last executing test programs:

2.810638033s ago: executing program 0 (id=1247):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x0)

2.684095545s ago: executing program 0 (id=1249):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20)
sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002080)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4005}, 0x40000)
sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xb, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0xf, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc1}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd3f, 0xf0bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @remote}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x20040054)
epoll_create1(0x0)

2.643083795s ago: executing program 2 (id=1250):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000200)={<r1=>r0, &(0x7f00000000c0)='GPL\x00', 0x0, &(0x7f0000000140)={@align=0x80000001, {0x3, 0x4, 0x9, 0x4}}, 0x3722dec, &(0x7f0000000180), &(0x7f00000001c0)=0x6})
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1)
ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000040)={{}, {@void, @max}})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000300)={0x5, &(0x7f0000000240)=[{0xf360, 0x5, 0x9, 0x6}, {0x9, 0x9, 0x3, 0x7fff}, {0x9, 0xff, 0xfe, 0x400}, {0x0, 0xd1, 0x6, 0xfffffff8}, {0x101, 0xca, 0x8, 0x8}]})
sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="6800000000090504000000000000000002000000090001007379003000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x4080)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
socket$packet(0x11, 0x2, 0x300) (async)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000200)={r0, &(0x7f00000000c0)='GPL\x00', 0x0, &(0x7f0000000140)={@align=0x80000001, {0x3, 0x4, 0x9, 0x4}}, 0x3722dec, &(0x7f0000000180), &(0x7f00000001c0)=0x6}) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) (async)
ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000040)={{}, {@void, @max}}) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000300)={0x5, &(0x7f0000000240)=[{0xf360, 0x5, 0x9, 0x6}, {0x9, 0x9, 0x3, 0x7fff}, {0x9, 0xff, 0xfe, 0x400}, {0x0, 0xd1, 0x6, 0xfffffff8}, {0x101, 0xca, 0x8, 0x8}]}) (async)
sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="6800000000090504000000000000000002000000090001007379003000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x4080) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async)

2.444308602s ago: executing program 0 (id=1252):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94)
socket(0x40000000015, 0x5, 0x0) (async)
r0 = socket(0x40000000015, 0x5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$packet(0x11, 0x2, 0x300)
getsockname$packet(r2, 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x73) (async)
r3 = socket$kcm(0xa, 0x2, 0x73)
close(0x3)
socket$kcm(0xa, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0xfc00, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0xb, 0xfc00}}, @ip_tos_u8={{0x18, 0x29, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000050000000004"], 0x48) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000050000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
close(0x3) (async)
close(0x3)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='=\x00'], 0x20) (async)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='=\x00'], 0x20)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x40c0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r8, &(0x7f00000014c0)=[{{&(0x7f0000000080)={0xa, 0x4e1f, 0x7f, @private2, 0x1000010}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000240)="0000000006ecc0363317f4e3dbf235508b1978828283777bf1817d805cdce6772e4eb50edc305c898a10393e56bfcc7a9426bde104dee651410d849a29d04e42c275b96cac397fc4eb79fb262bdcb3d03f334169affdf56e6225f1c1ee0e416fb24ee8ba1400500e2349216aeb0bed043c100000000000000067f6dce7ed85881bb5442d0bfa9802ce8cc0f21e4bdad60ebbd897af3de9fc5eaad2dd0f03784963e5f2537639f7c960a048b526acb8792ba43e60ef86d6a7da58a7259cc1370a597ff6b4083cdf269f6a", 0xca}], 0x1}}], 0x1, 0x2400c880)
setsockopt(r8, 0x84, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r8], 0x44}, 0x1, 0x0, 0x0, 0x4084085}, 0x4008094)
r9 = socket$nl_route(0x10, 0x3, 0x0)
getpeername$packet(r2, 0x0, &(0x7f00000003c0)) (async)
getpeername$packet(r2, 0x0, &(0x7f00000003c0))
sendmsg$nl_route_sched(r9, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x801}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x811}, 0x20000004)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)

1.856310707s ago: executing program 2 (id=1258):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x340060c1)
ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x1e, &(0x7f00000001c0)={@remote, @random="358bede0c77c", @void, {@can={0xc, {{0x2, 0x1, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "b3add107e77e4cdd"}}}}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000100)=0x4, 0x4)
close(r0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0xa, 0x38, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x5, 0x1, 0x7, 0xc7b, 0x8}, @generic={0x8, 0x2}, @generic={0x2, 0x2}]}}}}}}}, 0x0)

1.525851204s ago: executing program 1 (id=1260):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000400000000000000000000000000010000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000100000000000000440005"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000)

1.524185749s ago: executing program 2 (id=1261):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {0xffff, 0xffff}, {0x6, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x7ffffffe}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000200000000000000000000000d030000000000000063"], 0x0, 0x52}, 0x28)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/80, 0x50, 0x0, &(0x7f0000000140)=""/201, 0xc9}, &(0x7f0000000280)=0x40)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x21, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42000, 0x2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x12, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40680c5}, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c200000000000000000086dd60010100000c110020010000000000fe8000000000000000000000000000aa00030e22000c90700103000038ee6a009deba4e8b8d06e6a52e207346c1b676e80bfc2cca057d5a7234296c8f70b02b2ced391fa9b780af3a29055cde8751e6b01d7fe723160bd1ea1bf8c2ea96560141bdc59dd44d6f1ef64441628ad917c2325939a7e4abe5fbfa0fdbbd4e81138b59c8f7123084e8c753d7a9f7f54d236cc012a8fbd61b5695072112677369e01c856ecb447b5680c7f97eaab32fac8a348cb070f3dea4ef16e7201fe2fd66caff1"], 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000040)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000002d40)=@newtaction={0x18, 0x31, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x8000)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="6800000010001f"], 0x68}, 0x1, 0x0, 0x0, 0x2000c014}, 0x4000080)
r7 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r7, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x24)
listen(r7, 0x5)
sendmsg(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003a40)=ANY=[@ANYBLOB], 0x28}, 0x0)
listen(r7, 0x0)
close(0x3)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6)
sendmsg$MPTCP_PM_CMD_REMOVE(r6, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x2c, r8, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40010)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r8, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7d9e}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x81)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000300)={0x0, 'macsec0\x00', 0x2}, 0x18)

1.420226787s ago: executing program 1 (id=1262):
r0 = socket(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x2017be01})
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044)
socket$inet6(0xa, 0x3, 0x87)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESOCT=r2], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x4, &(0x7f0000000280)=ANY=[@ANYRESOCT], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f11, '\x00', 0x0, 0x2}, 0x94)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl(r5, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0')
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48842}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0xc8, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xe, 0xd}, {0x0, 0xc}, {0x10, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x98, 0x2, [@TCA_BASIC_EMATCHES={0x94, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x88, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x7}, {0x400, 0x6, 0x2, "d335814e7fd2"}}}, @TCF_EM_META={0x50, 0x2, 0x0, 0x0, {{0x8, 0x4, 0xcb7c}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xf3ea, 0x80, 0x2}, {0x5, 0x8}}}, @TCA_EM_META_RVALUE={0xf, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="a2890474c9ab73"]}, @TCA_EM_META_LVALUE={0xf, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="f761498947f224"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xd, 0x3, 0x1}, {0xe, 0x4, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xe9, 0x6, 0x1}, {0x8, 0x1, 0x3}}}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x314, 0x3, 0x4}, {0x4, 0x6, 0x9, 0xe}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}]}]}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x80)
bind$x25(r5, &(0x7f0000000080), 0x12)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0xac, 0x100000000})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c0009"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f0000019100400014000200100011"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800)
connect$x25(r5, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
r12 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmmsg(r12, &(0x7f0000002340), 0x3fffff7, 0x4000000000000)

1.378238217s ago: executing program 3 (id=1263):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000240)={<r2=>r0, &(0x7f0000000140)='firstname\x00', 0xa0000, &(0x7f0000000180)={@align=0x7, {0x4, 0x5, 0xa, 0x4210}}, 0x4, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0xc3a})
r3 = openat$cgroup_devices(r2, &(0x7f0000000280)='devices.allow\x00', 0x2, 0x0)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r2)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r4, 0x800, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4008800}, 0x8004)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000400)={0x20000001})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0)
sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x48}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x804c054)
sendto$l2tp(r2, &(0x7f0000000580)="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", 0x1000, 0x20040001, &(0x7f0000001580)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001840)={r2, 0x0, 0xbd, 0xa4, &(0x7f00000015c0)="bcd94387341d4b36dff77554a3db8518aad217b77abd33ee95e6faeb652bca9c224090f560f4e34774948aec07e53c91d0898d8ad8b39727c9886e4726d63f01526b5c21f8ba23e9d30409eb161c0414c7fe2a6bc3c95dd41aff06bb65ea3ed84da26dd5211c633b1818033ee9c90400f4b13760d8a2a8f951fd1a01d92ca6ba694d0bbd2917e691acc769fb939e757340aad2d7bba1ef3473d43cee2829f29a8aea5720980c52684ba8fd7d025b98e5c00b79acd415ec2ff5cebdd9fc", &(0x7f0000001680)=""/164, 0x6, 0x0, 0x4e, 0x5b, &(0x7f0000001740)="62b8451f3248ad7fd6008a203b565f1baa9fc77951d7efcb8950e513f8e0d74ebc9694ec393180dbc5f54c408e3943363f9a88511b702ccc704f258b4d3899b52b08257f12ac3e2526434270812b", &(0x7f00000017c0)="b441acc23eb0b516bff2b68de0307c976c5408dacf701b9438418dfdb168bd1c38a3ab3af323252fdccd0ca58a01ed5987038d7871bb6ad4d90c02926d94bf03fcbecda4b8fe93bf444e2635a856b05c9abca42b82f3c746fc337e", 0x2, 0x0, 0x8}, 0x50)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001900), r0)
sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x28800200}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x20, r6, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}]}, 0x20}}, 0x40005)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001a80)={'ip6gre0\x00', &(0x7f0000001a00)={'ip6tnl0\x00', <r7=>0x0, 0x2f, 0x8, 0x0, 0x715306be, 0x24, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, 0x1, 0x20, 0x0, 0x1}})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001ac0)=@base={0x20, 0x8, 0x40, 0x8001, 0x1040, r2, 0x81, '\x00', r7, r2, 0x0, 0x1, 0x4}, 0x50)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001b80)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000020c0)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002080)={&(0x7f0000001bc0)={0x4b8, r6, 0x0, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_PROBE_RESP={0x219, 0x91, "7ed718162f3951b84fa2a70c9b8d9eacaa30e167777a50ff41e6a6a3b1ffd503a3ec630e60d4740ce01a7ca4da72eb10d16e537c8b5e7a79ec1ed56097c1bd66929367085b28a644990891c507f6a66bb5e12884d283aee10bc7e3c1b0b73a7e5ec50465ec907173fb7ba2ddb03c37bc691e9ebf2aa2147fe0a73551213454d53049eae6d16f74b19b4a6f767a72e2c72a148adb4773c44865ec80c59cae1b1990dd46f5b5f8202c384bc8edd115c6b725403f3c53b027963c83a3dc99ff4cb1ceef109a03a399a455f084b80b73eab90bf998de163458264ba43a8266b1ce81862517c247b9a49a994cb10bb0513602ca92faef443837fa2305e15cab72631db190f141ee57a9086ff6ed2883a728bc9baba060457b53e54c20972a794c2626de9bdca6268ada13563c44649c647e8e340f6203829e8c9ce49f369f9ec56ee29bcfa6c1fe0dcc684d6311331965553d5e10b74ff1c8cf4b6fa349857ef3955d9f4743b6a5dbf5d7aeb2a63df3b24395c4ba268a773f2b6cbd57a895f3c08386d48f4ae08e03c7b803694f2c8537e1d44557ccc3d07f7490092fd18b58f0db846175a3d74a8ef63a10b6716b8fcbe656d0be30213b20ce1cbd69bcdfff4a3c75d4b977eff41e4f22084ff5221ab03dde0dd490037748e9dc3afdfadb059b5d714635d84f8626f7996d1e1dc26ea3759f22f2d8238aecee62ea15635cfe8e6b74af9a51eb13deb5edf946a04de918f32cf8a33de37e"}, @NL80211_ATTR_BEACON_HEAD={0x1a7, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xf4d}, @broadcast, @broadcast, @initial, {0x0, 0x4}}, 0x2, @random=0x3dc0, 0x4, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x6a, 0x1}, {0x2, 0x1}, {0x9, 0x1}, {0x12, 0x1}, {0xc, 0x1}, {0x4a, 0x1}, {0x1, 0x1}]}, @void, @val={0x4, 0x6, {0x1, 0x4, 0x3, 0x4}}, @val={0x6, 0x2, 0x10}, @void, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x4000, 0x3, 0x0, 0x0, {0x8, 0x222, 0x0, 0x7, 0x0, 0x1, 0x1}, 0x800, 0x7, 0xd}}, @void, @void, @void, [{0xdd, 0x88, "e5b9798884a1bbc120ff514cdd4d12e828c181ac110e149d629b28a2a69d3e76d6c7bd7105803785d4ac29587fb5d66d62dc27cc3f85412a3139437eda6a27d5450b09317301b8f2bcba57eaf6e42b4b25ec8830abbdd89a4776c16c249ae90be30b70ca16e80ce34b4381fc841ffb51f0bbc333b1e12074cd175cfbd8a93f9f5150d01eb4a8316b"}, {0xdd, 0xb7, "0eff42609b5cde19502040f53a2c9ebddb35de5407a558c1a198186a274e3844cbc5f4bc8ce1e87b02b4f835cb66286cc4fd29a95aafb9847e13f759738457e08cc4ae8b22adeac7d6906a92027eae3a1a4b2cdecac2ea5d7d4266bf3deb8a14d796ab0db58970f3d643e0c262b66a2741c0767a1936b2fd444a467911e57d218b6a6e20bd99d41b639de7feb94f8b7401e62e3826c7deae7bf3b15cfdb555c72146e480bc6ec6bc2015141903c65450bc0e793ce21e43"}]}}, @NL80211_ATTR_FTM_RESPONDER={0xd8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x27, 0x3, "aa29ee3f963db43442f9e184d081413d05aa0e9ad5b5d2aff8b6e89eac10a5388c6c69"}, @NL80211_FTM_RESP_ATTR_LCI={0x1e, 0x2, "03d91815905009179572ab06849370dab14a61c633916d56ea7c"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x8b, 0x3, "8d730b006d34894de136c8cabf87a7eaa08a1dc3fd19fdf3b10442b4920f220c997a62ff586bedacac78251ca803a6f6149da9d2b6cac2b9d24df79f03531fbc86728c197b3dce9cfc62e7ca3dcf41b36036d7d7ad398554cd8dc4cd6fd35f1a26bbe37d16ac71f83ccf510d81a183f51a80b756104a19f2ad12d1963d64a50f84322e00ea9ba1"}]}]}, 0x4b8}, 0x1, 0x0, 0x0, 0x8c00}, 0x1)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r10, &(0x7f00000021c0)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x30, 0x140d, 0x400, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008004)
openat$nci(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000002240)=0x5, 0x4)
setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000002280)=0x2, 0x4)
r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002300), r2)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x220e0040}, 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x20, r11, 0x200, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x77ff5389622d0865}, 0x40000)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x10, r0, 0x3acc5000)
socket$unix(0x1, 0x7, 0x0)
getsockopt$netlink(r0, 0x10e, 0x8, &(0x7f0000002400)=""/157, &(0x7f00000024c0)=0x9d)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002780)={0x5, <r12=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000002800)={0xd, 0x1c, &(0x7f0000002500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @jmp={0x5, 0x0, 0xd, 0x0, 0x8, 0xfffffffffffffffe}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002600)='GPL\x00', 0x200, 0xb5, &(0x7f0000002640)=""/181, 0x41000, 0x1, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000002700)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000002740)={0x2, 0x4, 0x1}, 0x10, r12, r2, 0x2, 0x0, &(0x7f00000027c0)=[{0x4, 0x4, 0x10, 0x7}, {0x0, 0x3, 0x10, 0x6}]}, 0x94)

1.353479348s ago: executing program 4 (id=1264):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000400000018110000", @ANYRES32=r1, @ANYBLOB="2005000000000000b7020000140000feb7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baa00fe00000000b5090800000000007baaf0ff00000000bf8720000000000036070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004602010076000000bf98000000000000be080000000000008500000007000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)

1.15527203s ago: executing program 4 (id=1265):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000fcff1f00000000000400000018110000", @ANYRES32=r0, @ANYBLOB="d000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090600f7ffffff0400000006000000180100002020702500000000002020207b9af8ff00000000ac9100000000000037010000f8ffffffb702000008000000b7030000f7ffffff66000000060000005d93000000000000b5030200f7ffffff85000000b5000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.092193515s ago: executing program 0 (id=1266):
syz_emit_ethernet(0x5a, &(0x7f0000000000)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x27}, {[@ssrr={0x89, 0xb, 0xa2, [@broadcast, @broadcast]}, @timestamp={0x44, 0x10, 0x5, 0x3, 0x0, [0x0, 0x10000, 0x400]}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}, {{0x4e22, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x4, 0x10}, 0xc)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4)
sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r8 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast})
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x1f3, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2})
write$tun(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000d0000000000000000000000850000000500000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0xb, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0xe, 0x0, &(0x7f00000001c0)="581f9239658ea95ed371ea3dd361", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={&(0x7f0000000080)="23edd744a51919ba7ca4b84bc7e2f3182ffa8ae769ecf698308c52174c61305f2053220b950a0b292ea9af04ff092bcf4caa32e3500693ea1dc43fc3fc2a1a606376eb78f6e06f5bba1db554897b9c13727c704bcb3269f118f6ba8c1a6931dd5050500e8c812311b9e1a561610e9475073d8f0b39d3473972af6a540fa43c60674d2f097a7a0872686e21666d77c5e892aa59b766ef871920e22831545d43e864847c315e09fe4750a1e16e1662773308c7261d543b6954493ee6c2cf5f6fc100", &(0x7f0000000180)=""/187, &(0x7f0000000240), &(0x7f0000000280)="a3c080516cd3519d68c7a402fef5ad7492edb1ba4896d0d37419616dc04333684ae5a18783d072d04d1c9b93ad43feb63c9a596d967b1f781b7b8da90496172c34986db4243bef149024e5d053290b2512148e9c88b21c14304aeb397ff3e27938b2f1a27cdeb8ccd4e737b5b4e415e0fa8a579d44375d2c680613a1787b27b4a7adb89c25c323521ac3a9d713cc8cda6986c926fa2d43c111ff4c717ff8bf505a46c7506add023fd56e20fd2755f6c71325e5bbbf9f17540762126496e0a3bf7f21336531c27e7080e61aea0e7cb561d80d49cd", 0x7, r0}, 0x38)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.080106361s ago: executing program 3 (id=1267):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newtclass={0x60, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000}}]}}]}, 0x60}}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0x1, 0xfff1}}}, 0x24}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000aa4000000060a010400000000000000000a0600010900010073797a31000000000900020073797a32000000007800048064000180090001006861736800000000540002800800074000000001080005"], 0xcc}}, 0x24000840) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r5, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
listen(r5, 0x5) (async)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x4c, 0x14, 0x101, 0x70bd25, 0x25dfdbfd, {0x1, 0x9, 0x8, 0x10, {0x4e24, 0x4e22, [0x3, 0x9, 0xf, 0xc3], [0x6, 0x0, 0x40000000, 0x7], 0x0, [0x1, 0x7ffffffb]}, 0x80, 0xc7}}, 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x80) (async)
r7 = openat$cgroup_int(r4, &(0x7f0000000400)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB='0g'], 0x27) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x300, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0xe}, {0x0, 0xffff}, {0xa, 0xfff3}}}, 0x24}}, 0x0)
sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x60, 0x0, 0x20, 0x74bd29, 0x25dfdbff, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xdc2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4002000}, 0x0) (async)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x24005000)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
writev(r9, &(0x7f0000003500)=[{&(0x7f0000001440)="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", 0xfeb7}, {&(0x7f0000000f00)="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", 0x137}, {0x0}, {&(0x7f0000001240)="d35c99d267", 0x5}, {0x0}, {&(0x7f0000000300)="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", 0xbfa}, {0x0}, {0x0}, {0x0}], 0x6c) (async)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r8)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r9, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r10, 0x300, 0x70bd2b, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)

1.034591783s ago: executing program 2 (id=1268):
socket(0x10, 0x80002, 0x0) (async)
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10440}}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x50}}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10440}}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x50}}, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000003c0)=[@in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e20, 0x1, @empty, 0x4}], 0x11)
socket$netlink(0x10, 0x3, 0x0) (async)
r6 = socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x4) (async)
r7 = socket(0x10, 0x803, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) (async)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0)

