 RDI: 000000000000000a
[  439.855422][T19584] RBP: 00007f51a90f2090 R08: 0000000000000000 R09: 0000000000000000
[  439.855434][T19584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  439.855444][T19584] R13: 00007f51a8426038 R14: 00007f51a8425fa0 R15: 00007fff249ce818
[  439.855474][T19584]  </TASK>
[  440.248577][T19579] team0 (unregistering): Port device team_slave_0 removed
[  440.266565][T19591] xt_hashlimit: max too large, truncated to 1048576
[  440.305731][T19579] team0 (unregistering): Port device team_slave_1 removed
[  440.724247][T19609] bridge0: port 2(bridge_slave_1) entered disabled state
[  440.731971][T19609] bridge0: port 1(bridge_slave_0) entered disabled state
[  440.760361][T19609] bridge0: entered allmulticast mode
[  440.851354][T19617] xt_nfacct: accounting object `syz0' does not exist
[  443.642769][T19638] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  443.646322][T19642] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  443.672759][T19640] IPVS: Error connecting to the multicast addr
[  443.786180][T19650] __nla_validate_parse: 5 callbacks suppressed
[  443.786196][T19650] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3744'.
[  443.865320][T19659] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3746'.
[  444.124924][T19676] bridge_slave_0: left allmulticast mode
[  444.131109][T19676] bridge_slave_0: left promiscuous mode
[  444.136986][T19676] bridge0: port 1(bridge_slave_0) entered disabled state
[  444.186868][T19676] bridge_slave_1: left allmulticast mode
[  444.202374][T19676] bridge_slave_1: left promiscuous mode
[  444.224245][T19676] bridge0: port 2(bridge_slave_1) entered disabled state
[  444.250819][T19676] bond0: (slave bond_slave_0): Releasing backup interface
[  444.278842][T19676] bond0: (slave bond_slave_1): Releasing backup interface
[  444.308409][T19676] team0: Port device team_slave_0 removed
[  444.323348][T19676] team0: Port device team_slave_1 removed
[  444.345173][T19676] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  444.354965][T19676] batman_adv: batadv0: Removing interface: batadv_slave_1
[  444.364778][T19676] net_ratelimit: 33 callbacks suppressed
[  444.364813][T19676] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  444.407482][T19678] team0: Mode changed to "loadbalance"
[  444.415769][T19688] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3753'.
[  444.430083][T19688] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3753'.
[  444.461712][T19676] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3753'.
[  444.481331][T19676] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3753'.
[  444.524438][T19676] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3753'.
[  444.541532][T19676] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3753'.
[  444.809182][T19711] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3758'.
[  444.858373][T19708] bridge0: port 2(bridge_slave_1) entered blocking state
[  444.865641][T19708] bridge0: port 2(bridge_slave_1) entered forwarding state
[  444.874432][T19708] bridge0: port 1(bridge_slave_0) entered blocking state
[  444.881661][T19708] bridge0: port 1(bridge_slave_0) entered forwarding state
[  445.104476][T19708] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  445.139443][T19708] vlan0: left promiscuous mode
[  445.145435][T19708] virt_wifi0: left promiscuous mode
[  445.178265][T12646] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  445.541395][T19744] xt_nfacct: accounting object `syz0' does not exist
[  445.615428][T19743] smc: net device lo erased user defined pnetid SYZ0
[  445.651855][T19743] smc: smcd device lo erased user defined pnetid SYZ0
[  445.816404][T19755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3778'.
[  445.845571][T19759] IPVS: set_ctl: invalid protocol: 59 10.1.1.2:20004
[  446.118498][T19776] Cannot find add_set index 98 as target
[  446.230710][T19778] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  446.249766][T19778] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  446.268608][T19785] FAULT_INJECTION: forcing a failure.
[  446.268608][T19785] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  446.295927][T19785] CPU: 0 UID: 0 PID: 19785 Comm: syz.0.3791 Not tainted syzkaller #0 PREEMPT(full) 
[  446.295952][T19785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  446.295961][T19785] Call Trace:
[  446.295967][T19785]  <TASK>
[  446.295975][T19785]  dump_stack_lvl+0xe8/0x150
[  446.296003][T19785]  should_fail_ex+0x40c/0x560
[  446.296027][T19785]  _copy_from_user+0x2d/0xb0
[  446.296050][T19785]  __sys_bpf+0x2e7/0xd90
[  446.296079][T19785]  ? __pfx___sys_bpf+0x10/0x10
[  446.296109][T19785]  ? __fget_files+0x2a/0x420
[  446.296146][T19785]  ? ksys_write+0x242/0x270
[  446.296169][T19785]  ? __pfx_ksys_write+0x10/0x10
[  446.296194][T19785]  __x64_sys_bpf+0xba/0xd0
[  446.296213][T19785]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.296231][T19785]  do_syscall_64+0x174/0x580
[  446.296255][T19785]  ? trace_irq_disable+0x3b/0x140
[  446.296276][T19785]  ? clear_bhb_loop+0x70/0xc0
[  446.296297][T19785]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.296314][T19785] RIP: 0033:0x7fb23a39e0d9
[  446.296330][T19785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  446.296343][T19785] RSP: 002b:00007fb23b2f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  446.296360][T19785] RAX: ffffffffffffffda RBX: 00007fb23a625fa0 RCX: 00007fb23a39e0d9
[  446.296372][T19785] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a
[  446.296382][T19785] RBP: 00007fb23b2f5090 R08: 0000000000000000 R09: 0000000000000000
[  446.296392][T19785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  446.296403][T19785] R13: 00007fb23a626038 R14: 00007fb23a625fa0 R15: 00007ffefb96dec8
[  446.296436][T19785]  </TASK>
[  446.985490][T19815] veth0: entered promiscuous mode
[  447.103455][T19823] xt_l2tp: v2 doesn't support IP mode
[  447.251104][T19811] veth0: left promiscuous mode
[  447.701485][T19859] x_tables: duplicate underflow at hook 1
[  448.282206][T19875] v: renamed from veth0_vlan
[  448.380993][T19896] sctp: [Deprecated]: syz.1.3820 (pid 19896) Use of struct sctp_assoc_value in delayed_ack socket option.