919.062821ms ago: executing program 4 (id=1269):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000030200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01200000000000000000010000000900030073797a300000000014000480080002400000000008000140000000010900010073797a300000000050000000060a010400000000000000000100000028000480240001800b000100736f636b6574001b140002800800024000000001080001400000000208000b40000000000900010073797a300000000014000000110001"], 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)

817.051824ms ago: executing program 4 (id=1270):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x0)

728.67322ms ago: executing program 0 (id=1271):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44000)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40482, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140))
pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd06000040", 0x27}], 0x2, 0x0, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r3, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb00000000000000000200010000000000000000fc00000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = epoll_create(0x200)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000040)={'team0\x00', <r11=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002abd7000f9dbdf250100000008000100", @ANYRES32=r11, @ANYBLOB="400002803c00010024000100656e61626c656400000000000000000000000000000000000000000000000000050003"], 0x5c}, 0x1, 0x400000000000000, 0x0, 0x90}, 0x4040094)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0xa0000008})
close(r6)
epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f0000000180)={0x2000})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x11c, r3, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x270, 0x66}}}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x2, 0x9, 0xfffffffa]}]}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2d7}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x4, 0xa1, 0x0, 0x4, 0x1, 0x7, 0xb07c, 0xdee]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x80000046}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x2, 0x8]}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x64, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x200}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x9, 0x80000001, 0x3, 0x8001, 0x20b]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x1]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xf41}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xf57c}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x745ed98e}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x390}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x37}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5eb}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1000}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40840}, 0x8881)
socket$nl_route(0x10, 0x3, 0x0)
r13 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_proto_private(r13, 0x89e7, &(0x7f0000000f40)="00c3")
r14 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50)
r15 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r15, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x10, r1}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x16, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x958, 0x0, 0x0, 0x0, 0x40}, [@map_fd={0x18, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000480)='GPL\x00', 0x9702, 0x72, &(0x7f00000004c0)=""/114, 0x41000, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x10, 0x9, 0xb0dd}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000640)=[0x1, 0xffffffffffffffff], &(0x7f0000000680)=[{0x2, 0x1, 0xe, 0x6}, {0x0, 0x5, 0x10, 0x8c8f5b0e9df9bc8}, {0x5, 0x1, 0xf, 0x6}, {0x5, 0x1, 0x5, 0x4}, {0x2, 0x4, 0x5, 0x5}, {0x4, 0x4, 0x3, 0x6}, {0x3, 0x4, 0x5, 0x3}, {0x4, 0x1, 0xb, 0x1}, {0x5, 0x2, 0x0, 0xa}], 0x10, 0x7}, 0x94)

624.36447ms ago: executing program 3 (id=1272):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a010400000000200000000200000708000240000000020900010073797a31000000004c000000030a01040000000000000000020000070900010073797a31000000000900030073797a320000000014000480080001000000000308000200000000000b00070066696c746572000084000000060a01040000000000000000020000070900010073797a31000000000900020073797a320000000058000480540001800a0001006d61746368000000440002800b0001006e6661636374000008000200000000002c0003"], 0x120}}, 0x0)

610.699745ms ago: executing program 2 (id=1273):
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b80)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c0000001000370403000000ffffffff00000000", @ANYRES32=r1, @ANYBLOB="0b1b0500000000004c0012800b00010069703667726500003c00028008000100", @ANYRES32=r1, @ANYBLOB="14000600fe80000000000000000000000000003614000700fe"], 0x6c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000014)
r2 = socket$kcm(0x2, 0x5, 0x84)
ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}})
socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r2, 0x84, 0x10, &(0x7f0000000000), 0x8)
openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000140)=0x1, 0x4)
sendmsg$802154_dgram(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x24, @short={0x2, 0x1, 0xaaa1}}, 0x14, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x1000}, 0x800)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x24, r5, 0x1, 0x3, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x24}}, 0x4080)
sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, r5, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x35}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)

594.872537ms ago: executing program 4 (id=1274):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)
write$tun(r1, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@generic={0x1, 0x6, "11b712", 0x0, 0x11, 0xff, @loopback, @mcast2}}}, 0xfdef)
write(r0, &(0x7f0000000040)="50705559f4b3fc8c34bbeb48378bf6a0c69d075cf371a0289aade094210f76b5f31a1c4b4e707872a124761413fc60ff938e66a574ad14c06be8c0dd48a1cbbbc04cded0a0d15402011a5580d3c78bbc7d46160e9ec753873145d55d7b1c2162703939f551c5739d0e0e397c", 0x6c)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040080}, 0x0)

472.85299ms ago: executing program 3 (id=1275):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x3e, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff07000000400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20004015}, 0x40)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x10, 0x3, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYRES32], 0x0}, 0x94)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, 0x0, &(0x7f0000000280)=r3}, 0x20)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
syz_emit_ethernet(0x3a, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c00018006000100582e000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40)
close(0x3)

472.553292ms ago: executing program 1 (id=1276):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000540)={0x4c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @device_b, @device_a, @initial, {0x3, 0x9}}, 0xfffd, @val={0x8c, 0x10, {0x283, "726712ea1b02", @short="acf28009ddef7a20"}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xa, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x3, 0x80, 0x4}}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000280)=ANY=[@ANYBLOB="e1e8958358dbcf5bb1eb0ddfa8f948b65ea42a78f921b109602bbbd1ce5e0cea01026957d0c6c98f3bd8d77161c0", @ANYRES16=r1, @ANYBLOB="01002abd0929247000fdd9df253b00000008000300", @ANYRES32=r6, @ANYBLOB="30003300c0100e00080211000001ffffffffffff5050505050509300fdff8c108302726712ea1b02acf28009ddef7a203372379e9befe66814c96fa6b94167a75810af8ae84d6a1f8fcc3cc529c5f341e54dcca77a9024e2729b03dc5e6316cdb3d2cfe52c3d7c83b24ef0"], 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f00000014c0)={0x2, &(0x7f0000000000)=[{0x54, 0x6, 0x58, 0x2}, {0x6, 0x5, 0xf9, 0x204}]}, 0x10)

348.309731ms ago: executing program 2 (id=1277):
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = socket$kcm(0xa, 0x3, 0x87)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000440), 0x10)
listen(r2, 0x5)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
sendto$packet(r3, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10)
close(0x3)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"})
write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005110000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16, @ANYRES16=r0], 0xfdef)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="f00000002f00090027bd700000000000040000009a55f8286adc5f4a0ff864a1000bcf873b4e86e99c0b2b77b8cc067560040173cba8165b1f4f49dcac85395414e20654995fdd83c23477e7355e186507bdb0410400f745b7a202f47837a167e136374c4d969df0819e28613d668bdcad02082057f0325f26b56bcc530b5e5bb20eec94913edea701fc3f6ac32f1ee1e2ceee552e9d358355b517861bdbbd31045ebc37ddd118a1bd314555752214bacc5ba784a5aceaf8cab95c733b0e3c521425deaf86e190df717af398965a3d6761429464f5f06d140adb17dd008362138977f41be50d537dfd8c25b6295800"/254], 0xf0}, 0x1, 0x0, 0x0, 0x42804}, 0x4)

305.841424ms ago: executing program 1 (id=1278):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'dummy0\x00', &(0x7f00000000c0)=@ethtool_gstrings={0x1b, 0x9, 0x3, "1e8959"}})
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
r2 = accept4(r1, 0x0, 0x0, 0x80800)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_getnexthop={0x24, 0x6a, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NHA_GROUPS={0x4}, @NHA_ID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x4000000)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000006d0200000300000022bf000001"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r4, 0x0, 0xa002a0}, 0x38)
ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000040))
syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'dummy0\x00', &(0x7f00000000c0)=@ethtool_gstrings={0x1b, 0x9, 0x3, "1e8959"}}) (async)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async)
accept4(r1, 0x0, 0x0, 0x80800) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_getnexthop={0x24, 0x6a, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NHA_GROUPS={0x4}, @NHA_ID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x4000000) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000006d0200000300000022bf000001"], 0x50) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r4, 0x0, 0xa002a0}, 0x38) (async)
ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000040)) (async)

172.62253ms ago: executing program 1 (id=1279):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000fcff1f00000000000400000018110000", @ANYRES32=r0, @ANYBLOB="f100000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090600f7ffffff0400000006000000180100002020702500000000002020207b9af8ff00000000ac9100000000000037010000f8ffffffb702000008000000b7030000f7ffffff66000000060000005d93000000000000b5030200f7ffffff85000000b5000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

170.84587ms ago: executing program 3 (id=1280):
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@call={0x85, 0x0, 0x0, 0x7d}], {0x95, 0x0, 0x0, 0x103}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)

61.03021ms ago: executing program 1 (id=1281):
bpf$MAP_CREATE(0x0, 0x0, 0x50) (async)
socket$kcm(0xa, 0x3, 0x87)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', <r4=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r2, r4, 0x25, 0x2, @void}, 0x10) (async)
write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="034886dd120012000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001ebde65db"], 0xfdef)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) (async)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0xfffffffe, 0x0, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x2010000}, 0x0)

60.838014ms ago: executing program 3 (id=1282):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1})
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', <r3=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10)
setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000300)={r3, 0x1, 0x6, @broadcast}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x3}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48040}, 0x0)
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c110081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef)

30.2577ms ago: executing program 0 (id=1283):
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000000)={0x24, r1, 0x301, 0x50bd25, 0x4, {0x4e}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x24}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="00000000000000116608fffffff30500180000000000000000000000000010009500000000000000360a0200000000ff180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdffffff0000850000000600000095000000000000008b7e7e264335dac499d35de1df28c2440e94d504ac73de4a792bca5f"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x50}, 0x94)

0s ago: executing program 4 (id=1284):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x0)

kernel console output (not intermixed with test programs):