[  448.380993][T19896] Use struct sctp_sack_info instead
[  448.917634][T19925] Cannot find add_set index 286 as target
[  448.988295][T19927] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  449.010446][T19927] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  449.089969][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  449.196539][T19941] FAULT_INJECTION: forcing a failure.
[  449.196539][T19941] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  449.238441][T19941] CPU: 0 UID: 0 PID: 19941 Comm: syz.0.3835 Not tainted syzkaller #0 PREEMPT(full) 
[  449.238472][T19941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  449.238487][T19941] Call Trace:
[  449.238494][T19941]  <TASK>
[  449.238508][T19941]  dump_stack_lvl+0xe8/0x150
[  449.238536][T19941]  should_fail_ex+0x40c/0x560
[  449.238560][T19941]  _copy_to_user+0x31/0xb0
[  449.238586][T19941]  bpf_test_finish+0x4ea/0x690
[  449.238617][T19941]  ? __pfx_bpf_test_finish+0x10/0x10
[  449.238642][T19941]  ? _copy_from_user+0x94/0xb0
[  449.238664][T19941]  ? bpf_test_init+0x113/0x150
[  449.238685][T19941]  bpf_prog_test_run_xdp+0x8bc/0x11d0
[  449.238726][T19941]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  449.238751][T19941]  ? __fget_files+0x2a/0x420
[  449.238776][T19941]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  449.238797][T19941]  bpf_prog_test_run+0x2c5/0x340
[  449.238824][T19941]  __sys_bpf+0xa22/0xd90
[  449.238852][T19941]  ? __pfx___sys_bpf+0x10/0x10
[  449.238882][T19941]  ? __fget_files+0x2a/0x420
[  449.238919][T19941]  ? ksys_write+0x242/0x270
[  449.238946][T19941]  ? __pfx_ksys_write+0x10/0x10
[  449.238974][T19941]  __x64_sys_bpf+0xba/0xd0
[  449.238993][T19941]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  449.239012][T19941]  do_syscall_64+0x174/0x580
[  449.239036][T19941]  ? trace_irq_disable+0x3b/0x140
[  449.239056][T19941]  ? clear_bhb_loop+0x70/0xc0
[  449.239077][T19941]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  449.239094][T19941] RIP: 0033:0x7fb23a39e0d9
[  449.239110][T19941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  449.239125][T19941] RSP: 002b:00007fb23b2f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  449.239144][T19941] RAX: ffffffffffffffda RBX: 00007fb23a625fa0 RCX: 00007fb23a39e0d9
[  449.239157][T19941] RDX: 0000000000000050 RSI: 0000200000000900 RDI: 000000000000000a
[  449.239168][T19941] RBP: 00007fb23b2f5090 R08: 0000000000000000 R09: 0000000000000000
[  449.239179][T19941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  449.239189][T19941] R13: 00007fb23a626038 R14: 00007fb23a625fa0 R15: 00007ffefb96dec8
[  449.239217][T19941]  </TASK>
[  449.854071][T19963] vlan2: entered promiscuous mode
[  450.015638][T19966] __nla_validate_parse: 3 callbacks suppressed
[  450.015655][T19966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3840'.
[  450.069454][T19972] netlink: 'syz.1.3842': attribute type 31 has an invalid length.
[  450.186482][T19977] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  450.213809][T19977] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  450.244807][T19981] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3846'.
[  450.331768][T19981] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3846'.
[  450.375643][T19991] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3849'.
[  450.414627][T19993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  450.684924][T20008] tcf_pedit_act: 22 callbacks suppressed
[  450.684942][T20008] tc action pedit offset must be on 32 bit boundaries
[  450.699059][T20008] tc action pedit offset must be on 32 bit boundaries
[  450.705904][T20008] tc action pedit offset must be on 32 bit boundaries
[  450.712732][T20008] tc action pedit offset must be on 32 bit boundaries
[  450.719509][T20008] tc action pedit offset must be on 32 bit boundaries
[  450.726328][T20008] tc action pedit offset must be on 32 bit boundaries
[  450.733165][T20008] tc action pedit offset must be on 32 bit boundaries
[  450.740007][T20008] tc action pedit offset must be on 32 bit boundaries
[  450.746799][T20008] tc action pedit offset must be on 32 bit boundaries
[  450.753631][T20008] tc action pedit offset must be on 32 bit boundaries
[  450.760475][T20008] TC_ACT_REPEAT abuse ?