8][ T6829] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  110.664052][ T6829] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  110.668648][ T6829] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  110.683468][ T6829] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.743410][ T6838] 8021q: adding VLAN 0 to HW filter on device batadv1
[  110.753664][ T6838] bond1: (slave batadv1): making interface the new active one
[  110.763915][ T6838] batadv1: entered promiscuous mode
[  110.770590][ T6838] bond1: (slave batadv1): Enslaving as an active interface with an up link
[  110.845441][ T6864] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.898312][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.898418][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state
[  110.920100][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.920209][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.084923][  T273] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.085099][  T273] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  111.117729][ T6864] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.120126][   T13] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex
[  111.405848][ T6885] FAULT_INJECTION: forcing a failure.
[  111.405848][ T6885] name failslab, interval 1, probability 0, space 0, times 0
[  111.407112][ T6885] CPU: 1 UID: 0 PID: 6885 Comm: syz.0.335 Not tainted syzkaller #0 PREEMPT(full) 
[  111.407135][ T6885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  111.407148][ T6885] Call Trace:
[  111.407155][ T6885]  <TASK>
[  111.407163][ T6885]  dump_stack_lvl+0xe8/0x150
[  111.407194][ T6885]  should_fail_ex+0x410/0x560
[  111.407225][ T6885]  should_failslab+0xa8/0x100
[  111.407244][ T6885]  ? vm_area_dup+0x28/0x760
[  111.407269][ T6885]  kmem_cache_alloc_noprof+0xa1/0x600
[  111.407298][ T6885]  ? vm_area_dup+0x28/0x760
[  111.407336][ T6885]  vm_area_dup+0x28/0x760
[  111.407358][ T6885]  ? __split_vma+0x1b7/0xa60
[  111.407382][ T6885]  __split_vma+0x1d7/0xa60
[  111.407412][ T6885]  ? __pfx___split_vma+0x10/0x10
[  111.407441][ T6885]  ? validate_mm+0x42e/0x4f0
[  111.407463][ T6885]  ? can_vma_merge_left+0xf3/0x510
[  111.407485][ T6885]  vma_modify+0x970/0x1f40
[  111.407520][ T6885]  vma_modify_flags+0x2a4/0x3c0
[  111.407543][ T6885]  ? __pfx_vma_modify_flags+0x10/0x10
[  111.407575][ T6885]  ? rcu_is_watching+0x16/0xb0
[  111.407594][ T6885]  ? percpu_counter_add_batch+0xec/0x1d0
[  111.407622][ T6885]  ? __vm_enough_memory+0x11a/0x380
[  111.407644][ T6885]  mprotect_fixup+0x51a/0xad0
[  111.407668][ T6885]  ? __pfx_mprotect_fixup+0x10/0x10
[  111.407686][ T6885]  ? mas_next_slot+0xc91/0xd70
[  111.407733][ T6885]  do_mprotect_pkey+0x8e7/0xd10
[  111.407765][ T6885]  ? __pfx_do_mprotect_pkey+0x10/0x10
[  111.407781][ T6885]  ? do_vmi_munmap+0x252/0x2d0
[  111.407809][ T6885]  ? __pfx___vm_munmap+0x10/0x10
[  111.407827][ T6885]  ? vm_mmap_pgoff+0x35a/0x4e0
[  111.407863][ T6885]  ? rcu_is_watching+0x16/0xb0
[  111.407891][ T6885]  __x64_sys_mprotect+0x80/0x90
[  111.407909][ T6885]  do_syscall_64+0x166/0x520
[  111.407932][ T6885]  ? trace_irq_disable+0x3b/0x140
[  111.407946][ T6885]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.407964][ T6885]  ? clear_bhb_loop+0x70/0xc0
[  111.407987][ T6885]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.408004][ T6885] RIP: 0033:0x7f417899df57
[  111.408021][ T6885] Code: 89 38 eb 84 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff e9 7a ff ff ff b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  111.408034][ T6885] RSP: 002b:00007f41797f4d18 EFLAGS: 00000217 ORIG_RAX: 000000000000000a
[  111.408053][ T6885] RAX: ffffffffffffffda RBX: 00007f4170000000 RCX: 00007f417899df57
[  111.408066][ T6885] RDX: 0000000000000003 RSI: 0000000000021000 RDI: 00007f4170000000
[  111.408075][ T6885] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000
[  111.408085][ T6885] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000
[  111.408094][ T6885] R13: 0000000000001000 R14: 00007f4174000000 R15: 0000000001600000
[  111.408120][ T6885]  </TASK>
[  111.500209][ T6888] sctp: [Deprecated]: syz.3.336 (pid 6888) Use of int in maxseg socket option.
[  111.500209][ T6888] Use struct sctp_assoc_value instead
[  111.621194][ T6888] sctp: [Deprecated]: syz.3.336 (pid 6888) Use of int in max_burst socket option.
[  111.621194][ T6888] Use struct sctp_assoc_value instead
[  111.935121][ T6901] IPv6: Can't replace route, no match found
[  112.032918][ T6898] only policy match revision 0 supported
[  112.032964][ T6898] unable to load match
[  112.261134][ T6916] FAULT_INJECTION: forcing a failure.
[  112.261134][ T6916] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  112.261190][ T6916] CPU: 0 UID: 0 PID: 6916 Comm: syz.2.347 Not tainted syzkaller #0 PREEMPT(full) 
[  112.261210][ T6916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  112.261221][ T6916] Call Trace:
[  112.261227][ T6916]  <TASK>
[  112.261233][ T6916]  dump_stack_lvl+0xe8/0x150
[  112.261260][ T6916]  should_fail_ex+0x410/0x560
[  112.261291][ T6916]  prepare_alloc_pages+0x223/0x600
[  112.261316][ T6916]  __alloc_frozen_pages_noprof+0x185/0x5a0
[  112.261338][ T6916]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  112.261360][ T6916]  ? __pfx_policy_nodemask+0x10/0x10
[  112.261383][ T6916]  ? __pfx_change_protection+0x10/0x10
[  112.261405][ T6916]  alloc_pages_mpol+0x21e/0x390
[  112.261431][ T6916]  alloc_pages_noprof+0xb1/0x2b0
[  112.261454][ T6916]  pte_alloc_one+0x22/0x370
[  112.261477][ T6916]  __pte_alloc+0x25/0x1a0
[  112.261507][ T6916]  do_pte_missing+0x2db7/0x34b0
[  112.261533][ T6916]  ? __lock_acquire+0x6df/0x2e50
[  112.261565][ T6916]  handle_mm_fault+0x1a53/0x3750
[  112.261596][ T6916]  ? handle_mm_fault+0xf1/0x3750
[  112.261628][ T6916]  ? __pfx_handle_mm_fault+0x10/0x10
[  112.261657][ T6916]  ? lock_vma_under_rcu+0x45a/0x500
[  112.261704][ T6916]  do_user_addr_fault+0xa4f/0x1340
[  112.261731][ T6916]  ? trace_page_fault_user+0x84/0x1e0
[  112.261751][ T6916]  exc_page_fault+0x6a/0xc0
[  112.261777][ T6916]  asm_exc_page_fault+0x26/0x30
[  112.261794][ T6916] RIP: 0033:0x7f649c960082
[  112.261810][ T6916] Code: 8d 15 49 19 0f 00 48 89 ee 48 89 df e8 87 f2 03 00 48 8b 05 38 2d 29 00 48 83 e8 01 48 39 e8 0f 82 b3 00 00 00 66 0f 6f 0c 24 <4c> 89 6b 20 0f 11 4b 10 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41
[  112.261824][ T6916] RSP: 002b:00007f649d82cd20 EFLAGS: 00010286
[  112.261840][ T6916] RAX: ffffffffffffffff RBX: 00007f6494000000 RCX: 00007f649c99df57
[  112.261853][ T6916] RDX: 00007f649ca519a7 RSI: 0000000000021000 RDI: 00007f6494000000
[  112.261864][ T6916] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000
[  112.261875][ T6916] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000
[  112.261885][ T6916] R13: 0000000000001000 R14: 00007f6498000000 R15: 0000000001600000
[  112.261913][ T6916]  </TASK>
[  112.270685][ T6916] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  112.564070][ T6923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  112.601415][ T6927] lo: entered allmulticast mode
[  112.610093][ T6923] netlink: 'syz.3.349': attribute type 8 has an invalid length.
[  112.673863][ T6930] batadv_slave_1: entered promiscuous mode
[  112.736065][ T6926] bond2: invalid ARP target 0.0.0.0 specified for addition
[  112.736107][ T6926] bond2: option arp_ip_target: invalid value (0)
[  112.754787][ T6926] bond2 (unregistering): Released all slaves
[  112.856663][ T6929] batadv_slave_1: left promiscuous mode
[  112.859298][ T6922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  112.862618][ T6925] lo: left allmulticast mode
[  113.106908][ T6946] pim6reg99999999: entered allmulticast mode
[  113.203301][ T6950] ieee802154 phy0 wpan0: encryption failed: -22
[  113.225393][ T6954] FAULT_INJECTION: forcing a failure.
[  113.225393][ T6954] name failslab, interval 1, probability 0, space 0, times 0
[  113.238818][ T6954] CPU: 0 UID: 0 PID: 6954 Comm: syz.2.362 Not tainted syzkaller #0 PREEMPT(full) 
[  113.238843][ T6954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  113.238853][ T6954] Call Trace:
[  113.238860][ T6954]  <TASK>
[  113.238868][ T6954]  dump_stack_lvl+0xe8/0x150
[  113.238899][ T6954]  should_fail_ex+0x410/0x560
[  113.238931][ T6954]  should_failslab+0xa8/0x100
[  113.238952][ T6954]  ? skb_clone+0x212/0x3a0
[  113.238972][ T6954]  kmem_cache_alloc_noprof+0xa1/0x600
[  113.238999][ T6954]  ? skb_clone+0x212/0x3a0
[  113.239022][ T6954]  skb_clone+0x212/0x3a0
[  113.239043][ T6954]  __netlink_deliver_tap+0x413/0x860
[  113.239074][ T6954]  ? netlink_deliver_tap+0x2e/0x1b0
[  113.239095][ T6954]  netlink_deliver_tap+0x19c/0x1b0
[  113.239116][ T6954]  netlink_unicast+0x781/0x940
[  113.239144][ T6954]  netlink_sendmsg+0x813/0xb40
[  113.239174][ T6954]  ? __pfx_netlink_sendmsg+0x10/0x10
[  113.239201][ T6954]  ? apparmor_socket_sendmsg+0x98/0x360
[  113.239227][ T6954]  ? __pfx_netlink_sendmsg+0x10/0x10
[  113.239247][ T6954]  sock_sendmsg_nosec+0x13a/0x180
[  113.239274][ T6954]  ____sys_sendmsg+0x54e/0x850
[  113.239297][ T6954]  ? __pfx_____sys_sendmsg+0x10/0x10
[  113.239323][ T6954]  ? import_iovec+0x73/0xa0
[  113.239345][ T6954]  ___sys_sendmsg+0x2a5/0x360
[  113.239362][ T6954]  ? __lock_acquire+0x6df/0x2e50
[  113.239384][ T6954]  ? __pfx____sys_sendmsg+0x10/0x10
[  113.239436][ T6954]  ? __fget_files+0x2a/0x420
[  113.239459][ T6954]  ? __fget_files+0x3a2/0x420
[  113.239491][ T6954]  __x64_sys_sendmsg+0x1b1/0x290
[  113.239512][ T6954]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  113.239550][ T6954]  do_syscall_64+0x166/0x520
[  113.239574][ T6954]  ? trace_irq_disable+0x3b/0x140
[  113.239591][ T6954]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.239610][ T6954]  ? clear_bhb_loop+0x70/0xc0
[  113.239633][ T6954]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.239651][ T6954] RIP: 0033:0x7f649c99e159
[  113.239668][ T6954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  113.239682][ T6954] RSP: 002b:00007f649d82e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  113.239712][ T6954] RAX: ffffffffffffffda RBX: 00007f649cc25fa0 RCX: 00007f649c99e159
[  113.239725][ T6954] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  113.239736][ T6954] RBP: 00007f649d82e090 R08: 0000000000000000 R09: 0000000000000000
[  113.239747][ T6954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  113.239757][ T6954] R13: 00007f649cc26038 R14: 00007f649cc25fa0 R15: 00007ffc50092758
[  113.239785][ T6954]  </TASK>
[  113.245217][ T6954] __nla_validate_parse: 19 callbacks suppressed
[  113.245234][ T6954] netlink: 136 bytes leftover after parsing attributes in process `syz.2.362'.
[  113.302231][ T6956] netlink: 16 bytes leftover after parsing attributes in process `syz.4.360'.
[  113.377457][ T6952] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  113.377481][ T6952] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  113.552269][ T6955] netlink: 44 bytes leftover after parsing attributes in process `syz.0.361'.
[  113.552313][ T6955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.361'.
[  113.552327][ T6955] netlink: 16 bytes leftover after parsing attributes in process `syz.0.361'.
[  113.876612][ T6973] netlink: 34 bytes leftover after parsing attributes in process `syz.3.367'.
[  114.327708][ T6993] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.340839][ T6993] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.803956][ T7014] FAULT_INJECTION: forcing a failure.
[  114.803956][ T7014] name failslab, interval 1, probability 0, space 0, times 0
[  114.804015][ T7014] CPU: 1 UID: 0 PID: 7014 Comm: syz.1.379 Not tainted syzkaller #0 PREEMPT(full) 
[  114.804036][ T7014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  114.804045][ T7014] Call Trace:
[  114.804052][ T7014]  <TASK>
[  114.804060][ T7014]  dump_stack_lvl+0xe8/0x150
[  114.804090][ T7014]  should_fail_ex+0x410/0x560
[  114.804123][ T7014]  should_failslab+0xa8/0x100
[  114.804144][ T7014]  ? vm_area_dup+0x28/0x760
[  114.804170][ T7014]  kmem_cache_alloc_noprof+0xa1/0x600
[  114.804195][ T7014]  ? vm_area_dup+0x28/0x760
[  114.804227][ T7014]  vm_area_dup+0x28/0x760
[  114.804250][ T7014]  ? __split_vma+0x1b7/0xa60
[  114.804275][ T7014]  __split_vma+0x1d7/0xa60
[  114.804306][ T7014]  ? __pfx___split_vma+0x10/0x10
[  114.804336][ T7014]  ? validate_mm+0x42e/0x4f0
[  114.804358][ T7014]  ? can_vma_merge_left+0xf3/0x510
[  114.804381][ T7014]  vma_modify+0x970/0x1f40
[  114.804414][ T7014]  vma_modify_flags+0x2a4/0x3c0
[  114.804436][ T7014]  ? __pfx_vma_modify_flags+0x10/0x10
[  114.804468][ T7014]  ? rcu_is_watching+0x16/0xb0
[  114.804487][ T7014]  ? percpu_counter_add_batch+0xec/0x1d0
[  114.804517][ T7014]  ? __vm_enough_memory+0x11a/0x380
[  114.804539][ T7014]  mprotect_fixup+0x51a/0xad0
[  114.804561][ T7014]  ? __pfx_mprotect_fixup+0x10/0x10
[  114.804579][ T7014]  ? mas_next_slot+0xc91/0xd70
[  114.804625][ T7014]  do_mprotect_pkey+0x8e7/0xd10
[  114.804656][ T7014]  ? __pfx_do_mprotect_pkey+0x10/0x10
[  114.804673][ T7014]  ? do_vmi_munmap+0x252/0x2d0
[  114.804703][ T7014]  ? __pfx___vm_munmap+0x10/0x10
[  114.804722][ T7014]  ? vm_mmap_pgoff+0x35a/0x4e0
[  114.804752][ T7014]  ? rcu_is_watching+0x16/0xb0
[  114.804781][ T7014]  __x64_sys_mprotect+0x80/0x90
[  114.804800][ T7014]  do_syscall_64+0x166/0x520
[  114.804825][ T7014]  ? trace_irq_disable+0x3b/0x140
[  114.804841][ T7014]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.804859][ T7014]  ? clear_bhb_loop+0x70/0xc0
[  114.804881][ T7014]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.804899][ T7014] RIP: 0033:0x7f4df819df57
[  114.804923][ T7014] Code: 89 38 eb 84 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff e9 7a ff ff ff b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  114.804937][ T7014] RSP: 002b:00007f4df9135d18 EFLAGS: 00000217 ORIG_RAX: 000000000000000a
[  114.804957][ T7014] RAX: ffffffffffffffda RBX: 00007f4df0000000 RCX: 00007f4df819df57
[  114.804970][ T7014] RDX: 0000000000000003 RSI: 0000000000021000 RDI: 00007f4df0000000
[  114.804981][ T7014] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000
[  114.804992][ T7014] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000
[  114.805003][ T7014] R13: 0000000000001000 R14: 00007f4df4000000 R15: 0000000001e00000
[  114.805033][ T7014]  </TASK>
[  115.486937][ T7026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.383'.
[  115.560231][ T7032] netlink: 228 bytes leftover after parsing attributes in process `syz.2.383'.
[  115.728954][ T7036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.387'.
[  115.728995][ T7036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.387'.
[  115.729042][ T7036] netlink: 'syz.0.387': attribute type 14 has an invalid length.
[  115.729058][ T7036] netlink: 'syz.0.387': attribute type 13 has an invalid length.
[  116.072877][ T7052] FAULT_INJECTION: forcing a failure.
[  116.072877][ T7052] name failslab, interval 1, probability 0, space 0, times 0
[  116.072933][ T7052] CPU: 0 UID: 0 PID: 7052 Comm: syz.2.391 Not tainted syzkaller #0 PREEMPT(full) 
[  116.072951][ T7052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  116.072961][ T7052] Call Trace:
[  116.072966][ T7052]  <TASK>
[  116.072981][ T7052]  dump_stack_lvl+0xe8/0x150
[  116.073009][ T7052]  should_fail_ex+0x410/0x560
[  116.073041][ T7052]  should_failslab+0xa8/0x100
[  116.073062][ T7052]  ? __anon_vma_prepare+0xc3/0x4d0
[  116.073087][ T7052]  kmem_cache_alloc_noprof+0xa1/0x600
[  116.073114][ T7052]  ? __anon_vma_prepare+0xc3/0x4d0
[  116.073143][ T7052]  __anon_vma_prepare+0xc3/0x4d0
[  116.073173][ T7052]  do_pte_missing+0x2f18/0x34b0
[  116.073197][ T7052]  ? __lock_acquire+0x6df/0x2e50
[  116.073232][ T7052]  handle_mm_fault+0x1a53/0x3750
[  116.073265][ T7052]  ? handle_mm_fault+0xf1/0x3750
[  116.073298][ T7052]  ? __pfx_handle_mm_fault+0x10/0x10
[  116.073318][ T7052]  ? lock_vma_under_rcu+0x45a/0x500
[  116.073369][ T7052]  do_user_addr_fault+0xa4f/0x1340
[  116.073398][ T7052]  ? trace_page_fault_user+0x84/0x1e0
[  116.073418][ T7052]  exc_page_fault+0x6a/0xc0
[  116.073444][ T7052]  asm_exc_page_fault+0x26/0x30
[  116.073461][ T7052] RIP: 0033:0x7f649c960082
[  116.073477][ T7052] Code: 8d 15 49 19 0f 00 48 89 ee 48 89 df e8 87 f2 03 00 48 8b 05 38 2d 29 00 48 83 e8 01 48 39 e8 0f 82 b3 00 00 00 66 0f 6f 0c 24 <4c> 89 6b 20 0f 11 4b 10 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41
[  116.073491][ T7052] RSP: 002b:00007f649d82cd20 EFLAGS: 00010286
[  116.073507][ T7052] RAX: ffffffffffffffff RBX: 00007f6494000000 RCX: 00007f649c99df57
[  116.073520][ T7052] RDX: 00007f649ca519a7 RSI: 0000000000021000 RDI: 00007f6494000000
[  116.073532][ T7052] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000
[  116.073543][ T7052] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000
[  116.073554][ T7052] R13: 0000000000001000 R14: 00007f6498000000 R15: 0000000001600000
[  116.073585][ T7052]  </TASK>
[  116.073597][ T7052] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  116.712988][ T7072] netlink: 'syz.0.401': attribute type 1 has an invalid length.
[  116.753145][ T7072] bond2: (slave bridge2): Enslaving as a backup interface with an up link
[  116.764459][ T7072] macvlan3: entered promiscuous mode
[  116.764480][ T7072] macvlan3: entered allmulticast mode
[  116.765081][ T7072] bond2: entered promiscuous mode
[  116.765096][ T7072] bridge2: entered promiscuous mode
[  116.767818][ T7072] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  116.797031][ T7072] bond2: left promiscuous mode
[  116.797072][ T7072] bridge2: left promiscuous mode
[  116.933770][ T7077] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  117.141659][ T7086] ip6gre1: entered promiscuous mode
[  117.141702][ T7086] ip6gre1: entered allmulticast mode
[  117.149202][ T7086] sctp: [Deprecated]: syz.4.405 (pid 7086) Use of struct sctp_assoc_value in delayed_ack socket option.
[  117.149202][ T7086] Use struct sctp_sack_info instead
[  117.176211][   T48] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  117.176446][   T48] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  117.194311][ T7088] tipc: Started in network mode
[  117.199297][ T7088] tipc: Node identity 76ddfa859712, cluster identity 4711
[  117.204472][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  117.214392][ T7088] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.264656][ T7088] syzkaller0: entered promiscuous mode
[  117.264694][ T7088] syzkaller0: entered allmulticast mode
[  117.278030][ T7088] tipc: Resetting bearer <eth:syzkaller0>
[  117.302781][ T7087] tipc: Resetting bearer <eth:syzkaller0>
[  117.484465][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  117.866097][ T5620] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  117.866676][ T5620] Bluetooth: hci0: command 0x0c1a tx timeout
[  118.184529][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  119.143731][ T7087] tipc: Disabling bearer <eth:syzkaller0>
[  119.157618][   T25] tipc: Node number set to 3788503685
[  119.270446][ T7119] __nla_validate_parse: 3 callbacks suppressed
[  119.278059][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.418'.
[  119.287874][ T7119] netlink: 'syz.0.418': attribute type 10 has an invalid length.
[  119.296135][ T7119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.418'.
[  119.381553][ T7120] syzkaller0: entered promiscuous mode
[  119.381591][ T7120] syzkaller0: entered allmulticast mode
[  119.440412][ T7120] netlink: 16 bytes leftover after parsing attributes in process `syz.3.416'.
[  119.596477][ T7142] netlink: 'syz.0.422': attribute type 1 has an invalid length.
[  119.650129][ T7142] v: renamed from veth0_vlan (while UP)
[  120.232587][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.431'.
[  120.232636][ T7166] netlink: 'syz.4.431': attribute type 10 has an invalid length.
[  120.232667][ T7166] netlink: 12 bytes leftover after parsing attributes in process `syz.4.431'.
[  120.714714][ T7195] netlink: 36 bytes leftover after parsing attributes in process `syz.1.442'.
[  120.952714][ T7210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.445'.
[  121.092711][ T7210] ip6gre2: entered promiscuous mode
[  121.100859][ T7210] ip6gre2: entered allmulticast mode
[  121.140043][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.444'.
[  121.222166][ T7219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.447'.
[  121.222798][ T7219] netlink: 'syz.0.447': attribute type 10 has an invalid length.
[  121.222816][ T7219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.447'.
[  121.224370][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  121.403351][ T6864] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  121.403585][ T6864] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  121.424563][ T5715] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  121.664504][ T5715] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  121.797835][   T13] batadv1: left promiscuous mode
[  121.870980][ T7230] netlink: 'syz.3.451': attribute type 14 has an invalid length.
[  122.186953][ T7244] FAULT_INJECTION: forcing a failure.
[  122.186953][ T7244] name failslab, interval 1, probability 0, space 0, times 0
[  122.187020][ T7244] CPU: 1 UID: 0 PID: 7244 Comm: syz.1.457 Not tainted syzkaller #0 PREEMPT(full) 
[  122.187037][ T7244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  122.187045][ T7244] Call Trace:
[  122.187051][ T7244]  <TASK>
[  122.187057][ T7244]  dump_stack_lvl+0xe8/0x150
[  122.187097][ T7244]  should_fail_ex+0x410/0x560
[  122.187128][ T7244]  ? __alloc_skb+0x1db/0x7a0
[  122.187153][ T7244]  should_failslab+0xa8/0x100
[  122.187174][ T7244]  ? __alloc_skb+0x1db/0x7a0
[  122.187196][ T7244]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  122.187217][ T7244]  ? __alloc_skb+0x18d/0x7a0
[  122.187239][ T7244]  ? __alloc_skb+0x1db/0x7a0
[  122.187271][ T7244]  __alloc_skb+0x1db/0x7a0
[  122.187300][ T7244]  alloc_skb_with_frags+0xc6/0x760
[  122.187322][ T7244]  ? is_bpf_text_address+0x292/0x2b0
[  122.187351][ T7244]  ? is_bpf_text_address+0x26/0x2b0
[  122.187375][ T7244]  virtio_transport_alloc_skb+0xf6/0x13e0
[  122.187400][ T7244]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  122.187427][ T7244]  ? arch_stack_walk+0xfb/0x150
[  122.187456][ T7244]  ? __pfx_virtio_transport_alloc_skb+0x10/0x10
[  122.187479][ T7244]  ? stack_trace_save+0xa9/0x100
[  122.187504][ T7244]  ? __pfx_stack_trace_save+0x10/0x10
[  122.187535][ T7244]  virtio_transport_send_pkt_info+0x8e0/0x12b0
[  122.187578][ T7244]  ? __pfx_virtio_transport_send_pkt_info+0x10/0x10
[  122.187612][ T7244]  virtio_transport_release+0x363/0x8c0
[  122.187640][ T7244]  ? __pfx_virtio_transport_release+0x10/0x10
[  122.187673][ T7244]  ? __vsock_release+0x2c/0x500
[  122.187698][ T7244]  ? __local_bh_enable_ip+0xd6/0x140
[  122.187727][ T7244]  __vsock_release+0x94/0x500
[  122.187749][ T7244]  ? __sk_destruct+0x742/0x9d0
[  122.187772][ T7244]  __vsock_release+0x366/0x500
[  122.187800][ T7244]  vsock_release+0x99/0x100
[  122.187825][ T7244]  __sock_release+0xa0/0x1f0
[  122.187849][ T7244]  ? __pfx_sock_close+0x10/0x10
[  122.187870][ T7244]  sock_close+0x1c/0x30
[  122.187891][ T7244]  __fput+0x418/0xa50
[  122.187919][ T7244]  fput_close_sync+0x11f/0x240
[  122.187941][ T7244]  ? __pfx_fput_close_sync+0x10/0x10
[  122.187975][ T7244]  __x64_sys_close+0x7e/0x110
[  122.187998][ T7244]  do_syscall_64+0x166/0x520
[  122.188023][ T7244]  ? trace_irq_disable+0x3b/0x140
[  122.188040][ T7244]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.188059][ T7244]  ? clear_bhb_loop+0x70/0xc0
[  122.188082][ T7244]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.188104][ T7244] RIP: 0033:0x7f4df819e159
[  122.188127][ T7244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  122.188142][ T7244] RSP: 002b:00007f4df9137028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  122.188165][ T7244] RAX: ffffffffffffffda RBX: 00007f4df8425fa0 RCX: 00007f4df819e159
[  122.188178][ T7244] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  122.188189][ T7244] RBP: 00007f4df9137090 R08: 0000000000000000 R09: 0000000000000000
[  122.188201][ T7244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  122.188211][ T7244] R13: 00007f4df8426038 R14: 00007f4df8425fa0 R15: 00007ffe3efbd7f8
[  122.188242][ T7244]  </TASK>
[  122.569828][ T7252] ip6gre1: entered promiscuous mode
[  122.588228][ T7252] ip6gre1: entered allmulticast mode
[  122.645312][  T146] ip6_tnl_xmit_ctl: 1 callbacks suppressed
[  122.645362][  T146] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  122.645549][  T146] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  122.675508][   T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  122.704431][ T5744] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  122.863275][ T7270] netlink: ct family unspecified
[  122.868846][ T7270] openvswitch: netlink: Actions may not be safe on all matching packets
[  122.929217][ T7276] syzkaller0: entered promiscuous mode
[  122.936878][ T7276] syzkaller0: entered allmulticast mode
[  123.042035][ T7279] netlink: 'syz.2.470': attribute type 7 has an invalid length.
[  123.290402][ T7293] netlink: 'syz.4.475': attribute type 13 has an invalid length.
[  123.557914][ T7306] netlink: 'syz.3.480': attribute type 1 has an invalid length.
[  123.586476][ T7299] netlink: 'syz.2.479': attribute type 61 has an invalid length.
[  123.664773][ T5744] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  123.704460][ T5744] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  123.779208][   T13] bond0: (slave ip6gretap0): interface is now down
[  123.798540][   T36] bond0: (slave ip6gretap0): interface is now down
[  123.801937][ T7312] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link
[  123.827542][   T36] bond0: (slave ip6gretap0): interface is now down
[  123.876080][   T36] bond0: now running without any active interface!
[  123.899870][ T7314] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface
[  123.915565][ T7314] bond0 (unregistering): Released all slaves
[  123.931495][ T7327] netlink: 'syz.1.483': attribute type 18 has an invalid length.
[  123.962938][ T7319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  124.019160][   T48] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 4352 - 0
[  124.019378][   T48] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0
[  124.019429][   T48] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0
[  124.019461][   T48] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 4352 - 0
[  124.097867][ T1231] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  124.258340][ T7341] netlink: 'syz.3.492': attribute type 10 has an invalid length.
[  124.330320][ T7341] geneve2: entered promiscuous mode
[  124.330367][ T7341] geneve2: entered allmulticast mode
[  124.366231][ T7344] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  124.366688][ T7345] __nla_validate_parse: 10 callbacks suppressed
[  124.366702][ T7345] netlink: 32 bytes leftover after parsing attributes in process `syz.1.493'.
[  124.366745][ T7345] netlink: 32 bytes leftover after parsing attributes in process `syz.1.493'.
[  124.429359][ T7347] netlink: 56 bytes leftover after parsing attributes in process `syz.0.495'.
[  124.636499][ T7356] netlink: 'syz.1.498': attribute type 13 has an invalid length.
[  124.748110][ T7357] netlink: 9 bytes leftover after parsing attributes in process `syz.2.500'.
[  124.864602][ T7357] 0·: renamed from hsr0 (while UP)
[  124.876620][ T7357] 0·: entered allmulticast mode
[  124.876655][ T7357] hsr_slave_0: entered allmulticast mode
[  124.876686][ T7357] hsr_slave_1: entered allmulticast mode
[  124.877095][ T7357] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  124.895183][ T5744] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  124.977185][ T5744] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  125.020072][ T7393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.506'.
[  125.038865][ T7394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.506'.
[  125.206742][ T7406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.507'.
[  125.470283][ T7406] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.470906][ T7406] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.585363][ T7406] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  125.612438][ T7406] 0·: left allmulticast mode
[  125.617275][ T7406] hsr_slave_0: left allmulticast mode
[  125.623301][ T7406] hsr_slave_1: left allmulticast mode
[  125.682892][ T7425] netlink: 12 bytes leftover after parsing attributes in process `syz.3.512'.
[  125.723750][ T7406] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  125.786701][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  125.815386][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.815457][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.815499][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.815529][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.854108][ T7423] gre0: entered promiscuous mode
[  125.854144][ T7423] gre0: entered allmulticast mode
[  126.031018][ T7431] netlink: 136 bytes leftover after parsing attributes in process `syz.0.513'.
[  126.057049][ T7434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.515'.
[  126.072128][ T7434] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  126.072165][ T7434] batman_adv: batadv0: Removing interface: batadv_slave_0
[  126.079250][ T7434] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  126.079277][ T7434] batman_adv: batadv0: Removing interface: batadv_slave_1
[  126.532056][ T7453] geneve2: entered promiscuous mode
[  126.537527][ T7453] geneve2: entered allmulticast mode
[  126.565109][ T1159] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  126.565178][ T1159] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  126.565208][ T1159] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  126.565233][ T1159] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  126.765634][ T7475] netlink: 'syz.2.529': attribute type 1 has an invalid length.
[  126.800919][ T7473] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.802004][ T7473] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.421796][ T7550] bridge_slave_0: left allmulticast mode
[  127.427811][ T7550] bridge_slave_0: left promiscuous mode
[  127.428015][ T7550] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.456881][ T7550] bridge_slave_1: left allmulticast mode
[  127.456925][ T7550] bridge_slave_1: left promiscuous mode
[  127.457113][ T7550] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.510571][ T7550] bond0: (slave bond_slave_0): Releasing backup interface
[  127.532547][ T7550] bond0: (slave bond_slave_1): Releasing backup interface
[  127.562131][ T7550] team0: Port device team_slave_0 removed
[  127.581645][ T7550] team0: Port device team_slave_1 removed
[  127.589665][ T7550] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  127.598705][ T7550] batman_adv: batadv0: Removing interface: batadv_slave_0
[  127.609259][ T7550] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  127.678159][ T7572] netlink: 'syz.1.543': attribute type 30 has an invalid length.
[  127.782367][ T7506] IPVS: starting estimator thread 0...
[  127.786109][ T7566] IPVS: sed: TCP 127.0.0.1:21 - no destination available
[  127.884895][ T7576] IPVS: using max 34 ests per chain, 81600 per kthread
[  128.088135][ T7592] batman_adv: batadv0: Interface deactivated: dummy0
[  128.088182][ T7592] batman_adv: batadv0: Removing interface: dummy0
[  128.115668][ T7592] bridge_slave_0: left allmulticast mode
[  128.115714][ T7592] bridge_slave_0: left promiscuous mode
[  128.115905][ T7592] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.154003][ T7592] bridge_slave_1: left allmulticast mode
[  128.154041][ T7592] bridge_slave_1: left promiscuous mode
[  128.154341][ T7592] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.216529][ T7592] bond0: (slave bond_slave_0): Releasing backup interface
[  128.244121][ T7592] bond0: (slave bond_slave_1): Releasing backup interface
[  128.276463][ T7592] team0: Port device team_slave_0 removed
[  128.297805][ T7592] team0: Port device team_slave_1 removed
[  128.310088][ T7592] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  128.310133][ T7592] batman_adv: batadv0: Removing interface: batadv_slave_0
[  128.336621][ T7592] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  128.346352][ T7592] batman_adv: batadv0: Removing interface: batadv_slave_1
[  128.366000][ T7592] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  128.458801][ T7592] veth0: entered promiscuous mode
[  128.477324][ T7590] veth0: left promiscuous mode
[  128.870619][ T7634] xt_nfacct: accounting object `' does not exist
[  129.548169][ T7664] __nla_validate_parse: 32 callbacks suppressed
[  129.548211][ T7664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.566'.
[  129.624360][    C0] ip6_tnl_xmit_ctl: 1 callbacks suppressed
[  129.624412][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  129.845852][ T7674] xt_CT: You must specify a L4 protocol and not use inversions on it
[  130.359477][ T7699] netlink: 32 bytes leftover after parsing attributes in process `syz.1.576'.
[  130.359549][ T7699] netlink: 32 bytes leftover after parsing attributes in process `syz.1.576'.
[  130.370745][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.575'.
[  130.395851][ T7702] veth1_to_bond: entered allmulticast mode
[  130.402527][ T7702] veth1_to_bond: entered promiscuous mode
[  130.408813][ T7701] veth1_to_bond: left promiscuous mode
[  130.587863][ T7710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.580'.
[  130.911750][ T7700] veth1_vlan: left allmulticast mode
[  130.981059][ T7700] mac80211_hwsim hwsim10 wlan1: left promiscuous mode
[  130.982929][ T7700] geneve2: left promiscuous mode
[  130.982947][ T7700] geneve2: left allmulticast mode
[  130.987086][ T7700] batman_adv: batadv0: Interface deactivated: ipvlan2
[  130.987137][ T7700] ipvlan2: left allmulticast mode
[  130.987150][ T7700] macvlan1: left allmulticast mode
[  131.015743][ T7700] ip6gre1: left promiscuous mode
[  131.015769][ T7700] ip6gre1: left allmulticast mode
[  131.017828][ T7701] veth1_to_bond: left allmulticast mode
[  131.044509][ T7506] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  131.044568][ T7506] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  131.044600][ T7506] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  131.044631][ T7506] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  131.143633][ T7736] netlink: 36 bytes leftover after parsing attributes in process `syz.2.573'.
[  131.143674][ T7736] netlink: 16 bytes leftover after parsing attributes in process `syz.2.573'.
[  131.143690][ T7736] netlink: 36 bytes leftover after parsing attributes in process `syz.2.573'.
[  131.302928][ T7742] netlink: Unknown NAT attribute (type=33, max=9)
[  131.302995][ T7742] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  131.313874][ T7742] netlink: 'syz.1.582': attribute type 2 has an invalid length.
[  131.612534][ T7758] netlink: 40 bytes leftover after parsing attributes in process `syz.1.586'.
[  131.618235][ T7758] Bluetooth: MGMT ver 1.23
[  131.948440][ T7776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.589'.
[  132.081978][ T7776] netlink: 'syz.0.589': attribute type 3 has an invalid length.
[  132.566983][ T7807] IPv6: NLM_F_CREATE should be specified when creating new route
[  132.567119][ T7807] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  132.567129][ T7807] IPv6: NLM_F_CREATE should be set when creating new route
[  132.567217][ T7807] IPv6: NLM_F_CREATE should be set when creating new route
[  132.567239][ T7807] IPv6: NLM_F_CREATE should be set when creating new route
[  132.834763][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  132.996767][ T7830] : renamed from veth0_to_bond
[  133.089107][ T7838] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  133.260792][ T7846] ovs-s: entered promiscuous mode
[  133.269535][ T7848] openvswitch: ovs-s: Dropping previously announced user features
[  133.375927][ T7861] x_tables: duplicate underflow at hook 2
[  134.744383][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  134.866760][ T7771] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  135.035240][ T7924] tipc: Started in network mode
[  135.035284][ T7924] tipc: Node identity 866275aef7f6, cluster identity 4711
[  135.035453][ T7924] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.060401][ T7924] __nla_validate_parse: 7 callbacks suppressed
[  135.067051][ T7924] netlink: 72 bytes leftover after parsing attributes in process `syz.1.616'.
[  135.089626][ T7924] netlink: 72 bytes leftover after parsing attributes in process `syz.1.616'.
[  135.090845][ T7931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.617'.
[  135.119430][ T7924] netlink: 72 bytes leftover after parsing attributes in process `syz.1.616'.
[  135.145436][ T7924] netlink: 72 bytes leftover after parsing attributes in process `syz.1.616'.
[  135.160497][ T7924] netlink: 72 bytes leftover after parsing attributes in process `syz.1.616'.
[  135.173168][ T7924] netlink: 72 bytes leftover after parsing attributes in process `syz.1.616'.
[  135.183500][ T7924] netlink: 72 bytes leftover after parsing attributes in process `syz.1.616'.
[  135.193610][ T7924] netlink: 72 bytes leftover after parsing attributes in process `syz.1.616'.
[  135.210618][ T7924] netlink: 72 bytes leftover after parsing attributes in process `syz.1.616'.
[  135.523553][ T7950] openvswitch: netlink: Flow key attr not present in new flow.
[  135.633067][ T7923] tipc: Disabling bearer <eth:syzkaller0>
[  136.024401][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  136.501241][ T7978] netlink: 'syz.4.633': attribute type 13 has an invalid length.
[  137.157279][ T8020] veth1_to_bond: entered allmulticast mode
[  137.157616][ T8020] veth1_to_bond: entered promiscuous mode
[  137.263514][ T8020] veth1_to_bond (unregistering): left allmulticast mode
[  137.264849][ T8020] veth1_to_bond (unregistering): left promiscuous mode
[  137.289930][ T8020] bond0: (slave bond_slave_1): Releasing backup interface
[  137.836185][ T8044] veth0: entered allmulticast mode
[  137.836655][ T8044] veth0: left allmulticast mode
[  137.861558][ T8049] Bluetooth: hci0: unsupported parameter 5135
[  137.861597][ T8049] Bluetooth: hci0: unsupported parameter 8192
[  137.861638][ T8049] Bluetooth: hci0: unsupported parameter 5135
[  137.861648][ T8049] Bluetooth: hci0: unsupported parameter 8192
[  137.915897][ T8053] netlink: 'syz.3.661': attribute type 62 has an invalid length.
[  138.128619][ T8065] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  138.235920][ T8065] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  138.235958][ T8065] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  138.639464][ T8100] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  138.639506][ T8100] IPv6: NLM_F_CREATE should be set when creating new route
[  138.639559][ T8100] IPv6: NLM_F_CREATE should be set when creating new route
[  138.906746][ T8114] tipc: Started in network mode
[  138.906790][ T8114] tipc: Node identity ba3811e8a8c2, cluster identity 4711
[  138.906951][ T8114] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  139.298690][ T8135] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  139.322403][ T8135] syzkaller0: entered promiscuous mode
[  139.322437][ T8135] syzkaller0: entered allmulticast mode
[  139.326083][ T8135] openvswitch: netlink: Flow actions attr not present in new flow.
[  139.345458][ T4931] Bluetooth: unknown link type 231
[  139.345506][ T4931] Bluetooth: hci1: connection err: -111
[  139.541655][ T8147] syzkaller0: mtu less than device minimum
[  140.028720][ T8168] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  140.054785][ T5617] tipc: Node number set to 318378472
[  140.096012][ T7533] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  140.096850][ T7533] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  140.096882][ T7533] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  140.096911][ T7533] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  140.456484][ T8205] __nla_validate_parse: 138 callbacks suppressed
[  140.465441][ T8205] netlink: 32 bytes leftover after parsing attributes in process `syz.3.709'.
[  140.465513][ T8205] netlink: 32 bytes leftover after parsing attributes in process `syz.3.709'.
[  140.955948][ T8221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.713'.
[  141.333340][ T8239] netlink: 'syz.2.719': attribute type 10 has an invalid length.
[  141.400610][ T8241] netlink: 32 bytes leftover after parsing attributes in process `syz.3.722'.
[  141.400684][ T8241] netlink: 32 bytes leftover after parsing attributes in process `syz.3.722'.
[  141.799670][ T8268] netlink: 'syz.2.727': attribute type 12 has an invalid length.
[  141.799706][ T8268] netlink: 'syz.2.727': attribute type 29 has an invalid length.
[  141.799733][ T8268] netlink: 148 bytes leftover after parsing attributes in process `syz.2.727'.
[  141.978292][ T8276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.731'.
[  141.988730][ T8276] netlink: 'syz.0.731': attribute type 10 has an invalid length.
[  141.989292][ T8276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.731'.
[  142.180610][ T8283] syz_tun: entered promiscuous mode
[  142.180806][ T8283] macvtap1: entered allmulticast mode
[  142.180832][ T8283] syz_tun: entered allmulticast mode
[  142.201140][ T8283] syz_tun: left allmulticast mode
[  142.201185][ T8283] syz_tun: left promiscuous mode
[  142.226060][ T8287] netlink: 32 bytes leftover after parsing attributes in process `syz.1.736'.
[  142.237975][ T8287] netlink: 32 bytes leftover after parsing attributes in process `syz.1.736'.