[  450.831085][T20014] 8021q: adding VLAN 0 to HW filter on device bond3
[  450.844806][T20014] bridge0: port 3(bond3) entered blocking state
[  450.869858][T20014] bridge0: port 3(bond3) entered disabled state
[  450.876383][T20014] bond3: entered allmulticast mode
[  450.887750][T20014] bond3: entered promiscuous mode
[  450.893704][T20014] bridge0: port 3(bond3) entered blocking state
[  450.900151][T20014] bridge0: port 3(bond3) entered forwarding state
[  450.920002][T20024] Cannot find add_set index 0 as target
[  450.955471][T20026] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  450.965217][T20026] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  451.042034][T20014] netlink: 810 bytes leftover after parsing attributes in process `syz.0.3859'.
[  451.074917][   T77] bridge0: port 3(bond3) entered disabled state
[  451.090937][T20014] netlink: 'syz.0.3859': attribute type 16 has an invalid length.
[  451.112657][T20014] netlink: 'syz.0.3859': attribute type 17 has an invalid length.
[  451.169298][T20036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3865'.
[  451.210147][T20019] bridge0: port 1(bridge_slave_0) entered disabled state
[  451.270909][T20014] tunl0: left promiscuous mode
[  451.448767][T20014] bridge0: port 1(bridge_slave_0) entered blocking state
[  451.456011][T20014] bridge0: port 1(bridge_slave_0) entered forwarding state
[  451.574751][T20014] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  451.639615][   T77] bridge0: port 2(bridge_slave_1) entered blocking state
[  451.646811][   T77] bridge0: port 2(bridge_slave_1) entered forwarding state
[  451.682360][T20066] netlink: 'syz.2.3873': attribute type 2 has an invalid length.
[  451.682487][T20064] --map-set only usable from mangle table
[  451.690563][T20066] netlink: 'syz.2.3873': attribute type 1 has an invalid length.
[  451.706223][T20066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3873'.
[  451.724888][T20066] nbd: illegal input index -120127480
[  452.124121][T20088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3879'.
[  452.174879][T20088] netlink: 'syz.1.3879': attribute type 1 has an invalid length.
[  452.175576][T20098] netlink: 'syz.1.3879': attribute type 16 has an invalid length.
[  452.229935][T20088] netlink: 'syz.1.3879': attribute type 1 has an invalid length.
[  452.265179][T20098] netlink: 'syz.1.3879': attribute type 3 has an invalid length.
[  452.290858][T20088] netlink: 'syz.1.3879': attribute type 1 has an invalid length.
[  452.310944][T20098] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.3879'.
[  452.534102][T20120] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  452.585082][T20113] 8021q: adding VLAN 0 to HW filter on device bond1
[  452.591945][T20120] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  452.607545][T20122] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  452.653324][T20115] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  452.733444][T20130] sctp: [Deprecated]: syz.1.3890 (pid 20130) Use of struct sctp_assoc_value in delayed_ack socket option.
[  452.733444][T20130] Use struct sctp_sack_info instead
[  452.780872][T20123] bond1: entered promiscuous mode
[  452.806615][T20123] bond1: entered allmulticast mode
[  453.420295][T20173] netlink: Invalid conntrack helper
[  453.732527][T20195] batman_adv: batadv0: Adding interface: veth0
[  453.748932][T20195] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  453.788238][T20195] batman_adv: batadv0: Interface activated: veth0
[  453.901846][T20205] batman_adv: batadv0: Interface deactivated: veth0
[  453.926813][T20205] batman_adv: batadv0: Removing interface: veth0
[  453.986294][T20205] bridge0: port 3(vlan2) entered disabled state
[  454.003530][T20205] vlan2 (unregistering): left allmulticast mode
[  454.016873][T20205] batadv0 (unregistering): left allmulticast mode
[  454.024353][T20205] vlan2 (unregistering): left promiscuous mode
[  454.032201][T20205] batadv0 (unregistering): left promiscuous mode
[  454.038898][T20205] bridge0: port 3(vlan2) entered disabled state
[  454.065244][ T5268] v: left promiscuous mode
[  454.095658][    T9] v: entered promiscuous mode
[  454.103771][T20161] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  455.233397][T20263] vlan3: entered promiscuous mode
[  455.263041][T20263] macvlan0: entered promiscuous mode
[  455.276605][T20269] net_ratelimit: 6 callbacks suppressed
[  455.276624][T20269] openvswitch: netlink: Duplicate or invalid key (type 0).
[  455.319502][T20269] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  455.532367][T20284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3922'.
[  455.610133][T20290] validate_nla: 55 callbacks suppressed
[  455.610162][T20290] netlink: 'syz.2.3923': attribute type 4 has an invalid length.
[  455.629229][T20284] vlan4: entered promiscuous mode
[  455.673055][T20293] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  455.692411][T20293] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  455.707789][T20290] xt_hashlimit: max too large, truncated to 1048576
[  455.718111][T20290] xt_hashlimit: overflow, try lower: 0/0
[  455.885476][T20296] netlink: 'syz.3.3925': attribute type 4 has an invalid length.
[  455.910570][T20296] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3925'.
[  456.063244][T20296] .`: renamed from bond0 (while UP)
[  456.129144][T20310] xt_nfacct: accounting object `syz0' does not exist
[  456.158412][    T9] bridge0: port 3(vlan2) entered disabled state
[  456.271028][T20318] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3934'.
[  456.287286][T20320] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3934'.
[  456.468737][T20332] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3937'.