[  142.478563][ T8301] openvswitch: netlink: Message has 8 unknown bytes.
[  142.685673][ T8316] netlink: 'syz.2.745': attribute type 10 has an invalid length.
[  142.712662][ T8316] geneve1: entered promiscuous mode
[  142.720311][ T8316] geneve1: entered allmulticast mode
[  143.912386][ T8369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  143.992941][ T8374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  144.876760][ T8412] xt_REDIRECT: bad MAP_IPS.
[  144.971790][ T8415] netlink: 'syz.1.770': attribute type 1 has an invalid length.
[  145.003697][ T8418] openvswitch: netlink: Missing key (keys=40, expected=100)
[  145.174820][ T8425] raw_sendmsg: syz.0.773 forgot to set AF_INET. Fix it!
[  145.742603][ T8453] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  145.887055][ T8458] netlink: 'syz.0.784': attribute type 1 has an invalid length.
[  145.900356][ T8458] __nla_validate_parse: 67 callbacks suppressed
[  145.907646][ T8458] netlink: 84 bytes leftover after parsing attributes in process `syz.0.784'.
[  145.907683][ T8458] netlink: 'syz.0.784': attribute type 2 has an invalid length.
[  145.907711][ T8458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.784'.
[  145.992859][ T8460] netlink: 71 bytes leftover after parsing attributes in process `syz.2.786'.
[  146.224828][ T8474] netlink: 24 bytes leftover after parsing attributes in process `syz.1.789'.
[  146.251728][ T8474] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.258033][ T8474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.789'.
[  146.258051][ T8474] openvswitch: netlink: Flow actions attr not present in new flow.
[  146.279956][ T8473] tipc: Disabling bearer <eth:syzkaller0>
[  146.388047][ T8487] netlink: 40 bytes leftover after parsing attributes in process `syz.3.792'.
[  146.520457][ T8497] netlink: 76 bytes leftover after parsing attributes in process `syz.1.796'.
[  147.127371][ T8507] netlink: 71 bytes leftover after parsing attributes in process `syz.4.797'.
[  147.405818][ T8524] tipc: Resetting bearer <eth:syzkaller0>
[  147.514391][ T7506] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.514453][ T7506] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.514500][ T7506] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.514533][ T7506] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.552630][ T8546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.806'.
[  147.552717][ T8546] lo: Caught tx_queue_len zero misconfig
[  147.592031][ T8548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.807'.
[  147.592082][ T8548] netlink: 'syz.0.807': attribute type 10 has an invalid length.
[  147.810653][ T8553] xt_connbytes: Forcing CT accounting to be enabled
[  147.869315][ T8556] syzkaller1: entered promiscuous mode
[  147.874897][ T8556] syzkaller1: entered allmulticast mode
[  148.169682][ T8570] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  148.452233][ T8583] netlink: 'syz.4.819': attribute type 10 has an invalid length.
[  149.062357][ T8619] netlink: 'syz.4.835': attribute type 10 has an invalid length.
[  150.267841][ T8668] netlink: 'syz.2.849': attribute type 10 has an invalid length.
[  151.384405][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  151.441806][ T8660] netlink: 'syz.0.847': attribute type 3 has an invalid length.
[  151.456730][ T8669] bridge_slave_1: left allmulticast mode
[  151.456773][ T8669] bridge_slave_1: left promiscuous mode
[  151.456974][ T8669] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.534730][ T8669] bridge_slave_0: left allmulticast mode
[  151.534775][ T8669] bridge_slave_0: left promiscuous mode
[  151.535003][ T8669] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.635266][ T8669] bridge0 (unregistering): left promiscuous mode
[  151.803111][ T8706] __nla_validate_parse: 19 callbacks suppressed
[  151.809733][ T8706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.859'.
[  151.831551][ T8701] batadv_slave_1: entered promiscuous mode
[  151.831927][ T8693] syzkaller0: entered promiscuous mode
[  151.831943][ T8693] syzkaller0: entered allmulticast mode
[  151.913382][ T8711] syzkaller0: entered promiscuous mode
[  151.913426][ T8711] syzkaller0: entered allmulticast mode
[  151.928170][ T8711] netlink: 'syz.4.860': attribute type 13 has an invalid length.
[  151.950308][ T8711] netlink: 'syz.4.860': attribute type 13 has an invalid length.
[  152.049951][ T8701] gre0: left promiscuous mode
[  152.081314][ T8701] geneve2: left promiscuous mode
[  152.096036][ T7534] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  152.096504][ T7534] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  152.096543][ T7534] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  152.096577][ T7534] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  152.118503][ T8690] batadv_slave_1: left promiscuous mode
[  152.267940][ T8722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.863'.
[  152.267991][ T8722] netlink: 'syz.1.863': attribute type 10 has an invalid length.
[  152.268005][ T8722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.863'.
[  152.329708][ T8724] netlink: 12 bytes leftover after parsing attributes in process `syz.4.864'.
[  152.437835][ T8737] netlink: 'syz.0.867': attribute type 1 has an invalid length.
[  152.512568][ T8744] netlink: 48 bytes leftover after parsing attributes in process `syz.3.870'.
[  152.543049][ T8737] 8021q: adding VLAN 0 to HW filter on device bond3
[  152.599177][ T8747] netlink: 124 bytes leftover after parsing attributes in process `syz.2.871'.
[  152.608463][ T8747] netlink: 124 bytes leftover after parsing attributes in process `syz.2.871'.
[  152.618899][ T8747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.871'.
[  152.631363][ T8747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.871'.
[  152.786838][ T8759] netlink: 'syz.0.873': attribute type 3 has an invalid length.
[  152.795348][ T8759] netlink: 'syz.0.873': attribute type 55 has an invalid length.
[  152.825092][ T8759] netlink: 20 bytes leftover after parsing attributes in process `syz.0.873'.
[  153.044978][ T8776] netlink: 'syz.3.880': attribute type 10 has an invalid length.
[  153.304811][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  153.460721][ T8805] veth1_virt_wifi: Caught tx_queue_len zero misconfig
[  153.700697][ T8812] netlink: 'syz.3.893': attribute type 10 has an invalid length.
[  153.762144][ T8816] xt_nfacct: accounting object `' does not exist
[  153.790906][ T8814] ip6gre2: entered promiscuous mode
[  153.790951][ T8814] ip6gre2: entered allmulticast mode
[  153.794265][   T75] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  153.794463][   T75] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  153.803530][ T8814] sctp: [Deprecated]: syz.4.894 (pid 8814) Use of struct sctp_assoc_value in delayed_ack socket option.
[  153.803530][ T8814] Use struct sctp_sack_info instead
[  153.824349][   T50] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  153.914503][   T50] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  154.272736][ T8850] xt_nfacct: accounting object `' does not exist
[  154.518759][   T75] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  154.519186][   T75] netdevsim netdevsim1 netdevsim0: unset [0, 1] type 1 family 0 port 4352 - 0
[  154.519229][   T75] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  154.584886][ T7733] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  154.716710][ T8874] syzkaller1: entered promiscuous mode
[  154.716748][ T8874] syzkaller1: entered allmulticast mode
[  154.897186][ T8890] FAULT_INJECTION: forcing a failure.
[  154.897186][ T8890] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  154.913568][ T8890] CPU: 0 UID: 0 PID: 8890 Comm: syz.1.920 Not tainted syzkaller #0 PREEMPT(full) 
[  154.913592][ T8890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  154.913602][ T8890] Call Trace:
[  154.913609][ T8890]  <TASK>
[  154.913617][ T8890]  dump_stack_lvl+0xe8/0x150
[  154.913647][ T8890]  should_fail_ex+0x410/0x560
[  154.913677][ T8890]  _copy_from_user+0x2d/0xb0
[  154.913699][ T8890]  __sys_bpf+0x2e7/0xd90
[  154.913725][ T8890]  ? __pfx___sys_bpf+0x10/0x10
[  154.913755][ T8890]  ? __fget_files+0x2a/0x420
[  154.913791][ T8890]  ? ksys_write+0x242/0x270
[  154.913816][ T8890]  ? __pfx_ksys_write+0x10/0x10
[  154.913843][ T8890]  __x64_sys_bpf+0xba/0xd0
[  154.913864][ T8890]  do_syscall_64+0x166/0x520
[  154.913888][ T8890]  ? trace_irq_disable+0x3b/0x140
[  154.913904][ T8890]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.913923][ T8890]  ? clear_bhb_loop+0x70/0xc0
[  154.913945][ T8890]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.913963][ T8890] RIP: 0033:0x7f4df819e159
[  154.913980][ T8890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  154.914002][ T8890] RSP: 002b:00007f4df9137028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  154.914021][ T8890] RAX: ffffffffffffffda RBX: 00007f4df8425fa0 RCX: 00007f4df819e159
[  154.914034][ T8890] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005
[  154.914045][ T8890] RBP: 00007f4df9137090 R08: 0000000000000000 R09: 0000000000000000
[  154.914055][ T8890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  154.914065][ T8890] R13: 00007f4df8426038 R14: 00007f4df8425fa0 R15: 00007ffe3efbd7f8
[  154.914093][ T8890]  </TASK>
[  155.816993][ T8936] FAULT_INJECTION: forcing a failure.
[  155.816993][ T8936] name failslab, interval 1, probability 0, space 0, times 0
[  155.826640][ T8937] validate_nla: 2 callbacks suppressed
[  155.826657][ T8937] netlink: 'syz.0.936': attribute type 1 has an invalid length.
[  155.830346][ T8936] CPU: 0 UID: 0 PID: 8936 Comm: syz.4.935 Not tainted syzkaller #0 PREEMPT(full) 
[  155.830369][ T8936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  155.830379][ T8936] Call Trace:
[  155.830386][ T8936]  <TASK>
[  155.830394][ T8936]  dump_stack_lvl+0xe8/0x150
[  155.830425][ T8936]  should_fail_ex+0x410/0x560
[  155.830457][ T8936]  should_failslab+0xa8/0x100
[  155.830480][ T8936]  __kmalloc_cache_node_noprof+0xaa/0x620
[  155.830510][ T8936]  ? __get_vm_area_node+0x155/0x2f0
[  155.830533][ T8936]  ? __get_vm_area_node+0x155/0x2f0
[  155.830562][ T8936]  __get_vm_area_node+0x155/0x2f0
[  155.830591][ T8936]  __vmalloc_node_range_noprof+0x343/0x1540
[  155.830617][ T8936]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  155.830638][ T8936]  ? __lock_acquire+0x6df/0x2e50
[  155.830682][ T8936]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  155.830718][ T8936]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  155.830736][ T8936]  __vmalloc_noprof+0xd2/0x120
[  155.830761][ T8936]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  155.830782][ T8936]  bpf_prog_alloc_no_stats+0x47/0x560
[  155.830800][ T8936]  ? bpf_prog_alloc+0x2a/0x1a0
[  155.830822][ T8936]  bpf_prog_alloc+0x3c/0x1a0
[  155.830843][ T8936]  bpf_prog_load+0x7f8/0x1c20
[  155.830873][ T8936]  ? __pfx_bpf_prog_load+0x10/0x10
[  155.830923][ T8936]  __sys_bpf+0xd0d/0xd90
[  155.830951][ T8936]  ? __pfx___sys_bpf+0x10/0x10
[  155.830981][ T8936]  ? __fget_files+0x2a/0x420
[  155.831025][ T8936]  ? ksys_write+0x242/0x270
[  155.831053][ T8936]  ? __pfx_ksys_write+0x10/0x10
[  155.831083][ T8936]  __x64_sys_bpf+0xba/0xd0
[  155.831104][ T8936]  do_syscall_64+0x166/0x520
[  155.831132][ T8936]  ? trace_irq_disable+0x3b/0x140
[  155.831149][ T8936]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.831167][ T8936]  ? clear_bhb_loop+0x70/0xc0
[  155.831189][ T8936]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.831207][ T8936] RIP: 0033:0x7f6bf339e159
[  155.831224][ T8936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  155.831238][ T8936] RSP: 002b:00007f6bf41e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  155.831258][ T8936] RAX: ffffffffffffffda RBX: 00007f6bf3625fa0 RCX: 00007f6bf339e159
[  155.831270][ T8936] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005
[  155.831282][ T8936] RBP: 00007f6bf41e1090 R08: 0000000000000000 R09: 0000000000000000
[  155.831293][ T8936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  155.831303][ T8936] R13: 00007f6bf3626038 R14: 00007f6bf3625fa0 R15: 00007fff9450cd18
[  155.831334][ T8936]  </TASK>
[  155.982175][ T8937] 8021q: adding VLAN 0 to HW filter on device bond4
[  156.001183][ T8936] syz.4.935: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  156.001269][ T8936] CPU: 1 UID: 0 PID: 8936 Comm: syz.4.935 Not tainted syzkaller #0 PREEMPT(full) 
[  156.001288][ T8936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  156.001298][ T8936] Call Trace:
[  156.001305][ T8936]  <TASK>
[  156.001312][ T8936]  dump_stack_lvl+0xe8/0x150
[  156.001342][ T8936]  warn_alloc+0x24d/0x270
[  156.001368][ T8936]  ? __kasan_kmalloc+0x22/0xb0
[  156.001399][ T8936]  ? __pfx_warn_alloc+0x10/0x10
[  156.001424][ T8936]  ? __get_vm_area_node+0x155/0x2f0
[  156.001453][ T8936]  ? __get_vm_area_node+0x2a9/0x2f0
[  156.001483][ T8936]  __vmalloc_node_range_noprof+0x36b/0x1540
[  156.001508][ T8936]  ? __lock_acquire+0x6df/0x2e50
[  156.001549][ T8936]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  156.001582][ T8936]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  156.001601][ T8936]  __vmalloc_noprof+0xd2/0x120
[  156.001625][ T8936]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  156.001646][ T8936]  bpf_prog_alloc_no_stats+0x47/0x560
[  156.001664][ T8936]  ? bpf_prog_alloc+0x2a/0x1a0
[  156.001685][ T8936]  bpf_prog_alloc+0x3c/0x1a0
[  156.001707][ T8936]  bpf_prog_load+0x7f8/0x1c20
[  156.001738][ T8936]  ? __pfx_bpf_prog_load+0x10/0x10
[  156.001781][ T8936]  __sys_bpf+0xd0d/0xd90
[  156.001807][ T8936]  ? __pfx___sys_bpf+0x10/0x10
[  156.001838][ T8936]  ? __fget_files+0x2a/0x420
[  156.001876][ T8936]  ? ksys_write+0x242/0x270
[  156.001902][ T8936]  ? __pfx_ksys_write+0x10/0x10
[  156.001932][ T8936]  __x64_sys_bpf+0xba/0xd0
[  156.001951][ T8936]  do_syscall_64+0x166/0x520
[  156.001976][ T8936]  ? trace_irq_disable+0x3b/0x140
[  156.001995][ T8936]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.002013][ T8936]  ? clear_bhb_loop+0x70/0xc0
[  156.002035][ T8936]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.002052][ T8936] RIP: 0033:0x7f6bf339e159
[  156.002067][ T8936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  156.002081][ T8936] RSP: 002b:00007f6bf41e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  156.002098][ T8936] RAX: ffffffffffffffda RBX: 00007f6bf3625fa0 RCX: 00007f6bf339e159
[  156.002110][ T8936] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005
[  156.002121][ T8936] RBP: 00007f6bf41e1090 R08: 0000000000000000 R09: 0000000000000000
[  156.002132][ T8936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  156.002142][ T8936] R13: 00007f6bf3626038 R14: 00007f6bf3625fa0 R15: 00007fff9450cd18
[  156.002172][ T8936]  </TASK>
[  156.005063][ T8936] Mem-Info:
[  156.005074][ T8936] active_anon:5908 inactive_anon:0 isolated_anon:0
[  156.005074][ T8936]  active_file:0 inactive_file:43403 isolated_file:0
[  156.005074][ T8936]  unevictable:0 dirty:280 writeback:0
[  156.005074][ T8936]  slab_reclaimable:10771 slab_unreclaimable:100797
[  156.005074][ T8936]  mapped:29511 shmem:518 pagetables:1381
[  156.005074][ T8936]  sec_pagetables:0 bounce:0
[  156.005074][ T8936]  kernel_misc_reclaimable:0
[  156.005074][ T8936]  free:1303792 free_pcp:10640 free_cma:0
[  156.005120][ T8936] Node 0 active_anon:23632kB inactive_anon:0kB active_file:0kB inactive_file:173404kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118044kB dirty:1116kB writeback:0kB shmem:2072kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14260kB pagetables:5380kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  156.005167][ T8936] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  156.005215][ T8936] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  156.006975][ T8936] lowmem_reserve[]: 0 2487 2487 2487 2487
[  156.007010][ T8936] Node 0 DMA32 free:1254940kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23632kB inactive_anon:0kB active_file:0kB inactive_file:173404kB unevictable:0kB writepending:1116kB zspages:0kB present:3129332kB managed:2546696kB mlocked:0kB bounce:0kB free_pcp:42560kB local_pcp:20868kB free_cma:0kB
[  156.007059][ T8936] lowmem_reserve[]: 0 0 0 0 0
[  156.007088][ T8936] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  156.007135][ T8936] lowmem_reserve[]: 0 0 0 0 0
[  156.007164][ T8936] Node 1 Normal free:3944868kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  156.007213][ T8936] lowmem_reserve[]: 0 0 0 0 0
[  156.007241][ T8936] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  156.007341][ T8936] Node 0 DMA32: 1690*4kB (UM) 933*8kB (UME) 316*16kB (UM) 202*32kB (UM) 171*64kB (UM) 69*128kB (UM) 20*256kB (UM) 6*512kB (UME) 3*1024kB (UM) 5*2048kB (UM) 290*4096kB (UM) = 1254864kB
[  156.007483][ T8936] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  156.007567][ T8936] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 9*16kB (UM) 4*32kB (UM) 6*64kB (UM) 4*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3944868kB
[  156.014453][ T8936] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  156.014468][ T8936] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  156.014490][ T8936] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  156.014503][ T8936] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  156.014517][ T8936] 43917 total pagecache pages
[  156.014527][ T8936] 0 pages in swap cache
[  156.014533][ T8936] Free swap  = 124996kB
[  156.014540][ T8936] Total swap = 124996kB
[  156.014547][ T8936] 2097051 pages RAM
[  156.014553][ T8936] 0 pages HighMem/MovableOnly
[  156.014559][ T8936] 428761 pages reserved
[  156.014565][ T8936] 0 pages cma reserved
[  156.130717][ T8941] bond4: (slave geneve4): making interface the new active one
[  156.171027][ T8941] bond4: (slave geneve4): Enslaving as an active interface with an up link
[  157.157554][ T8979] FAULT_INJECTION: forcing a failure.
[  157.157554][ T8979] name failslab, interval 1, probability 0, space 0, times 0
[  157.170511][ T8979] CPU: 0 UID: 0 PID: 8979 Comm: syz.2.948 Not tainted syzkaller #0 PREEMPT(full) 
[  157.170535][ T8979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  157.170547][ T8979] Call Trace:
[  157.170554][ T8979]  <TASK>
[  157.170562][ T8979]  dump_stack_lvl+0xe8/0x150
[  157.170594][ T8979]  should_fail_ex+0x410/0x560
[  157.170624][ T8979]  ? alloc_vmap_area+0x21c/0x1420
[  157.170648][ T8979]  should_failslab+0xa8/0x100
[  157.170670][ T8979]  ? alloc_vmap_area+0x21c/0x1420
[  157.170691][ T8979]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  157.170720][ T8979]  ? alloc_vmap_area+0x21c/0x1420
[  157.170750][ T8979]  alloc_vmap_area+0x21c/0x1420
[  157.170788][ T8979]  ? __pfx_alloc_vmap_area+0x10/0x10
[  157.170809][ T8979]  ? __kmalloc_cache_node_noprof+0x3d1/0x620
[  157.170837][ T8979]  ? __kmalloc_cache_node_noprof+0x1f7/0x620
[  157.170864][ T8979]  ? __get_vm_area_node+0x155/0x2f0
[  157.170892][ T8979]  __get_vm_area_node+0x200/0x2f0
[  157.170922][ T8979]  __vmalloc_node_range_noprof+0x343/0x1540
[  157.170948][ T8979]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  157.170970][ T8979]  ? __lock_acquire+0x6df/0x2e50
[  157.171012][ T8979]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  157.171045][ T8979]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  157.171066][ T8979]  __vmalloc_noprof+0xd2/0x120
[  157.171089][ T8979]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  157.171112][ T8979]  bpf_prog_alloc_no_stats+0x47/0x560
[  157.171132][ T8979]  ? bpf_prog_alloc+0x2a/0x1a0
[  157.171153][ T8979]  bpf_prog_alloc+0x3c/0x1a0
[  157.171183][ T8979]  bpf_prog_load+0x7f8/0x1c20
[  157.171215][ T8979]  ? __pfx_bpf_prog_load+0x10/0x10
[  157.171260][ T8979]  __sys_bpf+0xd0d/0xd90
[  157.171288][ T8979]  ? __pfx___sys_bpf+0x10/0x10
[  157.171318][ T8979]  ? __fget_files+0x2a/0x420
[  157.171358][ T8979]  ? ksys_write+0x242/0x270
[  157.171386][ T8979]  ? __pfx_ksys_write+0x10/0x10
[  157.171416][ T8979]  __x64_sys_bpf+0xba/0xd0
[  157.171436][ T8979]  do_syscall_64+0x166/0x520
[  157.171462][ T8979]  ? trace_irq_disable+0x3b/0x140
[  157.171479][ T8979]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.171498][ T8979]  ? clear_bhb_loop+0x70/0xc0
[  157.171521][ T8979]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.171540][ T8979] RIP: 0033:0x7f649c99e159
[  157.171556][ T8979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  157.171572][ T8979] RSP: 002b:00007f649d82e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  157.171591][ T8979] RAX: ffffffffffffffda RBX: 00007f649cc25fa0 RCX: 00007f649c99e159
[  157.171605][ T8979] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005
[  157.171617][ T8979] RBP: 00007f649d82e090 R08: 0000000000000000 R09: 0000000000000000
[  157.171629][ T8979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  157.171640][ T8979] R13: 00007f649cc26038 R14: 00007f649cc25fa0 R15: 00007ffc50092758
[  157.171669][ T8979]  </TASK>
[  157.375692][ T8983] netlink: 'syz.1.944': attribute type 1 has an invalid length.
[  157.503909][ T8988] netlink: 'syz.0.950': attribute type 1 has an invalid length.
[  157.503945][ T8988] __nla_validate_parse: 24 callbacks suppressed
[  157.503973][ T8988] netlink: 244 bytes leftover after parsing attributes in process `syz.0.950'.
[  157.638982][ T8996] tipc: Enabled bearer <eth:team0>, priority 0
[  157.754414][ T9002] netlink: 32 bytes leftover after parsing attributes in process `syz.3.956'.
[  157.944424][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  157.975996][ T9013] FAULT_INJECTION: forcing a failure.
[  157.975996][ T9013] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  157.976044][ T9013] CPU: 1 UID: 0 PID: 9013 Comm: syz.2.961 Not tainted syzkaller #0 PREEMPT(full) 
[  157.976065][ T9013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  157.976076][ T9013] Call Trace:
[  157.976083][ T9013]  <TASK>
[  157.976091][ T9013]  dump_stack_lvl+0xe8/0x150
[  157.976121][ T9013]  should_fail_ex+0x410/0x560
[  157.976152][ T9013]  prepare_alloc_pages+0x223/0x600
[  157.976177][ T9013]  __alloc_frozen_pages_noprof+0x185/0x5a0
[  157.976198][ T9013]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  157.976220][ T9013]  ? __pfx_policy_nodemask+0x10/0x10
[  157.976252][ T9013]  alloc_pages_mpol+0x21e/0x390
[  157.976277][ T9013]  alloc_pages_noprof+0xb1/0x2b0
[  157.976300][ T9013]  get_free_pages_noprof+0xf/0x80
[  157.976318][ T9013]  __kasan_populate_vmalloc+0x38/0x1c0
[  157.976345][ T9013]  ? do_raw_spin_unlock+0xf5/0x200
[  157.976373][ T9013]  alloc_vmap_area+0xd1a/0x1420
[  157.976409][ T9013]  ? __pfx_alloc_vmap_area+0x10/0x10
[  157.976430][ T9013]  ? __kmalloc_cache_node_noprof+0x3d1/0x620
[  157.976457][ T9013]  ? __kmalloc_cache_node_noprof+0x1f7/0x620
[  157.976483][ T9013]  ? __get_vm_area_node+0x155/0x2f0
[  157.976509][ T9013]  __get_vm_area_node+0x200/0x2f0
[  157.976534][ T9013]  __vmalloc_node_range_noprof+0x343/0x1540
[  157.976555][ T9013]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  157.976575][ T9013]  ? __lock_acquire+0x6df/0x2e50
[  157.976615][ T9013]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  157.976657][ T9013]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  157.976673][ T9013]  __vmalloc_noprof+0xd2/0x120
[  157.976697][ T9013]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  157.976719][ T9013]  bpf_prog_alloc_no_stats+0x47/0x560
[  157.976736][ T9013]  ? bpf_prog_alloc+0x2a/0x1a0
[  157.976757][ T9013]  bpf_prog_alloc+0x3c/0x1a0
[  157.976778][ T9013]  bpf_prog_load+0x7f8/0x1c20
[  157.976809][ T9013]  ? __pfx_bpf_prog_load+0x10/0x10
[  157.976850][ T9013]  __sys_bpf+0xd0d/0xd90
[  157.976876][ T9013]  ? __pfx___sys_bpf+0x10/0x10
[  157.976906][ T9013]  ? __fget_files+0x2a/0x420
[  157.976943][ T9013]  ? ksys_write+0x242/0x270
[  157.976969][ T9013]  ? __pfx_ksys_write+0x10/0x10
[  157.976998][ T9013]  __x64_sys_bpf+0xba/0xd0
[  157.977018][ T9013]  do_syscall_64+0x166/0x520
[  157.977053][ T9013]  ? trace_irq_disable+0x3b/0x140
[  157.977069][ T9013]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.977087][ T9013]  ? clear_bhb_loop+0x70/0xc0
[  157.977109][ T9013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.977126][ T9013] RIP: 0033:0x7f649c99e159
[  157.977143][ T9013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  157.977158][ T9013] RSP: 002b:00007f649d82e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  157.977177][ T9013] RAX: ffffffffffffffda RBX: 00007f649cc25fa0 RCX: 00007f649c99e159
[  157.977190][ T9013] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005
[  157.977202][ T9013] RBP: 00007f649d82e090 R08: 0000000000000000 R09: 0000000000000000
[  157.977213][ T9013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  157.977224][ T9013] R13: 00007f649cc26038 R14: 00007f649cc25fa0 R15: 00007ffc50092758
[  157.977252][ T9013]  </TASK>
[  158.035080][ T9016] netlink: 52 bytes leftover after parsing attributes in process `syz.3.962'.
[  158.035104][ T9016] netlink: 52 bytes leftover after parsing attributes in process `syz.3.962'.
[  158.035118][ T9016] netlink: 52 bytes leftover after parsing attributes in process `syz.3.962'.
[  158.267465][ T9020] netlink: 24 bytes leftover after parsing attributes in process `syz.1.964'.
[  158.451435][ T9029] netlink: 'syz.2.969': attribute type 5 has an invalid length.
[  158.458256][ T9029] netlink: 24 bytes leftover after parsing attributes in process `syz.2.969'.
[  158.477191][ T9032] netlink: 24 bytes leftover after parsing attributes in process `syz.1.964'.
[  158.477485][ T9032] netlink: 24 bytes leftover after parsing attributes in process `syz.1.964'.
[  158.477717][ T9032] netlink: 24 bytes leftover after parsing attributes in process `syz.1.964'.
[  158.478414][ T9029] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check.
[  158.727213][ T9045] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.738514][ T9039] macsec1: entered promiscuous mode
[  158.744295][ T9039] hsr0: entered promiscuous mode
[  159.465673][ T9082] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  159.467668][ T9082] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  159.739192][ T9102] syzkaller0: entered promiscuous mode
[  159.739233][ T9102] syzkaller0: entered allmulticast mode
[  159.796424][ T9102] v: left promiscuous mode
[  159.802726][ T9102] v: entered promiscuous mode
[  159.836068][ T7489] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  159.851721][ T9102] 8021q: adding VLAN 0 to HW filter on device bond2
[  159.889396][ T7723] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  159.914504][ T9116] netlink: 'syz.2.995': attribute type 1 has an invalid length.
[  159.946298][   T75] bond2: (slave bridge2): link status up again after 0 ms
[  159.956734][ T7526] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  159.967467][ T7526] bond2: (slave bridge2): link status up again after 0 ms
[  159.972359][ T9116] 8021q: adding VLAN 0 to HW filter on device bond2
[  159.984421][ T7526] bond2: (slave bridge2): link status up again after 0 ms
[  160.007338][ T1159] bond2: (slave bridge2): link status up again after 0 ms
[  160.007379][ T1159] bond2: (slave bridge2): failed to get link speed/duplex
[  160.080273][ T9120] netlink: 'syz.1.997': attribute type 10 has an invalid length.
[  160.411508][ T9140] FAULT_INJECTION: forcing a failure.
[  160.411508][ T9140] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  160.427823][ T9140] CPU: 1 UID: 0 PID: 9140 Comm: syz.2.1001 Not tainted syzkaller #0 PREEMPT(full) 
[  160.427847][ T9140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  160.427858][ T9140] Call Trace:
[  160.427865][ T9140]  <TASK>
[  160.427874][ T9140]  dump_stack_lvl+0xe8/0x150
[  160.427911][ T9140]  should_fail_ex+0x410/0x560
[  160.427943][ T9140]  prepare_alloc_pages+0x223/0x600
[  160.427969][ T9140]  __alloc_frozen_pages_noprof+0x185/0x5a0
[  160.427991][ T9140]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  160.428010][ T9140]  ? __alloc_frozen_pages_noprof+0x29e/0x5a0
[  160.428032][ T9140]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  160.428055][ T9140]  ? __pfx_policy_nodemask+0x10/0x10
[  160.428082][ T9140]  __alloc_pages_noprof+0x10/0x100
[  160.428102][ T9140]  alloc_pages_bulk_noprof+0x5fa/0x7c0
[  160.428129][ T9140]  ? alloc_pages_noprof+0x140/0x2b0
[  160.428155][ T9140]  __kasan_populate_vmalloc+0xb7/0x1c0
[  160.428189][ T9140]  alloc_vmap_area+0xd1a/0x1420
[  160.428228][ T9140]  ? __pfx_alloc_vmap_area+0x10/0x10
[  160.428250][ T9140]  ? __kmalloc_cache_node_noprof+0x3d1/0x620
[  160.428278][ T9140]  ? __kmalloc_cache_node_noprof+0x1f7/0x620
[  160.428305][ T9140]  ? __get_vm_area_node+0x155/0x2f0
[  160.428333][ T9140]  __get_vm_area_node+0x200/0x2f0
[  160.428364][ T9140]  __vmalloc_node_range_noprof+0x343/0x1540
[  160.428388][ T9140]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  160.428409][ T9140]  ? __lock_acquire+0x6df/0x2e50
[  160.428449][ T9140]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  160.428483][ T9140]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  160.428502][ T9140]  __vmalloc_noprof+0xd2/0x120
[  160.428526][ T9140]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  160.428548][ T9140]  bpf_prog_alloc_no_stats+0x47/0x560
[  160.428566][ T9140]  ? bpf_prog_alloc+0x2a/0x1a0
[  160.428586][ T9140]  bpf_prog_alloc+0x3c/0x1a0
[  160.428608][ T9140]  bpf_prog_load+0x7f8/0x1c20
[  160.428638][ T9140]  ? __pfx_bpf_prog_load+0x10/0x10
[  160.428680][ T9140]  __sys_bpf+0xd0d/0xd90
[  160.428706][ T9140]  ? __pfx___sys_bpf+0x10/0x10
[  160.428738][ T9140]  ? __fget_files+0x2a/0x420
[  160.428776][ T9140]  ? ksys_write+0x242/0x270
[  160.428802][ T9140]  ? __pfx_ksys_write+0x10/0x10
[  160.428832][ T9140]  __x64_sys_bpf+0xba/0xd0
[  160.428851][ T9140]  do_syscall_64+0x166/0x520
[  160.428876][ T9140]  ? trace_irq_disable+0x3b/0x140
[  160.428903][ T9140]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.428921][ T9140]  ? clear_bhb_loop+0x70/0xc0
[  160.428942][ T9140]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.428959][ T9140] RIP: 0033:0x7f649c99e159
[  160.428976][ T9140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  160.428991][ T9140] RSP: 002b:00007f649d82e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  160.429010][ T9140] RAX: ffffffffffffffda RBX: 00007f649cc25fa0 RCX: 00007f649c99e159
[  160.429023][ T9140] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005
[  160.429033][ T9140] RBP: 00007f649d82e090 R08: 0000000000000000 R09: 0000000000000000
[  160.429045][ T9140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  160.429055][ T9140] R13: 00007f649cc26038 R14: 00007f649cc25fa0 R15: 00007ffc50092758
[  160.429084][ T9140]  </TASK>
[  160.908412][ T7723] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  161.614078][ T9205] netlink: 'syz.3.1020': attribute type 1 has an invalid length.
[  161.808348][ T9215] xt_hashlimit: size too large, truncated to 1048576
[  161.808450][ T9215] xt_hashlimit: max too large, truncated to 1048576
[  162.049638][ T9222] xt_nfacct: accounting object `' does not exist
[  162.191953][ T9217] netlink: 'syz.1.1025': attribute type 13 has an invalid length.
[  162.777236][ T9250] batman_adv: batadv0: Adding interface: veth0
[  162.783782][ T9250] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  162.798953][ T9250] batman_adv: batadv0: Interface activated: veth0
[  162.822697][ T9250] batman_adv: batadv0: Removing interface: batadv_slave_0
[  162.831312][ T9250] batman_adv: batadv0: Interface deactivated: veth0
[  162.831351][ T9250] batman_adv: batadv0: Removing interface: veth0
[  162.919576][ T9257] xt_nfacct: accounting object `' does not exist
[  162.964034][ T9253] __nla_validate_parse: 77 callbacks suppressed
[  162.964088][ T9253] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1037'.
[  162.990492][ T9253] syzkaller1: entered promiscuous mode
[  162.990535][ T9253] syzkaller1: entered allmulticast mode
[  163.440782][ T9273] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1043'.
[  163.544727][ T7489] net_ratelimit: 25 callbacks suppressed
[  163.544770][ T7489] bond2: (slave bridge2): failed to get link speed/duplex
[  163.654230][ T7489] bond2: (slave bridge2): failed to get link speed/duplex
[  163.698618][ T9295] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1049'.
[  163.698693][ T9295] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1049'.
[  163.764651][ T1159] bond2: (slave bridge2): failed to get link speed/duplex
[  163.874504][ T7526] bond2: (slave bridge2): failed to get link speed/duplex
[  163.984591][ T7489] bond2: (slave bridge2): failed to get link speed/duplex
[  164.032681][ T9313] netlink: 6060 bytes leftover after parsing attributes in process `syz.4.1053'.
[  164.095329][   T75] bond2: (slave bridge2): failed to get link speed/duplex
[  164.210162][ T7489] bond2: (slave bridge2): failed to get link speed/duplex
[  164.219758][ T9320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1055'.
[  164.219810][ T9320] netlink: 'syz.2.1055': attribute type 5 has an invalid length.
[  164.219823][ T9320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1055'.
[  164.274534][   T75] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  164.284643][ T7526] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  164.284705][ T7526] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  164.284734][ T7526] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  164.286324][ T9320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1055'.
[  164.286353][ T9320] netlink: 'syz.2.1055': attribute type 5 has an invalid length.
[  164.286365][ T9320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1055'.
[  164.314509][   T75] bond2: (slave bridge2): failed to get link speed/duplex
[  164.424577][   T75] bond2: (slave bridge2): failed to get link speed/duplex
[  164.477254][ T9332] netlink: 'syz.1.1054': attribute type 1 has an invalid length.
[  164.554251][   T75] bond2: (slave bridge2): failed to get link speed/duplex
[  164.591566][ T9341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1064'.
[  164.970294][ T9360] FAULT_INJECTION: forcing a failure.
[  164.970294][ T9360] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  164.985830][ T9360] CPU: 1 UID: 0 PID: 9360 Comm: syz.3.1070 Not tainted syzkaller #0 PREEMPT(full) 
[  164.985879][ T9360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  164.985890][ T9360] Call Trace:
[  164.985897][ T9360]  <TASK>
[  164.985904][ T9360]  dump_stack_lvl+0xe8/0x150
[  164.985935][ T9360]  should_fail_ex+0x410/0x560
[  164.985967][ T9360]  _copy_from_iter+0x1d3/0x1660
[  164.985993][ T9360]  ? __alloc_skb+0x27a/0x7a0
[  164.986021][ T9360]  ? __alloc_skb+0x27a/0x7a0
[  164.986048][ T9360]  ? __alloc_skb+0x27a/0x7a0
[  164.986074][ T9360]  ? __pfx__copy_from_iter+0x10/0x10
[  164.986098][ T9360]  ? kmem_cache_alloc_node_noprof+0x1f9/0x610
[  164.986121][ T9360]  ? __alloc_skb+0x27a/0x7a0
[  164.986144][ T9360]  ? __alloc_skb+0x27a/0x7a0
[  164.986170][ T9360]  ? netlink_sendmsg+0x650/0xb40
[  164.986190][ T9360]  ? skb_put+0x112/0x210
[  164.986209][ T9360]  netlink_sendmsg+0x6c0/0xb40
[  164.986235][ T9360]  ? __pfx_netlink_sendmsg+0x10/0x10
[  164.986260][ T9360]  ? apparmor_socket_sendmsg+0x18b/0x360
[  164.986286][ T9360]  ? __pfx_netlink_sendmsg+0x10/0x10
[  164.986304][ T9360]  sock_sendmsg_nosec+0x13a/0x180
[  164.986330][ T9360]  ____sys_sendmsg+0x54e/0x850
[  164.986351][ T9360]  ? __pfx_____sys_sendmsg+0x10/0x10
[  164.986374][ T9360]  ? import_iovec+0x73/0xa0
[  164.986396][ T9360]  ___sys_sendmsg+0x2a5/0x360
[  164.986412][ T9360]  ? __lock_acquire+0x6df/0x2e50
[  164.986433][ T9360]  ? __pfx____sys_sendmsg+0x10/0x10
[  164.986482][ T9360]  ? __fget_files+0x2a/0x420
[  164.986504][ T9360]  ? __fget_files+0x3a2/0x420
[  164.986533][ T9360]  __x64_sys_sendmsg+0x1b1/0x290
[  164.986555][ T9360]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  164.986592][ T9360]  do_syscall_64+0x166/0x520
[  164.986617][ T9360]  ? trace_irq_disable+0x3b/0x140
[  164.986633][ T9360]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.986651][ T9360]  ? clear_bhb_loop+0x70/0xc0
[  164.986671][ T9360]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.986689][ T9360] RIP: 0033:0x7f532f79e159
[  164.986706][ T9360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  164.986722][ T9360] RSP: 002b:00007f532d9d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  164.986741][ T9360] RAX: ffffffffffffffda RBX: 00007f532fa26090 RCX: 00007f532f79e159
[  164.986757][ T9360] RDX: 0000000020040054 RSI: 0000200000000200 RDI: 0000000000000004
[  164.986770][ T9360] RBP: 00007f532d9d5090 R08: 0000000000000000 R09: 0000000000000000
[  164.986781][ T9360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  164.986791][ T9360] R13: 00007f532fa26128 R14: 00007f532fa26090 R15: 00007ffd7df51728
[  164.986819][ T9360]  </TASK>
[  165.121719][ T9361] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  165.459879][ T9367] syzkaller1: entered promiscuous mode
[  165.459923][ T9367] syzkaller1: entered allmulticast mode
[  166.030982][ T9390] syzkaller0: entered promiscuous mode
[  166.036959][ T9390] syzkaller0: entered allmulticast mode
[  166.179447][ T9390] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.192076][ T9390] 8021q: adding VLAN 0 to HW filter on device team0
[  166.203120][ T9390] 8021q: adding VLAN 0 to HW filter on device batadv0
[  166.660928][ T9410] FAULT_INJECTION: forcing a failure.
[  166.660928][ T9410] name failslab, interval 1, probability 0, space 0, times 0
[  166.660980][ T9410] CPU: 0 UID: 0 PID: 9410 Comm: syz.3.1083 Not tainted syzkaller #0 PREEMPT(full) 
[  166.661000][ T9410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  166.661011][ T9410] Call Trace:
[  166.661018][ T9410]  <TASK>
[  166.661026][ T9410]  dump_stack_lvl+0xe8/0x150
[  166.661057][ T9410]  should_fail_ex+0x410/0x560
[  166.661099][ T9410]  should_failslab+0xa8/0x100
[  166.661121][ T9410]  ? skb_clone+0x212/0x3a0
[  166.661141][ T9410]  kmem_cache_alloc_noprof+0xa1/0x600
[  166.661164][ T9410]  ? lock_acquire+0x115/0x350
[  166.661196][ T9410]  ? skb_clone+0x212/0x3a0
[  166.661231][ T9410]  skb_clone+0x212/0x3a0
[  166.661261][ T9410]  ? dev_queue_xmit_nit+0x25c/0xac0
[  166.661288][ T9410]  dev_queue_xmit_nit+0x28d/0xac0
[  166.661319][ T9410]  ? dev_queue_xmit_nit+0x2d/0xac0
[  166.661364][ T9410]  dev_hard_start_xmit+0x1c1/0x830
[  166.661427][ T9410]  __dev_queue_xmit+0x14c0/0x3820
[  166.661453][ T9410]  ? do_syscall_64+0x166/0x520
[  166.661477][ T9410]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.661507][ T9410]  ? __dev_queue_xmit+0x29b/0x3820
[  166.661562][ T9410]  ? __pfx___dev_queue_xmit+0x10/0x10
[  166.661634][ T9410]  ? __copy_skb_header+0xa3/0x4a0
[  166.661741][ T9410]  ? __skb_clone+0x449/0x6c0
[  166.661764][ T9410]  ? skb_clone+0x246/0x3a0
[  166.661785][ T9410]  __netlink_deliver_tap+0x5b4/0x860
[  166.661819][ T9410]  ? netlink_deliver_tap+0x2e/0x1b0
[  166.661843][ T9410]  netlink_deliver_tap+0x19c/0x1b0
[  166.661865][ T9410]  netlink_unicast+0x781/0x940
[  166.661893][ T9410]  netlink_sendmsg+0x813/0xb40
[  166.661925][ T9410]  ? __pfx_netlink_sendmsg+0x10/0x10
[  166.661953][ T9410]  ? apparmor_socket_sendmsg+0x18b/0x360
[  166.661982][ T9410]  ? __pfx_netlink_sendmsg+0x10/0x10
[  166.662002][ T9410]  sock_sendmsg_nosec+0x13a/0x180
[  166.662026][ T9410]  ____sys_sendmsg+0x54e/0x850
[  166.662049][ T9410]  ? __pfx_____sys_sendmsg+0x10/0x10
[  166.662072][ T9410]  ? import_iovec+0x73/0xa0
[  166.662092][ T9410]  ___sys_sendmsg+0x2a5/0x360
[  166.662109][ T9410]  ? __lock_acquire+0x6df/0x2e50
[  166.662132][ T9410]  ? __pfx____sys_sendmsg+0x10/0x10
[  166.662185][ T9410]  ? __fget_files+0x2a/0x420
[  166.662206][ T9410]  ? __fget_files+0x3a2/0x420
[  166.662265][ T9410]  __x64_sys_sendmsg+0x1b1/0x290
[  166.662288][ T9410]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  166.662329][ T9410]  do_syscall_64+0x166/0x520
[  166.662354][ T9410]  ? trace_irq_disable+0x3b/0x140
[  166.662371][ T9410]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.662389][ T9410]  ? clear_bhb_loop+0x70/0xc0
[  166.662419][ T9410]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.662438][ T9410] RIP: 0033:0x7f532f79e159
[  166.662455][ T9410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  166.662470][ T9410] RSP: 002b:00007f532d9d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  166.662489][ T9410] RAX: ffffffffffffffda RBX: 00007f532fa26090 RCX: 00007f532f79e159
[  166.662503][ T9410] RDX: 0000000020040054 RSI: 0000200000000200 RDI: 0000000000000004
[  166.662515][ T9410] RBP: 00007f532d9d5090 R08: 0000000000000000 R09: 0000000000000000
[  166.662527][ T9410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  166.662538][ T9410] R13: 00007f532fa26128 R14: 00007f532fa26090 R15: 00007ffd7df51728
[  166.662566][ T9410]  </TASK>
[  166.748616][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  166.771465][ T9390] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  166.771489][ T9390] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  166.800736][ T9390] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  166.809356][ T9390] veth1_vlan: left promiscuous mode
[  166.810595][ T9390] veth0_vlan: left promiscuous mode
[  166.820985][ T9390] veth0_vlan: entered promiscuous mode
[  166.833399][ T9390] veth1_vlan: entered promiscuous mode
[  166.870389][ T9390] veth1_macvtap: left promiscuous mode
[  166.873979][ T9390] veth0_macvtap: left promiscuous mode
[  166.881040][ T9390] veth0_macvtap: entered promiscuous mode
[  166.887932][ T9390] veth1_macvtap: entered promiscuous mode
[  166.919956][ T9390] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  166.927285][ T9390] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  166.953905][ T9390] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  166.960585][ T9390] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  166.980850][ T9390] batman_adv: batadv0: Interface activated: ipvlan2