[  456.536889][T20332] vlan0: entered promiscuous mode
[  456.848899][T20349] netlink: 'syz.1.3939': attribute type 30 has an invalid length.
[  456.891417][T20349] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3939'.
[  456.976346][    C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff8880292b7800: connection exists (00 00). last cmd: 10
[  456.987887][    C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff8880292b5400: connection exists (00 00). last cmd: 10
[  457.046286][T20359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3944'.
[  457.113798][T20363] SET target dimension over the limit!
[  457.157005][T20367] xt_nfacct: accounting object `syz0' does not exist
[  457.249766][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  457.284456][T20370] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3947'.
[  457.414139][T20370] tipc: Started in network mode
[  457.421453][T20370] tipc: Node identity 4246, cluster identity 4711
[  457.427932][T20370] tipc: Node number set to 16966
[  457.450384][T12637] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  457.461072][T12641] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  457.484687][T12641] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  457.513455][T12641] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  457.702784][T20387] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3954'.
[  457.770716][T20392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3956'.
[  457.842795][T20399] xt_nfacct: accounting object `syz0' does not exist
[  458.082587][T20415] xt_hashlimit: size too large, truncated to 1048576
[  458.099165][T20417] netlink: 'syz.1.3964': attribute type 4 has an invalid length.
[  458.198179][T20423] xt_TCPMSS: Only works on TCP SYN packets
[  458.580279][T20438] xt_TPROXY: Can be used only with -p tcp or -p udp
[  458.712583][T20443] xt_nfacct: accounting object `syz0' does not exist
[  459.002620][T20455] netlink: 'syz.2.3974': attribute type 9 has an invalid length.
[  461.033863][T20438] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  461.435475][T20486] __nla_validate_parse: 5 callbacks suppressed
[  461.435494][T20486] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3979'.
[  461.505772][ T1038] IPVS: starting estimator thread 0...
[  461.513467][T20491] xt_nfacct: accounting object `syz0' does not exist
[  461.611849][T20493] IPVS: using max 27 ests per chain, 64800 per kthread
[  462.021093][T20519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3994'.
[  462.141506][T20523] netlink: 'syz.0.3996': attribute type 1 has an invalid length.
[  462.166642][T20523] batadv1: entered promiscuous mode
[  462.171535][T20530] xt_nfacct: accounting object `syz0' does not exist
[  462.183811][T20523] batadv1: entered allmulticast mode
[  462.192643][T20523] 8021q: adding VLAN 0 to HW filter on device batadv1
[  462.208495][T20523] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3996'.
[  462.248947][T20519] §: renamed from sit0 (while UP)
[  462.808692][T20566] netlink: 'syz.1.4005': attribute type 10 has an invalid length.
[  462.845693][T20567] netlink: 'syz.1.4005': attribute type 10 has an invalid length.
[  462.895198][T20567] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  462.936317][T20567] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  463.115773][T20582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4008'.
[  463.149877][T20584] xt_nfacct: accounting object `syz0' does not exist
[  463.232118][T20588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4012'.
[  463.333167][T20595] netlink: 'syz.4.4012': attribute type 1 has an invalid length.
[  463.434463][T20595] 8021q: adding VLAN 0 to HW filter on device bond2
[  464.058223][T20629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4021'.
[  464.166227][T20629] vlan4: entered promiscuous mode
[  464.313034][T20631] syzkaller0: entered promiscuous mode
[  464.332097][T20631] syzkaller0: entered allmulticast mode
[  464.586907][T20642] x_tables: duplicate underflow at hook 1
[  464.608555][T20642] IPVS: set_ctl: invalid protocol: 12 172.30.0.1:20001
[  464.768311][T20645] bridge0: port 2(bridge_slave_1) entered disabled state
[  464.777360][T20645] bridge0: port 1(bridge_slave_0) entered disabled state
[  464.824262][T20645] bridge0: entered allmulticast mode
[  464.872918][T20646] bond3: left allmulticast mode
[  464.926384][T20646] bond3: left promiscuous mode
[  464.965712][T20646] bridge0: port 3(bond3) entered disabled state
[  465.071336][T20646] bridge_slave_1: left allmulticast mode
[  465.082658][T20646] bridge_slave_1: left promiscuous mode
[  465.092429][T20646] bridge0: port 2(bridge_slave_1) entered disabled state
[  465.145602][T20646] bridge_slave_0: left allmulticast mode
[  465.155816][T20646] bridge_slave_0: left promiscuous mode
[  465.179884][T20646] bridge0: port 1(bridge_slave_0) entered disabled state
[  465.372017][T20655] syzkaller0: entered promiscuous mode
[  465.386726][T20655] syzkaller0: entered allmulticast mode
[  465.517910][T20668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4034'.
[  465.552697][T20670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4035'.
[  465.577919][T20668] vlan4: entered promiscuous mode
[  465.583364][T20668] veth0: entered promiscuous mode
[  465.587646][T20670] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  465.724467][T20676] xfrm1: entered allmulticast mode
[  465.742097][T20679] netlink: 'syz.0.4038': attribute type 4 has an invalid length.
[  465.804446][T20679] xt_hashlimit: max too large, truncated to 1048576
[  465.828667][T20679] xt_hashlimit: overflow, try lower: 0/0
[  465.968115][T20693] vlan2: entered allmulticast mode
[  465.974550][T20693] bond0: entered allmulticast mode
[  465.980398][T20693] bond_slave_0: entered allmulticast mode
[  465.986231][T20693] bond_slave_1: entered allmulticast mode
[  465.994834][T20694] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4042'.