[  166.986567][ T9390] 8021q: adding VLAN 0 to HW filter on device bond1
[  167.014797][ T8539] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  167.026872][ T9415] FAULT_INJECTION: forcing a failure.
[  167.026872][ T9415] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  167.026903][ T9415] CPU: 0 UID: 0 PID: 9415 Comm: syz.0.1085 Not tainted syzkaller #0 PREEMPT(full) 
[  167.026923][ T9415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  167.026934][ T9415] Call Trace:
[  167.026940][ T9415]  <TASK>
[  167.026948][ T9415]  dump_stack_lvl+0xe8/0x150
[  167.026978][ T9415]  should_fail_ex+0x410/0x560
[  167.027009][ T9415]  strncpy_from_user+0x36/0x2c0
[  167.027039][ T9415]  bpf_prog_load+0xdef/0x1c20
[  167.027070][ T9415]  ? __pfx_bpf_prog_load+0x10/0x10
[  167.027112][ T9415]  __sys_bpf+0xd0d/0xd90
[  167.027139][ T9415]  ? __pfx___sys_bpf+0x10/0x10
[  167.027168][ T9415]  ? __fget_files+0x2a/0x420
[  167.027206][ T9415]  ? ksys_write+0x242/0x270
[  167.027233][ T9415]  ? __pfx_ksys_write+0x10/0x10
[  167.027269][ T9415]  __x64_sys_bpf+0xba/0xd0
[  167.027289][ T9415]  do_syscall_64+0x166/0x520
[  167.027314][ T9415]  ? trace_irq_disable+0x3b/0x140
[  167.027330][ T9415]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.027348][ T9415]  ? clear_bhb_loop+0x70/0xc0
[  167.027370][ T9415]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.027387][ T9415] RIP: 0033:0x7f417899e159
[  167.027404][ T9415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  167.027419][ T9415] RSP: 002b:00007f41797f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  167.027438][ T9415] RAX: ffffffffffffffda RBX: 00007f4178c25fa0 RCX: 00007f417899e159
[  167.027451][ T9415] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005
[  167.027463][ T9415] RBP: 00007f41797f6090 R08: 0000000000000000 R09: 0000000000000000
[  167.027474][ T9415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  167.027484][ T9415] R13: 00007f4178c26038 R14: 00007f4178c25fa0 R15: 00007ffd63c1efc8
[  167.027513][ T9415]  </TASK>
[  167.044870][ T8539] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  168.825640][ T9426] __nla_validate_parse: 3 callbacks suppressed
[  168.825694][ T9426] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1089'.
[  168.866407][ T1159] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  168.866626][ T1159] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  168.867022][ T1159] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  168.890610][ T8539] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  168.896592][ T7511] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  168.897537][ T7511] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.897684][ T7511] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.904904][ T7511] net_ratelimit: 12 callbacks suppressed
[  168.904921][ T7511] bond2: (slave bridge2): failed to get link speed/duplex
[  168.904952][ T7511] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  169.004010][ T9437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1090'.
[  169.034324][ T7506] bond2: (slave bridge2): failed to get link speed/duplex
[  169.146231][ T1159] bond2: (slave bridge2): failed to get link speed/duplex
[  169.168594][ T9443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1095'.
[  169.254524][ T7511] bond2: (slave bridge2): failed to get link speed/duplex
[  169.365659][ T1159] bond2: (slave bridge2): failed to get link speed/duplex
[  169.389595][ T9453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1099'.
[  169.470957][ T8539] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  169.475121][ T7511] bond2: (slave bridge2): failed to get link speed/duplex
[  169.652591][ T9457] 8021q: adding VLAN 0 to HW filter on device bond0
[  169.673605][ T9457] 8021q: adding VLAN 0 to HW filter on device team0
[  169.676461][ T9457] tipc: Resetting bearer <eth:team0>
[  169.678604][ T9466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1100'.
[  169.713230][ T8537] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  169.759037][ T9467] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1100'.
[  169.787714][ T9457] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  169.799214][ T9457] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  169.826175][ T9457] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  169.841183][ T9457] veth1_vlan: left promiscuous mode
[  169.848772][ T9457] veth0_vlan: left promiscuous mode
[  169.850270][ T9457] veth0_vlan: entered promiscuous mode
[  169.859440][ T9457] veth1_vlan: entered promiscuous mode
[  169.882280][ T9457] veth1_macvtap: left promiscuous mode
[  169.887183][ T9457] veth0_macvtap: left promiscuous mode
[  169.890062][ T9457] veth0_macvtap: entered promiscuous mode
[  169.892986][ T9457] veth1_macvtap: entered promiscuous mode
[  169.906951][ T9457] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  169.909180][ T9457] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  169.917208][ T9457] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  169.921920][ T9457] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  169.937043][ T9457] erspan0: entered promiscuous mode
[  169.955245][ T9471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  169.955506][ T9457] 8021q: adding VLAN 0 to HW filter on device bond1
[  169.995383][ T9457] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check.
[  170.103029][ T7506] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.103145][ T7506] bridge0: port 1(bridge_slave_0) entered forwarding state
[  170.111688][ T7506] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.111783][ T7506] bridge0: port 2(bridge_slave_1) entered forwarding state
[  170.396232][ T7534] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  170.396309][ T7534] bond2: (slave bridge2): failed to get link speed/duplex
[  170.396349][ T7534] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  170.396379][ T7534] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  170.396409][ T7534] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  170.506588][ T7489] bond2: (slave bridge2): failed to get link speed/duplex
[  170.553918][ T9496] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1115'.
[  170.565648][ T9496] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1115'.
[  170.600072][ T9498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1114'.
[  170.609290][ T9498] netlink: 'syz.2.1114': attribute type 10 has an invalid length.
[  170.615269][ T7489] bond2: (slave bridge2): failed to get link speed/duplex
[  170.624796][ T9498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1114'.
[  171.263611][ T9533] FAULT_INJECTION: forcing a failure.
[  171.263611][ T9533] name failslab, interval 1, probability 0, space 0, times 0
[  171.263675][ T9533] CPU: 0 UID: 0 PID: 9533 Comm: syz.3.1125 Not tainted syzkaller #0 PREEMPT(full) 
[  171.263694][ T9533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  171.263703][ T9533] Call Trace:
[  171.263710][ T9533]  <TASK>
[  171.263716][ T9533]  dump_stack_lvl+0xe8/0x150
[  171.263743][ T9533]  should_fail_ex+0x410/0x560
[  171.263774][ T9533]  should_failslab+0xa8/0x100
[  171.263795][ T9533]  ? skb_clone+0x212/0x3a0
[  171.263816][ T9533]  kmem_cache_alloc_noprof+0xa1/0x600
[  171.263841][ T9533]  ? lock_acquire+0x115/0x350
[  171.263859][ T9533]  ? skb_clone+0x212/0x3a0
[  171.263884][ T9533]  skb_clone+0x212/0x3a0
[  171.263901][ T9533]  ? dev_queue_xmit_nit+0x25c/0xac0
[  171.263922][ T9533]  dev_queue_xmit_nit+0x28d/0xac0
[  171.263939][ T9533]  ? dev_queue_xmit_nit+0x2d/0xac0
[  171.263964][ T9533]  dev_hard_start_xmit+0x1c1/0x830
[  171.264000][ T9533]  __dev_queue_xmit+0x14c0/0x3820
[  171.264020][ T9533]  ? do_syscall_64+0x166/0x520
[  171.264043][ T9533]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.264072][ T9533]  ? __dev_queue_xmit+0x29b/0x3820
[  171.264102][ T9533]  ? __pfx___dev_queue_xmit+0x10/0x10
[  171.264136][ T9533]  ? __copy_skb_header+0xa3/0x4a0
[  171.264164][ T9533]  ? __skb_clone+0x449/0x6c0
[  171.264189][ T9533]  ? skb_clone+0x246/0x3a0
[  171.264211][ T9533]  __netlink_deliver_tap+0x5b4/0x860
[  171.264244][ T9533]  ? netlink_deliver_tap+0x2e/0x1b0
[  171.264266][ T9533]  netlink_deliver_tap+0x19c/0x1b0
[  171.264288][ T9533]  netlink_sendskb+0x68/0x140
[  171.264310][ T9533]  netlink_rcv_skb+0x2a4/0x4a0
[  171.264332][ T9533]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  171.264361][ T9533]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  171.264393][ T9533]  ? netlink_deliver_tap+0x2e/0x1b0
[  171.264413][ T9533]  ? netlink_deliver_tap+0x2e/0x1b0
[  171.264439][ T9533]  netlink_unicast+0x7bd/0x940
[  171.264469][ T9533]  netlink_sendmsg+0x813/0xb40
[  171.264498][ T9533]  ? __pfx_netlink_sendmsg+0x10/0x10
[  171.264528][ T9533]  ? apparmor_socket_sendmsg+0x18b/0x360
[  171.264555][ T9533]  ? __pfx_netlink_sendmsg+0x10/0x10
[  171.264572][ T9533]  sock_sendmsg_nosec+0x13a/0x180
[  171.264596][ T9533]  ____sys_sendmsg+0x54e/0x850
[  171.264620][ T9533]  ? __pfx_____sys_sendmsg+0x10/0x10
[  171.264732][ T9533]  ? import_iovec+0x73/0xa0
[  171.264755][ T9533]  ___sys_sendmsg+0x2a5/0x360
[  171.264773][ T9533]  ? __lock_acquire+0x6df/0x2e50
[  171.264795][ T9533]  ? __pfx____sys_sendmsg+0x10/0x10
[  171.264848][ T9533]  ? __fget_files+0x2a/0x420
[  171.264870][ T9533]  ? __fget_files+0x3a2/0x420
[  171.264902][ T9533]  __x64_sys_sendmsg+0x1b1/0x290
[  171.264931][ T9533]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  171.264975][ T9533]  do_syscall_64+0x166/0x520
[  171.264998][ T9533]  ? trace_irq_disable+0x3b/0x140
[  171.265016][ T9533]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.265033][ T9533]  ? clear_bhb_loop+0x70/0xc0
[  171.265055][ T9533]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.265073][ T9533] RIP: 0033:0x7f532f79e159
[  171.265090][ T9533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  171.265106][ T9533] RSP: 002b:00007f532d9d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  171.265125][ T9533] RAX: ffffffffffffffda RBX: 00007f532fa26090 RCX: 00007f532f79e159
[  171.265138][ T9533] RDX: 0000000020040054 RSI: 0000200000000200 RDI: 0000000000000004
[  171.265149][ T9533] RBP: 00007f532d9d5090 R08: 0000000000000000 R09: 0000000000000000
[  171.265160][ T9533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  171.265171][ T9533] R13: 00007f532fa26128 R14: 00007f532fa26090 R15: 00007ffd7df51728
[  171.265200][ T9533]  </TASK>
[  171.638254][ T9538] netlink: 'syz.0.1127': attribute type 10 has an invalid length.
[  171.686662][ T9538] team0 (unregistering): Port device team_slave_0 removed
[  171.715487][ T9538] team0 (unregistering): Port device team_slave_1 removed
[  172.268283][ T9579] tc_dump_action: action bad kind
[  172.301803][ T9580] FAULT_INJECTION: forcing a failure.
[  172.301803][ T9580] name failslab, interval 1, probability 0, space 0, times 0
[  172.301854][ T9580] CPU: 0 UID: 0 PID: 9580 Comm: syz.4.1140 Not tainted syzkaller #0 PREEMPT(full) 
[  172.301873][ T9580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  172.301882][ T9580] Call Trace:
[  172.301888][ T9580]  <TASK>
[  172.301894][ T9580]  dump_stack_lvl+0xe8/0x150
[  172.301923][ T9580]  should_fail_ex+0x410/0x560
[  172.301955][ T9580]  should_failslab+0xa8/0x100
[  172.301976][ T9580]  ? skb_clone+0x212/0x3a0
[  172.301995][ T9580]  kmem_cache_alloc_noprof+0xa1/0x600
[  172.302022][ T9580]  ? skb_clone+0x212/0x3a0
[  172.302046][ T9580]  skb_clone+0x212/0x3a0
[  172.302069][ T9580]  __netlink_deliver_tap+0x413/0x860
[  172.302101][ T9580]  ? netlink_deliver_tap+0x2e/0x1b0
[  172.302124][ T9580]  netlink_deliver_tap+0x19c/0x1b0
[  172.302146][ T9580]  netlink_sendskb+0x68/0x140
[  172.302166][ T9580]  netlink_rcv_skb+0x2a4/0x4a0
[  172.302188][ T9580]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  172.302216][ T9580]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  172.302259][ T9580]  netlink_unicast+0x7bd/0x940
[  172.302287][ T9580]  netlink_sendmsg+0x813/0xb40
[  172.302317][ T9580]  ? __pfx_netlink_sendmsg+0x10/0x10
[  172.302346][ T9580]  ? apparmor_socket_sendmsg+0x18b/0x360
[  172.302375][ T9580]  ? __pfx_netlink_sendmsg+0x10/0x10
[  172.302395][ T9580]  sock_sendmsg_nosec+0x13a/0x180
[  172.302422][ T9580]  ____sys_sendmsg+0x54e/0x850
[  172.302446][ T9580]  ? __pfx_____sys_sendmsg+0x10/0x10
[  172.302473][ T9580]  ? import_iovec+0x73/0xa0
[  172.302496][ T9580]  ___sys_sendmsg+0x2a5/0x360
[  172.302514][ T9580]  ? __lock_acquire+0x6df/0x2e50
[  172.302536][ T9580]  ? __pfx____sys_sendmsg+0x10/0x10
[  172.302587][ T9580]  ? __fget_files+0x2a/0x420
[  172.302609][ T9580]  ? __fget_files+0x3a2/0x420
[  172.302648][ T9580]  __x64_sys_sendmsg+0x1b1/0x290
[  172.302669][ T9580]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  172.302709][ T9580]  do_syscall_64+0x166/0x520
[  172.302733][ T9580]  ? trace_irq_disable+0x3b/0x140
[  172.302750][ T9580]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.302768][ T9580]  ? clear_bhb_loop+0x70/0xc0
[  172.302790][ T9580]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.302807][ T9580] RIP: 0033:0x7f6bf339e159
[  172.302823][ T9580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  172.302839][ T9580] RSP: 002b:00007f6bf41c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  172.302858][ T9580] RAX: ffffffffffffffda RBX: 00007f6bf3626090 RCX: 00007f6bf339e159
[  172.302871][ T9580] RDX: 0000000020040054 RSI: 0000200000000200 RDI: 0000000000000004
[  172.302882][ T9580] RBP: 00007f6bf41c0090 R08: 0000000000000000 R09: 0000000000000000
[  172.302893][ T9580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  172.302904][ T9580] R13: 00007f6bf3626128 R14: 00007f6bf3626090 R15: 00007fff9450cd18
[  172.302933][ T9580]  </TASK>
[  172.824344][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  173.103949][ T9609] bond0: option mode: invalid value (7)
[  173.113931][ T9609] bond0 (unregistering): Released all slaves
[  173.224350][    C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  173.633206][ T9633] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.633393][ T9633] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.653538][ T9634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  173.915648][ T7511] net_ratelimit: 26 callbacks suppressed
[  173.915694][ T7511] bond2: (slave bridge2): failed to get link speed/duplex
[  174.024271][ T7511] bond2: (slave bridge2): failed to get link speed/duplex
[  174.324428][ T7489] bond2: (slave bridge2): failed to get link speed/duplex
[  174.413194][ T9667] __nla_validate_parse: 11 callbacks suppressed
[  174.413239][ T9667] netlink: 71 bytes leftover after parsing attributes in process `syz.3.1170'.
[  174.437813][ T7489] bond2: (slave bridge2): failed to get link speed/duplex
[  174.586269][ T7489] bond2: (slave bridge2): failed to get link speed/duplex
[  174.649144][ T9676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1172'.
[  174.664029][ T9682] netlink: 'syz.2.1175': attribute type 8 has an invalid length.
[  174.694279][ T7489] bond2: (slave bridge2): failed to get link speed/duplex
[  174.778353][ T9684] netlink: 'syz.4.1176': attribute type 3 has an invalid length.
[  174.778395][ T9684] netlink: 'syz.4.1176': attribute type 1 has an invalid length.
[  174.778407][ T9684] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1176'.
[  174.804476][ T7489] bond2: (slave bridge2): failed to get link speed/duplex
[  174.916331][ T7511] bond2: (slave bridge2): failed to get link speed/duplex
[  175.024866][ T7511] bond2: (slave bridge2): failed to get link speed/duplex
[  175.134643][ T7506] bond2: (slave bridge2): failed to get link speed/duplex
[  175.405412][ T9724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1190'.
[  175.429960][ T9724] gre0: Caught tx_queue_len zero misconfig
[  175.592664][ T9731] xt_nfacct: accounting object `' does not exist
[  175.927950][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805319b400: rx timeout, send abort
[  175.929960][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805319b400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  176.023428][ T9749] FAULT_INJECTION: forcing a failure.
[  176.023428][ T9749] name failslab, interval 1, probability 0, space 0, times 0
[  176.038009][ T9749] CPU: 1 UID: 0 PID: 9749 Comm: syz.4.1198 Not tainted syzkaller #0 PREEMPT(full) 
[  176.038034][ T9749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  176.038045][ T9749] Call Trace:
[  176.038053][ T9749]  <TASK>
[  176.038061][ T9749]  dump_stack_lvl+0xe8/0x150
[  176.038092][ T9749]  should_fail_ex+0x410/0x560
[  176.038117][ T9749]  should_failslab+0xa8/0x100
[  176.038136][ T9749]  __kmalloc_node_noprof+0x100/0x720
[  176.038156][ T9749]  ? __get_vm_area_node+0x200/0x2f0
[  176.038173][ T9749]  ? __get_vm_area_node+0x283/0x2f0
[  176.038190][ T9749]  ? __vmalloc_node_range_noprof+0x5b4/0x1540
[  176.038208][ T9749]  ? __vmalloc_node_range_noprof+0x5b4/0x1540
[  176.038232][ T9749]  __vmalloc_node_range_noprof+0x5b4/0x1540
[  176.038262][ T9749]  ? lruvec_stat_mod_folio+0x6e/0x3e0
[  176.038296][ T9749]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  176.038317][ T9749]  ? apparmor_capable+0x126/0x170
[  176.038336][ T9749]  ? bpf_lsm_capable+0x9/0x20
[  176.038356][ T9749]  ? security_capable+0x7e/0x2c0
[  176.038371][ T9749]  ? bpf_check+0x10ee/0x2e10
[  176.038385][ T9749]  __vmalloc_noprof+0xd2/0x120
[  176.038404][ T9749]  ? bpf_check+0x10ee/0x2e10
[  176.038419][ T9749]  bpf_check+0x10ee/0x2e10
[  176.038442][ T9749]  ? ktime_get_with_offset+0x93/0x2d0
[  176.038459][ T9749]  ? __pfx_bpf_check+0x10/0x10
[  176.038476][ T9749]  ? bpf_obj_name_cpy+0x194/0x1e0
[  176.038498][ T9749]  bpf_prog_load+0x14d6/0x1c20
[  176.038522][ T9749]  ? __pfx_bpf_prog_load+0x10/0x10
[  176.038559][ T9749]  __sys_bpf+0xd0d/0xd90
[  176.038580][ T9749]  ? __pfx___sys_bpf+0x10/0x10
[  176.038603][ T9749]  ? __fget_files+0x2a/0x420
[  176.038633][ T9749]  ? ksys_write+0x242/0x270
[  176.038654][ T9749]  ? __pfx_ksys_write+0x10/0x10
[  176.038677][ T9749]  __x64_sys_bpf+0xba/0xd0
[  176.038692][ T9749]  do_syscall_64+0x166/0x520
[  176.038712][ T9749]  ? trace_irq_disable+0x3b/0x140
[  176.038725][ T9749]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.038740][ T9749]  ? clear_bhb_loop+0x70/0xc0
[  176.038757][ T9749]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.038772][ T9749] RIP: 0033:0x7f6bf339e159
[  176.038786][ T9749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  176.038798][ T9749] RSP: 002b:00007f6bf41e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  176.038814][ T9749] RAX: ffffffffffffffda RBX: 00007f6bf3625fa0 RCX: 00007f6bf339e159
[  176.038824][ T9749] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005
[  176.038833][ T9749] RBP: 00007f6bf41e1090 R08: 0000000000000000 R09: 0000000000000000
[  176.038842][ T9749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  176.038851][ T9749] R13: 00007f6bf3626038 R14: 00007f6bf3625fa0 R15: 00007fff9450cd18
[  176.038873][ T9749]  </TASK>
[  176.084581][ T9753] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1199'.
[  176.088243][ T9757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1200'.
[  176.088276][ T9757] netlink: 'syz.3.1200': attribute type 10 has an invalid length.
[  176.088291][ T9757] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1200'.
[  176.096352][ T9749] warn_alloc: 3 callbacks suppressed
[  176.096367][ T9749] syz.4.1198: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  176.096425][ T9749] CPU: 1 UID: 0 PID: 9749 Comm: syz.4.1198 Not tainted syzkaller #0 PREEMPT(full) 
[  176.096445][ T9749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  176.096456][ T9749] Call Trace:
[  176.096463][ T9749]  <TASK>
[  176.096470][ T9749]  dump_stack_lvl+0xe8/0x150
[  176.096501][ T9749]  warn_alloc+0x24d/0x270
[  176.096533][ T9749]  ? __pfx_warn_alloc+0x10/0x10
[  176.096564][ T9749]  ? __kmalloc_node_noprof+0x4d7/0x720
[  176.096588][ T9749]  ? __get_vm_area_node+0x200/0x2f0
[  176.096609][ T9749]  ? __get_vm_area_node+0x283/0x2f0
[  176.096629][ T9749]  ? __vmalloc_node_range_noprof+0x5b4/0x1540
[  176.096650][ T9749]  ? __vmalloc_node_range_noprof+0x5b4/0x1540
[  176.096679][ T9749]  __vmalloc_node_range_noprof+0x969/0x1540
[  176.096719][ T9749]  ? lruvec_stat_mod_folio+0x6e/0x3e0
[  176.096754][ T9749]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  176.096780][ T9749]  ? apparmor_capable+0x126/0x170
[  176.096806][ T9749]  ? bpf_lsm_capable+0x9/0x20
[  176.096830][ T9749]  ? security_capable+0x7e/0x2c0
[  176.096850][ T9749]  ? bpf_check+0x10ee/0x2e10
[  176.096867][ T9749]  __vmalloc_noprof+0xd2/0x120
[  176.096892][ T9749]  ? bpf_check+0x10ee/0x2e10
[  176.096913][ T9749]  bpf_check+0x10ee/0x2e10
[  176.096943][ T9749]  ? ktime_get_with_offset+0x93/0x2d0
[  176.096965][ T9749]  ? __pfx_bpf_check+0x10/0x10
[  176.096987][ T9749]  ? bpf_obj_name_cpy+0x194/0x1e0
[  176.097015][ T9749]  bpf_prog_load+0x14d6/0x1c20
[  176.097047][ T9749]  ? __pfx_bpf_prog_load+0x10/0x10
[  176.097092][ T9749]  __sys_bpf+0xd0d/0xd90
[  176.097120][ T9749]  ? __pfx___sys_bpf+0x10/0x10
[  176.097149][ T9749]  ? __fget_files+0x2a/0x420
[  176.097189][ T9749]  ? ksys_write+0x242/0x270
[  176.097216][ T9749]  ? __pfx_ksys_write+0x10/0x10
[  176.097246][ T9749]  __x64_sys_bpf+0xba/0xd0
[  176.097275][ T9749]  do_syscall_64+0x166/0x520
[  176.097300][ T9749]  ? trace_irq_disable+0x3b/0x140
[  176.097317][ T9749]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.097335][ T9749]  ? clear_bhb_loop+0x70/0xc0
[  176.097358][ T9749]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.097376][ T9749] RIP: 0033:0x7f6bf339e159
[  176.097394][ T9749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  176.097410][ T9749] RSP: 002b:00007f6bf41e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  176.097428][ T9749] RAX: ffffffffffffffda RBX: 00007f6bf3625fa0 RCX: 00007f6bf339e159
[  176.097441][ T9749] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005
[  176.097453][ T9749] RBP: 00007f6bf41e1090 R08: 0000000000000000 R09: 0000000000000000
[  176.097464][ T9749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  176.097475][ T9749] R13: 00007f6bf3626038 R14: 00007f6bf3625fa0 R15: 00007fff9450cd18
[  176.097504][ T9749]  </TASK>
[  176.097511][ T9749] Mem-Info:
[  176.097519][ T9749] active_anon:5874 inactive_anon:0 isolated_anon:0
[  176.097519][ T9749]  active_file:0 inactive_file:43477 isolated_file:0
[  176.097519][ T9749]  unevictable:17 dirty:237 writeback:0
[  176.097519][ T9749]  slab_reclaimable:10514 slab_unreclaimable:103136
[  176.097519][ T9749]  mapped:29526 shmem:528 pagetables:1266
[  176.097519][ T9749]  sec_pagetables:0 bounce:0
[  176.097519][ T9749]  kernel_misc_reclaimable:0
[  176.097519][ T9749]  free:1293198 free_pcp:19046 free_cma:0
[  176.097566][ T9749] Node 0 active_anon:23496kB inactive_anon:0kB active_file:0kB inactive_file:173700kB unevictable:68kB isolated(anon):0kB isolated(file):0kB mapped:118104kB dirty:944kB writeback:0kB shmem:2112kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14504kB pagetables:4920kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  176.097631][ T9749] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  176.097678][ T9749] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  176.097729][ T9749] lowmem_reserve[]: 0 2487 2487 2487 2487
[  176.097763][ T9749] Node 0 DMA32 free:1212564kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23496kB inactive_anon:0kB active_file:0kB inactive_file:173700kB unevictable:68kB writepending:944kB zspages:0kB present:3129332kB managed:2546696kB mlocked:68kB bounce:0kB free_pcp:76188kB local_pcp:39096kB free_cma:0kB
[  176.204384][ T9749] lowmem_reserve[]: 0 0 0 0 0
[  176.204423][ T9749] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  176.204473][ T9749] lowmem_reserve[]: 0 0 0 0 0
[  176.204504][ T9749] Node 1 Normal free:3944868kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  176.204554][ T9749] lowmem_reserve[]: 0 0 0 0 0
[  176.204584][ T9749] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  176.204686][ T9749] Node 0 DMA32: 2248*4kB (UM) 1626*8kB (UME) 560*16kB (UME) 131*32kB (UME) 44*64kB (UME) 30*128kB (UME) 14*256kB (UME) 15*512kB (UME) 24*1024kB (UME) 16*2048kB (UME) 269*4096kB (UM) = 1212240kB
[  176.205942][ T9749] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  176.206030][ T9749] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 9*16kB (UM) 4*32kB (UM) 6*64kB (UM) 4*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3944868kB
[  176.206168][ T9749] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  176.206183][ T9749] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  176.206197][ T9749] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  176.206211][ T9749] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  176.206225][ T9749] 44001 total pagecache pages
[  176.206232][ T9749] 0 pages in swap cache
[  176.206238][ T9749] Free swap  = 124996kB
[  176.206245][ T9749] Total swap = 124996kB
[  176.206252][ T9749] 2097051 pages RAM
[  176.206258][ T9749] 0 pages HighMem/MovableOnly
[  176.206264][ T9749] 428761 pages reserved
[  176.206270][ T9749] 0 pages cma reserved
[  176.556536][ T9771] netlink: 71 bytes leftover after parsing attributes in process `syz.2.1205'.
[  177.125602][ T9790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1213'.
[  177.134773][ T9790] netlink: 'syz.0.1213': attribute type 10 has an invalid length.
[  177.142671][ T9790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1213'.
[  177.490985][ T9808] xt_nfacct: accounting object `' does not exist
[  177.850555][ T9835] netlink: 'syz.4.1224': attribute type 10 has an invalid length.
[  178.080783][ T9847] FAULT_INJECTION: forcing a failure.
[  178.080783][ T9847] name failslab, interval 1, probability 0, space 0, times 0
[  178.080830][ T9847] CPU: 0 UID: 0 PID: 9847 Comm: syz.1.1226 Not tainted syzkaller #0 PREEMPT(full) 
[  178.080850][ T9847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  178.080860][ T9847] Call Trace:
[  178.080867][ T9847]  <TASK>
[  178.080875][ T9847]  dump_stack_lvl+0xe8/0x150
[  178.080904][ T9847]  should_fail_ex+0x410/0x560
[  178.080940][ T9847]  should_failslab+0xa8/0x100
[  178.080963][ T9847]  __kmalloc_node_noprof+0x100/0x720
[  178.080989][ T9847]  ? __get_vm_area_node+0x200/0x2f0
[  178.081016][ T9847]  ? __get_vm_area_node+0x283/0x2f0
[  178.081044][ T9847]  ? __vmalloc_node_range_noprof+0x5b4/0x1540
[  178.081068][ T9847]  ? __vmalloc_node_range_noprof+0x5b4/0x1540
[  178.081096][ T9847]  __vmalloc_node_range_noprof+0x5b4/0x1540
[  178.081132][ T9847]  ? lruvec_stat_mod_folio+0x6e/0x3e0
[  178.081162][ T9847]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  178.081190][ T9847]  ? apparmor_capable+0x126/0x170
[  178.081214][ T9847]  ? bpf_lsm_capable+0x9/0x20
[  178.081238][ T9847]  ? security_capable+0x7e/0x2c0
[  178.081257][ T9847]  ? bpf_check+0x10ee/0x2e10
[  178.081275][ T9847]  __vmalloc_noprof+0xd2/0x120
[  178.081299][ T9847]  ? bpf_check+0x10ee/0x2e10
[  178.081320][ T9847]  bpf_check+0x10ee/0x2e10
[  178.081350][ T9847]  ? ktime_get_with_offset+0x93/0x2d0
[  178.081371][ T9847]  ? __pfx_bpf_check+0x10/0x10
[  178.081391][ T9847]  ? bpf_obj_name_cpy+0x194/0x1e0
[  178.081417][ T9847]  bpf_prog_load+0x14d6/0x1c20
[  178.081447][ T9847]  ? __pfx_bpf_prog_load+0x10/0x10
[  178.081489][ T9847]  __sys_bpf+0xd0d/0xd90
[  178.081515][ T9847]  ? __pfx___sys_bpf+0x10/0x10
[  178.081543][ T9847]  ? __fget_files+0x2a/0x420
[  178.081580][ T9847]  ? ksys_write+0x242/0x270
[  178.081605][ T9847]  ? __pfx_ksys_write+0x10/0x10
[  178.081634][ T9847]  __x64_sys_bpf+0xba/0xd0
[  178.081651][ T9847]  do_syscall_64+0x166/0x520
[  178.081675][ T9847]  ? trace_irq_disable+0x3b/0x140
[  178.081691][ T9847]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.081708][ T9847]  ? clear_bhb_loop+0x70/0xc0
[  178.081731][ T9847]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.081747][ T9847] RIP: 0033:0x7f4df819e159
[  178.081764][ T9847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  178.081777][ T9847] RSP: 002b:00007f4df9137028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  178.081795][ T9847] RAX: ffffffffffffffda RBX: 00007f4df8425fa0 RCX: 00007f4df819e159
[  178.081807][ T9847] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005
[  178.081817][ T9847] RBP: 00007f4df9137090 R08: 0000000000000000 R09: 0000000000000000
[  178.081827][ T9847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  178.081837][ T9847] R13: 00007f4df8426038 R14: 00007f4df8425fa0 R15: 00007ffe3efbd7f8
[  178.081859][ T9847]  </TASK>
[  178.442297][ T9859] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  178.457238][ T9859] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  178.474741][ T9859] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  178.492317][ T9859] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  178.511551][ T9859] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98
[  178.730965][ T9874] netlink: 'syz.2.1235': attribute type 10 has an invalid length.
[  178.928237][ T9862] smbdirect: ib_dev[s`z1] renamed to [sys]
[  178.954823][   T75] net_ratelimit: 32 callbacks suppressed
[  178.954876][   T75] bond2: (slave bridge2): failed to get link speed/duplex
[  178.991409][ T9880] openvswitch: netlink: IPv6 tunnel dst address is zero
[  179.066254][   T75] bond2: (slave bridge2): failed to get link speed/duplex
[  179.118734][ T9892] ip6gre2: entered promiscuous mode
[  179.124054][ T9892] ip6gre2: entered allmulticast mode
[  179.132990][ T9892] sctp: [Deprecated]: syz.0.1241 (pid 9892) Use of struct sctp_assoc_value in delayed_ack socket option.
[  179.132990][ T9892] Use struct sctp_sack_info instead
[  179.180171][ T1159] bond2: (slave bridge2): failed to get link speed/duplex
[  179.285278][   T75] bond2: (slave bridge2): failed to get link speed/duplex
[  179.327651][ T9902] sctp: [Deprecated]: syz.3.1243 (pid 9902) Use of struct sctp_assoc_value in delayed_ack socket option.
[  179.327651][ T9902] Use struct sctp_sack_info instead
[  179.419151][ T9906] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  179.432791][ T9906] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  179.459948][ T9910] __nla_validate_parse: 15 callbacks suppressed
[  179.460198][ T9910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1247'.
[  179.460226][ T9910] netlink: 'syz.0.1247': attribute type 10 has an invalid length.
[  179.460241][ T9910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1247'.
[  179.474321][   T75] bond2: (slave bridge2): failed to get link speed/duplex
[  179.588375][   T75] bond2: (slave bridge2): failed to get link speed/duplex
[  179.694347][ T7489] bond2: (slave bridge2): failed to get link speed/duplex
[  179.730795][ T9924] bridge0: entered promiscuous mode
[  179.736640][ T9924] macvlan2: entered promiscuous mode
[  179.785036][   T75] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  179.785255][   T75] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  179.808046][   T75] bond2: (slave bridge2): failed to get link speed/duplex
[  179.815238][ T7723] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  180.072504][ T9934] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1253'.
[  180.245382][ T7723] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  180.450444][ T9954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1257'.
[  180.513746][ T9954] ip6gre1: entered promiscuous mode
[  180.513826][ T9954] ip6gre1: entered allmulticast mode
[  180.542066][ T9959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1259'.
[  180.542105][ T9959] netlink: 'syz.1.1259': attribute type 10 has an invalid length.
[  180.542449][ T9959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1259'.
[  180.611270][ T9950] netlink: 'syz.4.1256': attribute type 13 has an invalid length.
[  180.616328][ T9954] sctp: [Deprecated]: syz.3.1257 (pid 9954) Use of struct sctp_assoc_value in delayed_ack socket option.
[  180.616328][ T9954] Use struct sctp_sack_info instead
[  180.746997][ T5803] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  180.824447][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  180.851110][ T9965] netlink: 'syz.2.1261': attribute type 10 has an invalid length.
[  180.851205][ T9965] tipc: Resetting bearer <eth:team0>
[  180.872199][ T9965] tipc: Disabling bearer <eth:team0>
[  180.896194][ T9965] team0 (unregistering): Port device team_slave_0 removed
[  180.924546][ T9965] team0 (unregistering): Port device team_slave_1 removed
[  180.947490][ T9970] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1261'.
[  181.022924][ T9965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1261'.
[  181.135240][ T7506] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  181.143183][ T7506] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  181.167702][ T7723] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  181.218267][ T9987] netlink: 'syz.2.1268': attribute type 1 has an invalid length.
[  181.237145][ T7723] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  181.253788][ T9985] syzkaller1: entered promiscuous mode
[  181.253825][ T9985] syzkaller1: entered allmulticast mode
[  181.290240][ T9987] bond3: (slave veth7): Enslaving as an active interface with a down link
[  181.322763][ T9988] bond3: (slave veth9): Enslaving as an active interface with a down link
[  181.367372][ T9994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1270'.
[  181.376853][ T9994] netlink: 'syz.4.1270': attribute type 10 has an invalid length.
[  181.387793][ T9994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1270'.
[  181.403889][ T9987] bond3: (slave veth11): Enslaving as an active interface with a down link
[  181.439874][ T9988] veth13: entered allmulticast mode
[  181.449391][ T9988] bond3: (slave veth13): Enslaving as an active interface with a down link
[  181.505233][ T9995] veth15: entered allmulticast mode
[  181.510664][ T9995] bond3: (slave veth15): Enslaving as an active interface with a down link
[  181.547112][ T9999] xt_nfacct: accounting object `' does not exist
[  181.752195][T10006] ip6gre1: entered promiscuous mode
[  181.752577][T10006] ip6gre1: entered allmulticast mode
[  181.772362][T10006] sctp: [Deprecated]: syz.2.1273 (pid 10006) Use of struct sctp_assoc_value in delayed_ack socket option.
[  181.772362][T10006] Use struct sctp_sack_info instead
[  182.210953][T10035] ------------[ cut here ]------------
[  182.210991][T10035] UBSAN: array-index-out-of
** replaying previous printk message **
[  182.210991][T10035] UBSAN: array-index-out-of-bounds in kernel/bpf/disasm.c:306:6
[  182.211023][T10035] index 3 is out of range for type 'const char *const[3]'
[  182.211118][T10035] CPU: 1 UID: 0 PID: 10035 Comm: syz.0.1283 Not tainted syzkaller #0 PREEMPT(full) 
[  182.211139][T10035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  182.211150][T10035] Call Trace:
[  182.211157][T10035]  <TASK>
[  182.211166][T10035]  dump_stack_lvl+0xe8/0x150
[  182.211201][T10035]  ubsan_epilogue+0xa/0x30
[  182.211221][T10035]  __ubsan_handle_out_of_bounds+0xe8/0xf0
[  182.211252][T10035]  print_bpf_insn+0x21f1/0x2910
[  182.211276][T10035]  ? __pfx_disasm_print+0x10/0x10
[  182.211303][T10035]  ? __pfx_print_bpf_insn+0x10/0x10
[  182.211333][T10035]  ? vscnprintf+0x5c/0x90
[  182.211357][T10035]  ? bpf_verifier_vlog+0x3c7/0x900
[  182.211392][T10035]  diag_print_insn_context+0x433/0xd00
[  182.211430][T10035]  ? __pfx_diag_print_insn_context+0x10/0x10
[  182.211510][T10035]  ? __pfx_diag_write+0x10/0x10
[  182.211536][T10035]  ? __pfx_disasm_print+0x10/0x10
[  182.211559][T10035]  ? __pfx_disasm_kfunc_name+0x10/0x10
[  182.211588][T10035]  ? diag_print_wrapped_prefixed+0x207/0x240
[  182.211621][T10035]  bpf_diag_source+0x639/0x18d0
[  182.211645][T10035]  ? vsnprintf+0xe42/0xef0
[  182.211677][T10035]  ? vscnprintf+0x5c/0x90
[  182.211698][T10035]  ? bpf_verifier_vlog+0x3c7/0x900
[  182.211726][T10035]  ? __pfx_bpf_diag_source+0x10/0x10
[  182.211763][T10035]  ? __pfx_diag_write+0x10/0x10
[  182.211792][T10035]  ? kfree+0x1c5/0x650
[  182.211814][T10035]  ? bpf_diag_program_structure+0x28a/0x430
[  182.211843][T10035]  bpf_diag_program_structure+0x31c/0x430
[  182.211871][T10035]  ? verbose+0x11d/0x1a0
[  182.211899][T10035]  ? __pfx_bpf_diag_program_structure+0x10/0x10
[  182.211925][T10035]  ? bpf_prepare_btf_info+0x639/0x1200
[  182.211945][T10035]  ? rcu_is_watching+0x16/0xb0
[  182.211972][T10035]  check_subprogs+0x6d3/0x740
[  182.212004][T10035]  bpf_check+0x17ba/0x2e10
[  182.212033][T10035]  ? ktime_get_with_offset+0x93/0x2d0
[  182.212064][T10035]  ? __pfx_bpf_check+0x10/0x10
[  182.212085][T10035]  ? bpf_obj_name_cpy+0x194/0x1e0
[  182.212115][T10035]  bpf_prog_load+0x14d6/0x1c20
[  182.212146][T10035]  ? __pfx_bpf_prog_load+0x10/0x10
[  182.212190][T10035]  __sys_bpf+0xd0d/0xd90
[  182.212218][T10035]  ? __pfx___sys_bpf+0x10/0x10
[  182.212241][T10035]  ? do_futex+0x3e7/0x4e0
[  182.212291][T10035]  ? rcu_is_watching+0x16/0xb0
[  182.212318][T10035]  __x64_sys_bpf+0xba/0xd0
[  182.212338][T10035]  do_syscall_64+0x166/0x520
[  182.212363][T10035]  ? trace_irq_disable+0x3b/0x140
[  182.212380][T10035]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.212398][T10035]  ? clear_bhb_loop+0x70/0xc0
[  182.212422][T10035]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.212440][T10035] RIP: 0033:0x7f417899e159
[  182.212457][T10035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  182.212473][T10035] RSP: 002b:00007f41797f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  182.212493][T10035] RAX: ffffffffffffffda RBX: 00007f4178c25fa0 RCX: 00007f417899e159
[  182.212507][T10035] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005
[  182.212519][T10035] RBP: 00007f4178a3503b R08: 0000000000000000 R09: 0000000000000000
[  182.212531][T10035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  182.212540][T10035] R13: 00007f4178c26038 R14: 00007f4178c25fa0 R15: 00007ffd63c1efc8
[  182.212570][T10035]  </TASK>
[  182.221030][T10035] ---[ end trace ]---
[  182.221054][T10035] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[  182.570581][T10035] CPU: 1 UID: 0 PID: 10035 Comm: syz.0.1283 Not tainted syzkaller #0 PREEMPT(full) 
[  182.579972][T10035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  182.590041][T10035] Call Trace:
[  182.593411][T10035]  <TASK>
[  182.596348][T10035]  vpanic+0x56d/0xa60
[  182.600343][T10035]  ? __pfx_vpanic+0x10/0x10
[  182.604853][T10035]  ? irqentry_exit+0x218/0x910
[  182.609639][T10035]  panic+0xc5/0xd0
[  182.613374][T10035]  ? __pfx_panic+0x10/0x10
[  182.617806][T10035]  ? __pfx__printk+0x10/0x10
[  182.622403][T10035]  check_panic_on_warn+0x89/0xb0
[  182.627343][T10035]  __ubsan_handle_out_of_bounds+0xe8/0xf0
[  182.633078][T10035]  print_bpf_insn+0x21f1/0x2910
[  182.637941][T10035]  ? __pfx_disasm_print+0x10/0x10
[  182.642996][T10035]  ? __pfx_print_bpf_insn+0x10/0x10
[  182.648208][T10035]  ? vscnprintf+0x5c/0x90
[  182.652542][T10035]  ? bpf_verifier_vlog+0x3c7/0x900
[  182.657669][T10035]  diag_print_insn_context+0x433/0xd00
[  182.663143][T10035]  ? __pfx_diag_print_insn_context+0x10/0x10
[  182.669133][T10035]  ? __pfx_diag_write+0x10/0x10
[  182.673985][T10035]  ? __pfx_disasm_print+0x10/0x10
[  182.679012][T10035]  ? __pfx_disasm_kfunc_name+0x10/0x10
[  182.684485][T10035]  ? diag_print_wrapped_prefixed+0x207/0x240
[  182.690481][T10035]  bpf_diag_source+0x639/0x18d0
[  182.695336][T10035]  ? vsnprintf+0xe42/0xef0
[  182.699763][T10035]  ? vscnprintf+0x5c/0x90
[  182.704099][T10035]  ? bpf_verifier_vlog+0x3c7/0x900
[  182.709221][T10035]  ? __pfx_bpf_diag_source+0x10/0x10
[  182.714522][T10035]  ? __pfx_diag_write+0x10/0x10
[  182.719395][T10035]  ? kfree+0x1c5/0x650
[  182.723465][T10035]  ? bpf_diag_program_structure+0x28a/0x430
[  182.729360][T10035]  bpf_diag_program_structure+0x31c/0x430
[  182.735081][T10035]  ? verbose+0x11d/0x1a0
[  182.739328][T10035]  ? __pfx_bpf_diag_program_structure+0x10/0x10
[  182.745583][T10035]  ? bpf_prepare_btf_info+0x639/0x1200
[  182.751055][T10035]  ? rcu_is_watching+0x16/0xb0
[  182.755835][T10035]  check_subprogs+0x6d3/0x740
[  182.760519][T10035]  bpf_check+0x17ba/0x2e10
[  182.764941][T10035]  ? ktime_get_with_offset+0x93/0x2d0
[  182.770328][T10035]  ? __pfx_bpf_check+0x10/0x10
[  182.775094][T10035]  ? bpf_obj_name_cpy+0x194/0x1e0
[  182.780133][T10035]  bpf_prog_load+0x14d6/0x1c20
[  182.784908][T10035]  ? __pfx_bpf_prog_load+0x10/0x10
[  182.790033][T10035]  __sys_bpf+0xd0d/0xd90
[  182.794306][T10035]  ? __pfx___sys_bpf+0x10/0x10
[  182.799079][T10035]  ? do_futex+0x3e7/0x4e0
[  182.803432][T10035]  ? rcu_is_watching+0x16/0xb0
[  182.808206][T10035]  __x64_sys_bpf+0xba/0xd0
[  182.812620][T10035]  do_syscall_64+0x166/0x520
[  182.817213][T10035]  ? trace_irq_disable+0x3b/0x140
[  182.822237][T10035]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.828299][T10035]  ? clear_bhb_loop+0x70/0xc0
[  182.832977][T10035]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.838873][T10035] RIP: 0033:0x7f417899e159
[  182.843282][T10035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  182.862883][T10035] RSP: 002b:00007f41797f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  182.871306][T10035] RAX: ffffffffffffffda RBX: 00007f4178c25fa0 RCX: 00007f417899e159
[  182.879279][T10035] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005
[  182.887253][T10035] RBP: 00007f4178a3503b R08: 0000000000000000 R09: 0000000000000000
[  182.895220][T10035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  182.903184][T10035] R13: 00007f4178c26038 R14: 00007f4178c25fa0 R15: 00007ffd63c1efc8
[  182.911164][T10035]  </TASK>
[  182.914320][T10035] Kernel Offset: disabled
[  182.918641][T10035] Rebooting in 86400 seconds..