[  466.019095][T20694] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4042'.
[  466.173376][T20700] netlink: Conntrack attr has 1 unknown bytes
[  466.212718][T20700] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  466.338920][T20708] xt_nfacct: accounting object `syz0' does not exist
[  466.439912][T20694] veth0_macvtap: left promiscuous mode
[  467.959443][T20765] xt_nfacct: accounting object `syz0' does not exist
[  468.591784][T20779] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  472.619968][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  473.529611][    C0] sched: DL replenish lagged too much
[  504.618857][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  567.976667][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  577.369613][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  577.376597][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P20808/1:b..l P20796/1:b..l
[  577.386371][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=97797, q=500794 ncpus=2)
[  577.394361][    C1] task:syz.2.4068      state:R  running task     stack:25512 pid:20796 tgid:20796 ppid:17340  task_flags:0x400040 flags:0x00080002
[  577.409218][    C1] Call Trace:
[  577.412516][    C1]  <TASK>
[  577.415545][    C1]  __schedule+0x17d9/0x56c0
[  577.420080][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  577.425314][    C1]  ? __pfx___schedule+0x10/0x10
[  577.430184][    C1]  ? __lock_acquire+0x683/0x2cf0
[  577.435159][    C1]  preempt_schedule_irq+0x4d/0xa0
[  577.440202][    C1]  irqentry_exit+0x14f/0x8f0
[  577.444842][    C1]  ? trace_irq_disable+0x3b/0x140
[  577.449884][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  577.455880][    C1] RIP: 0010:debug_lockdep_rcu_enabled+0xd/0x40
[  577.462062][    C1] Code: 8e 67 48 0f b9 3a 90 eb ca cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 31 c0 83 3d 63 11 86 04 00 <74> 1d 83 3d 3a 43 86 04 00 74 14 65 48 8b 0d f8 34 9b 07 31 c0 83
[  577.481683][    C1] RSP: 0018:ffffc900050e7038 EFLAGS: 00000202
[  577.487767][    C1] RAX: 0000000000000000 RBX: ffffc900050e70f8 RCX: ffffc900050e7ed0
[  577.495754][    C1] RDX: ffffc900050e7101 RSI: dffffc0000000000 RDI: ffffc900050e70f0
[  577.503743][    C1] RBP: 1ffffffff21f5701 R08: ffffc900050e7eb8 R09: 0000000000000000
[  577.511723][    C1] R10: ffffc900050e7138 R11: fffff52000a1ce29 R12: ffffc900050e0000
[  577.519701][    C1] R13: ffffffff8177827f R14: ffffc900050e70e8 R15: ffffc900050e7ec8
[  577.527709][    C1]  ? unwind_next_frame+0x8f/0x2550
[  577.532901][    C1]  unwind_next_frame+0x1b5d/0x2550
[  577.538038][    C1]  ? do_mprotect_pkey+0x9d3/0xcd0
[  577.543080][    C1]  ? unwind_next_frame+0x8f/0x2550
[  577.548214][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  577.554377][    C1]  arch_stack_walk+0x11b/0x150
[  577.559166][    C1]  ? __x64_sys_mprotect+0x80/0x90
[  577.564248][    C1]  stack_trace_save+0xa9/0x100
[  577.569055][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  577.574453][    C1]  save_stack+0x122/0x230
[  577.578802][    C1]  ? __pfx_save_stack+0x10/0x10
[  577.583664][    C1]  ? __free_frozen_pages+0xc1e/0xd10
[  577.588960][    C1]  ? __slab_free+0x274/0x2c0
[  577.593560][    C1]  ? qlist_free_all+0x99/0x100
[  577.598336][    C1]  ? kasan_quarantine_reduce+0x148/0x160
[  577.603980][    C1]  ? __kasan_slab_alloc+0x22/0x80
[  577.609015][    C1]  ? kmem_cache_alloc_noprof+0x2a0/0x5f0
[  577.614687][    C1]  ? mas_alloc_nodes+0x291/0x350
[  577.619731][    C1]  ? mas_preallocate+0x2cf/0x630
[  577.624677][    C1]  ? __split_vma+0x318/0xa50
[  577.629283][    C1]  ? vma_modify+0x84a/0x1c70
[  577.633883][    C1]  ? vma_modify_flags+0x24b/0x330
[  577.638916][    C1]  ? mprotect_fixup+0x624/0xb10
[  577.643777][    C1]  ? do_mprotect_pkey+0x9d3/0xcd0
[  577.648821][    C1]  ? page_ext_put+0x97/0xc0
[  577.653341][    C1]  __reset_page_owner+0x71/0x1f0
[  577.658293][    C1]  __free_frozen_pages+0xc1e/0xd10
[  577.663431][    C1]  __slab_free+0x274/0x2c0
[  577.667866][    C1]  ? qlist_free_all+0x8e/0x100
[  577.672643][    C1]  qlist_free_all+0x99/0x100
[  577.677245][    C1]  kasan_quarantine_reduce+0x148/0x160
[  577.682719][    C1]  __kasan_slab_alloc+0x22/0x80
[  577.687590][    C1]  kmem_cache_alloc_noprof+0x2a0/0x5f0
[  577.693062][    C1]  ? kmem_cache_alloc_noprof+0x150/0x5f0
[  577.698710][    C1]  ? mas_alloc_nodes+0x291/0x350
[  577.703664][    C1]  ? mas_alloc_nodes+0x291/0x350
[  577.708622][    C1]  mas_alloc_nodes+0x291/0x350
[  577.713401][    C1]  mas_preallocate+0x2cf/0x630
[  577.718183][    C1]  ? rcu_is_watching+0x15/0xb0
[  577.722965][    C1]  ? __pfx_mas_preallocate+0x10/0x10
[  577.728268][    C1]  ? anon_vma_name+0x61/0x210
[  577.732980][    C1]  ? __mas_set_range+0x11a/0x3a0
[  577.737938][    C1]  __split_vma+0x318/0xa50
[  577.742374][    C1]  ? __pfx___split_vma+0x10/0x10
[  577.747335][    C1]  vma_modify+0x84a/0x1c70
[  577.751779][    C1]  vma_modify_flags+0x24b/0x330
[  577.756643][    C1]  ? __pfx_vma_modify_flags+0x10/0x10
[  577.762039][    C1]  ? rcu_is_watching+0x15/0xb0
[  577.766824][    C1]  ? percpu_counter_add_batch+0xec/0x1d0
[  577.772561][    C1]  ? __vm_enough_memory+0x11a/0x380
[  577.777838][    C1]  mprotect_fixup+0x624/0xb10
[  577.782536][    C1]  ? __pfx_mprotect_fixup+0x10/0x10
[  577.787747][    C1]  ? mas_next_slot+0xc91/0xd70
[  577.792710][    C1]  ? apparmor_file_mprotect+0x1d0/0x400
[  577.798273][    C1]  ? security_file_mprotect+0x1a/0x290
[  577.803755][    C1]  do_mprotect_pkey+0x9d3/0xcd0
[  577.808633][    C1]  ? __pfx_do_mprotect_pkey+0x10/0x10
[  577.814013][    C1]  ? vm_mmap_pgoff+0x31c/0x4e0
[  577.818803][    C1]  ? vm_mmap_pgoff+0x35a/0x4e0
[  577.823585][    C1]  ? __pfx___se_sys_futex+0x10/0x10
[  577.828840][    C1]  ? rcu_is_watching+0x15/0xb0
[  577.833622][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  577.839702][    C1]  __x64_sys_mprotect+0x80/0x90
[  577.844577][    C1]  do_syscall_64+0x174/0x580
[  577.849190][    C1]  ? trace_irq_disable+0x3b/0x140
[  577.854224][    C1]  ? clear_bhb_loop+0x70/0xc0
[  577.858912][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  577.864858][    C1] RIP: 0033:0x7f51a819ded7
[  577.869280][    C1] RSP: 002b:00007fff249ce7b8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a
[  577.877702][    C1] RAX: ffffffffffffffda RBX: 00007f51a908f6c0 RCX: 00007f51a819ded7
[  577.885676][    C1] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f51a9070000
[  577.893651][    C1] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
[  577.901625][    C1] R10: 0000000000021000 R11: 0000000000000206 R12: 00007fff249ce910
[  577.909607][    C1] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
[  577.917615][    C1]  </TASK>
[  577.920642][    C1] task:syz.2.4068      state:R  running task     stack:27976 pid:20808 tgid:20796 ppid:17340  task_flags:0x400040 flags:0x00080002
[  577.934133][    C1] Call Trace:
[  577.937418][    C1]  <TASK>
[  577.940356][    C1]  __schedule+0x17d9/0x56c0
[  577.944886][    C1]  ? __pfx___schedule+0x10/0x10
[  577.949762][    C1]  ? __pfx___schedule+0x10/0x10
[  577.954626][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  577.959658][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  577.965038][    C1]  ? preempt_schedule_thunk+0x16/0x40
[  577.970428][    C1]  preempt_schedule_common+0x82/0xd0
[  577.975727][    C1]  ? nl80211_netlink_notify+0x49c/0x860
[  577.981388][    C1]  preempt_schedule_thunk+0x16/0x40
[  577.986605][    C1]  __local_bh_enable_ip+0xe1/0x130
[  577.991755][    C1]  nl80211_netlink_notify+0x49c/0x860
[  577.997144][    C1]  ? nl80211_netlink_notify+0x75/0x860
[  578.002711][    C1]  notifier_call_chain+0x1a5/0x3d0
[  578.007876][    C1]  blocking_notifier_call_chain+0x6a/0x90
[  578.013632][    C1]  netlink_release+0x11f8/0x1a80
[  578.018592][    C1]  ? netlink_release+0x106/0x1a80
[  578.023646][    C1]  ? __pfx_netlink_release+0x10/0x10
[  578.028949][    C1]  ? down_write+0x16d/0x200
[  578.033460][    C1]  ? __pfx_down_write+0x10/0x10
[  578.038328][    C1]  sock_close+0xad/0x220
[  578.042587][    C1]  ? __pfx_sock_close+0x10/0x10
[  578.047450][    C1]  __fput+0x418/0xa50
[  578.051446][    C1]  fput_close_sync+0x11f/0x240
[  578.056222][    C1]  ? __pfx_fput_close_sync+0x10/0x10
[  578.061523][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  578.067602][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  578.073673][    C1]  __x64_sys_close+0x7e/0x110
[  578.078363][    C1]  do_syscall_64+0x174/0x580
[  578.082966][    C1]  ? trace_irq_disable+0x3b/0x140
[  578.088013][    C1]  ? clear_bhb_loop+0x70/0xc0
[  578.092724][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  578.098628][    C1] RIP: 0033:0x7f51a815e90e
[  578.103048][    C1] RSP: 002b:00007f51a90aef38 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  578.111476][    C1] RAX: ffffffffffffffda RBX: 00007f51a90b06c0 RCX: 00007f51a815e90e
[  578.119458][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000a
[  578.127432][    C1] RBP: 000000000000000a R08: 0000000000000000 R09: 0000000000000000
[  578.135408][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  578.143671][    C1] R13: 00007f51a8426218 R14: 00007f51a8426180 R15: 00007fff249ce818
[  578.151682][    C1]  </TASK>
[  578.154723][    C1] rcu: rcu_preempt kthread starved for 3400 jiffies! g97797 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  578.165838][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  578.175814][    C1] rcu: RCU grace-period kthread stack dump:
[  578.181736][    C1] task:rcu_preempt     state:R  running task     stack:27496 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[  578.195260][    C1] Call Trace:
[  578.198551][    C1]  <TASK>
[  578.201532][    C1]  __schedule+0x17d9/0x56c0
[  578.206055][    C1]  ? __lock_acquire+0x683/0x2cf0
[  578.211039][    C1]  ? __pfx___schedule+0x10/0x10
[  578.215923][    C1]  ? schedule+0x90/0x2b0
[  578.220466][    C1]  schedule+0x164/0x2b0
[  578.224657][    C1]  schedule_timeout+0x152/0x2c0
[  578.229634][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  578.235029][    C1]  ? __pfx_process_timeout+0x10/0x10
[  578.240533][    C1]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  578.246373][    C1]  ? prepare_to_swait_event+0x322/0x350
[  578.251946][    C1]  rcu_gp_fqs_loop+0x30c/0x11f0
[  578.256819][    C1]  ? lockdep_hardirqs_on+0x7a/0x110
[  578.262037][    C1]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  578.267865][    C1]  ? __pfx_rcu_watching_snap_recheck+0x10/0x10
[  578.274038][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  578.279334][    C1]  ? _raw_spin_unlock_irq+0x2e/0x50
[  578.284560][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  578.290387][    C1]  rcu_gp_kthread+0x9e/0x2b0
[  578.294994][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  578.300207][    C1]  ? __kthread_parkme+0x71/0x1f0
[  578.305163][    C1]  ? __kthread_parkme+0x196/0x1f0
[  578.310216][    C1]  kthread+0x388/0x470
[  578.314749][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  578.319964][    C1]  ? __pfx_kthread+0x10/0x10
[  578.324575][    C1]  ret_from_fork+0x514/0xb70
[  578.329183][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  578.334321][    C1]  ? __switch_to+0xc89/0x1420
[  578.339017][    C1]  ? __pfx_kthread+0x10/0x10
[  578.343627][    C1]  ret_from_fork_asm+0x1a/0x30
[  578.348459][    C1]  </TASK>
[  578.351484][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  578.357819][    C1] Sending NMI from CPU 1 to CPUs 0:
[  578.363050][    C0] NMI backtrace for cpu 0
[  578.363075][    C0] CPU: 0 UID: 0 PID: 239 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) 
[  578.363092][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  578.363102][    C0] Workqueue: bat_events batadv_tt_purge
[  578.363200][    C0] RIP: 0010:get_page_from_freelist+0x2243/0x2270
[  578.363224][    C0] Code: 48 8d 5d 08 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 ed 09 0e 00 4c 89 2b 48 89 e8 48 81 c4 a0 01 00 00 5b 41 5c <41> 5d 41 5e 41 5f 5d e9 11 b5 ad 09 cc 31 ed eb e2 48 89 ef 48 c7
[  578.363236][    C0] RSP: 0018:ffffc90000006fd8 EFLAGS: 00000282
[  578.363249][    C0] RAX: ffffea0005690d00 RBX: 0000000000000002 RCX: ffffffff8225a6d2
[  578.363260][    C0] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffea0005690d58
[  578.363271][    C0] RBP: ffffea0005690d00 R08: ffffea0005690d5b R09: 1ffffd4000ad21ab
[  578.363283][    C0] R10: dffffc0000000000 R11: fffff94000ad21ac R12: ffffc90000007040
[  578.363294][    C0] R13: 0000000000000000 R14: ffffffff8e4fa7d0 R15: 0000000000000002
[  578.363304][    C0] FS:  0000000000000000(0000) GS:ffff888124f58000(0000) knlGS:0000000000000000
[  578.363316][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  578.363327][    C0] CR2: 00007fa1ec7d1d71 CR3: 000000003380a000 CR4: 00000000003526f0
[  578.363341][    C0] Call Trace:
[  578.363347][    C0]  <IRQ>
[  578.363356][    C0]  __alloc_frozen_pages_noprof+0x18d/0x380
[  578.363375][    C0]  ? synproxy_send_client_synack+0x175/0xde0
[  578.363458][    C0]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  578.363479][    C0]  ? __local_bh_enable_ip+0xf8/0x130
[  578.363495][    C0]  ? process_scheduled_works+0xa8e/0x14e0
[  578.363510][    C0]  ? worker_thread+0xa47/0xfb0
[  578.363525][    C0]  ? kthread+0x388/0x470
[  578.363542][    C0]  ? ret_from_fork+0x514/0xb70
[  578.363564][    C0]  allocate_slab+0x79/0x5e0
[  578.363589][    C0]  refill_objects+0x2d5/0x350
[  578.363609][    C0]  __pcs_replace_empty_main+0x2bf/0x6b0
[  578.363634][    C0]  kmem_cache_alloc_node_noprof+0x42f/0x610
[  578.363651][    C0]  ? local_lock_release+0x9c/0x160
[  578.363671][    C0]  ? kmem_cache_alloc_node_noprof+0x1f5/0x610
[  578.363688][    C0]  ? __alloc_skb+0x276/0x7a0
[  578.363700][    C0]  ? __alloc_skb+0x276/0x7a0
[  578.363717][    C0]  __alloc_skb+0x276/0x7a0
[  578.363733][    C0]  synproxy_send_client_synack+0x175/0xde0
[  578.363753][    C0]  ? lock_acquire+0x106/0x350
[  578.363772][    C0]  ? synproxy_pernet+0x45/0x270
[  578.363831][    C0]  ? __pfx_synproxy_send_client_synack+0x10/0x10
[  578.363850][    C0]  ? nft_synproxy_do_eval+0x4a0/0x550
[  578.363871][    C0]  ? synproxy_pernet+0x45/0x270
[  578.363895][    C0]  nft_synproxy_eval_v4+0x362/0x4e0
[  578.363920][    C0]  ? __pfx_nft_synproxy_eval_v4+0x10/0x10
[  578.363942][    C0]  ? nf_ip_checksum+0x13c/0x510
[  578.364014][    C0]  nft_synproxy_do_eval+0x335/0x550
[  578.364036][    C0]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[  578.364056][    C0]  ? ieee80211_rx_handlers+0xc849/0xc8b0
[  578.364108][    C0]  ? ieee80211_rx_handlers+0xc849/0xc8b0
[  578.364131][    C0]  nft_do_chain+0x48d/0x1b10
[  578.364154][    C0]  ? __pfx_nft_do_chain+0x10/0x10
[  578.364172][    C0]  ? ipt_do_table+0x2b9/0x15d0
[  578.364243][    C0]  nft_do_chain_inet+0x360/0x4b0
[  578.364312][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  578.364332][    C0]  ? ipt_do_table+0x2b9/0x15d0
[  578.364356][    C0]  ? nf_nat_ipv4_local_in+0x21f/0x720
[  578.364375][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  578.364397][    C0]  nf_hook_slow+0xc5/0x220
[  578.364418][    C0]  NF_HOOK+0x21f/0x3c0
[  578.364478][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  578.364498][    C0]  ? NF_HOOK+0x9e/0x3c0
[  578.364517][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  578.364538][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  578.364561][    C0]  ? ip_local_deliver+0x113/0x190
[  578.364582][    C0]  NF_HOOK+0x336/0x3c0
[  578.364602][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[  578.364622][    C0]  ? NF_HOOK+0x9e/0x3c0
[  578.364641][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  578.364661][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[  578.364681][    C0]  ? ip_rcv_core+0x88d/0xd50
[  578.364703][    C0]  ? __pfx_ip_rcv+0x10/0x10
[  578.364722][    C0]  ? __pfx_ip_rcv+0x10/0x10
[  578.364742][    C0]  process_backlog+0xa34/0x1860
[  578.364816][    C0]  ? process_backlog+0x3c3/0x1860
[  578.364844][    C0]  __napi_poll+0xaa/0x330
[  578.364865][    C0]  net_rx_action+0x61d/0xf50
[  578.364892][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  578.364919][    C0]  ? sched_balance_domains+0x770/0x880
[  578.364943][    C0]  handle_softirqs+0x225/0x840
[  578.364960][    C0]  ? do_softirq+0x76/0xd0
[  578.364978][    C0]  ? batadv_tt_local_purge+0x2c1/0x340
[  578.364996][    C0]  do_softirq+0x76/0xd0
[  578.365010][    C0]  </IRQ>
[  578.365015][    C0]  <TASK>
[  578.365021][    C0]  __local_bh_enable_ip+0xf8/0x130
[  578.365036][    C0]  batadv_tt_local_purge+0x2c1/0x340
[  578.365060][    C0]  ? process_scheduled_works+0xa20/0x14e0
[  578.365074][    C0]  batadv_tt_purge+0x35/0xa10
[  578.365094][    C0]  ? rcu_is_watching+0x15/0xb0
[  578.365116][    C0]  ? process_scheduled_works+0xa20/0x14e0
[  578.365131][    C0]  process_scheduled_works+0xa8e/0x14e0
[  578.365162][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  578.365181][    C0]  ? assign_work+0x3cf/0x5d0
[  578.365199][    C0]  worker_thread+0xa47/0xfb0
[  578.365230][    C0]  kthread+0x388/0x470
[  578.365249][    C0]  ? __pfx_worker_thread+0x10/0x10
[  578.365263][    C0]  ? __pfx_kthread+0x10/0x10
[  578.365282][    C0]  ret_from_fork+0x514/0xb70
[  578.365303][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  578.365321][    C0]  ? __switch_to+0xc89/0x1420
[  578.365340][    C0]  ? __pfx_kthread+0x10/0x10
[  578.365359][    C0]  ret_from_fork_asm+0x1a/0x30
[  578.365389][    C0]  </TASK>